[Nov-2023] Google Associate-Cloud-Engineer Exam: Basic Questions With Answers
New 2023 Realistic Free Google Associate-Cloud-Engineer Exam Dump Questions and Answer
Google Associate Cloud Engineer certification exam is designed to test the candidate’s knowledge and skills in various areas of Google Cloud Platform, such as computing, storage, networking, security, and application development. Associate-Cloud-Engineer exam consists of multiple-choice questions and is administered online. Associate-Cloud-Engineer exam duration is two hours, and the candidate needs to score 70% or higher to pass the exam.
NEW QUESTION # 130
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2-highmem-16 nodes without any downtime. What should you do?
- A. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- B. Create a new cluster with n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- C. Create a new Node Pool and specify machine type n2-highmem-16. Deploy the new pods.
- D. Use gcloud container clusters upgrade. Deploy the new services.
Answer: C
Explanation:
Explanation
https://cloud.google.com/kubernetes-engine/docs/concepts/deployment
NEW QUESTION # 131
You need a dynamic way of provisioning VMs on Compute Engine. The exact specifications will be in a dedicated configuration file. You want to follow Google's recommended practices. Which method should you use?
- A. Unmanaged Instance Group
- B. Deployment Manager
- C. Cloud Composer
- D. Managed Instance Group
Answer: B
Explanation:
Explanation
https://cloud.google.com/deployment-manager/docs/configuration/create-basic-configuration
NEW QUESTION # 132
Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?
- A. Create a custom role by removing delete permissions, and add users to that role only.
- B. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.
- C. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.
- D. Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.
Answer: D
Explanation:
The proper answer regarding to bigquery roles is the listed in the options, the proper rol that resolve this requirement is: roles/bigquery.dataViewer
https://cloud.google.com/bigquery/docs/access-control#custom_roles
On the other hand, the question explicitly is asking to use the GCP best practices on IAM:
GCP Best Practices explain clearly these rules:
Policy management
- Set organization-level IAM policies to grant access to all projects in your organization.
- Grant roles to a Google group instead of individual users when possible. It is easier to add members to and remove members from a Google group instead of updating an IAM policy to add or remove users.
- If you need to grant multiple roles to allow a particular task, create a Google group, grant the roles to that group, and then add users to that group.
https://cloud.google.com/iam/docs/using-iam-securely#policy_management
NEW QUESTION # 133
Your company publishes large files on an Apache web server that runs on a Compute Engine instance. The Apache web server is not the only application running in the project. You want to receive an email when the egress network costs for the server exceed 100 dollars for the current month as measured by Google Cloud.
What should you do?
- A. Set up a budget alert on the billing account with an amount of 100 dollars, a threshold of 100%, and notification type of "email."
- B. Export the billing data to BigQuery. Create a Cloud Function that uses BigQuery to sum the egress network costs of the exported billing data for the Apache web server for the current month and sends an email if it is over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.
- C. Set up a budget alert on the project with an amount of 100 dollars, a threshold of 100%, and notification type of "email."
- D. Use the Cloud Logging Agent to export the Apache web server logs to Cloud Logging. Create a Cloud Function that uses BigQuery to parse the HTTP response log data in Cloud Logging for the current month and sends an email if the size of all HTTP responses, multiplied by current Google Cloud egress prices, totals over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.
Answer: C
Explanation:
Explanation
NEW QUESTION # 134
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account.
You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?
- A. Link the acquired company's projects to your company's billing account.
- B. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
- C. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
- D. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
Answer: A
Explanation:
Explanation
https://cloud.google.com/resource-manager/docs/project-migration#oauth_consent_screen
https://cloud.google.com/resource-manager/docs/project-migration
NEW QUESTION # 135
You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers' Pods. What should you do?
- A. Use the Container Analysis API to detect vulnerabilities in the containers used by your customers' Pods.
- B. Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google.com/gke-os-distribution: cos_containerd to the specification of your customers' Pods.
- C. Use Binary Authorization and whitelist only the container images used by your customers' Pods.
- D. Create a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customers' Pods.
