Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 21:

  You have a VM instance running in a VPC with single-stack subnets. You need to ensure that the VM instance has a fixed IP address so that other services hosted in the same VPC can communicate with the VM. You want to follow Google-recommended practices while minimizing cost.

  What should you do?

  A. Reserve a new static external IP address and assign the new IP address to the VM.
  B. Promote the existing IP address of the VM to become a static external IP address.
  C. Reserve a new static external IPv6 address and assign the new IP address to the VM.
  D. Promote the existing IP address of the VM to become a static internal IP address.
  B. Promote the existing IP address of the VM to become a static external IP address.

  ---

  Explanation

• Question 22:

  Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?

  A. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
  B. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
  C. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
  D. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
  B. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.

  ---

  Explanation

  Hundreds of projects means many logs. Bigquery is the good Storage.

• Question 23:

  Your company is using Google Workspace to manage employee accounts. Anticipated growth will increase the number of personnel from 100 employees to 1,000 employees within 2 years. Most employees will need access to your company's Google Cloud account. The systems and processes will need to support 10x growth without performance degradation, unnecessary complexity, or security issues. What should you do?

  A. Migrate the users to Active Directory. Connect the Human Resources system to Active Directory. Turn on Google Cloud Directory Sync (GCDS) for Cloud Identity. Turn on Identity Federation from Cloud Identity to Active Directory.
  B. Organize the users in Cloud Identity into groups. Enforce multi-factor authentication in Cloud Identity.
  C. Turn on identity federation between Cloud Identity and Google Workspace. Enforce multi-factor authentication for domain wide delegation.
  D. Use a third-party identity provider service through federation. Synchronize the users from Google Workplace to the third-party provider in real time.
  B. Organize the users in Cloud Identity into groups. Enforce multi-factor authentication in Cloud Identity.

  ---

  Explanation

  https://cloud.google.com/architecture/identity/best-practices-for-planning

• Question 24:

  You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

  A. Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
  B. Use Cloud Functions and configure the bucket as a trigger resource.
  C. Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
  D. Use Dataflow as a batch job, and configure the bucket as a data source.
  B. Use Cloud Functions and configure the bucket as a trigger resource.

  ---

  Explanation

  Google Cloud Storage Triggers

  Cloud Functions can respond to change notifications from Google Cloud Storage. These notifications can be configured to trigger in response to various events inside a bucket, such as object creation, deletion, archiving, and metadata

  updates.

  Note: Cloud Functions can only be triggered by Cloud Storage buckets within the same Google Cloud Platform (GCP) project.

  Event Types

  Cloud Storage events used by Cloud Functions are based on Cloud Pub/Sub Notifications for Google Cloud Storage and can be configured similarly.

  Supported Trigger Type Values:

  google.storage.object.finalize - Triggered when a new object is created or an existing object is overwritten, generating a new version.

  google.storage.object.delete - Triggered when an object is permanently deleted from the bucket.

  google.storage.object.archive - Triggered when an object is archived due to lifecycle policies.

  google.storage.object.metadataUpdate - Triggered when an object's metadata is updated.

  Object Finalize

  Trigger Type Value: google.storage.object.finalize

  This event occurs when:

  A new object is created in the bucket.

  An existing object is overwritten, generating a new version of the object.

  For more details, refer to the official documentation:

  https://cloud.google.com/functions/docs/calling/storage#event_types

• Question 25:

  You are about to deploy a new Enterprise Resource Planning (ERP) system on Google Cloud. The application holds the full database in-memory for fast data access, and you need to configure the most appropriate resources on Google Cloud for this application. What should you do?

  A. Provision preemptible Compute Engine instances.
  B. Provision Compute Engine instances with GPUs attached.
  C. Provision Compute Engine instances with local SSDs attached.
  D. Provision Compute Engine instances with M1 machine type.
  D. Provision Compute Engine instances with M1 machine type.

  ---

  Explanation

  M1 machine series Medium in-memory databases such as SAP HANA Tasks that require intensive use of memory with higher memory-to-vCPU ratios than the general- purpose high-memory machine types. In-memory databases and in-

  memory analytics, business warehousing (BW) workloads, genomics analysis, SQL analysis services.

  Microsoft SQL Server and similar databases.

  https://cloud.google.com/compute/docs/machine-types https://cloud.google.com/compute/docs/machine-types#:~:text=databases%20such%20as-,SAP%20HANA,-In%2Dmemory%20databases https://www.sap.com/india/products/

  hana.html#:~:text=is%20SAP%20HANA-,in%2Dmemory,-database%3F

  https://cloud.google.com/compute/docs/disks/local-ssd

• Question 26:

  You need to extract text from audio files by using the Speech-to-Text API. The audio files are pushed to a Cloud Storage bucket. You need to implement a fully managed, serverless compute solution that requires authentication and aligns with Google-recommended practices. You want to automate the call to the API by submitting each file to the API as the audio file arrives in the bucket. What should you do?

