Get Prepared for Your Associate-Cloud-Engineer Exam With Actual Google Study Guide!
Pass Your Next Associate-Cloud-Engineer Certification Exam Easily & Hassle Free
NEW QUESTION # 205
You used the gcloud container clusters command to create two Google Cloud Kubernetes (GKE) clusters prod-cluster and dev-cluster.
* prod-cluster is a standard cluster.
* dev-cluster is an auto-pilot duster.
When you run the Kubect1 get nodes command, you only see the nodes from prod-cluster.
Which commands should you run to check the node status for dev-cluster?
- A.

- B.

- C.

- D.

Answer: B
NEW QUESTION # 206
Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.
You want to resolve the issue. What should you do?
- A. Option C
- B. Option B
- C. Option A
- D. Option D
Answer: A
Explanation:
As mentioned in Schema and data model, you should be careful when choosing a primary key to not accidentally create hotspots in your database. One cause of hotspots is having a column whose value monotonically increases as the first key part, because this results in all inserts occurring at the end of your key space. This pattern is undesirable because Cloud Spanner divides data among servers by key ranges, which means all your inserts will be directed at a single server that will end up doing all the work. https://cloud.
google.com/spanner/docs/schema-design#primary-key-prevent-hotspots
NEW QUESTION # 207
You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?
- A. Create 2 custom VPCs, each with a single subnet. Create each subnet in the same region and with the same CIDR range.
- B. Create a single custom VPC with 2 subnets. Create each subnet in the same region and with the same CIDR range.
- C. Create a single custom VPC with 2 subnets. Create each subnet in a different region and with a different CIDR range.
- D. Create 2 custom VPCs, each with a single subnet. Create each subnet is a different region and with a different CIDR range.
Answer: C
NEW QUESTION # 208
You are designing an application that lets users upload and share photos. You expect your application to grow really fast and you are targeting a worldwide audience. You want to delete uploaded photos after 30 days. You want to minimize costs while ensuring your application is highly available. Which GCP storage solution should you choose?
- A. Persistent SSD on VM instances.
- B. Multiregional Cloud Storage bucket.
- C. Cloud Datastore database.
- D. Cloud Filestore.
Answer: B
Explanation:
Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. We dont need to set up auto-scaling ourselves. Cloud Storage autoscaling is managed by GCP. Cloud Storage is an object store so it is suitable for storing photos. Cloud Storage allows world-wide storage and retrieval so cater well to our worldwide audience. Cloud storage provides us lifecycle rules that can be configured to automatically delete objects older than 30 days. This also fits our requirements. Finally, Google Cloud Storage offers several storage classes such as Nearline Storage ($0.01 per GB per Month) Coldline Storage ($0.007 per GB per Month) and Archive Storage ($0.004 per GB per month) which are significantly cheaper than any of the options above.
Ref: https://cloud.google.com/storage/docs
Ref: https://cloud.google.com/storage/pricing
NEW QUESTION # 209
You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps. What should you do?
- A. Set a Windows password in the GCP Console. Verify that a firewall rule for port 22 exists. Click the RDP button in the GCP Console and supply the credentials to log in.
- B. Set a Windows username and password in the GCP Console. Verify that a firewall rule for port 3389 exists. Click the RDP button in the GCP Console, and supply the credentials to log in.
- C. Install a RDP client on your desktop. Verify that a firewall rule for port 3389 exists.
- D. Install a RDP client in your desktop. Set a Windows username and password in the GCP Console. Use the credentials to log in to the instance.
Answer: B
Explanation:
Explanation
https://cloud.google.com/compute/docs/instances/connecting-to-windows#remote-desktop-connection-app
https://cloud.google.com/compute/docs/instances/windows/generating-credentials
https://cloud.google.com/compute/docs/instances/connecting-to-windows#before-you-begin
NEW QUESTION # 210
Your development team has asked for your help. They need a simple, reproducible way to create and terminate a new Compute Engine instance so that they can automate it as a part of their CI/CD process. What is the best option for accomplishing that?
- A. Show them how to use a Docker container. Then they can get rid of the need for the VM.
- B. Show them how to use the gcloud component of the Cloud SDK.
- C. Recommend that they use the REST API to develop the functionality in the language of their choosing.
- D. Show them how to use the Console to create and terminate instances.
Answer: B
NEW QUESTION # 211
Developers are creating a new online transaction processing (OLTP) application for a small database that is very read-write intensive. A single table in the database is updated continuously throughout the day, and the developers want to ensure that the database performance is consistent.
Which Amazon EBS storage option will achieve the MOST consistent performance to help maintain application performance?
- A. General Purpose SSD
- B. Provisioned IOPS SSD
- C. Cold HDD
- D. Throughput Optimized HDD
Answer: B
Explanation:
Explanation
NEW QUESTION # 212
You have been asked to set up the billing configuration for a new Google Cloud customer. Your customer wants to group resources that share common IAM policies. What should you do?
- A. Use labels to group resources that share common IAM policies
- B. Set up a proper project naming structure to group IAM policies
- C. Use folders to group resources that share common IAM policies
- D. Set up a proper billing account structure to group IAM policies
Answer: C
Explanation:
Explanation
Folders are nodes in the Cloud Platform Resource Hierarchy. A folder can contain projects, other folders, or a combination of both. Organizations can use folders to group projects under the organization node in a hierarchy. For example, your organization might contain multiple departments, each with its own set of Google Cloud resources. Folders allow you to group these resources on a per-department basis. Folders are used to group resources that share common IAM policies. While a folder can contain multiple folders or resources, a given folder or resource can have exactly one parent.
