[Oct 02, 2023] Associate-Cloud-Engineer Practice Exam Dumps - 99% Marks In Google Exam
Updated Verified Associate-Cloud-Engineer Q&As - Pass Guarantee or Full Refund
Passing the Google Associate-Cloud-Engineer Certification Exam is a great way to demonstrate your knowledge of GCP and your ability to deploy and manage applications on the platform. Google Associate Cloud Engineer Exam certification can open up new career opportunities and increase your earning potential. It can also help your organization to demonstrate their expertise in GCP and attract new customers.
The Associate-Cloud-Engineer Certification Exam is a great way to demonstrate to potential employers or clients that you have the knowledge and skills required to manage Google Cloud Platform services. Google Associate Cloud Engineer Exam certification also provides you with the opportunity to enhance your career prospects and increase your earning potential.
NEW QUESTION # 129
A customer is deploying a production portal application on AWS. The database tier has structured data. The company requires a solution that is easily manageable and highly available.
How can these requirements be met?
- A. Use Amazon RDS with a multiple Availability Zone option.
- B. Use RDS with a single Available Zone option and schedule periodic database snapshots.
- C. Use Amazon DynamoDB.
- D. Deploy the database on multiple Amazon EC2 instances backed by Amazon EBS across multiple Availability Zones.
Answer: A
Explanation:
Explanation/Reference: https://aws.amazon.com/rds/
NEW QUESTION # 130
You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?
- A. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
- B. Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
- C. Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
- D. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
Answer: D
NEW QUESTION # 131
You have several users who need access to some very specific Google Cloud functionality. You'd like to follow the principle of least privilege. What's the best way to ensure these users can list Cloud Storage buckets, list BigQuery jobs, and list compute disks?
- A. Add the users to a group, apply the Cloud Storage Bucket Viewer, BigQuery Job User, and Compute User predefined roles.
- B. Add the users to the viewer role.
- C. Use the Cloud Storage Bucket Viewer, BigQuery Job User, and Compute User predefined roles.
- D. Create a custom role for this job role, add the required permissions, and add the users to the role.
Answer: D
NEW QUESTION # 132
You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?
- A. Run a select count (*) to get an idea of how many records your query will look through.
Then convert that number of rows to dollars using the Pricing Calculator. - B. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
- C. Use the command line to run a dry run query to estimate the number of bytes returned.
Then convert that bytes estimate to dollars using the Pricing Calculator. - D. Use the command line to run a dry run query to estimate the number of bytes read.
Then convert that bytes estimate to dollars using the Pricing Calculator.
Answer: D
NEW QUESTION # 133
Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google's recommended practices. Which storage option should you use?
- A. Coldline Storage
- B. Regional Storage
- C. Multi-Regional Storage
- D. Nearline Storage
Answer: A
Explanation:
Reference:
https://cloud.google.com/storage/docs/storage-classes#nearline
NEW QUESTION # 134
You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps.
What should you do?
- A. Set a Windows username and password in the GCP Console. Verify that a firewall rule for port
3389 exists.
Click the RDP button in the GCP Console, and supply the credentials to log in. - B. Set a Windows password in the GCP Console. Verify that a firewall rule for port 22 exists.
Click the RDP button in the GCP Console and supply the credentials to log in. - C. Install a RDP client on your desktop. Verify that a firewall rule for port 3389 exists.
- D. Install a RDP client in your desktop. Set a Windows username and password in the GCP Console.
Use the credentials to log in to the instance.
Answer: D
Explanation:
Option D is not correct. When you click the RDP button, you are asked to install a client or use the Windows RDP client if you are running Windows. There is no option to enter credentials or get an RDP session through the web interface.
Option B is correct. Using the internal IP address is always preferred to going through the Internet using the Public one.
Through Internal IP option:
- Chrome Remote Desktop is a service that lets you remotely access another computer by using a web browser.
- Chrome Remote Desktop works on Windows, macOS, and Linux and does not require the VM instance to have a public IP address.
