Regenerate Associate-Cloud-Engineer Testing Software For Google Cloud Certified - Associate Cloud Engineer Certification

NEW QUESTION 1
You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

• A. Create a Cloud Memorystore for Redis instance with 32-GB capacity.
• B. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
• C. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.
• D. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.

Answer: B

NEW QUESTION 2
You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers’ Pods. What should you do?

• A. Use Binary Authorization and whitelist only the container images used by your customers’ Pods.
• B. Use the Container Analysis API to detect vulnerabilities in the containers used by your customers’ Pods.
• C. Create a GKE node pool with a sandbox type configured to gviso
• D. Add the parameter runtimeClassName: gvisor to the specification of your customers’ Pods.
• E. Use the cos_containerd image for your GKE node
• F. Add a nodeSelector with the value cloud.google.com/gke-os-distribution: cos_containerd to the specification of your customers’ Pods.

Answer: C

NEW QUESTION 3
Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?

• A. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.
• B. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.
• C. Create a custom role by removing delete permissions, and add users to that role only.
• D. Create a custom role by removing delete permission
• E. Add users to the group, and then add the group to the custom role.

Answer: B

NEW QUESTION 4
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?

• A. Migrate the workload to a Compute Engine Preemptible VM.
• B. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
• C. Migrate the workload to a Compute Engine V
• D. Start and stop the instance as needed.
• E. Create an Instance Template with Preemptible VMs O
• F. Create a Managed Instance Group from the template and adjust Target CPU Utilizatio
• G. Migrate the workload.

Answer: B

NEW QUESTION 5
You need to select and configure compute resources for a set of batch processing jobs. These jobs take around 2 hours to complete and are run nightly. You want to minimize service costs. What should you do?

• A. Select Google Kubernetes Engin
• B. Use a single-node cluster with a small instance type.
• C. Select Google Kubernetes Engin
• D. Use a three-node cluster with micro instance types.
• E. Select Compute Engin
• F. Use preemptible VM instances of the appropriate standard machine type.
• G. Select Compute Engin
• H. Use VM instance types that support micro bursting.

Answer: C

NEW QUESTION 6
Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

• A. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
• B. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
• C. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
• D. Ask each employee to create a Google account using self signu
• E. Require that each employee use their company email address and password.

Answer: A

NEW QUESTION 7
You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?

• A. Create the instance with the default Compute Engine service account Grant the service account permissions on Cloud Storage.
• B. Create the instance with the default Compute Engine service account Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
• C. Create a new service account and assign this service account to the new instance Grant the service account permissions on Cloud Storage.
• D. Create a new service account and assign this service account to the new instance Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.

Answer: C

NEW QUESTION 8
Your team maintains the infrastructure for your organization. The current infrastructure requires changes. You need to share your proposed changes with the rest of the team. You want to follow Google’s recommended best practices. What should you do?

• A. Use Deployment Manager templates to describe the proposed changes and store them in a Cloud Storage bucket.
• B. Use Deployment Manager templates to describe the proposed changes and store them in Cloud Source Repositories.
• C. Apply the change in a development environment, run gcloud compute instances list, and then save the output in a shared Storage bucket.
• D. Apply the change in a development environment, run gcloud compute instances list, and then save the output in Cloud Source Repositories.

Answer: B

NEW QUESTION 9
You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?

• A. Save file automatic first-of-the- month backup for three years Store the backup file in an Archive class Cloud Storage bucket
• B. Convert the automatic first-of-the-month backup to an export file Write the export file to a Coldlineclass Cloud Storage bucket
• C. Set up an export job for the first of the month Write the export file to an Archive class Cloud Storage bucket
• D. Set up an on-demand backup tor the first of the month Write the backup to an Archive class Cloud Storage bucket

Answer: A

NEW QUESTION 10
Your managed instance group raised an alert stating that new instance creation has failed to create new instances. You need to maintain the number of running instances specified by the template to be able to process expected application traffic. What should you do?

• A. Create an instance template that contains valid syntax which will be used by the instance grou
• B. Delete any persistent disks with the same name as instance names.
• C. Create an instance template that contains valid syntax that will be used by the instance grou
• D. Verify that the instance name and persistent disk name values are not the same in the template.
• E. Verify that the instance template being used by the instance group contains valid synta
• F. Delete any persistent disks with the same name as instance name
• G. Set the disks.autoDelete property to true in the instance template.
• H. Delete the current instance template and replace it with a new instance templat
• I. Verify that the instance name and persistent disk name values are not the same in the templat
• J. Set the disks.autoDelete property to true in the instance template.

Answer: C

NEW QUESTION 11
Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?

• A. Download and deploy the Jenkins Java WAR to App Engine Standard.
• B. Create a new Compute Engine instance and install Jenkins through the command line interface.
• C. Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.
• D. Use GCP Marketplace to launch the Jenkins solution.

Answer: D

NEW QUESTION 12
You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible. What should you do?

• A. Deploy Jenkins through the Google Cloud Marketplace.
• B. Create a new Compute Engine instanc
• C. Run the Jenkins executable.
• D. Create a new Kubernetes Engine cluste
• E. Create a deployment for the Jenkins image.
• F. Create an instance template with the Jenkins executabl
• G. Create a managed instance group with this template.

Answer: A

NEW QUESTION 13
You are using Container Registry to centrally store your company’s container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?

• A. In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes.
• B. When you create the GKE cluster, choose the Allow full access to all Cloud APIs option under ‘Access scopes’.
• C. Create a service account, and give it access to Cloud Storag
• D. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.
• E. Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.

Answer: B

NEW QUESTION 14
Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

• A. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
• B. Tag all the instances with the same network ta
• C. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
• D. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
• E. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: B

NEW QUESTION 15
You need to configure optimal data storage for files stored in Cloud Storage for minimal cost. The files are used in a mission-critical analytics pipeline that is used continually. The users are in Boston, MA (United States). What should you do?

• A. Configure regional storage for the region closest to the users Configure a Nearline storage class
• B. Configure regional storage for the region closest to the users Configure a Standard storage class
• C. Configure dual-regional storage for the dual region closest to the users Configure a Nearline storage class
• D. Configure dual-regional storage for the dual region closest to the users Configure a Standard storage class

Answer: B

NEW QUESTION 16
......