Updated Free Google Associate-Cloud-Engineer Test Engine Questions with 245 Q&As

The Best Google Cloud Certified Associate-Cloud-Engineer Professional Exam Questions

NEW QUESTION 137
You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?

• A. Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
• B. Execute the Deployment Manager template using the --preview option in the same project, and observe the state of interdependent resources.
• C. Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.
• D. Use granular logging statements within a Deployment Manager template authored in Python.

Answer: B

 

NEW QUESTION 138
You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?

• A. Configure an HTTP(S) load balancer.
• B. Configure an internal TCP load balancer.
• C. Configure an external TCP proxy load balancer.
• D. Configure an external SSL proxy load balancer.

Answer: A

Explanation:
Explanation/Reference: https://cloud.google.com/load-balancing/docs/https/

 

NEW QUESTION 139
You need to set a budget alert for use of Compute Engineer services on one of the three Google Cloud Platform projects that you manage. All three projects are linked to a single billing account. What should you do?

• A. Verify that you are the project billing administrator. Select the associated billing account and create a budget and a custom alert.
• B. Verify that you are the project billing administrator. Select the associated billing account and create a budget and alert for the appropriate project.
• C. Verify that you are the project administrator. Select the associated billing account and create a budget for the appropriate project.
• D. Verify that you are project administrator. Select the associated billing account and create a budget and a custom alert.

Answer: A

 

NEW QUESTION 140
You need to help a developer install the App Engine Go extensions. However, you've forgotten the exact name of the component. Which command could you run to show all of the available options?

• A. gcloud components list
• B. gcloud config components list
• C. gcloud component list
• D. gcloud config list

Answer: A

 

NEW QUESTION 141
Your company publishes large files on an Apache web server that runs on a Compute Engine instance. The Apache web server is not the only application running in the project. You want to receive an email when the egress network costs for the server exceed 100 dollars for the current month as measured by Google Cloud Platform (GCP). What should you do?

• A. Set up a budget alert on the project with an amount of 100 dollars, a threshold of 100%, and notification type of "email."
• B. Export the billing data to BigQuery.
  Create a Cloud Function that uses BigQuery to sum the egress network costs of the exported billing data for the Apache web server for the current month and sends an email if it is over 100 dollars.
  Schedule the Cloud Function using Cloud Scheduler to run hourly.
• C. Use the Stackdriver Logging Agent to export the Apache web server logs to Stackdriver Logging.
  Create a Cloud Function that uses BigQuery to parse the HTTP response log data in Stackdriver for the current month and sends an email if the size of all HTTP responses, multiplied by current GCP egress prices, totals over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.
• D. Set up a budget alert on the billing account with an amount of 100 dollars, a threshold of 100%, and notification type of "email."

Answer: B

Explanation:
The Apache web server is not the only application running in the project, so the budget alert is not suitable because it is related to all applications and not only the network traffic as needed.

 

NEW QUESTION 142
You have been asked to automate the infrastructure deployment using Google Deployment Manager service. Which all formats do Deployment manager template supports?

• A. Powershell
• B. YAML
• C. Python
• D. JSON

Answer: B,C

 

NEW QUESTION 143
You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?

• A. Use the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.
• B. Run a select count (*) to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.
• C. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
• D. Use the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.

Answer: A

 

NEW QUESTION 144
You have one GCP account running in your default region and zone and another account running in a non- default region and zone. You want to start a new Compute Engine instance in these two Google Cloud Platform accounts using the command line interface. What should you do?

• A. Activate two configurations using gcloud configurations activate [NAME].Run gcloud config listto start the Compute Engine instances.
• B. Activate two configurations using gcloud configurations activate [NAME].Run gcloud configurations listto start the Compute Engine instances.
• C. Create two configurations using gcloud config configurations create [NAME].Run gcloud config configurations activate [NAME]to switch between accounts when running the commands to start the Compute Engine instances.
• D. Create two configurations using gcloud config configurations create [NAME].Run gcloud configurations listto start the Compute Engine instances.

Answer: C

 

NEW QUESTION 145
You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes. Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?

