Mar-2024 Free Google Associate-Cloud-Engineer Exam Question Practice Exams
Ace Associate-Cloud-Engineer Certification with 268 Actual Questions
Google Associate-Cloud-Engineer certification is an excellent way for IT professionals to validate their cloud computing skills and demonstrate their competence in the GCP environment. Earning this certification can be highly beneficial as it can help individuals boost their careers and succeed in the cloud computing industry. If you want to pursue a career in cloud computing or improve your existing cloud skills, the Google Associate-Cloud-Engineer certification is definitely worth considering.
Below is the cost of Associate Cloud Engineer Exam
The price of Associate Cloud Engineer exam is $125 USD (plus tax where appropriate)
Google Associate-Cloud-Engineer (Google Associate Cloud Engineer) Exam is a certification exam designed for individuals who have basic knowledge and experience with Google Cloud Platform (GCP) products and services. Associate-Cloud-Engineer exam focuses on testing the candidate's ability to deploy applications, monitor operations, and manage enterprise solutions on GCP. Since the exam is designed for entry-level candidates, it is a great starting point for those who are looking to establish their careers as cloud engineers.
NEW QUESTION # 56
You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.
You check the status of the deployed pods and notice that one of them is still in PENDING status:
You want to find out why the pod is stuck in pending status. What should you do?
- A. Review details of the myapp-deployment Deployment object and check for error messages.
- B. Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.
- C. View logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.
- D. Review details of the myapp-service Service object and check for error messages.
Answer: B
Explanation:
https://kubernetes.io/docs/tasks/debug-application-cluster/debug-application/#debugging-pods
NEW QUESTION # 57
You need to create a copy of a custom Compute Engine virtual machine (VM) to facilitate an expected increase in application traffic due to a business acquisition. What should you do?
- A. Create a custom Compute Engine image from a snapshot. Create your images from that image.
- B. Create a Compute Engine snapshot of your base VM. Create your instances from that snapshot.
- C. Create a Compute Engine snapshot of your base VM. Create your images from that snapshot.
- D. Create a custom Compute Engine image from a snapshot. Create your instances from that image.
Answer: D
Explanation:
Explanation
A custom image belongs only to your project. To create an instance with a custom image, you must first have a custom image.
NEW QUESTION # 58
You have a large 5-TB AVRO file stored in a Cloud Storage bucket. Your analysts are proficient only in SQL and need access to the data stored in this file. You want to find a cost-effective way to complete their request as soon as possible. What should you do?
- A. Create external tables in BigQuery that point to Cloud Storage buckets and run a SQL query on these external tables to complete your request.
- B. Load data in Cloud Datastore and run a SQL query against it.
- C. Create a BigQuery table and load data in BigQuery. Run a SQL query on this table and drop this table after you complete your request.
- D. Create a Hadoop cluster and copy the AVRO file to NDFS by compressing it. Load the file in a hive table and provide access to your analysts so that they can run SQL queries.
Answer: A
NEW QUESTION # 59
Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.
You want to resolve the issue. What should you do?
- A. Option C
- B. Option D
- C. Option A
- D. Option B
Answer: B
NEW QUESTION # 60
Your application is running on Google Cloud in a managed instance group (MIG). You see errors in Cloud Logging for one VM that one of the processes is not responsive. You want to replace this VM in the MIG quickly. What should you do?
- A. Use the gcloud compute instance-groups managed recreate-instances command to recreate theVM.
- B. Use the gcloud compute instances update command with a REFRESH action for the VM.
- C. Update and apply the instance template of the MIG.
- D. Select the MIG from the Compute Engine console and, in the menu, select Replace VMs.
Answer: D
NEW QUESTION # 61
The core business of your company is to rent out construction equipment at a large scale. All the equipment that is being rented out has been equipped with multiple sensors that send event information every few seconds. These signals can vary from engine status, distance traveled, fuel level, and more. Customers are billed based on the consumption monitored by these sensors. You expect high throughput - up to thousands of events per hour per device - and need to retrieve consistent data based on the time of the event. Storing and retrieving individual signals should be atomic. What should you do?
- A. Ingest the data into Cloud Bigtable. Create a row key based on the event timestamp.
