Update Associate-Cloud-Engineer Braindump For Google Cloud Certified - Associate Cloud Engineer Certification

NEW QUESTION 1
You need to configure optimal data storage for files stored in Cloud Storage for minimal cost. The files are used in a mission-critical analytics pipeline that is used continually. The users are in Boston, MA (United States). What should you do?

• A. Configure regional storage for the region closest to the users Configure a Nearline storage class
• B. Configure regional storage for the region closest to the users Configure a Standard storage class
• C. Configure dual-regional storage for the dual region closest to the users Configure a Nearline storage class
• D. Configure dual-regional storage for the dual region closest to the users Configure a Standard storage class

Answer: B

NEW QUESTION 2
You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re-creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?

• A. Create an HTTP load balancer with a backend configuration that references an existing instance group.Set the health check to healthy (HTTP).
• B. Create an HTTP load balancer with a backend configuration that references an existing instance group.Define a balancing mode and set the maximum RPS to 10.
• C. Create a managed instance grou
• D. Set the Autohealing health check to healthy (HTTP).
• E. Create a managed instance grou
• F. Verify that the autoscaling setting is on.

Answer: A

NEW QUESTION 3
You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?

• A. Export Cloud Datastore data using gcloud datastore export.
• B. Create a Cloud Datastore index using gcloud datastore indexes create.
• C. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.
• D. Install the cloud-datastore-emulator component using the gcloud components install command.

Answer: D

NEW QUESTION 4
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

• A. Use gcloud iam roles copy and specify the production project as the destination project.
• B. Use gcloud iam roles copy and specify your organization as the destination organization.
• C. In the Google Cloud Platform Console, use the ‘create role from role’ functionality.
• D. In the Google Cloud Platform Console, use the ‘create role’ functionality and select all applicable permissions.

Answer: B

NEW QUESTION 5
You are creating a Google Kubernetes Engine (GKE) cluster with a cluster autoscaler feature enabled. You need to make sure that each node of the cluster will run a monitoring pod that sends container metrics to a third-party monitoring solution. What should you do?

• A. Deploy the monitoring pod in a StatefulSet object.
• B. Deploy the monitoring pod in a DaemonSet object.
• C. Reference the monitoring pod in a Deployment object.
• D. Reference the monitoring pod in a cluster initializer at the GKE cluster creation time.

Answer: B

NEW QUESTION 6
You need to add a group of new users to Cloud Identity. Some of the users already have existing Google accounts. You want to follow one of Google's recommended practices and avoid conflicting accounts. What should you do?

• A. Invite the user to transfer their existing account
• B. Invite the user to use an email alias to resolve the conflict
• C. Tell the user that they must delete their existing account
• D. Tell the user to remove all personal email from the existing account

Answer: B

NEW QUESTION 7
You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

• A. Create a health check on port 443 and use that when creating the Managed Instance Group.
• B. Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
• C. In the Instance Template, add the label ‘health-check’.
• D. In the Instance Template, add a startup script that sends a heartbeat to the metadata server.

Answer: C

NEW QUESTION 8
You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?

• A. Create the instance with the default Compute Engine service account Grant the service account permissions on Cloud Storage.
• B. Create the instance with the default Compute Engine service account Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
• C. Create a new service account and assign this service account to the new instance Grant the service account permissions on Cloud Storage.
• D. Create a new service account and assign this service account to the new instance Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.

Answer: C

NEW QUESTION 9
You need to set up a policy so that videos stored in a specific Cloud Storage Regional bucket are moved to Coldline after 90 days, and then deleted after one year from their creation. How should you set up the policy?

• A. Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass andDelete action
• B. Set the SetStorageClass action to 90 days and the Delete action to 275 days (365 – 90)
• C. Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete action
• D. Set the SetStorageClass action to 90 days and the Delete action to 365 days.
• E. Use gsutil rewrite and set the Delete action to 275 days (365-90).
• F. Use gsutil rewrite and set the Delete action to 365 days.

Answer: A

NEW QUESTION 10
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?

• A. Enable node auto-provisioning on the GKE cluster.
• B. Create a VerticalPodAutscaler for those workloads.
• C. Create a node pool with preemptible VMs and GPUs attached to those VMs.
• D. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.

Answer: C

NEW QUESTION 11
Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?

• A. Add your SREs to roles/iam.roleAdmin role.
• B. Add your SREs to roles/accessapproval approver role.
• C. Add your SREs to a group and then add this group to roles/iam roleAdmin role.
• D. Add your SREs to a group and then add this group to roles/accessapproval approver role.

Answer: A

NEW QUESTION 12
You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide the application with access to Cloud Storage. What should you do?

• A. 1. Use nslookup to get the IP address for storage.googleapis.com.2. Negotiate with the security team to be able to give a public IP address to the servers.3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.
• B. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.3. Configure your servers to use that instance as a proxy to access Cloud Storage.
• C. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.3. Configure your new instances to use this ILB as proxy.
• D. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.3. In your on-premises network, configure your DNS server to resolve*.googleapis.com as a CNAME to restricted.googleapis.com.

Answer: D

NEW QUESTION 13
You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic. You want to ensure that the available capacity does not decrease during the deployment. What should you do?

• A. Perform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.
• B. Perform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0.
• C. Create a new managed instance group with an updated instance templat
• D. Add the group to the backend service for the load balance
• E. When all instances in the new managed instance group are healthy, delete the old managed instance group.
• F. Create a new instance template with the new application versio
• G. Update the existing managed instance group with the new instance templat
• H. Delete the instances in the managed instance group to allow the managed instance group to recreate the instance using the new instance template.

Answer: B

NEW QUESTION 14
Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company’s SSO provider. What should you do?

• A. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
• B. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
• C. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.
• D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.

Answer: C

NEW QUESTION 15
You manage three Google Cloud projects with the Cloud Monitoring API enabled. You want to follow Google-recommended practices to visualize CPU and network metrics for all three projects together. What should you do?

• A. * 1. Create a Cloud Monitoring Dashboard* 2. Collect metrics and publish them into the Pub/Sub topics 3. Add CPU and network Charts (or each of (he three projects
• B. * 1. Create a Cloud Monitoring Dashboard.* 2. Select the CPU and Network metrics from the three projects.* 3. Add CPU and network Charts lot each of the three protects.
• C. * 1 Create a Service Account and apply roles/viewer on the three projects* 2. Collect metrics and publish them lo the Cloud Monitoring API* 3. Add CPU and network Charts for each of the three projects.
• D. * 1. Create a fourth Google Cloud project* 2 Create a Cloud Workspace from the fourth project and add the other three projects

Answer: B

NEW QUESTION 16
You are managing a Data Warehouse on BigQuery. An external auditor will review your company's processes, and multiple external consultants will need view access to the data. You need to provide them with view access while following Google-recommended practices. What should you do?

• A. Grant each individual external consultant the role of BigQuery Editor
• B. Grant each individual external consultant the role of BigQuery Viewer
• C. Create a Google Group that contains the consultants and grant the group the role of BigQuery Editor
• D. Create a Google Group that contains the consultants, and grant the group the role of BigQuery Viewer

Answer: D

NEW QUESTION 17
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

• A. Enable the Node Auto-Repair feature for your GKE cluster.
• B. Enable the Node Auto-Upgrades feature for your GKE cluster.
• C. Select the latest available cluster version for your GKE cluster.
• D. Select “Container-Optimized OS (cos)” as a node image for your GKE cluster.

Answer: B

NEW QUESTION 18
......