Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 201:

  Your company has developed a new application that consists of multiple microservices. You want to deploy the application to Google Kubernetes Engine (GKE), and you want to ensure that the cluster can scale as more applications are deployed in the future. You want to avoid manual intervention when each new application is deployed. What should you do?

  A. Deploy the application on GKE, and add a HorizontalPodAutoscaler to the deployment.
  B. Deploy the application on GKE, and add a VerticalPodAutoscaler to the deployment.
  C. Create a GKE cluster with autoscaling enabled on the node pool. Set a minimum and maximum for the size of the node pool.
  D. Create a separate node pool for each application, and deploy each application to its dedicated node pool.
  C. Create a GKE cluster with autoscaling enabled on the node pool. Set a minimum and maximum for the size of the node pool.

  ---

  Explanation

  https://cloud.google.com/kubernetes-engine/docs/how-to/cluster- autoscaler#adding_a_node_pool_with_autoscaling

• Question 202:

  You've created a new "Custom Role" for a specific new job role inside your company. The role consisted of several permissions; some had a status of "Supported" others a status of "Testing." The role has been working for weeks; however, some permissions recently stopped working. What is the most likely cause for this?

  A. The custom role has reached its expiration period.
  B. The latest Google applied updates reset all of the custom roles.
  C. One or more permissions with a status of "Testing" have changed.
  D. Your account has been compromised by hackers.
  C. One or more permissions with a status of "Testing" have changed.

  ---

  Explanation

• Question 203:

  You have been asked to migrate a docker application from datacenter to cloud. Your solution architect has suggested uploading docker images to GCR in one project and running an application in a GKE cluster in a separate project. You

  want to store images in the project img-278322 and run the application in the project prod-278986. You want to tag the image as acme_track_n_trace:v1. You want to follow Google- recommended practices.

  What should you do?

  A. Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace
  B. Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace:v1
  C. Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace
  D. Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace:v1
  B. Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace:v1

  ---

  Explanation

  Run gcloud builds submit tag gcr.io/img-278322/acme_track_n_trace:v1. is the right answer. This command correctly tags the image as acme_track_n_trace:v1 and uploads the image to the img- 278322 project.

  Ref: https://cloud.google.com/sdk/gcloud/reference/builds/submit

• Question 204:

  You are planning to migrate your on-premises data to Google Cloud. The data includes:

  200 TB of video files in SAN storage

  Data warehouse data stored on Amazon Redshift

  20 GB of PNG files stored on an S3 bucket

  You need to load the video files into a Cloud Storage bucket, transfer the data warehouse data into BigQuery, and load the PNG files into a second Cloud Storage bucket. You want to follow Google- recommended practices and avoid writing

  any code for the migration.

  What should you do?

  A. Use gcloud storage for the video files. Dataflow for the data warehouse data, and Storage Transfer Service for the PNG files.
  B. Use Transfer Appliance for the videos. BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files.
  C. Use Storage Transfer Service for the video files, BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files.
  D. Use Cloud Data Fusion for the video files, Dataflow for the data warehouse data, and Storage Transfer Service for the PNG files.
  C. Use Storage Transfer Service for the video files, BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files.

  ---

  Explanation

• Question 205:

  Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.

  

  You want to resolve the issue. What should you do?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

  ---

  Explanation

  Create a secondary index using the following Data Definition.

  If we watch the next video, he talks about a change to monotonically when we insert rows.

  Finally when we talk about read and we have a perdormance issues, we must create a index.

  https://www.youtube.com/watch?v=r6uj0HMNQNQ

• Question 206:

  You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?

  A. Use a custom mode VPC network, configure static routes, and use active/passive routing
  B. Use an automatic mode VPC network, configure static routes, and use active/active routing
  C. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
  D. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing
  C. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing

  ---

  Explanation

  https://cloud.google.com/network-connectivity/docs/vpn/concepts/best- practices

• Question 207:

  Your company is running a critical workload on a single Compute Engine VM instance. Your company's disaster recovery policies require you to back up the entire instance's disk data every day. The backups must be retained for 7 days. You

  must configure a backup solution that complies with your company's security policies and requires minimal setup and configuration.

  What should you do?

  A. Configure the instance to use persistent disk asynchronous replication.
  B. Configure daily scheduled persistent disk snapshots with a retention period of 7 days.
  C. Configure Cloud Scheduler to trigger a Cloud Function each day that creates a new machine image and deletes machine images that are older than 7 days.
  D. Configure a bash script using gsutil to run daily through a cron job. Copy the disk's files to a Cloud Storage bucket with archive storage class and an object lifecycle rule to delete the objects after 7 days.
  B. Configure daily scheduled persistent disk snapshots with a retention period of 7 days.

  ---

  Explanation

• Question 208:

  You are using Data Studio to visualize a table from your data warehouse that is built on top of BigQuery. Data is appended to the data warehouse during the day. At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Data Studio are broken, and you want to analyze the problem. What should you do?

  A. Use the BigQuery interface to review the nightly Job and look for any errors
  B. Review the Error Reporting page in the Cloud Console to find any errors.
  C. In Cloud Logging create a filter for your Data Studio report
  D. Use Cloud Debugger to find out why the data was not refreshed correctly
  A. Use the BigQuery interface to review the nightly Job and look for any errors

  ---

  Explanation

• Question 209:

  Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the data. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?

  A. Upload the data to BigQuery using the bq command line tool.
  B. Upload the data to Cloud Storage using the gsutil command line tool.
  C. Upload the data into Cloud SQL using the import function in the console.
  D. Upload the data into Cloud Spanner using the import function in the console.
  B. Upload the data to Cloud Storage using the gsutil command line tool.

  ---

  Explanation

  "large quantity" : Cloud Storage or BigQuery "files" a file is nothing but an Object

• Question 210:

  During a recent audit of your existing Google Cloud resources, you discovered several users with email addresses outside of your Google Workspace domain. You want to ensure that your resources are only shared with users whose email addresses match your domain. You need to remove any mismatched users, and you want to avoid having to audit your resources to identify mismatched users. What should you do?

  A. Create a Cloud Scheduler task to regularly scan your projects and delete mismatched users.
  B. Create a Cloud Scheduler task to regularly scan your resources and delete mismatched users.
  C. Set an organizational policy constraint to limit identities by domain to automatically remove mismatched users.
  D. Set an organizational policy constraint to limit identities by domain, and then retroactively remove the existing mismatched users
  D. Set an organizational policy constraint to limit identities by domain, and then retroactively remove the existing mismatched users

  ---

  Explanation

  https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints

  This list constraint defines the set of domains that email addresses added to Essential Contacts can have.

  By default, email addresses with any domain can be added to Essential Contacts.

  The allowed/denied list must specify one or more domains of the form @example.com. If this constraint is active and configured with allowed values, only email addresses with a suffix matching one of the entries from the list of allowed

  domains can be added in Essential Contacts.

  This constraint has no effect on updating or removing existing contacts.

  constraints/essentialcontacts.allowedContactDomains