Associate Cloud Engineer Practice Exam (2020.06.03)

[GCP] Google Cloud Certified - Associate Cloud Engineer
Written by E.G -
on 11月 3, 2020

Ace Your Associate Cloud Engineer Certification with Practice Exams.

Google Cloud Certified – Associate Cloud Engineer Practice Exam (Q 42)

v2020-03-02

QUESTION 1

You are using multiple configurations for gcloud. You want to review the configured Google Kubernetes Engine cluster of an inactive configuration using the fewest possible steps.
What should you do?

  • A. Use gcloud config configurations describe to review the output.
  • B. Use gcloud config configurations activate and gcloud config list to review the output.
  • C. Use kubectl config get-contexts to review the output.
  • D. Use kubectl config use-context and kubectl config view to review the output.

Correct Answer: D

Reference:
– medium: Kubernetes Engine: kubectl config
– kubernetes: Kubectl context and configuration

QUESTION 2

You are deploying an application to Google App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times.
Which scaling type should you use?

  • A. Manual Scaling with 3 instances.
  • B. Basic Scaling with min_instances set to 3.
  • C. Basic Scaling with max_instances set to 3.
  • D. Automatic Scaling with min_idle_instances set to 3.

Correct Answer: D

Reference:
– App Engine: How Instances are Managed

QUESTION 3

You have a Dockerfile that you need to deploy on Google Kubernetes Engine.
What should you do?

  • A. Use kubectl app deploy .
  • B. Use gcloud app deploy .
  • C. Create a docker image from the Dockerfile and upload it to Google Container Registry. Create a deployment.yaml file to point to that image. Use kubectl to create the deployment with that file.
  • D. Create a docker image from the Dockerfile and upload it to Google Cloud Storage. Create a deployment.yaml file to point to that image. Use kubectl to create the deployment with that file.

Correct Answer: C

Reference:
– Google Kubernetes Engine (GKE): Deploying a containerized web application
– Container Registry: Using Container Registry with Google Cloud

QUESTION 4

You need to update a deployment in Google Cloud Deployment Manager without any resource downtime in the deployment.
Which command should you use?

  • A. gcloud deployment-manager deployments create –config
  • B. gcloud deployment-manager deployments update –config
  • C. gcloud deployment-manager resources create –config
  • D. gcloud deployment-manager resources update –config

Correct Answer: B

Reference:
– Cloud SDK: gcloud deployment-manager deployments update

QUESTION 5

You have a single binary application that you want to run on Google Cloud Platform. You decided to automatically scale the application based on underlying infrastructure CPU usage. Your organizational policies require you to use virtual machines (VM) directly. You need to ensure that the application scaling is operationally efficient and completed as quickly as possible.
What should you do?

  • A. Create a Google Kubernetes Engine cluster, and use horizontal pod autoscaling to scale the application.
  • B. Create an instance template, and use the template in a managed instance group with autoscaling configured.
  • C. Create an instance template, and use the template in a managed instance group that scales up and down based on the time of day.
  • D. Use a set of third-party tools to build automation around scaling the application up and down, based on Stackdriver CPU usage monitoring.

Correct Answer: A

Reference:
– Google Kubernetes Engine (GKE): Configuring a Horizontal Pod Autoscaler
– Google Kubernetes Engine (GKE): Horizontal Pod Autoscaling
– Google Kubernetes Engine (GKE): Autoscaling a cluster
– Google Kubernetes Engine (GKE): Cluster autoscaler

QUESTION 6

You are analyzing Google Cloud Platform service costs from three separate projects. You want to use this information to create service cost estimates by service type, daily and monthly, for the next six months using standard query syntax.
What should you do?

  • A. Export your bill to a Google Cloud Storage bucket, and then import into Google Cloud Bigtable for analysis.
  • B. Export your bill to a Google Cloud Storage bucket, and then import into Google Sheets for analysis.
  • C. Export your transactions to a local file, and perform analysis with a desktop tool.
  • D. Export your bill to a Google BigQuery dataset, and then write time window-based SQL queries for analysis.

Correct Answer: D

Reference:
– Cloud Billing: Export Cloud Billing data to BigQuery

QUESTION 7

You need to set up a policy so that videos stored in a specific Google Cloud Storage Regional bucket are moved to Coldline after 90 days, and then deleted after one year from their creation.
How should you set up the policy?