Answer: D
Explanation:
Reference:
https://cloud.google.com/kubernetes-engine/sandbox/
NEW QUESTION # 136
Your team has created 4 projects, one for each distinct application. You have a single budget for all of these projects. What is the best way to pay for all of these projects?
- A. Use an invoiced account, which will pay for all projects inside a Google Cloud account.
- B. Use a single Billing Account linked to the Google Cloud account.
- C. Use a single Billing Account linked to all 4 projects.
- D. Create a Billing Account for each project.
Answer: C
NEW QUESTION # 137
Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?
- A. Create a new Compute Engine instance and install Jenkins through the command line interface.
- B. Use GCP Marketplace to launch the Jenkins solution.
- C. Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.
- D. Download and deploy the Jenkins Java WAR to App Engine Standard.
Answer: B
Explanation:
https://cloud.google.com/solutions/using-jenkins-for-distributed-builds-on-compute-engine
NEW QUESTION # 138
A website keeps a record of user actions using a globally unique identifier (GIUD) retrieved from Amazon Aurora in place of the user name within the audit record. Security protocols state that the GUID content must not leave the company's Amazon VPC.
As the web traffic has increased, the number of web servers and Aurora read replicas has also increased to keep up with the user record reads for the GUID.
What should be done to reduce the number of read replicas required while improving performance?
- A. Encrypt the GUID using Base64 and store it in the user's session cookie. Decrypt the GUID when an audit record is needed.
- B. Keep the user name and GUID in memory on the web server instance so that the association can be remade on demand. Remove the record after 30 minutes.
- C. Change the GUID to an MD5 hash of the user name, so that the value can be calculated on demand without referring to the database.
- D. Deploy a Amazon ElastiCache for Redis server into the infrastructure and store the user name and GUID there. Retrieve GUID from ElastiCache when required.
Answer: D
Explanation:
Explanation/Reference: https://aws.amazon.com/elasticache/redis/faqs/
NEW QUESTION # 139
You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection.
You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?
- A. Decrease the TCP window size on the machine initiating the transfer.
- B. Use the GCP Console to transfer the file instead of gsutil.
- C. Enable parallel composite uploads using gsutil on the file transfer.
- D. Change the storage class of the bucket from Nearline to Multi-Regional.
Answer: C
Explanation:
https://cloud.google.com/storage/docs/gsutil/commands/cp#parallel-composite-uploads_1 Warning: Parallel composite uploads should not be used with NEARLINE, COLDLINE, or ARCHIVE storage class buckets, because doing so incurs an early deletion charge for each component object.
Warning: Parallel composite uploads should not be used in buckets that have a retention policy, because the component pieces cannot be deleted until each has met the bucket's minimum retention period.
NEW QUESTION # 140
What is the gcloud command to set default zone for compute engine server using gcloud cli?
- A. gcloud config set compute/zone us-east1-a
- B. gcloud defaults set compute/zone us-east-1
- C. gcloud config configurations set compute/zone us-east-1a
- D. gcloud config set compute/zone us-east-1
Answer: A
Explanation:
The gcloud command to set default zone for compute engine is gcloud config set compute/zone us-east1-a.
NEW QUESTION # 141
You're attempting to remove the zone property from the Compute Engine service, that was set with the incorrect value. Which command would accomplish your task?
- A. gcloud config unset compute/zone
- B. gcloud config unset zone
- C. gcloud unset compute/zone
- D. gcloud config configurations unset compute/zone
Answer: A
NEW QUESTION # 142
A Solutions Architect must select the storage type for a big data application that requires very high sequential I/
O. The data must persist if the instance is stopped.
Which of the following storage types will provide the best fit at the LOWEST cost for the application?
- A. An Amazon EBS throughput optimized HDD volume.
- B. An Amazon EBS general purpose SSD volume.
- C. An Amazon EBS provisioned IOPS SSD volume.
- D. An Amazon EC2 instance store local SSD volume.
