Exams > Google > Associate Cloud Engineer
Associate Cloud Engineer
Page 8 out of 20 pages Questions 71-80 out of 197 questions
Question#71

Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?

  • A. Add the group for the finance team to roles/billing user role.
  • B. Add the group for the finance team to roles/billing admin role.
  • C. Add the group for the finance team to roles/billing viewer role.
  • D. Add the group for the finance team to roles/billing project/Manager role.
Discover Answer Hide Answer

C

Question#72

Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?

  • A. Add your SREs to roles/iam.roleAdmin role.
  • B. Add your SREs to roles/accessapproval.approver role.
  • C. Add your SREs to a group and then add this group to roles/iam.roleAdmin.role.
  • D. Add your SREs to a group and then add this group to roles/accessapproval.approver role.
Discover Answer Hide Answer

B

Question#73

You need to host an application on a Compute Engine instance in a project shared with other teams. You want to prevent the other teams from accidentally causing downtime on that application. Which feature should you use?

  • A. Use a Shielded VM.
  • B. Use a Preemptible VM.
  • C. Use a sole-tenant node.
  • D. Enable deletion protection on the instance.
Discover Answer Hide Answer

D

Question#74

Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?

  • A. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.
  • B. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.
  • C. Create a custom role by removing delete permissions, and add users to that role only.
  • D. Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.
Discover Answer Hide Answer

B

Question#75

You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?

  • A. Export Cloud Datastore data using gcloud datastore export.
  • B. Create a Cloud Datastore index using gcloud datastore indexes create.
  • C. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.
  • D. Install the cloud-datastore-emulator component using the gcloud components install command.
Discover Answer Hide Answer

D

Question#76

Your company set up a complex organizational structure on Google Cloud. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members, and you want to follow Google-recommended practices. What should you do?

  • A. Add the users to roles/browser role.
  • B. Add the users to roles/iam.roleViewer role.
  • C. Add the users to a group, and add this group to roles/browser.
  • D. Add the users to a group, and add this group to roles/iam.roleViewer role.
Discover Answer Hide Answer

C

Question#77

Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider. What should you do?

  • A. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
  • B. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
  • C. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.
  • D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.
Discover Answer Hide Answer

A

Question#78

Your organization has a dedicated person who creates and manages all service accounts for Google Cloud projects. You need to assign this person the minimum role for projects. What should you do?

  • A. Add the user to roles/iam.roleAdmin role.
  • B. Add the user to roles/iam.securityAdmin role.
  • C. Add the user to roles/iam.serviceAccountUser role.
  • D. Add the user to roles/iam.serviceAccountAdmin role.
Discover Answer Hide Answer

D

Question#79

You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements. You want to select a cost-efficient option. Which storage option should you use?

  • A. Cold Storage
  • B. Nearline Storage
  • C. Regional Storage
  • D. Multi-Regional Storage
Discover Answer Hide Answer

A
Nearline, Coldline, and Archive offer ultra low-cost, highly-durable, highly available archival storage. For data accessed less than once a year, Archive is a cost- effective storage option for long-term preservation of data. Coldline is also ideal for cold storageג€"data your business expects to touch less than once a quarter.
For warmer storage, choose Nearline: data you expect to access less than once a month, but possibly multiple times throughout the year. All storage classes are available across all GCP regions and provide unparalleled sub-second access speeds with a consistent API.
Reference:
https://cloud.google.com/storage/archival

Question#80

A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non- restartable jobs. You want to minimize cost. What should you do?

  • A. Enable node auto-provisioning on the GKE cluster.
  • B. Create a VerticalPodAutscaler for those workloads.
  • C. Create a node pool with preemptible VMs and GPUs attached to those VMs.
  • D. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
Discover Answer Hide Answer

C
Reference:
https://cloud.google.com/kubernetes-engine/docs/how-to/gpus

chevron rightPrevious Nextchevron right