Google Associate-Cloud-Engineer Exam Dumps - PDF Questions and Testing Engine
Latest Associate-Cloud-Engineer Exam Dumps for Pass Guaranteed
Planning & Configuring Cloud Solutions
- Plan and configure compute resources with specific skills in choosing the relevant compute choices for a specific workload as well as utilizing preemptible virtual machines and custom machine types as relevant;
- Plan and estimate the GCP product use with Pricing Calculator;
- Plan and configure data storage options with a focus on product choice and selecting storage options;
- Plan and configure network resources, which include distinguishing load balancing alternatives, configuring the Cloud DNS, establishing resource locations within a network for its availability.
NEW QUESTION 77
Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google's recommended practices. Which storage option should you use?
- A. Regional Storage
- B. Nearline Storage
- C. Coldline Storage
- D. Multi-Regional Storage
Answer: C
NEW QUESTION 78
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?
- A. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.
Share the folder with the IoT team. - B. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
- C. Move both projects under the same folder.
- D. Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/billing/docs/onboarding-checklist
NEW QUESTION 79
A retail company has sensors placed in its physical retail stores. The sensors send messages over HTTP when customers interact with in-store product displays. A Solutions Architect needs to implement a system for processing those sensor messages; the results must be available for the Data Analysis team.
Which architecture should be used to meet these requirements?
- A. Use AWS Direct Connect to connect sensors to DynamoDB so that data can be written directly to a DynamoDB table where it can be accessed by the Data Analysis team.
- B. Use Amazon Route 53 to direct incoming sensor messages to a Lambda function to process the message and save the results to a Amazon DynamoDB table.
- C. Implement an Amazon API Gateway to server as the HTTP endpoint. Have the API Gateway trigger an AWS Lambda function to process the messages, and save the results to an Amazon DynamoDB table.
- D. Create an Amazon EC2 instance to server as the HTTP endpoint and to process the messages. Save the results to Amazon S3 for the Data Analysis team to download.
Answer: C
NEW QUESTION 80
You have a Compute Engine instance hosting an application used between 9 AM and 6 PM on weekdays. You want to back up this instance daily for disaster recovery purposes. You want to keep the backups for 30 days. You want the Google-recommended solution with the least management overhead and the least number of services. What should you do?
- A. 1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk.
2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters:
- Schedule frequency: Daily
- Start time: 1:00 AM ?2:00 AM
- Autodelete snapshots after 30 days - B. 1. Create a bash script in the instance that copies the content of the disk to Cloud Storage.
2. Create a bash script in the instance that deletes data older than 30 days in the backup Cloud Storage bucket.
3. Configure the instance's crontab to execute these scripts daily at 1:00 AM. - C. 1. Update your instances' metadata to add the following value: snapshot-schedule: 0 1 * * *
2. Update your instances' metadata to add the following value: snapshot-retention: 30 - D. 1. Create a Cloud Function that creates a snapshot of your instance's disk.
2. Create a Cloud Function that deletes snapshots that are older than 30 days.
3. Use Cloud Scheduler to trigger both Cloud Functions daily at 1:00 AM.
Answer: A
NEW QUESTION 81
Your boss has asked you to onboard a new user and provide them with access to their team's project. What set of steps best describes what needs to happen?
- A. Add the user inside of G Suite; sync from G Suite to the Active Directory using the Directory Sync util; add them as a member and grant them the required roles.
- B. Add them as a member of the project, grant them the required roles, and sync the user back to G Suite.
- C. Add the user inside of G Suite, create a user group, and add them to that user group.
- D. Add the user inside of G Suite, add them as a member of the project, and grant them the required roles.
Answer: B,D
NEW QUESTION 82
You need to select and configure compute resources for a set of batch processing jobs. These jobs take around 2 hours to complete and are run nightly. You want to minimize service costs.
What should you do?
- A. Select Compute Engine. Use VM instance types that support micro bursting.
- B. Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.
- C. Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.
- D. Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
Answer: D
NEW QUESTION 83
Your company's infrastructure is on-premises, but all machines are running at maximum capacity. You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?