https://cloud.google.com/resource-manager/docs/creating-managing-folders
NEW QUESTION # 213
You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible. What should you do?
- A. Create a new Compute Engine instance. Run the Jenkins executable.
- B. Deploy Jenkins through the Google Cloud Marketplace.
- C. Create a new Kubernetes Engine cluster. Create a deployment for the Jenkins image.
- D. Create an instance template with the Jenkins executable. Create a managed instance group with this template.
Answer: C
NEW QUESTION # 214
You've been tasked with getting all of your team's public SSH keys onto all of the instances of a particular project. You've collected them all. With the fewest steps possible, what is the simplest way to get the keys deployed?
- A. Format all of the keys as needed and then, using the user interface, upload each key one at a time.
- B. Use the gcloud compute ssh command to upload all the keys
- C. Add all of the keys into a file that's formatted according to the requirements. Use the gcloud compute instances add-metadata command to upload the keys to each instance
- D. Add all of the keys into a file that's formatted according to the requirements. Use the gcloud compute project-info add-metadata command to upload the keys.
Answer: D
NEW QUESTION # 215
A Solutions Architect must select the storage type for a big data application that requires very high sequential I/
O. The data must persist if the instance is stopped.
Which of the following storage types will provide the best fit at the LOWEST cost for the application?
- A. An Amazon EBS throughput optimized HDD volume.
- B. An Amazon EBS general purpose SSD volume.
- C. An Amazon EBS provisioned IOPS SSD volume.
- D. An Amazon EC2 instance store local SSD volume.
Answer: C
NEW QUESTION # 216
Your company has an existing GCP organization with hundreds of projects and a billing account.
Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?
- A. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
- B. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
- C. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
- D. Link the acquired company's projects to your company's billing account.
Answer: D
Explanation:
Projects are linked to another organization as well in the acquired company so migrating would need google cloud support.
We can not do ourselves. however, we can link other company projects to an existing billing account to generate total cost.
https://cloud.google.com/resource-manager/docs/project-migration
NEW QUESTION # 217
You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?
- A. Create a HAProxy pod in the cluster to load-balance the traffic to all the pods of the application. Forward the public traffic to HAProxy with an iptable rule. Configure the DNS name of your application using the public IP of the node HAProxy is running on.
- B. Create a Kubernetes Service of type ClusterIP for your application. Configure the public DNS name of your application using the IP of this Service.
- C. Create a Kubernetes Service of type NodePort to expose the application on port 443 of each node of the Kubernetes cluster. Configure the public DNS name of your application with the IP of every node of the cluster to achieve load-balancing.
- D. Create a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.
Answer: D
NEW QUESTION # 218
Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the dat a. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?
- A. Upload the data into Cloud Spanner using the import function in the console.
- B. Upload the data to Cloud Storage using the gsutil command line tool.
- C. Upload the data to BigQuery using the bq command line tool.
- D. Upload the data into Cloud SQL using the import function in the console.
Answer: C
NEW QUESTION # 219
You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance.
What should you do?
- A. Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to the role.
- B. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.
- C. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
- D. Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to a new group.Add the group to the role.
Answer: B
Explanation:
Explanation
https://cloud.google.com/spanner/docs/iam#spanner.databaseUser
Using the gcloud tool, execute the gcloud iam roles describe roles/spanner.databaseUser command on Cloud Shell. Attach the users to a newly created Google group and add the group to the role.
NEW QUESTION # 220
You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:
You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?
- A. Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
- B. Store the database password inside the Docker image of the container, not in the YAML file.
- C. Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
- D. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.
Answer: C
NEW QUESTION # 221
You want to select and configure a cost-effective solution for relational data on Google Cloud Platform. You are working with a small set of operational data in one geographic location. You need to support point-in-time recovery. What should you do?
- A. Select Cloud SQL (MySQL). Verify that the enable binary loggingoption is selected.
- B. Select Cloud SQL (MySQL). Select the create failover replicasoption.
- C. Select Cloud Spanner. Set up your instance as multi-regional.
- D. Select Cloud Spanner. Set up your instance with 2 nodes.
Answer: A
Explanation:
Explanation/Reference: https://cloud.google.com/sql/docs/mysql/backup-recovery/restore
NEW QUESTION # 222
You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?
- A. Use service account credentials in your on-premises application.
- B. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.
- C. Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.
- D. Use gcloud to create a key file for the service account that has appropriate permissions.
Answer: D
NEW QUESTION # 223
You've just created a new Google Cloud account. You're eager to start working with resources such as App Engine and Cloud Storage. However, you know that resources have requirements. Which of the following is required by Google Cloud in order to enable and use resources?
- A. An Organization
- B. A Project
- C. A Folder
- D. A Stackdriver account
Answer: B
NEW QUESTION # 224
......
Ace Associate-Cloud-Engineer Certification with 345 Actual Questions: https://www.newpassleader.com/Google/Associate-Cloud-Engineer-exam-preparation-materials.html
Free Google Associate-Cloud-Engineer Exam Question Practice Exams: https://drive.google.com/open?id=1BfatMD0SDN9dbvNi9ZOoSZ6fO_yjyYBQ