Before you connect by using Chrome Remote Desktop, make sure that the following prerequisites are met:
- You've created a Windows account and password on the VM instance.
- You've installed the Chrome Remote Desktop service on the VM instance.
https://cloud.google.com/compute/docs/instances/connecting-to-windows#chrome-remote- desktop
NEW QUESTION # 135
You have been asked to set up the billing configuration for a new Google Cloud customer. Your customer wants to group resources that share common IAM policies. What should you do?
- A. Set up a proper project naming structure to group IAM policies
- B. Set up a proper billing account structure to group IAM policies
- C. Use folders to group resources that share common IAM policies
- D. Use labels to group resources that share common IAM policies
Answer: C
NEW QUESTION # 136
You have a workload running on Compute Engine that is critical to your business. You want to ensure that the data on the boot disk of this workload is backed up regularly. You need to be able to restore a backup as quickly as possible in case of disaster. You also want older backups to be cleaned automatically to save on cost. You want to follow Google-recommended practices. What should you do?
- A. Create a snapshot schedule for the disk using the desired interval.
- B. Create a Cloud Function to create an instance template.
- C. Create a Cloud Task to create an image and export it to Cloud Storage.
- D. Create a cron job to create a new disk from the disk using gcloud.
Answer: A
Explanation:
Best practices for persistent disk snapshots
You can create persistent disk snapshots at any time, but you can create snapshots more quickly and with greater reliability if you use the following best practices.
Creating frequent snapshots efficiently
Use snapshots to manage your data efficiently.
Create a snapshot of your data on a regular schedule to minimize data loss due to unexpected failure.
Improve performance by eliminating excessive snapshot downloads and by creating an image and reusing it.
Set your snapshot schedule to off-peak hours to reduce snapshot time.
Snapshot frequency limits
Creating snapshots from persistent disks
You can snapshot your disks at most once every 10 minutes. If you want to issue a burst of requests to snapshot your disks, you can issue at most 6 requests in 60 minutes.
If the limit is exceeded, the operation fails and returns the following error:
https://cloud.google.com/compute/docs/disks/snapshot-best-practices
NEW QUESTION # 137
A cloud engineer has been assigned to work on a running project. He wants to know which VMs are running in the project. How could the cloud engineer get the information of the all VMs running in the project?
- A. Execute the command gcloud compute list
- B. Execute the command gcloud list instances
- C. Execute the command gcloud instances list
- D. Execute the command gcloud compute instances list
Answer: D
NEW QUESTION # 138
You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?
- A. Use service account credentials in your on-premises application.
- B. Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.
- C. Use gcloud to create a key file for the service account that has appropriate permissions.
- D. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.
Answer: C
Explanation:
To use a service account outside of Google Cloud, such as on other platforms or on-premises, you must first establish the identity of the service account. Public/private key pairs provide a secure way of accomplishing this goal.
https://cloud.google.com/iam/docs/creating-managing-service-account-keys
NEW QUESTION # 139
You have an App Engine application serving as your front-end. It's going to publish messages to Pub/Sub. The Pub/Sub API hasn't been enabled yet. What is the fastest way to enable the API?
- A. The API will be enabled the first time the code attempts to access Pub/Sub.
- B. Application's in App Engine don't require external APIs to be enabled.
- C. Use a service account to auto-enable the API.
- D. Enable the API in the Console.
Answer: A,D
NEW QUESTION # 140
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?
- A. Add an alias IP range to the subnet used by the GKE clusters.
- B. Create a new subnet in the same region as the subnet being used.
- C. Expand the CIDR range of the relevant subnet for the cluster.
- D. Create a new VPC, and set up VPC peering with the existing VPC.
