Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 391:

  Your development team has asked for your help. They need a simple, reproducible way to create and terminate a new Compute Engine instance so that they can automate it as a part of their CI/CD process. What is the best option for accomplishing that?

  A. Show them how to use the Console to create and terminate instances.
  B. Recommend that they use the REST API to develop the functionality in the language of their choosing.
  C. Show them how to use the gcloud component of the Cloud SDK.
  D. Show them how to use a Docker container. Then they can get rid of the need for the VM.
  C. Show them how to use the gcloud component of the Cloud SDK.

  ---

  Explanation

• Question 392:

  You have deployed an application on a single Compute Engine instance. The application writes logs to disk. Users start reporting errors with the application. You want to diagnose the problem. What should you do?

  A. Navigate to Cloud Logging and view the application logs.
  B. Configure a health check on the instance and set a "consecutive successes" Healthy threshold value of 1.
  C. Connect to the instance's serial console and read the application logs.
  D. Install and configure the Ops agent and view the logs from Cloud Logging.
  D. Install and configure the Ops agent and view the logs from Cloud Logging.

  ---

  Explanation

  https://cloud.google.com/logging/docs/logging-gce-quickstart

• Question 393:

  You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?

  A. Create a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.
  B. Create a Kubernetes Service of type ClusterIP for your application. Configure the public DNS name of your application using the IP of this Service.
  C. Create a Kubernetes Service of type NodePort to expose the application on port 443 of each node of the Kubernetes cluster. Configure the public DNS name of your application with the IP of every node of the cluster to achieve load-balancing.
  D. Create a HAProxy pod in the cluster to load-balance the traffic to all the pods of the application. Forward the public traffic to HAProxy with an iptable rule. Configure the DNS name of your application using the public IP of the node HAProxy is running on.
  A. Create a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.

  ---

  Explanation

  https://cloud.google.com/kubernetes-engine/docs/tutorials/http-balancer

• Question 394:

  You need to create a new billing account and then link it with an existing Google Cloud Platform project. What should you do?

  A. Verify that you are Project Billing Manager for the GCP project. Update the existing project to link it to the existing billing account.
  B. Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project.
  C. Verify that you are Billing Administrator for the billing account. Create a new project and link the new project to the existing billing account.
  D. Verify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing account.
  B. Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project.

  ---

  Explanation

  Billing Account Administrator

  (roles/billing.admin) Manage billing accounts (but not create them).

  Billing Account User

  (roles/billing.user)

  When granted in conjunction with the Project Owner role or Project Billing Manager role, provides access to associate projects with billing accounts.

• Question 395:

  You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google-recommended practices to obtain the combined logs for all projects. What should you do?

  A. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
  B. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
  C. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
  D. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.
  B. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.

  ---

  Explanation

  https://cloud.google.com/blog/products/gcp/best-practices-for-working-with-google-cloud-audit-logging

• Question 396:

  Your company has an internal application for managing transactional orders. The application is used exclusively by employees in a single physical location. The application requires strong consistency, fast queries, and ACID guarantees for multi-table transactional updates. The first version of the application is implemented in PostgreSQL, and you want to display it to the cloud with minimal code changes. Which database is most appropriate for this application?

  A. BigQuery
  B. Cloud SQL
  C. Cloud Spanner
  D. Cloud Datastore
  B. Cloud SQL

  ---

  Explanation

  Cloud SQL is the most appropriate choice for deploying the application with the required characteristics while minimizing code changes and maintaining strong consistency, fast queries, and ACID guarantees for multi-table transactional updates.

  https://cloud.google.com/spanner/docs/transactions

• Question 397:

  You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?

  A. Increase the size of the disk to 1 TB.
  B. Increase the allocated CPU to the instance.
  C. Migrate to use a Local SSD on the instance.
  D. Migrate to use a Regional SSD on the instance.
  C. Migrate to use a Local SSD on the instance.

  ---

  Explanation

  https://cloud.google.com/compute/docs/disks/performance

• Question 398:

  You are developing a financial trading application that will be used globally. Data is stored and queried using a relational structure, and clients from all over the world should get the exact identical state of the data. The application will be deployed in multiple regions to provide the lowest latency to end users. You need to select a storage option for the application data while minimizing latency. What should you do?

  A. Use Cloud Bigtable for data storage.
  B. Use Cloud SQL for data storage.
  C. Use Cloud Spanner for data storage.
  D. Use Firestore for data storage.
  C. Use Cloud Spanner for data storage.

  ---

  Explanation

  Keywords, Financial data (large data) used globally, data stored and queried using relational structure (SQL), clients should get exact identical copies(Strong Consistency), Multiple region, low latency to end user, select storage option to minimize latency.

  https://cloud.google.com/solutions/best-practices-compute-engine-region-selection

• Question 399:

  You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re-creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?

  A. Create an HTTP load balancer with a backend configuration that references an existing instance group. Set the health check to healthy (HTTP)
  B. Create an HTTP load balancer with a backend configuration that references an existing instance group. Define a balancing mode and set the maximum RPS to 10.
  C. Create a managed instance group. Set the Autohealing health check to healthy (HTTP)
  D. Create a managed instance group. Verify that the autoscaling setting is on.
  C. Create a managed instance group. Set the Autohealing health check to healthy (HTTP)

  ---

  Explanation

  Reference : https://cloud.google.com/compute/docs/tutorials/high-availability-autohealing

  Pro Tip: Use separate health checks for load balancing and for autohealing. Health checks for load balancing detect unresponsive instances and direct traffic away from them. Health checks for autohealing detect and recreate failed instances, so they should be less aggressive than load balancing health checks. Using the same health check for these services would remove the distinction between unresponsive instances and failed instances, causing unnecessary latency and unavailability for your users.

• Question 400:

  You are developing an application that will be deployed on Google Cloud. The application will use a service account to retrieve data from BigQuery. Before you deploy your application, you want to test the permissions of this service account from your local machine to ensure there will be no authentication issues. You want to ensure that you use the most secure method while following Google-recommended practices. What should you do?

  A. Generate a service account key, and configure the gcloud CLI to use this key. Issue a relevant BigQuery request through the gdoud CLI to test the access.
  B. Grant the service account the BigQuery Administrator IAM role to ensure the service account has all required access.
  C. Configure the gcloud CLI to use service account impersonation. Issue a relevant BigQuery request through the gcloud CLI to test the access.
  D. Configure the gcloud CLI with Application Default Credentials using your user account. Issue a relevant BigQuery request through the gcloud CLI to test the access.
  C. Configure the gcloud CLI to use service account impersonation. Issue a relevant BigQuery request through the gcloud CLI to test the access.

  ---

  Explanation

  Configuring the gcloud CLI to use service account impersonation is the most secure method. It allows you to test the permissions of the service account without creating and managing a service account key. This approach follows Google-recommended best practices because it avoids the security risks associated with long-lived keys and ensures that you're verifying the exact permissions that the service account will have when the application is deployed.