Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 221:

  Your preview application, deployed on a single-zone Google Kubernetes Engine (GKE) cluster in us- , has gained popularity. You are now ready to make the application generally available. You central1 need to deploy the application to production while ensuring high availability and resilience. You also want to follow Google-recommended practices. What should you do?

  A. Use the gcloud container clusters create command with the options --enable-multi- and --enable-autoscaling to create an autoscaling zonal cluster and deploy the networking application to it.
  B. Use the gcloud container clusters create-auto command to create an autopilot cluster and deploy the application to it.
  C. Use the gcloud container clusters update command with the option --region us- to update the cluster and deploy the application to it. central1
  D. Use the gcloud container clusters update command with the option --node-locations to update the cluster and deploy the application to the nodes.us-central1-a,us-central1-b
  B. Use the gcloud container clusters create-auto command to create an autopilot cluster and deploy the application to it.

  ---

  Explanation

  1.High Availability and Resilience:

  Google-recommended practices for high availability in GKE suggest deploying applications in regional clusters. Regional clusters automatically distribute nodes across multiple zones within a region, improving resilience and ensuring that the

  application continues to run even if one zone fails. Autopilot mode provides fully managed infrastructure, ensuring best practices for scalability, security, and resilience are automatically applied.

  2.Autopilot Clusters:

  With the gcloud container clusters create-auto command, you create an Autopilot cluster, which:

  Is regional by default, distributing nodes across zones in the region.

  Handles operational overhead, including scaling, resource optimization, and resilience.

• Question 222:

  Your company's security vulnerability management policy wonts 3 member of the security team to have visibility into vulnerabilities and other OS metadata for a specific Compute Engine instance This Compute Engine instance hosts a critical application in your Goggle Cloud project. You need to implement your company's security vulnerability management policy. What should you do?

  A. Ensure that the Ops Agent Is Installed on the Compute Engine instance. Create a custom metric in the Cloud Monitoring dashboard. Provide the security team member with access to this dashboard.
  B. Ensure that the Ops Agent is installed on tie Compute Engine instance. Provide the security team member roles/configure.inventoryViewer permission.
  C. Ensure that the OS Config agent Is Installed on the Compute Engine instance. Provide the security team member roles/configure.vulnerabilityViewer permission.
  D. Ensure that the OS Config agent is installed on the Compute Engine instance Create a log sink Co a BigQuery dataset. Provide the security team member with access to this dataset.
  C. Ensure that the OS Config agent Is Installed on the Compute Engine instance. Provide the security team member roles/configure.vulnerabilityViewer permission.

  ---

  Explanation

• Question 223:

  Your company would like to store invoices and other financial documents in Google Cloud. You need to identify a Google-managed solution to store this information for your company. You must ensure that the documents are kept for a duration of three years. Your company's analysts need frequent access to invoices from the past six months. After six months, invoices should be archived for audit purposes only. You want to minimize costs and follow Google-recommended practices. What should you do?

  A. Use Cloud Storage with Object Lifecycle Management to change the object storage class to Coldline after six months.
  B. Use Cloud Storage with Object Lifecycle Management to change the object storage class to Standard after six months.
  C. Store your documents on Filestore, and move the documents to Cloud Storage with object storage class set to Coldline after six months.
  D. Store your documents on Filestore, and move the documents to Cloud Storage with object storage class set to Standard after six months.
  A. Use Cloud Storage with Object Lifecycle Management to change the object storage class to Coldline after six months.

  ---

  Explanation

  Cloud Storage for Document Storage:

  Cloud Storage is a Google-managed, cost-effective solution for storing files like invoices and financial documents. It supports multiple storage classes that allow you to optimize for both performance and cost based on how frequently data is

  accessed.

  Lifecycle Management:

  By using Object Lifecycle Management, you can automatically transition objects from one storage class to another based on rules you define. In this scenario:

  First six months: The documents are frequently accessed by analysts, so they should be kept in the Standard storage class, which offers low latency and high availability.

