Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 351:

  Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

  A. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
  B. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
  C. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
  D. Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.
  A. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.

  ---

  Explanation

  https://cloud.google.com/solutions/federating-gcp-with-active-directory-introduction

• Question 352:

  You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube-system namespace of the cluster. You want a solution that uses the fewest possible services. What should you do?

  A. Add the cluster's API as a new Type Provider in Deployment Manager, and use the new type to create the DaemonSet.
  B. Use the Deployment Manager Runtime Configurator to create a new Config resource that contains the DaemonSet definition.
  C. With Deployment Manager, create a Compute Engine instance with a startup script that uses kubectl to create the DaemonSet.
  D. In the cluster's definition in Deployment Manager, add a metadata that has kube-system as key and the DaemonSet manifest as value.
  A. Add the cluster's API as a new Type Provider in Deployment Manager, and use the new type to create the DaemonSet.

  ---

  Explanation

  Adding an API as a type provider

  This page describes how to add an API to Google Cloud Deployment Manager as a type provider. To learn more about types and type providers, read the Types overview documentation.

  A type provider exposes all of the resources of a third-party API to Deployment Manager as base types that you can use in your configurations. These types must be directly served by a RESTful API that supports Create, Read, Update, and

  Delete (CRUD).

  If you want to use an API that is not automatically provided by Google with Deployment Manager, you must add the API as a type provider.

  https://cloud.google.com/deployment-manager/docs/configuration/type-providers/creating-type-provider

• Question 353:

  Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?

  A. Link the acquired company's projects to your company's billing account.
  B. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
  C. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
  D. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
  A. Link the acquired company's projects to your company's billing account.

  ---

  Explanation

  The keywords are "as of tomorrow" and "single invoice". The quickest(the only?) way of achieving this is by Linking. The proper way would be under C, but that's not possible in 24h or less.

• Question 354:

  You have an application that is currently processing transactions by using a group of managed VM instances. You need to migrate the application so that it is serverless and scalable. You want to implement an asynchronous transaction processing system, while minimizing management overhead. What should you do?

  A. Install Kafka on VM instances to acknowledge incoming transactions. Use Cloud Run to process transactions.
  B. Use Pub/Sub to acknowledge incoming transactions. Use VM instances to process transactions.
  C. Use Pub/Sub to acknowledge incoming transactions. Use Cloud Run to process transactions.
  D. Install Kafka on VM instances to acknowledge incoming transactions. Use VM instances to process transactions.
  C. Use Pub/Sub to acknowledge incoming transactions. Use Cloud Run to process transactions.

  ---

  Explanation

  Using Pub/Sub to acknowledge incoming transactions and Cloud Run to process them is the best solution for implementing an asynchronous, serverless, and scalable transaction processing system. Pub/Sub provides a fully managed messaging service for event-driven architectures, while Cloud Run offers serverless compute that scales automatically based on the workload, minimizing management overhead.

• Question 355:

  You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

  A. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
  B. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.
  C. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to the role.
  D. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to a new group. Add the group to the role.
  B. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.

  ---

  Explanation

  as per IAM best practices

• Question 356:

  Your team is running an on-premises ecommerce application. The application contains a complex set of microservices written in Python, and each microservice is running on Docker containers. Configurations are injected by using environment variables. You need to deploy your current application to a serverless Google Cloud cloud solution. What should you do?

  A. Use your existing CI/CD pipeline. Use the generated Docker images and deploy them to Cloud Run. Update the configurations and the required endpoints.
  B. Use your existing continuous integration and delivery (CI/CD) pipeline. Use the generated Docker images and deploy them to Cloud Function. Use the same configuration as on-premises.
  C. Use the existing codebase and deploy each service as a separate Cloud Function. Update the configurations and the required endpoints.
  D. Use your existing codebase and deploy each service as a separate Cloud Run. Use the same configurations as on-premises.
  A. Use your existing CI/CD pipeline. Use the generated Docker images and deploy them to Cloud Run. Update the configurations and the required endpoints.

