Valid Associate-Cloud-Engineer Test Answers & Google Associate-Cloud-Engineer Exam PDF
Google Associate-Cloud-Engineer Certification Real 2023 Mock Exam
NEW QUESTION # 69
You need to manage multiple Google Cloud projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple projects. What should you do?
- A. 1. Create a configuration for each project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned Google Cloud projects. - B. 1. Create a configuration for each project you need to manage.
2. Use gcloud initto update the configuration values when you need to work with a non-default project - C. 1. Use the default configuration for one project you need to manage.
2. Use gcloud initto update the configuration values when you need to work with a non-default project. - D. 1. Use the default configuration for one project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned Google Cloud projects.
Answer: C
NEW QUESTION # 70
You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.
You check the status of the deployed pods and notice that one of them is still in PENDING status:
You want to find out why the pod is stuck in pending status. What should you do?
- A. View logs of the container in myapp-deployment-58ddbbb995-lp86mpod and check for warning messages.
- B. Review details of the myapp-deploymentDeployment object and check for error messages.
- C. Review details of myapp-deployment-58ddbbb995-lp86mPod and check for warning messages.
- D. Review details of the myapp-service Service object and check for error messages.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/run/docs/gke/troubleshooting
NEW QUESTION # 71
A company has an application that generates invoices and makes the invoices available online. Invoices are stored as PDFs in an Amazon S3 bucket. Customers typically only view each invoice during the month it is issued. However, past invoices need to be immediately available. There are concerns over rising storage costs as the company gains more customers.
What is the MOST cost-effective method to store the data?
- A. Use Amazon S3 for current invoices. Set up lifecycle rules to migrate invoices to Amazon S3 Standard- Infrequent Access (S3 Standard-IA) after 30 days.
- B. Store the invoices as binaries in an Amazon RDS database instance. Retrieve them from the database when customers request invoices.
- C. Store the invoices as text files. Use Amazon CloudFront to convert the invoices from text to PDF when customers download invoices.
- D. Use Amazon S3 for current invoices. Set up lifecycle rules to migrate invoices to the GLACIER storage class after 30 days.
Answer: A
NEW QUESTION # 72
You need a dynamic way of provisioning VMs on Compute Engine. The exact specifications will be in a dedicated configuration file. You want to follow Google's recommended practices. Which method should you use?
- A. Deployment Manager
- B. Cloud Composer
- C. Unmanaged Instance Group
- D. Managed Instance Group
Answer: D
Explanation:
Reference:
https://cloud.google.com/compute/docs/instances/
NEW QUESTION # 73
You are using Container Registry to centrally store your company's container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?
- A. Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.
- B. In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes.
- C. When you create the GKE cluster, choose the Allow full access to all Cloud APIs option under
`Access scopes'. - D. Create a service account, and give it access to Cloud Storage. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.
Answer: B
Explanation:
If the cluster is in a different project or if the VMs in the cluster use a different service account, you must grant the service account the appropriate permissions to access the storage bucket used by Container Registry.
For the service account used by Compute Engine VMs, including VMs in Google Kubernetes Engine clusters, access is based on both Cloud IAM permissions and storage access scopes.
https://cloud.google.com/container-registry/docs/access-control
https://cloud.google.com/container-registry/docs/using-with-google-cloud-platform
NEW QUESTION # 74
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted.
You want to migrate this workload to the cloud while minimizing cost. What should you do?
- A. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
- B. Migrate the workload to a Compute Engine VM.
Start and stop the instance as needed. - C. Create an Instance Template with Preemptible VMs On.
Create a Managed Instance Group from the template and adjust Target CPU Utilization.
Migrate the workload. - D. Migrate the workload to a Compute Engine Preemptible VM.
Answer: B
Explanation:
Install the workload in a compute engine VM, start and stop the instance as needed, because as per the question the VM runs for 30 hours, process can be performed offline and should not be interrupted, if interrupted we need to restart the batch process again. Preemptible VMs are cheaper, but they will not be available beyond 24hrs, and if the process gets interrupted the preemptible VM will restart.
NEW QUESTION # 75
You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website.
This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?
- A. Create a Cloud Memorystore for Redis instance with 32-GB capacity.
- B. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
- C. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.
- D. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.
Answer: A
Explanation:
What it's good for Memorystore for Redis provides a fast, in-memory store for use cases that require fast, real-time processing of data. From simple caching use cases to real time analytics, Memorystore for Redis provides the performance you need.