  • A. Use Google Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 275 days (365 – 90)
  • B. Use Google Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 365 days.
  • C. Use gsutil rewrite and set the Delete action to 275 days (365-90).
  • D. Use gsutil rewrite and set the Delete action to 365 days.

Correct Answer: A

Reference:
– Cloud Storage: Managing object lifecycles

QUESTION 8

You have one Google Cloud Platform account running in your default region and zone and another account running in a non-default region and zone. You want to start a new Google Compute Engine instance in these two Google Cloud Platform accounts using the command line interface.
What should you do?

  • A. Create two configurations using gcloud config configurations create [NAME]. Run gcloud config configurations activate [NAME] to switch between accounts when running the commands to start the Google Compute Engine instances.
  • B. Create two configurations using gcloud config configurations create [NAME]. Run gcloud configurations list to start the Google Compute Engine instances.
  • C. Activate two configurations using gcloud config configurations activate [NAME]. Run gcloud config list to start the Google Compute Engine instances.
  • D. Activate two configurations using gcloud config configurations activate [NAME]. Run gcloud configurations list to start the Google Compute Engine instances.

Correct Answer: C

Reference:
– Cloud SDK: gcloud config configurations activate

QUESTION 9

You significantly changed a complex Google Cloud Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes.
What should you do?

  • A. Use granular logging statements within a Google Cloud Deployment Manager template authored in Python.
  • B. Monitor activity of the Google Cloud Deployment Manager execution on the Stackdriver Logging page of the Google Cloud Console.
  • C. Execute the Google Cloud Deployment Manager template against a separate project with the same configuration, and monitor for failures.
  • D. Execute the Google Cloud Deployment Manager template using the –-preview option in the same project, and observe the state of interdependent resources.

Correct Answer: D

Reference:
– Cloud Deployment Manager: Updating a Deployment
– Cloud Deployment Manager: Previewing a configuration

QUESTION 10

You are building a pipeline to process time-series data.
Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?

Associate Cloud Engineer：アーキテクチャ
  • A.
    1. Google Cloud Pub/Sub
    2. Google Cloud Dataflow
    3. Google Cloud Datastore
    4. Google BigQuery
  • B.
    1. Firebase Messages
    2. Google Cloud Pub/Sub
    3. Google Cloud Spanner
    4. Google BigQuery
  • C.
    1. Google Cloud Pub/Sub
    2. Google Cloud Storage
    3. Google BigQuery
    4. Google Cloud Bigtable
  • D.
    1. Google Cloud Pub/Sub
    2. Google Cloud Dataflow
    3. Google Cloud Bigtable
    4. Google BigQuery

Correct Answer: D

Reference:
– Solutions: Correlating Thousands of Financial Time Series Streams in Real Time

QUESTION 11

You have a project for your Google App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment.
What should you do?

  • A. Use gcloud to create the new project, and then deploy your application to the new project.
  • B. Use gcloud to create the new project and to copy the deployed application to the new project.
  • C. Create a Google Cloud Deployment Manager configuration file that copies the current Google App Engine deployment into a new project.
  • D. Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project.

Correct Answer: C

QUESTION 12

You need to configure Google Cloud IAM access audit logging in Google BigQuery for external auditors. You want to follow Google-recommended practices.
What should you do?

  • A. Add the auditors group to the “logging.Viewer” and “bigquery.dataViewer” predefined IAM roles.
  • B. Add the auditors group to two new custom IAM roles.
  • C. Add the auditor user accounts to the “logging.Viewer” and “bigquery.dataViewer” predefined IAM roles.
  • D. Add the auditor user accounts to two new custom IAM roles.

Correct Answer: C

Reference:
– IAM: IAM roles for auditing-related job functions

QUESTION 13

You need to set up permissions for a set of Google Compute Engine instances to enable them to write data into a particular Google Cloud Storage bucket. You want to follow Google-recommended practices.
What should you do?

  • A. Create a service account with an access scope. Use the access scope “https://www.googleapis.com/auth/devstorage.write_only”.
  • B. Create a service account with an access scope. Use the access scope “https://www.googleapis.com/auth/cloud-platform”.
  • C. Create a service account and add it to the IAM role “storage.objectCreator” for that bucket.
  • D. Create a service account and add it to the IAM role “storage.objectAdmin” for that bucket.