• A. Select Add GPUs. Fill in persistent disk storage and snapshot storage.
• B. Select Add GPUs. Add estimated cost for cluster management.
• C. Fill in local SSD. Fill in persistent disk storage and snapshot storage.
• D. Fill in local SSD. Add estimated cost for cluster management.

Answer: A

Explanation:
Reference:
https://cloud.google.com/products/calculator#tab=container

 

NEW QUESTION 146
You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?

• A. Download a JSON Private Key for the service account. On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine-service-account.
• B. Download a JSON Private Key for the service account. On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.
• C. When creating the VM via the web console, specify the service account under the 'Identity and API Access' section.
• D. Download a JSON Private Key for the service account. After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine-service-account.json.

Answer: C

Explanation:
Explanation/Reference: https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances

 

NEW QUESTION 147
You need to select and configure compute resources for a set of batch processing jobs. These jobs take around 2 hours to complete and are run nightly. You want to minimize service costs. What should you do?

• A. Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.
• B. Select Compute Engine. Use VM instance types that support micro bursting.
• C. Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
• D. Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.

Answer: C

 

NEW QUESTION 148
You've seen some errors in the logs for a specific Deployment. You've narrowed the issue down to the Pod named "ad-generator" that is throwing the errors. Your engineers aren't able to reproduce the error in any other environment. They've told you that if they could just "connect into the container" for 5 minutes, they could figure out the root cause. What steps would allow them to run commands against the container?

• A. Use the kubectl run command to run a shell on that container.
• B. Use the kubectl exec -it ad-generator -- /bin/bash command to run a shell on that container.
• C. Use the kubectl run ad-generator /bin/bash command to run a shell on that container.
• D. Use the kubectl exec -it -- /bin/bash command to run a shell on that container.

Answer: B

 

NEW QUESTION 149
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group.
This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?

• A. Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for that instance. Direct them to use the Cloud Shell to ssh to that instance.
• B. Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group.
  Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
• C. Enable block project wide keys for the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.
• D. Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role.
  Direct them to use the Cloud Shell to ssh to that instance.

Answer: C

 

NEW QUESTION 150
You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

• A. In the Instance Template, add a startup script that sends a heartbeat to the metadata server.
• B. Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
• C. In the Instance Template, add the label 'health-check'.
• D. Create a health check on port 443 and use that when creating the Managed Instance Group.

Answer: C

Explanation:
Explanation/Reference: https://cloud.google.com/compute/docs/instance-groups/creating-groups-of-managed-instances

 

NEW QUESTION 151
You work for a retail company that has a busy online store. As you are approaching New Year, you find that your e-store is getting more and more traffic. You ensure that your web servers are behind a managed instance group. However, you notice that the web tier is frequently scaling, sometimes multiple times in an hour. You need to keep instance group from scaling up and down so rapidly. Which of the following options would help you to achieve this?

• A. Reduce the number of maximum instance count.
• B. Change the auto scaling metric to use multiple metrics instead of just one metric.
• C. Increase the cool down period.
• D. Associate a health check with instance group.

Answer: C

 

NEW QUESTION 152
You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?

• A. Run gcloud projects describe <project ID>to verify the project value, and then run gcloud services list --available.
• B. Run gcloud initto set the current project to my-project, and then run gcloud services list -- available.
• C. Run gcloud infoto view the account value, and then run gcloud services list --account
• D. Run gcloud projects listto get the project ID, and then run gcloud services list -- project <project ID>.

Answer: D

Explanation:
Explanation/Reference:

 

NEW QUESTION 153
You have a virtual machine that is currently configured with 2 vCPUs and 4 GB of memory. It is running out of memory. You want to upgrade the virtual machine to have 8 GB of memory.
What should you do?

• A. Stop the VM, change the machine type to n1-standard-8, and start the VM.
• B. Rely on live migration to move the workload to a machine with more memory.
• C. Stop the VM, increase the memory to 8 GB, and start the VM.
• D. Use gcloud to add metadata to the VM. Set the key to required-memory-sizeand the value to 8 GB.

