Google Associate Cloud Engineer

• #81

  For analysis purposes, you need to send all the logs from all of your Compute Engine instances to a BigQuery dataset called platform-logs. You have already installed the Cloud Logging agent on all the instances. You want to minimize cost. What should you do?

  • A1. Give the BigQuery Data Editor role on the platform-logs dataset to the service accounts used by your instances. 2. Update your instances' metadata to add the following value: logs-destination: bq://platform-logs.
  • B1. In Cloud Logging, create a logs export with a Cloud Pub/Sub topic called logs as a sink. 2. Create a Cloud Function that is triggered by messages in the logs topic. 3. Configure that Cloud Function to drop logs that are not from Compute Engine and to insert Compute Engine logs in the platform-logs dataset.
  • C1. In Cloud Logging, create a filter to view only Compute Engine logs. 2. Click Create Export. 3. Choose BigQuery as Sink Service, and the platform-logs dataset as Sink Destination.
  • D1. Create a Cloud Function that has the BigQuery User role on the platform-logs dataset. 2. Configure this Cloud Function to create a BigQuery Job that executes this query: INSERT INTO dataset.platform-logs (timestamp, log) SELECT timestamp, log FROM compute.logs WHERE timestamp > DATE_SUB(CURRENT_DATE(), INTERVAL 1 DAY) 3. Use Cloud Scheduler to trigger this Cloud Function once a day.
  Tampilkan jawaban
• #82

  You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?

  • AIn the Log Viewer, filter the logs on severity ˜Error' and the name of the Service Account.
  • BCreate a sink to BigQuery to export all the logs. Create a Data Studio dashboard on the exported logs.
  • CCreate a custom log-based metric for the specific error to be used in an Alerting Policy.
  • DGrant Project Owner access to the Service Account.
  Tampilkan jawaban
• #83

  You need to enable traffic between multiple groups of Compute Engine instances that are currently running two different GCP projects. Each group of Compute Engine instances is running in its own VPC. What should you do?

  • AVerify that both projects are in a GCP Organization. Create a new VPC and add all instances.
  • BVerify that both projects are in a GCP Organization. Share the VPC from one project and request that the Compute Engine instances in the other project use this shared VPC.
  • CVerify that you are the Project Administrator of both projects. Create two new VPCs and add all instances.
  • DVerify that you are the Project Administrator of both projects. Create a new VPC and add all instances.
  Tampilkan jawaban
• #84

  You have a Virtual Machine that is currently configured with 2 vCPUs and 4 GB of memory. It is running out of memory. You want to upgrade the Virtual Machine to have 8 GB of memory. What should you do?

  • ARely on live migration to move the workload to a machine with more memory.
  • BUse gcloud to add metadata to the V. Set the key to required-memory-size and the value to 8 GB.
  • CStop the VM, change the machine type to n1-standard-8, and start the VM.
  • DStop the VM, increase the memory to 8 GB, and start the VM.
  Tampilkan jawaban
• #85

  Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?

  • AGenerate a new SSH key pair. Give the private key to each member of your team. Configure the public key in the metadata of each instance.
  • BAsk each member of the team to generate a new SSH key pair and to send you their public key. Use a configuration management tool to deploy those keys on each instance.
  • CAsk each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the 'compute.osAdminLogin' role to the Google group corresponding to this team.
  • DGenerate a new SSH key pair. Give the private key to each member of your team. Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance.
  Tampilkan jawaban
• #86

  You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

  • ACreate a Cloud Memorystore for Redis instance with 32-GB capacity.
  • BRun it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
  • CPackage it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.
  • DRun it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.
  Tampilkan jawaban
• #87Pilih 2

  You are building an application that processes data files uploaded from thousands of suppliers. Your primary goals for the application are data security and the expiration of aged data. You need to design the application to: Restrict access so that suppliers can access only their own data. Give suppliers write access to data only for 30 minutes. Delete data that is over 45 days old. You have a very short development cycle, and you need to make sure that the application requires minimal maintenance. Which two strategies should you use? (Choose two.)

  • ABuild a lifecycle policy to delete Cloud Storage objects after 45 days.
  • BUse signed URLs to allow suppliers limited time access to store their objects.
  • CSet up an SFTP server for your application, and create a separate user for each supplier.
  • DBuild a Cloud function that triggers a timer of 45 days to delete objects that have expired.
  • EDevelop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than 45 days.
  Tampilkan jawaban
• #88

  You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?

  • AAssign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.
  • BAssign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy.
  • CAssign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Perform the export of logs to Cloud Storage.
  • DAssign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Direct the auditor to also review the logs for changes to Cloud IAM policy.
  Tampilkan jawaban
• #89

  You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone. You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?

