Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 411:

  Your company uses a multi-cloud strategy that includes Google Cloud. You want to centralize application logs in a third-party software-as-a-service (SaaS) tool from all environments. You need to integrate logs originating from Cloud Logging, and you want to ensure the export occurs with the least amount of delay possible. What should you do?

  A. Create a Cloud Logging sink and configure BigQuery as the destination. Configure the SaaS tool to query BigQuery to retrieve the logs.
  B. Create a Cloud Logging sink and configure Pub/Sub as the destination. Configure the SaaS tool to subscribe to the Pub/Sub topic to retrieve the logs.
  C. Create a Cloud Logging sink and configure Cloud Storage as the destination. Configure the SaaS tool to read the Cloud Storage bucket to retrieve the logs.
  D. Use a Cloud Scheduler cron job to trigger a Cloud Function that queries Cloud Logging and sends the logs to the SaaS tool.
  B. Create a Cloud Logging sink and configure Pub/Sub as the destination. Configure the SaaS tool to subscribe to the Pub/Sub topic to retrieve the logs.

  ---

  Explanation

  Exporting logs via a Cloud Logging sink to a Pub/Sub topic is the best option when you need low-latency, near real-time delivery of logs. Pub/Sub is designed for streaming data and can immediately deliver logs to the third-party SaaS tool that subscribes to the topic.

• Question 412:

  You need to configure optimal data storage for files stored in Cloud Storage for minimal cost. The files are used in a mission-critical analytics pipeline that is used continually The users are in Boston, MA (United States). What should you do?

  A. Configure regional storage for the region closest to the users. Configure a Nearline storage class.
  B. Configure regional storage for the region closest to the users. Configure a Standard storage class.
  C. Configure dual-regional storage for the dual region closest to the users. Configure a Nearline storage class.
  D. Configure dual-regional storage for the dual region closest to the users. Configure a Standard storage class.
  D. Configure dual-regional storage for the dual region closest to the users. Configure a Standard storage class.

  ---

  Explanation

  Mission critical is the keyword here which specifies that we need to have a multi-regional backup of the data to survive any regional failures. So option D is the correct choice here.

• Question 413:

  You need to track and verity modifications to a set of Google Compute Engine instances in your Google Cloud project. In particular, you want to verify OS system patching events on your virtual machines (VMs). What should you do?

  A. Review the Compute Engine activity logs Select and review the Admin Event logs
  B. Review the Compute Engine activity logs Select and review the System Event logs
  C. Install the Cloud Logging Agent In Cloud Logging review the Compute Engine syslog logs
  D. Install the Cloud Logging Agent In Cloud Logging, review the Compute Engine operation logs
  A. Review the Compute Engine activity logs Select and review the Admin Event logs

  ---

  Explanation

• Question 414:

  You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?

  A. Set up an export job for the first of the month. Write the export file to an Archive class Cloud Storage bucket.
  B. Save the automatic first-of-the-month backup for three years. Store the backup file in an Archive class Cloud Storage bucket.
  C. Set up an on-demand backup for the first of the month. Write the backup to an Archive class Cloud Storage bucket.
  D. Convert the automatic first-of-the-month backup to an export file. Write the export file to a Coldline class Cloud Storage bucket.
  A. Set up an export job for the first of the month. Write the export file to an Archive class Cloud Storage bucket.

  ---

  Explanation

  https://cloud.google.com/sql/docs/mysql/backup- recovery/backups#can_i_export_a_backup https://cloud.google.com/sql/docs/mysql/import-export#automating_export_operations

• Question 415:

  You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?

  A. Run a test using simulated maintenance events. If the test is successful, use preemptible N1 Standard VMs when running future jobs.
  B. Run a test using simulated maintenance events. If the test is successful, use N1 Standard VMs when running future jobs.
  C. Run a test using a managed instance group. If the test is successful, use N1 Standard VMs in the managed instance group when running future jobs.
  D. Run a test using N1 standard VMs instead of N2. If the test is successful, use N1 Standard VMs when running future jobs.
  A. Run a test using simulated maintenance events. If the test is successful, use preemptible N1 Standard VMs when running future jobs.