Caching: Cache is an integral part of modern application architectures. Memorystore for Redis provides low latency access and high throughput for heavily accessed data, compared to accessing the data from a disk based backend store. Session management, frequently accessed queries, scripts, and pages are common examples of caching.
https://cloud.google.com/memorystore/docs/redis/redis-overview#what_its_good_for
NEW QUESTION # 76
You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items.
How should you configure the auditor's permissions?
- A. Create a custom role with view-only service permissions. Add the user's account to the custom role.
- B. Create a custom role with view-only project permissions. Add the user's account to the custom role.
- C. Select the built-in IAM service Viewer role. Add the user's account to this role.
- D. Select the built-in IAM project Viewer role. Add the user's account to this role.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/resource-manager/docs/access-control-proj
NEW QUESTION # 77
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?
- A. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
- B. Create an Instance Template with Preemptible VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.
- C. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.
- D. Migrate the workload to a Compute Engine Preemptible VM.
Answer: A
NEW QUESTION # 78
You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?
- A. Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
- B. Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.
- C. Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
- D. Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
Answer: B
Explanation:
"The Cloud Spanner to Cloud Storage Text template is a batch pipeline that reads in data from a Cloud Spanner table, optionally transforms the data via a JavaScript User Defined Function (UDF) that you provide, and writes it to Cloud Storage as CSV text files."
https://cloud.google.com/dataflow/docs/guides/templates/provided-batch#cloudspannertogcstext
"The Dataflow connector for Cloud Spanner lets you read data from and write data to Cloud Spanner in a Dataflow pipeline"
https://cloud.google.com/spanner/docs/dataflow-connector
https://cloud.google.com/bigquery/external-data-sources
NEW QUESTION # 79
You built an application on your development laptop that uses Google Cloud services. Your application uses Application Default Credentials for authentication and works fine on your development laptop. You want to migrate this application to a Compute Engine virtual machine (VM) and set up authentication using Google- recommended practices and minimal changes. What should you do?
- A. Create a service account with appropriate access for Google services, and configure the application to use this account.
- B. Assign appropriate access for Google services to the service account used by the Compute Engine VM.
- C. Store credentials for service accounts with appropriate access for Google services in a config file, and deploy this config file with your application.
- D. Store credentials for your user account with appropriate access for Google services in a config file, and deploy this config file with your application.
Answer: A
Explanation:
Reference:
https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances
NEW QUESTION # 80
Your company wants to standardize the creation and management of multiple Google Cloud resources using Infrastructure as Code. You want to minimize the amount of repetitive code needed to manage the environment What should you do?
- A. Develop templates for the environment using Cloud Deployment Manager
- B. Use curl in a terminal to send a REST request to the relevant Google API for each individual resource.
- C. Create a bash script that contains all requirement steps as gcloud commands
- D. Use the Cloud Console interface to provision and manage all related resources
Answer: A
NEW QUESTION # 81
You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?
- A. Using the GCP Console, filter the Stackdriver log to view the information.
- B. Create a trace in Stackdriver to view the information.
- C. View the bucket in the Storage section of the GCP Console.
- D. Using the GCP Console, filter the Activity log to view the information.
Answer: D
Explanation:
Audit logs meet the requirement:
Admin Activity logs: Entries for operations that modify the configuration or metadata of a project, bucket, or object.
Data Access logs: Entries for operations that modify objects or read a project, bucket, or object.
NEW QUESTION # 82
You created a cluster.YAML file containing
resources:
name: cluster
type: container.v1.cluster
properties:
zone: europe-west1-b
cluster:
description: My GCP ACE cluster
initialNodeCount: 2
You want to use Cloud Deployment Manager to create this cluster in GKE. What should you do?
- A. gcloud deployment-manager deployments create my-gcp-ace-cluster --config cluster.yaml
- B. gcloud deployment-manager deployments create my-gcp-ace-cluster --type container.v1.cluster --config cluster.yaml
- C. gcloud deployment-manager deployments apply my-gcp-ace-cluster --config cluster.yaml
- D. gcloud deployment-manager deployments apply my-gcp-ace-cluster --type container.v1.cluster --config cluster.yaml
Answer: C
Explanation:
gcloud deployment-manager deployments create creates deployments based on the configuration file. (Infrastructure as code). All the configuration related to the artifacts is in the configuration file. This command correctly creates a cluster based on the provided cluster.yaml configuration file.
