[Oct 03, 2022] Passing Key To Getting Associate-Cloud-Engineer Certified Exam Engine PDF
Associate-Cloud-Engineer Exam Dumps Pass with Updated Oct-2022 Tests Dumps
NEW QUESTION 101
You have a Compute Engine instance hosting an application used between 9 AM and 6 PM on weekdays. You want to back up this instance daily for disaster recovery purposes. You want to keep the backups for 30 days. You want the Google-recommended solution with the least management overhead and the least number of services. What should you do?
- A. 1. Update your instances' metadata to add the following value: snapshot-schedule: 0 1 * * *
2. Update your instances' metadata to add the following value: snapshot-retention: 30 - B. 1. Create a Cloud Function that creates a snapshot of your instance's disk.
2. Create a Cloud Function that deletes snapshots that are older than 30 days.
3. Use Cloud Scheduler to trigger both Cloud Functions daily at 1:00 AM. - C. 1. Create a bash script in the instance that copies the content of the disk to Cloud Storage.
2. Create a bash script in the instance that deletes data older than 30 days in the backup Cloud Storage bucket.
3. Configure the instance's crontab to execute these scripts daily at 1:00 AM. - D. 1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk.
2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters:
- Schedule frequency: Daily
- Start time: 1:00 AM ?2:00 AM
- Autodelete snapshots after 30 days
Answer: D
NEW QUESTION 102
You have a Dockerfile that you need to deploy on Kubernetes Engine. What should you do?
- A. Use gcloud app deploy <dockerfilename>.
- B. Use kubectl app deploy <dockerfilename>.
- C. Create a docker image from the Dockerfile and upload it to Cloud Storage.
Create a Deployment YAML file to point to that image.
Use kubectl to create the deployment with that file. - D. Create a docker image from the Dockerfile and upload it to Container Registry.
Create a Deployment YAML file to point to that image.
Use kubectl to create the deployment with that file.
Answer: D
Explanation:
https://cloud.google.com/kubernetes-engine/docs/tutorials/hello-app
NEW QUESTION 103
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task.
You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. When creating the VM, use Intel Skylake as the CPU platform.
- B. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
- C. When creating the VM, use machine type n1-standard-96.
- D. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
Answer: B
NEW QUESTION 104
You want to configure 10 Compute Engine instances for availability when maintenance occurs.
Your requirements state that these instances should attempt to automatically restart if they crash.
Also, the instances should be highly available including during system maintenance. What should you do?
- A. Create an instance group for the instance.
Verify that the `Advanced creation options' setting for `do not retry machine creation' is set to off. - B. Create an instance template for the instances.
`Automatic Restart' to off. Set `On-host maintenance' to Terminate VM instances.
Add the instance template to an instance group. - C. Create an instance template for the instances.
Set the `Automatic Restart' to on. Set the `On-host maintenance' to Migrate VM instance.
Add the instance template to an intsance group. - D. Create an instance group for the instances.
Set the `Autohealing' health check to healthy (HTTP).
Answer: C
Explanation:
Configure an instance's maintenance behavior and automatic restart setting using the onHostMaintenance and automaticRestart properties. All instances are configured with default values unless you explicitly specify otherwise.
onHostMaintenance: Determines the behavior when a maintenance event occurs that might cause your instance to reboot.
[Default] migrate, which causes Compute Engine to live migrate an instance when there is a maintenance event.
terminate, which terminates an instance instead of migrating it.
NEW QUESTION 105
You want to verify the IAM users and roles assigned within a GCP project named my-project. What should you do?
- A. Run gcloud iam roles list. Review the output section.
- B. Navigate to the project and then to the Roles section in the GCP Console. Review the roles and status.
- C. Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles.
- D. Run gcloud iam service-accounts list. Review the output section.
Answer: B
NEW QUESTION 106
You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements. What should you do?
- A. Enable Data Access audit logs for the Cloud Storage API.
- B. Enable the Identity Aware Proxy API on the project.
- C. Allow only a single Service Account access to read the data.
- D. Scan the bucker using the Data Loss Prevention API.