Answer: C
Explanation:
gcloud compute networks subnets expand-ip-range NAME gcloud compute networks subnets expand-ip-range - expand the IP range of a Compute Engine subnetwork https://cloud.google.com/sdk/gcloud/reference/compute/networks/subnets/expand-ip-range
NEW QUESTION # 141
For analysis purposes, you need to send all the logs from all of your Compute Engine instances to a BigQuery dataset called platform-logs. You have already installed the Stackdriver Logging agent on all the instances.
You want to minimize cost. What should you do?
- A. 1. Give the BigQuery Data Editor role on the platform-logsdataset to the service accounts used by your instances.
2. Update your instances' metadata to add the following value: logs-destination: bq://platform- logs. - B. 1. Create a Cloud Function that has the BigQuery User role on the platform-logsdataset.
2. Configure this Cloud Function to create a BigQuery Job that executes this query:
INSERT INTO dataset.platform-logs (timestamp, log)
SELECT timestamp, log FROM compute.logs
WHERE timestamp > DATE_SUB(CURRENT_DATE(), INTERVAL 1 DAY)
3. Use Cloud Scheduler to trigger this Cloud Function once a day. - C. 1. In Stackdriver Logging, create a filter to view only Compute Engine logs.
2. Click Create Export.
3. Choose BigQuery as Sink Service, and the platform-logsdataset as Sink Destination. - D. 1. In Stackdriver Logging, create a logs export with a Cloud Pub/Sub topic called logsas a sink.
2. Create a Cloud Function that is triggered by messages in the logstopic.
3. Configure that Cloud Function to drop logs that are not from Compute Engine and to insert Compute Engine logs in the platform-logsdataset.
Answer: C
NEW QUESTION # 142
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?
- A. Expand the CIDR range of the relevant subnet for the cluster.
- B. Add an alias IP range to the subnet used by the GKE clusters.
- C. Create a new subnet in the same region as the subnet being used.
- D. Create a new VPC, and set up VPC peering with the existing VPC.
Answer: D
Explanation:
To create a VPC peering connection, first create a request to peer with another VPC.
NEW QUESTION # 143
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?
- A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- C. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- D. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.
Answer: A
NEW QUESTION # 144
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google-recommended practices to obtain the combined logs for all projects. What should you do?
- A. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage.
Create a lifecycle rule to delete objects after 60 days. - B. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery.
Configure the table expiration to 60 days. - C. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset.
Configure the table expiration to 60 days. - D. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
Answer: C
Explanation:
Since we only care about the logs within 60 days, we can set the expiration time to 60 to retain only the logs within that time frame. Once data is beyond 60 days old, it wouldn't be included in future analyzations.
https://cloud.google.com/bigquery/docs/managing-tables#updating_a_tables_expiration_time
NEW QUESTION # 145
You are building a pipeline to process time-series dat
a. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?
- A. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
- B. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
- C. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery
- D. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
Answer: C
Explanation:
Reference:
https://cloud.google.com/solutions/correlating-time-series-dataflow
NEW QUESTION # 146
A Solutions Architect is designing a three-tier web application that will allow customers to upload pictures from a mobile application. The application will then generate a thumbnail of the picture and return a message to the user confirming that the image was successfully uploaded. Generation of the thumbnail may take up to 5 seconds. To provide a sub second response time to the customers uploading the images, the Solutions Architect wants to separate the web tier from the application tier.
Which service would allow the presentation tier to asynchronously dispatch the request to the application tier?
- A. AWS Lambda
- B. Amazon SNS
- C. Amazon SQS
- D. AWS Step Functions
Answer: D
NEW QUESTION # 147
You manage three Google Cloud projects with the Cloud Monitoring API enabled. You want to follow Google-recommended practices to visualize CPU and network metrics for all three projects together. What should you do?