Ref: https://cloud.google.com/sdk/gcloud/reference/deployment-manager/deployments/create
NEW QUESTION # 83
You are running an application on multiple virtual machines within a managed instance group and have autoscaling enabled. The autoscaling policy is configured so that additional instances are added to the group if the CPU utilization of instances goes above 80%. VMs are added until the instance group reaches its maximum limit of five VMs or until CPU utilization of instances lowers to 80%. The initial delay for HTTP health checks against the instances is set to 30 seconds. The virtual machine instances take around three minutes to become available for users. You observe that when the instance group autoscales, it adds more instances then necessary to support the levels of end-user traffic. You want to properly maintain instance group sizes when autoscaling. What should you do?
- A. Increase the initial delay of the HTTP health check to 200 seconds.
- B. Use a TCP health check instead of an HTTP health check.
- C. Decrease the maximum number of instances to 3.
- D. Set the maximum number of instances to 1.
Answer: A
Explanation:
The reason is that when you do health check, you want the VM to be working. Do the first check after initial setup time of 3 mins = 180 s < 200 s is reasonable.
The reason why our autoscaling is adding more instances than needed is that it checks 30 seconds after launching the instance and at this point, the instance isnt up and isnt ready to serve traffic. So our autoscaling policy starts another instance again checks this after 30 seconds and the cycle repeats until it gets to the maximum instances or the instances launched earlier are healthy and start processing traffic which happens after 180 seconds (3 minutes). This can be easily rectified by adjusting the initial delay to be higher than the time it takes for the instance to become available for processing traffic. So setting this to 200 ensures that it waits until the instance is up (around 180-second mark) and then starts forwarding traffic to this instance. Even after a cool out period, if the CPU utilization is still high, the autoscaler can again scale up but this scale-up is genuine and is based on the actual load.
Initial Delay Seconds This setting delays autohealing from potentially prematurely recreating the instance if the instance is in the process of starting up. The initial delay timer starts when the currentAction of the instance is VERIFYING. Ref: https://cloud.google.com/compute/docs/instance-groups/autohealing-instances-in-migs
NEW QUESTION # 84
You created a Kubernetes deployment by running kubectl run nginx image=nginx labels=app=prod. Your Kubernetes cluster is also used by a number of other deployments. How can you find the identifier of the pods for this nginx deployment?
- A. gcloud list gke-deployments -filter={pod }
- B. kubectl get pods -I "app=prod"
- C. gcloud get pods -selector="app=prod"
- D. kubectl get deployments -output=pods
Answer: B
Explanation:
This command correctly lists pods that have the label app=prod. When creating the deployment, we used the label app=prod so listing pods that have this label retrieve the pods belonging to nginx deployments. You can list pods by using Kubernetes CLI kubectl get pods.
Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container-images/ Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container-images/#list-containers-filtering-by-pod-label
NEW QUESTION # 85
Your company is moving its entire workload to Compute Engine. Some servers should be accessible through the Internet, and other servers should only be accessible over the internal network. All servers need to be able to talk to each other over specific ports and protocols. The current on-premises network relies on a demilitarized zone (DMZ) for the public servers and a Local Area Network (LAN) for the private servers. You need to design the networking infrastructure on Google Cloud to match these requirements. What should you do?
- A. 1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN.
2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ. - B. 1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN.
2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ. - C. 1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN.
2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ. - D. 1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN.
2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.
Answer: C
Explanation:
By default traffic between subnets on a VPC network is not allowed (except on the "default" network).
(This blocks traffic between all instances, not just traffic between subnets => FW rules must be defined to allow communications between all instances, regardless the subnets)
2 VPC will not work without peering.
NEW QUESTION # 86
You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?
- A. Add a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.
- B. Recreate all the nodes of the GKE cluster to enable GPUs on all of them.
- C. Ask your ML team to add the "accelerator: gpu" annotation to their pod specification.
- D. Create your own Kubernetes cluster on top of Compute Engine with nodes that have GPUs. Dedicate this cluster to your ML team.