Answer: A
Explanation:
Reference:
https://cloud.google.com/storage/docs/audit-logs
NEW QUESTION 107
30. You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images. The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires. The other microservices are workloads that are optimized for n1-standard machine types. You need to optimize your cluster so that all workloads are using resources as efficiently as possible. What should you do?
- A. Assign the pods of the image rendering microservice a higher pod priority than the older microservices
- B. Use the node pool with general-purpose machine type nodes for lite mage rendering microservice Create a nodepool with compute-optimized machine type nodes for the other microservices
- C. Create a node pool with compute-optimized machine type nodes for the image rendering microservice Use the node pool with general-purpose machine type nodes for the other microservices
- D. Configure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment Keep the resource requests for the other microservices at the default
Answer: C
NEW QUESTION 108
You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance.
What should you do?
- A. Configure your Cloud Spanner instance to be multi-regional
- B. Enable the Cloud Spanner API
- C. Grant yourself the IAM role of Cloud Spanner Admin
- D. Create a new VPC network with subnetworks in all desired regions
Answer: A
NEW QUESTION 109
You have been asked to automate the infrastructure deployment using Google Deployment Manager service. Which all formats do Deployment manager template supports?
- A. JSON
- B. YAML
- C. Powershell
- D. Python
Answer: B,D
NEW QUESTION 110
You've created a new "Custom Role" for a specific new job role inside your company. The role consisted of several permissions; some had a status of "Supported" others a status of "Testing." The role has been working for weeks; however, some permissions recently stopped working. What is the most likely cause for this?
- A. Your account has been compromised by hackers.
- B. The custom role has reached its expiration period.
- C. The latest Google applied updates reset all of the custom roles.
- D. One or more permissions with a status of "Testing" have changed.
Answer: A,D
NEW QUESTION 111
You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube-systemnamespace of the cluster. You want a solution that uses the fewest possible services. What should you do?
- A. In the cluster's definition in Deployment Manager, add a metadata that has kube-systemas key and the DaemonSet manifest as value.
- B. With Deployment Manager, create a Compute Engine instance with a startup script that uses kubectlto create the DaemonSet.
- C. Add the cluster's API as a new Type Provider in Deployment Manager, and use the new type to create the DaemonSet.
- D. Use the Deployment Manager Runtime Configurator to create a new Config resource that contains the DaemonSet definition.
Answer: B
Explanation:
Explanation/Reference: https://cloud.google.com/kubernetes-engine/docs/how-to/cluster-access-for-kubectl
NEW QUESTION 112
You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?
- A. Deploy the application on Kubernetes Engine.
For a now release, create a new deployment for the new version Update the service e to use the now deployment. - B. Deploy the application on App Engine.
For each update, create a new service.
Configure traffic splitting to send a small percentage of traffic to the new service. - C. Deploy me application on App Engine.
For each update, create a new version of the same service.
Configure traffic splitting to send a small percentage of traffic to the new version - D. Deploy the application on Kubernetes Engine.
For a new release, update the deployment to use the new version
Answer: C
NEW QUESTION 113
You need to manage multiple Google Cloud projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple projects. What should you do?
- A. 1. Create a configuration for each project you need to manage.
2. Use gcloud initto update the configuration values when you need to work with a non-default project - B. 1. Use the default configuration for one project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned Google Cloud projects. - C. 1. Use the default configuration for one project you need to manage.
2. Use gcloud initto update the configuration values when you need to work with a non-default project. - D. 1. Create a configuration for each project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned Google Cloud projects.
Answer: C
NEW QUESTION 114
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event.
You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?
- A. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing
- B. Use a custom mode VPC network, configure static routes, and use active/passive routing
- C. Use an automatic mode VPC network, configure static routes, and use active/active routing
- D. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
Answer: A
NEW QUESTION 115
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted.
You want to migrate this workload to the cloud while minimizing cost. What should you do?
- A. Migrate the workload to a Compute Engine Preemptible VM.
- B. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
- C. Create an Instance Template with Preemptible VMs On.