- A. Create bastion hosts both in your on-premises environment and on Google Cloud. Configure both as proxy servers using their public IP addresses.
- B. In Google Cloud, configure the VPC for VPC Network Peering.
- C. In Google Cloud, configure the VPC as a host for Shared VPC.
- D. Set up Cloud VPN between the infrastructure on-premises and Google Cloud.
Answer: B
NEW QUESTION 84
You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?
- A. Create a Cloud Bigtable cluster and use the HBase API
- B. Deploy MongoDB Alias from the Google Cloud Marketplace
- C. Download a MongoDB installation package, and run it on a Managed Instance Group
- D. Download a MongoDB installation package and run it on Compute Engine instances
Answer: C
NEW QUESTION 85
You need to create a Compute Engine instance in a new project that doesn't exist yet. What should you do?
- A. Using the Cloud SDK, create the new instance, and use the --project flag to specify the new project.
Answer yes when prompted by Cloud SDK to enable the Compute Engine API. - B. Enable the Compute Engine API in the Cloud Console. Go to the Compute Engine section of the Console to create a new instance, and look for the Create In A New Project option in the creation form.
- C. Enable the Compute Engine API in the Cloud Console, use the Cloud SDK to create the instance, and then use the --project flag to specify a new project.
- D. Using the Cloud SDK, create a new project, enable the Compute Engine API in that project, and then create the instance specifying your new project.
Answer: C
NEW QUESTION 86
You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items.
How should you configure the auditor's permissions?
- A. Create a custom role with view-only project permissions. Add the user's account to the custom role.
- B. Create a custom role with view-only service permissions. Add the user's account to the custom role.
- C. Select the built-in IAM project Viewer role. Add the user's account to this role.
- D. Select the built-in IAM service Viewer role. Add the user's account to this role.
Answer: C
Explanation:
https://cloud.google.com/resource-manager/docs/access-control-proj
NEW QUESTION 87
You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API.
You want to make sure your application can use Cloud Pub/Sub. What should you do?
- A. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
- B. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
- C. Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
- D. Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
Answer: B
NEW QUESTION 88
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?
- A. Use gcloud iam roles copyand specify the production project as the destination project.
- B. Use gcloud iam roles copyand specify your organization as the destination organization.
- C. In the Google Cloud Platform Console, use the 'create role from role' functionality.
- D. In the Google Cloud Platform Console, use the 'create role' functionality and select all applicable permissions.
Answer: B
Explanation:
Explanation/Reference: https://cloud.google.com/sdk/gcloud/reference/iam/roles/copy
NEW QUESTION 89
Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider.
What should you do?
- A. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
- B. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
- C. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.
- D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile
& Desktop Apps.
Answer: B
Explanation:
https://support.google.com/cloudidentity/answer/6262987?hl=en&ref_topic=7558767 Google offers a SAML-based single sign-on (SSO) service that provides partner companies with full control over the authorization and authentication of hosted user accounts that can access web-based applications like Gmail or Google Calendar. Using the SAML model, Google acts as the service provider and provides services such as Gmail and Start Pages.
NEW QUESTION 90
Your company publishes large files on an Apache web server that runs on a Compute Engine instance. The Apache web server is not the only application running in the project. You want to receive an email when the egress network costs for the server exceed 100 dollars for the current month as measured by Google Cloud Platform (GCP). What should you do?
- A. Export the billing data to BigQuery.
Create a Cloud Function that uses BigQuery to sum the egress network costs of the exported billing data for the Apache web server for the current month and sends an email if it is over 100 dollars.
Schedule the Cloud Function using Cloud Scheduler to run hourly. - B. Set up a budget alert on the billing account with an amount of 100 dollars, a threshold of 100%, and notification type of "email."
- C. Use the Stackdriver Logging Agent to export the Apache web server logs to Stackdriver Logging.
Create a Cloud Function that uses BigQuery to parse the HTTP response log data in Stackdriver for the current month and sends an email if the size of all HTTP responses, multiplied by current GCP egress prices, totals over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly. - D. Set up a budget alert on the project with an amount of 100 dollars, a threshold of 100%, and notification type of "email."