Answer: C

 

NEW QUESTION 154
You created an update for your application on App Engine. You want to deploy the update without impacting your users. You want to be able to roll back as quickly as possible if it fails. What should you do?

• A. Delete the current version of your application. Deploy the update using the same version identifier as the deleted version.
• B. Deploy the update as the same version that is currently running.
• C. Notify your users of an upcoming maintenance window. Deploy the update in that maintenance window.
• D. Deploy the update as a new version. Migrate traffic from the current version to the new version.

Answer: D

Explanation:
A and B are not correct because this will make the application temporarily unavailable to users.
C is not correct because to roll back, you'll need to redeploy the previous deployment because the app was overwritten with the same version number. Therefore this takes longer than a rollback using method D.
D is correct because this makes sure there is no downtime and you can roll back the fastest.
https://cloud.google.com/appengine/docs/admin-api/migrating-splitting-traffic

 

NEW QUESTION 155
You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items.
How should you configure the auditor's permissions?

• A. Create a custom role with view-only project permissions. Add the user's account to the custom role.
• B. Create a custom role with view-only service permissions. Add the user's account to the custom role.
• C. Select the built-in IAM service Viewer role. Add the user's account to this role.
• D. Select the built-in IAM project Viewer role. Add the user's account to this role.

Answer: D

Explanation:
https://cloud.google.com/resource-manager/docs/access-control-proj

 

NEW QUESTION 156
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

• A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
• B. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.
• C. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
• D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

Answer: D

 

NEW QUESTION 157
You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

• A. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.
• B. Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
• C. Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
• D. Store the database password inside the Docker image of the container, not in the YAML file.

Answer: B

 

NEW QUESTION 158
The sales team has a project named Sales Data Digest that has the ID acme-data-digest You need to set up similar Google Cloud resources for the marketing team but their resources must be organized independently of the sales team. What should you do?

• A. Create another protect with the ID acme-marketing-data-digest for the Marketing team and deploy the resources there
• B. Create a new protect named Meeting Data Digest and use the ID acme-data-digest Grant the Project Editor role to the Marketing team.
• C. Grant the Project Editor role to the Marketing learn for acme data digest
• D. Create a Project Lien on acme-data digest and then grant the Project Editor role to the Marketing team

Answer: A

 

NEW QUESTION 159
A Solutions Architect must select the storage type for a big data application that requires very high sequential I/
O. The data must persist if the instance is stopped.
Which of the following storage types will provide the best fit at the LOWEST cost for the application?

• A. An Amazon EBS general purpose SSD volume.
• B. An Amazon EC2 instance store local SSD volume.
• C. An Amazon EBS throughput optimized HDD volume.
• D. An Amazon EBS provisioned IOPS SSD volume.

Answer: D

 

NEW QUESTION 160
You need to connect to one of your Compute Engine instances using SSH. You've already authenticated gcloud, however, you don't have an SSH key deployed yet. In the fewest steps possible, what's the easiest way to connect to the app?

• A. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
• B. Create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
• C. Use the gcloud compute ssh command.
• D. Create a key with the ssh-keygen command. Then use the gcloud compute ssh command.

Answer: C

 

NEW QUESTION 161
You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version.
What should you do?

• A. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.
• B. Deploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.
• C. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.
• D. Deploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.

Answer: B

Explanation:
https://cloud.google.com/appengine/docs/standard/python/splitting-traffic

 

NEW QUESTION 162
......

Google Associate Cloud Engineer Practice Test Questions, Google Associate Cloud Engineer Exam Practice Test Questions

The Google Associate Cloud Engineer certification is aimed at those professionals who deploy applications, manage enterprise solutions, and monitor operations. These individuals have the ability to utilize Google Cloud Console. They also use the command-line interface to carry out basic platform-based roles for the maintenance of multiple deployed solutions. These solutions leverage self-managed or Google-managed services on Google Cloud.

 

Try 100% Updated Associate-Cloud-Engineer Exam Questions [2021]: https://www.testsimulate.com/Associate-Cloud-Engineer-study-materials.html