Google Google Certifications ASSOCIATE-CLOUD-ENGINEER Questions & Answers

• Question 141:

  You created a Kubernetes deployment by running kubectl run nginx image=nginx replicas=1. After a few days, you decided you no longer want this deployment. You identified the pod and deleted it by running kubectl delete pod. You noticed the pod got recreated.

  $ kubectl get pods NAME READY STATUS RESTARTS AGE nginx-84748895c4-nqqmt 1/1 Running 0 9m41s $ kubectl delete pod nginx-84748895c4-nqqmt pod nginx-84748895c4-nqqmt deleted $ kubectl get pods NAME READY STATUS RESTARTS AGE nginx-84748895c4-k6bzl 1/1 Running 0 25s

  What should you do to delete the deployment and avoid pod getting recreated?

  A. kubectl delete deployment nginx

  B. kubectl delete 璬eployment=nginx

  C. kubectl delete pod nginx-84748895c4-k6bzl 璶o-restart 2

  D. kubectl delete inginx

  Correct Answer: A

  Explanation: This command correctly deletes the deployment. Pods are managed by kubernetes workloads (deployments). When a pod is deleted, the deployment detects the pod is unavailable and brings up another pod to maintain the replica count. The only way to delete the workload is by deleting the deployment itself using the kubectl delete deployment command. $ kubectl delete deployment nginx deployment.apps nginx deleted Ref: https://kubernetes.io/docs/reference/kubectl/cheatsheet/#deleting-resources

• Question 142:

  Your organization uses Active Directory (AD) to manage user identities. Each user uses this identity for federated access to various on-premises systems. Your security team has adopted a policy that requires users to log into Google Cloud with their AD identity instead of their own login. You want to follow the Google-recommended practices to implement this policy. What should you do?

  A. Sync Identities with Cloud Directory Sync, and then enable SAML for single sign-on

  B. Sync Identities in the Google Admin console, and then enable Oauth for single sign-on

  C. Sync identities with 3rd party LDAP sync, and then copy passwords to allow simplified login with (he same credentials

  D. Sync identities with Cloud Directory Sync, and then copy passwords to allow simplified login with the same credentials.

  Correct Answer: A

• Question 143:

  You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?

  A. Create a Cloud Bigtable cluster and use the HBase API

  B. Deploy MongoDB Alias from the Google Cloud Marketplace

  C. Download a MongoDB installation package and run it on Compute Engine instances

  D. Download a MongoDB installation package, and run it on a Managed Instance Group

  Correct Answer: B

  https://console.cloud.google.com/marketplace/details/gc-launcher-for- mongodb-atlas/mongodb-atlas

• Question 144:

  You need to immediately change the storage class of an existing Google Cloud bucket. You need to reduce service cost for infrequently accessed files stored in that bucket and for all files that will be added to that bucket in the future. What should you do?

  A. Use the gsutil to rewrite the storage class for the bucket Change the default storage class for the bucket

  B. Use the gsutil to rewrite the storage class for the bucket Set up Object Lifecycle management on the bucket

  C. Create a new bucket and change the default storage class for the bucket Set up Object Lifecycle management on lite bucket

  D. Create a new bucket and change the default storage class for the bucket import the files from the previous bucket into the new bucket

  Correct Answer: B

• Question 145:

  You have been asked to set up the billing configuration for a new Google Cloud customer. Your customer wants to group resources that share common IAM policies. What should you do?

  A. Use labels to group resources that share common IAM policies

  B. Use folders to group resources that share common IAM policies

  C. Set up a proper billing account structure to group IAM policies

  D. Set up a proper project naming structure to group IAM policies

  Correct Answer: B

  Folders are nodes in the Cloud Platform Resource Hierarchy. A folder can contain projects, other folders, or a combination of both. Organizations can use folders to group projects under the organization node in a hierarchy. For example, your organization might contain multiple departments, each with its own set of Google Cloud resources. Folders allow you to group these resources on a per-department basis. Folders are used to group resources that share common IAM policies. While a folder can contain multiple folders or resources, a given folder or resource can have exactly one parent. https://cloud.google.com/resource-manager/docs/creating-managing-folders

• Question 146:

  You manage three Google Cloud projects with the Cloud Monitoring API enabled. You want to follow Google-recommended practices to visualize CPU and network metrics for all three projects together. What should you do?

