Google Associate-Cloud-Engineer Exam Dumps

The sales team has a project named Sales Data Digest that has the ID acme-data-digest You need to set up similar Google Cloud resources for the marketing team but their resources must be organized independently of the sales team. What should you do?

A. Grant the Project Editor role to the Marketing learn for acme data digest
B. Create a Project Lien on acme-data digest and then grant the Project Editor role to the Marketing team
C. Create another protect with the ID acme-marketing-data-digest for the Marketing team and deploy the resources there
D. Create a new protect named Meeting Data Digest and use the ID acme-data-digest Grant the Project Editor role to the Marketing team. 

Answer: C

Your company has embraced a hybrid cloud strategy where some of the applications are deployed on Google Cloud. A Virtual Private Network (VPN) tunnel connects your Virtual Private Cloud (VPC) in Google Cloud with your company's on-premises network. Multiple applications in Google Cloud need to connect to an on-premises database server, and you want to avoid having to change the IP configuration in all of your applications when the IP of the database changes.What should you do? 

A. Configure Cloud NAT for all subnets of your VPC to be used when egressing from the VM instances.
B. Create a private zone on Cloud DNS, and configure the applications with the DNS name.
C. Configure the IP of the database as custom metadata for each instance, and query the metadata server.
D. Query the Compute Engine internal DNS from the applications to retrieve the IP of the database. 

Answer: B

Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment). What should you do?

A. Create a new service with the new version of the application. Split traffic between this version and the version that is currently running.
B. Create a new revision with the new version of the application. Split traffic between this version and the version that is currently running.
C. Create a new service with the new version of the application. Add an HTTP Load Balancer in front of both services.
D. Create a new revision with the new version of the application. Add an HTTP Load Balancer in front of both revisions. 

Answer: B

You have developed an application that consists of multiple microservices, with each microservice packaged in its own Docker container image. You want to deploy the entire application on Google Kubernetes Engine so that each microservice can be scaled individually. What should you do?

A. Create and deploy a Custom Resource Definition per microservice.
B. Create and deploy a Docker Compose File.
C. Create and deploy a Job per microservice.
D. Create and deploy a Deployment per microservice. 

Answer: D

You are managing a project for the Business Intelligence (BI) department in your company. A data pipeline ingests data into BigQuery via streaming. You want the users in the BI department to be able to run the custom SQL queries against the latest data in BigQuery. What should you do?

A. Create a Data Studio dashboard that uses the related BigQuery tables as a source and give the BI team view access to the Data Studio dashboard.
B. Create a Service Account for the BI team and distribute a new private key to each member of the BI team.
C. Use Cloud Scheduler to schedule a batch Dataflow job to copy the data from BigQuery to the BI team's internal data warehouse.
D. Assign the IAM role of BigQuery User to a Google Group that contains the members of the BI team.

Answer: D

You need to immediately change the storage class of an existing Google Cloud bucket. You need to reduce service cost for infrequently accessed files stored in that bucket and for all files that will be added to that bucket in the future. What should you do?

A. Use the gsutil to rewrite the storage class for the bucket Change the default storage class for the bucket
B. Use the gsutil to rewrite the storage class for the bucket Set up Object Lifecycle management on the bucket
C. Create a new bucket and change the default storage class for the bucket Set up Object Lifecycle management on lite bucket
D. Create a new bucket and change the default storage class for the bucket import the files from the previous bucket into the new bucket 

Answer: B

You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?

A. In the Log Viewer, filter the logs on severity 'Error' and the name of the Service Account.
B. Create a sink to BigQuery to export all the logs. Create a Data Studio dashboard on the exported logs.
C. Create a custom log-based metric for the specific error to be used in an Alerting Policy.
D. Grant Project Owner access to the Service Account. 

Answer: C

Your organization uses Active Directory (AD) to manage user identities. Each user uses this identity for federated access to various on-premises systems. Your security team has adopted a policy that requires users to log into Google Cloud with their AD identity instead of their own login. You want to follow the Google-recommended practices to implement this policy. What should you do?

A. Sync Identities with Cloud Directory Sync, and then enable SAML for single sign-on
B. Sync Identities in the Google Admin console, and then enable Oauth for single sign-on
C. Sync identities with 3rd party LDAP sync, and then copy passwords to allow simplified login with (he same credentials
D. Sync identities with Cloud Directory Sync, and then copy passwords to allow simplified login with the same credentials. 

Answer: A

You are developing a financial trading application that will be used globally. Data is stored and queried using a relational structure, and clients from all over the world should get the exact identical state of the data. The application will be deployed in multiple regions to provide the lowest latency to end users. You need to select a storage option for the application data while minimizing latency. What should you do?

A. Use Cloud Bigtable for data storage.
B. Use Cloud SQL for data storage.
C. Use Cloud Spanner for data storage.
D. Use Firestore for data storage. 

Answer: C

You have developed a containerized web application that will serve Internal colleagues during business hours. You want to ensure that no costs are incurred outside of the hours the application is used. You have just created a new Google Cloud project and want to deploy the application. What should you do?

A. Deploy the container on Cloud Run for Anthos, and set the minimum number of instances to zero
B. Deploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero.
C. Deploy the container on App Engine flexible environment with autoscaling. and set the value min_instances to zero in the app yaml
D. Deploy the container on App Engine flexible environment with manual scaling, and set the value instances to zero in the app yaml 

Answer: B

You are setting up a Windows VM on Compute Engine and want to make sure you can log in to the VM via RDP. What should you do?

