Pass Google Google Associate Cloud Engineer Exam Exam in First Attempt Guaranteed Updated Dump from 2Pass4sure!
Pass Associate-Cloud-Engineer Exam with 245 Questions - Verified By 2Pass4sure
NEW QUESTION 116
You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes.
Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?
- A. Fill in local SSD. Fill in persistent disk storage and snapshot storage.
- B. Select Add GPUs. Add estimated cost for cluster management.
- C. Select Add GPUs. Fill in persistent disk storage and snapshot storage.
- D. Fill in local SSD. Add estimated cost for cluster management.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/products/calculator#tab=container
NEW QUESTION 117
For analysis purposes, you need to send all the logs from all of your Compute Engine instances to a BigQuery dataset called platform-logs. You have already installed the Stackdriver Logging agent on all the instances. You want to minimize cost. What should you do?
- A. 1. In Stackdriver Logging, create a filter to view only Compute Engine logs.2. Click Create Export.3. Choose BigQuery as Sink Service, and the platform-logs dataset as Sink Destination.
- B. 1. Give the BigQuery Data Editor role on the platform-logs dataset to the service accounts used by your instances.2. Update your instances' metadata to add the following value: logs-destination: bq://platform-logs.
- C. 1. In Stackdriver Logging, create a logs export with a Cloud Pub/Sub topic called logs as a sink.2. Create a Cloud Function that is triggered by messages in the logs topic.3. Configure that Cloud Function to drop logs that are not from Compute Engine and to insert Compute Engine logs in the platform-logs dataset.
- D. 1. Create a Cloud Function that has the BigQuery User role on the platform-logs dataset.2. Configure this Cloud Function to create a BigQuery Job that executes this query:INSERT INTO dataset.platform-logs (timestamp, log)SELECT timestamp, log FROM compute.logsWHERE timestamp > DATE_SUB(CURRENT_DATE(), INTERVAL 1 DAY)3. Use Cloud Scheduler to trigger this Cloud Function once a day.
Answer: A
NEW QUESTION 118
You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re-creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?
- A. Create a managed instance group. Verify that the autoscaling setting is on.
- B. Create a managed instance group. Set the Autohealing health check to healthy (HTTP).
- C. Create an HTTP load balancer with a backend configuration that references an existing instance group. Set the health check to healthy (HTTP).
- D. Create an HTTP load balancer with a backend configuration that references an existing instance group. Define a balancing mode and set the maximum RPS to 10.
Answer: C
NEW QUESTION 119
You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re- creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?
- A. Create a managed instance group. Set the Autohealing health check to healthy (HTTP)
- B. Create a managed instance group. Verify that the autoscaling setting is on.
- C. Create an HTTP load balancer with a backend configuration that references an existing instance group.
Set the health check to healthy (HTTP) - D. Create an HTTP load balancer with a backend configuration that references an existing instance group.
Define a balancing mode and set the maximum RPS to 10.
Answer: B
NEW QUESTION 120
You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes.
Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?
- A. Fill in local SSD. Fill in persistent disk storage and snapshot storage.
- B. Select Add GPUs. Add estimated cost for cluster management.
- C. Select Add GPUs. Fill in persistent disk storage and snapshot storage.
- D. Fill in local SSD. Add estimated cost for cluster management.
Answer: C
NEW QUESTION 121
You need to immediately change the storage class of an existing Google Cloud bucket.
You need to reduce service cost for infrequently accessed files stored in that bucket and for all files that will be added to that bucket in the future. What should you do?
- A. Use the gsutil to rewrite the storage class for the bucket.
Set up Object Lifecycle management on the bucket - B. Create a new bucket and change the default storage class for the bucket import the files from the previous bucket into the new bucket
- C. Use the gsutil to rewrite the storage class for the bucket.
Change the default storage class for the bucket - D. Create a new bucket and change the default storage class for the bucket.
Set up Object Lifecycle management on lite bucket
Answer: A
NEW QUESTION 122
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?
- A. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
- B. Create a node pool with preemptible VMs and GPUs attached to those VMs.
- C. Create a VerticalPodAutscaler for those workloads.
- D. Enable node auto-provisioning on the GKE cluster.
Answer: B
NEW QUESTION 123
Your team has been working towards using desired state configuration for your entire infrastructure, which is why they're excited to store the Kubernetes Deployments in YAML. You created a Kubernetes Deployment with the kubectl apply command and passed on a YAML file. You need to edit the number of replicas. What steps should you take to update the Deployment?
