Updated Nov-2021 Pass Associate-Cloud-Engineer Exam - Real Practice Test Questions
Download Free Google Associate-Cloud-Engineer Real Exam Questions
Below is the Associate Cloud Engineer Exam Format
Format: Multiple choices, multiple answers
- Length of Examination: 2 Hours
- Passing score: 80%
- Number of Questions: 50
- Language: English, Japanese, Spanish, Portuguese, French, German, and Indonesian.
Planning & Configuring Cloud Solutions
- Plan and estimate the GCP product use with Pricing Calculator;
- Plan and configure data storage options with a focus on product choice and selecting storage options;
- Plan and configure network resources, which include distinguishing load balancing alternatives, configuring the Cloud DNS, establishing resource locations within a network for its availability.
- Plan and configure compute resources with specific skills in choosing the relevant compute choices for a specific workload as well as utilizing preemptible virtual machines and custom machine types as relevant;
NEW QUESTION 43
You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?
- A. Assign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy.
- B. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Perform the export of logs to Cloud Storage.
- C. Assign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.
- D. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Direct the auditor to also review the logs for changes to Cloud IAM policy.
Answer: B
NEW QUESTION 44
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?
- A. Enable node auto-provisioning on the GKE cluster.
- B. Create a node pool with preemptible VMs and GPUs attached to those VMs.
- C. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
- D. Create a VerticalPodAutscaler for those workloads.
Answer: B
NEW QUESTION 45
A media company asked a Solutions Architect to design a highly available storage solution to serve as a centralized document store for their Amazon EC2 instances. The storage solution needs to be POSIX- compliant, scale dynamically, and be able to serve up to 100 concurrent EC2 instances.
Which solution meets these requirements?
- A. Create an Amazon EBS volume and allow multiple users to mount that volume to their EC2 instance(s).
- B. Create an Amazon S3 bucket and store all of the documents in this bucket.
- C. Use Amazon Glacier to store all of the documents.
- D. Create an Amazon Elastic File System (Amazon EFS) to store and share the documents.
Answer: D
Explanation:
Explanation/Reference:
Reference https://aws.amazon.com/efs/enterprise-applications/
NEW QUESTION 46
You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?
- A. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.
- B. Use service account credentials in your on-premises application.
- C. Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.
- D. Use gcloud to create a key file for the service account that has appropriate permissions.
Answer: D
Explanation:
https://cloud.google.com/vision/automl/docs/before-you-begin
NEW QUESTION 47
Your organization uses Active Directory (AD) to manage user identities. Each user uses this identity for federated access to various on-premises systems. Your security team has adopted a policy that requires users to log into Google Cloud with their AD identity instead of their own login. You want to follow the Google-recommended practices to implement this policy. What should you do?
- A. Sync identities with 3rd party LDAP sync, and then copy passwords to allow simplified login with (he same credentials
- B. Sync identities with Cloud Directory Sync, and then copy passwords to allow simplified login with the same credentials.
- C. Sync Identities in the Google Admin console, and then enable Oauth for single sign-on
- D. Sync Identities with Cloud Directory Sync, and then enable SAML for single sign-on
Answer: D
NEW QUESTION 48
You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP.
You want to make sure it is reachable by clients over that port. What should you do?
- A. Add a network tag of your choice to the instance running the LDAP server. Create a firewall rule to allow egress on UDP port 636 for that network tag.
- B. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port
636 for that network tag. - C. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.
- D. Add the network tag allow-udp-636 to the VM instance running the LDAP server.
Answer: B
NEW QUESTION 49
You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide the application with access to Cloud Storage. What should you do?
- A. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.3. Configure your servers to use that instance as a proxy to access Cloud Storage.
- B. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com.
- C. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.3. Configure your new instances to use this ILB as proxy.
- D. 1. Use nslookup to get the IP address for storage.googleapis.com.2. Negotiate with the security team to be able to give a public IP address to the servers.3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.
Answer: B
NEW QUESTION 50
Your company's infrastructure is on-premises, but all machines are running at maximum capacity. You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?
- A. Create bastion hosts both in your on-premises environment and on Google Cloud. Configure both as proxy servers using their public IP addresses.
- B. In Google Cloud, configure the VPC for VPC Network Peering.
- C. In Google Cloud, configure the VPC as a host for Shared VPC.
- D. Set up Cloud VPN between the infrastructure on-premises and Google Cloud.
Answer: B
NEW QUESTION 51
You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?
- A. Configure an internal TCP load balancer.
- B. Configure an external SSL proxy load balancer.
- C. Configure an external TCP proxy load balancer.
- D. Configure an HTTP(S) load balancer.
Answer: D
Explanation:
For HTTP(s) Load balancer, the client SSL session terminates at the load balancer.
NEW QUESTION 52
You have created an application that is packaged into a Docker image. You want to deploy the Docker image as a workload on Google Kubernetes Engine. What should you do?
- A. Upload the image to Container Registry and create a Kubernetes Service referencing the image.