Create a Managed Instance Group from the template and adjust Target CPU Utilization.
Migrate the workload. - D. Migrate the workload to a Compute Engine VM.
Start and stop the instance as needed.
Answer: B
Explanation:
https://cloud.google.com/kubernetes-engine/docs/tutorials/migrating-node-pool
NEW QUESTION 116
You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP.
You want to make sure it is reachable by clients over that port. What should you do?
- A. Add a network tag of your choice to the instance running the LDAP server. Create a firewall rule to allow egress on UDP port 636 for that network tag.
- B. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port
636 for that network tag. - C. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.
- D. Add the network tag allow-udp-636 to the VM instance running the LDAP server.
Answer: B
NEW QUESTION 117
You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?
- A. Create a Cloud Memorystore for Redis instance with 32-GB capacity.
- B. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
- C. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.
- D. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.
Answer: B
NEW QUESTION 118
While working on a project, an application administrator has been given the responsibility of managing all resources. He wants to delegate the responsibility of managing the existing service accounts to another administrator. He will also be responsible to manage the other service accounts that will be created. Which of the following is the best way to delegate the privileges required to manage all the service accounts?
- A. Granting iam.serviceAccountUser to the administrator at the project level
- B. Granting iam.serviceAccountUser to the administrator at the service account level
- C. Granting iam.serviceProjectAccountUser to the administrator at the service account level
- D. Granting iam.serviceProjectAccountUser to the administrator at the project level
Answer: A
NEW QUESTION 119
Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.
You want to resolve the issue. What should you do?
- A. Change the primary key to not have monotonically increasing values.
- B. Add a secondary index on the person_id column.
- C. Create a secondary index using the following Data Definition Language (DDL):
- D. Remove the profile_picture field from the table.
Answer: C
NEW QUESTION 120
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?
- A. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
- B. Link the acquired company's projects to your company's billing account.
- C. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
- D. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
Answer: D
Explanation:
Reference:
https://cloud.google.com/resource-manager/docs/migrating-projects-billing
NEW QUESTION 121
Your organization has a dedicated person who creates and manages all service accounts for Google Cloud projects. You need to assign this person the minimum role for projects. What should you do?
- A. Add the user to roles/iam.serviceAccountUser role.
- B. Add the user to roles/iam.securityAdmin role.
- C. Add the user to roles/iam.roleAdmin role.
- D. Add the user to roles/iam.serviceAccountAdmin role.
Answer: A
Explanation:
Reference:
https://cloud.google.com/iam/docs/creating-managing-service-accounts
NEW QUESTION 122
You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?
- A. Ask your ML team to add the "accelerator: gpu" annotation to their pod specification.
- B. Add a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.
- C. Recreate all the nodes of the GKE cluster to enable GPUs on all of them.
- D. Create your own Kubernetes cluster on top of Compute Engine with nodes that have GPUs. Dedicate this cluster to your ML team.
Answer: C
NEW QUESTION 123
Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure.
You need to assign minimum permissions to these team members and you want to follow Google- recommended practices. What should you do?
- A. Add the users to a group, and add this group to roles/browser role.
- B. Add the users to a group, and add this group to roles/iam.roleViewer role.
- C. Add the users to roles/iam.roleViewer role.
- D. Add the users to roles/browser role.
Answer: A
NEW QUESTION 124
You need to create a new billing account and then link it with an existing Google Cloud Platform project. What should you do?
- A. Verify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing account.
- B. Verify that you are Billing Administrator for the billing account. Create a new project and link the new project to the existing billing account.
- C. Verify that you are Project Billing Manager for the GCP project. Update the existing project to link it to the existing billing account.
- D. Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project.
Answer: B
NEW QUESTION 125
......
Associate-Cloud-Engineer exam questions for practice in 2022 Updated 245 Questions: https://www.practicedump.com/Associate-Cloud-Engineer_actualtests.html
Updated Premium Associate-Cloud-Engineer Exam Engine pdf: https://drive.google.com/open?id=1a7Jhmnac-se0Qk4010K5wrRWs98MsyCo