Google Google Certifications ASSOCIATE-CLOUD-ENGINEER Questions & Answers

• Question 131:

  You are building a multi-player gaming application that will store game information in a database. As the popularity of the application increases, you are concerned about delivering consistent performance. You need to ensure an optimal gaming performance for global users, without increasing the management complexity. What should you do?

  A. Use Cloud SQL database with cross-region replication to store game statistics in the EU, US, and APAC regions.

  B. Use Cloud Spanner to store user data mapped to the game statistics.

  C. Use BigQuery to store game statistics with a Redis on Memorystore instance in the front to provide global consistency.

  D. Store game statistics in a Bigtable database partitioned by username.

  Correct Answer: B

  Among the options provided, the better answer for ensuring optimal gaming performance for global users without increasing management complexity would be option B

  Cloud Spanner is a globally distributed, horizontally scalable database service provided by Google Cloud Platform. It offers strong consistency guarantees, high availability, and automatic scaling.

  It offers the necessary features to ensure optimal gaming performance, global scalability, strong consistency, and automatic scaling, making it a suitable choice for storing user data mapped to game statistics.

• Question 132:

  The storage costs for your application logs have far exceeded the project budget. The logs are currently being retained indefinitely in the Cloud Storage bucket myapp-gcp-ace-logs. You have been asked to remove logs older than 90 days from your Cloud Storage bucket. You want to optimize ongoing Cloud Storage spend. What should you do?

  A. Write a script that runs gsutil Is -| gs://myapp-gcp-ace-logs/** to find and remove items older than 90 days. Schedule the script with cron.

  B. Write a lifecycle management rule in JSON and push it to the bucket with gsutil lifecycle set config- json-file.

  C. Write a lifecycle management rule in XML and push it to the bucket with gsutil lifecycle set config-xml- file.

  D. Write a script that runs gsutil Is -Ir gs://myapp-gcp-ace-logs/** to find and remove items older than 90 days. Repeat this process every morning.

  Correct Answer: B

  You write a lifecycle management rule in XML and push it to the bucket with gsutil lifecycle set config-xml- file. is not right. gsutil lifecycle set enables you to set the lifecycle configuration on one or more buckets based on the configuration file provided. However, XML is not a valid supported type for the configuration file.

  Ref: https://cloud.google.com/storage/docs/gsutil/commands/lifecycle

  Write a script that runs gsutil ls -lr gs://myapp-gcp-ace-logs/** to find and remove items older than 90 days. Repeat this process every morning. is not right. This manual approach is error-prone, time-consuming and expensive. GCP Cloud Storage provides lifecycle management rules that let you achieve this with minimal effort.

  Write a script that runs gsutil ls -l gs://myapp-gcp-ace-logs/** to find and remove items older than 90 days. Schedule the script with cron. is not right. This manual approach is error-prone, time-consuming and expensive. GCP Cloud Storage provides lifecycle management rules that let you achieve this with minimal effort. Write a lifecycle management rule in JSON and push it to the bucket with gsutil lifecycle set config- json-file. is the right answer. You can assign a lifecycle management configuration to a bucket. The configuration contains a set of rules which apply to current and future objects in the bucket. When an object meets the criteria of one of the rules, Cloud Storage automatically performs a specified action on the object. One of the supported actions is to Delete objects. You can set up a lifecycle management to delete objects older than 90 days. gsutil lifecycle set enables you to set the lifecycle configuration on the bucket based on the configuration file. JSON is the only supported type for the configuration file. The config-json- file specified on the command line should be a path to a local file containing the lifecycle configuration JSON document.

  Ref: https://cloud.google.com/storage/docs/gsutil/commands/lifecycle Ref: https://cloud.google.com/ storage/docs/lifecycle

• Question 133:

  Your company has multiple projects linked to a single billing account in Google Cloud. You need to visualize the costs with specific metrics that should be dynamically calculated based on company-specific criteria. You want to automate the process. What should you do?

  A. In the Google Cloud console, visualize the costs related to the projects in the Reports section.

  B. In the Google Cloud console, visualize the costs related to the projects in the Cost breakdown section.

  C. In the Google Cloud console, use the export functionality of the Cost table. Create a Looker Studiodashboard on top of the CSV export.

  D. Configure Cloud Billing data export to BigOuery for the billing account. Create a Looker Studio dashboard on top of the BigOuery export.

  Correct Answer: D

  By configuring Cloud Billing data export to BigQuery, you can automate the process of exporting billing data to a BigQuery dataset. You can then use Looker Studio, a data visualization and exploration platform, to create a dashboard on top of the BigQuery export. This allows you to visualize costs with specific metrics that can be dynamically calculated based on company-specific criteria.