- A. Edit the YAML and push it to Github so that the git triggers deploy the change.
- B. Disregard the YAML file. Use the kubectl scale command.
- C. Edit the number of replicas in the YAML file and rerun the kubectl apply.
- D. Edit the number of replicas in the YAML file and run the kubectl set image command.
Answer: C
NEW QUESTION 124
You have deployed a Django 1.5 Python application to App Engine. This version of Django requires Python 3. Due to some issues, App Engine is trying to run the application using Python
2. Which of the following file would you check and modify (if required) to ensure that Python 3 is used with the application?
- A. app.yaml
- B. services.yaml
- C. cron.yaml
- D. app.config
Answer: A
NEW QUESTION 125
You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?
- A. Install the cloud-datastore-emulator component using the gcloud components install command.
- B. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.
- C. Export Cloud Datastore data using gcloud datastore export.
- D. Create a Cloud Datastore index using gcloud datastore indexes create.
Answer: A
NEW QUESTION 126
You want to verify the IAM users and roles assigned within a GCP project named my-project.
What should you do?
- A. Navigate to the project and then to the Roles section in the GCP Console. Review the roles and status.
- B. Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles.
- C. Run gcloud iam service-accounts list. Review the output section.
- D. Run gcloud iam roles list. Review the output section.
Answer: A
NEW QUESTION 127
You are performing a monthly security check of your Google Cloud environment and want to know who has access to view data stored in your Google Cloud Project. What should you?
- A. Review the IAM permissions for any role that allows for data access.
- B. Enable Audit Logs for all APIs that are related to data storage.
- C. Review the Identity-Aware Proxy settings for each resource.
- D. Create a Data Loss Prevention job.
Answer: A
NEW QUESTION 128
You are building a pipeline to process time-series dat
a. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?
- A. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
- B. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
- C. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
- D. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery
Answer: D
Explanation:
Reference:
https://cloud.google.com/solutions/correlating-time-series-dataflow
NEW QUESTION 129
Your development team has asked you to set up an external TCP load balancer with SSL offload. Which load balancer should you use?
- A. HTTPS load balancer
- B. HTTP load balancer
- C. SSL proxy
- D. TCP proxy
Answer: A,C
NEW QUESTION 130
You need to set up a policy so that videos stored in a specific Cloud Storage Regional bucket are moved to Coldline after 90 days, and then deleted after one year from their creation.
How should you set up the policy?
- A. Use gsutil rewrite and set the Delete action to 275 days (365-90).
- B. Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions.
Set the SetStorageClass action to 90 days and the Delete action to 365 days. - C. Use gsutil rewrite and set the Delete action to 365 days.
- D. Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions.
Set the SetStorageClass action to 90 days and the Delete action to 275 days (365-90)
Answer: D
NEW QUESTION 131
You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube-systemnamespace of the cluster. You want a solution that uses the fewest possible services. What should you do?
- A. Add the cluster's API as a new Type Provider in Deployment Manager, and use the new type to create the DaemonSet.
- B. Use the Deployment Manager Runtime Configurator to create a new Config resource that contains the DaemonSet definition.
- C. With Deployment Manager, create a Compute Engine instance with a startup script that uses kubectlto create the DaemonSet.
- D. In the cluster's definition in Deployment Manager, add a metadata that has kube-systemas key and the DaemonSet manifest as value.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/kubernetes-engine/docs/how-to/cluster-access-for-kubectl
NEW QUESTION 132
You are performing a monthly security check of your Google Cloud environment and want to know who has access to view data stored in your Google Cloud Project. What should you?
- A. Review the IAM permissions for any role that allows for data access.
- B. Enable Audit Logs for all APIs that are related to data storage.
- C. Review the Identity-Aware Proxy settings for each resource.
- D. Create a Data Loss Prevention job.
Answer: A
Explanation:
Explanation/Reference: https://cloud.google.com/compute/docs/access
NEW QUESTION 133
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group.
This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?
- A. Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for that instance. Direct them to use the Cloud Shell to ssh to that instance.
- B. Enable block project wide keys for the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.
- C. Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group.
Distribute the keys to dev1 users and direct them to use their third-party tools to connect. - D. Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role.
Direct them to use the Cloud Shell to ssh to that instance.
Answer: B
NEW QUESTION 134
Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment).
What should you do?
- A. Create a new service with the new version of the application.
Split traffic between this version and the version that is currently running. - B. Create a new revision with the new version of the application.
