Google Google Certifications ASSOCIATE-CLOUD-ENGINEER Questions & Answers

• Question 121:

  You are working for a startup that was officially registered as a business 6 months ago. As your customer base grows, your use of Google Cloud increases. You want to allow all engineers to create new projects without asking them for their credit card information. What should you do?

  A. Create a Billing account, associate a payment method with it, and provide all project creators with permission to associate that billing account with their projects.

  B. Grant all engineer's permission to create their own billing accounts for each new project.

  C. Apply for monthly invoiced billing, and have a single invoice tor the project paid by the finance team.

  D. Create a billing account, associate it with a monthly purchase order (PO), and send the PO to Google Cloud.

  Correct Answer: A

  It allows you to centralize billing and payment management while providing flexibility to project creators. By creating a billing account and associating a payment method with it, you establish a central source for billing and payment for all projects.

  Granting project creators permission to associate the billing account with their projects ensures that they can create projects without the need for their individual credit card information. This approach streamlines the process and avoids the hassle of collecting credit card details from each engineer.

  Additionally, this option allows for easy monitoring and management of project costs through a single billing account, making it simpler to track expenses and allocate resources effectively.

• Question 122:

  Your learn wants to deploy a specific content management system (CMS) solution lo Google Cloud. You need a quick and easy way to deploy and install the solution. What should you do?

  A. Search for the CMS solution in Google Cloud Marketplace. Use gcloud CLI to deploy the solution.

  B. Search for the CMS solution in Google Cloud Marketplace. Deploy the solution directly from Cloud Marketplace.

  C. Search for the CMS solution in Google Cloud Marketplace. Use Terraform and the Cloud Marketplace ID to deploy the solution with the appropriate parameters.

  D. Use the installation guide of the CMS provider. Perform the installation through your configuration management system.

  Correct Answer: B

  Fastest and easiest way to deploy a solution straight from the marketplace

• Question 123:

  You created a cluster.YAML file containing

  resources: name: cluster type: container.v1.cluster properties: zone: europe-west1-b cluster: description: My GCP ACE cluster initialNodeCount: 2

  You want to use Cloud Deployment Manager to create this cluster in GKE. What should you do?

  A. gcloud deployment-manager deployments create my-gcp-ace-cluster --config cluster.yaml

  B. gcloud deployment-manager deployments create my-gcp-ace-cluster --type container.v1.cluster -- config cluster.yaml

  C. gcloud deployment-manager deployments apply my-gcp-ace-cluster --type container.v1.cluster --config cluster.yaml

  D. gcloud deployment-manager deployments apply my-gcp-ace-cluster --config cluster.yaml

  Correct Answer: D

  Explanation: gcloud deployment-manager deployments create creates deployments based on the configuration file. (Infrastructure as code). All the configuration related to the artifacts is in the configuration file. This command correctly creates a cluster based on the provided cluster.yaml configuration file.

  Ref: https://cloud.google.com/sdk/gcloud/reference/deployment- manager/deployments/create

• Question 124:

  You are designing an application that lets users upload and share photos. You expect your application to grow really fast and you are targeting a worldwide audience. You want to delete uploaded photos after 30 days. You want to minimize costs while ensuring your application is highly available. Which GCP storage solution should you choose?

  A. Persistent SSD on VM instances.

  B. Cloud Filestore.

  C. Multiregional Cloud Storage bucket.

  D. Cloud Datastore database.

  Correct Answer: C

  Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. We dont need to set up auto-scaling ourselves. Cloud Storage autoscaling is managed by GCP. Cloud Storage is an object store so it is suitable for storing photos. Cloud Storage allows world-wide storage and retrieval so cater well to our worldwide audience. Cloud storage provides us lifecycle rules that can be configured to automatically delete objects older than 30 days. This also fits our requirements. Finally, Google Cloud Storage offers several storage classes such as Nearline Storage ($0.01 per GB per Month) Coldline Storage ($0.007 per GB per Month) and Archive Storage ($0.004 per GB per month) which are significantly cheaper than any of the options above. Ref: https://cloud.google.com/storage/docs Ref: https://cloud.google.com/storage/pricing

  

• Question 125:

  You are designing an application that uses WebSockets and HTTP sessions that are not distributed across the web servers. You want to ensure the application runs properly on Google Cloud Platform. What should you do?

  A. Meet with the cloud enablement team to discuss load balancer options.

  B. Redesign the application to use a distributed user session service that does not rely on WebSockets and HTTP sessions.

  C. Review the encryption requirements for WebSocket connections with the security team.

  D. Convert the WebSocket code to use HTTP streaming.

  Correct Answer: A

  Google HTTP(S) Load Balancing has native support for the WebSocket protocol when you use HTTP or HTTPS, not HTTP/2, as the protocol to the backend.