- B. Create a file in Cloud Storage per device and append new data to that file.
- C. Create a file in Cloud Filestore per device and append new data to that file.
- D. Ingest the data into Datastore. Store data in an entity group based on the device.
Answer: A
Explanation:
Explanation
Keyword need to look for
- "High Throughput",
- "Consistent",
- "Property based data insert/fetch like ngine status, distance traveled, fuel level, and more." which can be designed in column,
- "Large Scale Customer Base + Each Customer has multiple sensor which send event in seconds" This will go for pera bytes situation,
- Export data based on the time of the event.
- Atomic
o BigTable will fit all requirement.
o DataStore is not fully Atomic
o CloudStorage is not a option where we can export data based on time of event. We need another solution to do that o FireStore can be used with MobileSDK.
NEW QUESTION # 62
You are about to start working on a micro-service deployment project using Google Kubernetes Engine service. The client needs everything on Google and want you to maintain both frontend and backend code on Google Cloud as well. Which service best suites this case?
- A. Google Container Registry
- B. Cloud Storage
- C. GitHub
- D. Cloud Source Repository
Answer: D
NEW QUESTION # 63
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?
- A. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
- B. Create a VerticalPodAutscaler for those workloads.
- C. Create a node pool with preemptible VMs and GPUs attached to those VMs.
- D. Enable node auto-provisioning on the GKE cluster.
Answer: D
Explanation:
auto-provisioning = Attaches and deletes node pools to cluster based on the requirements. Hence creating a GPU node pool, and auto-scaling would be better https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-provisioning
NEW QUESTION # 64
Your projects incurred more costs than you expected last month. Your research reveals that a development GKE container emitted a huge number of logs, which resulted in higher costs. You want to disable the logs quickly using the minimum number of steps. What should you do?
- A. 1. Go to the GKE console, and delete existing clusters.2. Recreate a new cluster.3. Clear the option to enable legacy Stackdriver Monitoring.
- B. 1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE container resource.
- C. 1. Go to the GKE console, and delete existing clusters.2. Recreate a new cluster.3. Clear the option to enable legacy Stackdriver Logging.
- D. 1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE Cluster Operations resource.
Answer: B
NEW QUESTION # 65
You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?
- A. Create a trace in Stackdriver to view the information.
- B. Using the GCP Console, filter the Stackdriver log to view the information.
- C. Using the GCP Console, filter the Activity log to view the information.
- D. View the bucket in the Storage section of the GCP Console.
Answer: C
Explanation:
Explanation
https://cloud.google.com/storage/docs/audit-logs
https://cloud.google.com/compute/docs/logging/audit-logging#audited_operations
NEW QUESTION # 66
You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible.
You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?
- A. 1. Use the default configuration for one project you need to manage.
2. Use gcloud init to update the configuration values when you need to work with a non-default project. - B. 1. Use the default configuration for one project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned GCP projects. - C. 1. Create a configuration for each project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned GCP projects. - D. 1. Create a configuration for each project you need to manage.
2. Use gcloud init to update the configuration values when you need to work with a non-default project
Answer: C
Explanation:
Cloud SDK comes with a default configuration. To create multiple configurations, use gcloud config configurations create, and gcloud config configurations activate to switch between them.
https://cloud.google.com/sdk/gcloud/reference/config/set
NEW QUESTION # 67
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?
- A. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
- B. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- C. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
- D. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
Answer: A
Explanation:
Reference:
https://cloud.google.com/logging/docs/audit/
NEW QUESTION # 68
You've created the code for a Cloud Function that will respond to HTTP triggers and return some data in JSON format. You have the code locally, it's tested and working. Which command can you use to create the function inside Google Cloud?
- A. gcloud function create
- B. gcloud functions create
- C. gcloud function deploy
- D. gcloud functions deploy
Answer: C,D
NEW QUESTION # 69
You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?
- A. Create a service account with an access scope. Use the access scope
'https://www.googleapis.com/auth/devstorage.write_only'. - B. Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
- C. Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
- D. Create a service account with an access scope. Use the access scope
'https://www.googleapis.com/auth/cloud-platform'.
