ExamGecko
Home Home / Google / Associate Cloud Engineer

Google Associate Cloud Engineer Practice Test - Questions Answers, Page 24

Question list
Search
Search

List of questions

Search

Related questions











Your team is using Linux instances on Google Cloud. You need to ensure that your team logs in to these instances in the most secure and cost efficient way. What should you do?

A.
Attach a public IP to the instances and allow incoming connections from the internet on port 22 for SSH.
A.
Attach a public IP to the instances and allow incoming connections from the internet on port 22 for SSH.
Answers
B.
Use a third party tool to provide remote access to the instances.
B.
Use a third party tool to provide remote access to the instances.
Answers
C.
Use the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic from the IP range 35.235.240.0/20 on port 22.
C.
Use the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic from the IP range 35.235.240.0/20 on port 22.
Answers
D.
Create a bastion host with public internet access. Create the SSH tunnel to the instance through the bastion host.
D.
Create a bastion host with public internet access. Create the SSH tunnel to the instance through the bastion host.
Answers
Suggested answer: D

Explanation:


You are migrating a business critical application from your local data center into Google Cloud. As part of your high-availability strategy, you want to ensure that any data used by the application will be immediately available if a zonal failure occurs. What should you do?

A.
Store the application data on a zonal persistent disk. Create a snapshot schedule for the disk. If an outage occurs, create a new disk from the most recent snapshot and attach it to a new VM in another zone.
A.
Store the application data on a zonal persistent disk. Create a snapshot schedule for the disk. If an outage occurs, create a new disk from the most recent snapshot and attach it to a new VM in another zone.
Answers
B.
Store the application data on a zonal persistent disk. If an outage occurs, create an instance in another zone with this disk attached.
B.
Store the application data on a zonal persistent disk. If an outage occurs, create an instance in another zone with this disk attached.
Answers
C.
Store the application data on a regional persistent disk. Create a snapshot schedule for the disk. If an outage occurs, create a new disk from the most recent snapshot and attach it to a new VM in another zone.
C.
Store the application data on a regional persistent disk. Create a snapshot schedule for the disk. If an outage occurs, create a new disk from the most recent snapshot and attach it to a new VM in another zone.
Answers
D.
Store the application data on a regional persistent disk If an outage occurs, create an instance in another zone with this disk attached.
D.
Store the application data on a regional persistent disk If an outage occurs, create an instance in another zone with this disk attached.
Answers
Suggested answer: A

The DevOps group in your organization needs full control of Compute Engine resources in your development project. However, they should not have permission to create or update any other resources in the project. You want to follow Google's recommendations for setting permissions for the DevOps group. What should you do?

A.
Grant the basic role roles/viewer and the predefined role roles/compute.admin to the DevOps group.
A.
Grant the basic role roles/viewer and the predefined role roles/compute.admin to the DevOps group.
Answers
B.
Create an 1AM policy and grant all compute. instanceAdmln.' permissions to the policy Attach the policy to the DevOps group.
B.
Create an 1AM policy and grant all compute. instanceAdmln.' permissions to the policy Attach the policy to the DevOps group.
Answers
C.
Create a custom role at the folder level and grant all compute. instanceAdmln. * permissions to the role Grant the custom role to the DevOps group.
C.
Create a custom role at the folder level and grant all compute. instanceAdmln. * permissions to the role Grant the custom role to the DevOps group.
Answers
D.
Grant the basic role roles/editor to the DevOps group.
D.
Grant the basic role roles/editor to the DevOps group.
Answers
Suggested answer: A

Your team is running an on-premises ecommerce application. The application contains a complex set of microservices written in Python, and each microservice is running on Docker containers. Configurations are injected by using environment variables. You need to deploy your current application to a serverless Google Cloud cloud solution. What should you do?

A.
Use your existing CI/CD pipeline Use the generated Docker images and deploy them to Cloud Run. Update the configurations and the required endpoints.
A.
Use your existing CI/CD pipeline Use the generated Docker images and deploy them to Cloud Run. Update the configurations and the required endpoints.
Answers
B.
Use your existing continuous integration and delivery (CI/CD) pipeline. Use the generated Docker images and deploy them to Cloud Function. Use the same configuration as on-premises.
B.
Use your existing continuous integration and delivery (CI/CD) pipeline. Use the generated Docker images and deploy them to Cloud Function. Use the same configuration as on-premises.
Answers
C.
Use the existing codebase and deploy each service as a separate Cloud Function Update the configurations and the required endpoints.
C.
Use the existing codebase and deploy each service as a separate Cloud Function Update the configurations and the required endpoints.
Answers
D.
Use your existing codebase and deploy each service as a separate Cloud Run Use the same configurations as on-premises.
D.
Use your existing codebase and deploy each service as a separate Cloud Run Use the same configurations as on-premises.
Answers
Suggested answer: A

You are running a web application on Cloud Run for a few hundred users. Some of your users complain that the initial web page of the application takes much longer to load than the following pages. You want to follow Google's recommendations to mitigate the issue. What should you do?