  ---

  Explanation

• Question 357:

  Your company uses BigQuery to store and analyze data. Upon submitting your query in BigQuery, the query fails with a quotaExceeded error. You need to diagnose the issue causing the error.

  What should you do?

  A. Search for errors in Cloud Audit Logs to analyze the issue.
  B. Configure Cloud Trace to analyze the issue.
  C. View errors in Cloud Monitoring to analyze the issue.
  D. Use the INFORMATION_SCHEMA views to analyze the underlying issue.
  E. Use BigQuery BI Engine to analyze the issue.
  A. Search for errors in Cloud Audit Logs to analyze the issue.
  C. View errors in Cloud Monitoring to analyze the issue.

  ---

  Explanation

  When encountering a quotaExceeded error in BigQuery, follow these steps to diagnose and mitigate the issue:

  Understand the Error:

  Identify which quota was exceeded and whether it is a soft or hard limit.

  Search for Errors in Cloud Audit Logs:

  Review Cloud Audit Logs to check for administrative changes or quota-related errors.

  View Errors in Cloud Monitoring:

  Use Cloud Monitoring to track query execution metrics and identify resource constraints.

  Other Options:

  Some quotas replenish incrementally over a 24-hour period, so you may not need to wait the full day after reaching the limit.

  If you consistently hit longer-term quotas, consider optimizing workloads or requesting a quota increase from Google Cloud.

• Question 358:

  You are planning to migrate your on-premises VMs to Google Cloud. You need to set up a landing zone in Google Cloud before migrating the VMs. You must ensure that all VM in your production environment can communicate with each other through private IP addresses. You need to allow all VMs in your Google Cloud organization to accept connections on specific TCP ports. You want to follow Google-recommended practices, and you need to minimize your operational costs. What should you do?

  A. Create individual VPCs per Google Cloud project. Peer all he VPC together. Apply organization policies on the organization level.
  B. Create individual VPCs for each Google Cloud project. Peer ail ne VPCs together. Apply hierarchical firewall policies on the organization level.
  C. Create a host VPC project with each production project as its service project. Apply organization policies on the organization level.
  D. Create a host VPC project with each production project as its service project. Apply hierarchical firewall policies on the organization level.
  D. Create a host VPC project with each production project as its service project. Apply hierarchical firewall policies on the organization level.

  ---

  Explanation

  Shared VPC (host and service projects) is the Google-recommended practice for enabling centralized network management while allowing production workloads to run in separate projects. It enables VMs to communicate via private IPs across projects. Hierarchical firewall policies allow you to define and enforce organization-wide security rules (like allowing specific TCP ports) at the organization or folder level, minimizing repetitive configuration and improving security posture. This architecture is cost-effective and supports scalable, secure, and centralized operations.

• Question 359:

  You're attempting to remove the zone property from the Compute Engine service, that was set with the incorrect value. Which command would accomplish your task?

  A. gcloud config unset compute/zone
  B. gcloud config unset zone
  C. gcloud config configurations unset compute/zone
  D. gcloud unset compute/zone
  A. gcloud config unset compute/zone

  ---

  Explanation

• Question 360:

  You are working for a hospital that stores its medical images in an on-premises data room. The hospital wants to use Cloud Storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to Cloud Storage. You need to design and implement a solution. What should you do?

  A. Create a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub topic.
  B. Deploy a Dataflow job from the batch template, "Datastore to Cloud Storage." Schedule the batch job on the desired interval.
  C. Create a script that uses the gsutil command line interface to synchronize the on-premises storage with Cloud Storage. Schedule the script as a cron job.
  D. In the Cloud Console, go to Cloud Storage. Upload the relevant images to the appropriate bucket.
  C. Create a script that uses the gsutil command line interface to synchronize the on-premises storage with Cloud Storage. Schedule the script as a cron job.

  ---

  Explanation

  C is the correct answer.

  Keyword, they require cloud storage for archival and the want to automate the process to upload new medical image to cloud storage, hence we go for gsutil to copy on-prem images to cloud storage and automate the process via cron job.

  whereas Pub/Sub listens to the changes in the Cloud Storage bucket and triggers the pub/sub topic, which is not required.