Google Cloud Certified Certification Associate-Cloud-Engineer Sample Questions Reliable [Q135-Q159]

Google Cloud Certified Certification Associate-Cloud-Engineer Sample Questions Reliable

Prepare for the Actual Google Cloud Certified Associate-Cloud-Engineer Exam Practice Materials Collection

Google Associate Cloud Engineer certification is a highly sought-after credential for those seeking a career in cloud computing. Google Associate Cloud Engineer Exam certification is designed for individuals who have a basic understanding of cloud computing and the Google Cloud Platform. Associate-Cloud-Engineer exam tests candidates on their knowledge of managing and deploying applications, configuring virtual machines, and managing data storage. Google Associate Cloud Engineer Exam certification is an excellent way to demonstrate proficiency in Google Cloud Platform technologies and can help individuals gain recognition and credibility in the industry.

NEW QUESTION # 135
You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?

A. Create a Cloud Datastore index using gcloud datastore indexes create.
B. Export Cloud Datastore data using gcloud datastore export.
C. Install the cloud-datastore-emulator component using the gcloud components install command.
D. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.

Answer: C

NEW QUESTION # 136
You have deployed an application on a single Compute Engine instance. The application writes logs to disk. Users start reporting errors with the application. You want to diagnose the problem.
What should you do?

A. Install and configure the Cloud Logging Agent and view the logs from Cloud Logging.
B. Configure a Health Check on the instance and set a Low Healthy Threshold value.
C. Connect to the instance's serial console and read the application logs.
D. Navigate to Cloud Logging and view the application logs.

Answer: D

Explanation:
Activity logging is enabled by default for all Compute Engine projects.
You can see your project's activity logs through the Logs Viewer in the Google Cloud Console:
In the Cloud Console, go to the Logging page.
Go to the Logging page
When in the Logs Viewer, select and filter your resource type from the first drop-down list.
From the All logs drop-down list, select compute.googleapis.com/activity_log to see Compute Engine activity logs.
https://cloud.google.com/compute/docs/logging/activity-logs#viewing_logs Besides:
Activity logs are provided as part of the Cloud Logging service. For more information about Logging in general, read the Cloud Logging documentation.
https://cloud.google.com/compute/docs/logging/activity-logs

NEW QUESTION # 137
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

A. 1. In GKE, create a Serviceof type LoadBalancer that uses the application's Pods as backend.
2. Set the service's externalTrafficPolicyto Cluster.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
B. 1. In GKE, create a Service of type NodePortthat uses the application's Pods as backend.
2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.
3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.
4. Configure the Compute Engine instance to use the address of proxyin gce-networkas endpoint.
C. 1. In GKE, create a Serviceof type LoadBalancerthat uses the application's Pods as backend.
2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
D. 1. In GKE, create a Serviceof type LoadBalancerthat uses the application's Pods as backend.
2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal
3. Peer the two VPCs together.
4. Configure the Compute Engine instance to use the address of the load balancer that has been created.

Answer: A

NEW QUESTION # 138
Your company has embraced a hybrid cloud strategy where some of the applications are deployed on Google Cloud. A Virtual Private Network (VPN) tunnel connects your Virtual Private Cloud (VPC) in Google Cloud with your company's on-premises network. Multiple applications in Google Cloud need to connect to an on-premises database server, and you want to avoid having to change the IP configuration in all of your applications when the IP of the database changes.
What should you do?

A. Configure the IP of the database as custom metadata for each instance, and query the metadata server.
B. Configure Cloud NAT for all subnets of your VPC to be used when egressing from the VM instances.
C. Create a private zone on Cloud DNS, and configure the applications with the DNS name.
D. Query the Compute Engine internal DNS from the applications to retrieve the IP of the database.

Answer: C

Explanation:
Forwarding zones Cloud DNS forwarding zones let you configure target name servers for specific private zones. Using a forwarding zone is one way to implement outbound DNS forwarding from your VPC network. A Cloud DNS forwarding zone is a special type of Cloud DNS private zone. Instead of creating records within the zone, you specify a set of forwarding targets. Each forwarding target is an IP address of a DNS server, located in your VPC network, or in an on-premises network connected to your VPC network by Cloud VPN or Cloud Interconnect.
https://cloud.google.com/nat/docs/overview
DNS configuration Your on-premises network must have DNS zones and records configured so that Google domain names resolve to the set of IP addresses for either private.googleapis.com or restricted.googleapis.com. You can create Cloud DNS managed private zones and use a Cloud DNS inbound server policy, or you can configure on-premises name servers. For example, you can use BIND or Microsoft Active Directory DNS. https://cloud.google.com/vpc/docs/configure-private-google-access-hybrid#config-domain

NEW QUESTION # 139
Users submit requests to a service that takes several minutes to process. A Solutions Architect needs to ensure that these requests are processed at least once, and that the service has the ability to handle large increases in the number of requests.
How should these requirements be met?