  ---

  Explanation

  Creating and starting a preemptible VM instance This page explains how to create and use a preemptible virtual machine (VM) instance. A preemptible instance is an instance you can create and run at a much lower price than normal instances. However, Compute Engine might terminate (preempt) these instances if it requires access to those resources for other tasks. Preemptible instances will always terminate after 24 hours. To learn more about preemptible instances, read the preemptible instances documentation.

  Preemptible instances are recommended only for fault-tolerant applications that can withstand instance preemptions. Make sure your application can handle preemptions before you decide to create a preemptible instance. To understand the risks and value of preemptible instances, read the preemptible instances documentation.

  https://cloud.google.com/compute/docs/instances/create-start-preemptible-instance

• Question 416:

  You have an App Engine application serving as your front-end. It's going to publish messages to Pub/Sub. The Pub/Sub API hasn't been enabled yet. What is the fastest way to enable the API?

  A. Use a service account to auto-enable the API.
  B. Enable the API in the Console.
  C. Application's in App Engine don't require external APIs to be enabled.
  D. The API will be enabled the first time the code attempts to access Pub/Sub.
  D. The API will be enabled the first time the code attempts to access Pub/Sub.

  ---

  Explanation

• Question 417:

  You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment. What should you do?

  A. Use gcloud to create the new project, and then deploy your application to the new project.
  B. Use gcloud to create the new project and to copy the deployed application to the new project.
  C. Create a Deployment Manager configuration file that copies the current App Engine deployment into a new project.
  D. Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project.
  A. Use gcloud to create the new project, and then deploy your application to the new project.

  ---

  Explanation

  Option B is wrong as the option to use gcloud app cp does not exist. Option C is wrong as Deployment Manager does not copy the application, but allows you to specify all the resources needed for your application in a declarative format using yaml Option D is wrong as gcloud app deploy would not create a new project. The project should be created before usage

• Question 418:

  You've created a Pod using the kubectl run command. Now you're attempting to remove the Pod, and it keeps being recreated. Which command might help you as you attempt to remove the pod?

  A. gcloud container describe pods
  B. kubectl get pods
  C. kubectl get secrets
  D. kubectl get deployments
  D. kubectl get deployments

  ---

  Explanation

• Question 419:

  You deployed an application on a managed instance group in Compute Engine. The application accepts Transmission Control Protocol (TCP) traffic on port 389 and requires you to preserve the IP address of the client who is making a request. You want to expose the application to the internet by using a load balancer. What should you do?

  A. Expose the application by using an external TCP Network Load Balancer.
  B. Expose the application by using a TCP Proxy Load Balancer.
  C. Expose the application by using an SSL Proxy Load Balancer.
  D. Expose the application by using an internal TCP Network Load Balancer.
  A. Expose the application by using an external TCP Network Load Balancer.

  ---

  Explanation

  A TCP Proxy Load Balancer is suitable for preserving the client's IP address when accepting TCP traffic on a specific port, such as port 389 in this case. When a client makes a request to the load balancer, the load balancer maintains the client's source IP address and forwards the traffic to the appropriate backend instances in the managed instance group. This allows the application to see the original client IP address and respond accordingly.

  Option A, using an external TCP Network Load Balancer, does not preserve the client's IP address. The load balancer's IP address is seen as the source IP by the application, which may not meet the requirement. https://cloud.google.com/ load-balancing/docs/choosing-load-balancer#:~:text=Proxy%20load%20balancers%20do%20not%20preserve%20client%20IP

• Question 420:

  Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

  A. Create the instance without a public IP address.
  B. Create the instance with Private Google Access enabled.
  C. Create a deny-all egress firewall rule on the VPC network.
  D. Create a route on the VPC to route all traffic to the instance over the VPN tunnel.
  A. Create the instance without a public IP address.

  ---

  Explanation

  A for sure

  B - this allows internal communicaiton, but does nothing to limit public traffic C - deny all is nice, but it's for egress -- we're looking for ingress D - this is way to invasive and doesn't explicitly address the issue of preventing public internet traffic from reaching your instance -- if it does, someone let me know how.