Pass Google Associate-Cloud-Engineer With VCE4Plus Exam Dumps - Updated on Nov-2021
Fully Updated Associate-Cloud-Engineer Dumps - 100% Same Q&A In Your Real Exam
NEW QUESTION 108
Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment).
What should you do?
- A. Create a new revision with the new version of the application.
Add HTTP Load Balancer in front of both revisions. - B. Create a new service with the new version of the application.
Split traffic between this version and the version that is currently running. - C. Create a new revision with the new version of the application.
Split traffic between this version and the version that is currently running. - D. Create a new service with the new version of the application.
Add HTTP Load Balancer in front of both services.
Answer: B
NEW QUESTION 109
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements. You want to select a cost-efficient option. Which storage option should you use?
- A. Regional Storage
- B. Cold Storage
- C. Nearline Storage
- D. Multi-Regional Storage
Answer: C
Explanation:
Nearline, Coldline, and Archive offer ultra low-cost, highly-durable, highly available archival storage. For data accessed less than once a year, Archive is a cost-effective storage option for long-term preservation of data.
Coldline is also ideal for cold storage-data your business expects to touch less than once a quarter. For warmer storage, choose Nearline: data you expect to access less than once a month, but possibly multiple times throughout the year. All storage classes are available across all GCP regions and provide unparalleled sub-second access speeds with a consistent API.
Reference:
https://cloud.google.com/storage/archival
NEW QUESTION 110
You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?
- A. Configure an internal TCP load balancer.
- B. Configure an external SSL proxy load balancer.
- C. Configure an external TCP proxy load balancer.
- D. Configure an HTTP(S) load balancer.
Answer: D
Explanation:
Reference:
https://cloud.google.com/load-balancing/docs/https/
NEW QUESTION 111
Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling.
What should you do?
- A. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.
- B. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
- C. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
- D. Tag all the instances with the same network tag.
Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
Answer: D
Explanation:
https://cloud.google.com/vpc/docs/firewalls
NEW QUESTION 112
You're working as a Cloud Engineer for a small company. The lead developer needs to create some new projects in order to get started with deploying the codebase. She tried to create a project and received an error. She messaged you on Slack to ask for help, though, she couldn't recall the exact error message. You checked and found that she does have Project Creator permissions. Keeping in mind the principle of least privilege, what is the best role to grant her so that she can create billable projects?
- A. The "Billing Account User" role.
- B. The "Billing Account Viewer" role.
- C. The "Project Owner" role.
- D. The "Billing Account Administrator" role.
Answer: A
NEW QUESTION 113
You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide the application with access to Cloud Storage. What should you do?
- A. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.3. Configure your servers to use that instance as a proxy to access Cloud Storage.
- B. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com.
- C. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.3. Configure your new instances to use this ILB as proxy.
- D. 1. Use nslookup to get the IP address for storage.googleapis.com.2. Negotiate with the security team to be able to give a public IP address to the servers.3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.
Answer: B
NEW QUESTION 114
Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?
- A. In the Google Cloud Platform Console, create a new billing account and set up a payment method.
- B. Contact [email protected] with your bank account details and request a corporate billing account for your company.
- C. Create a ticket with Google Support and wait for their call to share your credit card details over the phone.
- D. In the Google Platform Console, go to the Resource Manage and move all projects to the root Organizarion.
Answer: D
Explanation:
https://cloud.google.com/resource-manager/docs/migrating-projects-billing Once a Google Cloud Organization resource has been created for your domain, you can move your existing projects into the organization.
NEW QUESTION 115
Your security team has asked you to present them some numbers based on the logs that are exported to BigQuery. Due to the team structure, your manager has asked you to determine how much the query will cost.
What's the best way to determine the cost?
- A. Create the query and execute the query in "cost estimation mode"
- B. Create the query and use the dry-run option to determine the amount of data read, then use the price calculator to determine the cost.
- C. It's not possible to estimate the cost of a query.
- D. Use the BigQuery index viewer to determine how many records you'll be reading.
Answer: B
NEW QUESTION 116
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google- recommended practices to obtain the combined logs for all projects. What should you do?
- A. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
- B. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
- C. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.
- D. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
Answer: D
NEW QUESTION 117
You want to verify the IAM users and roles assigned within a GCP project named my-project. What should you do?
- A. Run gcloud iam service-accounts list. Review the output section.
- B. Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles.
- C. Navigate to the project and then to the Roles section in the GCP Console. Review the roles and status.
- D. Run gcloud iam roles list. Review the output section.
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 118
Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?
