Associate-Cloud-Engineer Updated Exam Dumps [2024] Practice Valid Exam Dumps Question
Associate-Cloud-Engineer Sample with Accurate & Updated Questions
Google Associate-Cloud-Engineer exam is designed to test the candidate's knowledge of various Google Cloud Platform products and services such as Compute Engine, Kubernetes Engine, Cloud Storage, Stackdriver, and IAM. Associate-Cloud-Engineer exam also assesses the candidate’s ability to deploy and manage applications, monitor operations, and configure access and security controls.
Achieving the Google Associate Cloud Engineer Certification demonstrates your credibility and proficiency in managing and deploying applications on Google Cloud Platform. Google Associate Cloud Engineer Exam certification is recognized globally and can help you stand out in the job market, increase your earning potential, and advance your career in cloud computing.
NEW QUESTION # 51
Your company's infrastructure is on-premises, but all machines are running at maximum capacity.
You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?
- A. Set up Cloud VPN between the infrastructure on-premises and Google Cloud.
- B. In Google Cloud, configure the VPC for VPC Network Peering.
- C. In Google Cloud, configure the VPC as a host for Shared VPC.
- D. Create bastion hosts both in your on-premises environment and on Google Cloud. Configure both as proxy servers using their public IP addresses.
Answer: A
Explanation:
vpc network peering does not connect to on-prem. Cloud VPN is the correct solution.
https://cloud.google.com/vpn/docs/concepts/overview
NEW QUESTION # 52
The DevOps group in your organization needs full control of Compute Engine resources in your development project. However, they should not have permission to create or update any other resources in the project. You want to follow Google's recommendations for setting permissions for the DevOps group. What should you do?
- A. Create an 1AM policy and grant all compute. instanceAdmln." permissions to the policy Attach the policy to the DevOps group.
- B. Grant the basic role roles/editor to the DevOps group.
- C. Create a custom role at the folder level and grant all compute. instanceAdmln. * permissions to the role Grant the custom role to the DevOps group.
- D. Grant the basic role roles/viewer and the predefined role roles/compute.admin to the DevOps group.
Answer: D
NEW QUESTION # 53
You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re- creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?
- A. Create a managed instance group. Verify that the autoscaling setting is on.
- B. Create a managed instance group. Set the Autohealing health check to healthy (HTTP)
- C. Create an HTTP load balancer with a backend configuration that references an existing instance group.
Set the health check to healthy (HTTP) - D. Create an HTTP load balancer with a backend configuration that references an existing instance group.
Define a balancing mode and set the maximum RPS to 10.
Answer: B
Explanation:
Use separate health checks for load balancing and for autohealing. Health checks for load balancing detect unresponsive instances and direct traffic away from them. Health checks for autohealing detect and recreate failed instances, so they should be less aggressive than load balancing health checks. Using the same health check for these services would remove the distinction between unresponsive instances and failed instances, causing unnecessary latency and unavailability for your users.
https://cloud.google.com/compute/docs/tutorials/high-availability-autohealing
NEW QUESTION # 54
You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?
- A. Cloud Firestore
- B. Cloud Datastore
- C. Cloud Spanner
- D. Cloud SQL
Answer: B
NEW QUESTION # 55
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
- B. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
- C. When creating the VM, use machine type n1-standard-96.
- D. When creating the VM, use Intel Skylake as the CPU platform.
Answer: C
Explanation:
https://cloud.google.com/compute/docs/machine-types
NEW QUESTION # 56
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2- highmem-16 nodes without any downtime. What should you do?
- A. Create a new Node Pool and specify machine type n2-highmem-16.
Deploy the new pods. - B. Use gcloud container clusters upgrade.
Deploy the new services. - C. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes.
Redeploy the pods and delete the old cluster. - D. Create a new cluster with n2-highmem-16 nodes.
Redeploy the pods and delete the old cluster.
Answer: A
NEW QUESTION # 57
Your management has asked an external auditor to review all the resources in a specific project. The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?
- A. Ask the auditor for their Google account, and give them the Security Reviewer role on the project.
- B. Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.
- C. Ask the auditor for their Google account, and give them the Viewer role on the project.
- D. Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.
Answer: D
NEW QUESTION # 58
You received a JSON file that contained a private key of a Service Account in order to get access to several resources in a Google Cloud project. You downloaded and installed the Cloud SDK and want to use this private key for authentication and authorization when performing gcloud commands. What should you do?
