Maximum Grades By Making ready With Associate-Cloud-Engineer Dumps UPDATED 2023
Prepare Associate-Cloud-Engineer Exam Questions [2023] Recently Updated Questions
NEW QUESTION # 124
You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements. What should you do?
- A. Enable the Identity Aware Proxy API on the project.
- B. Scan the bucker using the Data Loss Prevention API.
- C. Enable Data Access audit logs for the Cloud Storage API.
- D. Allow only a single Service Account access to read the data.
Answer: C
Explanation:
Reference:
https://cloud.google.com/storage/docs/audit-logs
NEW QUESTION # 125
You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?
- A. Create a Cloud Bigtable cluster and use the HBase API
- B. Deploy MongoDB Alias from the Google Cloud Marketplace
- C. Download a MongoDB installation package and run it on Compute Engine instances
- D. Download a MongoDB installation package, and run it on a Managed Instance Group
Answer: B
Explanation:
Explanation
https://console.cloud.google.com/marketplace/details/gc-launcher-for-mongodb-atlas/mongodb-atlas
NEW QUESTION # 126
You create a Deployment with 2 replicas in a Google Kubernetes Engine cluster that has a single preemptible node pool. After a few minutes, you use kubectl to examine the status of your Pod and observe that one of them is still in Pending status:
What is the most likely cause?
- A. The node pool is configured with a service account that does not have permission to pull the container image used by the pending Pod.
- B. The pending Pod's resource requests are too large to fit on a single node of the cluster.
- C. Too many Pods are already running in the cluster, and there are not enough resources left to schedule the pending Pod.
- D. The pending Pod was originally scheduled on a node that has been preempted between the creation of the Deployment and your verification of the Pods' status. It is currently being rescheduled on a new node.
Answer: C
Explanation:
The pending Pods resource requests are too large to fit on a single node of the cluster. Too many Pods are already running in the cluster, and there are not enough resources left to schedule the pending Pod. is the right answer.
When you have a deployment with some pods in running and other pods in the pending state, more often than not it is a problem with resources on the nodes. Heres a sample output of this use case. We see that the problem is with insufficient CPU on the Kubernetes nodes so we have to either enable auto-scaling or manually scale up the nodes.
NEW QUESTION # 127
You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?
- A. Run gcloud infoto view the account value, and then run gcloud services list --account
- B. Run gcloud projects describe <project ID>to verify the project value, and then run gcloud services list --available.
- C. Run gcloud initto set the current project to my-project, and then run gcloud services list -- available.
- D. Run gcloud projects listto get the project ID, and then run gcloud services list -- project <project ID>.
Answer: D
NEW QUESTION # 128
You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?
- A. Set up an export job for the first of the month.
Write the export file to an Archive class Cloud Storage bucket. - B. Save the automatic first-of-the-month backup for three years.
Store the backup file in an Archive class Cloud Storage bucket. - C. Convert the automatic first-of-the-month backup to an export file.
Write the export file to a Coldline class Cloud Storage bucket. - D. Set up an on-demand backup for the first of the month.
Write the backup to an Archive class Cloud Storage bucket.
Answer: B
NEW QUESTION # 129
You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault- tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?
- A. Run a test using a managed instance group. If the test is successful, use N1 Standard VMs in the managed instance group when running future jobs.
- B. Run a test using simulated maintenance events. If the test is successful, use N1 Standard VMs when running future jobs.
- C. Run a test using simulated maintenance events. If the test is successful, use preemptible N1 Standard VMs when running future jobs.
- D. Run a test using N1 standard VMs instead of N2. If the test is successful, use N1 Standard VMs when running future jobs.
Answer: C
Explanation:
Explanation
Creating and starting a preemptible VM instance This page explains how to create and use a preemptible virtual machine (VM) instance. A preemptible instance is an instance you can create and run at a much lower price than normal instances. However, Compute Engine might terminate (preempt) these instances if it requires access to those resources for other tasks. Preemptible instances will always terminate after 24 hours.
To learn more about preemptible instances, read the preemptible instances documentation. Preemptible instances are recommended only for fault-tolerant applications that can withstand instance preemptions. Make sure your application can handle preemptions before you decide to create a preemptible instance. To understand the risks and value of preemptible instances, read the preemptible instances documentation.
https://cloud.google.com/compute/docs/instances/create-start-preemptible-instance
NEW QUESTION # 130
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have
96 vCPUs. - B. When creating the VM, use Intel Skylake as the CPU platform.
- C. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
- D. When creating the VM, use machine type n1-standard-96.
Answer: B
NEW QUESTION # 131
You have designed a solution on Google Cloud Platform (GCP) that uses multiple GCP products. Your company has asked you to estimate the costs of the solution. You need to provide estimates for the monthly total cost. What should you do?