Correct Answer: B

Reference:
– towards data science: Enlightened DataLab Notebooks
– Cloud Storage: Cloud Storage authentication
– Compute Engine: Service accounts

QUESTION 14

You are the project owner of a Google Cloud Platform project and want to delegate control to colleagues to manage buckets and files in Google Cloud Storage. You want to follow Google-recommended practices.
Which IAM roles should you grant your colleagues?

  • A. Project Editor
  • B. Storage Admin
  • C. Storage Object Admin
  • D. Storage Object Creator

Correct Answer: B

QUESTION 15

You want to send and consume Google Cloud Pub/Sub messages from your Google App Engine application. The Google Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Google Cloud Pub/Sub.
What should you do?

  • A. Enable the Google Cloud Pub/Sub API in the API Library on the Google Cloud Console.
  • B. Rely on the automatic enablement of the Google Cloud Pub/Sub API when the Service Account accesses it.
  • C. Use Google Cloud Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
  • D. Grant the Google App Engine Default service account the role of Google Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Google Cloud Pub/Sub.

Correct Answer: A

QUESTION 16

You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate reporting under the same Stackdriver Monitoring dashboard.
What should you do?

  • A. Use Shared VPC to connect all projects, and link Stackdriver to one of the projects.
  • B. For each project, create a Stackdriver account. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all
  • other projects.
  • C. Configure a single Stackdriver account, and link all projects to the same account.
  • D. Configure a single Stackdriver account for one of the projects. In Stackdriver, create a Group and add the other project names as criteria for that Group.

Correct Answer: D

QUESTION 17

You want to verify the IAM users and roles assigned within a Google Cloud Platform project named my-project. What should you do?

  • A. Run gcloud iam roles list. Review the output section.
  • B. Run gcloud iam service-accounts list. Review the output section.
  • C. Navigate to the project and then to the IAM section in the Google Cloud Console. Review the members and roles.
  • D. Navigate to the project and then to the Roles section in the Google Cloud Console. Review the roles and status.

Correct Answer: D

QUESTION 18

You need to create a new billing account and then link it with an existing Google Cloud Platform project.
What should you do?

  • A. Verify that you are Project Billing Manager for the Google Cloud Platform project. Update the existing project to link it to the existing billing account.
  • B. Verify that you are Project Billing Manager for the Google Cloud Platform project. Create a new billing account and link the new billing account to the existing project.
  • C. Verify that you are Billing Administrator for the billing account. Create a new project and link the new project to the existing billing account.
  • D. Verify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing account.

Correct Answer: C

Reference:
– Cloud Billing: Modify a project’s billing settings

QUESTION 19

You are running an application on multiple virtual machines within a managed instance group and have autoscaling enabled. The autoscaling policy is configured so that additional instances are added to the group if the CPU utilization of instances goes above 80%. VMs are added until the instance group reaches its maximum limit of five VMs or until CPU utilization of instances lowers to 80%. The initial delay for HTTP health checks against the instances is set to 30 seconds. The virtual machine instances take around three minutes to become available for users. You observe that when the instance group autoscales, it adds more instances then necessary to support the levels of end-user traffic. You want to properly maintain instance group sizes when autoscaling.
What should you do?

  • A. Set the maximum number of instances to 1.
  • B. Decrease the maximum number of instances to 3.
  • C. Use a TCP health check instead of an HTTP health check.
  • D. Increase the initial delay of the HTTP health check to 200 seconds.

Correct Answer: D

QUESTION 20

You deployed an Google App Engine application using gcloud app deploy, but it did not deploy to the intended project. You want to find out why this happened and where the application deployed.
What should you do?

  • A. Check the app.yaml file for your application and check project settings.
  • B. Check the web-application.xml file for your application and check project settings.
  • C. Go to Google Cloud Deployment Manager and review settings for deployment of applications.
  • D. Go to Google Cloud Shell and run gcloud config list to review the Google Cloud configuration used for deployment.

Correct Answer: A

Reference:
– Cloud Endpoints: Troubleshooting App Engine flexible deployment

QUESTION 21

You want to configure 10 Google Compute Engine instances for availability when maintenance occurs. Your requirements state that these instances should attempt to
automatically restart if they crash. Also, the instances should be highly available including during system maintenance.
What should you do?

  • A. Create an instance template for the instances. Set the “Automatic Restart” to on. Set the “On-host maintenance” to Migrate VM instance. Add the instance template to an instance group.
  • B. Create an instance template for the instances. Set “Automatic Restart” to off. Set “On-host maintenance” to Terminate VM instances. Add the instance template to an instance group.
  • C. Create an instance group for the instances. Set the “Autohealing” health check to healthy (HTTP).
  • D. Create an instance group for the instance. Verify that the “Advanced creation options” setting for “do not retry machine creation” is set to off.

