Verified Associate-Cloud-Engineer dumps Q&As 100% Pass in First Attempt Guaranteed Updated Dump from Lead1Pass
Pass Google Cloud Certified Associate-Cloud-Engineer Exam With 218 Questions
NEW QUESTION 101
You want to verify the IAM users and roles assigned within a GCP project named my-project.
What should you do?
- A. Navigate to the project and then to the Roles section in the GCP Console. Review the roles and status.
- B. Run gcloud iam roles list. Review the output section.
- C. Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles.
- D. Run gcloud iam service-accounts list. Review the output section.
Answer: C
Explanation:
IAM section provides the list of both Members and Roles.
Option A is wrong as it would provide information about the roles only.
Option B is wrong as it would provide only the service accounts.
Option D is wrong as it would provide information about the roles only.
NEW QUESTION 102
You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions. You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?
- A. Create a separate billing account per sandbox project and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per billing account.
- B. Create a single billing account for all sandbox projects and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per project.
- C. Create a budget per project and configure budget alerts on all of these budgets.
- D. Create a single budget for all projects and configure budget alerts on this budget.
Answer: C
NEW QUESTION 103
You created an update for your application on App Engine. You want to deploy the update without impacting your users. You want to be able to roll back as quickly as possible if it fails. What should you do?
- A. Delete the current version of your application. Deploy the update using the same version identifier as the deleted version.
- B. Deploy the update as a new version. Migrate traffic from the current version to the new version.
- C. Notify your users of an upcoming maintenance window. Deploy the update in that maintenance window.
- D. Deploy the update as the same version that is currently running.
Answer: B
Explanation:
A and B are not correct because this will make the application temporarily unavailable to users.
C is not correct because to roll back, you'll need to redeploy the previous deployment because the app was overwritten with the same version number. Therefore this takes longer than a rollback using method D.
D is correct because this makes sure there is no downtime and you can roll back the fastest.
https://cloud.google.com/appengine/docs/admin-api/migrating-splitting-traffic
NEW QUESTION 104
You have a Compute Engine instance hosting a production application. You want to receive an email if the instance consumes more than 90% of its CPU resources for more than 15 minutes. You want to use Google services. What should you do?
- A. 1. In Stackdriver Logging, create a logs-based metric to extract the CPU usage by using this regular expression: CPU Usage: ([0-9] {1,3})%
2.In Stackdriver Monitoring, create an Alerting Policy based on this metric.
3.Configure your email address in the notification channel. - B. 1. Create a Stackdriver Workspace, and associate your GCP project with it.
2.Write a script that monitors the CPU usage and sends it as a custom metric to Stackdriver.
3.Create an uptime check for the instance in Stackdriver. - C. 1. Create a Stackdriver Workspace, and associate your Google Cloud Platform (GCP) project with it.
2.Create an Alerting Policy in Stackdriver that uses the threshold as a trigger condition.
3.Configure your email address in the notification channel. - D. 1. Create a consumer Gmail account.
2.Write a script that monitors the CPU usage.
3.When the CPU usage exceeds the threshold, have that script send an email using the Gmail account and smtp.gmail.com on port 25 as SMTP server.
Answer: A
NEW QUESTION 105
Which of the following is a valid use case for using a primitive role?
- A. When there are more than 10 users.
- B. When creating a custom role requires more than 10 permissions.
- C. When granting permission to a production project, or to a third-party company.
- D. When granting permission to a development project or to the development team.
Answer: D
NEW QUESTION 106
You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?
- A. Automatic Scaling with min_idle_instances set to 3.
- B. Manual Scaling with 3 instances.
- C. Basic Scaling with max_instances set to 3.
- D. Basic Scaling with min_instances set to 3.
Answer: A
Explanation:
App Engine calculates the number of instances necessary to serve your current application traffic based on scaling settings such as target_cpu_utilization and target_throughput_utilization. Setting min_idle_instances specifies the number of instances to run in addition to this calculated number.
For example, if App Engine calculates that 5 instances are necessary to serve traffic, and min_idle_instances is set to 2, App Engine will run 7 instances (5, calculated based on traffic, plus 2 additional per min_idle_instances).
https://cloud.google.com/appengine/docs/standard/go/config/appref
NEW QUESTION 107
You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:
You need to refactor this configuration so that the database password is not stored in plain text.
You want to follow Google-recommended practices. What should you do?
- A. Store the database password inside a ConfigMap object.
Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap. - B. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.
- C. Store the database password inside a Secret object.
Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret. - D. Store the database password inside the Docker image of the container, not in the YAML file.
Answer: C
Explanation:
Google Kubernetes Engine supports secret to store sensitive data such as database passwords and is a google recommended practice.
https://cloud.google.com/kubernetes-engine/docs/concepts/secret
NEW QUESTION 108
You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?
- A. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.
- B. Use gcloud to create a key file for the service account that has appropriate permissions.
- C. Use service account credentials in your on-premises application.
- D. Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.
Answer: B
Explanation:
https://cloud.google.com/vision/automl/docs/before-you-begin
NEW QUESTION 109
You built an application on your development laptop that uses Google Cloud services. Your application uses Application Default Credentials for authentication and works fine on your development laptop. You want to migrate this application to a Compute Engine virtual machine (VM) and set up authentication using Google- recommended practices and minimal changes. What should you do?
- A. Store credentials for your user account with appropriate access for Google services in a config file, and deploy this config file with your application.
- B. Assign appropriate access for Google services to the service account used by the Compute Engine VM.
- C. Create a service account with appropriate access for Google services, and configure the application to use this account.
- D. Store credentials for service accounts with appropriate access for Google services in a config file, and deploy this config file with your application.
