Latest Google Associate-Cloud-Engineer Dumps for success in Actual Exam Jul-2024 [Q28-Q48]

Rate this post

Latest Google Associate-Cloud-Engineer Dumps for success in Actual Exam Jul-2024]

Realistic Associate-Cloud-Engineer 100% Pass Guaranteed Download Exam Q&A

To prepare for the exam, candidates should have a strong understanding of cloud computing concepts, including virtualization, networking, storage, and security. They should also be familiar with GCP services and have experience deploying and managing them. Google recommends that candidates have at least six months of experience with GCP before taking the exam.

QUESTION 28
A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

In the console, validate which SSH keys have been stored as project-wide keys.

Navigate to Identity-Aware Proxy and check the permissions for these resources.

Enable Audit Logs on the IAM & admin page for all resources, and validate the results.

Use the command gcloud projects get-iam-policy to view the current role assignments.

QUESTION 29
You are creating a Google Kubernetes Engine (GKE) cluster with a cluster autoscaler feature enabled. You need to make sure that each node of the cluster will run a monitoring pod that sends container metrics to a third-party monitoring solution. What should you do?

Deploy the monitoring pod in a StatefulSet object.

Deploy the monitoring pod in a DaemonSet object.

Reference the monitoring pod in a Deployment object.

Reference the monitoring pod in a cluster initializer at the GKE cluster creation time.

QUESTION 30
You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images.
The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires. The other microservices are workloads that are optimized for n1-standard machine types.
You need to optimize your cluster so that all workloads are using resources as efficiently as possible. What should you do?

Assign the pods of the image rendering microservice a higher pod priority than the older microservices

Create a node pool with compute-optimized machine type nodes for the image rendering microservice Use the node pool with general-purpose machine type nodes for the other microservices

Use the node pool with general-purpose machine type nodes for lite mage rendering microservice Create a nodepool with compute-optimized machine type nodes for the other microservices

Configure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment Keep the resource requests for the other microservices at the default

QUESTION 31
You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone.
You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?

Set the europe-west1-d zone as the default zone using the gcloud config subcommand.

In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.

In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.

Create a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1-d.

QUESTION 32
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2-highmem-16 nodes without any downtime. What should you do?

Use gcloud container clusters upgrade. Deploy the new services.

Create a new Node Pool and specify machine type n2-highmem-16. Deploy the new pods.

Create a new cluster with n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.

Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.

QUESTION 33
You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?

When creating the VM via the web console, specify the service account under the `Identity and API Access’ section.

Download a JSON Private Key for the service account.
On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.

Download a JSON Private Key for the service account.
On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine- service-account.

Download a JSON Private Key for the service account.
After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine- service-account.json.

QUESTION 34
You are building an application that processes data files uploaded from thousands of suppliers. Your primary goals for the application are data security and the expiration of aged data. You need to design the application to:
* Restrict access so that suppliers can access only their own data.
* Give suppliers write access to data only for 30 minutes.
* Delete data that is over 45 days old.
You have a very short development cycle, and you need to make sure that the application requires minimal maintenance. Which two strategies should you use? (Choose two.)

Build a lifecycle policy to delete Cloud Storage objects after 45 days.

Use signed URLs to allow suppliers limited time access to store their objects.

Set up an SFTP server for your application, and create a separate user for each supplier.

Build a Cloud function that triggers a timer of 45 days to delete objects that have expired.

Develop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than
45 days.

QUESTION 35
Your management has asked an external auditor to review all the resources in a specific project. The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?

Ask the auditor for their Google account, and give them the Viewer role on the project.

Ask the auditor for their Google account, and give them the Security Reviewer role on the project.

Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.

Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.

QUESTION 36
You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs.
What should you do?

Increase the size of the disk to 1 TB.

Increase the allocated CPU to the instance.

Migrate to use a Local SSD on the instance.

Migrate to use a Regional SSD on the instance.

QUESTION 37
You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?

Run gcloud projects list to get the project ID, and then run gcloud services list –project <project ID>.

Run gcloud init to set the current project to my-project, and then run gcloud services list –available.

Run gcloud info to view the account value, and then run gcloud services list –account <Account>.

Run gcloud projects describe <project ID> to verify the project value, and then run gcloud services list –available.

QUESTION 38
You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes. Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?

Fill in local SSD. Fill in persistent disk storage and snapshot storage.

Fill in local SSD. Add estimated cost for cluster management.

Select Add GPUs. Fill in persistent disk storage and snapshot storage.

Select Add GPUs. Add estimated cost for cluster management.

QUESTION 39
You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.

