Real Associate-Cloud-Engineer Exam PDF Test Engine Practice Test Questions
Google Associate-Cloud-Engineer Real 2021 Braindumps Mock Exam Dumps
NEW QUESTION 45
You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?
- A. Deploy the application on Kubernetes Engine For a new release, update the deployment to use the new version
- B. Deploy the application on App Engine For each update, create a new service Configure traffic splitting to send a small percentage of traffic to the new service.
- C. Deploy the application on Kubernetes Engine For a now release, create a new deployment for the new version Update the service e to use the now deployment.
- D. Deploy me application on App Engine For each update, create a new version of the same service Configure traffic splitting to send a small percentage of traffic to the new version
Answer: D
NEW QUESTION 46
You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?
- A. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission.
Direct the auditor to also review the logs for changes to Cloud IAM policy. - B. Assign the auditor the IAM role roles/logging.privateLogViewer.
Perform the export of logs to Cloud Storage. - C. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission.
Perform the export of logs to Cloud Storage. - D. Assign the auditor the IAM role roles/logging.privateLogViewer.
Direct the auditor to also review the logs for changes to Cloud IAM policy.
Answer: D
NEW QUESTION 47
You created a Google Cloud Platform project with an App Engine application inside the project.
You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?
- A. Change the region property setting in the existing App Engine application from us-central to asia- northeast1.
- B. Create a new GCP project and create an App Engine application inside this new project. Specify asia- northeast1 as the region to serve your application.
- C. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
- D. Change the default region property setting in the existing GCP project to asia-northeast1.
Answer: C
NEW QUESTION 48
You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?
- A. Create a new App Engine application in the same project. Deploy the new version in that application. Configure your network load balancer to send 1% of the traffic to that new application.
- B. Create a new App Engine application in the same project. Deploy the new version in that application. Use the App Engine library to proxy 1% of the requests to the new version.
- C. Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.
- D. Deploy the new version in the same application and use the --migrate option.
Answer: B
NEW QUESTION 49
Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?
- A. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
- B. Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.
- C. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
- D. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
Answer: D
Explanation:
Reference:
https://cloud.google.com/solutions/federating-gcp-with-active-directory-introduction
NEW QUESTION 50
You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?
- A. Save the automatic first-of-the-month backup for three years. Store the backup file in an Archive class Cloud Storage bucket.
- B. Set up an on-demand backup for the first of the month. Write the backup to an Archive class Cloud Storage bucket.
- C. Set up an export job for the first of the month. Write the export file to an Archive class Cloud Storage bucket.
- D. Convert the automatic first-of-the-month backup to an export file. Write the export file to a Coldline class Cloud Storage bucket.
Answer: A
NEW QUESTION 51
Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the data. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?
- A. Upload the data into Cloud Spanner using the import function in the console.
- B. Upload the data into Cloud SQL using the import function in the console.
- C. Upload the data to Cloud Storage using the gsutilcommand line tool.
- D. Upload the data to BigQuery using the bqcommand line tool.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/solutions/performing-etl-from-relational-database-into-bigquery
NEW QUESTION 52
You have a Compute Engine instance hosting a production application. You want to receive an email if the instance consumes more than 90% of its CPU resources for more than 15 minutes. You want to use Google services. What should you do?
- A. 1. Create a Stackdriver Workspace, and associate your GCP project with it.
2.Write a script that monitors the CPU usage and sends it as a custom metric to Stackdriver.
3.Create an uptime check for the instance in Stackdriver. - B. 1. Create a Stackdriver Workspace, and associate your Google Cloud Platform (GCP) project with it.
2.Create an Alerting Policy in Stackdriver that uses the threshold as a trigger condition.
3.Configure your email address in the notification channel. - C. 1. In Stackdriver Logging, create a logs-based metric to extract the CPU usage by using this regular expression: CPU Usage: ([0-9] {1,3})%
2.In Stackdriver Monitoring, create an Alerting Policy based on this metric.
3.Configure your email address in the notification channel. - D. 1. Create a consumer Gmail account.
2.Write a script that monitors the CPU usage.
3.When the CPU usage exceeds the threshold, have that script send an email using the Gmail account and smtp.gmail.com on port 25 as SMTP server.
Answer: C
NEW QUESTION 53
You need to connect to one of your Compute Engine instances using SSH. You've already authenticated gcloud, however, you don't have an SSH key deployed yet. In the fewest steps possible, what's the easiest way to connect to the app?
- A. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
- B. Create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
- C. Use the gcloud compute ssh command.
- D. Create a key with the ssh-keygen command. Then use the gcloud compute ssh command.
Answer: C
NEW QUESTION 54
You are building a pipeline to process time-series data. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?
- A. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
- B. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
- C. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery
- D. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
Answer: C
Explanation:
Explanation
Explanation/Reference: https://cloud.google.com/solutions/correlating-time-series-dataflow
NEW QUESTION 55
You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone. You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?
- A. Create a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1-d.
