Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 251:

  Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment). What should you do?

  A. Create a new service with the new version of the application. Split traffic between this version and the version that is currently running.
  B. Create a new revision with the new version of the application. Split traffic between this version and the version that is currently running.
  C. Create a new service with the new version of the application. Add HTTP Load Balancer in front of both services.
  D. Create a new revision with the new version of the application. Add HTTP Load Balancer in front of both revisions.
  B. Create a new revision with the new version of the application. Split traffic between this version and the version that is currently running.

  ---

  Explanation

  https://cloud.google.com/kuberun/docs/rollouts-rollbacks-traffic-migration

• Question 252:

  You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?

  A. 1. Create a configuration for each project you need to manage. 2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
  B. 1. Create a configuration for each project you need to manage. 2. Use gcloud init to update the configuration values when you need to work with a non-default project
  C. 1. Use the default configuration for one project you need to manage. 2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
  D. 1. Use the default configuration for one project you need to manage. 2. Use gcloud init to update the configuration values when you need to work with a non-default project.
  A. 1. Create a configuration for each project you need to manage. 2. Activate the appropriate configuration when you work with each of your assigned GCP projects.

  ---

  Explanation

  1. Generate your configurations with "gcloud config configurations create ..." then activate the one you need according to the project you are working on with "gcloud config activate "

• Question 253:

  You are planning to move your company's website and a specific asynchronous background job to Google Cloud. Your website contains only static HTML content. The background job is started through an HTTP endpoint and generates monthly invoices for your customers. Your website needs to be available in multiple geographic locations and requires autoscaling. You want to have no costs when your workloads are not in use and follow recommended practices. What should you do?

  A. Move your website to Google Kubernetes Engine (GKE), and move your background job to Cloud Functions.
  B. Move both your website and background job to Compute Engine.
  C. Move both your website and background job to Cloud Run.
  D. Move your website to Google Kubernetes Engine (GKE), and move your background job to Compute Engine.
  C. Move both your website and background job to Cloud Run.

  ---

  Explanation

  Cloud Run is a fully managed compute platform that automatically scales down to zero when not in use, aligning with your requirement of no costs when idle. It supports HTTP-triggered services, making it ideal for your background job. Your static website can also be served via Cloud Run, although the more cost-effective and optimal option for static content would be Cloud Storage with a CDN -- but Cloud Run still fits the constraints given (autoscaling and multi-region support).

• Question 254:

  Your engineers have asked you to set up a subnet with the largest IP address range possible. Which of the following ranges would work best?

  A. 0.0.0.0/0
  B. 10.0.0.0/32
  C. 192.168.0.0/16
  D. 10.0.0.0/8
  B. 10.0.0.0/32

  ---

  Explanation

• Question 255:

  You are implementing a company-wide standard to control SSH access for your Google Cloud projects. You want to simplify SSH access management to your Compute Engine instances while maintaining audit compliance and eliminating as many manual steps as possible. What should you do?

  A. Configure a service account to add SSH keys for all VMs.
  B. Configure metadata SSH keys to manage sudo access to instances.
  C. Enable OS Login by using an organization policy for each Google Cloud project.
  D. Enable OS Login with two-factor authentication for the domain.
  C. Enable OS Login by using an organization policy for each Google Cloud project.

  ---

  Explanation

  OS Login centralizes SSH access management by using IAM roles instead of manually managed SSH keys. It simplifies and standardizes access across all Compute Engine instances. Applying OS Login via an organization policy ensures consistent enforcement across all projects, reducing manual configuration and enhancing audit compliance. This approach allows fine-grained control, logging, and the use of identity-based access without needing to distribute or rotate SSH keys manually.

• Question 256:

  You're attempting to install the kubectl component on an Ubuntu server, though, you're getting an error. The error indicates that the component manager is disabled. What is the most likely cause for the error?

  A. The Cloud SDK was not installed with root permissions.
  B. The Cloud SDK was installed using apt.
  C. The Cloud SDK is using the wrong configuration.
  D. The Cloud SDK is running inside a Docker container.
  B. The Cloud SDK was installed using apt.

  ---

  Explanation

• Question 257:

  You are responsible for a web application on Compute Engine. You want your support team to be notified automatically if users experience high latency for at least 5 minutes. You need a Google-recommended solution with no development cost. What should you do?

  A. Export Cloud Monitoring metrics to BigQuery and use a Looker Studio dashboard to monitor your web application's latency.
  B. Create an alert policy to send a notification when the HTTP response latency exceeds the specified threshold.
  C. Implement an App Engine service which invokes the Cloud Monitoring API and sends a notification in case of anomalies.
  D. Use the Cloud Monitoring dashboard to observe latency and take the necessary actions when the response latency exceeds the specified threshold.
  B. Create an alert policy to send a notification when the HTTP response latency exceeds the specified threshold.

  ---

  Explanation

  https://cloud.google.com/monitoring/alerts#alerting-example

• Question 258:

  You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?

  A. Create a Cloud Bigtable cluster and use the HBase API
  B. Deploy MongoDB Alias from the Google Cloud Marketplace
  C. Download a MongoDB installation package and run it on Compute Engine instances
  D. Download a MongoDB installation package, and run it on a Managed Instance Group
  B. Deploy MongoDB Alias from the Google Cloud Marketplace

  ---

  Explanation

  https://console.cloud.google.com/marketplace/details/gc-launcher-for- mongodb-atlas/mongodb-atlas

• Question 259:

  Your digital media company stores a large number of video files on-premises. Each video file ranges from 100 MB to 100 GB. You are currently storing 150 TB of video data in your on-premises network, with no room for expansion. You need to migrate all infrequently accessed video files older than one year to Cloud Storage to ensure that on-premises storage remains available for new files. You must also minimize costs and control bandwidth usage. What should you do?

  A. Use Storage Transfer Service to move the data from the selected on-premises file storage systems to a Cloud Storage bucket.
  B. Use Transfer Appliance to request an appliance. Load the data locally, and ship the appliance back to Google for ingestion into Cloud Storage.
  C. Set up a Cloud Interconnect connection between the on-premises network and Google Cloud. Establish a private endpoint for Filestore access. Transfer the data from the existing Network File System (NFS) to Filestore.
  D. Create a Cloud Storage bucket. Establish an Identity and Access Management (IAM) role with write permissions to the bucket. Use the gsutil tool to directly copy files over the network to Cloud Storage.
  B. Use Transfer Appliance to request an appliance. Load the data locally, and ship the appliance back to Google for ingestion into Cloud Storage.

  ---

  Explanation

  Transfer Appliance is the ideal Google Cloud solution for large-scale, infrequently accessed data migrations (like 150 TB of video files), especially when bandwidth is limited or must be controlled. It allows you to load data locally and physically ship the appliance back to Google, avoiding long transfer times and high bandwidth usage. This minimizes costs, prevents congestion on your network, and suits bulk archival migrations perfectly.

• Question 260:

  You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset. What should you do?

  A. Create a Service Account in your own project, and grant this Service Account access to BigQuery in your project.
  B. Create a Service Account in your own project, and ask the partner to grant this Service Account access to BigQuery in their project.
  C. Ask the partner to create a Service Account in their project, and have them give the Service Account access to BigQuery in their project.
  D. Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project.
  D. Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project.

  ---

  Explanation

  https://gtseres.medium.com/using-service-accounts-across-projects-in-gcp- cf9473fef8f0#:~:text=Go%20to%20the%20destination%20project,Voila!