A. After the VM has been created, use your Google Account credentials to log in into the VM.
B. After the VM has been created, use gcloud compute reset-windows-password to retrieve the login credentials for the VM.
C. When creating the VM, add metadata to the instance using ‘windows-password’ as the key and a password as the value.
D. After the VM has been created, download the JSON private key for the default Compute Engine service account. Use the credentials in the JSON file to log in to the VM. 

Answer: D

You need to track and verity modifications to a set of Google Compute Engine instances in your Google Cloud project. In particular, you want to verify OS system patching events on your virtual machines (VMs). What should you do?

A. Review the Compute Engine activity logs Select and review the Admin Event logs
B. Review the Compute Engine activity logs Select and review the System Event logs
C. Install the Cloud Logging Agent In Cloud Logging review the Compute Engine syslog logs
D. Install the Cloud Logging Agent In Cloud Logging, review the Compute Engine operation logs 

Answer: A

2. Your auditor wants to view your organization's use of data in Google Cloud. The auditoris most interested in auditing who accessed data in Cloud Storage buckets. You need tohelp the auditor access the data they need. What should you do?

A. Assign the appropriate permissions, and then use Cloud Monitoring to review metrics 
B. Use the export logs API to provide the Admin Activity Audit Logs in the format they want 
C. Turn on Data Access Logs for the buckets they want to audit, and Then build a query inthe log viewer that filters on Cloud Storage 
D. Assign the appropriate permissions, and then create a Data Studio report on AdminActivity Audit Logs 

Answer: A

Your organization has three existing Google Cloud projects. You need to bill the Marketingdepartment for only their Google Cloud services for a new initiative within their group. Whatshould you do?

A. 1. Verify that you ace assigned the Billing Administrator IAM role tor your organization's Google Cloud Project for the Marketing department 2. Link the new project to a Marketing Billing Account 
B. 1. Verify that you are assigned the Billing Administrator IAM role for your organization's Google Cloud account 2. Create a new Google Cloud Project for the Marketing department 3. Set the default key-value project labels to department marketing for all services in this project 
C. 1. Verify that you are assigned the Organization Administrator IAM role for your organization's Google Cloud account 2. Create a new Google Cloud Project for the Marketing department 3. Link the new project to a Marketing Billing Account. 
D. 1. Verity that you are assigned the Organization Administrator IAM role for your organization's Google Cloud account 2. Create a new Google Cloud Project for the Marketing department 3. Set the default key value project labels to department marketing for all services in this protect 

Answer: A

You will have several applications running on different Compute Engine instances in thesame project. You want to specify at a more granular level the service account eachinstance uses when calling Google Cloud APIs. What should you do?

A. When creating the instances, specify a Service Account for each instance 
B. When creating the instances, assign the name of each Service Account as instancemetadata 
C. After starting the instances, use gcloud compute instances update to specify a ServiceAccount for each instance 
D. After starting the instances, use gcloud compute instances update to assign the name ofthe relevant Service Account as instance metadata 

Answer: C

An application generates daily reports in a Compute Engine virtual machine (VM). The VMis in the project corp-iot-insights. Your team operates only in the project corp-aggregatereports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage.You want to configure access so that the daily reports from the VM are available in thebucket corp-aggregate-reports-storage and use as few steps as possible while followingGoogle-recommended practices. What should you do?

A. Move both projects under the same folder. 
B. Grant the VM Service Account the role Storage Object Creator on corp-aggregatereports-storage. 
C. Create a Shared VPC network between both projects. Grant the VM Service Accountthe role Storage Object Creator on corp-iot-insights. 
D. Make corp-aggregate-reports-storage public and create a folder with a pseudorandomized suffix name. Share the folder with the IoT team. 

Answer: D

You want to verify the IAM users and roles assigned within a GCP project named myproject. What should you do?

A. Run gcloud iam roles list. Review the output section. 
B. Run gcloud iam service-accounts list. Review the output section. 
C. Navigate to the project and then to the IAM section in the GCP Console. Review themembers and roles. 
D. Navigate to the project and then to the Roles section in the GCP Console. Review theroles and status. 

Answer: D

You need to add a group of new users to Cloud Identity. Some of the users already haveexisting Google accounts. You want to follow one of Google's recommended practices andavoid conflicting accounts. What should you do?

A. Invite the user to transfer their existing account 
B. Invite the user to use an email alias to resolve the conflict 
C. Tell the user that they must delete their existing account 
D. Tell the user to remove all personal email from the existing account 

Answer: B

30. You are running multiple microservices in a Kubernetes Engine cluster. Onemicroservice is rendering images. The microservice responsible for the image renderingrequires a large amount of CPU time compared to the memory it requires. The othermicroservices are workloads that are optimized for n1-standard machine types. You needto optimize your cluster so that all workloads are using resources as efficiently as possible.What should you do?

A. Assign the pods of the image rendering microservice a higher pod priority than the oldermicroservices 
B. Create a node pool with compute-optimized machine type nodes for the image renderingmicroservice Use the node pool with general-purpose machine type nodes for the other microservices 
C. Use the node pool with general-purpose machine type nodes for lite mage renderingmicroservice Create a nodepool with compute-optimized machine type nodes for the othermicroservices 
D. Configure the required amount of CPU and memory in the resource requestsspecification of the image rendering microservice deployment Keep the resource requestsfor the other microservices at the default 

Answer: B