Top Tips Of Leading Associate-Cloud-Engineer Actual Exam

NEW QUESTION 1
You are assigned to maintain a Google Kubernetes Engine (GKE) cluster named dev that was deployed on Google Cloud. You want to manage the GKE configuration using the command line interface (CLI). You have just downloaded and installed the Cloud SDK. You want to ensure that future CLI commands by default address this specific cluster. What should you do?

• A. Use the command gcloud config sot container/cluster dev
• B. Use the command gcloud container clusters update dev
• C. Create a file called gk
• D. default in the -/ .gcloud folder that contains the cluster name
• E. Create a file called default
• F. j son in the -/.gcioud folder that contains the cluster name

Answer: B

NEW QUESTION 2
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1–standard–2 nodes. You need to deploy additional pods requiring n2–highmem–16 nodes without any downtime. What should you do?

• A. Use gcloud container clusters upgrad
• B. Deploy the new services.
• C. Create a new Node Pool and specify machine type n2–highmem–16. Deploy the new pods.
• D. Create a new cluster with n2–highmem–16 node
• E. Redeploy the pods and delete the old cluster.
• F. Create a new cluster with both n1–standard–2 and n2–highmem–16 node
• G. Redeploy the pods and delete the old cluster.

Answer: B

NEW QUESTION 3
Your managed instance group raised an alert stating that new instance creation has failed to create new instances. You need to maintain the number of running instances specified by the template to be able to process expected application traffic. What should you do?

• A. Create an instance template that contains valid syntax which will be used by the instance grou
• B. Delete any persistent disks with the same name as instance names.
• C. Create an instance template that contains valid syntax that will be used by the instance grou
• D. Verify that the instance name and persistent disk name values are not the same in the template.
• E. Verify that the instance template being used by the instance group contains valid synta
• F. Delete any persistent disks with the same name as instance name
• G. Set the disks.autoDelete property to true in the instance template.
• H. Delete the current instance template and replace it with a new instance templat
• I. Verify that the instance name and persistent disk name values are not the same in the templat
• J. Set the disks.autoDelete property to true in the instance template.

Answer: C

NEW QUESTION 4
You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?

• A. Grant yourself the IAM role of Cloud Spanner Admin
• B. Create a new VPC network with subnetworks in all desired regions
• C. Configure your Cloud Spanner instance to be multi-regional
• D. Enable the Cloud Spanner API

Answer: C

NEW QUESTION 5
You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

• A. Create a health check on port 443 and use that when creating the Managed Instance Group.
• B. Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
• C. In the Instance Template, add the label ‘health-check’.
• D. In the Instance Template, add a startup script that sends a heartbeat to the metadata server.

Answer: C

NEW QUESTION 6
Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

• A. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery jobUser role to the group.
• B. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery dataViewer user role to the group.
• C. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery jobUser role to the group.
• D. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery dataViewer user role to the group.

Answer: D

NEW QUESTION 7
You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

• A. Create a Cloud Memorystore for Redis instance with 32-GB capacity.
• B. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
• C. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.
• D. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.

Answer: B

NEW QUESTION 8
You manage three Google Cloud projects with the Cloud Monitoring API enabled. You want to follow Google-recommended practices to visualize CPU and network metrics for all three projects together. What should you do?

• A. * 1. Create a Cloud Monitoring Dashboard* 2. Collect metrics and publish them into the Pub/Sub topics 3. Add CPU and network Charts (or each of (he three projects
• B. * 1. Create a Cloud Monitoring Dashboard.* 2. Select the CPU and Network metrics from the three projects.* 3. Add CPU and network Charts lot each of the three protects.
• C. * 1 Create a Service Account and apply roles/viewer on the three projects* 2. Collect metrics and publish them lo the Cloud Monitoring API* 3. Add CPU and network Charts for each of the three projects.
• D. * 1. Create a fourth Google Cloud project* 2 Create a Cloud Workspace from the fourth project and add the other three projects

Answer: B

NEW QUESTION 9
You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide the application with access to Cloud Storage. What should you do?