  After six months:

  Since the invoices are only needed for audit purposes, they can be transitioned to a lower-cost storage class. Coldline is designed for data that is accessed less frequently and offers lower storage costs at the expense of higher access costs.

  This transition minimizes costs while ensuring the data is still retained for the required three-year duration.

• Question 224:

  You have two Google Cloud projects: project-a with VPC vpc-a (10.0.0.0/16) and project-b with VPC vpc-b (10.8.0.0/16). Your frontend application resides in vpc-a and the backend API services are deployed in vpc-b. You need to efficiently and cost-effectively enable communication between these Google Cloud projects. You also want to follow Google-recommended practices.

  What should you do?

  A. Configure a Cloud Router in vpc-a and another Cloud Router in vpc-b.
  B. Configure a Cloud Interconnect connection between vpc-a and vpc-b.
  C. Create VPC Network Peering between vpc-a and vpc-b.
  D. Create an OpenVPN connection between vpc-a and vpc-b.
  C. Create VPC Network Peering between vpc-a and vpc-b.

  ---

  Explanation

• Question 225:

  Your company wants to provide engineers with access to explore Google Cloud freely in a sandbox environment. The total budget for testing across your organization is $1,000. You need to ensure that engineers are notified when the budget is about to be reached. You want to automate your solution as much as possible. What should you do?

  A. Create a separate Cloud Billing account for all sandbox projects. Link a credit card with a limit of $1,000 to this billing account. Ensure all sandbox projects are linked to this new Cloud Billing account.
  B. Create a Google Cloud Folder and ensure that all sandbox projects are located under that Folder. Create a Budget Alert for $1,000 and scope it to the Folder. Configure an email alert to billing administrators and users once the budget is 90% reached.
  C. Create an email template reminding people to regularly check their Google Cloud spend. Create a Cloud Function that sends the email to all the project owners. Create a daily job in Cloud Scheduler that triggers the Cloud Function. Deploy this solution for each sandbox.
  D. Configure a billing data export to a BigQuery dataset on the Cloud Billing account. Create a dashboard for all costs related to the sandbox experiments. Share the dashboard with all engineers.
  B. Create a Google Cloud Folder and ensure that all sandbox projects are located under that Folder. Create a Budget Alert for $1,000 and scope it to the Folder. Configure an email alert to billing administrators and users once the budget is 90% reached.

  ---

  Explanation

  Folders in Google Cloud allow you to group related projects for organizational and billing purposes. Budgets and alerts can be scoped to a Folder, so you can centrally track and control spend across all sandbox projects. Budget alerts can be configured to send automatic emails to notify stakeholders (e.g., at 90% usage). This is the recommended and automated approach for managing shared budgets in GCP.

• Question 226:

  You've been asked to add Martha Jones as a member of the "Production Storefront App" project; Using the email address [email protected] with the App Engine Admin role. You browse to the IAM page in the console and attempt to add her, however, you get the following error. "Email addresses and domains must be associated with an active Google Account or Google Apps account." What's the most likely cause for this error?

  A. Martha has already been added as a to this project as a different member.
  B. Martha has been denied access due to a policy on the Organization.
  C. Martha hasn't been added as a user inside the Company's G Suite account.
  D. Martha has an outstanding bill with Google and can't be added until the bill is paid.
  C. Martha hasn't been added as a user inside the Company's G Suite account.

  ---

  Explanation

• Question 227:

  Your engineers need to pass database credentials to a Kubernetes Pod. The YAML they're using looks similar to the following:

  apiVersion: "extensions/v1beta1"

  kind: "Deployment"

  metadata:

  name: "products-service"

  namespace: "default"

  labels:

  app: "products-service"

  spec:

  replicas: 3

  selector:

  matchLabels:

  app: "products-service"

  template:

  metadata:

  labels:

  app: "products-service"

  spec:

  containers:

  -

  name: "products" image: "gcr.io/find-seller-app-dev/products:latest" env:

  -

  name: "database_user" value: "admin"

  -

  name: "database_password" value: "TheB3stP@ssW0rd"

  What is Google's recommended best practice for working with sensitive information inside of Kubernetes?

