[Oct 24, 2023] Lesson Brilliant PDF for the Associate-Cloud-Engineer Tests Free Updated Today
Get New 2023 Valid Practice Google Cloud Certified Associate-Cloud-Engineer Q&A - Testing Engine
Successful completion of the Google Associate-Cloud-Engineer exam demonstrates that an individual has the knowledge and skills necessary to deploy and manage applications on GCP. Associate-Cloud-Engineer exam covers a wide range of topics, including creating GCP projects, deploying applications, networking, storage, compute, and security. Candidates who pass the exam will be able to demonstrate their proficiency in using GCP services to design and deploy highly available, scalable, and secure applications. Google Associate Cloud Engineer Exam certification is highly valued in the industry and can open up new job opportunities for individuals seeking to advance their careers in cloud computing.
NEW QUESTION # 60
You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?
- A. 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic.
2. Call your application on Cloud Run from the Cloud Function for every message. - B. 1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal.
2. Create a Cloud Pub/Sub subscription for that topic.
3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application. - C. 1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run.
2. Create a Cloud Pub/Sub subscription for that topic.
3. Make your application pull messages from that subscription. - D. 1. Create a service account.
2. Give the Cloud Run Invoker role to that service account for your Cloud Run application.
3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint.
Answer: B
NEW QUESTION # 61
You will have several applications running on different Compute Engine instances in the same project. You want to specify at a more granular level the service account each instance uses when calling Google Cloud APIs. What should you do?
- A. After starting the instances, use gcloud compute instances update to specify a Service Account for each instance
- B. When creating the instances, assign the name of each Service Account as instance metadata
- C. When creating the instances, specify a Service Account for each instance
- D. After starting the instances, use gcloud compute instances update to assign the name of the relevant Service Account as instance metadata
Answer: C
Explanation:
Explanation
https://cloud.google.com/compute/docs/access/service-accounts#associating_a_service_account_to_an_instance
NEW QUESTION # 62
Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?
- A. Download and deploy the Jenkins Java WAR to App Engine Standard.
- B. Create a new Compute Engine instance and install Jenkins through the command line interface.
- C. Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.
- D. Use GCP Marketplace to launch the Jenkins solution.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/solutions/using-jenkins-for-distributed-builds-on-compute-engine
NEW QUESTION # 63
You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs.
What should you do?
- A. Migrate to use a Regional SSD on the instance.
- B. Migrate to use a Local SSD on the instance.
- C. Increase the size of the disk to 1 TB.
- D. Increase the allocated CPU to the instance.
Answer: B
Explanation:
Explanation
Standard persistent disks are efficient and economical for handling sequential read/write operations, but they aren't optimized to handle high rates of random input/output operations per second (IOPS). If your apps require high rates of random IOPS, use SSD persistent disks. SSD persistent disks are designed for single-digit millisecond latencies. Observed latency is application specific.
NEW QUESTION # 64
You need to manage a Cloud Spanner Instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?
- A. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. Use database query statistics to identity queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.
- B. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45% If you exceed this threshold, add nodes lo your instance.
- C. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65% If you exceed this threshold, add nodes to your instance
- D. Create an alert in Cloud Monitoring to alert when the percentage to high priority CPU utilization reaches 45% Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage
Answer: D
Explanation:
https://cloud.google.com/spanner/docs/cpu-utilization#recommended-max
NEW QUESTION # 65
You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?
- A. Open the IAM & admin console to review IAM policies for Cloud Spanner roles.
- B. Go to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.
- C. Go to the Stackdriver Monitoring console and review information for Cloud Spanner.
- D. Open the Cloud Spanner console to review configurations.
Answer: B
Explanation:
Stackdriver logging allows filtering of logs based on resource (i.e. Cloud Spanner) then sub category of granting access will provide info as to when a role was granted to the user.
NEW QUESTION # 66
Your company developed a mobile game that is deployed on Google Cloud. Gamers are connecting to the game with their personal phones over the Internet. The game sends UDP packets to update the servers about the gamers' actions while they are playing in multiplayer mode. Your game backend can scale over multiple virtual machines (VMs), and you want to expose the VMs over a single IP address. What should you do?
- A. Configure an Internal UDP load balancer in front of the application servers.
- B. Configure an External Network load balancer in front of the application servers.
- C. Configure an External HTTP(s) load balancer in front of the application servers.
- D. Configure an SSL Proxy load balancer in front of the application servers.
Answer: D
Explanation:
https://cloud.google.com/solutions/connecting-securely
NEW QUESTION # 67
You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?
- A. Run a select count (*) to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.
- B. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
- C. Use the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.
- D. Use the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.
Answer: C
Explanation:
Reference:
https://cloud.google.com/bigquery/docs/estimate-costs
NEW QUESTION # 68
You have a 20 GB file that you need to securely share with some contractors. They need it as fast as possible. Which steps would get them the file quickly and securely?
- A. Set up a VPC with a custom subnet. Create a subnet tunnel. Upload the file to a network share. Grant the contractors temporary access.
- B. Using composite objects and parallel uploads to upload the file to Cloud Storage quickly. Then generate a signed URL and securely share it with the contractors.
- C. Upload the file to Cloud Storage. Grant the allAuthenticated users token view permissions.
- D. Upload the file to Bigtable using the bulk data import tool. Then provide the contractors with read access to the database.
Answer: B
NEW QUESTION # 69
Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?
- A. Contact [email protected] with your bank account details and request a corporate billing account for your company.
- B. Create a ticket with Google Support and wait for their call to share your credit card details over the phone.
- C. In the Google Platform Console, go to the Resource Manage and move all projects to the root Organizarion.