Answer: D
NEW QUESTION # 70
You have a workload running on Compute Engine that is critical to your business. You want to ensure that the data on the boot disk of this workload is backed up regularly. You need to be able to restore a backup as quickly as possible in case of disaster. You also want older backups to be cleaned automatically to save on cost. You want to follow Google-recommended practices. What should you do?
- A. Create a cron job to create a new disk from the disk using gcloud.
- B. Create a Cloud Task to create an image and export it to Cloud Storage.
- C. Create a Cloud Function to create an instance template.
- D. Create a snapshot schedule for the disk using the desired interval.
Answer: D
Explanation:
Best practices for persistent disk snapshots
You can create persistent disk snapshots at any time, but you can create snapshots more quickly and with greater reliability if you use the following best practices.
Creating frequent snapshots efficiently
Use snapshots to manage your data efficiently.
Create a snapshot of your data on a regular schedule to minimize data loss due to unexpected failure.
Improve performance by eliminating excessive snapshot downloads and by creating an image and reusing it.
Set your snapshot schedule to off-peak hours to reduce snapshot time.
Snapshot frequency limits
Creating snapshots from persistent disks
You can snapshot your disks at most once every 10 minutes. If you want to issue a burst of requests to snapshot your disks, you can issue at most 6 requests in 60 minutes.
https://cloud.google.com/compute/docs/disks/snapshot-best-practices
NEW QUESTION # 71
Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?
- A. Ask each member of the team to generate a new SSH key pair and to send you their public key. Use a configuration management tool to deploy those keys on each instance.
- B. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance.
- C. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the "compute.osAdminLogin" role to the Google group corresponding to this team.
- D. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key in the metadata of each instance.
Answer: C
Explanation:
Explanation
https://cloud.google.com/compute/docs/instances/managing-instance-access
NEW QUESTION # 72
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?
- A. Select the latest available cluster version for your GKE cluster.
- B. Enable the Node Auto-Upgrades feature for your GKE cluster.
- C. Enable the Node Auto-Repair feature for your GKE cluster.
- D. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.
Answer: B
NEW QUESTION # 73
You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?
- A. Create a trace in Stackdriver to view the information.
- B. Using the GCP Console, filter the Stackdriver log to view the information.
- C. Using the GCP Console, filter the Activity log to view the information.
- D. View the bucket in the Storage section of the GCP Console.
Answer: C
Explanation:
Audit logs meet the requirement:
Admin Activity logs: Entries for operations that modify the configuration or metadata of a project, bucket, or object.
Data Access logs: Entries for operations that modify objects or read a project, bucket, or object.
NEW QUESTION # 74
You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?
- A. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.
- B. Use service account credentials in your on-premises application.
- C. Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.
- D. Use gcloudto create a key file for the service account that has appropriate permissions.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/vision/automl/docs/before-you-begin
NEW QUESTION # 75
Your continuous integration and delivery (CI/CD) server can't execute Google Cloud actions in a specific project because of permission issues. You need to validate whether the used service account has the appropriate roles in the specific project. What should you do?
- A. Open the Google Cloud console, and run a query to determine which resources this service account can access.
- B. Open the Google Cloud console, and check the Identity and Access Management (IAM) roles assigned to the service account at the project or inherited from the folder or organization levels.
- C. Open the Google Cloud console, and run a query of the audit logs to find permission denied errors for this service account.
- D. Open the Google Cloud console, and check the organization policies.
Answer: B
Explanation:
This answer is the most effective way to validate whether the service account used by the CI/CD server has the appropriate roles in the specific project. By checking the IAM roles assigned to the service account, you can see which permissions the service account has and which resources it can access. You can also check if the service account inherits any roles from the folder or organization levels, which may affect its access to the project. You can use the Google Cloud console, the gcloud command-line tool, or the IAM API to view the IAM roles of a service account.
NEW QUESTION # 76
......
Associate-Cloud-Engineer Questions PDF [2024] Use Valid New dump to Clear Exam: https://www.fast2test.com/Associate-Cloud-Engineer-premium-file.html
PASS Google Associate-Cloud-Engineer EXAM WITH UPDATED DUMPS: https://drive.google.com/open?id=19dyETSxXDhJ59PGW-yJuHCaBekaD26L_