Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 191:

  Your customer wants you to create a secure website with autoscaling based on the compute instance CPU load. You want to enhance performance by storing static content in Cloud Storage. Which resources are needed to distribute the user traffic?

  A. An internal HTTP(S) load balancer together with Identity-Aware Proxy to allow only HTTPS traffic.
  B. An external HTTP(S) load balancer to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend. Install the HTTPS certificates on the instance.
  C. An external HTTP(S) load balancer with a managed SSL certificate to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend.
  D. An external network load balancer pointing to the backend instances to distribute the load evenly. The web servers will forward the request to the Cloud Storage as needed.
  C. An external HTTP(S) load balancer with a managed SSL certificate to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend.

  ---

  Explanation

  An external HTTP(S) load balancer is a Google-recommended solution for distributing web traffic across multiple regions and zones, and providing high availability, scalability, and security for web applications. It supports both IPv4 and IPv6 addresses, and can handle SSL/TLS termination and encryption. It also integrates with Cloud CDN, Cloud Armor, and Cloud Identity-Aware Proxy for enhanced performance and protection. A managed instance group (MIG) can be used as a backend service for the HTTP(S) load balancer, and can automatically scale the number of VM instances based on the CPU load. A Cloud Storage bucket can also be used as a backend service for the HTTP(S) load balancer, and can serve static content such as images, videos, or HTML files. A URL map can be used to route requests to different backend services based on the path or host of the request. For example, a URL map can send requests for / static/* to the Cloud Storage bucket, and requests for /dynamic/* to the MIG. A managed SSL certificate can be used to secure the connection between the clients and the load balancer, and can be automatically provisioned and renewed by Google. A is incorrect because an internal HTTP(S) load balancer is only visible within a VPC network, and not to the public internet. It is used for internal applications that need to communicate with other internal services. Identity-Aware Proxy is a service that provides secure access to web applications without using a VPN. It is not a load balancer, and it does not distribute user traffic. B is incorrect because installing HTTPS certificates on the instance is not necessary, as the HTTP(S) load balancer can handle SSL/TLS termination and encryption. It is also more complex and less secure to manage the certificates on the instance level, as they need to be updated and synchronized across multiple instances. D is incorrect because an external network load balancer is a TCP/UDP load balancer that operates at the network layer. It is not suitable for web applications that use HTTP(S) protocols, as it does not support SSL/TLS termination and encryption, URL maps, or Cloud Storage backends. It is also less efficient and scalable to forward the requests to the Cloud Storage from the web servers, as it adds an extra hop and latency.

  References: HTTP(S) Load Balancing documentation Setting up HTTP(S) Load Balancing with Cloud Storage Creating and using SSL certificates Choosing a load balancer

• Question 192:

  Your managed instance group raised an alert stating that new instance creation has failed to create new instances. You need to maintain the number of running instances specified by the template to be able to process expected application traffic. What should you do?

  A. Create an instance template that contains valid syntax which will be used by the instance group. Delete any persistent disks with the same name as instance names.
  B. Create an instance template that contains valid syntax that will be used by the instance group. Verify that the instance name and persistent disk name values are not the same in the template.
  C. Verify that the instance template being used by the instance group contains valid syntax. Delete any persistent disks with the same name as instance names. Set the disks.autoDelete property to true in the instance template.
  D. Delete the current instance template and replace it with a new instance template. Verify that the instance name and persistent disk name values are not the same in the template. Set the disks.autoDelete property to true in the instance template.
  A. Create an instance template that contains valid syntax which will be used by the instance group. Delete any persistent disks with the same name as instance names.

  ---

  Explanation

  Really tricky question. Ideal scenario would be

  1. create new template, while creating ensure that in the new template disks.autoDelete=true, 3. delete existing persistent disks, 4. make rolling update ... In order to switch to new template we need "Rolling update". Unfortunately, it is not mentioned.

  With current options C - not correct, we cannot update existing template D - not correct, we cannot delete existing template when it is in use (just checked in GCP) (We need rolling update) B - will not solve our problem without Rolling update A - This is the only option (I know that it can be temporary) that will work without Rolling update according to https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-migs

• Question 193:

  You are building a multi-player gaming application that will store game information in a database. As the popularity of the application increases, you are concerned about delivering consistent performance. You need to ensure an optimal gaming performance for global users, without increasing the management complexity. What should you do?

  A. Use Cloud SQL database with cross-region replication to store game statistics in the EU, US, and APAC regions.
  B. Use Cloud Spanner to store user data mapped to the game statistics.
  C. Use BigQuery to store game statistics with a Redis on Memorystore instance in the front to provide global consistency.
  D. Store game statistics in a Bigtable database partitioned by username.
  B. Use Cloud Spanner to store user data mapped to the game statistics.

  ---

  Explanation

  Among the options provided, the better answer for ensuring optimal gaming performance for global users without increasing management complexity would be option B

  Cloud Spanner is a globally distributed, horizontally scalable database service provided by Google Cloud Platform. It offers strong consistency guarantees, high availability, and automatic scaling.

