Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 121:

  You just installed the Google Cloud CLI on your new corporate laptop. You need to list the existing instances of your company on Google Cloud. What must you do before you run the gcloud compute instances list command? (Choose 2 answers)

  A. Run gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI.
  B. Create a Google Cloud service account, and download the service account key. Place the key file in a folder on your machine where gcloud CLI can find it.
  C. Download your Cloud Identity user account key. Place the key file in a folder on your machine where gcloud CLI can find it.
  D. Run gcloud config set compute/zone $my_zone to set the default zone for gcloud CLI.
  E. Run gcloud config set project $my_project to set the default project for gcloud CLI.
  A. Run gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI.
  E. Run gcloud config set project $my_project to set the default project for gcloud CLI.

  ---

  Explanation

  Before you run the gcloud compute instances list command, you need to do two things: authenticate with your user account and set the default project for gcloud CLI. To authenticate with your user account, you need to run gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI. This will authorize the gcloud CLI to access Google Cloud resources on your behalf1. To set the default project for gcloud CLI, you need to run gcloud config set project $my_project, where $my_project is the ID of the project that contains the instances you want to list. This will save you from having to specify the project flag for every gcloud command2. Option B is not recommended, because using a service account key increases the risk of credential leakage and misuse. It is also not necessary, because you can use your user account to authenticate to the gcloud CLI3. Option C is not correct, because there is no such thing as a Cloud Identity user account key. Cloud Identity is a service that provides identity and access management for Google Cloud users and groups4. Option D is not required, because the gcloud compute instances list command does not depend on the default zone. You can list instances from all zones or filter by a specific zone using the -- filter flag.

  References:

  1: https://cloud.google.com/sdk/docs/authorizing

  2: https://cloud.google.com/sdk/gcloud/reference/config/set

  3: https://cloud.google.com/iam/docs/best-practices-for-managing-service-account- keys

  4: https://cloud.google.com/identity/docs/overview : https://cloud.google.com/sdk/gcloud/reference/ compute/instances/list

• Question 122:

  You have a Linux server running on a custom network. There's an allow firewall rule with an IP filter of 0.0.0.0/0 with a protocol/port of tcp:22. The logs on the instance show a constant stream of attempts from different IP addresses, trying to connect via SSH. You suspect this is a brute force attack.

  How might you change the firewall rule to stop this from happening and still enable access for legit users?

  A. Stop the instance.
  B. Deny all traffic to port 22.
  C. Change the port that SSH is running on in the instance and change the port number in the firewall rule.
  D. Change the IP address range in the filter to only allow known IP addresses.
  D. Change the IP address range in the filter to only allow known IP addresses.

  ---

  Explanation

• Question 123:

  An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination. What should you do?

  A. View System Event Logs in Stackdriver. Search for the user's email as the principal.
  B. View System Event Logs in Stackdriver. Search for the service account associated with the user.
  C. View Data Access audit logs in Stackdriver. Search for the user's email as the principal.
  D. View the Admin Activity log in Stackdriver. Search for the service account associated with the user.
  C. View Data Access audit logs in Stackdriver. Search for the user's email as the principal.

  ---

  Explanation

  View Data Access audit logs in Cloud Logging. Search for the user's email as the principal

• Question 124:

  You are migrating your company's on-premises compute resources to Google Cloud. You need to deploy batch processing jobs that run every night. The jobs require significant CPU and memory for several hours but can tolerate interruptions. You must ensure that the deployment is cost-effective. What should you do?

  A. Use the M1 machine series on Compute Engine.
  B. Containerize the batch processing jobs and deploy them on Compute Engine.
  C. Use Spot VMs on Compute Engine.
  D. Use custom machine types on Compute Engine.
  C. Use Spot VMs on Compute Engine.

  ---

  Explanation

  Using Spot VMs on Compute Engine is the most cost-effective solution for batch processing jobs that require significant CPU and memory for several hours and can tolerate interruptions. Spot VMs are discounted instances that can be preempted by Google Cloud at any time, making them ideal for workloads that are not time-sensitive and can handle interruptions. This approach minimizes costs while meeting your performance requirements.