  A. Run a Kubernetes job to scan the bucket regularly for incoming files, and call the Speech-to-Text API for each unprocessed file.
  B. Create an App Engine standard environment triggered by Cloud Storage bucket events to submit the file URI to the Google Speech-to-Text API.
  C. Run a Python script by using a Linux cron job in Compute Engine to scan the bucket regularly for incoming files, and call the Speech-to-Text API for each unprocessed file.
  D. Create a Cloud Function triggered by Cloud Storage bucket events to submit the file URI to the Google Speech-to-Text API.
  B. Create an App Engine standard environment triggered by Cloud Storage bucket events to submit the file URI to the Google Speech-to-Text API.

  ---

  Explanation

• Question 27:

  Your team has some new functionality that they want to roll out slowly so they can monitor for errors. The change contains some significant changes to the user interface. You've chosen to use traffic splitting to perform a canary deployment. You're going to start by rolling out the code to 15% of your users. How should you go about setting up traffic splitting?

  A. Deploy the new version. Split the traffic using an IP or cookie based distribution.
  B. Use the gcloud app deploy command with the distribution flag to deploy and split the traffic in one command.
  C. Deploy the new version using the no-promote flag. Split the traffic using a random distribution.
  D. Deploy the new version using the no-promote flag. Split the traffic using distribution.
  D. Deploy the new version using the no-promote flag. Split the traffic using distribution.

  ---

  Explanation

• Question 28:

  You have created an application that is packaged into a Docker image. You want to deploy the Docker image as a workload on Google Kubernetes Engine. What should you do?

  A. Upload the image to Cloud Storage and create a Kubernetes Service referencing the image.
  B. Upload the image to Cloud Storage and create a Kubernetes Deployment referencing the image.
  C. Upload the image to Artifact Registry and create a Kubernetes Service referencing the image.
  D. Upload the image to Artifact Registry and create a Kubernetes Deployment referencing the image.
  D. Upload the image to Artifact Registry and create a Kubernetes Deployment referencing the image.

  ---

  Explanation

  Artifact Registry is a fully managed container registry that integrates seamlessly with Google Kubernetes Engine and other Google Cloud services. By uploading the Docker image to Artifact Registry, you can create a Kubernetes Deployment that references the image stored in Artifact Registry. This ensures that Kubernetes can pull the image from a trusted and managed source, while the Deployment manages the deployment and scaling of the application pods based on the image.

• Question 29:

  Your projects incurred more costs than you expected last month. Your research reveals that a development GKE container emitted a huge number of logs, which resulted in higher costs. You want to disable the logs quickly using the minimum number of steps. What should you do?

  A. 1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE container resource.
  B. 1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE Cluster Operations resource.
  C. 1. Go to the GKE console, and delete existing clusters. 2.Recreate a new cluster. 3.Clear the option to enable legacy Stackdriver Logging.
  D. 1. Go to the GKE console, and delete existing clusters. 2.Recreate a new cluster. 3.Clear the option to enable legacy Stackdriver Monitoring.
  A. 1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE container resource.

  ---

  Explanation

  https://cloud.google.com/logging/docs/api/v2/resource-list

  GKE Containers have more log than GKE Cluster Operations:

  .-GKE Containe:

  cluster_name: An immutable name for the cluster the container is running in.

  namespace_id: Immutable ID of the cluster namespace the container is running in.

  instance_id: Immutable ID of the GCE instance the container is running in.

  pod_id: Immutable ID of the pod the container is running in.

  container_name: Immutable name of the container.

  zone: The GCE zone in which the instance is running.

  VS

  .-GKE Cluster Operations

  project_id: The identifier of the GCP project associated with this resource, such as "my-project".

  cluster_name: The name of the GKE Cluster.

  location: The location in which the GKE Cluster is running.

• Question 30:

  You have a Compute Engine instance hosting a production application. You want to receive an email if the instance consumes more than 90% of its CPU resources for more than 15 minutes. You want to use Google services. What should you do?

  A. 1. Create a consumer Gmail account. 2.Write a script that monitors the CPU usage. 3.When the CPU usage exceeds the threshold, have that script send an email using the Gmail account and smtp.gmail.com on port 25 as SMTP server.
  B. 1. Create a Stackdriver Workspace, and associate your Google Cloud Platform (GCP) project with it. 2.Create an Alerting Policy in Stackdriver that uses the threshold as a trigger condition. 3.Configure your email address in the notification channel.
  C. 1. Create a Stackdriver Workspace, and associate your GCP project with it. 2.Write a script that monitors the CPU usage and sends it as a custom metric to Stackdriver. 3.Create an uptime check for the instance in Stackdriver.
  D. 1. In Stackdriver Logging, create a logs-based metric to extract the CPU usage by using this regular expression: CPU Usage: ([0-9] {1,3})% 2.In Stackdriver Monitoring, create an Alerting Policy based on this metric. 3.Configure your email address in the notification channel.
  B. 1. Create a Stackdriver Workspace, and associate your Google Cloud Platform (GCP) project with it. 2.Create an Alerting Policy in Stackdriver that uses the threshold as a trigger condition. 3.Configure your email address in the notification channel.

  ---

  Explanation