Up To The Immediate Present Associate-Cloud-Engineer Free Practice Test For Google Cloud Certified - Associate Cloud Engineer Certification

NEW QUESTION 1
You host a static website on Cloud Storage. Recently, you began to include links to PDF files on this site.
Currently, when users click on the links to these PDF files, their browsers prompt them to save the file onto their local system. Instead, you want the clicked PDF files to be displayed within the browser window directly, without prompting the user to save the file locally. What should you do?

• A. Enable Cloud CDN on the website frontend.
• B. Enable ‘Share publicly’ on the PDF file objects.
• C. Set Content-Type metadata to application/pdf on the PDF file objects.
• D. Add a label to the storage bucket with a key of Content-Type and value of application/pdf.

Answer: C

NEW QUESTION 2
Your company wants to standardize the creation and management of multiple Google Cloud resources using Infrastructure as Code. You want to minimize the amount of repetitive code needed to manage the environment What should you do?

• A. Create a bash script that contains all requirement steps as gcloud commands
• B. Develop templates for the environment using Cloud Deployment Manager
• C. Use curl in a terminal to send a REST request to the relevant Google API for each individual resource.
• D. Use the Cloud Console interface to provision and manage all related resources

Answer: B

NEW QUESTION 3
Your company’s infrastructure is on-premises, but all machines are running at maximum capacity. You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?

• A. In Google Cloud, configure the VPC as a host for Shared VPC.
• B. In Google Cloud, configure the VPC for VPC Network Peering.
• C. Create bastion hosts both in your on-premises environment and on Google Clou
• D. Configure both as proxy servers using their public IP addresses.
• E. Set up Cloud VPN between the infrastructure on-premises and Google Cloud.

Answer: B

NEW QUESTION 4
You need to set a budget alert for use of Compute Engineer services on one of the three Google Cloud Platform projects that you manage. All three projects are linked to a single billing account. What should you do?

• A. Verify that you are the project billing administrato
• B. Select the associated billing account and create a budget and alert for the appropriate project.
• C. Verify that you are the project billing administrato
• D. Select the associated billing account and create a budget and a custom alert.
• E. Verify that you are the project administrato
• F. Select the associated billing account and create a budget for the appropriate project.
• G. Verify that you are project administrato
• H. Select the associated billing account and create a budget and a custom alert.

Answer: B

NEW QUESTION 5
You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?

• A. Create the instance with the default Compute Engine service account Grant the service account permissions on Cloud Storage.
• B. Create the instance with the default Compute Engine service account Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
• C. Create a new service account and assign this service account to the new instance Grant the service account permissions on Cloud Storage.
• D. Create a new service account and assign this service account to the new instance Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.

Answer: C

NEW QUESTION 6
You are using Container Registry to centrally store your company’s container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?

• A. In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes.
• B. When you create the GKE cluster, choose the Allow full access to all Cloud APIs option under ‘Access scopes’.
• C. Create a service account, and give it access to Cloud Storag
• D. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.
• E. Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.

Answer: B

NEW QUESTION 7
You need to create a Compute Engine instance in a new project that doesn’t exist yet. What should you do?

• A. Using the Cloud SDK, create a new project, enable the Compute Engine API in that project, and then create the instance specifying your new project.
• B. Enable the Compute Engine API in the Cloud Console, use the Cloud SDK to create the instance, and then use the ––project flag to specify a new project.
• C. Using the Cloud SDK, create the new instance, and use the ––project flag to specify the new project.Answer yes when prompted by Cloud SDK to enable the Compute Engine API.
• D. Enable the Compute Engine API in the Cloud Consol
• E. Go to the Compute Engine section of the Console to create a new instance, and look for the Create In A New Project option in the creation form.

Answer: A

NEW QUESTION 8
You have deployed an application on a single Compute Engine instance. The application writes logs to disk. Users start reporting errors with the application. You want to diagnose the problem. What should you do?

• A. Navigate to Cloud Logging and view the application logs.
• B. Connect to the instance’s serial console and read the application logs.
• C. Configure a Health Check on the instance and set a Low Healthy Threshold value.
• D. Install and configure the Cloud Logging Agent and view the logs from Cloud Logging.

Answer: D

NEW QUESTION 9
You are assisting a new Google Cloud user who just installed the Google Cloud SDK on their VM. The server needs access to Cloud Storage. The user wants your help to create a new storage bucket. You need to make this change in multiple environments. What should you do?

