100% Passing Guarantee - Brilliant Associate-Cloud-Engineer Exam Questions PDF [Aug-2023]
Associate-Cloud-Engineer Dumps 2023 - NewGoogle Associate-Cloud-Engineer Exam Questions
Google Associate Cloud Engineer Exam is a certification that validates the skills of an individual to work effectively as a cloud engineer on the Google Cloud Platform. Associate-Cloud-Engineer exam is intended for individuals who have a good understanding of cloud computing concepts and are familiar with the tools and services offered by the Google Cloud Platform. Google Associate Cloud Engineer Exam certification exam evaluates the candidate's knowledge on various topics such as computing, networking, storage, security, and deployment.
Achieving the Google Associate Cloud Engineer Certification demonstrates your credibility and proficiency in managing and deploying applications on Google Cloud Platform. Google Associate Cloud Engineer Exam certification is recognized globally and can help you stand out in the job market, increase your earning potential, and advance your career in cloud computing.
NEW QUESTION # 72
Your boss has asked you to onboard a new user and provide them with access to their team's project. What set of steps best describes what needs to happen?
- A. Add the user inside of G Suite, add them as a member of the project, and grant them the required roles.
- B. Add them as a member of the project, grant them the required roles, and sync the user back to G Suite.
- C. Add the user inside of G Suite; sync from G Suite to the Active Directory using the Directory Sync util; add them as a member and grant them the required roles.
- D. Add the user inside of G Suite, create a user group, and add them to that user group.
Answer: A,B
NEW QUESTION # 73
You have one project called proj-sawhere you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm.
What should you do?
- A. Download the private key from the service account, and add it to each VMs custom metadata.
- B. Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
- C. Download the private key from the service account, and add the private key to each VM's SSH keys.
- D. When creating the VMs, set the service account's API scope for Compute Engine to read/write.
Answer: B
NEW QUESTION # 74
Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?
- A. Assign the appropriate permissions, and the use Cloud Monitoring to review metrics.
- B. Assign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs.
- C. Turn on Data Access Logs for the buckets they want to audit, and then build a query in the log viewer that filters on Cloud Storage.
- D. Use the export logs API to provide the Admin Activity Audit Logs in the format they want.
Answer: D
Explanation:
https://cloud.google.com/storage/docs/audit-logging
NEW QUESTION # 75
Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the data. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?
- A. Upload the data to BigQuery using the bqcommand line tool.
- B. Upload the data into Cloud Spanner using the import function in the console.
- C. Upload the data into Cloud SQL using the import function in the console.
- D. Upload the data to Cloud Storage using the gsutilcommand line tool.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/solutions/performing-etl-from-relational-database-into-bigquery
NEW QUESTION # 76
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?
- A. Enable block project wide keysfor the instance. Generate an SSH key for each user in the dev1 group. Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
- B. Enable block project wide keysfor the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.
- C. Set metadata to enable-oslogin=truefor the instance. Grant the dev1 group the compute.osLoginrole. Direct them to use the Cloud Shell to ssh to that instance.
- D. Set metadata to enable-oslogin=truefor the instance. Set the service account to no service accountfor that instance. Direct them to use the Cloud Shell to ssh to that instance.
Answer: C
Explanation:
You can grant roles/compute.osLogin instance access roles at the instance level by using the gcloud compute instances add-iam-policy-binding command.
https://cloud.google.com/compute/docs/instances/managing-instance-access#grant-iam-roles
NEW QUESTION # 77
You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?
- A. Open the Cloud Spanner console to review configurations.
- B. Open the IAM & admin console to review IAM policies for Cloud Spanner roles.
- C. Go to the Stackdriver Monitoring console and review information for Cloud Spanner.
- D. Go to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.
Answer: D
NEW QUESTION # 78
You need to create a copy of a custom Compute Engine virtual machine (VM) to facilitate an expected increase in application traffic due to a business acquisition. What should you do?
- A. Create a custom Compute Engine image from a snapshot. Create your images from that image.
- B. Create a custom Compute Engine image from a snapshot. Create your instances from that image.
:
A custom image belongs only to your project. To create an instance with a custom image, you must first have a custom image. - C. Create a Compute Engine snapshot of your base VM. Create your images from that snapshot.
- D. Create a Compute Engine snapshot of your base VM. Create your instances from that snapshot.
Answer: B
Explanation:
Reference:
https://cloud.google.com/compute/docs/instances/create-start-instance
NEW QUESTION # 79
You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?
- A. Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
- B. Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
- C. Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.
- D. Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
Answer: C
NEW QUESTION # 80
Your company has hired a third-party analytics company to help find patterns in user dat
a. Your development team has generated a file containing only the data they've requested; which includes personally identifiable information.
