Google Associate Cloud Engineer

• #161

  Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?

  • ATurn on Data Access Logs for the buckets they want to audit, and then build a query in the log viewer that filters on Cloud Storage.
  • BAssign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs.
  • CAssign the appropriate permissions, and the use Cloud Monitoring to review metrics.
  • DUse the export logs API to provide the Admin Activity Audit Logs in the format they want.
  उत्तर दिखाएँ
• #162

  Your company has embraced a hybrid cloud strategy where some of the applications are deployed on Google Cloud. A Virtual Private Network (VPN) tunnel connects your Virtual Private Cloud (VPC) in Google Cloud with your company's on-premises network. Multiple applications in Google Cloud need to connect to an on-premises database server, and you want to avoid having to change the IP configuration in all of your applications when the IP of the database changes. What should you do?

  • AConfigure Cloud NAT for all subnets of your VPC to be used when egressing from the VM instances.
  • BCreate a private zone on Cloud DNS, and configure the applications with the DNS name.
  • CConfigure the IP of the database as custom metadata for each instance, and query the metadata server.
  • DQuery the Compute Engine internal DNS from the applications to retrieve the IP of the database.
  उत्तर दिखाएँ
• #163

  You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

  • A1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend. 2. Set the service's externalTrafficPolicy to Cluster. 3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
  • B1. In GKE, create a Service of type NodePort that uses the application's Pods as backend. 2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC. 3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes. 4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.
  • C1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend. 2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal 3. Peer the two VPCs together. 4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
  • D1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend. 2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances. 3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
  उत्तर दिखाएँ
• #164

  You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?

  • AReserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.
  • BReserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.
  • CUse the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.
  • DStart the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.
  उत्तर दिखाएँ
• #165

  You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements. You want to select a cost-efficient option. Which storage option should you use?

  • ACold Storage.
  • BNearline Storage.
  • CRegional Storage.
  • DMulti-Regional Storage.
  उत्तर दिखाएँ
• #166

  Your company is moving its entire workload to Compute Engine. Some servers should be accessible through the Internet, and other servers should only be accessible over the internal network. All servers need to be able to talk to each other over specific ports and protocols. The current on-premises network relies on a demilitarized zone (DMZ) for the public servers and a Local Area Network (LAN) for the private servers. You need to design the networking infrastructure on Google Cloud to match these requirements. What should you do?

  • A1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.
  • B1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.
  • C1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.
  • D1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.
  उत्तर दिखाएँ
• #167

  You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

  • AUse App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
  • BUse Cloud Functions and configure the bucket as a trigger resource.
  • CUse Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
  • DUse Dataflow as a batch job, and configure the bucket as a data source.
  उत्तर दिखाएँ
• #168

  You need to select and configure compute resources for a set of batch processing jobs. These jobs take around 2 hours to complete and are run nightly. You want to minimize service costs. What should you do?

  • ASelect Google Kubernetes Engine. Use a single-node cluster with a small instance type.
  • BSelect Google Kubernetes Engine. Use a three-node cluster with micro instance types.
  • CSelect Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
  • DSelect Compute Engine. Use VM instance types that support micro bursting.
  उत्तर दिखाएँ
• #169

  Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention.

  • ACreate an export to the sink that saves logs from Cloud Audit to BigQuery.
  • BCreate an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
  • CWrite a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
  • DExport these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
  उत्तर दिखाएँ
• #170

  Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

  • AUse Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
  • BUse the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
  • CExport users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
  • DAsk each employee to create a Google account using self signup. Require that each employee use their company email address and password.
  उत्तर दिखाएँ
• #171

  You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers' Pods. What should you do?

  • AUse Binary Authorization and whitelist only the container images used by your customers' Pods.
  • BUse the Container Analysis API to detect vulnerabilities in the containers used by your customers' Pods.
  • CCreate a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customers' Pods.
  • DUse the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google.com/gke-os-distribution: cos_containerd to the specification of your customers' Pods.
  उत्तर दिखाएँ
• #172

  You are analyzing Google Cloud Platform service costs from three separate projects. You want to use this information to create service cost estimates by service type, daily and monthly, for the next six months using standard query syntax. What should you do?