Answer: C
NEW QUESTION # 143
You have a single binary application that you want to run on Google Cloud Platform. You decided to automatically scale the application based on underlying infrastructure CPU usage. Your organizational policies require you to use virtual machines directly. You need to ensure that the application scaling is operationally efficient and completed as quickly as possible. What should you do?
- A. Create an instance template, and use the template in a managed instance group that scales up and down based on the time of day.
- B. Create an instance template, and use the template in a managed instance group with autoscaling configured.
- C. Use a set of third-party tools to build automation around scaling the application up and down, based on Stackdriver CPU usage monitoring.
- D. Create a Google Kubernetes Engine cluster, and use horizontal pod autoscaling to scale the application.
Answer: B
NEW QUESTION # 144
You have a virtual machine that is currently configured with 2 vCPUs and 4 GB of memory. It is running out of memory. You want to upgrade the virtual machine to have 8 GB of memory.
What should you do?
- A. Use gcloud to add metadata to the VM. Set the key to required-memory-sizeand the value to 8 GB.
- B. Stop the VM, change the machine type to n1-standard-8, and start the VM.
- C. Rely on live migration to move the workload to a machine with more memory.
- D. Stop the VM, increase the memory to 8 GB, and start the VM.
Answer: D
NEW QUESTION # 145
Your developers have been thoroughly logging everything that happens in the API. The API allows end users to request the data as JSON, XML, CSV, and XLS. Supporting all of these formats is taking a lot of developer effort. Management would like to start tracking which options are used over the next month. Without modifying the code, what's the fastest way to be able to report on this data at the end of the month?
- A. Create a log sink that filters for rows that mention the data format. Export that to BigQuery, and run a query at the end of the month.
- B. Export the logs to excel, and search for the different fields.
- C. Create a custom monitoring metric in code and edit the API code to set the metric each time the API is called.
- D. Create a custom counter logging metric that uses a regex to extract the data format into a label. At the end of the month, use the metric
viewer to see the group by the label.
Answer: B,D
NEW QUESTION # 146
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?
- A. Create a new VPC, and set up VPC peering with the existing VPC.
- B. Add an alias IP range to the subnet used by the GKE clusters.
- C. Create a new subnet in the same region as the subnet being used.
- D. Expand the CIDR range of the relevant subnet for the cluster.
Answer: A
Explanation:
To create a VPC peering connection, first create a request to peer with another VPC.
Reference: https://docs.aws.amazon.com/vpc/latest/peering/vpc-pg.pdf
NEW QUESTION # 147
After reviewing their logs, a startup company noticed large, random spikes in traffic to their web application.
The company wants to configure a cost-efficient Auto Scaling solution to support high availability of the web application.
Which scaling plan should a Solutions Architect recommend to meet the company's needs?
- A. Manual
- B. Lifecycle
- C. Dynamic
- D. Scheduled
Answer: C
NEW QUESTION # 148
You've found that your Linux server keeps running low on memory. It's currently using 8 Gigs of memory, and you want to increase it to 16. What is the simplest way to do that?
- A. Create a new instance with the correct amount of memory.
- B. Use the gcloud compute add-memory command to increase the memory.
- C. Use the Linux memincr command to increase the memory.
- D. Stop the instance and change the machine type.
Answer: C,D
NEW QUESTION # 149
......
Google Associate-Cloud-Engineer Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
Google Associate-Cloud-Engineer Certification Exam is a valuable credential for IT professionals who want to demonstrate their expertise in cloud computing and GCP technologies. Google Associate Cloud Engineer Exam certification can help you stand out in a competitive job market and increase your earning potential. By passing the exam, you will become a certified Google Associate Cloud Engineer, demonstrating to potential employers that you have the skills and knowledge needed to deploy and manage cloud-based solutions on Google Cloud Platform.
Guaranteed Success in Google Cloud Certified Associate-Cloud-Engineer Exam Dumps: https://www.braindumpsvce.com/Associate-Cloud-Engineer_exam-dumps-torrent.html
Associate-Cloud-Engineer Practice Test Engine: Try These 246 Exam Questions: https://drive.google.com/open?id=14icLEoQtGZBUTW9zDt1YGeKoiRiWVjTG