A. Publish the message to an Amazon SNS topic that an Amazon EC2 subscriber can receive and process
B. Save the requests to an Amazon DynamoDB table with a DynamoDB stream that triggers an Amazon EC2 Spot Instance
C. Use Amazon S3 to store the requests and configure an event notification to have Amazon EC2 instances process the new object
D. Put the requests into an Amazon SQS queue and configure Amazon EC2 instances to poll the queue

Answer: D

NEW QUESTION # 140
You're working on creating a script that can extract the IP address of a Kubernetes Service. Your coworker sent you a code snippet that they had saved. Which one is the best starting point for your code?

A. kubectl get svc -o filtered- json='{.items[*].status.loadBalancer.ingress[0].ip}'
B. kubectl get svc -o html
C. kubectl get svc
D. kubectl get svc -o jsonpath='{.items[*].status.loadBalancer.ingress[0].ip}'

Answer: D

NEW QUESTION # 141
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google-recommended practices to obtain the combined logs for all projects. What should you do?

A. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage.
Create a lifecycle rule to delete objects after 60 days.
B. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
C. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset.
Configure the table expiration to 60 days.
D. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery.
Configure the table expiration to 60 days.

Answer: C

Explanation:
Since we only care about the logs within 60 days, we can set the expiration time to 60 to retain only the logs within that time frame. Once data is beyond 60 days old, it wouldn't be included in future analyzations.
https://cloud.google.com/bigquery/docs/managing-tables#updating_a_tables_expiration_time

NEW QUESTION # 142
A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

A. Navigate to Identity-Aware Proxy and check the permissions for these resources.
B. In the console, validate which SSH keys have been stored as project-wide keys.
C. Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
D. Use the command gcloud projects get-iam-policy to view the current role assignments.

Answer: D

Explanation:
Explanation
A simple approach would be to use the command flags available when listing all the IAM policy for a given project. For instance, the following command: `gcloud projects get-iam-policy $PROJECT_ID
--flatten="bindings[].members" --format="table(bindings.members)" --filter="bindings.role:roles/owner"` outputs all the users and service accounts associated with the role 'roles/owner' in the project in question.
https://groups.google.com/g/google-cloud-dev/c/Z6sZs7TvygQ?pli=1

NEW QUESTION # 143
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google- recommended practices to obtain the combined logs for all projects. What should you do?

A. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
B. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
C. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.
D. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.

Answer: D

Explanation:
Reference:
https://cloud.google.com/blog/products/gcp/best-practices-for-working-with-google-cloud-audit- logging

NEW QUESTION # 144
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
C. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.
D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

Answer: B

Explanation:
performs a peering between the two VPC's (the statement makes sure that this option is feasible since it clearly specifies that there is no overlapping between the ip ranges of both vpc's), deploy the LoadBalancer as internal with the annotation, and configure the endpoint so that the compute engine instance can access the application internally, that is, without the need to have a public ip at any time and therefore, without the need to go outside the google network. The traffic, therefore, never crosses the public internet.
https://medium.com/pablo-perez/k8s-externaltrafficpolicy-local-or-cluster-40b259a19404
https://cloud.google.com/kubernetes-engine/docs/how-to/internal-load-balancing clients in a VPC network connected to the LoadBalancer network using VPC Network Peering can also access the Service
https://cloud.google.com/kubernetes-engine/docs/how-to/service-parameters

NEW QUESTION # 145
You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?

A. Manual Scaling with 3 instances.
B. Basic Scaling with min_instances set to 3.
C. Basic Scaling with max_instances set to 3.
D. Automatic Scaling with min_idle_instances set to 3.

