Exams > Google > Associate Cloud Engineer
Associate Cloud Engineer
Page 1 out of 20 pages Questions 1-10 out of 197 questions
Question#1

Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?

  • A. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key in the metadata of each instance.
  • B. Ask each member of the team to generate a new SSH key pair and to send you their public key. Use a configuration management tool to deploy those keys on each instance.
  • C. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the ג€compute.osAdminLoginג€ role to the Google group corresponding to this team.
  • D. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance.
Discover Answer Hide Answer

D
Reference:
https://cloud.google.com/compute/docs/instances/adding-removing-ssh-keys

Question#2

You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible. Which range should you use?

  • A. 0.0.0.0/0
  • B. 10.0.0.0/8
  • C. 172.16.0.0/12
  • D. 192.168.0.0/16
Discover Answer Hide Answer

A

Question#3

You want to select and configure a cost-effective solution for relational data on Google Cloud Platform. You are working with a small set of operational data in one geographic location. You need to support point-in-time recovery. What should you do?

  • A. Select Cloud SQL (MySQL). Verify that the enable binary logging option is selected.
  • B. Select Cloud SQL (MySQL). Select the create failover replicas option.
  • C. Select Cloud Spanner. Set up your instance with 2 nodes.
  • D. Select Cloud Spanner. Set up your instance as multi-regional.
Discover Answer Hide Answer

A
Reference:
https://cloud.google.com/sql/docs/mysql/backup-recovery/restore

Question#4

You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps.
You need to configure re-creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?

  • A. Create an HTTP load balancer with a backend configuration that references an existing instance group. Set the health check to healthy (HTTP)
  • B. Create an HTTP load balancer with a backend configuration that references an existing instance group. Define a balancing mode and set the maximum RPS to 10.
  • C. Create a managed instance group. Set the Autohealing health check to healthy (HTTP)
  • D. Create a managed instance group. Verify that the autoscaling setting is on.
Discover Answer Hide Answer

D

Question#5

You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us- central region. Now you want the application to be served from the asia-northeast1 region. What should you do?

  • A. Change the default region property setting in the existing GCP project to asia-northeast1.
  • B. Change the region property setting in the existing App Engine application from us-central to asia-northeast1.
  • C. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
  • D. Create a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application.
Discover Answer Hide Answer

C

Question#6

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

  • A. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
  • B. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.
  • C. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to the role.
  • D. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to a new group. Add the group to the role.
Discover Answer Hide Answer

A

Question#7

You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

  • A. Enable the Node Auto-Repair feature for your GKE cluster.
  • B. Enable the Node Auto-Upgrades feature for your GKE cluster.
  • C. Select the latest available cluster version for your GKE cluster.
  • D. Select ג€Container-Optimized OS (cos)ג€ as a node image for your GKE cluster.
Discover Answer Hide Answer

B

Question#8

You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?

  • A. Configure an HTTP(S) load balancer.
  • B. Configure an internal TCP load balancer.
  • C. Configure an external SSL proxy load balancer.
  • D. Configure an external TCP proxy load balancer.
Discover Answer Hide Answer

A
Reference:
https://cloud.google.com/load-balancing/docs/https/

Question#9

You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection. You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?

  • A. Use the GCP Console to transfer the file instead of gsutil.
  • B. Enable parallel composite uploads using gsutil on the file transfer.
  • C. Decrease the TCP window size on the machine initiating the transfer.
  • D. Change the storage class of the bucket from Nearline to Multi-Regional.
Discover Answer Hide Answer

B

Question#10

You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

  • A. Store the database password inside the Docker image of the container, not in the YAML file.
  • B. Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
  • C. Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
  • D. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.
Discover Answer Hide Answer

C

chevron rightPrevious Nextchevron right