- A. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.
- B. Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
- C. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
- D. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
Answer: B
Explanation:
Explanation/Reference: https://cloud.google.com/vpc/docs/firewalls
NEW QUESTION 119
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?
- A. Select the latest available cluster version for your GKE cluster.
- B. Enable the Node Auto-Upgrades feature for your GKE cluster.
- C. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.
- D. Enable the Node Auto-Repair feature for your GKE cluster.
Answer: B
Explanation:
https://cloud.google.com/kubernetes-engine/versioning-and-upgrades
NEW QUESTION 120
A media company asked a Solutions Architect to design a highly available storage solution to serve as a centralized document store for their Amazon EC2 instances. The storage solution needs to be POSIX- compliant, scale dynamically, and be able to serve up to 100 concurrent EC2 instances.
Which solution meets these requirements?
- A. Create an Amazon EBS volume and allow multiple users to mount that volume to their EC2 instance(s).
- B. Create an Amazon S3 bucket and store all of the documents in this bucket.
- C. Use Amazon Glacier to store all of the documents.
- D. Create an Amazon Elastic File System (Amazon EFS) to store and share the documents.
Answer: D
Explanation:
Explanation/Reference:
Reference https://aws.amazon.com/efs/enterprise-applications/
NEW QUESTION 121
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?
- A. Use gcloud iam roles copyand specify the production project as the destination project.
- B. Use gcloud iam roles copyand specify your organization as the destination organization.
- C. In the Google Cloud Platform Console, use the 'create role from role' functionality.
- D. In the Google Cloud Platform Console, use the 'create role' functionality and select all applicable permissions.
Answer: B
Explanation:
Explanation/Reference: https://cloud.google.com/sdk/gcloud/reference/iam/roles/copy
NEW QUESTION 122
You have deployed an application on a single Compute Engine instance. The application writes logs to disk.
Users start reporting errors with the application. You want to diagnose the problem. What should you do?
- A. Configure a Health Check on the instance and set a Low Healthy Threshold value.
- B. Connect to the instance's serial console and read the application logs.
- C. Install and configure the Cloud Logging Agent and view the logs from Cloud Logging.
- D. Navigate to Cloud Logging and view the application logs.
Answer: D
NEW QUESTION 123
Your organization has a dedicated person who creates and manages all service accounts for Google Cloud projects. You need to assign this person the minimum role for projects. What should you do?
- A. Add the user to roles/iam.roleAdmin role.
- B. Add the user to roles/iam.serviceAccountUser role.
- C. Add the user to roles/iam.serviceAccountAdmin role.
- D. Add the user to roles/iam.securityAdmin role.
Answer: B
Explanation:
Reference:
https://cloud.google.com/iam/docs/creating-managing-service-accounts
NEW QUESTION 124
You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers' Pods. What should you do?
- A. Create a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customers' Pods.
- B. Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google.com/gke-os-distribution: cos_containerd to the specification of your customers' Pods.
- C. Use Binary Authorization and whitelist only the container images used by your customers' Pods.
- D. Use the Container Analysis API to detect vulnerabilities in the containers used by your customers' Pods.
Answer: A
Explanation:
Reference:
https://cloud.google.com/kubernetes-engine/sandbox/
NEW QUESTION 125
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account.
You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?
- A. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
- B. Link the acquired company's projects to your company's billing account.
- C. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
- D. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
Answer: D
NEW QUESTION 126
......
Below is a salary of Associate Cloud Engineer Certified Professional
- United States: 71,399 USD
- India: 5092569.37 INR
- Europe: 64758.65 Euro
- England: 54610.82 Pound
Exam Topics
As mentioned above, applicants for the title of Google Cloud certified must have practical experience with on-premises solutions and public clouds. Thus, on the official test they should be able to demonstrate skills on the following exam topics:
- ensuring the successful operation of a cloud solution by Compute Engine resources management;
- planning and configuration of a cloud solution, including compute resources, data storage options, and network resources;
- setting up a cloud solution environment, which includes managing billing configuration and CLI installation;
- deploying and implementing cloud solutions such as Cloud Run, App Engine, and Cloud Functions;
- configuring access and security, including service accounts and audit logs.
Latest Associate-Cloud-Engineer Exam Dumps - Valid and Updated Dumps: https://www.vce4plus.com/Google/Associate-Cloud-Engineer-valid-vce-dumps.html
Verified Associate-Cloud-Engineer Exam Questions Certain Success: https://drive.google.com/open?id=13Xf6QLHIpj4deTftg0qilUlAuaXUem_o