Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 211:

  Your company is running a three-tier web application on virtual machines that use a MySQL database. You need to create an estimated total cost of cloud infrastructure to run this application on Google Cloud instances and Cloud SQL. What should you do?

  A. Create a Google spreadsheet with multiple Google Cloud resource combinations. On a separate sheet, import the current Google Cloud prices and use these prices for the calculations within formulas.
  B. Use the Google Cloud Pricing Calculator and select the Cloud Operations template to define your web application with as much detail as possible.
  C. Implement a similar architecture on Google Cloud, and run a reasonable load test on a smaller scale. Check the billing information, and calculate the estimated costs based on the real load your system usually handles.
  D. Use the Google Cloud Pricing Calculator to determine the cost of every Google Cloud resource you expect to use. Use similar size instances for the web server, and use your current on-premises machines as a comparison for Cloud SQL.
  D. Use the Google Cloud Pricing Calculator to determine the cost of every Google Cloud resource you expect to use. Use similar size instances for the web server, and use your current on-premises machines as a comparison for Cloud SQL.

  ---

  Explanation

  Google Cloud Pricing Calculator, is the recommended approach for creating an estimated total cost of cloud infrastructure. By selecting the relevant Google Cloud resources (such as instances for web servers and Cloud SQL for the database), and specifying similar sizes and configurations, you can obtain a more accurate estimation of the costs.

• Question 212:

  Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the production services in order to perform their job. You want to prevent Google Cloud product changes from broadening their permissions in the future. You want to follow Google-recommended practices. What should you do?

  A. Grant all members of the DevOps team the role of Project Editor on the organization level.
  B. Grant all members of the DevOps team the role of Project Editor on the production project.
  C. Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project.
  D. Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the organization level.
  C. Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project.

  ---

  Explanation

  Understanding IAM custom roles

  Key Point: Custom roles enable you to enforce the principle of least privilege, ensuring that the user and service accounts in your organization have only the permissions essential to performing their intended functions.

  Basic concepts

  Custom roles are user-defined, and allow you to bundle one or more supported permissions to meet your specific needs. Custom roles are not maintained by Google; when new permissions, features, or services are added to Google Cloud,

  your custom roles will not be updated automatically.

  When you create a custom role, you must choose an organization or project to create it in. You can then grant the custom role on the organization or project, as well as any resources within that organization or project.

  https://cloud.google.com/iam/docs/understanding-custom-roles#basic_concepts

• Question 213:

  You have 3 Cloud Storage buckets that all store sensitive data.

  Which grantees should you audit to ensure that these buckets are not public?

  A. allUsers
  B. allAuthenticatedUsers
  C. publicUsers
  D. allUsers and allAuthenticatedUsers
  D. allUsers and allAuthenticatedUsers

  ---

  Explanation

• Question 214:

  You are planning to deploy an application to Google Cloud. Your application processes asynchronous events from Google services and must be accessible from the public Internet. You need to identify how to deploy your application. You want to follow a standardized process while minimizing development costs. You also want to have no costs when your workloads are not in use. What should you do?

  A. Deploy your code to GKE. Use Pub/Sub for event delivery.
  B. Deploy your code to Compute Engine. Use Pub/Sub for event delivery.
  C. Deploy your code to GKE. Use Eventarc for event delivery.
  D. Deploy your code to Cloud Run. Use Eventarc for event delivery.
  D. Deploy your code to Cloud Run. Use Eventarc for event delivery.

  ---

  Explanation

  Deploying your code to Cloud Run and using Eventarc for event delivery is the most appropriate solution. Cloud Run is serverless, meaning you only incur costs when your application is running, minimizing development costs and operational overhead. Eventarc is a fully managed event delivery service that integrates seamlessly with Google Cloud services, making it ideal for processing asynchronous events with no additional configuration needed. This approach aligns with Google-recommended practices for serverless, event-driven architectures.

• Question 215:

  You've been asked to help onboard a new member of the big-data team. They need full access to BigQuery. Which type of role would be the most efficient to set up while following the principle of least privilege?

  A. Primitive Role
  B. Custom Role
  C. Managed Role
  D. Predefined Role
  D. Predefined Role

  ---

  Explanation

• Question 216:

  Your company is moving from an on-premises environment to Google Cloud Platform (GCP). You have multiple development teams that use Cassandra environments as backend databases. They all need a development environment that is isolated from other Cassandra instances. You want to move to GCP quickly and with minimal support effort. What should you do?

