Updated Jul-2023 100% Cover Real Associate-Cloud-Engineer Exam Questions Make Sure You 100% Pass
Associate-Cloud-Engineer dumps Accurate Questions and Answers with Free and Fast Updates
The Google Associate Cloud Engineer certification is designed to measure the candidates’ fundamental skills required to perform the deployment, monitoring, and maintenance of projects on Google Cloud. This certificate is a good starting point for those individuals who are new to Cloud and can be used as a stepping stone to the professional-level certifications of this vendor. To get certified, the applicants are required to complete one exam. The qualifying test measures the ability of the specialists to perform the following tasks: setting up the Cloud solution environment; planning and configuring Cloud solutions; deploying and implementing Cloud solutions; ensuring the effective operation of Cloud solutions; and configuring access & security.
NEW QUESTION # 89
Your developers are trying to connect to an Ubuntu server over SSH to diagnose some errors. However, the connection times out. Which command should help solve the problem?
- A. gcloud compute firewall-rules create "open-ssh"
- B. gcloud compute firewall-rules create "open-ssh" --network $NETWORK --allow tcp:22
- C. gcloud compute firewall-rules create "open-ssh" --network $NETWORK --allow tcp:3389
- D. gcloud compute firewall-rules create "open-ssh" --network $NETWORK --deny tcp:22
Answer: B
NEW QUESTION # 90
You created a Kubernetes deployment by running kubectl run nginx image=nginx labels=app=prod. Your Kubernetes cluster is also used by a number of other deployments. How can you find the identifier of the pods for this nginx deployment?
- A. gcloud get pods -selector="app=prod"
- B. gcloud list gke-deployments -filter={pod }
- C. kubectl get pods -I "app=prod"
- D. kubectl get deployments -output=pods
Answer: C
Explanation:
This command correctly lists pods that have the label app=prod. When creating the deployment, we used the label app=prod so listing pods that have this label retrieve the pods belonging to nginx deployments. You can list pods by using Kubernetes CLI kubectl get pods.
Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container-images/ Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container-images/#list-containers-filtering-by-pod-label
NEW QUESTION # 91
You have designed a solution on Google Cloud Platform (GCP) that uses multiple GCP products.
Your company has asked you to estimate the costs of the solution.
You need to provide estimates for the monthly total cost. What should you do?
- A. Provision the solution on GCP. Leave the solution provisioned for 1 week.
Use Stackdriver to determine the provisioned and used resource amounts.
Multiply the 1 week cost to determine the monthly costs. - B. Provision the solution on GCP. Leave the solution provisioned for 1 week.
Navigate to the Billing Report page in the Google Cloud Platform Console.
Multiply the 1 week cost to determine the monthly costs. - C. For each GCP product in the solution, review the pricing details on the products pricing page.
Create a Google Sheet that summarizes the expected monthly costs for each product. - D. For each GCP product in the solution, review the pricing details on the products pricing page.
Use the pricing calculator to total the monthly costs for each GCP product.
Answer: D
NEW QUESTION # 92
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements. You want to select a cost-efficient option. Which storage option should you use?
- A. Multi-Regional Storage
- B. Regional Storage
- C. Cold Storage
- D. Nearline Storage
Answer: D
Explanation:
Nearline, Coldline, and Archive offer ultra low-cost, highly-durable, highly available archival storage. For data accessed less than once a year, Archive is a cost-effective storage option for long-term preservation of data. Coldline is also ideal for cold storage--data your business expects to touch less than once a quarter. For warmer storage, choose Nearline: data you expect to access less than once a month, but possibly multiple times throughout the year. All storage classes are available across all GCP regions and provide unparalleled sub-second access speeds with a consistent API.
https://cloud.google.com/storage/archival
NEW QUESTION # 93
You're running an n-tier application on Compute Engine with an Apache web server serving up web requests. You want to consolidate all of your logging into Stackdriver. What's the best approach to get the Apache logs into Stackdriver?
- A. Enable Stackdriver monitoring when creating the instance.
- B. Create a log sink and export it to Stackdriver.
- C. Stackdriver logs application data from all instances by default.
- D. Install the Stackdriver monitoring and logging agents on the instance.
Answer: D
NEW QUESTION # 94
You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.
You check the status of the deployed pods and notice that one of them is still in PENDING status:
You want to find out why the pod is stuck in pending status. What should you do?
- A. View logs of the container in myapp-deployment-58ddbbb995-lp86mpod and check for warning messages.
- B. Review details of the myapp-service Service object and check for error messages.