Answer: A
Explanation:
The Apache web server is not the only application running in the project, so the budget alert is not suitable because it is related to all applications and not only the network traffic as needed.
NEW QUESTION 91
Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the production services in order to perform their job. You want to prevent Google Cloud product changes from broadening their permissions in the future. You want to follow Google-recommended practices. What should you do?
- A. Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the organization level.
- B. Grant all members of the DevOps team the role of Project Editor on the production project.
- C. Grant all members of the DevOps team the role of Project Editor on the organization level.
- D. Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project.
Answer: C
NEW QUESTION 92
You have a virtual machine that is currently configured with 2 vCPUs and 4 GB of memory. It is running out of memory. You want to upgrade the virtual machine to have 8 GB of memory.
What should you do?
- A. Stop the VM, increase the memory to 8 GB, and start the VM.
- B. Use gcloud to add metadata to the VM. Set the key to required-memory-sizeand the value to 8 GB.
- C. Stop the VM, change the machine type to n1-standard-8, and start the VM.
- D. Rely on live migration to move the workload to a machine with more memory.
Answer: A
NEW QUESTION 93
Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google's recommended practices. Which storage option should you use?
- A. Regional Storage
- B. Nearline Storage
- C. Coldline Storage
- D. Multi-Regional Storage
Answer: C
Explanation:
Reference:
https://cloud.google.com/storage/docs/storage-classes#nearline
NEW QUESTION 94
A media company asked a Solutions Architect to design a highly available storage solution to serve as a centralized document store for their Amazon EC2 instances. The storage solution needs to be POSIX- compliant, scale dynamically, and be able to serve up to 100 concurrent EC2 instances.
Which solution meets these requirements?
- A. Create an Amazon EBS volume and allow multiple users to mount that volume to their EC2 instance(s).
- B. Create an Amazon S3 bucket and store all of the documents in this bucket.
- C. Use Amazon Glacier to store all of the documents.
- D. Create an Amazon Elastic File System (Amazon EFS) to store and share the documents.
Answer: D
Explanation:
Explanation/Reference:
Reference https://aws.amazon.com/efs/enterprise-applications/
NEW QUESTION 95
......
Deploying & Implementing Cloud Solutions
- Deploy and implement networking resources: this will measure your ability to launch Compute Engine instances using custom network configuration; create egress and ingress firewall rule or VPC; create VPNs between the external network and Google VPC with Cloud VPN; create the load balancer to allocate the application network traffic for apps;
- Deploy and implement Google Kubernetes Engine Resources: this domain includes skills in deploying Google Kubernetes Engine cluster, container application to Google Kubernetes Engine with pods, and configuring Google Kubernetes Engine Application logging and monitoring;
- Deploy and implement App Engine, Cloud Functions, and Cloud Run resources: the learners will be required to demonstrate their skills in the deployment of applications, traffic splitting, updating scaling configuration, as well as deployment of applications that accept Google Cloud events;
- Deploy and implement data solutions: the applicants should be able to initialize data systems with Google products and load data;
- Deploy and implement compute engine resources: the skills required for this area include launching compute instances with Cloud SDK and Cloud Console; creating auto-scaled managed instance groups with instance templates; uploading/generating custom SSH keys for instances; configuring virtual machines or Stackdriver logging and monitoring. It also requires that the students can assess compute quotas and request for increases; install a Stackdriver Agent for logging and monitoring;
- Deploy solutions with Cloud Marketplace: the candidates must demonstrate the ability to browse the Cloud Marketplace catalog to check solution details; deploy Cloud Marketplace solutions;
- Deploy an application infrastructure with Cloud Deployment Manager with a focus on the development and launch of Deployment Manager templates.
Reliable Google Cloud Certified Associate-Cloud-Engineer Dumps PDF Dec 17, 2021 Recently Updated Questions: https://www.topexamcollection.com/Associate-Cloud-Engineer-vce-collection.html
Pass Your Google Associate-Cloud-Engineer Exam with Correct 245 Questions and Answers: https://drive.google.com/open?id=17PNtEJqNNOiMnb5bPGKvcAZ79uWTNDhd