• Question 125:

  You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

  A. Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
  B. Use Cloud Functions and configure the bucket as a trigger resource.
  C. Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
  D. Use Dataflow as a batch job, and configure the bucket as a data source.
  B. Use Cloud Functions and configure the bucket as a trigger resource.

  ---

  Explanation

  Correct Answer is (B):

  Google Cloud Storage Triggers

  Cloud Functions can respond to change notifications emerging from Google Cloud Storage. These notifications can be configured to trigger in response to various events inside a bucket--object creation, deletion, archiving and metadata

  updates.

  Note: Cloud Functions can only be triggered by Cloud Storage buckets in the same Google Cloud Platform project.

  Event types

  Cloud Storage events used by Cloud Functions are based on Cloud Pub/Sub Notifications for Google Cloud Storage and can be configured in a similar way.

  Supported trigger type values are:

  google.storage.object.finalize

  google.storage.object.delete

  google.storage.object.archive

  google.storage.object.metadataUpdate

  Object Finalize

  Trigger type value: google.storage.object.finalize

  This event is sent when a new object is created (or an existing object is overwritten, and a new generation of that object is created) in the bucket.

  https://cloud.google.com/functions/docs/calling/storage#event_types

• Question 126:

  You use Cloud Logging to capture application logs. You now need to use SQL to analyze the application logs in Cloud Logging, and you want to follow Google-recommended practices.

  What should you do?

  A. Develop SQL queries by using Gemini for Google Cloud.
  B. Enable Log Analytics for the log bucket and create a linked dataset in BigQuery.
  C. Create a schema for the storage bucket and run SQL queries for the data in the bucket.
  D. Export logs to a storage bucket and create an external view in BigQuery.
  B. Enable Log Analytics for the log bucket and create a linked dataset in BigQuery.

  ---

  Explanation

• Question 127:

  You are building a backend service for an ecommerce platform that will persist transaction data from mobile and web clients. After the platform is launched, you expect a large volume of global transactions. Your business team wants to run SQL queries to analyze the data. You need to build a highly available and scalable data store for the platform. What should you do?

  A. Create a multi-region Cloud Spanner instance with an optimized schema.
  B. Create a multi-region Firestore database with aggregation query enabled.
  C. Create a multi-region Cloud SQL for PostgreSQL database with optimized indexes.
  D. Create a multi-region BigQuery dataset with optimized tables.
  A. Create a multi-region Cloud Spanner instance with an optimized schema.

  ---

  Explanation

• Question 128:

  You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?

  A. Ask your ML team to add the "accelerator: gpu" annotation to their pod specification.
  B. Recreate all the nodes of the GKE cluster to enable GPUs on all of them.
  C. Create your own Kubernetes cluster on top of Compute Engine with nodes that have GPUs. Dedicate this cluster to your ML team.
  D. Add a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.
  D. Add a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.

  ---

  Explanation

  Add a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.

• Question 129:

  You need to manage a Cloud Spanner instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?

  A. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45%. If you exceed this threshold, add nodes to your instance.
  B. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45%. Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.
  C. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. If you exceed this threshold, add nodes to your instance.
  D. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.
  C. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. If you exceed this threshold, add nodes to your instance.

  ---

  Explanation

  https://cloud.google.com/spanner/docs/instances

• Question 130:

  While looking at your application's source code in your private Github repo, you've noticed that a service account key has been committed to git. What steps should you take next?

  A. Revoke the key, remove the key from Git, purge the Git history to remove all traces of the file, ensure the key is added to the .gitignore file.
  B. Delete the project and create a new one.
  C. Do nothing. Git is fine for keys if the repo is private.
  D. Contact Google Cloud Support
  A. Revoke the key, remove the key from Git, purge the Git history to remove all traces of the file, ensure the key is added to the .gitignore file.
  D. Contact Google Cloud Support

  ---

  Explanation