- C. Review details of myapp-deployment-58ddbbb995-lp86mPod and check for warning messages.
- D. Review details of the myapp-deploymentDeployment object and check for error messages.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/run/docs/gke/troubleshooting
NEW QUESTION # 95
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?
- A. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
- B. Link the acquired company's projects to your company's billing account.
- C. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
- D. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
Answer: D
Explanation:
Reference:
https://cloud.google.com/resource-manager/docs/migrating-projects-billing
NEW QUESTION # 96
Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?
- A. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
- B. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
- C. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
- D. Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.
Answer: A
Explanation:
Reference:
https://cloud.google.com/solutions/federating-gcp-with-active-directory-introduction
NEW QUESTION # 97
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?
- A. Expand the CIDR range of the relevant subnet for the cluster.
- B. Add an alias IP range to the subnet used by the GKE clusters.
- C. Create a new VPC, and set up VPC peering with the existing VPC.
- D. Create a new subnet in the same region as the subnet being used.
Answer: A
Explanation:
Every subnet must have a primary IP address range. You can expand the primary IP address range at any time, even when Google Cloud resources use the subnet; however, you cannot shrink or change a subnet's primary IP address scheme after the subnet has been created. The first two and last two IP addresses of a primary IP address range are reserved by Google Cloud.
https://cloud.google.com/kubernetes-engine/docs/concepts/alias-ips
NEW QUESTION # 98
You have created a new project in Google Cloud through the gcloud command line interface (CLI) and linked a billing account. You need to create a new Compute Engine instance using the CLI.
You need to perform the prerequisite stops. What should you do?
- A. Create a VPC network in the project.
- B. Grant yourself the IAM role of Computer Admin.
- C. Create a Cloud Monitoring Workspace.
- D. Enable the compute googleapis.com API.
Answer: D
Explanation:
Always grant access to apis first in order to use GCP services
NEW QUESTION # 99
You are using Container Registry to centrally store your company's container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?
- A. In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes.
- B. Create a service account, and give it access to Cloud Storage. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.
- C. Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.
- D. When you create the GKE cluster, choose the Allow full access to all Cloud APIsoption under
'Access scopes'.
Answer: B
Explanation:
Explanation
NEW QUESTION # 100
You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?
- A. Manual Scaling with 3 instances.
- B. Basic Scaling with min_instances set to 3.
- C. Automatic Scaling with min_idle_instances set to 3.
- D. Basic Scaling with max_instances set to 3.
Answer: C
Explanation:
Reference:
https://cloud.google.com/appengine/docs/standard/python/how-instances-are-managed
NEW QUESTION # 101
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account.
You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?
- A. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
- B. Link the acquired company's projects to your company's billing account.
- C. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
- D. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/resource-manager/docs/migrating-projects-billing
NEW QUESTION # 102
You need to configure optimal data storage for files stored in Cloud Storage for minimal cost. The files are used in a mission-critical analytics pipeline that is used continually. The users are in Boston, MA (United States). What should you do?
- A. Configure regional storage for the region closest to the users.
Configure a Standard storage class - B. Configure regional storage for the region closest to the users.
Configure a Nearline storage class - C. Configure dual-regional storage for the dual region closest to the users.
Configure a Standard storage class - D. Configure dual-regional storage for the dual region closest to the users.
Configure a Nearline storage class
Answer: A
Explanation:
Continuous access to data means Standard since all of the other options are for infrequently accessed storage (Nearline, Coldline, Archive). Since no other regions are mentioned, single region is best in this case.
NEW QUESTION # 103
You need to manage a Cloud Spanner Instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?
- A. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45% If you exceed this threshold, add nodes lo your instance.
- B. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65% If you exceed this threshold, add nodes to your instance
- C. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. Use database query statistics to identity queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.
- D. Create an alert in Cloud Monitoring to alert when the percentage ot high priority CPU utilization reaches 45% Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage
Answer: A
NEW QUESTION # 104
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention.
What should you do?
- A. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
- B. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
- C. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- D. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
Answer: B
NEW QUESTION # 105
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements.
You want to select a cost-efficient option. Which storage option should you use?
- A. Cold Storage
- B. Multi-Regional Storage
- C. Nearline Storage
- D. Regional Storage
Answer: A
Explanation:
Explanation
Nearline, Coldline, and Archive offer ultra low-cost, highly-durable, highly available archival storage. For data accessed less than once a year, Archive is a cost-effective storage option for long-term preservation of data.