  A. 1. Create a Cloud Monitoring Dashboard

  2.

  Collect metrics and publish them into the Pub/Sub topics

  3.

  Add CPU and network Charts (or each of (he three projects

  B. 1. Create a Cloud Monitoring Dashboard.

  2.

  Select the CPU and Network metrics from the three projects.

  3.

  Add CPU and network Charts lot each of the three protects.

  C. 1 Create a Service Account and apply roles/viewer on the three projects

  2.

  Collect metrics and publish them lo the Cloud Monitoring API

  3.

  Add CPU and network Charts for each of the three projects.

  D. 1. Create a fourth Google Cloud project 2 Create a Cloud Workspace from the fourth project and add the other three projects

  Correct Answer: B

• Question 147:

  You are assisting a new Google Cloud user who just installed the Google Cloud SDK on their VM. The server needs access to Cloud Storage. The user wants your help to create a new storage bucket. You need to make this change in multiple environments. What should you do?

  A. Use a Deployment Manager script to automate creating storage buckets in an appropriate region

  B. Use a local SSD to improve performance of the VM for the targeted workload

  C. Use the gsutii command to create a storage bucket in the same region as the VM

  D. Use a Persistent Disk SSD in the same zone as the VM to improve performance of the VM

  Correct Answer: A

• Question 148:

  You are managing a Data Warehouse on BigQuery. An external auditor will review your company's processes, and multiple external consultants will need view access to the data. You need to provide them with view access while following

  Google-recommended practices.

  What should you do?

  A. Grant each individual external consultant the role of BigQuery Editor

  B. Grant each individual external consultant the role of BigQuery Viewer

  C. Create a Google Group that contains the consultants and grant the group the role of BigQuery Editor

  D. Create a Google Group that contains the consultants, and grant the group the role of BigQuery Viewer

  Correct Answer: D

• Question 149:

  You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?

  A. Deploy me application on App Engine For each update, create a new version of the same service Configure traffic splitting to send a small percentage of traffic to the new version

  B. Deploy the application on App Engine For each update, create a new service Configure traffic splitting to send a small percentage of traffic to the new service.

  C. Deploy the application on Kubernetes Engine For a new release, update the deployment to use the new version

  D. Deploy the application on Kubernetes Engine For a now release, create a new deployment for the new version Update the service e to use the now deployment.

  Correct Answer: A

  Keyword, Version, traffic splitting, App Engine supports traffic splitting for versions before releasing.

• Question 150:

  Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?

  A. Assign the appropriate permissions, and then use Cloud Monitoring to review metrics

  B. Use the export logs API to provide the Admin Activity Audit Logs in the format they want

  C. Turn on Data Access Logs for the buckets they want to audit, and Then build a query in the log viewer that filters on Cloud Storage

  D. Assign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs

  Correct Answer: C

  Types of audit logs Cloud Audit Logs provides the following audit logs for each Cloud project, folder, and organization: Admin Activity audit logs Data Access audit logs System Event audit logs Policy Denied audit logs ***Data Access audit logs contain API calls that read the configuration or metadata of resources, as well as user-driven API calls that create, modify, or read user-provided resource data. https://cloud.google.com/logging/docs/audit#types https://cloud.google.com/ logging/docs/audit#data-access Cloud Storage: When Cloud Storage usage logs are enabled, Cloud Storage writes usage data to the Cloud Storage bucket, which generates Data Access audit logs for the bucket. The generated Data Access audit log has its caller identity redacted.