  A. 1. Build an instruction guide to install Cassandra on GCP. 2. Make the instruction guide accessible to your developers.
  B. 1. Advise your developers to go to Cloud Marketplace. 2. Ask the developers to launch a Cassandra image for their development work.
  C. 1. Build a Cassandra Compute Engine instance and take a snapshot of it. 2. Use the snapshot to create instances for your developers.
  D. 1. Build a Cassandra Compute Engine instance and take a snapshot of it. 2.Upload the snapshot to Cloud Storage and make it accessible to your developers. 3.Build instructions to create a Compute Engine instance from the snapshot so that developers can do it themselves.
  B. 1. Advise your developers to go to Cloud Marketplace. 2. Ask the developers to launch a Cassandra image for their development work.

  ---

  Explanation

  You can deploy Cassandra as a Service, called Astra, on the Google Cloud Marketplace. Not only do you get a unified bill for all GCP services, your Developers can now create Cassandra clusters on Google Cloud in minutes and build applications with Cassandra as a database as a service without the operational overhead of managing Cassandra

• Question 217:

  You are building a pipeline to process time-series data. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?

  

  A. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
  B. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
  C. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
  D. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery
  D. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery

  ---

  Explanation

  https://cloud.google.com/solutions/correlating-time-series-dataflow

  whenever IOT is present go with DataStore

• Question 218:

  You host a static website on Cloud Storage. Recently, you began to include links to PDF files on this site. Currently, when users click on the links to these PDF files, their browsers prompt them to save the file onto their local system. Instead, you want the clicked PDF files to be displayed within the browser window directly, without prompting the user to save the file locally. What should you do?

  A. Enable Cloud CDN on the website frontend.
  B. Enable `Share publicly' on the PDF file objects.
  C. Set Content-Type metadata to application/pdf on the PDF file objects.
  D. Add a label to the storage bucket with a key of Content-Type and value of application/pdf.
  C. Set Content-Type metadata to application/pdf on the PDF file objects.

  ---

  Explanation

  To display PDF files directly within the browser window on a website hosted on Cloud Storage, you can follow these steps:

  In the Google Cloud Console, navigate to the Cloud Storage section and select the "Buckets" page.

  Select the bucket that contains the static website and the PDF files.

  From the "Actions" menu, select "Edit bucket" and then go to the "Website" tab.

  In the "Website Configuration" section, select the "Serve objects with this content type" option and enter "application/pdf" in the text field. This will cause PDF files to be served with the correct content type.

  Save the changes to the bucket configuration.

  After completing these steps, the PDF files on your website will be served with the correct content type and will be displayed directly within the browser window when clicked, without prompting the user to save the file locally.

• Question 219:

  You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?

  A. Enable the Cloud Spanner API.
  B. Configure your Cloud Spanner instance to be multi-regional.
  C. Create a new VPC network with subnetworks in all desired regions.
  D. Grant yourself the IAM role of Cloud Spanner Admin.
  A. Enable the Cloud Spanner API.

  ---

  Explanation

  https://cloud.google.com/spanner/docs/instances

• Question 220:

  You are planning to migrate a database and a backend application to a Standard Google Kubernetes Engine (GKE) cluster. You need to prevent data loss and make sure there are enough nodes available for your backend application based

  on the demands of your workloads. You want to follow Google- recommended practices and minimize the amount of manual work required.

  What should you do?

  A. Run your database as a StatefulSet. Configure cluster autoscaling to handle changes in the demands of your workloads.
  B. Run your database as a single Pod. Run the resize command when you notice changes in the demands of your workloads.
  C. Run your database as a DaemonSet. Run the resize command when you notice changes in the demands of your workloads.
  D. Run your database as a Deployment. Configure cluster autoscaling to handle changes in the demands of your workloads.
  A. Run your database as a StatefulSet. Configure cluster autoscaling to handle changes in the demands of your workloads.

  ---

  Explanation

  StatefulSet for the Database:

  Databases are stateful applications that require persistent storage and stable network identities. A StatefulSet is designed specifically for stateful applications, as it provides unique, stable network identifiers and persistent storage via

  PersistentVolumeClaims (PVCs). This setup helps ensure that data is not lost during pod rescheduling or node failures.

  Cluster Autoscaling for the Backend Application:

  Configuring cluster autoscaling allows the GKE cluster to automatically add or remove nodes based on the demands of your workloads. This ensures that the backend application has sufficient compute resources available to handle

  fluctuating workloads, while minimizing the need for manual intervention.