Answer: D

Explanation:
Reference:
https://cloud.google.com/appengine/docs/standard/go/config/appref
"App Engine calculates the number of instances necessary to serve your current application traffic based on scaling settings such as target_cpu_utilization and target_throughput_utilization. Setting min_idle_instances specifies the number of instances to run in addition to this calculated number. For example, if App Engine calculates that 5 instances are necessary to serve traffic, and min_idle_instances is set to 2, App Engine will run 7 instances (5, calculated based on traffic, plus 2 additional per min_idle_instances)." Automatic scaling creates dynamic instances based on request rate, response latencies, and other application metrics. However, if you specify the number of minimum idle instances, that specified number of instances run as resident instances while any additional instances are dynamic.
Ref: https://cloud.google.com/appengine/docs/standard/python/how-instances-are-managed

NEW QUESTION # 146
You are using Container Registry to centrally store your company's container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?

A. Create a service account, and give it access to Cloud Storage. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.
B. In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes.
C. Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.
D. When you create the GKE cluster, choose the Allow full access to all Cloud APIs option under 'Access scopes'.

Answer: B

Explanation:
Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account. is not right. As mentioned above, Container Registry ignores permissions set on individual objects within the storage bucket so this isnt going to work.
Ref: https://cloud.google.com/container-registry/docs/access-control

NEW QUESTION # 147
You have a single binary application that you want to run on Google Cloud Platform. You decided to automatically scale the application based on underlying infrastructure CPU usage. Your organizational policies require you to use virtual machines directly. You need to ensure that the application scaling is operationally efficient and completed as quickly as possible. What should you do?

A. Create a Google Kubernetes Engine cluster, and use horizontal pod autoscaling to scale the application.
B. Create an instance template, and use the template in a managed instance group with autoscaling configured.
C. Use a set of third-party tools to build automation around scaling the application up and down, based on Stackdriver CPU usage monitoring.
D. Create an instance template, and use the template in a managed instance group that scales up and down based on the time of day.

Answer: B

Explanation:
Explanation
Managed instance groups offer autoscaling capabilities that let you automatically add or delete instances from a managed instance group based on increases or decreases in load (CPU Utilization in this case). Autoscaling helps your apps gracefully handle increases in traffic and reduce costs when the need for resources is lower.
You define the autoscaling policy and the autoscaler performs automatic scaling based on the measured load (CPU Utilization in this case). Autoscaling works by adding more instances to your instance group when there is more load (upscaling), and deleting instances when the need for instances is lowered (downscaling). Ref:
https://cloud.google.com/compute/docs/autoscaler

NEW QUESTION # 148
You have developed an application that consists of multiple microservices, with each microservice packaged in its own Docker container image. You want to deploy the entire application on Google Kubernetes Engine so that each microservice can be scaled individually. What should you do?

A. Create and deploy a Deployment per microservice.
B. Create and deploy a Docker Compose File.
C. Create and deploy a Custom Resource Definition per microservice.
D. Create and deploy a Job per microservice.

Answer: C

NEW QUESTION # 149
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account.
You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?

A. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
B. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
C. Link the acquired company's projects to your company's billing account.
D. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.

Answer: A

Explanation:
Explanation/Reference: https://cloud.google.com/resource-manager/docs/migrating-projects-billing

NEW QUESTION # 150
A Solutions Architect needs to design a centralized logging solution for a group of web applications running on Amazon EC2 instances. The solution requires minimal development effort due to budget constraints.
Which of the following should the Architect recommend?

A. Create a crontab job script in each instance to push the logs regularly to Amazon S3.
B. Enable AWS CloudTrail to map all API calls invoked by the applications.
C. Enable Amazon CloudWatch Events in the AWS Management Console.
D. Install and configure Amazon CloudWatch Logs agent in the Amazon EC2 instances.

Answer: D

NEW QUESTION # 151
Your company's infrastructure is on-premises, but all machines are running at maximum capacity. You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?

A. In Google Cloud, configure the VPC for VPC Network Peering.
B. Create bastion hosts both in your on-premises environment and on Google Cloud. Configure both as proxy servers using their public IP addresses.
C. In Google Cloud, configure the VPC as a host for Shared VPC.
D. Set up Cloud VPN between the infrastructure on-premises and Google Cloud.