- B. Upload the image to Cloud Storage and create a Kubernetes Deployment referencing the image
- C. Upload the image to Container Registry and create a Kubernetes Deployment referencing the mage
- D. Upload the image to Cloud Storage and create a Kubernetes Service referencing the image
Answer: A
NEW QUESTION 53
You have a project using BigQuery. You want to list all BigQuery jobs for that project. You want to set this project as the default for the bq command-line tool. What should you do?
- A. Use "bq config set project" to set the default project.
- B. Use "bq generate config-url" to generate a URL to the Google Cloud Platform Console to set the default project.
- C. Use "gcloud config set project" to set the default project.
- D. Use "gcloud generate config-url" to generate a URL to the Google Cloud Platform Console to set the default project.
Answer: C
Explanation:
A is correct because you need to use gcloud to manage the config/defaults.
B is not correct because the bq command-line tool assumes the gcloud configuration settings and can't be set through BigQuery.
C is not correct because entering this command will not achieve the desired result and will generate an error.
D is not correct because entering this command will not achieve the desired result and will generate an error.
https://cloud.google.com/bigquery/docs/reference/bq-cli-reference
https://cloud.google.com/sdk/gcloud/reference/config/set
NEW QUESTION 54
You are asked to set up application performance monitoring on Google Cloud projects A, B, and C as a single pane of glass. You want to monitor CPU, memory, and disk. What should you do?
- A. Enable API, create a workspace under project A, and then add project B and C.
- B. Enable API and then share charts from project A, B, and C.
- C. Enable API and then give the metrics.reader role to projects A, B, and C.
- D. Enable API and then use default dashboards to view all projects in sequence.
Answer: A
NEW QUESTION 55
Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization.
What should you do?
- A. Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.
- B. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
- C. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
- D. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
Answer: D
Explanation:
https://cloud.google.com/solutions/federating-gcp-with-active-directory-introduction
NEW QUESTION 56
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?
- A. Enable block project wide keysfor the instance. Generate an SSH key for each user in the dev1 group. Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
- B. Enable block project wide keysfor the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.
- C. Set metadata to enable-oslogin=truefor the instance. Grant the dev1 group the compute.osLoginrole. Direct them to use the Cloud Shell to ssh to that instance.
- D. Set metadata to enable-oslogin=truefor the instance. Set the service account to no service accountfor that instance. Direct them to use the Cloud Shell to ssh to that instance.
Answer: C
NEW QUESTION 57
You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?
- A. Change the region property setting in the existing App Engine application from us-central to asia-northeast1.
- B. Create a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application.
- C. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
- D. Change the default region property setting in the existing GCP project to asia-northeast1.
Answer: C
NEW QUESTION 58
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google- recommended practices to obtain the combined logs for all projects. What should you do?
- A. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
- B. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
- C. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.
- D. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
Answer: D
Explanation:
Reference:
https://cloud.google.com/blog/products/gcp/best-practices-for-working-with-google-cloud-audit- logging
NEW QUESTION 59
......
How can you get ready for Associate Cloud Engineer Certification Exam
There is a study guide for Associate Cloud Engineer Certification Exam
Here is our instant guide if you don’t have time to read all the page
This exam is well recognized as Associate Cloud Engineer, like all examinations, Google has some freedom to examine a variety of topics. This means that most of the contents of Associate Cloud Engineer are necessary as they perform random tests on the many available topics. Also keep in mind that experience conditions often exist because they observed the average person and what is needed. You can always go further to succeed with the Associate Cloud Engineer, but it can take some extra effort. The exam objectives are strange for each exam and are usually provided by the certification provider. These normally indicate to the candidate which subjects are relevant, what he should know and why the exam tries to cover these subjects. It is necessary to find them out for your precise exam. This can be found on almost all provider websites and reports a lot like studies. Staying focused on studying can be difficult, but take it in mind that the best jobs in the world are only several tests away. Regardless of whether you enter cybersecurity or do a basic level technical job, certification is a clear, learning and rewarding path for careers that pay a LOT of money. They offer a better balance between professional and private life and can get in touch with some of the leaders in the business world. The Google Associate Cloud Engineer certification exam is of paramount importance both in professional life and in the Google certification process. With Google certification, you can easily get a good job in the market and move towards success. Specialists who have successfully finished the Google Associate Cloud Engineer exam preparation are the absolute favorites in the industry. You will pass the Google Associate Cloud Engineer certification exam and have career chances. In this advanced age, getting an excellent Google certification exam has become more necessary for Google specialists. If we examine the world of IT credentials, we will find many certified exams, but the truth is that Google Associate Cloud Engineer certification is above all the credentials available in the IT profession. The Google certification is one of the best ways to increase value in the IT world. You want to know why? The Associate Cloud Engineer exam module was recently presented by Google and has attracted the attention of many Google ACE professionals and aspiring people who wish to increase their credibility in the market.
Associate-Cloud-Engineer Dumps 100 Pass Guarantee With Latest Demo: https://www.trainingdumps.com/Associate-Cloud-Engineer_exam-valid-dumps.html
Pass Your Exam With 100% Verified Associate-Cloud-Engineer Exam Questions: https://drive.google.com/open?id=1Axcnmas8k_J2dZpYGgtiu_9UejFcbLP4