- D. In the Google Cloud Platform Console, create a new billing account and set up a payment method.
Answer: D
NEW QUESTION # 70
You need to manage a Cloud Spanner Instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?
- A. Create an alert in Cloud Monitoring to alert when the percentage ot high priority CPU utilization reaches 45%.
Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage. - B. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%.
Use database query statistics to identity queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage. - C. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45%.
If you exceed this threshold, add nodes lo your instance. - D. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%.
If you exceed this threshold, add nodes to your instance.
Answer: D
Explanation:
Increase instances on single region if CPU above 65%
https://cloud.google.com/spanner/docs/cpu-utilization#recommended-max
NEW QUESTION # 71
You are assisting a new Google Cloud user who just installed the Google Cloud SDK on their VM. The server needs access to Cloud Storage. The user wants your help to create a new storage bucket. You need to make this change in multiple environments. What should you do?
- A. Use a local SSD to improve performance of the VM for the targeted workload
- B. Use a Persistent Disk SSD in the same zone as the VM to improve performance of the VM
- C. Use the gsutii command to create a storage bucket in the same region as the VM
- D. Use a Deployment Manager script to automate creating storage buckets in an appropriate region
Answer: D
NEW QUESTION # 72
You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment. What should you do?
- A. Use gcloud to create the new project and to copy the deployed application to the new project.
- B. Create a Deployment Manager configuration file that copies the current App Engine deployment into a new project.
- C. Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project.
- D. Use gcloud to create the new project, and then deploy your application to the new project.
Answer: D
Explanation:
You can deploy to a different project by using -project flag.
By default, the service is deployed the current project configured via:
$ gcloud config set core/project PROJECT
To override this value for a single deployment, use the -project flag:
$ gcloud app deploy ~/my_app/app.yaml -project=PROJECT
Ref: https://cloud.google.com/sdk/gcloud/reference/app/deploy
NEW QUESTION # 73
Your development team has asked you to set up an external TCP load balancer with SSL offload. Which load balancer should you use?
- A. HTTPS load balancer
- B. HTTP load balancer
- C. SSL proxy
- D. TCP proxy
Answer: A,C
NEW QUESTION # 74
Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider. What should you do?
- A. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
- B. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.
- C. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
- D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.
Answer: C
Explanation:
https://support.google.com/cloudidentity/answer/6262987?hl=en&ref_topic=7558767
NEW QUESTION # 75
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?
- A. Create a new VPC, and set up VPC peering with the existing VPC.
- B. Add an alias IP range to the subnet used by the GKE clusters.
- C. Create a new subnet in the same region as the subnet being used.
- D. Expand the CIDR range of the relevant subnet for the cluster.
Answer: A
Explanation:
To create a VPC peering connection, first create a request to peer with another VPC.
NEW QUESTION # 76
All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States (US). What should you do?
- A. Create an organization to contain all the dev projects. Create an Identity and Access Management (1AM) policy to limit the resources in US regions.
- B. Create a folder to contain all the dev projects Create an organization policy to limit resources in US locations.
- C. Create an Identity and Access Management <IAM) policy to restrict the resources locations in the US.
Apply the policy to all dev projects. - D. Create an Identity and Access Management (IAM)policy to restrict the resources locations in all dev projects. Apply the policy to all dev roles.
Answer: C
NEW QUESTION # 77
Your company has multiple projects linked to a single billing account in Google Cloud. You need to visualize the costs with specific metrics that should be dynamically calculated based on company-specific criteri a. You want to automate the process. What should you do?
- A. In the Google Cloud console, use the export functionality of the Cost table. Create a Looker Studiodashboard on top of the CSV export.
- B. Configure Cloud Billing data export to BigOuery for the billing account. Create a Looker Studio dashboard on top of the BigOuery export.
- C. In the Google Cloud console, visualize the costs related to the projects in the Cost breakdown section.
- D. In the Google Cloud console, visualize the costs related to the projects in the Reports section.
Answer: B
NEW QUESTION # 78
You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API.
You want to make sure your application can use Cloud Pub/Sub. What should you do?
- A. Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
- B. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
- C. Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
- D. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
Answer: B
NEW QUESTION # 79
While working on a project, an application administrator has been given the responsibility of managing all resources. He wants to delegate the responsibility of managing the existing service accounts to another administrator. He will also be responsible to manage the other service accounts that will be created. Which of the following is the best way to delegate the privileges required to manage all the service accounts?
- A. Granting iam.serviceAccountUser to the administrator at the service account level
- B. Granting iam.serviceProjectAccountUser to the administrator at the service account level
- C. Granting iam.serviceAccountUser to the administrator at the project level
- D. Granting iam.serviceProjectAccountUser to the administrator at the project level
Answer: C
NEW QUESTION # 80
Your company has 5 TB of testing data stored in the production database of a testing tool name Quality Center. The data is being used to create a real-time analytics system which is causing the slow response to the tester while using the tool.
What should you do the improve the load on the database?
- A. Scale the database instance
- B. Set up Multi-AZ
- C. Run the analytics query only weekends
- D. Set up a read replica
Answer: D
NEW QUESTION # 81
......
Google Associate Cloud Engineer certification is highly valued in the industry and provides a competitive edge to the candidate. Google Associate Cloud Engineer Exam certification demonstrates that the individual has the necessary skills and knowledge to work on the Google Cloud Platform effectively. Moreover, this certification is a stepping stone for individuals who wish to pursue advanced cloud certifications such as the Google Professional Cloud Architect or the Google Professional Cloud Developer.
Associate-Cloud-Engineer Dumps PDF - 100% Passing Guarantee: https://lead2pass.troytecdumps.com/Associate-Cloud-Engineer-troytec-exam-dumps.html