Google Associate-Cloud-Engineer Real Exam Questions Test Engine Dumps Training With 218 Questions
Associate-Cloud-Engineer Actual Questions Answers PDF 100% Cover Real Exam Questions
Exam highlights
The Google Associate Cloud Engineer certification exam is 2 hours long and covers mostly two question formats, which are multiple choice and multiple select. The applicants can take the test as an online proctored option (remotely) or as an onsite proctored exam at one of the centers across the world. You can go through the official website for details of the test-taking process. To register for this exam, the individuals must pay the fee of $125. This fee applies to a single try. If you do not pass your Google exam at the first attempt, you have to try again and pay another fee for registration. The test is available in the English, Spanish, Japanese, and Indonesian languages.
NEW QUESTION 31
You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?
- A. Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to BETA while testing the role permissions.
- B. Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to BETA while testing the role permissions.
- C. Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
- D. Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
Answer: D
NEW QUESTION 32
You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?
- A. In the Log Viewer, filter the logs on severity `Error' and the name of the Service Account.
- B. Create a custom log-based metrics for the specific error to be used in an Alerting Policy.
- C. Create a sink to BigQuery to export all the logs.
Create a Data Studio dashboard on the exported logs. - D. Grant Project Owner access to the Service Account.
Answer: A
Explanation:
https://cloud.google.com/logging/docs/view/advanced-queries8E6BA412E7DB6A14A62CC68E5EB6DAE3
NEW QUESTION 33
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
- B. When creating the VM, use Intel Skylake as the CPU platform.
- C. When creating the VM, use machine type n1-standard-96.
- D. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
Answer: D
NEW QUESTION 34
Your company developed a mobile game that is deployed on Google Cloud. Gamers are connecting to the game with their personal phones over the Internet. The game sends UDP packets to update the servers about the gamers' actions while they are playing in multiplayer mode. Your game backend can scale over multiple virtual machines (VMs), and you want to expose the VMs over a single IP address. What should you do?
- A. Configure an SSL Proxy load balancer in front of the application servers.
- B. Configure an External HTTP(s) load balancer in front of the application servers.
- C. Configure an Internal UDP load balancer in front of the application servers.
- D. Configure an External Network load balancer in front of the application servers.
Answer: A
Explanation:
https://cloud.google.com/solutions/connecting-securely
NEW QUESTION 35
A customer is running a critical payroll system in a production environment in one data center and a disaster recovery (DR) environment in another. The application includes load-balanced web servers and failover for the MySQL database. The customer's DR process is manual and error-phone. For this reason, management has asked IT to migrate the application to AWS and make it highly available so that IT no longer has to manually fail over the environment.
How should a Solutions Architect migrate the system to AWS?
- A. Migrate the production environment to span multiple Availability Zones, using Elastic Load Balancing and Multi-AZ Amazon RDS. Decommission the DR environment because it is no longer needed.
- B. Migrate the production environment to a single Availability Zone, and set up instance recovery for Amazon EC2. Decommission the DR environment because it is no longer needed.
- C. Migrate the production and DR environments to different Availability Zones within the same region. Let AWS manage failover between the environments.
- D. Migrate the production and DR environments to different regions. Let AWS manage failover between the environments.
Answer: D
NEW QUESTION 36
You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?
- A. Fill all resources in the Pricing Calculator to get an estimate of the monthly cost.
- B. Configure Billing Data Export to BigQuery and visualize the data in Data Studio.
- C. Visit the Cost Table page to get a CSV export and visualize it using Data Studio.
- D. Use the Reports view in the Cloud Billing Console to view the desired cost information.
Answer: B
Explanation:
Reference:
https://cloud.google.com/billing/docs/how-to/visualize-data
NEW QUESTION 37
You're deploying an application to a Compute Engine instance, and it's going to need to make calls to read from Cloud Storage and Bigtable. You want to make sure you're following the principle of least privilege. What's the easiest way to ensure the code can authenticate to the required Google Cloud APIs?
- A. Use the default Compute Engine service account and set its scopes. Let the code find the default service account using "Application Default Credentials".
- B. Register the application with the Binary Registration Service and apply the required roles.
- C. Create a new user account with the required roles. Store the credentials in Cloud Key Management Service and download them to the instance in code.
- D. Create a new service account and key with the required limited permissions. Set the instance to use the new service account. Edit the code to use the service account key.
Answer: A
NEW QUESTION 38
For analysis purposes, you need to send all the logs from all of your Compute Engine instances to a BigQuery dataset called platform-logs. You have already installed the Stackdriver Logging agent on all the instances. You want to minimize cost. What should you do?
- A. 1. Give the BigQuery Data Editor role on the platform-logsdataset to the service accounts used by your instances.
2. Update your instances' metadata to add the following value: logs-destination:
bq://platform-logs. - B. 1. In Stackdriver Logging, create a filter to view only Compute Engine logs.
2. Click Create Export.
3. Choose BigQuery as Sink Service, and the platform-logsdataset as Sink Destination. - C. 1. In Stackdriver Logging, create a logs export with a Cloud Pub/Sub topic called logsas a sink.
2. Create a Cloud Function that is triggered by messages in the logstopic.
3. Configure that Cloud Function to drop logs that are not from Compute Engine and to insert Compute Engine logs in the platform-logsdataset. - D. 1. Create a Cloud Function that has the BigQuery User role on the platform-logsdataset.