What is the best way to share the data with the other company?
- A. Send the file through email.
- B. Put the data on Cloud Storage in a public bucket and securely share the URL.
- C. Create a new user for the company and grant them access to the original data source for them to query.
- D. Put the data on Cloud Storage and generate a signed URL that will expire in one hour, and securely share the URL.
Answer: A,D
NEW QUESTION # 81
You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?
- A. Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to BETA while testing the role permissions.
- B. Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
- C. Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
- D. Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to BETA while testing the role permissions.
Answer: C
Explanation:
When setting support levels for permissions in custom roles, you can set to one of SUPPORTED, TESTING or NOT_SUPPORTED.
Ref: https://cloud.google.com/iam/docs/custom-roles-permissions-support
NEW QUESTION # 82
You have a Kubernetes cluster with 1 node-pool. The cluster receives a lot of traffic and needs to grow. You decide to add a node. What should you do?
- A. Edit the managed instance group of the cluster and enable autoscaling.
- B. Edit the managed instance group of the cluster and increase the number of VMs by 1.
- C. Use "kubectl container clusters resize" with the desired number of nodes.
- D. Use "gcloud container clusters resize" with the desired number of nodes.
Answer: D
Explanation:
A is correct because this resizes the cluster to the desired number of nodes.
B is not correct because you need to use gcloud, not kubectl.
C is not correct because you should not manually manage the MIG behind a cluster.
D is not correct because you should not manually manage the MIG behind a cluster.
NEW QUESTION # 83
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?
- A. Expand the CIDR range of the relevant subnet for the cluster.
:
To create a VPC peering connection, first create a request to peer with another VPC. - B. Create a new VPC, and set up VPC peering with the existing VPC.
- C. Create a new subnet in the same region as the subnet being used.
- D. Add an alias IP range to the subnet used by the GKE clusters.
Answer: B
Explanation:
Reference:
https://docs.aws.amazon.com/vpc/latest/peering/vpc-pg.pdf
NEW QUESTION # 84
You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?
- A. Run a select count (*) to get an idea of how many records your query will look through.
Then convert that number of rows to dollars using the Pricing Calculator. - B. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
- C. Use the command line to run a dry run query to estimate the number of bytes returned.
Then convert that bytes estimate to dollars using the Pricing Calculator. - D. Use the command line to run a dry run query to estimate the number of bytes read.
Then convert that bytes estimate to dollars using the Pricing Calculator.
Answer: D
NEW QUESTION # 85
Your projects incurred more costs than you expected last month. Your research reveals that a development GKE container emitted a huge number of logs, which resulted in higher costs. You want to disable the logs quickly using the minimum number of steps. What should you do?
- A. 1. Go to the GKE console, and delete existing clusters.2. Recreate a new cluster.3. Clear the option to enable legacy Stackdriver Logging.
- B. 1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE container resource.
- C. 1. Go to the GKE console, and delete existing clusters.2. Recreate a new cluster.3. Clear the option to enable legacy Stackdriver Monitoring.
- D. 1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE Cluster Operations resource.
Answer: B
Explanation:
https://cloud.google.com/logging/docs/api/v2/resource-list
GKE Containers have more log than GKE Cluster Operations:
.-GKE Containe:
cluster_name: An immutable name for the cluster the container is running in.
namespace_id: Immutable ID of the cluster namespace the container is running in.
instance_id: Immutable ID of the GCE instance the container is running in.
pod_id: Immutable ID of the pod the container is running in.
container_name: Immutable name of the container.
zone: The GCE zone in which the instance is running.
VS
.-GKE Cluster Operations
project_id: The identifier of the GCP project associated with this resource, such as "my-project".
cluster_name: The name of the GKE Cluster.
location: The location in which the GKE Cluster is running.
NEW QUESTION # 86
You are creating a Google Kubernetes Engine (GKE) cluster with a cluster autoscaler feature enabled. You need to make sure that each node of the cluster will run a monitoring pod that sends container metrics to a third-party monitoring solution. What should you do?
- A. Reference the monitoring pod in a Deployment object.
- B. Reference the monitoring pod in a cluster initializer at the GKE cluster creation time.
- C. Deploy the monitoring pod in a DaemonSet object.
- D. Deploy the monitoring pod in a StatefulSet object.
Answer: C
NEW QUESTION # 87
You're attempting to deploy a new instance that uses the centos 7 family. You can't recall the exact name of the family. Which command could you use to determine the family names?
