Google Associate Cloud Engineer - Associate-Cloud-Engineer FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?

A. Run a test using N1 standard VMs instead of N2. If the test is successful, use N1 Standard VMs when running future jobs. B. Run a test using simulated maintenance events. If the test is successful, use Spot N2 Standard VMs when running future jobs. C. Run a test using simulated maintenance events. If the test is successful, use N2 Standard VMs when running future jobs. D. Run a test using a managed instance group. If the test is successful, use N2 Standard VMs in the managed instance group when running future jobs.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination. What should you do?

A. View System Event Logs in Stackdriver. Search for the service account associated with the user. B. View System Event Logs in Stackdriver. Search for the user's email as the principal. C. View the Admin Activity log in Stackdriver. Search for the service account associated with the user. D. View Data Access audit logs in Stackdriver. Search for the user's email as the principal.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Your company is running a critical workload on a single Compute Engine VM instance. Your company's disaster recovery policies require you to back up the entire instance's disk data every day. The backups must be retained for 7 days. You must configure a backup solution that complies with your company's security policies and requires minimal setup and configuration.
What should you do?

A. Configure daily scheduled persistent disk snapshots with a retention period of 7 days. B. Configure a bash script using gsutil to run daily through a cron job. Copy the disk's files to a Cloud Storage bucket with archive storage class and an object lifecycle rule to delete the objects after 7 days. C. Configure Cloud Scheduler to trigger a Cloud Function each day that creates a new machine image and deletes machine images that are older than 7 days. D. Configure the instance to use persistent disk asynchronous replication.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

A. Use gcloud iam roles copy and specify your organization as the destination organization. B. In the Google Cloud Platform Console, use the `create role from role' functionality. C. Use gcloud iam roles copy and specify the production project as the destination project. D. In the Google Cloud Platform Console, use the `create role' functionality and select all applicable permissions.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

You have deployed an application on a Compute Engine instance. An external consultant needs to access the Linux-based instance. The consultant is connected to your corporate network through a VPN connection, but the consultant has no Google account. What should you do?

A. Instruct the external consultant to generate an SSH key pair, and request the public key from the consultant. Add the public key to the instance yourself, and have the consultant access the instance through SSH with their private key. B. Instruct the external consultant to use the gcloud compute ssh command line tool by using Identity-Aware Proxy to access the instance. C. Instruct the external consultant to generate an SSH key pair, and request the private key from the consultant. Add the private key to the instance yourself, and have the consultant access the instance through SSH with their public key. D. Instruct the external consultant to use the gcloud compute ssh command line tool by using the public IP address of the instance to access it.

Discussion 0

Correct Answer: A Vote an answer

Question 6

Your organization has decided to deploy all its compute workloads to Kubernetes on Google Cloud and two other cloud providers. You want to build an infrastructure-as-code solution to automate the provisioning process for all cloud resources. What should you do?

A. Build the solution by using Terraform, and provision the resources. B. Build the solution by using Python and the cloud SDKs from all providers to provision the resources. C. Build the solution by using Config Connector, and provision the resources. D. Build the solution by using YAML manifests, and provision the resources.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Which of the following command is used to create buckets in Cloud Storage?

A. gcloud mb B. gsutil storage buckets create C. gsutil mb D. gcloud storage buckets create

Discussion 0

Correct Answer: C Vote an answer

Question 8

You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?

A. Reserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server. B. Reserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server. C. Start the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address. D. Use the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website.
This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

A. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB. B. Create a Cloud Memorystore for Redis instance with 32-GB capacity. C. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory. D. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).