Answer: A
Explanation:
This is the most optimal solution. Rather than recreating all nodes, you create a new node pool with GPU enabled. You then modify the pod specification to target particular GPU types by adding node selector to your workloads Pod specification. YOu still have a single cluster so you pay Kubernetes cluster management fee for just one cluster thus minimizing the cost. Ref: https://cloud.google.com/kubernetes-engine/docs/how-to/gpus Ref: https://cloud.google.com/kubernetes-engine/pricing Example:
apiVersion: v1
kind: Pod
metadata:
name: my-gpu-pod
spec:
containers:
name: my-gpu-container
image: nvidia/cuda:10.0-runtime-ubuntu18.04
command: [/bin/bash]
resources:
limits:
nvidia.com/gpu: 2
nodeSelector:
cloud.google.com/gke-accelerator: nvidia-tesla-k80 # or nvidia-tesla-p100 or nvidia-tesla-p4 or nvidia-tesla-v100 or nvidia-tesla-t4
NEW QUESTION # 87
Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?
- A. Add the group for the finance team to roles/billing project/Manager role.
- B. Add the group for the finance team to roles/billing viewer role.
- C. Add the group for the finance team to roles/billing admin role.
- D. Add the group for the finance team to roles/billing user role.
Answer: B
Explanation:
Billing Account Viewer access would usually be granted to finance teams, it provides access to spend information, but does not confer the right to link or unlink projects or otherwise manage the properties of the billing account.
https://cloud.google.com/billing/docs/how-to/billing-access
NEW QUESTION # 88
You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible. What should you do?
- A. Create a new Kubernetes Engine cluster. Create a deployment for the Jenkins image.
- B. Deploy Jenkins through the Google Cloud Marketplace.
- C. Create an instance template with the Jenkins executable. Create a managed instance group with this template.
- D. Create a new Compute Engine instance. Run the Jenkins executable.
Answer: B
Explanation:
Installing Jenkins
In this section, you use Cloud Marketplace to provision a Jenkins instance. You customize this instance to use the agent image you created in the previous section.
Go to the Cloud Marketplace solution for Jenkins.
Click Launch on Compute Engine.
Change the Machine Type field to 4 vCPUs 15 GB Memory, n1-standard-4.
Machine type selection for Jenkins deployment.
Click Deploy and wait for your Jenkins instance to finish being provisioned. When it is finished, you will see:
Jenkins has been deployed.
https://cloud.google.com/solutions/using-jenkins-for-distributed-builds-on-compute-engine#installing_jenkins
NEW QUESTION # 89
Your company developed a mobile game that is deployed on Google Cloud. Gamers are connecting to the game with their personal phones over the Internet. The game sends UDP packets to update the servers about the gamers' actions while they are playing in multiplayer mode. Your game backend can scale over multiple virtual machines (VMs), and you want to expose the VMs over a single IP address. What should you do?
- A. Configure an External Network load balancer in front of the application servers.
- B. Configure an SSL Proxy load balancer in front of the application servers.
- C. Configure an Internal UDP load balancer in front of the application servers.
- D. Configure an External HTTP(s) load balancer in front of the application servers.
Answer: B
Explanation:
https://cloud.google.com/solutions/connecting-securely
NEW QUESTION # 90
......
The Google Associate-Cloud-Engineer exam consists of multiple-choice and multiple-select questions, and candidates have two hours to complete the exam. Associate-Cloud-Engineer exam tests the candidate's knowledge of Google Cloud Platform services such as Compute Engine, App Engine, Cloud Storage, Cloud SQL, Cloud Datastore, Cloud Spanner, Cloud Pub/Sub, and Cloud Functions.
Career Path
After acing the certification test, the candidates will possess all the knowledge and skills needed to function in a role of an Associate Cloud Engineer. The responsibilities of these professionals include the deployment of apps, monitoring of operations, and management of enterprise solutions. The successful applicants will be capable of using Google Cloud Console as well as the command-line interface to fulfill common platform-based tasks to maintain deployed solutions that leverage self-managed or Google-managed services on Google Cloud. Some of the other job roles that you can take up after getting certified include the following: an Associate DevOps Engineer, an Associate Software Engineer, an Associate Cloud Migration Engineer, an Associate Consulting Engineer, an Associate Cloud Security Engineer, an Associate DevOps Network Engineer, and an Associate Cloud Operations Engineer. The average salary associated with these positions is $108,752 per year. However, the specialists with some level of experience in the domain can earn as much as $177,000 per annum.
Associate-Cloud-Engineer Exam Questions and Valid Associate-Cloud-Engineer Dumps PDF: https://www.passleadervce.com/Google-Cloud-Certified/reliable-Associate-Cloud-Engineer-exam-learning-guide.html
Associate-Cloud-Engineer Brain Dump: A Study Guide with Tips & Tricks for passing Exam: https://drive.google.com/open?id=1NWSyauIGslyEV_9DU_WWvogfindesbXs