- B. In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.
- C. In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.
- D. Set the europe-west1-d zone as the default zone using the gcloud config subcommand.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/compute/docs/gcloud-compute
NEW QUESTION 56
You are hosting an application from Compute Engine virtual machines (VMs) in us-central1-a. You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?
- A. - Create an HTTP(S) Load Balancer.
- Create one or more global forwarding rules to direct traffic to your VMs. - B. - Create a Managed Instance Group and specify us-central1-a as the zone.
- Configure the Health Check with a short Health Interval. - C. - Perform regular backups of your application.
- Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.
- Restore from backups when notified. - D. - Create Compute Engine resources in us-central1-b.
- Balance the load across both us-central1-a and us-central1-b.
Answer: D
NEW QUESTION 57
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project.
What should you do?
- A. Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.
- B. Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web-applications.
- C. Give "project owner" role to crm-databases-proj and the web-applications project.
- D. Give "project owner" for web-applications appropriate roles to crm-databases- proj
Answer: B
Explanation:
Explanation/Reference: https://cloud.google.com/blog/products/gcp/best-practices-for-working-with-google-cloud-audit- logging
NEW QUESTION 58
You have deployed an application on a single Compute Engine instance. The application writes logs to disk. Users start reporting errors with the application. You want to diagnose the problem.
What should you do?
- A. Install and configure the Cloud Logging Agent and view the logs from Cloud Logging.
- B. Configure a Health Check on the instance and set a Low Healthy Threshold value.
- C. Connect to the instance's serial console and read the application logs.
- D. Navigate to Cloud Logging and view the application logs.
Answer: D
Explanation:
https://cloud.google.com/error-reporting/docs/setup/compute-engine
NEW QUESTION 59
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2- highmem-16 nodes without any downtime. What should you do?
- A. Create a new cluster with n2-highmem-16 nodes.
Redeploy the pods and delete the old cluster. - B. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes.
Redeploy the pods and delete the old cluster. - C. Use gcloud container clusters upgrade.
Deploy the new services. - D. Create a new Node Pool and specify machine type n2-highmem-16.
Deploy the new pods.
Answer: D
NEW QUESTION 60
Your management has asked an external auditor to review all the resources in a specific project. The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?
- A. Ask the auditor for their Google account, and give them the Viewer role on the project.
- B. Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.
- C. Ask the auditor for their Google account, and give them the Security Reviewer role on the project.
- D. Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.
Answer: D
NEW QUESTION 61
Your company publishes large files on an Apache web server that runs on a Compute Engine instance. The Apache web server is not the only application running in the project. You want to receive an email when the egress network costs for the server exceed 100 dollars for the current month as measured by Google Cloud Platform (GCP). What should you do?
- A. Set up a budget alert on the project with an amount of 100 dollars, a threshold of 100%, and notification type of "email."
- B. Use the Stackdriver Logging Agent to export the Apache web server logs to Stackdriver Logging.
Create a Cloud Function that uses BigQuery to parse the HTTP response log data in Stackdriver for the current month and sends an email if the size of all HTTP responses, multiplied by current GCP egress prices, totals over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly. - C. Export the billing data to BigQuery. Create a Cloud Function that uses BigQuery to sum the egress network costs of the exported billing data for the Apache web server for the current month and sends an email if it is over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.
- D. Set up a budget alert on the billing account with an amount of 100 dollars, a threshold of 100%, and notification type of "email."
Answer: A
NEW QUESTION 62
You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection.
You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?
- A. Change the storage class of the bucket from Nearline to Multi-Regional.
- B. Enable parallel composite uploads using gsutil on the file transfer.
- C. Use the GCP Console to transfer the file instead of gsutil.
- D. Decrease the TCP window size on the machine initiating the transfer.
Answer: B
Explanation:
https://cloud.google.com/storage/docs/gsutil/commands/cp#parallel-composite-uploads_1 Warning: Parallel composite uploads should not be used with NEARLINE, COLDLINE, or ARCHIVE storage class buckets, because doing so incurs an early deletion charge for each component object.
Warning: Parallel composite uploads should not be used in buckets that have a retention policy, because the component pieces cannot be deleted until each has met the bucket's minimum retention period.
NEW QUESTION 63
You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?
- A. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.
- B. Deploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.
- C. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.
- D. Deploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.
Answer: B
NEW QUESTION 64
......
Below is the Associate Cloud Engineer Exam Format
Format: Multiple choices, multiple answers
- Number of Questions: 50
- Length of Examination: 2 Hours
- Language: English, Japanese, Spanish, Portuguese, French, German, and Indonesian.
- Passing score: 80%
Prepare For The Associate-Cloud-Engineer Question Papers In Advance: https://www.topexamcollection.com/Associate-Cloud-Engineer-vce-collection.html
Released Google Associate-Cloud-Engineer Updated Questions PDF: https://drive.google.com/open?id=1X9W8t3xNZo7ZcLqV3i4s4QhfgT0id1K1
