Google Google Certifications ASSOCIATE-CLOUD-ENGINEER Questions & Answers

• Question 101:

  Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.

  

  You want to resolve the issue. What should you do?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

  Create a secondary index using the following Data Definition.

  If we watch the next video, he talks about a change to monotonically when we insert rows.

  Finally when we talk about read and we have a perdormance issues, we must create a index.

  https://www.youtube.com/watch?v=r6uj0HMNQNQ

• Question 102:

  Your company uses BigQuery for data warehousing. Over time, many different business units in your company have created 1000+ datasets across hundreds of projects. Your CIO wants you to examine all datasets to find tables that contain an employee_ssn column. You want to minimize effort in performing this task. What should you do?

  A. Go to Data Catalog and search for employee_ssn in the search box.

  B. Write a shell script that uses the bq command line tool to loop through all the projects in your organization.

  C. Write a script that loops through all the projects in your organization and runs a query on INFORMATION_SCHEMA.COLUMNS view to find the employee_ssn column.

  D. Write a Cloud Dataflow job that loops through all the projects in your organization and runs a query on INFORMATION_SCHEMA.COLUMNS view to find employee_ssn column.

  Correct Answer: A

  A is the correct answer, Data Catalog can be used to search the column with keyword:value pair,

  Filter your search by adding a keyword:value to your search terms in the search box:

  Keyword Description name: Match data asset name ***column: Match column name or nested column name description: Match table description

• Question 103:

  You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP. You want to make sure it is reachable by clients over that port. What should you do?

  A. Add the network tag allow-udp-636 to the VM instance running the LDAP server.

  B. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.

  C. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port 636 for that network tag.

  D. Add a network tag of your choice to the instance running the LDAP server. Create a firewall rule to allow egress on UDP port 636 for that network tag.

  Correct Answer: C

  You tag the instances ,then create ingress firewall rules to allow udp on desired port for target-tags name applied to instances

• Question 104:

  You need to set a budget alert for use of Compute Engineer services on one of the three Google Cloud Platform projects that you manage. All three projects are linked to a single billing account. What should you do?

  A. Verify that you are the project billing administrator. Select the associated billing account and create a budget and alert for the appropriate project.

  B. Verify that you are the project billing administrator. Select the associated billing account and create a budget and a custom alert.

  C. Verify that you are the project administrator. Select the associated billing account and create a budget for the appropriate project.

  D. Verify that you are project administrator. Select the associated billing account and create a budget and a custom alert.

  Correct Answer: A

  Billing Administrator is in between organization and projects, So he can chose and select appropriate project.

• Question 105:

  You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?

  A. When creating the VM, use machine type n1-standard-96.

  B. When creating the VM, use Intel Skylake as the CPU platform.

  C. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.

  D. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.

  Correct Answer: A

  https://cloud.google.com/compute/docs/machine-types

• Question 106:

  You want to configure a solution for archiving data in a Cloud Storage bucket. The solution must be cost-effective. Data with multiple versions should be archived after 30 days. Previous versions are accessed once a month for reporting. This archive data is also occasionally updated at month-end. What should you do?

  A. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Coldline Storage.

  B. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Nearline Storage.

  C. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Coldline Storage.

  D. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Nearline Storage.

  Correct Answer: B

  NumberOfNewerVersions

  The NumberOfNewerVersions condition is typically only used in conjunction with Object Versioning. If the value of this condition is set to N, an object version satisfies the condition when there are at least N versions (including the live version)

  newer than it. For a live object version, the number of newer versions is considered to be 0. For the most recent noncurrent version, the number of newer versions is 1 (or 0 if there is no live object version), and so on.

  Important: When specifying this condition in a .json configuration file, you must use numNewerVersions instead of NumberOfNewerVersions.

  https://cloud.google.com/storage/docs/lifecycle#numberofnewerversions

• Question 107:

  You want to select and configure a solution for storing and archiving data on Google Cloud Platform. You need to support compliance objectives for data from one geographic location. This data is archived after 30 days and needs to be accessed annually. What should you do?

  A. Select Multi-Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Coldline Storage.

  B. Select Multi-Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Nearline Storage.

  C. Select Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Nearline Storage.

  D. Select Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Coldline Storage.

  Correct Answer: D

  Google Cloud Coldline is a new cold-tier storage for archival data with access frequency of less than once per year. Unlike other cold storage options, Nearline has no delays prior to data access, so now it is the leading solution among competitors.

• Question 108:

  Your company's infrastructure is on-premises, but all machines are running at maximum capacity. You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?

  A. In Google Cloud, configure the VPC as a host for Shared VPC.

  B. In Google Cloud, configure the VPC for VPC Network Peering.

  C. Create bastion hosts both in your on-premises environment and on Google Cloud. Configure both as proxy servers using their public IP addresses.

  D. Set up Cloud VPN between the infrastructure on-premises and Google Cloud.

  Correct Answer: D

  "Google Cloud VPC Network Peering allows internal IP address connectivity across two Virtual Private Cloud (VPC) networks regardless of whether they belong to the same project or the same organization." https://cloud.google.com/vpc/ docs/vpc-peering

  while "Cloud Interconnect provides low latency, high availability connections that enable you to reliably transfer data between your on-premises and Google Cloud Virtual Private Cloud (VPC) networks." https://cloud.google.com/networkconnectivity/docs/interconnect/concepts/overview

  and "HA VPN is a high-availability (HA) Cloud VPN solution that lets you securely connect your on-premises network to your VPC network through an IPsec VPN connection in a single region." https://cloud.google.com/network-connectivity/docs/ vpn/concepts/overview

  so, cloud vpn is the best answer for the question requirement

• Question 109:

  You need to verify that a Google Cloud Platform service account was created at a particular time. What should you do?

  A. Filter the Activity log to view the Configuration category. Filter the Resource type to Service Account.

  B. Filter the Activity log to view the Configuration category. Filter the Resource type to Google Project.

  C. Filter the Activity log to view the Data Access category. Filter the Resource type to Service Account.

  D. Filter the Activity log to view the Data Access category. Filter the Resource type to Google Project.

  Correct Answer: A

  Filter the Activity log to view the Configuration category. Filter the Resource type to Service Account.

• Question 110:

  Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?

  A. Enable Cloud Identity in the GCP Console for your domain.

  B. Grant them the required IAM roles using their G Suite email address.

  C. Create a CSV sheet with all users' email addresses. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.

  D. In the G Suite console, add the users to a special group called [email protected]. Rely on the default behavior of the Cloud Platform to grant users access if they are members of this group.

  Correct Answer: B

  Reference: https://cloud.google.com/resource-manager/docs/creating-managing-organization