  A. Store the credentials in a ConfigMap.
  B. Mount the credentials in a volume.
  C. Use an environment variable.
  D. Store the credentials in a Secret.
  D. Store the credentials in a Secret.

  ---

  Explanation

• Question 228:

  Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

  A. 1. Create an IAM entry for each data scientist's user account. 2. Assign the BigQuery jobUser role to the group.
  B. 1. Create an IAM entry for each data scientist's user account. 2. Assign the BigQuery dataViewer user role to the group.
  C. 1. Create a dedicated Google group in Cloud Identity. 2.Add each data scientist's user account to the group. 3.Assign the BigQuery jobUser role to the group.
  D. 1. Create a dedicated Google group in Cloud Identity. 2.Add each data scientist's user account to the group. 3.Assign the BigQuery dataViewer user role to the group.
  C. 1. Create a dedicated Google group in Cloud Identity. 2.Add each data scientist's user account to the group. 3.Assign the BigQuery jobUser role to the group.

  ---

  Explanation

  jobUser allows running queries.

  dataViewer does not allow running queries.

  Read the documentation: https://cloud.google.com/bigquery/docs/access-control#bigquery.jobUser

• Question 229:

  You are planning to migrate the following on-premises data management solutions to Google Cloud:

  1.One MySQL cluster for your main database

  2.Apache Kafka for your event streaming platform

  3.One Cloud SQL for PostgreSQL database for your analytical and reporting needs

  You want to implement Google-recommended solutions for the migration. You need to ensure that the new solutions provide global scalability and require minimal operational and infrastructure management. What should you do?

  A. Migrate from MySQL to Cloud SQL, from Kafka to Pub/Sub, and from Cloud SQL for PostgreSQL to BigQuery.
  B. Migrate from MySQL to Cloud Spanner, from Kafka to Pub/Sub, and from Cloud SQL for PostgreSQL to BigQuery.
  C. Migrate from MySQL to Cloud Spanner, from Kafka to Memorystore, and from Cloud SQL for PostgreSQL to Cloud SQL.
  D. Migrate from MySQL to Cloud SQL, from Kafka to Memorystore, and from Cloud SQL for PostgreSQL to Cloud SQL.
  B. Migrate from MySQL to Cloud Spanner, from Kafka to Pub/Sub, and from Cloud SQL for PostgreSQL to BigQuery.

  ---

  Explanation

• Question 230:

  You assist different engineering teams in deploying their infrastructure on Google Cloud. Your company has defined certain practices required for all workloads. You need to provide the engineering teams with a solution that enables teams to deploy their infrastructure independently without having to know all implementation details of the company's required practices. What should you do?

  A. Configure organization policies to enforce your company's required practices. Ask the teams to provision their infrastructure by using the Google Cloud console.
  B. Create a service account per team, and grant the service account the Project Editor role. Ask the teams to provision their infrastructure through the Google Cloud CLI (gcloud CL), while impersonating their dedicated service account.
  C. Write Terraform modules for each component that are compliant with the company's required practices, and ask teams to implement their infrastructure through these modules.
  D. Provide training for all engineering teams you work with to understand the company's required practices. Allow the engineering teams to provision the infrastructure to best meet their needs.
  C. Write Terraform modules for each component that are compliant with the company's required practices, and ask teams to implement their infrastructure through these modules.

  ---

  Explanation

  Terraform modules allow you to codify and encapsulate company-required practices (e.g., naming conventions, tagging, security settings) in reusable components. Teams can deploy infrastructure independently without needing to understand or implement the underlying compliance logic, improving standardization and security. This approach is scalable, automated, and aligns with Infrastructure as Code (IaC) best practices.