- A. For each GCP product in the solution, review the pricing details on the products pricing page. Create a Google Sheet that summarizes the expected monthly costs for each product.
- B. Provision the solution on GCP. Leave the solution provisioned for 1 week. Navigate to the Billing Report page in the Google Cloud Platform Console. Multiply the 1 week cost to determine the monthly costs.
- C. Provision the solution on GCP. Leave the solution provisioned for 1 week. Use Stackdriver to determine the provisioned and used resource amounts. Multiply the 1 week cost to determine the monthly costs.
- D. For each GCP product in the solution, review the pricing details on the products pricing page. Use the pricing calculator to total the monthly costs for each GCP product.
Answer: D
NEW QUESTION # 132
Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need.
What should you do?
- A. Use the export logs API to provide the Admin Activity Audit Logs in the format they want
- B. Assign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs
- C. Turn on Data Access Logs for the buckets they want to audit, and Then build a query in the log viewer that filters on Cloud Storage
- D. Assign the appropriate permissions, and then use Cloud Monitoring to review metrics
Answer: C
Explanation:
Explanation
Types of audit logs Cloud Audit Logs provides the following audit logs for each Cloud project, folder, and organization: Admin Activity audit logs Data Access audit logs System Event audit logs Policy Denied audit logs ***Data Access audit logs contain API calls that read the configuration or metadata of resources, as well as user-driven API calls that create, modify, or read user-provided resource data.
https://cloud.google.com/logging/docs/audit#types
https://cloud.google.com/logging/docs/audit#data-access Cloud Storage: When Cloud Storage usage logs are enabled, Cloud Storage writes usage data to the Cloud Storage bucket, which generates Data Access audit logs for the bucket. The generated Data Access audit log has its caller identity redacted.
NEW QUESTION # 133
You're working on setting up a cluster of virtual machines with GPUs to perform some 3D rendering for a customer. They're on a limited budget and are looking for ways to save money. What is the best solution for implementing this?
- A. Use App Engine with Flexible Environments.
- B. Use an unmanaged instance group with preemptible instances.
- C. Use an autoscaled managed instance group containing some preemptible instances.
- D. Use App Engine with Standard Environments.
Answer: C,D
NEW QUESTION # 134
You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes.
Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?
- A. Fill in local SSD. Fill in persistent disk storage and snapshot storage.
- B. Select Add GPUs. Add estimated cost for cluster management.
- C. Fill in local SSD. Add estimated cost for cluster management.
- D. Select Add GPUs. Fill in persistent disk storage and snapshot storage.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/products/calculator#tab=container
NEW QUESTION # 135
Developers are creating a new online transaction processing (OLTP) application for a small database that is very read-write intensive. A single table in the database is updated continuously throughout the day, and the developers want to ensure that the database performance is consistent.
Which Amazon EBS storage option will achieve the MOST consistent performance to help maintain application performance?
- A. Throughput Optimized HDD
- B. General Purpose SSD
- C. Provisioned IOPS SSD
- D. Cold HDD
Answer: C
Explanation:
Explanation
NEW QUESTION # 136
Your security team has asked you to present them some numbers based on the logs that are exported to BigQuery. Due to the team structure, your manager has asked you to determine how much the query will cost.
What's the best way to determine the cost?
- A. Create the query and execute the query in "cost estimation mode"
- B. It's not possible to estimate the cost of a query.
- C. Use the BigQuery index viewer to determine how many records you'll be reading.
- D. Create the query and use the dry-run option to determine the amount of data read, then use the price calculator to determine the cost.
Answer: D
NEW QUESTION # 137
You want to select and configure a solution for storing and archiving data on Google Cloud Platform. You need to support compliance objectives for data from one geographic location. This data is archived after 30 days and needs to be accessed annually. What should you do?
- A. Select Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Coldline Storage.
- B. Select Multi-Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Coldline Storage.
- C. Select Multi-Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Nearline Storage.
- D. Select Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Nearline Storage.
Answer: A
Explanation:
Google Cloud Coldline is a new cold-tier storage for archival data with access frequency of less than once per year. Unlike other cold storage options, Nearline has no delays prior to data access, so now it is the leading solution among competitors.
The Real description is about Coldline storage Class:
Coldline Storage
Coldline Storage is a very-low-cost, highly durable storage service for storing infrequently accessed data. Coldline Storage is a better choice than Standard Storage or Nearline Storage in scenarios where slightly lower availability, a 90-day minimum storage duration, and higher costs for data access are acceptable trade-offs for lowered at-rest storage costs.
Coldline Storage is ideal for data you plan to read or modify at most once a quarter. Note, however, that for data being kept entirely for backup or archiving purposes, Archive Storage is more cost-effective, as it offers the lowest storage costs.
https://cloud.google.com/storage/docs/storage-classes#coldline
NEW QUESTION # 138
You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements. What should you do?
- A. Enable the Identity Aware Proxy API on the project.