Correct Answer: B

QUESTION 22

You host a static website on Google Cloud Storage. Recently, you began to include links to PDF files on this site. Currently, when users click on the links to these PDF files, their browsers prompt them to save the file onto their local system. Instead, you want the clicked PDF files to be displayed within the browser window directly, without prompting the user to save the file locally.
What should you do?

  • A. Enable Google Cloud CDN on the website frontend.
  • B. Enable “Share publicly” on the PDF file objects.
  • C. Set Content-Type metadata to application/pdf on the PDF file objects.
  • D. Add a label to the Google Cloud Storage bucket with a key of Content-Type and value of application/pdf.

Correct Answer: C

QUESTION 23

You have production and test workloads that you want to deploy on Google Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets.
Which configuration meets these requirements?

  • A. Create a single custom VPC with 2 subnets. Create each subnet in a different region and with a different CIDR range.
  • B. Create a single custom VPC with 2 subnets. Create each subnet in the same region and with the same CIDR range.
  • C. Create 2 custom VPCs, each with a single subnet. Create each subnet is a different region and with a different CIDR range.
  • D. Create 2 custom VPCs, each with a single subnet. Create each subnet in the same region and with the same CIDR range.

Correct Answer: A

QUESTION 24

Your projects incurred more costs than you expected last month. Your research reveals that a development Google Kubernetes Engine (GKE) container emitted a huge number of logs, which resulted in higher costs. You want to disable the logs quickly using the minimum number of steps.
What should you do?

  • A.
    1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE container resource.
  • B.
    1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE Cluster Operations resource.
  • C.
    1. Go to the GKE console, and delete existing clusters.
    2. Recreate a new cluster.
    3. Clear the option to enable legacy Stackdriver Logging.
  • D.
    1. Go to the GKE console, and delete existing clusters.
    2. Recreate a new cluster.
    3. Clear the option to enable legacy Stackdriver Monitoring.

Correct Answer: A

QUESTION 25

You want to run a single caching HTTP reverse proxy on Google Cloud Platform for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost.
How should you run this reverse proxy?

  • A. Create a Google Cloud Memorystore for Redis instance with 32-GB capacity.
  • B. Run it on Google Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
  • C. Package it in a container image, and run it on Google Kubernetes Engine, using n1-standard-32 instances as nodes.
  • D. Run it on Google Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.

Correct Answer: B

QUESTION 26

You need to deploy an application, which is packaged in a container image, in a new project. The application exposes an HTTP endpoint and receives very few requests per day. You want to minimize costs.
What should you do?

  • A. Deploy the container on Google Cloud Run.
  • B. Deploy the container on Google Cloud Run on Google Kubernetes Engine.
  • C. Deploy the container on Google App Engine Flexible.
  • D. Deploy the container on Google Kubernetes Engine, with cluster autoscaling and horizontal pod autoscaling enabled.

Correct Answer: B

QUESTION 27

Your company has an existing Google Cloud Organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both Google Cloud Organizations onto a single invoice. You would like to consolidate all costs as of tomorrow.
What should you do?

  • A. Link the acquired company’s projects to your company’s Billing account.
  • B. Configure the acquired company’s billing account and your company’s Billing account to export the billing data into the same Google BigQuery dataset.
  • C. Migrate the acquired company’s projects into your company’s Google Cloud Organization. Link the migrated projects to your company’s Billing account.
  • D. Create a new Google Cloud Organization and a new Billing account. Migrate the acquired company’s projects and your company’s projects into the new Google Cloud Organization and link the projects to the new Billing account.

Correct Answer: D

Reference:
– Resource Manager: Migrating projects into an organization

QUESTION 28

You built an application on Google Cloud Platform that uses Google Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices.
What should you do?

  • A. Add the support team group to the roles/monitoring.viewer role
  • B. Add the support team group to the roles/spanner.databaseUser role.
  • C. Add the support team group to the roles/spanner.databaseReader role.
  • D. Add the support team group to the roles/stackdriver.accounts.viewer role.