  Ref: https://cloud.google.com/load-balancing/docs/https#websocket_proxy_support

  So the next possible step is to Meet with the cloud enablement team to discuss load balancer options. We dont need to convert WebSocket code to use HTTP streaming or Redesign the application, as WebSocket support is offered by Google HTTP(S) Load Balancing. Reviewing the encryption requirements is a good idea but it has nothing to do with WebSockets.

• Question 126:

  You have been asked to migrate a docker application from datacenter to cloud. Your solution architect has suggested uploading docker images to GCR in one project and running an application in a GKE cluster in a separate project. You

  want to store images in the project img-278322 and run the application in the project prod-278986. You want to tag the image as acme_track_n_trace:v1. You want to follow Google- recommended practices.

  What should you do?

  A. Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace

  B. Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace:v1

  C. Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace

  D. Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace:v1

  Correct Answer: B

  Run gcloud builds submit tag gcr.io/img-278322/acme_track_n_trace:v1. is the right answer. This command correctly tags the image as acme_track_n_trace:v1 and uploads the image to the img- 278322 project.

  Ref: https://cloud.google.com/sdk/gcloud/reference/builds/submit

• Question 127:

  Your company completed the acquisition of a startup and is now merging the IT systems of both companies. The startup had a production Google Cloud project in their organization. You need to move this project into your organization and ensure that the project is billed lo your organization. You want to accomplish this task with minimal effort. What should you do?

  A. Use the projects. move method to move the project to your organization. Update the billing account of the project to that of your organization.

  B. Ensure that you have an Organization Administrator Identity and Access Management (1AM) role assigned to you in both organizations. Navigate to the Resource Manager in the startup's Google Cloud organization, and drag the project to your company's organization.

  C. Create a Private Catalog tor the Google Cloud Marketplace, and upload the resources of the startup's production project to the Catalog. Share the Catalog with your organization, and deploy the resources in your company's project.

  D. Create an infrastructure-as-code template tor all resources in the project by using Terraform. and deploy that template to a new project in your organization. Delete the protect from the startup's Google Cloud organization.

  Correct Answer: A

  https://cloud.google.com/resource-manager/docs/project-migration-checklist

• Question 128:

  You have two subnets (subnet-a and subnet-b) in the default VPC. Your database servers are running in subnet-a. Your application servers and web servers are running in subnet-b. You want to configure a firewall rule that only allows database traffic from the application servers to the database servers. What should you do?

  A. Create service accounts sa-app and sa-db. Associate service account: sa-app with the application servers and the service account sa-db with the database servers. Create an ingress firewall rule to allow network traffic from source service account sa-app to target service account sa-db.

  B. Create network tags app-server and db-server. Add the app-server lag lo the application servers and the db-server lag to the database servers. Create an egress firewall rule to allow network traffic from source network tag app-server to target network tag db-server.

  C. Create a service account sa-app and a network tag db-server. Associate the service account sa-app with the application servers and the network tag db- server with the database servers. Create an ingress firewall rule to allow network traffic from source VPC IP addresses and target the subnet-a IP addresses.

  D. Create a network lag app-server and service account sa-db. Add the tag to the application servers and associate the service account with the database servers. Create an egress firewall rule to allow network traffic from source network tag app-server to target service account sa-db.

  Correct Answer: A

  From the TomFoot link

  'for example, allow my "application x" servers to access my "database y."'

• Question 129:

  A company wants to build an application that stores images in a Cloud Storage bucket and wants to generate thumbnails as well as resize the images. They want to use a google managed service that can scale up and scale down to zero automatically with minimal effort. You have been asked to recommend a service. Which GCP service would you suggest?

  A. Google Compute Engine

  B. Google App Engine

  C. Cloud Functions

  D. Google Kubernetes Engine

  Correct Answer: C

  

  Text

  Description automatically generated with low confidence

  Cloud Functions is Google Cloud's event-driven serverless compute platform. It automatically scales based on the load and requires no additional configuration. You pay only for the resources used.

  Ref: https://cloud.google.com/functions

  While all other options i.e. Google Compute Engine, Google Kubernetes Engine, Google App Engine support autoscaling, it needs to be configured explicitly based on the load and is not as trivial as the scale up or scale down offered by Google's cloud functions.

• Question 130:

  You created a Kubernetes deployment by running kubectl run nginx image=nginx labels=app=prod. Your Kubernetes cluster is also used by a number of other deployments. How can you find the identifier of the pods for this nginx deployment?

  A. kubectl get deployments 璷utput=pods

  B. gcloud get pods 璼elector="app=prod"

  C. kubectl get pods -I "app=prod"

  D. gcloud list gke-deployments -filter={pod }

  Correct Answer: C

  Explanation: This command correctly lists pods that have the label app=prod. When creating the deployment, we used the label app=prod so listing pods that have this label retrieve the pods belonging to nginx deployments. You can list pods by using Kubernetes CLI kubectl get pods.

  Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container- images/ Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container- images/#list- containers-filtering-by-pod-label