Test4Cram Associate-Cloud-Engineer Dumps PDF - 100% Passing Guarantee
Associate-Cloud-Engineer Braindumps Real Exam Updated on Feb 03, 2022 with 245 Questions
Exam highlights
The Google Associate Cloud Engineer certification exam is 2 hours long and covers mostly two question formats, which are multiple choice and multiple select. The applicants can take the test as an online proctored option (remotely) or as an onsite proctored exam at one of the centers across the world. You can go through the official website for details of the test-taking process. To register for this exam, the individuals must pay the fee of $125. This fee applies to a single try. If you do not pass your Google exam at the first attempt, you have to try again and pay another fee for registration. The test is available in the English, Spanish, Japanese, and Indonesian languages.
The Google Associate Cloud Engineer exam targets software engineers who would like to dabble into the Google Cloud. So, you need to be capable of using the command-line interfaces and Google Cloud Console to handle core platform-based tasks. These mostly include monitoring operations and managing enterprise solutions to maintain deployed applications. In addition, after successful writing of the test, candidates obtain the appropriate Google Cloud certification.
Conclusion
Taking the Google Associate Cloud Engineer exam is the perfect way to assess your abilities as well as enable and boost the skills you need to further your career. Besides, gaining a Google Cloud certification can help you stand out to hiring managers and unlock a variety of benefits from building a network with other professionals in the Google Cloud Certified community.
So, now that you know how the exam goes, all you have to do is make a decision and register. And after responsible preparation using the most current and proven materials, you'll have every chance to write the test with flying colors and get the desired certification.
NEW QUESTION 33
You are using multiple configurations for gcloud. You want to review the configured Kubernetes Engine cluster of an inactive configuration using the fewest possible steps. What should you do?
- A. Use gcloud config configurations describe to review the output.
- B. Use kubectl config get-contexts to review the output.
- C. Use kubectl config use-context and kubectl config view to review the output.
- D. Use gcloud config configurations activate and gcloud config list to review the output.
Answer: C
Explanation:
Reference:
https://medium.com/google-cloud/kubernetes-engine-kubectl-config-b6270d2b656c
NEW QUESTION 34
You're deploying an application to a Compute Engine instance, and it's going to need to make calls to read from Cloud Storage and Bigtable. You want to make sure you're following the principle of least privilege. What's the easiest way to ensure the code can authenticate to the required Google Cloud APIs?
- A. Create a new user account with the required roles. Store the credentials in Cloud Key Management Service and download them to the instance in code.
- B. Create a new service account and key with the required limited permissions. Set the instance to use the new service account. Edit the code to use the service account key.
- C. Use the default Compute Engine service account and set its scopes. Let the code find the default service account using "Application Default Credentials".
- D. Register the application with the Binary Registration Service and apply the required roles.
Answer: C
NEW QUESTION 35
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google- recommended practices to obtain the combined logs for all projects. What should you do?
- A. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
- B. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
- C. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.
- D. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
Answer: A
Explanation:
Explanation/Reference:
Reference: https://cloud.google.com/blog/products/gcp/best-practices-for-working-with-google-cloud-audit- logging
NEW QUESTION 36
You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions. You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?
- A. Create a separate billing account per sandbox project and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per billing account.
- B. Create a budget per project and configure budget alerts on all of these budgets.
- C. Create a single budget for all projects and configure budget alerts on this budget.
- D. Create a single billing account for all sandbox projects and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per project.
Answer: B
Explanation:
Reference:
https://cloud.google.com/billing/docs/how-to/budgets
NEW QUESTION 37
You have a workload running on Compute Engine that is critical to your business. You want to ensure that the data on the boot disk of this workload is backed up regularly. You need to be able to restore a backup as quickly as possible in case of disaster. You also want older backups to be cleaned automatically to save on cost. You want to follow Google-recommended practices. What should you do?
- A. Create a cron job to create a new disk from the disk using gcloud.
