What Download Associate-Cloud-Engineer Sample Question Is

NEW QUESTION 1
You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

• A. Run gcloud iam roles describe roles/spanner.databaseUse
• B. Add the users to the role.
• C. Run gcloud iam roles describe roles/spanner.databaseUse
• D. Add the users to a new grou
• E. Add the group to the role.
• F. Run gcloud iam roles describe roles/spanner.viewer --project my-projec
• G. Add the users to the role.
• H. Run gcloud iam roles describe roles/spanner.viewer --project my-projec
• I. Add the users to a new group.Add the group to the role.

Answer: A

NEW QUESTION 2
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?

• A. Create a new subnet in the same region as the subnet being used.
• B. Add an alias IP range to the subnet used by the GKE clusters.
• C. Create a new VPC, and set up VPC peering with the existing VPC.
• D. Expand the CIDR range of the relevant subnet for the cluster.

Answer: C

Explanation:
To create a VPC peering connection, first create a request to peer with another VPC.

NEW QUESTION 3
You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?

• A. Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
• B. Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
• C. Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
• D. Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtabl
• E. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.

Answer: D

NEW QUESTION 4
Your company’s infrastructure is on-premises, but all machines are running at maximum capacity. You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?

• A. In Google Cloud, configure the VPC as a host for Shared VPC.
• B. In Google Cloud, configure the VPC for VPC Network Peering.
• C. Create bastion hosts both in your on-premises environment and on Google Clou
• D. Configure both as proxy servers using their public IP addresses.
• E. Set up Cloud VPN between the infrastructure on-premises and Google Cloud.

Answer: B

NEW QUESTION 5
You are assisting a new Google Cloud user who just installed the Google Cloud SDK on their VM. The server needs access to Cloud Storage. The user wants your help to create a new storage bucket. You need to make this change in multiple environments. What should you do?

• A. Use a Deployment Manager script to automate creating storage buckets in an appropriate region
• B. Use a local SSD to improve performance of the VM for the targeted workload
• C. Use the gsutii command to create a storage bucket in the same region as the VM
• D. Use a Persistent Disk SSD in the same zone as the VM to improve performance of the VM

Answer: A

NEW QUESTION 6
You have developed a containerized web application that will serve Internal colleagues during business hours. You want to ensure that no costs are incurred outside of the hours the application is used. You have just created a new Google Cloud project and want to deploy the application. What should you do?

• A. Deploy the container on Cloud Run for Anthos, and set the minimum number of instances to zero
• B. Deploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero.
• C. Deploy the container on App Engine flexible environment with autoscalin
• D. and set the value min_instances to zero in the app yaml
• E. Deploy the container on App Engine flexible environment with manual scaling, and set the value instances to zero in the app yaml

Answer: C

NEW QUESTION 7
You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements. What should you do?

• A. Enable the Identity Aware Proxy API on the project.
• B. Scan the bucker using the Data Loss Prevention API.
• C. Allow only a single Service Account access to read the data.
• D. Enable Data Access audit logs for the Cloud Storage API.

Answer: D

NEW QUESTION 8
You have a Google Cloud Platform account with access to both production and development projects. You need to create an automated process to list all compute instances in development and production projects on a daily basis. What should you do?

• A. Create two configurations using gcloud confi
• B. Write a script that sets configurations as active, individuall
• C. For each configuration, use gcloud compute instances list to get a list of compute resources.
• D. Create two configurations using gsutil confi
• E. Write a script that sets configurations as active,individuall
• F. For each configuration, use gsutil compute instances list to get a list of compute resources.
• G. Go to Cloud Shell and export this information to Cloud Storage on a daily basis.
• H. Go to GCP Console and export this information to Cloud SQL on a daily basis.

Answer: A

NEW QUESTION 9
You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?

• A. Create a single custom VPC with 2 subnet
• B. Create each subnet in a different region and with a different CIDR range.
• C. Create a single custom VPC with 2 subnet
• D. Create each subnet in the same region and with the same CIDR range.
• E. Create 2 custom VPCs, each with a single subne
• F. Create each subnet is a different region and with a different CIDR range.
• G. Create 2 custom VPCs, each with a single subne
• H. Create each subnet in the same region and with the same CIDR range.

Answer: A

NEW QUESTION 10
Your company has an internal application for managing transactional orders. The application is used exclusively by employees in a single physical location. The application requires strong consistency, fast queries, and ACID guarantees for multi-table transactional updates. The first version of the application is implemented inPostgreSQL, and you want to deploy it to the cloud with minimal code changes. Which database is most appropriate for this application?

• A. BigQuery
• B. Cloud SQL
• C. Cloud Spanner
• D. Cloud Datastore

Answer: B

NEW QUESTION 11
You have deployed multiple Linux instances on Compute Engine. You plan on adding more instances in the coming weeks. You want to be able to access all of these instances through your SSH client over me Internet without having to configure specific access on the existing and new instances. You do not want the Compute Engine instances to have a public IP. What should you do?

• A. Configure Cloud Identity-Aware Proxy (or HTTPS resources
• B. Configure Cloud Identity-Aware Proxy for SSH and TCP resources.
• C. Create an SSH keypair and store the public key as a project-wide SSH Key
• D. Create an SSH keypair and store the private key as a project-wide SSH Key

Answer: C

NEW QUESTION 12
Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?

• A. Add the group for the finance team to roles/billing user role.
• B. Add the group for the finance team to roles/billing admin role.
• C. Add the group for the finance team to roles/billing viewer role.
• D. Add the group for the finance team to roles/billing project/Manager role.

Answer: A

NEW QUESTION 13
Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

• A. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
• B. Tag all the instances with the same network ta
• C. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
• D. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
• E. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: B

NEW QUESTION 14
You need to host an application on a Compute Engine instance in a project shared with other teams. You want to prevent the other teams from accidentally causing downtime on that application. Which feature should you use?

• A. Use a Shielded VM.
• B. Use a Preemptible VM.
• C. Use a sole-tenant node.
• D. Enable deletion protection on the instance.

Answer: D

NEW QUESTION 15
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

• A. Enable the Node Auto-Repair feature for your GKE cluster.
• B. Enable the Node Auto-Upgrades feature for your GKE cluster.
• C. Select the latest available cluster version for your GKE cluster.
• D. Select “Container-Optimized OS (cos)” as a node image for your GKE cluster.

Answer: B

NEW QUESTION 16
Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.

You want to resolve the issue. What should you do?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

NEW QUESTION 17
......