Abreast Of The Times Associate-Cloud-Engineer Exam Answers For Google Cloud Certified - Associate Cloud Engineer Certification

NEW QUESTION 1
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?

• A. Migrate the workload to a Compute Engine Preemptible VM.
• B. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
• C. Migrate the workload to a Compute Engine V
• D. Start and stop the instance as needed.
• E. Create an Instance Template with Preemptible VMs O
• F. Create a Managed Instance Group from the template and adjust Target CPU Utilizatio
• G. Migrate the workload.

Answer: B

NEW QUESTION 2
Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?

• A. Add the group for the finance team to roles/billing user role.
• B. Add the group for the finance team to roles/billing admin role.
• C. Add the group for the finance team to roles/billing viewer role.
• D. Add the group for the finance team to roles/billing project/Manager role.

Answer: A

NEW QUESTION 3
Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

• A. Modify the existing subnet range to 172.16.20.0/24.
• B. Create a new Secondary IP Range in the VPC and configure the VMs to use that range.
• C. Create a new VPC network for the VM
• D. Enable VPC Peering between the VMs’ VPC network and the Dataproc cluster VPC network.
• E. Create a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC networ
• F. Configure a custom Route exchange.

Answer: B

Explanation:
A subnet has a single primary IP address range and, optionally, one or more secondary IP address ranges. For each subnet IP address range, Google Cloud creates a subnet route. When you use VPC Network Peering, Google Cloud always exchanges the subnet routes that don't use privately reused public IP addresses between the two peered networks. If firewall rules in each network permit communication, VM instances in one network can communicate with instances in the peered network.

NEW QUESTION 4
Your company uses BigQuery for data warehousing. Over time, many different business units in your company have created 1000+ datasets across hundreds of projects. Your CIO wants you to examine all
datasets to find tables that contain an employee_ssn column. You want to minimize effort in performing this task. What should you do?

• A. Go to Data Catalog and search for employee_ssn in the search box.
• B. Write a shell script that uses the bq command line tool to loop through all the projects in your organization.
• C. Write a script that loops through all the projects in your organization and runs a query on INFORMATION_SCHEMA.COLUMNS view to find the employee_ssn column.
• D. Write a Cloud Dataflow job that loops through all the projects in your organization and runs a query on INFORMATION_SCHEMA.COLUMNS view to find employee_ssn column.

Answer: D

NEW QUESTION 5
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow
Google-recommended practices to set up a high availability Cloud VPN. What should you do?

• A. Use a custom mode VPC network, configure static routes, and use active/passive routing
• B. Use an automatic mode VPC network, configure static routes, and use active/active routing
• C. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
• D. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing

Answer: D

NEW QUESTION 6
You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

• A. Cloud SQL
• B. Cloud Spanner
• C. Cloud Firestore
• D. Cloud Datastore

Answer: D

NEW QUESTION 7
You need to host an application on a Compute Engine instance in a project shared with other teams. You want to prevent the other teams from accidentally causing downtime on that application. Which feature should you use?

• A. Use a Shielded VM.
• B. Use a Preemptible VM.
• C. Use a sole-tenant node.
• D. Enable deletion protection on the instance.

Answer: D

NEW QUESTION 8
You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?

• A. Create a single custom VPC with 2 subnet
• B. Create each subnet in a different region and with a different CIDR range.
• C. Create a single custom VPC with 2 subnet
• D. Create each subnet in the same region and with the same CIDR range.
• E. Create 2 custom VPCs, each with a single subne
• F. Create each subnet is a different region and with a different CIDR range.
• G. Create 2 custom VPCs, each with a single subne
• H. Create each subnet in the same region and with the same CIDR range.

Answer: A

NEW QUESTION 9
You’ve deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

• A. Store the database password inside the Docker image of the container, not in the YAML file.
• B. Store the database password inside a Secret objec
• C. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
• D. Store the database password inside a ConfigMap objec
• E. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
• F. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.

Answer: C

NEW QUESTION 10
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

• A. Give “project owner” for web-applications appropriate roles to crm-databases- proj
• B. Give “project owner” role to crm-databases-proj and the web-applications project.
• C. Give “project owner” role to crm-databases-proj and bigquery.dataViewer role to web-applications.
• D. Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.

Answer: D

NEW QUESTION 11
You want to select and configure a cost-effective solution for relational data on Google Cloud Platform. You are working with a small set of operational data in one geographic location. You need to support point-in-time recovery. What should you do?

• A. Select Cloud SQL (MySQL). Verify that the enable binary logging option is selected.
• B. Select Cloud SQL (MySQL). Select the create failover replicas option.
• C. Select Cloud Spanne
• D. Set up your instance with 2 nodes.
• E. Select Cloud Spanne
• F. Set up your instance as multi-regional.

Answer: A

NEW QUESTION 12
Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.

You want to resolve the issue. What should you do?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

NEW QUESTION 13
You have an application that receives SSL-encrypted TCP traffic on port 443. Clients for this application are located all over the world. You want to minimize latency for the clients. Which load balancing option should you use?

• A. HTTPS Load Balancer
• B. Network Load Balancer
• C. SSL Proxy Load Balancer
• D. Internal TCP/UDP Load Balance
• E. Add a firewall rule allowing ingress traffic from 0.0.0.0/0 on the target instances.

Answer: C

NEW QUESTION 14
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?

• A. Set metadata to enable-oslogin=true for the instanc
• B. Grant the dev1 group the compute.osLogin role.Direct them to use the Cloud Shell to ssh to that instance.
• C. Set metadata to enable-oslogin=true for the instanc
• D. Set the service account to no service account for that instanc
• E. Direct them to use the Cloud Shell to ssh to that instance.
• F. Enable block project wide keys for the instanc
• G. Generate an SSH key for each user in the dev1 group.Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
• H. Enable block project wide keys for the instanc
• I. Generate an SSH key and associate the key with that instanc
• J. Distribute the key to dev1 users and direct them to use their third-party tools to connect.

Answer: D

NEW QUESTION 15
Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google’s recommended practices. Which storage option should you use?

• A. Multi-Regional Storage
• B. Regional Storage
• C. Nearline Storage
• D. Coldline Storage

Answer: D

NEW QUESTION 16
Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?

• A. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.
• B. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.
• C. Create a custom role by removing delete permissions, and add users to that role only.
• D. Create a custom role by removing delete permission
• E. Add users to the group, and then add the group to the custom role.

Answer: B

NEW QUESTION 17
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?

• A. Link the acquired company’s projects to your company's billing account.
• B. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
• C. Migrate the acquired company’s projects into your company’s GCP organizatio
• D. Link the migrated projects to your company's billing account.
• E. Create a new GCP organization and a new billing accoun
• F. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.

Answer: D

NEW QUESTION 18
......