- A. 1. Create a Cloud Monitoring Dashboard
2. Collect metrics and publish them into the Pub/Sub topics
3. Add CPU and network Charts (or each of (he three projects - B. 1. Create a Cloud Monitoring Dashboard.
2. Select the CPU and Network metrics from the three projects.
3. Add CPU and network Charts lot each of the three protects. - C. 1. Create a fourth Google Cloud project
2. Create a Cloud Workspace from the fourth project and add the other three projects - D. 1 Create a Service Account and apply roles/viewer on the three projects
2. Collect metrics and publish them lo the Cloud Monitoring API
3. Add CPU and network Charts for each of the three projects.
Answer: B
NEW QUESTION # 148
You are building an application that processes data files uploaded from thousands of suppliers.
Your primary goals for the application are data security and the expiration of aged data. You need to design the application to:
- Restrict access so that suppliers can access only their own data.
- Give suppliers write access to data only for 30 minutes.
- Delete data that is over 45 days old.
You have a very short development cycle, and you need to make sure that the application requires minimal maintenance. Which two strategies should you use? (Choose two.)
- A. Build a Cloud function that triggers a timer of 45 days to delete objects that have expired.
- B. Use signed URLs to allow suppliers limited time access to store their objects.
- C. Set up an SFTP server for your application, and create a separate user for each supplier.
- D. Build a lifecycle policy to delete Cloud Storage objects after 45 days.
- E. Develop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than 45 days.
Answer: D,E
NEW QUESTION # 149
Your developers have created an application that needs to be able to make calls to Cloud Storage and BigQuery. The code is going to run inside a container and will run on Kubernetes Engine and on-premises.
What's the best way for them to authenticate to the Google Cloud services?
- A. Create a service account, grant it the least viable privileges to the required services, generate and download a key. Use the key to authenticate inside the application.
- B. Create a service account, with editor permissions, generate and download a key. Use the key to authenticate inside the application.
- C. Use the default service account for App Engine which already has the required permissions.
- D. Use the default service account for Compute Engine which already has the required permissions.
Answer: A
NEW QUESTION # 150
You have a Dockerfile that you need to deploy on Kubernetes Engine. What should you do?
- A. Use gcloud app deploy <dockerfilename>.
- B. Use kubectl app deploy <dockerfilename>.
- C. Create a docker image from the Dockerfile and upload it to Container Registry. Create a Deployment YAML file to point to that image. Use kubectlto create the deployment with that file.
- D. Create a docker image from the Dockerfile and upload it to Cloud Storage. Create a Deployment YAML file to point to that image. Use kubectlto create the deployment with that file.
Answer: C
Explanation:
Explanation/Reference:
Reference https://cloud.google.com/kubernetes-engine/docs/tutorials/hello-app
NEW QUESTION # 151
Your engineers have asked you to set up a subnet with the largest IP address range possible. Which of the following ranges would work best?
- A. 10.0.0.0/32
- B. 0.0.0.0/0
- C. 192.168.0.0/16
- D. 10.0.0.0/8
Answer: A
NEW QUESTION # 152
Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?
- A. Add your SREs to roles/accessapproval approver role.
- B. Add your SREs to a group and then add this group to roles/iam roleAdmin role.
- C. Add your SREs to roles/iam.roleAdmin role.
- D. Add your SREs to a group and then add this group to roles/accessapproval approver role.
Answer: A
NEW QUESTION # 153
Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps.
What should you do?
- A. Create a new Secondary IP Range in the VPC and configure the VMs to use that range.
- B. Create a new VPC network for the VMs.
Enable VPC Peering between the VMs' VPC network and the Dataproc cluster VPC network. - C. Create a new VPC network for the VMs with a subnet of 172.32.0.0/16.
Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network.
Configure a custom Route exchange. - D. Modify the existing subnet range to 172.16.20.0/24.
Answer: D
Explanation:
gcloud compute networks subnets expand-ip-range
NAME
gcloud compute networks subnets expand-ip-range - expand the IP range of a Compute Engine subnetwork
NEW QUESTION # 154
......
Associate-Cloud-Engineer Real Valid Brain Dumps With 229 Questions: https://dumpsvce.exam4free.com/Associate-Cloud-Engineer-valid-dumps.html