- B. Create a Cloud Task to create an image and export it to Cloud Storage.
- C. Create a Cloud Function to create an instance template.
- D. Create a snapshot schedule for the disk using the desired interval.
Answer: D
NEW QUESTION 38
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?
- A. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.
- B. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
- C. Migrate the workload to a Compute Engine Preemptible VM.
- D. Create an Instance Template with Preemptible VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.
Answer: B
Explanation:
Reference:
https://cloud.google.com/kubernetes-engine/docs/tutorials/migrating-node-pool
NEW QUESTION 39
You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?
- A. Create a new App Engine application in the same project. Deploy the new version in that application.
Use the App Engine library to proxy 1% of the requests to the new version. - B. Create a new App Engine application in the same project. Deploy the new version in that application.
Configure your network load balancer to send 1% of the traffic to that new application. - C. Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.
- D. Deploy the new version in the same application and use the --migrate option.
Answer: A
NEW QUESTION 40
Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?
- A. Add the group for the finance team to roles/billing project/Manager role.
- B. Add the group for the finance team to roles/billing admin role.
- C. Add the group for the finance team to roles/billing user role.
- D. Add the group for the finance team to roles/billing viewer role.
Answer: D
Explanation:
Billing Account Viewer access would usually be granted to finance teams, it provides access to spend information, but does not confer the right to link or unlink projects or otherwise manage the properties of the billing account.
https://cloud.google.com/billing/docs/how-to/billing-access
NEW QUESTION 41
You need to configure optimal data storage for files stored in Cloud Storage for minimal cost. The files are used in a mission-critical analytics pipeline that is used continually. The users are in Boston, MA (United States). What should you do?
- A. Configure regional storage for the region closest to the users.
Configure a Standard storage class - B. Configure dual-regional storage for the dual region closest to the users.
Configure a Nearline storage class - C. Configure dual-regional storage for the dual region closest to the users.
Configure a Standard storage class - D. Configure regional storage for the region closest to the users.
Configure a Nearline storage class
Answer: A
NEW QUESTION 42
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event.
You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?
- A. Use a custom mode VPC network, configure static routes, and use active/passive routing
- B. Use an automatic mode VPC network, configure static routes, and use active/active routing
- C. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
- D. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing
Answer: D
NEW QUESTION 43
You are performing a monthly security check of your Google Cloud environment and want to know who has access to view data stored in your Google Cloud Project. What should you?
- A. Review the IAM permissions for any role that allows for data access.
- B. Enable Audit Logs for all APIs that are related to data storage.
- C. Review the Identity-Aware Proxy settings for each resource.
- D. Create a Data Loss Prevention job.
Answer: A
Explanation:
Explanation/Reference: https://cloud.google.com/compute/docs/access
NEW QUESTION 44
You created a Google Cloud Platform project with an App Engine application inside the project.
You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?
- A. Change the default region property setting in the existing GCP project to asia-northeast1.
- B. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
- C. Change the region property setting in the existing App Engine application from us-central to asia- northeast1.
- D. Create a new GCP project and create an App Engine application inside this new project.
Specify asia-northeast1 as the region to serve your application.
Answer: D
Explanation:
https://cloud.google.com/appengine/docs/flexible/nodejs/an-overview-of-app-engine
NEW QUESTION 45
Your company developed a mobile game that is deployed on Google Cloud. Gamers are connecting to the game with their personal phones over the Internet. The game sends UDP packets to update the servers about the gamers' actions while they are playing in multiplayer mode. Your game backend can scale over multiple virtual machines (VMs), and you want to expose the VMs over a single IP address. What should you do?
- A. Configure an SSL Proxy load balancer in front of the application servers.
- B. Configure an Internal UDP load balancer in front of the application servers.
- C. Configure an External HTTP(s) load balancer in front of the application servers.
- D. Configure an External Network load balancer in front of the application servers.
Answer: A
Explanation:
Explanation/Reference: https://cloud.google.com/solutions/connecting-securely
NEW QUESTION 46
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project.