• Question 134:

  You are configuring Cloud DNS. You want !to create DNS records to point home.mydomain.com, mydomain.com. and www.mydomain.com to the IP address of your Google Cloud load balancer. What should you do?

  A. Create one CNAME record to point mydomain.com to the load balancer, and create two A records to point WWW and HOME lo mydomain.com respectively.

  B. Create one CNAME record to point mydomain.com to the load balancer, and create two AAAA records to point WWW and HOME to mydomain.com respectively.

  C. Create one A record to point mydomain.com to the load balancer, and create two CNAME records to point WWW and HOME to mydomain.com respectively.

  D. Create one A record to point mydomain.com lo the load balancer, and create two NS records to point WWW and HOME to mydomain.com respectively.

  Correct Answer: C

  https://cloud.google.com/dns/docs/set-up-dns-records-domain-name#create_a_record_to_point_the_domain_to_an_external_ip_address

• Question 135:

  You have an application that runs on Compute Engine VM instances in a custom Virtual Private Cloud (VPC). Your company's security policies only allow the use to internal IP addresses on VM instances and do not let VM instances connect to the internet. You need to ensure that the application can access a file hosted in a Cloud Storage bucket within your project. What should you do?

  A. Enable Private Service Access on the Cloud Storage Bucket.

  B. Add slorage.googleapis.com to the list of restricted services in a VPC Service Controls perimeter and add your project to the list to protected projects.

  C. Enable Private Google Access on the subnet within the custom VPC.

  D. Deploy a Cloud NAT instance and route the traffic to the dedicated IP address of the Cloud Storage bucket.

  Correct Answer: C

  Private Google Access lets you connect VM instances to GCP services without external IP addresses and only internal. A is wrong because even though Private Services Access lets you also access GCP and other services through internal IPs, it also allows the VMs to have external IPs. https://cloud.google.com/vpc/docs/private-google-access

• Question 136:

  You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images. The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires.

  The other microservices are workloads that are optimized for n1-standard machine types. You need to optimize your cluster so that all workloads are using resources as efficiently as possible.

  What should you do?

  A. Assign the pods of the image rendering microservice a higher pod priority than the older microservices

  B. Create a node pool with compute-optimized machine type nodes for the image rendering microservice Use the node pool with general-purpose machine type nodes for the other microservices

  C. Use the node pool with general-purpose machine type nodes for lite mage rendering microservice Create a nodepool with compute-optimized machine type nodes for the other microservices

  D. Configure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment Keep the resource requests for the other microservices at the default

  Correct Answer: B

• Question 137:

  All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States

  (US).

  What should you do?

  A. Create a folder to contain all the dev projects Create an organization policy to limit resources in US locations.

  B. Create an organization to contain all the dev projects. Create an Identity and Access Management (1AM) policy to limit the resources in US regions.

  C. Create an Identity and Access Management

  D. Create an Identity and Access Management (IAM)policy to restrict the resources locations in all dev projects. Apply the policy to all dev roles.

  Correct Answer: A

  Organization policies are made up of constraints that allow you to:

  Limit resource sharing based on domain.

  Limit the usage of Identity and Access Management service accounts.

  Restrict the physical location of newly created resources!!!!!!!!!

  https://cloud.google.com/resource-manager/docs/organization-policy/overview

• Question 138:

  You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?

  A. Use a custom mode VPC network, configure static routes, and use active/passive routing

  B. Use an automatic mode VPC network, configure static routes, and use active/active routing

  C. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing

  D. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing

  Correct Answer: C

  https://cloud.google.com/network-connectivity/docs/vpn/concepts/best- practices

• Question 139:

  You are using Data Studio to visualize a table from your data warehouse that is built on top of BigQuery. Data is appended to the data warehouse during the day. At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Data Studio are broken, and you want to analyze the problem. What should you do?

  A. Use the BigQuery interface to review the nightly Job and look for any errors

  B. Review the Error Reporting page in the Cloud Console to find any errors.

  C. In Cloud Logging create a filter for your Data Studio report

  D. Use Cloud Debugger to find out why the data was not refreshed correctly

  Correct Answer: A

• Question 140:

  You need to track and verity modifications to a set of Google Compute Engine instances in your Google Cloud project. In particular, you want to verify OS system patching events on your virtual machines (VMs). What should you do?

  A. Review the Compute Engine activity logs Select and review the Admin Event logs

  B. Review the Compute Engine activity logs Select and review the System Event logs

  C. Install the Cloud Logging Agent In Cloud Logging review the Compute Engine syslog logs

  D. Install the Cloud Logging Agent In Cloud Logging, review the Compute Engine operation logs

  Correct Answer: A