Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 291:

  You have developed an application that consists of multiple microservices, with each microservice packaged in its own Docker container image. You want to deploy the entire application on Google Kubernetes Engine so that each microservice can be scaled individually. What should you do?

  A. Create and deploy a Custom Resource Definition per microservice.
  B. Create and deploy a Docker Compose File.
  C. Create and deploy a Job per microservice.
  D. Create and deploy a Deployment per microservice.
  D. Create and deploy a Deployment per microservice.

  ---

  Explanation

  It's one of Googles main ideas to distribute a complex system into microservices. They do it as well and encourage customers to do the same.

• Question 292:

  You built an application on your development laptop that uses Google Cloud services. Your application uses Application Default Credentials for authentication and works fine on your development laptop. You want to migrate this application to a Compute Engine virtual machine (VM) and set up authentication using Google-recommended practices and minimal changes. What should you do?

  A. Assign appropriate access for Google services to the service account used by the Compute Engine VM.
  B. Create a service account with appropriate access for Google services, and configure the application to use this account.
  C. Store credentials for service accounts with appropriate access for Google services in a config file, and deploy this config file with your application.
  D. Store credentials for your user account with appropriate access for Google services in a config file, and deploy this config file with your application.
  B. Create a service account with appropriate access for Google services, and configure the application to use this account.

  ---

  Explanation

  https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances

• Question 293:

  You need to deploy an application, which is packaged in a container image, in a new project. The application exposes an HTTP endpoint and receives very few requests per day. You want to minimize costs. What should you do?

  A. Deploy the container on Cloud Run.
  B. Deploy the container on Cloud Run on GKE.
  C. Deploy the container on App Engine Flexible.
  D. Deploy the container on Google Kubernetes Engine, with cluster autoscaling and horizontal pod autoscaling enabled.
  A. Deploy the container on Cloud Run.

  ---

  Explanation

  Cloud Run takes any container images and pairs great with the container ecosystem: Cloud Build, Artifact Registry, Docker. ... No infrastructure to manage: once deployed, Cloud Run manages your services so you can sleep well. Fast autoscaling. Cloud Run automatically scales up or down from zero to N depending on traffic.

  https://cloud.google.com/run

• Question 294:

  You are setting up a Windows VM on Compute Engine and want to make sure you can log in to the VM via RDP. What should you do?

  A. After the VM has been created, use your Google Account credentials to log in into the VM.
  B. After the VM has been created, use gcloud compute reset-windows-password to retrieve the login credentials for the VM.
  C. When creating the VM, add metadata to the instance using `windows-password' as the key and a password as the value.
  D. After the VM has been created, download the JSON private key for the default Compute Engine service account. Use the credentials in the JSON file to log in to the VM.
  B. After the VM has been created, use gcloud compute reset-windows-password to retrieve the login credentials for the VM.

  ---

  Explanation

  Correct Answer is

  B.

  B. After the VM has been created, use gcloud compute reset-windows-password to retrieve the login credentials for the VM.

  https://cloud.google.com/sdk/gcloud/reference/beta/compute/reset-windows-password

• Question 295:

  You recently deployed a new version of an application to App Engine and then discovered a bug in the release. You need to immediately revert to the prior version of the application. What should you do?

  A. Run gcloud app restore.
  B. On the App Engine page of the GCP Console, select the application that needs to be reverted and click Revert.
  C. On the App Engine Versions page of the GCP Console, route 100% of the traffic to the previous version.
  D. Deploy the original version as a separate application. Then go to App Engine settings and split traffic between applications so that the original version serves 100% of the requests.
  C. On the App Engine Versions page of the GCP Console, route 100% of the traffic to the previous version.

  ---

  Explanation

  https://medium.com/google-cloud/app-engine-project-cleanup-9647296e796a

  Option A is wrong as gcloud app restore was used for backup and restore and has been deprecated.Option B is wrong as there is no application revert functionality available.Option D is wrong as App Engine maintains version and need not be redeployed.

• Question 296:

  Your team needs to set up a new Jenkins instance as quickly as possible. What's the best way to get it up- and-running?

  A. Use Google's Managed Jenkins Service.
  B. Deploy the jar file to a Compute Engine instance.
  C. Search the marketplace for Jenkins and install with Cloud Launcher.
  D. Create a Deployment Manager template and deploy it.
  C. Search the marketplace for Jenkins and install with Cloud Launcher.

  ---

  Explanation

• Question 297:

  Your organization uses Active Directory (AD) to manage user identities. Each user uses this identity for federated access to various on-premises systems. Your security team has adopted a policy that requires users to log into Google Cloud with their AD identity instead of their own login. You want to follow the Google-recommended practices to implement this policy. What should you do?

  A. Sync Identities with Cloud Directory Sync, and then enable SAML for single sign-on
  B. Sync Identities in the Google Admin console, and then enable Oauth for single sign-on
  C. Sync identities with 3rd party LDAP sync, and then copy passwords to allow simplified login with (he same credentials
  D. Sync identities with Cloud Directory Sync, and then copy passwords to allow simplified login with the same credentials.
  A. Sync Identities with Cloud Directory Sync, and then enable SAML for single sign-on

  ---

  Explanation

• Question 298:

  You need to create and manage service accounts for your workloads running on Google Cloud. You want to follow Google-recommended practices. What should you do? (Choose two.)

  A. Create as few service accounts as possible.
  B. Delete any unused service accounts immediately.
  C. Create single-purpose service accounts.
  D. Manage service accounts as resources.
  E. Use random names for the service accounts.
  C. Create single-purpose service accounts.
  D. Manage service accounts as resources.

  ---

  Explanation

  Create single-purpose service accounts.

  Google recommends giving each workload its own service account (rather than sharing one account among many workloads). This ensures that you can grant each service account exactly the permissions it needs (and no more), and makes

  it easier to audit or revoke permissions for any one function.

  Manage service accounts as resources.

  Treat service accounts the same way you treat other GCP resources - track them in IAM policies, apply labels, automate their creation/deletion in Infrastructure-as-Code, and regularly review their roles. In other words, don't let service

  accounts "just sit there"; include them in your normal resource-management and auditing processes.

• Question 299:

  Your VMs are running in a subnet that has a subnet mask of 255.255.255.240. The current subnet has no more free IP addresses and you require an additional 10 IP addresses for new VMs. The existing and new VMs should all be able to reach each other without additional routes. What should you do?

  A. Use gcloud to expand the IP range of the current subnet.
  B. Delete the subnet, and recreate it using a wider range of IP addresses.
  C. Create a new project. Use Shared VPC to share the current network with the new project.
  D. Create a new subnet with the same starting IP but a wider range to overwrite the current subnet.
  A. Use gcloud to expand the IP range of the current subnet.

  ---

  Explanation

  Expand the existing subnet. https://cloud.google.com/sdk/gcloud/reference/compute/networks/subnets/expand-ip-range

• Question 300:

  You've uploaded some PDFs to a public bucket. When users browse to the documents, they're downloaded rather than viewed in the browser. How can we ensure that the PDFs are viewed in the browser?

  A. This is a browser setting and not something that can be changed.
  B. Use the gsutil set file-type pdfcommand.
  C. Set the Content metadata for the object to "application/pdf".
  D. Set the Content-Type metadata for the object to "application/pdf".
  D. Set the Content-Type metadata for the object to "application/pdf".

  ---

  Explanation