Ace Associate-Cloud-Engineer Certification with 246 Actual Questions
PASS Google Associate-Cloud-Engineer EXAM WITH UPDATED DUMPS
NEW QUESTION # 44
You have a workload running on Compute Engine that is critical to your business. You want to ensure that the data on the boot disk of this workload is backed up regularly. You need to be able to restore a backup as quickly as possible in case of disaster. You also want older backups to be cleaned automatically to save on cost. You want to follow Google-recommended practices. What should you do?
- A. Create a cron job to create a new disk from the disk using gcloud.
- B. Create a Cloud Function to create an instance template.
- C. Create a Cloud Task to create an image and export it to Cloud Storage.
- D. Create a snapshot schedule for the disk using the desired interval.
Answer: D
NEW QUESTION # 45
You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images.
The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires. The other microservices are workloads that are optimized for n1-standard machine types.
You need to optimize your cluster so that all workloads are using resources as efficiently as possible. What should you do?
- A. Use the node pool with general-purpose machine type nodes for lite mage rendering microservice Create a nodepool with compute-optimized machine type nodes for the other microservices
- B. Assign the pods of the image rendering microservice a higher pod priority than the older microservices
- C. Create a node pool with compute-optimized machine type nodes for the image rendering microservice Use the node pool with general-purpose machine type nodes for the other microservices
- D. Configure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment Keep the resource requests for the other microservices at the default
Answer: C
NEW QUESTION # 46
You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?
- A. Using the GCP Console, filter the Activity log to view the information.
- B. Using the GCP Console, filter the Stackdriver log to view the information.
- C. View the bucket in the Storage section of the GCP Console.
- D. Create a trace in Stackdriver to view the information.
Answer: A
Explanation:
https://cloud.google.com/storage/docs/audit-logs
https://cloud.google.com/compute/docs/logging/audit-logging#audited_operations
NEW QUESTION # 47
You are setting up a Windows VM on Compute Engine and want to make sure you can log in to the VM via RDP. What should you do?
- A. After the VM has been created, download the JSON private key for the default Compute Engine service account. Use the credentials in the JSON file to log in to the VM.
- B. After the VM has been created, use your Google Account credentials to log in into the VM.
- C. After the VM has been created, use gcloud compute reset-windows-password to retrieve the login credentials for the VM.
- D. When creating the VM, add metadata to the instance using `windows-password' as the key and a password as the value.
Answer: C
Explanation:
https://cloud.google.com/sdk/gcloud/reference/beta/compute/reset-windows-password
NEW QUESTION # 48
A cloud engineer has been assigned to work on a running project. He wants to know which VMs are running in the project. How could the cloud engineer get the information of the all VMs running in the project?
- A. Execute the command gcloud list instances
- B. Execute the command gcloud compute instances list
- C. Execute the command gcloud compute list
- D. Execute the command gcloud instances list
Answer: B
NEW QUESTION # 49
Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?
- A. Add the users to a group, and add this group to roles/iam.roleViewer role.
- B. Add the users to a group, and add this group to roles/browser role.
- C. Add the users to roles/browser role.
- D. Add the users to roles/iam.roleViewer role.
Answer: C
NEW QUESTION # 50
You need to manage a Cloud Spanner Instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?
- A. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. Use database query statistics to identity queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.
- B. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45% If you exceed this threshold, add nodes lo your instance.
- C. Create an alert in Cloud Monitoring to alert when the percentage to high priority CPU utilization reaches
45% Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage - D. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65% If you exceed this threshold, add nodes to your instance
Answer: C
Explanation:
Explanation
https://cloud.google.com/spanner/docs/cpu-utilization#recommended-max
NEW QUESTION # 51
Your company wants to standardize the creation and management of multiple Google Cloud resources using Infrastructure as Code. You want to minimize the amount of repetitive code needed to manage the environment What should you do?
- A. Develop templates for the environment using Cloud Deployment Manager
- B. Use the Cloud Console interface to provision and manage all related resources
- C. Create a bash script that contains all requirement steps as gcloud commands
- D. Use curl in a terminal to send a REST request to the relevant Google API for each individual resource.
Answer: A
Explanation:
You can use Google Cloud Deployment Manager to create a set of Google Cloud resources and manage them as a unit, called a deployment. For example, if your team's development environment needs two virtual machines (VMs) and a BigQuery database, you can define these resources in a configuration file, and use Deployment Manager to create, change, or delete these resources. You can make the configuration file part of your team's code repository, so that anyone can create the same environment with consistent results. https://cloud.google.com/deployment-manager/docs/quickstart
NEW QUESTION # 52
You need to select and configure compute resources for a set of batch processing jobs. These jobs take around 2 hours to complete and are run nightly. You want to minimize service costs. What should you do?
- A. Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.
- B. Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.
- C. Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
- D. Select Compute Engine. Use VM instance types that support micro bursting.
Answer: C
Explanation:
If your apps are fault-tolerant and can withstand possible instance preemptions, then preemptible instances can reduce your Compute Engine costs significantly. For example, batch processing jobs can run on preemptible instances. If some of those instances stop during processing, the job slows but does not completely stop. Preemptible instances complete your batch processing tasks without placing additional workload on your existing instances and without requiring you to pay full price for additional normal instances.
https://cloud.google.com/compute/docs/instances/preemptible
NEW QUESTION # 53
You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high.