- A. Use the command gcloud auth login and point it to the private key
- B. Use the command gcloud auth activate-service-account and point it to the private key
- C. Place the private key file in the installation directory of the Cloud SDK and rename it to "credentials ison"
- D. Place the private key file in your home directory and rename it to ''GOOGLE_APPUCATION_CREDENTiALS".
Answer: B
Explanation:
Authorizing with a service account
gcloud auth activate-service-account authorizes access using a service account. As with gcloud init and gcloud auth login, this command saves the service account credentials to the local system on successful completion and sets the specified account as the active account in your Cloud SDK configuration.
https://cloud.google.com/sdk/docs/authorizing#authorizing_with_a_service_account
NEW QUESTION # 59
You have created a Kubernetes deployment, called Deployment-A, with 3 replicas on your cluster. Another deployment, called Deployment-B, needs access to Deployment-A. You cannot expose Deployment-A outside of the cluster. What should you do?
- A. Create a Service of type NodePort for Deployment A and an Ingress Resource for that Service.
Have Deployment B use the Ingress IP address. - B. Create a Service of type LoadBalancer for Deployment A and an Ingress Resource for that Service. Have Deployment B use the Ingress IP address.
- C. Create a Service of type LoadBalancer for Deployment A. Have Deployment B use the Service IP address.
- D. Create a Service of type ClusterIP for Deployment A. Have Deployment B use the Service IP address.
Answer: D
Explanation:
A is not correct because this exposes Deployment A over the public internet.
B is not correct because LoadBalancer will expose the service publicly.
C is not correct because this exposes the service externally using a cloud provider's load balancer, and Ingress can work only with nodeport, not LoadBalancer.
D is correct because this exposes the service on a cluster-internal IP address. Choosing this method makes the service reachable only from within the cluster.
https://kubernetes.io/docs/concepts/services-networking/service/
NEW QUESTION # 60
Your application development team has created Docker images for an application that will be deployed on Google Cloud. Your team does not want to manage the infrastructure associated with this application. You need to ensure that the application can scale automatically as it gains popularity. What should you do?
- A. Create an Instance template with the container image, and deploy a Managed Instance Group with Autoscaling.
- B. Upload Docker images to the Cloud Storage, and deploy the application on Google Kubernetes Engine using Standard mode.
- C. Upload Docker images to Artifact Registry, and deploy the application on Google Kubernetes Engine using Standard mode.
- D. Upload Docker images to Artifact Registry, and deploy the application on Cloud Run.
Answer: D
NEW QUESTION # 61
You want to configure 10 Compute Engine instances for availability when maintenance occurs.
Your requirements state that these instances should attempt to automatically restart if they crash.
Also, the instances should be highly available including during system maintenance. What should you do?
- A. Create an instance template for the instances.
Set the `Automatic Restart' to on. Set the `On-host maintenance' to Migrate VM instance.
Add the instance template to an intsance group. - B. Create an instance template for the instances.
`Automatic Restart' to off. Set `On-host maintenance' to Terminate VM instances.
Add the instance template to an instance group. - C. Create an instance group for the instance.
Verify that the `Advanced creation options' setting for `do not retry machine creation' is set to off. - D. Create an instance group for the instances.
Set the `Autohealing' health check to healthy (HTTP).
Answer: A
Explanation:
Configure an instance's maintenance behavior and automatic restart setting using the onHostMaintenance and automaticRestart properties. All instances are configured with default values unless you explicitly specify otherwise.
onHostMaintenance: Determines the behavior when a maintenance event occurs that might cause your instance to reboot.
[Default] migrate, which causes Compute Engine to live migrate an instance when there is a maintenance event.
terminate, which terminates an instance instead of migrating it.
NEW QUESTION # 62
You are hosting an application from Compute Engine virtual machines (VMs) in us-central1-a. You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?
- A. - Perform regular backups of your application.
-Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.
-Restore from backups when notified. - B. - Create an HTTP(S) Load Balancer.
-Create one or more global forwarding rules to direct traffic to your VMs. - C. - Create a Managed Instance Group and specify us-central1-a as the zone.
-Configure the Health Check with a short Health Interval. - D. - Create Compute Engine resources in us-central1-b.
-Balance the load across both us-central1-a and us-central1-b.
Answer: C
NEW QUESTION # 63
You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?
- A. Change the default region property setting in the existing GCP project to asia-northeast1.
- B. Create a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application.
- C. Change the region property setting in the existing App Engine application from us-central to asia-northeast1.