  • AExport your bill to a Cloud Storage bucket, and then import into Cloud Bigtable for analysis.
  • BExport your bill to a Cloud Storage bucket, and then import into Google Sheets for analysis.
  • CExport your transactions to a local file, and perform analysis with a desktop tool.
  • DExport your bill to a BigQuery dataset, and then write time window-based SQL queries for analysis.
  उत्तर दिखाएँ
• #173

  You have a single binary application that you want to run on Google Cloud Platform. You decided to automatically scale the application based on underlying infrastructure CPU usage. Your organizational policies require you to use Virtual Machines directly. You need to ensure that the application scaling is operationally efficient and completed as quickly as possible. What should you do?

  • ACreate a Google Kubernetes Engine cluster, and use horizontal pod autoscaling to scale the application.
  • BCreate an instance template, and use the template in a Managed Instance Group with autoscaling configured.
  • CCreate an instance template, and use the template in a Managed Instance Group that scales up and down based on the time of day.
  • DUse a set of third-party tools to build automation around scaling the application up and down, based on Stackdriver CPU usage monitoring.
  उत्तर दिखाएँ
• #174

  You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection. You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?

  • AUse the GCP Console to transfer the file instead of gsutil.
  • BEnable parallel composite uploads using gsutil on the file transfer.
  • CDecrease the TCP window size on the machine initiating the transfer.
  • DChange the storage class of the bucket from Nearline to Multi-Regional.
  उत्तर दिखाएँ
• #175

  You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?

  • ACreate a Cloud Bigtable cluster, and use the HBase API.
  • BDeploy MongoDB Atlas from the Google Cloud Marketplace.
  • CDownload a MongoDB installation package, and run it on Compute Engine instances.
  • DDownload a MongoDB installation package, and run it on a Managed Instance Group.
  उत्तर दिखाएँ
• #176

  You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

  • ACreate a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.
  • BCreate a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.
  • CCreate a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
  • DCreate a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
  उत्तर दिखाएँ
• #177

  You are given a project with a single Virtual Private Cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?

  • A1. Create a subnetwork in the same VPC, in europe-west1. 2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
  • B1. Create a VPC and a subnetwork in europe-west1. 2. Expose the application with an internal load balancer. 3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.
  • C1. Create a subnetwork in the same VPC, in europe-west1. 2. Use Cloud VPN to connect the two subnetworks. 3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
  • D1. Create a VPC and a subnetwork in europe-west1. 2. Peer the 2 VPCs. 3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
  उत्तर दिखाएँ
• #178

  You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google-recommended practices to obtain the combined logs for all projects. What should you do?

  • ANavigate to Stackdriver Logging and select resource.labels.project_id="".
  • BCreate a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
  • CCreate a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
  • DConfigure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.
  उत्तर दिखाएँ
• #179

  You have a web application deployed as a Managed Instance Group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic. You want to ensure that the available capacity does not decrease during the deployment. What should you do?

  • APerform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.
  • BPerform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0.
  • CCreate a new Managed Instance Group with an updated instance template. Add the group to the backend service for the load balancer. When all instances in the new Managed Instance Group are healthy, delete the old Managed Instance Group.
  • DCreate a new instance template with the new application version. Update the existing Managed Instance Group with the new instance template. Delete the instances in the Managed Instance Group to allow the Managed Instance Group to recreate the instance using the new instance template.
  उत्तर दिखाएँ
• #180

  Your application running on GKE needs to access secrets like API keys and passwords. What is the most secure way to manage these secrets?

  • AStore in ConfigMaps
  • BUse Kubernetes Secrets
  • CUse Google Secret Manager
  • DHardcode in container images
  उत्तर दिखाएँ

अपना स्कोर ट्रैक करना, समयबद्ध मॉक परीक्षा देना और AI व्याख्या पाना चाहते हैं? निःशुल्क खाता बनाएँ