Real Google Associate-Cloud-Engineer Exam Dumps with Correct 245 Questions and Answers [Q119-Q138]

admin Associate-Cloud-Engineer Google January 4, 2023

Rate this post

Real Google Associate-Cloud-Engineer Exam Dumps with Correct 245 Questions and Answers

Valid Associate-Cloud-Engineer Test Answers & Google Associate-Cloud-Engineer Exam PDF

Planning & Configuring Cloud Solutions

Plan and configure data storage options with a focus on product choice and selecting storage options;
Plan and configure compute resources with specific skills in choosing the relevant compute choices for a specific workload as well as utilizing preemptible virtual machines and custom machine types as relevant;
Plan and estimate the GCP product use with Pricing Calculator;
Plan and configure network resources, which include distinguishing load balancing alternatives, configuring the Cloud DNS, establishing resource locations within a network for its availability.

Planning & Configuring Cloud Solutions

The focus of the second topic is on the competency of the individuals in planning and evaluating the GCP product use with the help of Pricing Calculator. The test takers should also have the skills in planning & configuring compute resources, network resources, as well as data storage options.

Below is the cost of Associate Cloud Engineer Exam

The price of Associate Cloud Engineer exam is $125 USD (plus tax where appropriate)

QUESTION 119
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?

Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role. Direct them to use the Cloud Shell to ssh to that instance.

Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for that instance. Direct them to use the Cloud Shell to ssh to that instance.

Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group. Distribute the keys to dev1 users and direct them to use their third-party tools to connect.

Enable block project wide keys for the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.

QUESTION 120
Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.

You want to resolve the issue. What should you do?

Remove the profile_picture field from the table.

Add a secondary index on the person_id column.

Change the primary key to not have monotonically increasing values.

Create a secondary index using the following Data Definition Language (DDL):

QUESTION 121
You need to create a copy of a custom Compute Engine virtual machine (VM) to facilitate an expected increase in application traffic due to a business acquisition. What should you do?

Create a Compute Engine snapshot of your base VM.
Create your images from that snapshot.

Create a Compute Engine snapshot of your base VM.
Create your instances from that snapshot.

Create a custom Compute Engine image from a snapshot.
Create your images from that image.

Create a custom Compute Engine image from a snapshot.
Create your instances from that image.

QUESTION 122
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web- applications project. What should you do?

Give “project owner” for web-applications appropriate roles to crm-databases- proj

Give “project owner” role to crm-databases-proj and the web-applications project.

Give “project owner” role to crm-databases-proj and bigquery.dataViewer role to web- applications.

Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.

QUESTION 123
Your management has asked an external auditor to review all the resources in a specific project.
The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?

Ask the auditor for their Google account, and give them the Viewer role on the project.

Ask the auditor for their Google account, and give them the Security Reviewer role on the project.

Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.

Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.

QUESTION 124
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google-recommended practices to obtain the combined logs for all projects. What should you do?

Navigate to Stackdriver Logging and select resource.labels.project_id=”*”

Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset.
Configure the table expiration to 60 days.

Create a Stackdriver Logging Export with a Sink destination to Cloud Storage.
Create a lifecycle rule to delete objects after 60 days.

Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery.
Configure the table expiration to 60 days.

QUESTION 125
You are setting up a Windows VM on Compute Engine and want to make sure you can log in to the VM via RDP. What should you do?

After the VM has been created, use your Google Account credentials to log in into the VM.

After the VM has been created, use gcloud compute reset-windows-password to retrieve the login credentials for the VM.

When creating the VM, add metadata to the instance using ‘windows-password’ as the key and a password as the value.

After the VM has been created, download the JSON private key for the default Compute Engine service account. Use the credentials in the JSON file to log in to the VM.

QUESTION 126
You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

Cloud SQL

Cloud Spanner

Cloud Firestore

Cloud Datastore

QUESTION 127
You’re working on creating a script that can extract the IP address of a Kubernetes Service. Your coworker sent you a code snippet that they had saved. Which one is the best starting point for your code?

kubectl get svc -o filtered- json='{.items[*].status.loadBalancer.ingress[0].ip}’

kubectl get svc -o jsonpath='{.items[*].status.loadBalancer.ingress[0].ip}’

kubectl get svc -o html

kubectl get svc

QUESTION 128
You have created an application that is packaged into a Docker image. You want to deploy the Docker image as a workload on Google Kubernetes Engine. What should you do?

Upload the image to Cloud Storage and create a Kubernetes Service referencing the image

Upload the image to Cloud Storage and create a Kubernetes Deployment referencing the image

Upload the image to Container Registry and create a Kubernetes Service referencing the image.