  It offers the necessary features to ensure optimal gaming performance, global scalability, strong consistency, and automatic scaling, making it a suitable choice for storing user data mapped to game statistics.

• Question 194:

  The sales team has a project named Sales Data Digest that has the ID acme-data-digest. You need to set up similar Google Cloud resources for the marketing team but their resources must be organized independently of the sales team. What should you do?

  A. Grant the Project Editor role to the Marketing team for acme-data-digest.
  B. Create a Project Lien on acme-data-digest and then grant the Project Editor role to the Marketing team.
  C. Create another project with the ID acme-marketing-data-digest for the Marketing team and deploy the resources there.
  D. Create a new project named Marketing Data Digest and use the ID acme-data-digest. Grant the Project Editor role to the Marketing team.
  C. Create another project with the ID acme-marketing-data-digest for the Marketing team and deploy the resources there.

  ---

  Explanation

  Answer should be C because the resources for the marketing team should be independent from the Sales team. Resources are tied and separated by projects.

• Question 195:

  You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

  A. Enable the Node Auto-Repair feature for your GKE cluster.
  B. Enable the Node Auto-Upgrades feature for your GKE cluster.
  C. Select the latest available cluster version for your GKE cluster.
  D. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.
  B. Enable the Node Auto-Upgrades feature for your GKE cluster.

  ---

  Explanation

  "Creating or upgrading a cluster by specifying the version as does not provide automatic upgrades. Enable automatic node upgrades to ensure that the nodes in your cluster up to date with the latest stable version." --source: https:// cloud.google.com/kubernetes-engine/versioning-and-upgrades

• Question 196:

  You are working for a hospital that stores its medical images in an on-premises data room. The hospital wants to use Cloud Storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to Cloud Storage. You need to design and implement a solution. What should you do?

  A. Create a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub topic.
  B. Create a script that uses the gcloud storage command to synchronize the on-premises storage with Cloud Storage, Schedule the script as a cron job.
  C. Create a Pub/Sub topic, and create a Cloud Function connected to the topic that writes data to Cloud Storage. Create an application that sends all medical images to the Pub/Sub topic.
  D. In the Google Cloud console, go to Cloud Storage. Upload the relevant images to the appropriate bucket.
  B. Create a script that uses the gcloud storage command to synchronize the on-premises storage with Cloud Storage, Schedule the script as a cron job.

  ---

  Explanation

• Question 197:

  You have developed a containerized web application that will serve internal colleagues during business hours. You want to ensure that no costs are incurred outside of the hours the application is used. You have just created a new Google Cloud project and want to deploy the application. What should you do?

  A. Deploy the container on Cloud Run for Anthos, and set the minimum number of instances to zero.
  B. Deploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero.
  C. Deploy the container on App Engine flexible environment with autoscaling, and set the value min_instances to zero in the app.yaml.
  D. Deploy the container on App Engine flexible environment with manual scaling, and set the value instances to zero in the app.yaml.
  B. Deploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero.

  ---

  Explanation

  https://cloud.google.com/kuberun/docs/architecture- overview#components_in_the_default_installation

• Question 198:

  You have been asked to set up the billing configuration for a new Google Cloud customer. Your customer wants to group resources that share common IAM policies. What should you do?

  A. Use labels to group resources that share common IAM policies
  B. Use folders to group resources that share common IAM policies
  C. Set up a proper billing account structure to group IAM policies
  D. Set up a proper project naming structure to group IAM policies
  B. Use folders to group resources that share common IAM policies

  ---

  Explanation

  Folders are nodes in the Cloud Platform Resource Hierarchy. A folder can contain projects, other folders, or a combination of both. Organizations can use folders to group projects under the organization node in a hierarchy. For example, your organization might contain multiple departments, each with its own set of Google Cloud resources. Folders allow you to group these resources on a per-department basis. Folders are used to group resources that share common IAM policies. While a folder can contain multiple folders or resources, a given folder or resource can have exactly one parent. https://cloud.google.com/resource-manager/docs/creating-managing-folders

• Question 199:

  Your developers are trying to select the best compute service to run a static website. They have a dozen HTML pages, a few Javascript files, and some CSS. They need the site to be highly available for the few weeks it is running. They also

  have a limited budget.

  What is the best service to use to run the site?

  A. Kubernetes Engine
  B. Compute Engine
  C. Cloud Storage
  D. App Engine
  C. Cloud Storage

  ---

  Explanation

• Question 200:

  You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices. What should you do?

  A. Add the auditors group to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
  B. Add the auditors group to two new custom IAM roles.
  C. Add the auditor user accounts to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
  D. Add the auditor user accounts to two new custom IAM roles.
  C. Add the auditor user accounts to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.

  ---

  Explanation

  https://cloud.google.com/iam/docs/roles-audit-logging

  As per google best practices it is recommended to use predefined roles and create groups to control access to multiple users with same responsibility