Top Tips Of Up To The Immediate Present Associate-Cloud-Engineer Dumps Questions

NEW QUESTION 1
You have a Google Cloud Platform account with access to both production and development projects. You need to create an automated process to list all compute instances in development and production projects on a daily basis. What should you do?

• A. Create two configurations using gcloud confi
• B. Write a script that sets configurations as active, individuall
• C. For each configuration, use gcloud compute instances list to get a list of compute resources.
• D. Create two configurations using gsutil confi
• E. Write a script that sets configurations as active,individuall
• F. For each configuration, use gsutil compute instances list to get a list of compute resources.
• G. Go to Cloud Shell and export this information to Cloud Storage on a daily basis.
• H. Go to GCP Console and export this information to Cloud SQL on a daily basis.

Answer: A

NEW QUESTION 2
You have a Dockerfile that you need to deploy on Kubernetes Engine. What should you do?

• A. Use kubectl app deploy <dockerfilename>.
• B. Use gcloud app deploy <dockerfilename>.
• C. Create a docker image from the Dockerfile and upload it to Container Registr
• D. Create a Deployment YAML file to point to that imag
• E. Use kubectl to create the deployment with that file.
• F. Create a docker image from the Dockerfile and upload it to Cloud Storag
• G. Create a Deployment YAML file to point to that imag
• H. Use kubectl to create the deployment with that file.

Answer: C

NEW QUESTION 3
You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

• A. Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
• B. Use Cloud Functions and configure the bucket as a trigger resource.
• C. Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
• D. Use Dataflow as a batch job, and configure the bucket as a data source.

Answer: A

NEW QUESTION 4
You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items.
How should you configure the auditor's permissions?

• A. Create a custom role with view-only project permission
• B. Add the user's account to the custom role.
• C. Create a custom role with view-only service permission
• D. Add the user's account to the custom role.
• E. Select the built-in IAM project Viewer rol
• F. Add the user's account to this role.
• G. Select the built-in IAM service Viewer rol
• H. Add the user's account to this role.

Answer: C

NEW QUESTION 5
You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?

• A. Save file automatic first-of-the- month backup for three years Store the backup file in an Archive class Cloud Storage bucket
• B. Convert the automatic first-of-the-month backup to an export file Write the export file to a Coldlineclass Cloud Storage bucket
• C. Set up an export job for the first of the month Write the export file to an Archive class Cloud Storage bucket
• D. Set up an on-demand backup tor the first of the month Write the backup to an Archive class Cloud Storage bucket

Answer: A

NEW QUESTION 6
You are building a pipeline to process time-series data. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?

• A. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
• B. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
• C. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
• D. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery

Answer: D

NEW QUESTION 7
You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?

• A. Configure an HTTP(S) load balancer.
• B. Configure an internal TCP load balancer.
• C. Configure an external SSL proxy load balancer.
• D. Configure an external TCP proxy load balancer.

Answer: A

NEW QUESTION 8
You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

• A. Cloud SQL
• B. Cloud Spanner
• C. Cloud Firestore
• D. Cloud Datastore

Answer: D

NEW QUESTION 9
Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

• A. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
• B. Tag all the instances with the same network ta
• C. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
• D. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
• E. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: B

NEW QUESTION 10
Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.

Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
• Instances in tier #1 must communicate with tier #2.
• Instances in tier #2 must communicate with tier #3. What should you do?

• A. 1. Create an ingress firewall rule with the following settings:• Targets: all instances• Source filter: IP ranges (with the range set to 10.0.2.0/24)• Protocols: allow all2. Create an ingress firewall rule with the following settings:• Targets: all instances• Source filter: IP ranges (with the range set to 10.0.1.0/24)•Protocols: allow all
• B. 1. Create an ingress firewall rule with the following settings:• Targets: all instances with tier #2 service account• Source filter: all instances with tier #1 service account• Protocols: allow TCP:80802. Create an ingress firewall rule with the following settings:• Targets: all instances with tier #3 service account• Source filter: all instances with tier #2 service account• Protocols: allow TCP: 8080
• C. 1. Create an ingress firewall rule with the following settings:• Targets: all instances with tier #2 service account• Source filter: all instances with tier #1 service account• Protocols: allow all2. Create an ingress firewall rule with the following settings:• Targets: all instances with tier #3 service account• Source filter: all instances with tier #2 service account• Protocols: allow all
• D. 1. Create an egress firewall rule with the following settings:• Targets: all instances• Source filter: IP ranges (with the range set to 10.0.2.0/24)• Protocols: allow TCP: 80802. Create an egress firewall rule with the following settings:• Targets: all instances• Source filter: IP ranges (with the range set to 10.0.1.0/24)• Protocols: allow TCP: 8080

Answer: B

NEW QUESTION 11
You want to select and configure a cost-effective solution for relational data on Google Cloud Platform. You are working with a small set of operational data in one geographic location. You need to support point-in-time recovery. What should you do?