- B. Scan the bucker using the Data Loss Prevention API.
- C. Enable Data Access audit logs for the Cloud Storage API.
- D. Allow only a single Service Account access to read the data.
Answer: C
NEW QUESTION # 139
You need to verify the assigned permissions in a custom IAM role. What should you do?
- A. Use the GCP Console, Security section to view the information.
- B. Use the GCP Console, IAM section to view the information.
- C. Use the GCP Console, API section to view the information.
- D. Use the "gcloud init" command to view the information.
Answer: B
Explanation:
A is correct because this is the correct console area to view permission assigned to a custom role in a particular project.
B is not correct because 'gcloud init' will not provide the information required.
C and D are not correct because these are not the correct areas to view this information
NEW QUESTION # 140
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate- reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?
- A. Move both projects under the same folder.
- B. Create a Shared VPC network between both projects.
Grant the VM Service Account the role Storage Object Creator on corp-iot-insights. - C. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.
Share the folder with the IoT team. - D. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports- storage.
Answer: D
Explanation:
Predefined roles
The following table describes Identity and Access Management (IAM) roles that are associated with Cloud Storage and lists the permissions that are contained in each role. Unless otherwise noted, these roles can be applied either to entire projects or specific buckets.
Storage Object Creator (roles/storage.objectCreator) Allows users to create objects. Does not give permission to view, delete, or overwrite objects.
https://cloud.google.com/storage/docs/access-control/iam-roles#standard-roles
NEW QUESTION # 141
Your company publishes large files on an Apache web server that runs on a Compute Engine instance. The Apache web server is not the only application running in the project. You want to receive an email when the egress network costs for the server exceed 100 dollars for the current month as measured by Google Cloud Platform (GCP). What should you do?
- A. Export the billing data to BigQuery. Create a Cloud Function that uses BigQuery to sum the egress network costs of the exported billing data for the Apache web server for the current month and sends an email if it is over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.
- B. Use the Stackdriver Logging Agent to export the Apache web server logs to Stackdriver Logging. Create a Cloud Function that uses BigQuery to parse the HTTP response log data in Stackdriver for the current month and sends an email if the size of all HTTP responses, multiplied by current GCP egress prices, totals over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.
- C. Set up a budget alert on the project with an amount of 100 dollars, a threshold of 100%, and notification type of "email."
- D. Set up a budget alert on the billing account with an amount of 100 dollars, a threshold of 100%, and notification type of "email."
Answer: A
Explanation:
https://blog.doit-intl.com/the-truth-behind-google-cloud-egress-traffic-6e8f57b5c2f8
NEW QUESTION # 142
Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?
- A. Create a ticket with Google Support and wait for their call to share your credit card details over the phone.
- B. Contact [email protected] with your bank account details and request a corporate billing account for your company.
- C. In the Google Cloud Platform Console, create a new billing account and set up a payment method.
- D. In the Google Platform Console, go to the Resource Manage and move all projects to the root Organizarion.
Answer: C
Explanation:
Cloud Billing accounts can be used across organizations. Moving a project from one organization to another won't impact billing, and charges will continue against the old billing account. However, organization moves often also include a requirement to move to a new billing account.
https://cloud.google.com/resource-manager/docs/project-migration#change_billing_account
NEW QUESTION # 143
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
- B. When creating the VM, use Intel Skylake as the CPU platform.
- C. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
- D. When creating the VM, use machine type n1-standard-96.
Answer: A
NEW QUESTION # 144
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?
- A. Use gcloud iam roles copy and specify the production project as the destination project.
- B. In the Google Cloud Platform Console, use the 'create role' functionality and select all applicable permissions.
- C. Use gcloud iam roles copy and specify your organization as the destination organization.
- D. In the Google Cloud Platform Console, use the 'create role from role' functionality.
Answer: C
NEW QUESTION # 145
Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?
- A. Create a route on the VPC to route all traffic to the instance over the VPN tunnel.
- B. Create the instance with Private Google Access enabled.
- C. Create the instance without a public IP address.
- D. Create a deny-all egress firewall rule on the VPC network.
Answer: C
Explanation:
Private Google Access allows access to the external IP addresses. which is against the requirements.
NEW QUESTION # 146
Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?
- A. Create the instance with Private Google Access enabled.
- B. Create a route on the VPC to route all traffic to the instance over the VPN tunnel.
- C. Create the instance without a public IP address.
- D. Create a deny-all egress firewall rule on the VPC network.
Answer: A
Explanation:
Explanation
Get private access to Google services, such as storage, big data, analytics, or machine learning, without having to give your service a public IP address. Reference: https://cloud.google.com/vpc
NEW QUESTION # 147
......
Give push to your success with Associate-Cloud-Engineer exam questions: https://examschief.vce4plus.com/Google/Associate-Cloud-Engineer-valid-vce-dumps.html