• A. 1. Use nslookup to get the IP address for storage.googleapis.com.2. Negotiate with the security team to be able to give a public IP address to the servers.3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.
• B. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.3. Configure your servers to use that instance as a proxy to access Cloud Storage.
• C. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.3. Configure your new instances to use this ILB as proxy.
• D. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.3. In your on-premises network, configure your DNS server to resolve*.googleapis.com as a CNAME to restricted.googleapis.com.

Answer: D

NEW QUESTION 10
You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?

• A. Deploy me application on App Engine For each update, create a new version of the same service Configure traffic splitting to send a small percentage of traffic to the new version
• B. Deploy the application on App Engine For each update, create a new service Configure traffic splitting to send a small percentage of traffic to the new service.
• C. Deploy the application on Kubernetes Engine For a new release, update the deployment to use the new version
• D. Deploy the application on Kubernetes Engine For a now release, create a new deployment for the new version Update the service e to use the now deployment.

Answer: A

NEW QUESTION 11
You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?

• A. 1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
• B. 1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.
• C. 1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
• D. 1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

Answer: B

NEW QUESTION 12
You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?

• A. Deploy the new version in the same application and use the --migrate option.
• B. Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.
• C. Create a new App Engine application in the same projec
• D. Deploy the new version in that application.Use the App Engine library to proxy 1% of the requests to the new version.
• E. Create a new App Engine application in the same projec
• F. Deploy the new version in that application.Configure your network load balancer to send 1% of the traffic to that new application.

Answer: B

NEW QUESTION 13
You need to enable traffic between multiple groups of Compute Engine instances that are currently running two different GCP projects. Each group of Compute Engine instances is running in its own VPC. What should you do?

• A. Verify that both projects are in a GCP Organizatio
• B. Create a new VPC and add all instances.
• C. Verify that both projects are in a GCP Organizatio
• D. Share the VPC from one project and request that the Compute Engine instances in the other project use this shared VPC.
• E. Verify that you are the Project Administrator of both project
• F. Create two new VPCs and add all instances.
• G. Verify that you are the Project Administrator of both project
• H. Create a new VPC and add all instances.

Answer: B

NEW QUESTION 14
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

• A. Use gcloud iam roles copy and specify the production project as the destination project.
• B. Use gcloud iam roles copy and specify your organization as the destination organization.
• C. In the Google Cloud Platform Console, use the ‘create role from role’ functionality.
• D. In the Google Cloud Platform Console, use the ‘create role’ functionality and select all applicable permissions.

Answer: B

NEW QUESTION 15
You have an application that receives SSL-encrypted TCP traffic on port 443. Clients for this application are located all over the world. You want to minimize latency for the clients. Which load balancing option should you use?

• A. HTTPS Load Balancer
• B. Network Load Balancer
• C. SSL Proxy Load Balancer
• D. Internal TCP/UDP Load Balance
• E. Add a firewall rule allowing ingress traffic from 0.0.0.0/0 on the target instances.

Answer: C

NEW QUESTION 16
You are the organization and billing administrator for your company. The engineering team has the Project Creator role on the organization. You do not want the engineering team to be able to link projects to the billing account. Only the finance team should be able to link a project to a billing account, but they should not be able
to make any other changes to projects. What should you do?

• A. Assign the finance team only the Billing Account User role on the billing account.
• B. Assign the engineering team only the Billing Account User role on the billing account.
• C. Assign the finance team the Billing Account User role on the billing account and the Project Billing Manager role on the organization.
• D. Assign the engineering team the Billing Account User role on the billing account and the Project Billing Manager role on the organization.

Answer: D

NEW QUESTION 17
You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?

• A. Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
• B. Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
• C. Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
• D. Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtabl
• E. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.

Answer: D

NEW QUESTION 18
......