Upload the image to Container Registry and create a Kubernetes Deployment referencing the mage

QUESTION 129
You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible. What should you do?

Deploy Jenkins through the Google Cloud Marketplace.

Create a new Compute Engine instance. Run the Jenkins executable.

Create a new Kubernetes Engine cluster. Create a deployment for the Jenkins image.

Create an instance template with the Jenkins executable. Create a managed instance group with this template.

QUESTION 130
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

Move both projects under the same folder.

Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.

Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.

Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.
Share the folder with the IoT team.

QUESTION 131
You need to create a custom VPC with a single subnet. The subnet’s range must be as large as possible. Which range should you use?

.00.0.0/0

10.0.0.0/8

172.16.0.0/12

192.168.0.0/16
https://cloud.google.com/vpc/docs/vpc#manually_created_subnet_ip_ranges

QUESTION 132
The core business of your company is to rent out construction equipment at a large scale. All the equipment that is being rented out has been equipped with multiple sensors that send event information every few seconds. These signals can vary from engine status, distance traveled, fuel level, and more. Customers are billed based on the consumption monitored by these sensors. You expect high throughput – up to thousands of events per hour per device – and need to retrieve consistent data based on the time of the event. Storing and retrieving individual signals should be atomic. What should you do?

Create a file in Cloud Storage per device and append new data to that file.

Create a file in Cloud Filestore per device and append new data to that file.

Ingest the data into Datastore. Store data in an entity group based on the device.

Ingest the data into Cloud Bigtable. Create a row key based on the event timestamp.

QUESTION 133
You have one GCP account running in your default region and zone and another account running in a non- default region and zone. You want to start a new Compute Engine instance in these two Google Cloud Platform accounts using the command line interface. What should you do?

Create two configurations using gcloud config configurations create [NAME].Run gcloud config configurations activate [NAME]to switch between accounts when running the commands to start the Compute Engine instances.

Create two configurations using gcloud config configurations create [NAME].Run gcloud configurations listto start the Compute Engine instances.

Activate two configurations using gcloud configurations activate [NAME].Run gcloud config listto start the Compute Engine instances.

Activate two configurations using gcloud configurations activate [NAME].Run gcloud configurations listto start the Compute Engine instances.

QUESTION 134
A Solutions Architect is building an online shopping application where users will be able to browse items, add items to a cart, and purchase the items. Images of items will be stored in Amazon S3 buckets organized by item category. When an item is no longer available for purchase, the item image will be deleted from the S3 bucket.
Occasionally, during testing, item images deleted from the S3 bucket are still visible to some users.
What is a flaw in this design approach?

Defining S3 buckets by item may cause partition distribution errors, which will impact performance.

Amazon S3 DELETE requests are eventually consistent, which may cause other users to view items that have already been purchased

Amazon S3 DELETE requests apply a lock to the S3 bucket during the operation, causing other users to be blocked

Using Amazon S3 for persistence exposes the application to a single point of failure

QUESTION 135
You need to create a Compute Engine instance in a new project that doesn’t exist yet. What should you do?

Using the Cloud SDK, create a new project, enable the Compute Engine API in that project, and then create the instance specifying your new project.

Enable the Compute Engine API in the Cloud Console, use the Cloud SDK to create the instance, and then use the –project flag to specify a new project.

Using the Cloud SDK, create the new instance, and use the –project flag to specify the new project.
Answer yes when prompted by Cloud SDK to enable the Compute Engine API.

Enable the Compute Engine API in the Cloud Console. Go to the Compute Engine section of the Console to create a new instance, and look for the Create In A New Project option in the creation form.

QUESTION 136
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

Use gcloud iam roles copy and specify the production project as the destination project.

Use gcloud iam roles copy and specify your organization as the destination organization.

In the Google Cloud Platform Console, use the `create role from role’ functionality.

In the Google Cloud Platform Console, use the `create role’ functionality and select all applicable permissions.

QUESTION 137
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

Use gcloud iam roles copy and specify the production project as the destination project.

Use gcloud iam roles copy and specify your organization as the destination organization.

In the Google Cloud Platform Console, use the ‘create role from role’ functionality.

In the Google Cloud Platform Console, use the ‘create role’ functionality and select all applicable permissions.

QUESTION 138
You need to set a budget alert for use of Compute Engineer services on one of the three Google Cloud Platform projects that you manage. All three projects are linked to a single billing account. What should you do?

Verify that you are the project billing administrator. Select the associated billing account and create a budget and alert for the appropriate project.

Verify that you are the project billing administrator. Select the associated billing account and create a budget and a custom alert.

Verify that you are the project administrator. Select the associated billing account and create a budget for the appropriate project.

Verify that you are project administrator. Select the associated billing account and create a budget and a custom alert.