- D. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
Answer: B
Explanation:
https://cloud.google.com/appengine/docs/flexible/managing-projects-apps-billing#:~:text=Each%20Cloud%20pr Two App engine can't be running on the same project: you can check this easy diagram for more info:https://cloud.google.com/appengine/docs/standard/an-overview-of-app-engine#components_of_an_applicati And you can't change location after setting it for your app Engine.https://cloud.google.com/appengine/docs/standard/locations App Engine is regional and you cannot change an apps region after you set it. Therefore, the only way to have an app run in another region is by creating a new project and targeting the app engine to run in the required region (asia-northeast1 in our case).
Ref: https://cloud.google.com/appengine/docs/locations
NEW QUESTION # 64
You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?
- A. Create the instance with the default Compute Engine service account Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
- B. Create a new service account and assign this service account to the new instance Grant the service account permissions on Cloud Storage.
- C. Create the instance with the default Compute Engine service account Grant the service account permissions on Cloud Storage.
- D. Create a new service account and assign this service account to the new instance Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
Answer: A
Explanation:
https://cloud.google.com/iam/docs/best-practices-for-using-and-managing-service-accounts If an application uses third-party or custom identities and needs to access a resource, such as a BigQuery dataset or a Cloud Storage bucket, it must perform a transition between principals. Because Google Cloud APIs don't recognize third-party or custom identities, the application can't propagate the end-user's identity to BigQuery or Cloud Storage. Instead, the application has to perform the access by using a different Google identity.
NEW QUESTION # 65
You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?
- A. Change the default region property setting in the existing GCP project to asia-northeast1.
- B. Create a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application.
- C. Change the region property setting in the existing App Engine application from us-central to asia-northeast1.
- D. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
Answer: B
Explanation:
Explanation
https://cloud.google.com/appengine/docs/flexible/managing-projects-apps-billing#:~:text=Each%20Cloud%20pr Two App engine can't be running on the same project: you can check this easy diagram for more info:
https://cloud.google.com/appengine/docs/standard/an-overview-of-app-engine#components_of_an_application And you can't change location after setting it for your app Engine.
https://cloud.google.com/appengine/docs/standard/locations
App Engine is regional and you cannot change an apps region after you set it. Therefore, the only way to have an app run in another region is by creating a new project and targeting the app engine to run in the required region (asia-northeast1 in our case).
Ref: https://cloud.google.com/appengine/docs/locations
NEW QUESTION # 66
You need to create a Compute Engine instance in a new project that doesn't exist yet. What should you do?
- A. Using the Cloud SDK, create a new project, enable the Compute Engine API in that project, and then create the instance specifying your new project.
- B. Using the Cloud SDK, create the new instance, and use the -pproject flag to specify the new project.
Answer yes when prompted by Cloud SDK to enable the Compute Engine API. - C. Enable the Compute Engine API in the Cloud Console. Go to the Compute Engine section of the Console to create a new instance, and look for the Create In A New Project option in the creation form.
- D. Enable the Compute Engine API in the Cloud Console, use the Cloud SDK to create the instance, and then use the -pproject flag to specify a new project.
Answer: D
NEW QUESTION # 67
You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?
- A. Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
- B. Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
- C. Use Dataflow as a batch job, and configure the bucket as a data source.
- D. Use Cloud Functions and configure the bucket as a trigger resource.
Answer: B
NEW QUESTION # 68
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2-highmem-16 nodes without any downtime. What should you do?
- A. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- B. Use gcloud container clusters upgrade. Deploy the new services.
- C. Create a new cluster with n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- D. Create a new Node Pool and specify machine type n2-highmem-16. Deploy the new pods.
Answer: D
Explanation:
Explanation
https://cloud.google.com/kubernetes-engine/docs/concepts/deployment
NEW QUESTION # 69
Your company wants to standardize the creation and management of multiple Google Cloud resources using Infrastructure as Code. You want to minimize the amount of repetitive code needed to manage the environment What should you do?
- A. Develop templates for the environment using Cloud Deployment Manager
- B. Use the Cloud Console interface to provision and manage all related resources
- C. Use curl in a terminal to send a REST request to the relevant Google API for each individual resource.
- D. Create a bash script that contains all requirement steps as gcloud commands
Answer: A
NEW QUESTION # 70
......
Google Associate-Cloud-Engineer certification is an excellent opportunity for individuals who are looking to establish themselves as experts in the Google Cloud platform. With the right preparation and dedication, candidates can demonstrate their knowledge and expertise in using this platform to create innovative solutions for their clients.
Pass Google Associate-Cloud-Engineer Premium Files Test Engine pdf - Free Dumps Collection: https://pass4sure.testpdf.com/Associate-Cloud-Engineer-practice-test.html
