Free 2022 Associate-Cloud-Engineer Dumps 100 Pass Guarantee With Latest Demo
Prepare Associate-Cloud-Engineer Question Answers Free Update With 100% Exam Passing Guarantee [2022]
The Google ACE exam covers five broad topics. Each section has a list of components that the candidates must study and understand before attempting the certification test. The domains are the following:
Setting Up Cloud Solution Environments
- Manage billing configuration: this involves skills in creating multiple billing accounts; linking projects to a specific billing account; determining the billing budget and alerts; creating billing exports for daily/monthly estimated charges;
- Install and configure Cloud SDK CLI (Command Line Interface).
- Set up Cloud accounts and projects: the activities under this component include creating projects; assigning the specific users to predetermined IAM roles for a project; managing the users within Cloud Identity allowing APIs in projects; provisioning multiple Stackdriver workspaces;
NEW QUESTION 132
Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?
- A. Generate a new SSH key pair. Give the private key to each member of your team.
Configure the public key in the metadata of each instance. - B. Ask each member of the team to generate a new SSH key pair and to send you their public key.
Use a configuration management tool to deploy those keys on each instance. - C. Generate a new SSH key pair. Give the private key to each member of your team.
Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance. - D. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account.
Grant the "compute.osAdminLogin" role to the Google group corresponding to this team.
Answer: C
NEW QUESTION 133
You deployed an App Engine application using gcloud app deploy, but it did not deploy to the intended project. You want to find out why this happened and where the application deployed. What should you do?
- A. Check the app.yaml file for your application and check project settings.
- B. Go to Deployment Manager and review settings for deployment of applications.
- C. Check the web-application.xml file for your application and check project settings.
- D. Go to Cloud Shell and run gcloud config list to review the Google Cloud configuration used for deployment.
Answer: A
NEW QUESTION 134
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?
- A. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
- B. Create an Instance Template with Preemptible VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.
- C. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.
- D. Migrate the workload to a Compute Engine Preemptible VM.
Answer: A
NEW QUESTION 135
You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions.
You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?
- A. Create a separate billing account per sandbox project and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per billing account.
- B. Create a single budget for all projects and configure budget alerts on this budget.
- C. Create a single billing account for all sandbox projects and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per project.
- D. Create a budget per project and configure budget alerts on all of these budgets.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/billing/docs/how-to/budgets
NEW QUESTION 136
You are using multiple configurations for gcloud. You want to review the configured Kubernetes Engine cluster of an inactive configuration using the fewest possible steps. What should you do?
- A. Use kubectl config get-contextsto review the output.
- B. Use gcloud config configurations describeto review the output.
- C. Use gcloud config configurations activateand gcloud config listto review the output.
- D. Use kubectl config use-contextand kubectl config viewto review the output.
Answer: D
Explanation:
Explanation/Reference: https://medium.com/google-cloud/kubernetes-engine-kubectl-config-b6270d2b656c
NEW QUESTION 137
Your management has asked an external auditor to review all the resources in a specific project.
The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?
- A. Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.
- B. Ask the auditor for their Google account, and give them the Security Reviewer role on the project.
- C. Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.
- D. Ask the auditor for their Google account, and give them the Viewer role on the project.
Answer: A
Explanation:
https://cloud.google.com/iam/docs/roles-audit-logging#scenario_external_auditors
NEW QUESTION 138
You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?
- A. Deploy me application on App Engine For each update, create a new version of the same service Configure traffic splitting to send a small percentage of traffic to the new version
- B. Deploy the application on Kubernetes Engine For a new release, update the deployment to use the new version
- C. Deploy the application on App Engine For each update, create a new service Configure traffic splitting to send a small percentage of traffic to the new service.
- D. Deploy the application on Kubernetes Engine For a now release, create a new deployment for the new version Update the service e to use the now deployment.
Answer: A
NEW QUESTION 139
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2- highmem-16 nodes without any downtime. What should you do?
- A. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes.
Redeploy the pods and delete the old cluster. - B. Use gcloud container clusters upgrade.
Deploy the new services. - C. Create a new cluster with n2-highmem-16 nodes.
Redeploy the pods and delete the old cluster. - D. Create a new Node Pool and specify machine type n2-highmem-16.
Deploy the new pods.
Answer: D
NEW QUESTION 140
Your managed instance group raised an alert stating that new instance creation has failed to create new instances. You need to maintain the number of running instances specified by the template to be able to process expected application traffic. What should you do?
- A. Delete the current instance template and replace it with a new instance template. Verify that the instance name and persistent disk name values are not the same in the template. Set the disks.autoDelete property to true in the instance template.
- B. Create an instance template that contains valid syntax which will be used by the instance group. Delete any persistent disks with the same name as instance names.
- C. Create an instance template that contains valid syntax that will be used by the instance group. Verify that the instance name and persistent disk name values are not the same in the template.
- D. Verify that the instance template being used by the instance group contains valid syntax. Delete any persistent disks with the same name as instance names. Set the disks.autoDelete property to true in the instance template.
Answer: D
Explanation:
Reference:
https://cloud.google.com/compute/docs/instance-groups/creating-groups-of-managed-instances
NEW QUESTION 141
You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?
- A. 1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.
- B. 1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
- C. 1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
- D. 1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
Answer: A
NEW QUESTION 142
You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?
- A. Use the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.
- B. Run a select count (*)to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.
- C. Use the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.
