Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Associate-Cloud-Engineer Google Cloud Certified - Associate Cloud Engineer is now Stable and With Pass Result | Test Your Knowledge for Free

Exams4sure Dumps

Associate-Cloud-Engineer Practice Questions

Google Cloud Certified - Associate Cloud Engineer

Last Update 1 day ago
Total Questions : 363

Dive into our fully updated and stable Associate-Cloud-Engineer practice test platform, featuring all the latest Google Cloud Certified exam questions added this week. Our preparation tool is more than just a Google study aid; it's a strategic advantage.

Our free Google Cloud Certified practice questions crafted to reflect the domains and difficulty of the actual exam. The detailed rationales explain the 'why' behind each answer, reinforcing key concepts about Associate-Cloud-Engineer. Use this test to pinpoint which areas you need to focus your study on.

Associate-Cloud-Engineer PDF

Associate-Cloud-Engineer PDF (Printable)
$54.25
$154.99

Associate-Cloud-Engineer Testing Engine

Associate-Cloud-Engineer PDF (Printable)
$59.5
$169.99

Associate-Cloud-Engineer PDF + Testing Engine

Associate-Cloud-Engineer PDF (Printable)
$74.55
$212.99
Question # 11

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

Options:

A.  

Create the instance without a public IP address.

B.  

Create the instance with Private Google Access enabled.

C.  

Create a deny-all egress firewall rule on the VPC network.

D.  

Create a route on the VPC to route all traffic to the instance over the VPN tunnel.

Discussion 0
Question # 12

You are using your personal workstation to develop an application that will be hosted in Google Cloud. You are authenticated using a Google Account (USER). You need to test whether a specific set of permissions assigned to an existing service account (SERVICE_ACCOUNT) are sufficient for a task without handling sensitive secret information. What should you do?

Options:

A.  

Grant USER the IAM role roles/iam.workloadIdentityUser on SERVICE_ACCOUNT.

B.  

Grant USER the IAM role roles/iam.serviceAccountKeyAdmin on SERVICE_ACCOUNT.

C.  

Grant USER the IAM role roles/iam.serviceAccountTokenCreator on SERVICE_ACCOUNT.

D.  

Grant USER the IAM role roles/iam.serviceAccountUser on SERVICE_ACCOUNT.

Discussion 0
Question # 13

You are planning to migrate a database and a backend application to a Standard Google Kubernetes Engine (GKE) cluster. You need to prevent data loss and make sure there are enough nodes available for your backend application based on the demands of your workloads. You want to follow Google-recommended practices and minimize the amount of manual work required. What should you do?

Options:

A.  

Run your database as a StatefulSet. Configure cluster autoscaling to handle changes in the demands of your workloads.

B.  

Run your database as a single Pod. Run the resize command when you notice changes in the demands of your workloads.

C.  

Run your database as a Deployment. Configure cluster autoscaling to handle changes in the demands of your workloads.

D.  

Run your database as a DaemonSet. Run the resize command when you notice changes in the demands of your workloads.

Discussion 0
Question # 14

You are building a data lake on Google Cloud for your Internet of Things (loT) application. The loT application has millions of sensors that are constantly streaming structured and unstructured data to your backend in the cloud. You want to build a highly available and resilient architecture based on Google-recommended practices. What should you do?

Options:

A.  

Stream data to Pub/Sub, and use Dataflow to send data to Cloud Storage

B.  

Stream data to Pub/Sub. and use Storage Transfer Service to send data to BigQuery.

C.  

Stream data to Dataflow, and use Storage Transfer Service to send data to BigQuery.

D.  

Stream data to Dataflow, and use Dataprep by Trifacta to send data to Bigtable.

Discussion 0
Question # 15

(Your company is migrating its workloads to Google Cloud due to an expiring data center contract. The on-premises environment and Google Cloud are not connected. You have decided to follow a lift-and-shift approach, and you plan to modernize the workloads in a future project. Several old applications connect to each other through hard-coded internal IP addresses. You want to migrate these workloads quickly without modifying the application code. You also want to maintain all functionality. What should you do?)

Options:

A.  

Create a VPC with non-overlapping CIDR ranges compared to your on-premises network. When migrating individual workloads, assign each workload a new static internal IP address.

B.  

Migrate your DNS server first. Configure Cloud DNS with a forwarding zone to your migrated DNS server. Then migrate all other workloads with ephemeral internal IP addresses.

C.  

Migrate all workloads to a single VPC subnet. Configure Cloud NAT for the subnet and manually assign a static IP address to the Cloud NAT gateway.

D.  

Create a VPC with the same CIDR ranges as your on-premises network. When migrating individual workloads, assign each workload the same static internal IP address.

Discussion 0
Question # 16

You created a Kubernetes deployment by running kubectl run nginx image=nginx labels=app=prod. Your Kubernetes cluster is also used by a number of other deployments. How can you find the identifier of the pods for this nginx deployment?

Options:

A.  

kubectl get deployments –output=pods

B.  

gcloud get pods –selector=”app=prod”

C.  

kubectl get pods -I “app=prod”

D.  

gcloud list gke-deployments -filter={pod }

Discussion 0
Question # 17

You need a dynamic way of provisioning VMs on Compute Engine. The exact specifications will be in a dedicated configuration file. You want to follow Google’s recommended practices. Which method should you use?

Options:

A.  

Deployment Manager

B.  

Cloud Composer

C.  

Managed Instance Group

D.  

Unmanaged Instance Group

Discussion 0
Question # 18

You are managing resources in a Google Cloud project. A new service account needs the ability to invoke a Cloud Run service. You need to gain the permissions to modify IAM policies for service accounts while adhering to the principle of least privilege. What should you do?

Options:

A.  

Request the roles/run.invoker role for your user account.

B.  

Request the roles/iam.serviceAccountAdmin role for your user account.

C.  

Request the Editor role for your user account.

D.  

Request the Owner role for your user account.

Discussion 0
Question # 19

You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VP

C.  

This instance needs to connect to the application on GK

E.  

You want to minimize effort. What should you do?

Options:

A.  

1. In GKE, create a Service of type LoadBalancer that uses the application ' s Pods as backend.2. Set the service ' s externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

B.  

1. In GKE, create a Service of type NodePort that uses the application ' s Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VP

C.  

3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.

C.  

1. In GKE, create a Service of type LoadBalancer that uses the application ' s Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.

D.  

1. In GKE, create a Service of type LoadBalancer that uses the application ' s Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG ' s instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

Discussion 0
Question # 20

Your company developed an application to deploy on Google Kubernetes Engine. Certain parts of the application are not fault-tolerant and are allowed to have downtime Other parts of the application are critical and must always be available. You need to configure a Goorj e Kubernfl:es Engine duster while optimizing for cost. What should you do?

Options:

A.  

Create a cluster with a single node-pool by using standard VMs. Label the fault-tolerant Deployments as spot-true.

B.  

Create a cluster with a single node-pool by using Spot VMs. Label the critical Deployments as spot-false.

C.  

Create a cluster with both a Spot W node pool and a rode pool by using standard VMs Deploy the critical.deployments on the Spot VM node pool and the fault; tolerant deployments on the node pool by using standard VMs.

D.  

Create a cluster with both a Spot VM node pool and by using standard VMs. Deploy the critical deployments on the mode pool by using standard VMs and the fault-tolerant deployments on the Spot VM node pool.

Discussion 0
Get Associate-Cloud-Engineer dumps and pass your exam in 24 hours!

Free Exams Sample Questions