You check the status of the deployed pods and notice that one of them is still in PENDING status:

You want to find out why the pod is stuck in pending status. What should you do?

Review details of the myapp-service Service object and check for error messages.

Review details of the myapp-deploymentDeployment object and check for error messages.

Review details of myapp-deployment-58ddbbb995-lp86mPod and check for warning messages.

View logs of the container in myapp-deployment-58ddbbb995-lp86mpod and check for warning messages.

QUESTION 40
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account.
You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?

Link the acquired company’s projects to your company’s billing account.

Configure the acquired company’s billing account and your company’s billing account to export the billing data into the same BigQuery dataset.

Migrate the acquired company’s projects into your company’s GCP organization. Link the migrated projects to your company’s billing account.

Create a new GCP organization and a new billing account. Migrate the acquired company’s projects and your company’s projects into the new GCP organization and link the projects to the new billing account.

QUESTION 41
You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?

Configure an HTTP(S) load balancer.

Configure an internal TCP load balancer.

Configure an external SSL proxy load balancer.

Configure an external TCP proxy load balancer.

QUESTION 42
You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.

Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.

Run gcloud iam roles describe roles/spanner.viewer – -project my-project. Add the users to the role.

Run gcloud iam roles describe roles/spanner.viewer – -project my-project. Add the users to a new group. Add the group to the role.

QUESTION 43
An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination. What should you do?

View System Event Logs in Stackdriver. Search for the user’s email as the principal.

View System Event Logs in Stackdriver. Search for the service account associated with the user.

View Data Access audit logs in Stackdriver. Search for the user’s email as the principal.

View the Admin Activity log in Stackdriver. Search for the service account associated with the user.

QUESTION 44
Your company has a Google Cloud Platform project that uses BigQuery for data warehousing.
Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

1. Create an IAM entry for each data scientist’s user account.
2. Assign the BigQuery jobUser role to the group.

1. Create an IAM entry for each data scientist’s user account.
2. Assign the BigQuery dataViewer user role to the group.

1. Create a dedicated Google group in Cloud Identity.
2. Add each data scientist’s user account to the group.
3. Assign the BigQuery jobUser role to the group.

1. Create a dedicated Google group in Cloud Identity.
2. Add each data scientist’s user account to the group.
3. Assign the BigQuery dataViewer user role to the group.

QUESTION 45
Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

1. Create an IAM entry for each data scientist’s user account.2. Assign the BigQuery jobUser role to the group.

1. Create an IAM entry for each data scientist’s user account.2. Assign the BigQuery dataViewer user role to the group.

1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist’s user account to the group.3. Assign the BigQuery jobUser role to the group.

1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist’s user account to the group.3. Assign the BigQuery dataViewer user role to the group.

QUESTION 46
You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.

Use Cloud Functions and configure the bucket as a trigger resource.

Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.

Use Dataflow as a batch job, and configure the bucket as a data source.

QUESTION 47
You are running an application on multiple virtual machines within a managed instance group and have autoscaling enabled. The autoscaling policy is configured so that additional instances are added to the group if the CPU utilization of instances goes above 80%. VMs are added until the instance group reaches its maximum limit of five VMs or until CPU utilization of instances lowers to 80%. The initial delay for HTTP health checks against the instances is set to 30 seconds. The virtual machine instances take around three minutes to become available for users. You observe that when the instance group autoscales, it adds more instances then necessary to support the levels of end-user traffic. You want to properly maintain instance group sizes when autoscaling.
What should you do?

Set the maximum number of instances to 1.

Decrease the maximum number of instances to 3.

Use a TCP health check instead of an HTTP health check.

Increase the initial delay of the HTTP health check to 200 seconds.

QUESTION 48
Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?

Enable Cloud Identity in the GCP Console for your domain.

Grant them the required IAM roles using their G Suite email address.

Create a CSV sheet with all users’ email addresses. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.

In the G Suite console, add the users to a special group called [email protected]. Rely on the default behavior of the Cloud Platform to grant users access if they are members of this group.

Google Associate-Cloud-Engineer certification is an excellent way to showcase your expertise in GCP to potential employers. Google Associate Cloud Engineer Exam certification demonstrates that you have a deep understanding of GCP and can deploy and manage applications on the platform. Google Associate Cloud Engineer Exam certification also provides access to a network of GCP professionals and resources that can help you stay up to date with the latest trends and best practices in the industry.

Accurate Associate-Cloud-Engineer Answers 365 Days Free Updates: https://www.prepawaypdf.com/Google/Associate-Cloud-Engineer-practice-exam-dumps.html