2. Configure this Cloud Function to create a BigQuery Job that executes this query:
INSERT INTO dataset.platform-logs (timestamp, log)
SELECT timestamp, log FROM compute.logs
WHERE timestamp > DATE_SUB(CURRENT_DATE(), INTERVAL 1 DAY)
3. Use Cloud Scheduler to trigger this Cloud Function once a day.
Answer: B
Explanation:
https://cloud.google.com/logging/docs/export/configure_export_v2
NEW QUESTION 39
You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high.
What should you do?
- A. Run a test using a managed instance group.
If the test is successful, use N1 Standard VMs in the managed instance group when running future jobs. - B. Run a test using N1 standard VMs instead of N2.
If the test is successful, use N1 Standard VMs when running future jobs. - C. Run a test using simulated maintenance events.
If the test is successful, use preemptible N1 Standard VMs when running future jobs. - D. Run a test using simulated maintenance events.
If the test is successful, use N1 Standard VMs when running future jobs.
Answer: C
Explanation:
Creating and starting a preemptible VM instance
This page explains how to create and use a preemptible virtual machine (VM) instance. A preemptible instance is an instance you can create and run at a much lower price than normal instances. However, Compute Engine might terminate (preempt) these instances if it requires access to those resources for other tasks. Preemptible instances will always terminate after 24 hours. To learn more about preemptible instances, read the preemptible instances documentation.
Preemptible instances are recommended only for fault-tolerant applications that can withstand instance preemptions. Make sure your application can handle preemptions before you decide to create a preemptible instance. To understand the risks and value of preemptible instances, read the preemptible instances documentation.
https://cloud.google.com/compute/docs/instances/create-start-preemptible-instance
NEW QUESTION 40
A company is migrating its data center to AWS. As part of this migration, there is a three-tier web application that has strict data-at-rest encryption requirements. The customer deploys this application on Amazon EC2 using Amazon EBS, and now must provide encryption at-rest.
How can this requirement be met without changing the application?
- A. Use encrypted EBS storage volumes with AWS-managed keys.
- B. Use third-party tools to encrypt the EBS data volumes with Key Management Service Bring Your Own Keys.
- C. Use an application-specific encryption API with AWS server-side encryption.
- D. Use AWS Key Management Service and move the encrypted data to Amazon S3.
Answer: A
NEW QUESTION 41
2. Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?
- A. Assign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs
- B. Turn on Data Access Logs for the buckets they want to audit, and Then build a query in the log viewer that filters on Cloud Storage
- C. Assign the appropriate permissions, and then use Cloud Monitoring to review metrics
- D. Use the export logs API to provide the Admin Activity Audit Logs in the format they want
Answer: C
NEW QUESTION 42
You want to verify the IAM users and roles assigned within a GCP project named my-project. What should you do?
- A. Run gcloud iam roles list. Review the output section.
- B. Navigate to the project and then to the Roles section in the GCP Console. Review the roles and status.
- C. Run gcloud iam service-accounts list. Review the output section.
- D. Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles.
Answer: B
NEW QUESTION 43
Your developers are trying to select the best compute service to run a static website. They have a dozen HTML pages, a few Javascript files, and some CSS. They need the site to be highly available for the few weeks it is running. They also have a limited budget.
What is the best service to use to run the site?
- A. Cloud Storage
- B. Kubernetes Engine
- C. App Engine
- D. Compute Engine
Answer: A
NEW QUESTION 44
You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices. What should you do?
- A. Add the auditors group to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.
- B. Add the auditors group to two new custom IAM roles.
- C. Add the auditor user accounts to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.
- D. Add the auditor user accounts to two new custom IAM roles.
Answer: C
Explanation:
Reference:
https://cloud.google.com/iam/docs/roles-audit-logging
NEW QUESTION 45
A company is launching a static website using the zone apex (mycompany.com). The company wants to use Amazon Route 53 for DNS.
Which steps should the company perform to implement a scalable and cost-effective solution? (Choose two.)
- A. Serve the website from an Amazon S3 bucket, and map a Route 53 alias record to the website endpoint.
- B. Host the website using AWS Elastic Beanstalk, and map a Route 53 alias record to the Beanstalk stack.
- C. Host the website on an Amazon EC2 instance, and map a Route 53 alias record to the public IP address of the Amazon EC2 instance.
- D. Host the website on an Amazon EC2 instance with ELB and Auto Scaling, and map a Route 53 alias record to the ELB endpoint.
- E. Create a Route 53 hosted zone, and set the NS records of the domain to use Route 53 name servers.
Answer: A,D
NEW QUESTION 46
You are deploying a production application on Compute Engine. You want to prevent anyone from accidentally destroying the instance by clicking the wrong button. What should you do?
- A. Disable the flag "Delete boot disk when instance is deleted."
- B. Enable Preemptibility on the instance.
- C. Enable delete protection on the instance.
- D. Disable Automatic restart on the instance.
Answer: A
NEW QUESTION 47
......
Dumpexams Associate-Cloud-Engineer Exam Practice Test Questions: https://www.dumpexams.com/Associate-Cloud-Engineer-real-answers.html
Associate-Cloud-Engineer Exam questions and answers: https://drive.google.com/open?id=1xMng3xEMG0xXpXgA9ostiSGbnk6Cwfsr