• A. Select Cloud SQL (MySQL). Verify that the enable binary logging option is selected.
• B. Select Cloud SQL (MySQL). Select the create failover replicas option.
• C. Select Cloud Spanne
• D. Set up your instance with 2 nodes.
• E. Select Cloud Spanne
• F. Set up your instance as multi-regional.

Answer: A

NEW QUESTION 12
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?

• A. Set metadata to enable-oslogin=true for the instanc
• B. Grant the dev1 group the compute.osLogin role.Direct them to use the Cloud Shell to ssh to that instance.
• C. Set metadata to enable-oslogin=true for the instanc
• D. Set the service account to no service account for that instanc
• E. Direct them to use the Cloud Shell to ssh to that instance.
• F. Enable block project wide keys for the instanc
• G. Generate an SSH key for each user in the dev1 group.Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
• H. Enable block project wide keys for the instanc
• I. Generate an SSH key and associate the key with that instanc
• J. Distribute the key to dev1 users and direct them to use their third-party tools to connect.

Answer: D

NEW QUESTION 13
You are running an application on multiple virtual machines within a managed instance group and have autoscaling enabled. The autoscaling policy is configured so that additional instances are added to the group if the CPU utilization of instances goes above 80%. VMs are added until the instance group reaches its maximum limit of five VMs or until CPU utilization of instances lowers to 80%. The initial delay for HTTP health checks against the instances is set to 30 seconds. The virtual machine instances take around three minutes to become available for users. You observe that when the instance group autoscales, it adds more instances then necessary to support the levels of end-user traffic. You want to properly maintain instance group sizes when autoscaling. What should you do?

• A. Set the maximum number of instances to 1.
• B. Decrease the maximum number of instances to 3.
• C. Use a TCP health check instead of an HTTP health check.
• D. Increase the initial delay of the HTTP health check to 200 seconds.

Answer: D

NEW QUESTION 14
Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the data. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?

• A. Upload the data to BigQuery using the bq command line tool.
• B. Upload the data to Cloud Storage using the gsutil command line tool.
• C. Upload the data into Cloud SQL using the import function in the console.
• D. Upload the data into Cloud Spanner using the import function in the console.

Answer: A

NEW QUESTION 15
You are hosting an application from Compute Engine virtual machines (VMs) in us–central1–a. You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?

• A. – Create Compute Engine resources in us–central1–b.–Balance the load across both us–central1–a and us–central1–b.
• B. – Create a Managed Instance Group and specify us–central1–a as the zone.–Configure the Health Check with a short Health Interval.
• C. – Create an HTTP(S) Load Balancer.–Create one or more global forwarding rules to direct traffic to your VMs.
• D. – Perform regular backups of your application.–Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.–Restore from backups when notified.

Answer: C

NEW QUESTION 16
You have an object in a Cloud Storage bucket that you want to share with an external company. The object contains sensitive data. You want access to the content to be removed after four hours. The external company does not have a Google account to which you can grant specific user-based access privileges. You want to use the most secure method that requires the fewest steps. What should you do?

• A. Create a signed URL with a four-hour expiration and share the URL with the company.
• B. Set object access to ‘public’ and use object lifecycle management to remove the object after four hours.
• C. Configure the storage bucket as a static website and furnish the object’s URL to the compan
• D. Delete the object from the storage bucket after four hours.
• E. Create a new Cloud Storage bucket specifically for the external company to acces
• F. Copy the object to that bucke
• G. Delete the bucket after four hours have passed.

Answer: A

NEW QUESTION 17
You have been asked to set up Object Lifecycle Management for objects stored in storage buckets. The objects are written once and accessed frequently for 30 days. After 30 days, the objects are not read again unless there is a special need. The object should be kept for three years, and you need to minimize cost. What should you do?

• A. Set up a policy that uses Nearline storage for 30 days and then moves to Archive storage for three years.
• B. Set up a policy that uses Standard storage for 30 days and then moves to Archive storage for three years.
• C. Set up a policy that uses Nearline storage for 30 days, then moves the Coldline for one year, and then moves to Archive storage for two years.
• D. Set up a policy that uses Standard storage for 30 days, then moves to Coldline for one year, and then moves to Archive storage for two years.

Answer: A

NEW QUESTION 18
......