  • ASet the europe-west1-d zone as the default zone using the gcloud config subcommand.
  • BIn the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.
  • CIn the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.
  • DCreate a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1-d.
  Tampilkan jawaban
• #90

  You are managing a project for the Business Intelligence (BI) department in your company. A data pipeline ingests data into BigQuery via streaming. You want the users in the BI department to be able to run the custom SQL queries against the latest data in BigQuery. What should you do?

  • ACreate a Data Studio dashboard that uses the related BigQuery tables as a source and give the BI team view access to the Data Studio dashboard.
  • BCreate a Service Account for the BI team and distribute a new private key to each member of the BI team.
  • CUse Cloud Scheduler to schedule a batch Dataflow job to copy the data from BigQuery to the BI team's internal data warehouse.
  • DAssign the IAM role of BigQuery User to a Google Group that contains the members of the BI team.
  Tampilkan jawaban
• #91

  You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?

  • ACreate a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.
  • BCreate a Kubernetes Service of type ClusterIP for your application. Configure the public DNS name of your application using the IP of this Service.
  • CCreate a Kubernetes Service of type NodePort to expose the application on port 443 of each node of the Kubernetes cluster. Configure the public DNS name of your application with the IP of every node of the cluster to achieve load-balancing.
  • DCreate a HAProxy pod in the cluster to load-balance the traffic to all the pods of the application. Forward the public traffic to HAProxy with an iptable rule. Configure the DNS name of your application using the public IP of the node HAProxy is running on.
  Tampilkan jawaban
• #92

  Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

  • AModify the existing subnet range to 172.16.20.0/24.
  • BCreate a new Secondary IP Range in the VPC and configure the VMs to use that range.
  • CCreate a new VPC network for the VMs. Enable VPC Peering between the VMs' VPC network and the Dataproc cluster VPC network.
  • DCreate a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network. Configure a custom Route exchange.
  Tampilkan jawaban
• #93

  You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?

  • ACreate a new subnet in the same region as the subnet being used.
  • BAdd an alias IP range to the subnet used by the GKE clusters.
  • CCreate a new VPC, and set up VPC peering with the existing VP.
  • DExpand the CIDR range of the relevant subnet for the cluster.
  Tampilkan jawaban
• #94

  You have a batch workload that runs every night and uses a large number of Virtual Machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?

  • ARun a test using simulated maintenance events. If the test is successful, use preemptible N1 Standard VMs when running future jobs.
  • BRun a test using simulated maintenance events. If the test is successful, use N1 Standard VMs when running future jobs.
  • CRun a test using a Managed Instance Group. If the test is successful, use N1 Standard VMs in the Managed Instance Group when running future jobs.
  • DRun a test using N1 standard VMs instead of N2. If the test is successful, use N1 Standard VMs when running future jobs.
  Tampilkan jawaban
• #95

  You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?

  • AAsk your ML team to add the accelerator: gpu annotation to their pod specification.
  • BRecreate all the nodes of the GKE cluster to enable GPUs on all of them.
  • CCreate your own Kubernetes cluster on top of Compute Engine with nodes that have GPUs. Dedicate this cluster to your ML team.
  • DAdd a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.
  Tampilkan jawaban
• #96

  You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions. You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?

  • ACreate a single budget for all projects and configure budget alerts on this budget.
  • BCreate a separate billing account per sandbox project and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per billing account.
  • CCreate a budget per project and configure budget alerts on all of these budgets.
  • DCreate a single billing account for all sandbox projects and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per project.
  Tampilkan jawaban
• #97

  You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?

  • AIncrease the size of the disk to 1 TB.
  • BIncrease the allocated CPU to the instance.
  • CMigrate to use a Local SSD on the instance.
  • DMigrate to use a Regional SSD on the instance.
  Tampilkan jawaban
• #98

  Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?

  • ADownload and deploy the Jenkins Java WAR to App Engine Standard.
  • BCreate a new Compute Engine instance and install Jenkins through the command line interface.
  • CCreate a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.
  • DUse GCP Marketplace to launch the Jenkins solution.
  Tampilkan jawaban
• #99

  Your company wants to standardize the creation and management of multiple Google Cloud resources using Infrastructure as Code. You want to minimize the amount of repetitive code needed to manage the environment. What should you do?

  • ADevelop templates for the environment using Cloud Deployment Manager.
  • BUse curl in a terminal to send a REST request to the relevant Google API for each individual resource.
  • CUse the Cloud Console interface to provision and manage all related resources.
  • DCreate a bash script that contains all requirement steps as gcloud commands.
  Tampilkan jawaban
• #100

  You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?

  • ADeploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.
  • BDeploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.
  • CDeploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.
  • DDeploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.
  Tampilkan jawaban

Ingin melacak skor, mengikuti ujian simulasi berwaktu, dan mendapat penjelasan AI? Buat akun gratis