- A. gcloud compute instances list
- B. gcloud compute images show-families
- C. gcloud compute instances show-families
- D. gcloud compute images list
Answer: B,D
NEW QUESTION # 88
You need to verify that a Google Cloud Platform service account was created at a particular time. What should you do?
- A. Filter the Activity log to view the Data Access category. Filter the Resource type to Google Project.
- B. Filter the Activity log to view the Data Access category. Filter the Resource type to Service Account.
- C. Filter the Activity log to view the Configuration category. Filter the Resource type to Service Account.
- D. Filter the Activity log to view the Configuration category. Filter the Resource type to Google Project.
Answer: A
NEW QUESTION # 89
You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?
- A. Use Cloud Functions and configure the bucket as a trigger resource.
- B. Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
- C. Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
- D. Use Dataflow as a batch job, and configure the bucket as a data source.
Answer: A
Explanation:
Google Cloud Storage Triggers
Cloud Functions can respond to change notifications emerging from Google Cloud Storage. These notifications can be configured to trigger in response to various events inside a bucket-object creation, deletion, archiving and metadata updates.
Note: Cloud Functions can only be triggered by Cloud Storage buckets in the same Google Cloud Platform project.
Event types
Cloud Storage events used by Cloud Functions are based on Cloud Pub/Sub Notifications for Google Cloud Storage and can be configured in a similar way.
Supported trigger type values are:
google.storage.object.finalize
google.storage.object.delete
google.storage.object.archive
google.storage.object.metadataUpdate
Object Finalize
Trigger type value: google.storage.object.finalize
This event is sent when a new object is created (or an existing object is overwritten, and a new generation of that object is created) in the bucket.
https://cloud.google.com/functions/docs/calling/storage#event_types
NEW QUESTION # 90
You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs.
What should you do?
- A. Increase the allocated CPU to the instance.
- B. Increase the size of the disk to 1 TB.
- C. Migrate to use a Regional SSD on the instance.
- D. Migrate to use a Local SSD on the instance.
Answer: D
NEW QUESTION # 91
You need to select and configure compute resources for a set of batch processing jobs. These jobs take around 2 hours to complete and are run nightly. You want to minimize service costs. What should you do?
- A. Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.
- B. Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.
- C. Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
- D. Select Compute Engine. Use VM instance types that support micro bursting.
Answer: C
NEW QUESTION # 92
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application.
You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce- , that has no overlapping IP ranges with the first VPC. This instance needs to connect to the network application on GKE. You want to minimize effort. What should you do?
- A. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.
2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.
3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.
4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint. - B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created. - C. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal
3. Peer the two VPCs together.
4. Configure the Compute Engine instance to use the address of the load balancer that has been created. - D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Set the service's externalTrafficPolicy to Cluster.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
Answer: D
NEW QUESTION # 93
You manage three Google Cloud projects with the Cloud Monitoring API enabled. You want to follow Google-recommended practices to visualize CPU and network metrics for all three projects together. What should you do?
- A. 1. Create a fourth Google Cloud project
2. Create a Cloud Workspace from the fourth project and add the other three projects - B. 1. Create a Cloud Monitoring Dashboard.
2. Select the CPU and Network metrics from the three projects.
3. Add CPU and network Charts lot each of the three protects. - C. 1 Create a Service Account and apply roles/viewer on the three projects
2. Collect metrics and publish them lo the Cloud Monitoring API
3. Add CPU and network Charts for each of the three projects. - D. 1. Create a Cloud Monitoring Dashboard
2. Collect metrics and publish them into the Pub/Sub topics
3. Add CPU and network Charts (or each of (he three projects
Answer: B
NEW QUESTION # 94
You deployed an App Engine application using gcloud app deploy, but it did not deploy to the intended project. You want to find out why this happened and where the application deployed. What should you do?
- A. Go to Cloud Shell and run gcloud config list to review the Google Cloud configuration used for deployment.
- B. Check the web-application.xml file for your application and check project settings.
- C. Go to Deployment Manager and review settings for deployment of applications.
- D. Check the app.yaml file for your application and check project settings.
Answer: A
Explanation:
C:\GCP\appeng>gcloud config list
[core]
account = [email protected]
disable_usage_reporting = False
project = my-first-demo-xxxx
https://cloud.google.com/endpoints/docs/openapi/troubleshoot-gce-deployment
NEW QUESTION # 95
......
Free Associate-Cloud-Engineer braindumps download: https://www.troytecdumps.com/Associate-Cloud-Engineer-troytec-exam-dumps.html
Associate-Cloud-Engineer Dumps for Pass Guaranteed - Pass Associate-Cloud-Engineer Exam: https://drive.google.com/open?id=10FsM5UYKyGTankdWXraPyJyOsHffwi9N