- D. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/bigquery/docs/estimate-costs
NEW QUESTION 143
You need to immediately change the storage class of an existing Google Cloud bucket.
You need to reduce service cost for infrequently accessed files stored in that bucket and for all files that will be added to that bucket in the future. What should you do?
- A. Use the gsutil to rewrite the storage class for the bucket.
Set up Object Lifecycle management on the bucket - B. Use the gsutil to rewrite the storage class for the bucket.
Change the default storage class for the bucket - C. Create a new bucket and change the default storage class for the bucket.
Set up Object Lifecycle management on lite bucket - D. Create a new bucket and change the default storage class for the bucket import the files from the previous bucket into the new bucket
Answer: A
NEW QUESTION 144
You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection.
You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?
- A. Change the storage class of the bucket from Nearline to Multi-Regional.
- B. Use the GCP Console to transfer the file instead of gsutil.
- C. Decrease the TCP window size on the machine initiating the transfer.
- D. Enable parallel composite uploads using gsutil on the file transfer.
Answer: D
Explanation:
https://cloud.google.com/storage/docs/gsutil/commands/cp#parallel-composite-uploads_1 Warning: Parallel composite uploads should not be used with NEARLINE, COLDLINE, or ARCHIVE storage class buckets, because doing so incurs an early deletion charge for each component object.
Warning: Parallel composite uploads should not be used in buckets that have a retention policy, because the component pieces cannot be deleted until each has met the bucket's minimum retention period.
NEW QUESTION 145
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of
10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?
- A. Use an automatic mode VPC network, configure static routes, and use active/active routing
- B. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
- C. Use a custom mode VPC network, configure static routes, and use active/passive routing
- D. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing
Answer: D
NEW QUESTION 146
Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google's recommended practices. Which storage option should you use?
- A. Multi-Regional Storage
- B. Coldline Storage
- C. Regional Storage
- D. Nearline Storage
Answer: B
Explanation:
Reference:
https://cloud.google.com/storage/docs/storage-classes#nearline
NEW QUESTION 147
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project.
What should you do?
- A. Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web-applications.
- B. Give "project owner" for web-applications appropriate roles to crm-databases- proj
- C. Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.
- D. Give "project owner" role to crm-databases-proj and the web-applications project.
Answer: A
NEW QUESTION 148
You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic.
You want to ensure that the available capacity does not decrease during the deployment. What should you do?
- A. Perform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0.
- B. Create a new managed instance group with an updated instance template.
Add the group to the backend service for the load balancer.
When all instances in the new managed instance group are healthy, delete the old managed instance group. - C. Create a new instance template with the new application version.
Update the existing managed instance group with the new instance template.
Delete the instances in the managed instance group to allow the managed instance group to recreate the instance using the new instance template. - D. Perform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.
Answer: B
NEW QUESTION 149
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?
- A. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.
- B. Select the latest available cluster version for your GKE cluster.
- C. Enable the Node Auto-Repair feature for your GKE cluster.
- D. Enable the Node Auto-Upgrades feature for your GKE cluster.
Answer: D
Explanation:
https://cloud.google.com/kubernetes-engine/versioning-and-upgrades
NEW QUESTION 150
You are performing a monthly security check of your Google Cloud environment and want to know who has access to view data stored in your Google Cloud Project. What should you?
- A. Create a Data Loss Prevention job.
- B. Review the IAM permissions for any role that allows for data access.
- C. Enable Audit Logs for all APIs that are related to data storage.
- D. Review the Identity-Aware Proxy settings for each resource.
Answer: B
NEW QUESTION 151
You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?
- A. Convert the automatic first-of-the-month backup to an export file Write the export file to a Coldline class Cloud Storage bucket
- B. Set up an on-demand backup tor the first of the month Write the backup to an Archive class Cloud Storage bucket
- C. Save file automatic first-of-the- month backup for three years Store the backup file in an Archive class Cloud Storage bucket
- D. Set up an export job for the first of the month Write the export file to an Archive class Cloud Storage bucket
Answer: C
NEW QUESTION 152
You need a dynamic way of provisioning VMs on Compute Engine. The exact specifications will be in a dedicated configuration file. You want to follow Google's recommended practices. Which method should you use?
- A. Managed Instance Group
- B. Unmanaged Instance Group
- C. Deployment Manager
- D. Cloud Composer
Answer: A
NEW QUESTION 153
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention.
What should you do?
- A. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
- B. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
- C. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- D. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
Answer: B
Explanation:
Explanation
Explanation/Reference: https://cloud.google.com/logging/docs/audit/
NEW QUESTION 154
You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible.
Which range should you use?
- A. 172.16.0.0/12
- B. 192.168.0.0/16
- C. 0.0.0.0/0
- D. 10.0.0.0/8
Answer: D
NEW QUESTION 155
You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?
- A. Configure an external TCP proxy load balancer.
- B. Configure an external SSL proxy load balancer.
- C. Configure an HTTP(S) load balancer.
- D. Configure an internal TCP load balancer.
Answer: C
NEW QUESTION 156
......
Dumps Real Google Associate-Cloud-Engineer Exam Questions [Updated 2022]: https://www.lead1pass.com/Google/Associate-Cloud-Engineer-practice-exam-dumps.html
Free Associate-Cloud-Engineer Exam Dumps to Pass Exam Easily: https://drive.google.com/open?id=11qJY4HmZEjRMG-hfoEQfIP0LcyQEESQ1