What should you do?
- A. Give "project owner" role to crm-databases-proj and the web-applications project.
- B. Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web-applications.
- C. Give "project owner" for web-applications appropriate roles to crm-databases- proj
- D. Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.
Answer: B
NEW QUESTION 47
You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application.
You want to follow Google-recommended practices. What should you do?
- A. 1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.
- B. 1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
- C. 1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
- D. 1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
Answer: C
NEW QUESTION 48
You need to set up a policy so that videos stored in a specific Cloud Storage Regional bucket are moved to Coldline after 90 days, and then deleted after one year from their creation. How should you set up the policy?
- A. Use gsutil rewrite and set the Delete action to 365 days.
- B. Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 275 days (365 - 90)
- C. Use gsutil rewrite and set the Delete action to 275 days (365-90).
- D. Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 365 days.
Answer: B
NEW QUESTION 49
You built an application on your development laptop that uses Google Cloud services. Your application uses Application Default Credentials for authentication and works fine on your development laptop. You want to migrate this application to a Compute Engine virtual machine (VM) and set up authentication using Google- recommended practices and minimal changes. What should you do?
- A. Assign appropriate access for Google services to the service account used by the Compute Engine VM.
- B. Store credentials for your user account with appropriate access for Google services in a config file, and deploy this config file with your application.
- C. Store credentials for service accounts with appropriate access for Google services in a config file, and deploy this config file with your application.
- D. Create a service account with appropriate access for Google services, and configure the application to use this account.
Answer: D
NEW QUESTION 50
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?
- A. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
- B. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
- C. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- D. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
Answer: C
NEW QUESTION 51
A cloud engineer has been assigned to work on a running project. He wants to know which VMs are running in the project. How could the cloud engineer get the information of the all VMs running in the project?
- A. Execute the command gcloud instances list
- B. Execute the command gcloud compute list
- C. Execute the command gcloud list instances
- D. Execute the command gcloud compute instances list
Answer: D
NEW QUESTION 52
Your developers are trying to connect to an Ubuntu server over SSH to diagnose some errors. However, the connection times out. Which command should help solve the problem?
- A. gcloud compute firewall-rules create "open-ssh"
- B. gcloud compute firewall-rules create "open-ssh" --network $NETWORK --allow tcp:3389
- C. gcloud compute firewall-rules create "open-ssh" --network $NETWORK --deny tcp:22
- D. gcloud compute firewall-rules create "open-ssh" --network $NETWORK --allow tcp:22
Answer: D
NEW QUESTION 53
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google- recommended practices to obtain the combined logs for all projects. What should you do?
- A. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
- B. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
- C. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.
- D. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
Answer: A
NEW QUESTION 54
You have a Cloud Storage bucket that needs to host static web assets. How do you make the bucket public?
- A. gsutil make-public gs://bucket-name
- B. Check the "make public" box in the UI.
- C. Trick question. Don't ever make a bucket public.
- D. Set allUsers to have the Storage Object Viewer role.
Answer: D
NEW QUESTION 55
You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?
- A. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.
- B. Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.
- C. Use gcloud to create a key file for the service account that has appropriate permissions.
- D. Use service account credentials in your on-premises application.
Answer: C
Explanation:
Reference:
https://cloud.google.com/vision/automl/docs/before-you-begin
NEW QUESTION 56
You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?
- A. Cloud Firestore
- B. Cloud SQL
- C. Cloud Datastore
- D. Cloud Spanner
Answer: D
NEW QUESTION 57
......
Associate-Cloud-Engineer Dumps With 100% Verified Q&As - Pass Guarantee or Full Refund: https://www.test4cram.com/Associate-Cloud-Engineer_real-exam-dumps.html
Latest Associate-Cloud-Engineer PDF Dumps & Real Tests Free Updated Today: https://drive.google.com/open?id=1oJaToy5Di2Y_BCbf5TYtZInR1Kn9SJAg