Correct Answer: B

Reference:
– Cloud AIM: Understanding roles

QUESTION 29

For analysis purposes, you need to send all the logs from all of your Google Compute Engine instances to a Google BigQuery dataset called platform-logs. You have already installed the Stackdriver Logging agent on all the instances. You want to minimize cost.
What should you do?

  • A.
    1. Give the BigQuery Data Editor role on the platform-logs dataset to the service accounts used by your instances.
    2. Update your instances’ metadata to add the following
      value: logs-destination: bq://platform-logs.
  • B.
    1. In Stackdriver Logging, create a logs export with a Google Cloud Pub/Sub topic called logs as a sink.
    2. Create a Google Cloud Function that is triggered by messages in the logs topic.
    3. Configure that Google Cloud Function to drop logs that are not from Google Compute Engine and to insert Google Compute Engine logs in the platform-logs dataset.
  • C.
    1. In Stackdriver Logging, create a filter to view only Google Compute Engine logs.
    2. Click Create Export.
    3. Choose Google BigQuery as Sink Service, and the platform-logs dataset as Sink Destination.
  • D.
    1. Create a Google Cloud Function that has the Google BigQuery User role on the platform-logs dataset.
    2. Configure this Google Cloud Function to create a Google BigQuery Job that executes this query:
      INSERT INTO dataset.platform-logs (timestamp, log)
      SELECT timestamp, log FROM compute.logs
      WHERE timestamp > DATE_SUB(CURRENT_DATE(), INTERVAL 1 DAY)
    3. Use Google Cloud Scheduler to trigger this Google Cloud Function once a day.

Correct Answer: C

QUESTION 30

You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like Google Cloud AutoML. You created a service account that has appropriate access to Google Cloud AutoML. You need to enable authentication to the APIs from your on-premises environment.
What should you do?

  • A. Use service account credentials in your on-premises application.
  • B. Use gcloud to create a key file for the service account that has appropriate permissions.
  • C. Set up direct interconnect between your data center and GCPm to enable authentication for your on-premises applications.
  • D. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.

Correct Answer: B

Reference:
– AutoML Vision Image Classification: Before You Begin

QUESTION 31

You want to configure an SSH connection to a single Google Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to.
What should you do?

  • A. Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role. Direct them to use the Google Cloud Shell to ssh to that instance.
  • B. Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for that instance. Direct them to use the Google Cloud Shell to ssh to that instance.
  • C. Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group. Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
  • D. Enable block project wide keys for the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.

Correct Answer: D

Reference:
– Compute Engine: Managing SSH keys in metadata

QUESTION 32

You are building a new version of an application hosted in an Google App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version.
What should you do?

  • A. Deploy a new version of your application in Google Kubernetes Engine instead of Google App Engine and then use Google Cloud Console to split traffic.
  • B. Deploy a new version of your application in a Google Compute Engine instance instead of Google App Engine and then use Google Cloud Console to split traffic.
  • C. Deploy a new version as a separate app in Google App Engine. Then configure Google App Engine using Google Cloud Console to split traffic between the two apps.
  • D. Deploy a new version of your application in Google App Engine. Then go to Google App Engine settings in Google Cloud Console and split traffic between the current version and newly deployed versions accordingly.

Correct Answer: A

Reference:
– App Engine: Splitting Traffic

QUESTION 33

You need to enable traffic between multiple groups of Google Compute Engine instances that are currently running two different Google Cloud Platform projects. Each group of Google Compute Engine instances is running in its own VPC.
What should you do?

  • A. Verify that both projects are in a Google Cloud Organization. Create a new VPC and add all instances.
  • B. Verify that both projects are in a Google Cloud Organization. Share the VPC from one project and request that the Google Compute Engine instances in the other project use this shared VPC.
  • C. Verify that you are the Project Administrator of both projects. Create two new VPCs and add all instances.
  • D. Verify that you are the Project Administrator of both projects. Create a new VPC and add all instances.

Correct Answer: B

Reference:
– Virtual Private Cloud: Using VPC networks
– Virtual Private Cloud: Creating instances with multiple network interfaces

QUESTION 34

Your VMs are running in a subnet that has a subnet mask of 255.255.255.240. The current subnet has no more free IP addresses and you require an additional 10 IP addresses for new VMs. The existing and new VMs should all be able to reach each other without additional routes.
What should you do?

  • A. Use gcloud to expand the IP range of the current subnet.
  • B. Delete the subnet, and recreate it using a wider range of IP addresses.
  • C. Create a new project. Use Shared VPC to share the current network with the new project.
  • D. Create a new subnet with the same starting IP but a wider range to overwrite the current subnet.