What should you do?
- A. Run a test using simulated maintenance events.
If the test is successful, use N1 Standard VMs when running future jobs. - B. Run a test using a managed instance group.
If the test is successful, use N1 Standard VMs in the managed instance group when running future jobs. - C. Run a test using simulated maintenance events.
If the test is successful, use preemptible N1 Standard VMs when running future jobs. - D. Run a test using N1 standard VMs instead of N2.
If the test is successful, use N1 Standard VMs when running future jobs.
Answer: C
Explanation:
Creating and starting a preemptible VM instance
This page explains how to create and use a preemptible virtual machine (VM) instance. A preemptible instance is an instance you can create and run at a much lower price than normal instances. However, Compute Engine might terminate (preempt) these instances if it requires access to those resources for other tasks. Preemptible instances will always terminate after 24 hours. To learn more about preemptible instances, read the preemptible instances documentation.
Preemptible instances are recommended only for fault-tolerant applications that can withstand instance preemptions. Make sure your application can handle preemptions before you decide to create a preemptible instance. To understand the risks and value of preemptible instances, read the preemptible instances documentation.
https://cloud.google.com/compute/docs/instances/create-start-preemptible-instance
NEW QUESTION # 54
You've been tasked with getting all of your team's public SSH keys onto all of the instances of a particular project. You've collected them all. With the fewest steps possible, what is the simplest way to get the keys deployed?
- A. Use the gcloud compute ssh command to upload all the keys
- B. Format all of the keys as needed and then, using the user interface, upload each key one at a time.
- C. Add all of the keys into a file that's formatted according to the requirements. Use the gcloud compute project-info add-metadata command to upload the keys.
- D. Add all of the keys into a file that's formatted according to the requirements. Use the gcloud compute instances add-metadata command to upload the keys to each instance
Answer: C
NEW QUESTION # 55
You have an application that receives SSL-encrypted TCP traffic on port 443. Clients for this application are located all over the world. You want to minimize latency for the clients. Which load balancing option should you use?
- A. SSL Proxy Load Balancer
- B. HTTPS Load Balancer
- C. Network Load Balancer
- D. Internal TCP/UDP Load Balancer.
Add a firewall rule allowing ingress traffic from 0.0.0.0/0 on the target instances.
Answer: A
Explanation:
The type of traffic that you need your load balancer to handle is another factor in determining which load balancer to use:
HTTP and HTTPS traffic: External HTTP(S) Load Balancing / Regional external HTTP(S) / load balancer Internal HTTP(S) Load Balancing TCP traffic: TCP Proxy Load Balancing / External TCP/UDP Network Load Balancing / Internal TCP/UDP Load Balancing / SSL traffic: SSL Proxy Load Balancing UDP traffic: External TCP/UDP Network Load Balancing / Internal TCP/UDP Load Balancing
NEW QUESTION # 56
You need to verify that a Google Cloud Platform service account was created at a particular time.
What should you do?
- A. Filter the Activity log to view the Configuration category. Filter the Resource type to Google Project.
- B. Filter the Activity log to view the Configuration category. Filter the Resource type to Service Account.
- C. Filter the Activity log to view the Data Access category. Filter the Resource type to Google Project.
- D. Filter the Activity log to view the Data Access category. Filter the Resource type to Service Account.
Answer: B
Explanation:
You don't need data access logs and configuration counts as creation.
NEW QUESTION # 57
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?
- A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- C. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.
- D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
Answer: A
Explanation:
Explanation
performs a peering between the two VPC's (the statement makes sure that this option is feasible since it clearly specifies that there is no overlapping between the ip ranges of both vpc's), deploy the LoadBalancer as internal with the annotation, and configure the endpoint so that the compute engine instance can access the application internally, that is, without the need to have a public ip at any time and therefore, without the need to go outside the google network. The traffic, therefore, never crosses the public internet.
https://medium.com/pablo-perez/k8s-externaltrafficpolicy-local-or-cluster-40b259a19404
https://cloud.google.com/kubernetes-engine/docs/how-to/internal-load-balancing clients in a VPC network connected to the LoadBalancer network using VPC Network Peering can also access the Service
https://cloud.google.com/kubernetes-engine/docs/how-to/service-parameters
NEW QUESTION # 58
You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?
- A. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
- B. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to the role.
- C. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to a new group. Add the group to the role.
- D. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.
Answer: A
NEW QUESTION # 59
......
Google Associate-Cloud-Engineer exam is designed to test the candidate's knowledge of various Google Cloud Platform products and services such as Compute Engine, Kubernetes Engine, Cloud Storage, Stackdriver, and IAM. Associate-Cloud-Engineer exam also assesses the candidate’s ability to deploy and manage applications, monitor operations, and configure access and security controls.
Associate-Cloud-Engineer Questions PDF [2023] Use Valid New dump to Clear Exam: https://www.pass4cram.com/Associate-Cloud-Engineer_free-download.html
Passing Google Associate-Cloud-Engineer Exam Using 2023 Practice Tests: https://drive.google.com/open?id=1hevO9Qd2K1ibTCMvwTSNhxy8Oab9r7K2