Answer: C
Explanation:
Reference:
https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances
NEW QUESTION 110
You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?
- A. Create a custom log-based metric for the specific error to be used in an Alerting Policy.
- B. Create a sink to BigQuery to export all the logs. Create a Data Studio dashboard on the exported logs.
- C. In the Log Viewer, filter the logs on severity 'Error' and the name of the Service Account.
- D. Grant Project Owner access to the Service Account.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/logging/docs/view/advanced-queries
NEW QUESTION 111
You need to help a developer install the App Engine Go extensions. However, you've forgotten the exact name of the component. Which command could you run to show all of the available options?
- A. gcloud components list
- B. gcloud component list
- C. gcloud config list
- D. gcloud config components list
Answer: A
NEW QUESTION 112
You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional
2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?
- A. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
- B. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of
32 GB. - C. Create a Cloud Memorystore for Redis instance with 32-GB capacity.
- D. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.
Answer: A
NEW QUESTION 113
You are using multiple configurations for gcloud. You want to review the configured Kubernetes Engine cluster of an inactive configuration using the fewest possible steps. What should you do?
- A. Use kubectl config use-contextand kubectl config viewto review the output.
- B. Use gcloud config configurations describeto review the output.
- C. Use gcloud config configurations activateand gcloud config listto review the output.
- D. Use kubectl config get-contextsto review the output.
Answer: A
Explanation:
Explanation/Reference: https://medium.com/google-cloud/kubernetes-engine-kubectl-config-b6270d2b656c
NEW QUESTION 114
You need to manage a Cloud Spanner Instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?
- A. Create an alert in Cloud Monitoring to alert when the percentage ot high priority CPU utilization reaches 45%.
Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage. - B. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45%.
If you exceed this threshold, add nodes lo your instance. - C. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%.
If you exceed this threshold, add nodes to your instance. - D. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%.
Use database query statistics to identity queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.
Answer: C
Explanation:
Increase instances on single region if CPU above 65%
https://cloud.google.com/spanner/docs/cpu-utilization#recommended-max
NEW QUESTION 115
You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA.
What should you do?
- A. Download a MongoDB installation package and run it on Compute Engine instances
- B. Create a Cloud Bigtable cluster and use the HBase API
- C. Download a MongoDB installation package, and run it on a Managed Instance Group
- D. Deploy MongoDB Alias from the Google Cloud Marketplace
Answer: C
NEW QUESTION 116
Your company has an existing GCP organization with hundreds of projects and a billing account.
Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?
- A. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
- B. Link the acquired company's projects to your company's billing account.
- C. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
- D. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
Answer: B
Explanation:
Projects are linked to another organization as well in the acquired company so migrating would need google cloud support.
We can not do ourselves. however, we can link other company projects to an existing billing account to generate total cost.
NEW QUESTION 117
You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?
- A. Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
- B. Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.
- C. Use granular logging statements within a Deployment Manager template authored in Python.
- D. Execute the Deployment Manager template using the ?preview option in the same project, and observe the state of interdependent resources.
Answer: D
Explanation:
Deployment Manager provides the preview feature to check on what resources would be created.
https://cloud.google.com/deployment-manager/docs/deployments/updating-deployments
NEW QUESTION 118
Your organization has a dedicated person who creates and manages all service accounts for Google Cloud projects. You need to assign this person the minimum role for projects.
What should you do?
- A. Add the user to roles/iam.roleAdmin role.
- B. Add the user to roles/iam.serviceAccountAdmin role.
- C. Add the user to roles/iam.securityAdmin role.
- D. Add the user to roles/iam.serviceAccountUser role.
Answer: B
Explanation:
To allow a user to manage service accounts, grant one of the following roles:
Service Account User (roles/iam.serviceAccountUser): Includes permissions to list service accounts, get details about a service account, and impersonate a service account.
Service Account Admin (roles/iam.serviceAccountAdmin): Includes permissions to list service accounts and get details about a service account. Also includes permissions to create, update, and delete service accounts, and to view or change the IAM policy on a service account.
NEW QUESTION 119
You need to immediately change the storage class of an existing Google Cloud bucket.
You need to reduce service cost for infrequently accessed files stored in that bucket and for all files that will be added to that bucket in the future. What should you do?
- A. Create a new bucket and change the default storage class for the bucket.
Set up Object Lifecycle management on lite bucket - B. Use the gsutil to rewrite the storage class for the bucket.
Set up Object Lifecycle management on the bucket - C. Use the gsutil to rewrite the storage class for the bucket.
Change the default storage class for the bucket - D. Create a new bucket and change the default storage class for the bucket import the files from the previous bucket into the new bucket
Answer: B
NEW QUESTION 120
You are developing a financial trading application that will be used globally. Data is stored and queried using a relational structure, and clients from all over the world should get the exact identical state of the data. The application will be deployed in multiple regions to provide the lowest latency to end users. You need to select a storage option for the application data while minimizing latency. What should you do?
- A. Use Cloud Spanner for data storage.
- B. Use Cloud Bigtable for data storage.
- C. Use Cloud SQL for data storage.
- D. Use Firestore for data storage.
Answer: A
Explanation:
Cloud Spanner, keywords are globally, relational structure and lastly "clients from all over the world should get the exact identical state of the data" which implies strong consistency is needed.
NEW QUESTION 121
......
Ultimate Guide to Prepare Free Associate-Cloud-Engineer Exam Questions and Answer: https://drive.google.com/open?id=1rbkTZSrLWQx3S8tXq8Hmqrp02oXwcuzH
Pass Associate-Cloud-Engineer Tests Engine pdf - All Free Dumps: https://www.lead1pass.com/Google/Associate-Cloud-Engineer-practice-exam-dumps.html