Add HTTP Load Balancer in front of both revisions. - C. Create a new revision with the new version of the application.
Split traffic between this version and the version that is currently running. - D. Create a new service with the new version of the application.
Add HTTP Load Balancer in front of both services.
Answer: A
NEW QUESTION 135
You're working on creating a script that can extract the IP address of a Kubernetes Service. Your coworker sent you a code snippet that they had saved. Which one is the best starting point for your code?
- A. kubectl get svc
- B. kubectl get svc -o jsonpath='{.items[*].status.loadBalancer.ingress[0].ip}'
- C. kubectl get svc -o html
- D. kubectl get svc -o filtered- json='{.items[*].status.loadBalancer.ingress[0].ip}'
Answer: B
NEW QUESTION 136
You need to track and verity modifications to a set of Google Compute Engine instances in your Google Cloud project. In particular, you want to verify OS system patching events on your virtual machines (VMs). What should you do?
- A. Review the Compute Engine activity logs Select and review the System Event logs
- B. Install the Cloud Logging Agent In Cloud Logging, review the Compute Engine operation logs
- C. Review the Compute Engine activity logs Select and review the Admin Event logs
- D. Install the Cloud Logging Agent In Cloud Logging review the Compute Engine syslog logs
Answer: C
NEW QUESTION 137
You have a Compute Engine instance hosting a production application. You want to receive an email if the instance consumes more than 90% of its CPU resources for more than 15 minutes. You want to use Google services. What should you do?
- A. 1. Create a Stackdriver Workspace, and associate your GCP project with it.
2.Write a script that monitors the CPU usage and sends it as a custom metric to Stackdriver.
3.Create an uptime check for the instance in Stackdriver. - B. 1. Create a consumer Gmail account.
2.Write a script that monitors the CPU usage.
3.When the CPU usage exceeds the threshold, have that script send an email using the Gmail account and smtp.gmail.com on port 25 as SMTP server. - C. 1. Create a Stackdriver Workspace, and associate your Google Cloud Platform (GCP) project with it.
2.Create an Alerting Policy in Stackdriver that uses the threshold as a trigger condition.
3.Configure your email address in the notification channel. - D. 1. In Stackdriver Logging, create a logs-based metric to extract the CPU usage by using this regular expression: CPU Usage: ([0-9] {1,3})%
2.In Stackdriver Monitoring, create an Alerting Policy based on this metric.
3.Configure your email address in the notification channel.
Answer: D
NEW QUESTION 138
You manage an App Engine Service that aggregates and visualizes data from BigQuery. The application is deployed with the default App Engine Service account. The data that needs to be visualized resides in a different project managed by another team. You do not have access to this project, but you want your application to be able to read data from the BigQuery dataset. What should you do?
- A. Ask the other team to grant your default App Engine Service account the role of BigQuery Job User.
- B. Ask the other team to grant your default App Engine Service account the role of BigQuery Data Viewer.
- C. In Cloud IAM of your project, ensure that the default App Engine service account has the role of BigQuery Data Viewer.
- D. In Cloud IAM of your project, grant a newly created service account from the other team the role of BigQuery Job User in your project.
Answer: B
Explanation:
Explanation
The Owner, Editor, and Viewer primitive roles include the BigQuery Admin (roles/bigquery.dataOwner), BigQuery Data Editor (roles/bigquery.dataEditor), and BigQuery Data Viewer (roles/bigquery.dataViewer) roles, respectively. This means the Owner, Editor, and Viewer primitive roles have BigQuery access as defined for the respective BigQuery roles.
NEW QUESTION 139
Your organization has a dedicated person who creates and manages all service accounts for Google Cloud projects. You need to assign this person the minimum role for projects.
What should you do?
- A. Add the user to roles/iam.serviceAccountAdmin role.
- B. Add the user to roles/iam.securityAdmin role.
- C. Add the user to roles/iam.roleAdmin role.
- D. Add the user to roles/iam.serviceAccountUser role.
Answer: A
Explanation:
ServiceAccountAdmin have permission to create Service Accounts.
NEW QUESTION 140
......
Penetration testers simulate Associate-Cloud-Engineer exam: https://www.2pass4sure.com/Google-Cloud-Certified/Associate-Cloud-Engineer-actual-exam-braindumps.html
Free Test Engine For Google Associate Cloud Engineer Exam Certification Exams: https://drive.google.com/open?id=1n1ZAOK63X6Z1uYwbE_crikxIzliTG6DZ