Answer: D

Explanation:
Explanation
"Google Cloud VPC Network Peering allows internal IP address connectivity across two Virtual Private Cloud (VPC) networks regardless of whether they belong to the same project or the same organization."
https://cloud.google.com/vpc/docs/vpc-peering
while
"Cloud Interconnect provides low latency, high availability connections that enable you to reliably transfer data between your on-premises and Google Cloud Virtual Private Cloud (VPC) networks."
https://cloud.google.com/network-connectivity/docs/interconnect/concepts/overview and
"HA VPN is a high-availability (HA) Cloud VPN solution that lets you securely connect your on-premises network to your VPC network through an IPsec VPN connection in a single region."
https://cloud.google.com/network-connectivity/docs/vpn/concepts/overview

NEW QUESTION # 152
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2-highmem-16 nodes without any downtime. What should you do?

A. Use gcloud container clusters upgrade. Deploy the new services.
B. Create a new cluster with n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
C. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
D. Create a new Node Pool and specify machine type n2-highmem-16. Deploy the new pods.

Answer: D

NEW QUESTION # 153
You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?

A. Manual Scaling with 3 instances.
B. Basic Scaling with min_instances set to 3.
C. Basic Scaling with max_instances set to 3.
D. Automatic Scaling with min_idle_instances set to 3.

Answer: D

Explanation:
Reference:
https://cloud.google.com/appengine/docs/standard/python/how-instances-are-managed

NEW QUESTION # 154
You are analyzing Google Cloud Platform service costs from three separate projects. You want to use this information to create service cost estimates by service type, daily and monthly, for the next six months using standard query syntax. What should you do?

A. Export your transactions to a local file, and perform analysis with a desktop tool.
B. Export your bill to a Cloud Storage bucket, and then import into Cloud Bigtable for analysis.
C. Export your bill to a Cloud Storage bucket, and then import into Google Sheets for analysis.
D. Export your bill to a BigQuery dataset, and then write time window-based SQL queries for analysis.

Answer: D

Explanation:
Explanation
"...we recommend that you enable Cloud Billing data export to BigQuery at the same time that you create a Cloud Billing account. " https://cloud.google.com/billing/docs/how-to/export-data-bigquery
https://medium.com/google-cloud/analyzing-google-cloud-billing-data-with-big-query-30bae1c2aae4

NEW QUESTION # 155
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention.
What should you do?

A. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
B. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
C. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
D. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.

Answer: C

NEW QUESTION # 156
You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?

A. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.
B. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.
C. Deploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.
D. Deploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.

Answer: A

NEW QUESTION # 157
You are deploying a production application on Compute Engine. You want to prevent anyone from accidentally destroying the instance by clicking the wrong button. What should you do?

A. Enable Preemptibility on the instance.
B. Enable delete protection on the instance.
C. Disable Automatic restart on the instance.
D. Disable the flag "Delete boot disk when instance is deleted."

Answer: D

Explanation:
https://googlecloudplatform.uservoice.com/forums/302595-compute-
engine/suggestions/14227521-set-delete-boot-disk-when-instance-is-deleted-to

NEW QUESTION # 158
You are about to start working on a micro-service deployment project using Google Kubernetes Engine service. The client needs everything on Google and want you to maintain both frontend and backend code on Google Cloud as well. Which service best suites this case?

A. Google Container Registry
B. Cloud Storage
C. GitHub
D. Cloud Source Repository

Answer: D

NEW QUESTION # 159
......

Google Associate-Cloud-Engineer Certification Exam is an excellent way for professionals to demonstrate their skills and knowledge in deploying and managing applications on the GCP. Google Associate Cloud Engineer Exam certification provides individuals with the opportunity to enhance their cloud computing career and open up new opportunities for themselves in this field.

Google Associate-Cloud-Engineer certification is an excellent way to showcase your expertise in GCP to potential employers. Google Associate Cloud Engineer Exam certification demonstrates that you have a deep understanding of GCP and can deploy and manage applications on the platform. Google Associate Cloud Engineer Exam certification also provides access to a network of GCP professionals and resources that can help you stay up to date with the latest trends and best practices in the industry.

Ace Google Associate-Cloud-Engineer Certification with Actual Questions Apr 15, 2024 Updated: https://www.testpdf.com/Associate-Cloud-Engineer-exam-braindumps.html

Google Cloud Certified Certified Official Practice Test Associate-Cloud-Engineer: https://drive.google.com/open?id=1nzYWrnnIyi01gXUPkcdk8e5mnyyQowfZ

Google Cloud Certified Certification Associate-Cloud-Engineer Sample Questions Reliable [Q135-Q159]

Related Articles

Useful Links

Latest Test PDF Dumps

Contact Us