Correct Answer: C

QUESTION 35

Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Google Cloud Platform project.
What should you do?

  • A. Enable Google Cloud Identity in the Google Cloud Console for your domain.
  • B. Grant them the required IAM roles using their G Suite email address.
  • C. Create a CSV sheet with all users’ email addresses. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.
  • D. In the G Suite console, add the users to a special group called cloud-console-users@yourdomain.com. Rely on the default behavior of the Google Cloud Platform to grant users access if they are members of this group.

Correct Answer: B

Reference:
– Resource Manager: Creating and managing organizations

QUESTION 36

You deployed an LDAP server on Google Compute Engine that is reachable via TLS through port 636 using UDP. You want to make sure it is reachable by clients over that port.
What should you do?

  • A. Add the network tag allow-udp-636 to the VM instance running the LDAP server.
  • B. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.
  • C. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port 636 for that network tag.
  • D. Add a network tag of your choice to the instance running the LDAP server. Create a firewall rule to allow egress on UDP port 636 for that network tag.

Correct Answer: C

QUESTION 37

You want to configure a solution for archiving data in a Google Cloud Storage bucket. The solution must be cost-effective. Data with multiple versions should be archived after 30 days. Previous versions are accessed once a month for reporting. This archive data is also occasionally updated at month-end.
What should you do?

  • A. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Google Cloud Storage Coldline.
  • B. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Google Cloud Storage Nearline.
  • C. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Google Cloud Storage Coldline.
  • D. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Google Cloud Storage Nearline.

Correct Answer: B

Reference:
– Cloud Storage: Managing object lifecycles

QUESTION 38

You want to find out when users were added to Google Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform project.
What should you do in the Google Cloud Console?

A. Open the Google Cloud Spanner console to review configurations.
B. Open the IAM & admin console to review IAM policies for Google Cloud Spanner roles.
C. Go to the Stackdriver Monitoring console and review information for Google Cloud Spanner.
D. Go to the Stackdriver Logging console, review admin activity logs, and filter them for Google Cloud Spanner IAM roles.

Correct Answer: B

QUESTION 39

Your company implemented Google BigQuery as an enterprise data warehouse. Users from multiple business units run queries on this data warehouse. However, you notice that query costs for Google BigQuery are very high, and you need to control costs.
Which two methods should you use? (Choose two.)

  • A. Split the users from business units to multiple projects.
  • B. Apply a user- or project-level custom query quota for Google BigQuery data warehouse.
  • C. Create separate copies of your Google BigQuery data warehouse for each business unit.
  • D. Split your Google BigQuery data warehouse into multiple data warehouses for each business unit.
  • E. Change your Google BigQuery query model from on-demand to flat rate. Apply the appropriate number of slots to each Project.

Correct Answer: B, E

QUESTION 40

Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project.
What should you do?

  • A. Add the group for the finance team to Billing Account User (roles/billing.user) role.
  • B. Add the group for the finance team to Billing Account Administrator (roles/billing.admin) role.
  • C. Add the group for the finance team to Billing Account Viewer (roles/billing.viewer) role.
  • D. Add the group for the finance team to Project Billing Manager (roles/billing.projectManager) role.

Correct Answer: A

Reference:
– Cloud Billing: Overview of Cloud Billing access control

QUESTION 41

You have a developer laptop with the Google Cloud SDK installed on Ubuntu. The Google Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Google Cloud Datastore.
What should you do?

A. Export Google Cloud Datastore data using gcloud datastore export.
B. Create a Google Cloud Datastore index using gcloud datastore indexes create.
C. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.
D. Install the cloud-datastore-emulator component using the gcloud components install command.

Correct Answer: D

Reference:
– Datastore: Running the Datastore Emulator
– Cloud SDK: Managing SDK Components

QUESTION 42

Your company set up a complex organizational structure on Google Cloud Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google – recommended practices.
What should you do?

  • A. Add the users to roles/browser role.
  • B. Add the users to roles/iam.roleViewer role.
  • C. Add the users to a group, and add this group to roles/browser role.
  • D. Add the users to a group, and add this group to roles/iam.roleViewer role.

Correct Answer: A

Reference:
– Cloud AIM: Understanding roles > Roles roles

Categories:

Google Cloud Platform

Tags:

Associate Cloud Engineer

Comments are closed