A.
Update your web application to use the protocol HTTP/2 instead of HTTP/1.1
A.
Update your web application to use the protocol HTTP/2 instead of HTTP/1.1
Answers
B.
Set the concurrency number to 1 for your Cloud Run service.
B.
Set the concurrency number to 1 for your Cloud Run service.
Answers
C.
Set the maximum number of instances for your Cloud Run service to 100.
C.
Set the maximum number of instances for your Cloud Run service to 100.
Answers
D.
Set the minimum number of instances for your Cloud Run service to 3.
D.
Set the minimum number of instances for your Cloud Run service to 3.
Answers
Suggested answer: D

You want to permanently delete a Pub/Sub topic managed by Config Connector in your Google Cloud project. What should you do?

A.
Use kubect1 to delete the topic resource.
A.
Use kubect1 to delete the topic resource.
Answers
B.
Use gcloud CLI to delete the topic.
B.
Use gcloud CLI to delete the topic.
Answers
C.
Use kubect1 to create the label deleted-by-cnrm and to change its value to true for the topic resource.
C.
Use kubect1 to create the label deleted-by-cnrm and to change its value to true for the topic resource.
Answers
D.
Use gcloud CLI to update the topic label managed-by-cnrm to false.
D.
Use gcloud CLI to update the topic label managed-by-cnrm to false.
Answers
Suggested answer: A

Your VMs are running in a subnet that has a subnet mask of 255.255.255.240. The current subnet has no more free IP addresses and you require an additional 10 IP addresses for new VMs. The existing and new VMs should all be able to reach each other without additional routes. What should you do?

A.
Use gcloud to expand the IP range of the current subnet.
A.
Use gcloud to expand the IP range of the current subnet.
Answers
B.
Delete the subnet, and recreate it using a wider range of IP addresses.
B.
Delete the subnet, and recreate it using a wider range of IP addresses.
Answers
C.
Create a new project. Use Shared VPC to share the current network with the new project.
C.
Create a new project. Use Shared VPC to share the current network with the new project.
Answers
D.
Create a new subnet with the same starting IP but a wider range to overwrite the current subnet.
D.
Create a new subnet with the same starting IP but a wider range to overwrite the current subnet.
Answers
Suggested answer: A

Explanation:

https://cloud.google.com/sdk/gcloud/reference/compute/networks/subnets/expand-ip-range

gcloud compute networks subnets expand-ip-range - expand the IP range of a Compute Engine subnetwork gcloud compute networks subnets expand-ip-range NAME --prefix-length=PREFIX_LENGTH [--region=REGION] [GCLOUD_WIDE_FLAG ...]

Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?

A.
Add your SREs to roles/iam.roleAdmin role.
A.
Add your SREs to roles/iam.roleAdmin role.
Answers
B.
Add your SREs to roles/accessapproval approver role.
B.
Add your SREs to roles/accessapproval approver role.
Answers
C.
Add your SREs to a group and then add this group to roles/iam roleAdmin role.
C.
Add your SREs to a group and then add this group to roles/iam roleAdmin role.
Answers
D.
Add your SREs to a group and then add this group to roles/accessapproval approver role.
D.
Add your SREs to a group and then add this group to roles/accessapproval approver role.
Answers
Suggested answer: D

Your team maintains the infrastructure for your organization. The current infrastructure requires changes. You need to share your proposed changes with the rest of the team. You want to follow Google's recommended best practices. What should you do?

A.
Use Deployment Manager templates to describe the proposed changes and store them in a Cloud Storage bucket.
A.
Use Deployment Manager templates to describe the proposed changes and store them in a Cloud Storage bucket.
Answers
B.
Use Deployment Manager templates to describe the proposed changes and store them in Cloud Source Repositories.
B.
Use Deployment Manager templates to describe the proposed changes and store them in Cloud Source Repositories.
Answers
C.
Apply the change in a development environment, run gcloud compute instances list, and then save the output in a shared Storage bucket.
C.
Apply the change in a development environment, run gcloud compute instances list, and then save the output in a shared Storage bucket.
Answers
D.
Apply the change in a development environment, run gcloud compute instances list, and then save the output in Cloud Source Repositories.
D.
Apply the change in a development environment, run gcloud compute instances list, and then save the output in Cloud Source Repositories.
Answers
Suggested answer: B

Explanation:

Showing Deployment Manager templates to your team will allow you to define the changes you want to implement in your cloud infrastructure. You can use Cloud Source Repositories to store Deployment Manager templates and collaborate with your team. Cloud Source Repositories are fully-featured, scalable, and private Git repositories you can use to store, manage and track changes to your code.

https://cloud.google.com/source-repositories/docs/features

Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?

A.
Download and deploy the Jenkins Java WAR to App Engine Standard.
A.
Download and deploy the Jenkins Java WAR to App Engine Standard.
Answers
B.
Create a new Compute Engine instance and install Jenkins through the command line interface.
B.
Create a new Compute Engine instance and install Jenkins through the command line interface.
Answers
C.
Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.
C.
Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.
Answers
D.
Use GCP Marketplace to launch the Jenkins solution.
D.
Use GCP Marketplace to launch the Jenkins solution.
Answers
Suggested answer: D
Total 289 questions
Go to page: of 29