• A. Use a Deployment Manager script to automate creating storage buckets in an appropriate region
• B. Use a local SSD to improve performance of the VM for the targeted workload
• C. Use the gsutii command to create a storage bucket in the same region as the VM
• D. Use a Persistent Disk SSD in the same zone as the VM to improve performance of the VM

Answer: A

NEW QUESTION 10
You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.

You check the status of the deployed pods and notice that one of them is still in PENDING status:

You want to find out why the pod is stuck in pending status. What should you do?

• A. Review details of the myapp-service Service object and check for error messages.
• B. Review details of the myapp-deployment Deployment object and check for error messages.
• C. Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.
• D. View logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.

Answer: C

NEW QUESTION 11
Your VMs are running in a subnet that has a subnet mask of 255.255.255.240. The current subnet has no more free IP addresses and you require an additional 10 IP addresses for new VMs. The existing and new VMs should all be able to reach each other without additional routes. What should you do?

• A. Use gcloud to expand the IP range of the current subnet.
• B. Delete the subnet, and recreate it using a wider range of IP addresses.
• C. Create a new projec
• D. Use Shared VPC to share the current network with the new project.
• E. Create a new subnet with the same starting IP but a wider range to overwrite the current subnet.

Answer: C

NEW QUESTION 12
You need to deploy an application, which is packaged in a container image, in a new project. The application exposes an HTTP endpoint and receives very few requests per day. You want to minimize costs. What should you do?

• A. Deploy the container on Cloud Run.
• B. Deploy the container on Cloud Run on GKE.
• C. Deploy the container on App Engine Flexible.
• D. Deploy the container on Google Kubernetes Engine, with cluster autoscaling and horizontal pod autoscaling enabled.

Answer: A

NEW QUESTION 13
You have a workload running on Compute Engine that is critical to your business. You want to ensure that the data on the boot disk of this workload is backed up regularly. You need to be able to restore a backup as quickly as possible in case of disaster. You also want older backups to be cleaned automatically to save on cost. You want to follow Google-recommended practices. What should you do?

• A. Create a Cloud Function to create an instance template.
• B. Create a snapshot schedule for the disk using the desired interval.
• C. Create a cron job to create a new disk from the disk using gcloud.
• D. Create a Cloud Task to create an image and export it to Cloud Storage.

Answer: B

NEW QUESTION 14
Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

• A. Modify the existing subnet range to 172.16.20.0/24.
• B. Create a new Secondary IP Range in the VPC and configure the VMs to use that range.
• C. Create a new VPC network for the VM
• D. Enable VPC Peering between the VMs’ VPC network and the Dataproc cluster VPC network.
• E. Create a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC networ
• F. Configure a custom Route exchange.

Answer: B

Explanation:
A subnet has a single primary IP address range and, optionally, one or more secondary IP address ranges. For each subnet IP address range, Google Cloud creates a subnet route. When you use VPC Network Peering, Google Cloud always exchanges the subnet routes that don't use privately reused public IP addresses between the two peered networks. If firewall rules in each network permit communication, VM instances in one network can communicate with instances in the peered network.

NEW QUESTION 15
You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm. What should you do?

• A. Download the private key from the service account, and add it to each VMs custom metadata.
• B. Download the private key from the service account, and add the private key to each VM’s SSH keys.
• C. Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
• D. When creating the VMs, set the service account’s API scope for Compute Engine to read/write.

Answer: C

NEW QUESTION 16
You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images. The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires. The other microservices are workloads that are optimized for n1-standard machine types. You need to optimize your cluster so that all workloads are using resources as efficiently as possible. What should you do?

• A. Assign the pods of the image rendering microservice a higher pod priority than the older microservices
• B. Create a node pool with compute-optimized machine type nodes for the image rendering microservice Use the node pool with general-purposemachine type nodes for the other microservices
• C. Use the node pool with general-purpose machine type nodes for lite mage rendering microservice Create a nodepool with compute-optimized machine type nodes for the other microservices
• D. Configure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment Keep the resource requests for the other microservices at the default

Answer: B

NEW QUESTION 17
You need to host an application on a Compute Engine instance in a project shared with other teams. You want to prevent the other teams from accidentally causing downtime on that application. Which feature should you use?

• A. Use a Shielded VM.
• B. Use a Preemptible VM.
• C. Use a sole-tenant node.
• D. Enable deletion protection on the instance.

Answer: D

NEW QUESTION 18
......