Coldline is also ideal for cold storage-data your business expects to touch less than once a quarter. For warmer storage, choose Nearline: data you expect to access less than once a month, but possibly multiple times throughout the year. All storage classes are available across all GCP regions and provide unparalleled sub-second access speeds with a consistent API.
NEW QUESTION # 106
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?
- A. Create a new VPC, and set up VPC peering with the existing VPC.
- B. Add an alias IP range to the subnet used by the GKE clusters.
- C. Create a new subnet in the same region as the subnet being used.
- D. Expand the CIDR range of the relevant subnet for the cluster.
Answer: A
Explanation:
To create a VPC peering connection, first create a request to peer with another VPC.
NEW QUESTION # 107
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?
- A. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
- B. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing
- C. Use a custom mode VPC network, configure static routes, and use active/passive routing
- D. Use an automatic mode VPC network, configure static routes, and use active/active routing
Answer: B
NEW QUESTION # 108
You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?
- A. Create a sink to BigQuery to export all the logs. Create a Data Studio dashboard on the exported logs.
- B. Grant Project Owner access to the Service Account.
- C. Create a custom log-based metric for the specific error to be used in an Alerting Policy.
- D. In the Log Viewer, filter the logs on severity 'Error' and the name of the Service Account.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/logging/docs/view/advanced-queries
NEW QUESTION # 109
You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?
- A. Ask your ML team to add the "accelerator: gpu" annotation to their pod specification.
- B. Recreate all the nodes of the GKE cluster to enable GPUs on all of them.
- C. Add a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.
- D. Create your own Kubernetes cluster on top of Compute Engine with nodes that have GPUs. Dedicate this cluster to your ML team.
Answer: B
NEW QUESTION # 110
Your company wants to standardize the creation and management of multiple Google Cloud resources using Infrastructure as Code. You want to minimize the amount of repetitive code needed to manage the environment. What should you do?
- A. Create a bash script that contains all requirement steps as gcloud commands.
- B. Use the Cloud Console interface to provision and manage all related resources.
- C. Use curl in a terminal to send a REST request to the relevant Google API for each individual resource.
- D. Develop templates for the environment using Cloud Deployment Manager.
Answer: D
Explanation:
You can use Google Cloud Deployment Manager to create a set of Google Cloud resources and manage them as a unit, called a deployment. For example, if your team's development environment needs two virtual machines (VMs) and a BigQuery database, you can define these resources in a configuration file, and use Deployment Manager to create, change, or delete these resources. You can make the configuration file part of your team's code repository, so that anyone can create the same environment with consistent results.
https://cloud.google.com/deployment-manager/docs/quickstart
NEW QUESTION # 111
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event.
You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?
- A. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
- B. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing
- C. Use a custom mode VPC network, configure static routes, and use active/passive routing
- D. Use an automatic mode VPC network, configure static routes, and use active/active routing
Answer: B
NEW QUESTION # 112
You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible. What should you do?
- A. Create an instance template with the Jenkins executable. Create a managed instance group with this template.
- B. Deploy Jenkins through the Google Cloud Marketplace.
- C. Create a new Kubernetes Engine cluster. Create a deployment for the Jenkins image.
- D. Create a new Compute Engine instance. Run the Jenkins executable.
Answer: B
NEW QUESTION # 113
You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google- recommended practices to provide the application with access to Cloud Storage. What should you do?
- A. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).
2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.
3. Configure your servers to use that instance as a proxy to access Cloud Storage. - B. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.
2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.
3. Configure your new instances to use this ILB as proxy. - C. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.
2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.
3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com. - D. 1. Use nslookup to get the IP address for storage.googleapis.com.
2. Negotiate with the security team to be able to give a public IP address to the servers.
3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.
Answer: C
Explanation:
https://cloud.google.com/vpc/docs/configure-private-google-access-hybrid
NEW QUESTION # 114
......
The Google Associate-Cloud-Engineer Certification Exam consists of multiple-choice questions and is designed to test the candidate’s knowledge and understanding of Google Cloud Platform. The exam covers topics such as deploying applications, managing virtual machines, networking, storage, and security. The exam also tests the candidate’s ability to use Google Cloud Console, Google Cloud SDK, and other command-line tools.
Real Associate-Cloud-Engineer Quesions Pass Certification Exams Easily: https://www.pass4training.com/Associate-Cloud-Engineer-pass-exam-training.html
Practice with these Associate-Cloud-Engineer dumps Certification Sample Questions: https://drive.google.com/open?id=1kGmIgfSDHT4eOS5N42Yy58Z0LsEcjVV7
