A Review Of Approved Associate-Cloud-Engineer Testing Software

NEW QUESTION 1
Your company’s infrastructure is on-premises, but all machines are running at maximum capacity. You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?

• A. In Google Cloud, configure the VPC as a host for Shared VPC.
• B. In Google Cloud, configure the VPC for VPC Network Peering.
• C. Create bastion hosts both in your on-premises environment and on Google Clou
• D. Configure both as proxy servers using their public IP addresses.
• E. Set up Cloud VPN between the infrastructure on-premises and Google Cloud.

Answer: B

NEW QUESTION 2
You are building an application that processes data files uploaded from thousands of suppliers. Your primary goals for the application are data security and the expiration of aged data. You need to design the application to:
•Restrict access so that suppliers can access only their own data.
•Give suppliers write access to data only for 30 minutes.
•Delete data that is over 45 days old.
You have a very short development cycle, and you need to make sure that the application requires minimal maintenance. Which two strategies should you use? (Choose two.)

• A. Build a lifecycle policy to delete Cloud Storage objects after 45 days.
• B. Use signed URLs to allow suppliers limited time access to store their objects.
• C. Set up an SFTP server for your application, and create a separate user for each supplier.
• D. Build a Cloud function that triggers a timer of 45 days to delete objects that have expired.
• E. Develop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than 45 days.

Answer: AE

NEW QUESTION 3
You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?

• A. Ask your ML team to add the “accelerator: gpu” annotation to their pod specification.
• B. Recreate all the nodes of the GKE cluster to enable GPUs on all of them.
• C. Create your own Kubernetes cluster on top of Compute Engine with nodes that have GPU
• D. Dedicate this cluster to your ML team.
• E. Add a new, GPU-enabled, node pool to the GKE cluste
• F. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.

Answer: B

NEW QUESTION 4
You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?

• A. Using the GCP Console, filter the Activity log to view the information.
• B. Using the GCP Console, filter the Stackdriver log to view the information.
• C. View the bucket in the Storage section of the GCP Console.
• D. Create a trace in Stackdriver to view the information.

Answer: A

NEW QUESTION 5
You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

• A. Cloud SQL
• B. Cloud Spanner
• C. Cloud Firestore
• D. Cloud Datastore

Answer: D

NEW QUESTION 6
You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.

You check the status of the deployed pods and notice that one of them is still in PENDING status:

You want to find out why the pod is stuck in pending status. What should you do?

• A. Review details of the myapp-service Service object and check for error messages.
• B. Review details of the myapp-deployment Deployment object and check for error messages.
• C. Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.
• D. View logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.

Answer: C

NEW QUESTION 7
You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate reporting under the same Stackdriver Monitoring dashboard. What should you do?

• A. Use Shared VPC to connect all projects, and link Stackdriver to one of the projects.
• B. For each project, create a Stackdriver accoun
• C. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all other projects.
• D. Configure a single Stackdriver account, and link all projects to the same account.
• E. Configure a single Stackdriver account for one of the project
• F. In Stackdriver, create a Group and add the other project names as criteria for that Group.

Answer: D

NEW QUESTION 8
You are using multiple configurations for gcloud. You want to review the configured Kubernetes Engine cluster of an inactive configuration using the fewest possible steps. What should you do?

• A. Use gcloud config configurations describe to review the output.
• B. Use gcloud config configurations activate and gcloud config list to review the output.
• C. Use kubectl config get-contexts to review the output.
• D. Use kubectl config use-context and kubectl config view to review the output.

Answer: D

NEW QUESTION 9
You need to create a custom VPC with a single subnet. The subnet’s range must be as large as possible. Which range should you use?

• A. .00.0.0/0
• B. 10.0.0.0/8
• C. 172.16.0.0/12
• D. 192.168.0.0/16

Answer: B

Explanation:
https://cloud.google.com/vpc/docs/vpc#manually_created_subnet_ip_ranges

NEW QUESTION 10
Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the production services in order to perform their job. You want to prevent Google Cloud product changes from broadening their permissions in the future. You want to follow Google-recommended practices. What should you do?

• A. Grant all members of the DevOps team the role of Project Editor on the organization level.
• B. Grant all members of the DevOps team the role of Project Editor on the production project.
• C. Create a custom role that combines the required permission
• D. Grant the DevOps team the custom role on the production project.
• E. Create a custom role that combines the required permission
• F. Grant the DevOps team the custom role on the organization level.

Answer: A

NEW QUESTION 11
Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?

• A. Enable Cloud Identity in the GCP Console for your domain.
• B. Grant them the required IAM roles using their G Suite email address.
• C. Create a CSV sheet with all users’ email addresse
• D. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.
• E. In the G Suite console, add the users to a special group called cloud-console-users@yourdomain.com.Rely on the default behavior of the Cloud Platform to grant users access if they are members of this group.

Answer: B

NEW QUESTION 12
You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?

• A. Use granular logging statements within a Deployment Manager template authored in Python.
• B. Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
• C. Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.
• D. Execute the Deployment Manager template using the –-preview option in the same project, and observe the state of interdependent resources.

Answer: D

NEW QUESTION 13
You will have several applications running on different Compute Engine instances in the same project. You want to specify at a more granular level the service account each instance uses when calling Google Cloud APIs. What should you do?

• A. When creating the instances, specify a Service Account for each instance
• B. When creating the instances, assign the name of each Service Account as instance metadata
• C. After starting the instances, use gcloud compute instances update to specify a Service Account for each instance
• D. After starting the instances, use gcloud compute instances update to assign the name of the relevant Service Account as instance metadata

Answer: C

NEW QUESTION 14
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?

• A. Enable node auto-provisioning on the GKE cluster.
• B. Create a VerticalPodAutscaler for those workloads.
• C. Create a node pool with preemptible VMs and GPUs attached to those VMs.
• D. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.

Answer: C

NEW QUESTION 15
Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?

• A. Add the users to roles/browser role.
• B. Add the users to roles/iam.roleViewer role.
• C. Add the users to a group, and add this group to roles/browser role.
• D. Add the users to a group, and add this group to roles/iam.roleViewer role.

Answer: C

NEW QUESTION 16
......