Google Associate Cloud Engineer

• #61

  Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?

  • ALink the acquired company's projects to your company's billing account.
  • BConfigure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
  • CMigrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
  • DCreate a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
  解答を表示
• #62

  You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below. You check the status of the deployed pods and notice that one of them is still in PENDING status. You want to find out why the pod is stuck in pending status. What should you do?

  • AReview details of the myapp-service Service object and check for error messages.
  • BReview details of the myapp-deployment Deployment object and check for error messages.
  • CReview details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.
  • DView logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.
  解答を表示
• #63

  You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?

  • A1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic. 2. Call your application on Cloud Run from the Cloud Function for every message.
  • B1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run. 2. Create a Cloud Pub/Sub subscription for that topic. 3. Make your application pull messages from that subscription.
  • C1. Create a service account. 2. Give the Cloud Run Invoker role to that service account for your Cloud Run application. 3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint.
  • D1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal. 2. Create a Cloud Pub/Sub subscription for that topic. 3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application.
  解答を表示
• #64

  You want to configure a solution for archiving data in a Cloud Storage bucket. The solution must be cost-effective. Data with multiple versions should be archived after 30 days. Previous versions are accessed once a month for reporting. This archive data is also occasionally updated at month-end. What should you do?

  • AAdd a bucket lifecycle rule that archives data with newer versions after 30 days to Coldline Storage.
  • BAdd a bucket lifecycle rule that archives data with newer versions after 30 days to Nearline Storage.
  • CAdd a bucket lifecycle rule that archives data from regional storage after 30 days to Coldline Storage.
  • DAdd a bucket lifecycle rule that archives data from regional storage after 30 days to Nearline Storage.
  解答を表示
• #65

  You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?

  • AEnable the Cloud Pub/Sub API in the API Library on the GCP Console.
  • BRely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
  • CUse Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
  • DGrant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
  解答を表示
• #66

  Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google's recommended practices. Which storage option should you use?

  • AMulti-Regional Storage.
  • BRegional Storage.
  • CNearline Storage.
  • DColdline Storage.
  解答を表示
• #67

  You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?

  • ASet up an export job for the first of the month. Write the export file to an Archive class Cloud Storage bucket.
  • BSave the automatic first-of-the-month backup for three years. Store the backup file in an Archive class Cloud Storage bucket.
  • CSet up an on-demand backup for the first of the month. Write the backup to an Archive class Cloud Storage bucket.
  • DConvert the automatic first-of-the-month backup to an export file. Write the export file to a Coldline class Cloud Storage bucket.
  解答を表示
• #68

  You need to create a Compute Engine instance in a new project that doesn't exist yet. What should you do?

  • AUsing the Cloud SDK, create a new project, enable the Compute Engine API in that project, and then create the instance specifying your new project.
  • BEnable the Compute Engine API in the Cloud Console, use the Cloud SDK to create the instance, and then use the --project flag to specify a new project.
  • CUsing the Cloud SDK, create the new instance, and use the --project flag to specify the new project. Answer yes when prompted by Cloud SDK to enable the Compute Engine API.
  • DEnable the Compute Engine API in the Cloud Console. Go to the Compute Engine section of the Console to create a new instance, and look for the Create In A New Project option in the creation form.
  解答を表示
• #69

  You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?

  • AChange the default region property setting in the existing GCP project to asia-northeast1.
  • BChange the region property setting in the existing App Engine application from us-central to asia-northeast1.
  • CCreate a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
  • DCreate a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application.
  解答を表示
• #70

  You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?

  • AOpen the Cloud Spanner console to review configurations.
  • BOpen the IAM & admin console to review IAM policies for Cloud Spanner roles.
  • CGo to the Stackdriver Monitoring console and review information for Cloud Spanner.
  • DGo to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.
  解答を表示
• #71

  You received a JSON file that contained a private key of a Service Account in order to get access to several resources in a Google Cloud project. You downloaded and installed the Cloud SDK and want to use this private key for authentication and authorization when performing gcloud commands. What should you do?

  • AUse the command gcloud auth login and point it to the private key.
  • BUse the command gcloud auth activate-service-account and point it to the private key.
  • CPlace the private key file in the installation directory of the Cloud SDK and rename it to credentials.json.
  • DPlace the private key file in your home directory and rename it to GOOGLE_APPLICATION_CREDENTIALS.
  解答を表示
• #72

  Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

  • ACreate the instance without a public IP address.
  • BCreate the instance with Private Google Access enabled.
  • CCreate a deny-all egress firewall rule on the VPC network.
  • DCreate a route on the VPC to route all traffic to the instance over the VPN tunnel.
  解答を表示
• #73

  Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the production services in order to perform their job. You want to prevent Google Cloud product changes from broadening their permissions in the future. You want to follow Google-recommended practices. What should you do?

  • AGrant all members of the DevOps team the role of Project Editor on the organization level.
  • BGrant all members of the DevOps team the role of Project Editor on the production project.
  • CCreate a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project.
  • DCreate a custom role that combines the required permissions. Grant the DevOps team the custom role on the organization level.
  解答を表示
• #74

  Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?

  • AAdd the group for the finance team to roles/billing user role.
  • BAdd the group for the finance team to roles/billing admin role.
  • CAdd the group for the finance team to roles/billing viewer role.
  • DAdd the group for the finance team to roles/billing project/Manager role.
  解答を表示
• #75

  You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps. What should you do?

  • AInstall a RDP client on your desktop. Verify that a firewall rule for port 3389 exists.
  • BInstall a RDP client in your desktop. Set a Windows username and password in the GCP Console. Use the credentials to log in to the instance.
  • CSet a Windows password in the GCP Console. Verify that a firewall rule for port 22 exists. Click the RDP button in the GCP Console and supply the credentials to log in.
  • DSet a Windows username and password in the GCP Console. Verify that a firewall rule for port 3389 exists. Click the RDP button in the GCP Console, and supply the credentials to log in.
  解答を表示
• #76

  You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide the application with access to Cloud Storage. What should you do?

  • A1. Use nslookup to get the IP address for storage.googleapis.com. 2. Negotiate with the security team to be able to give a public IP address to the servers. 3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.
  • B1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud. 2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance. 3. Configure your servers to use that instance as a proxy to access Cloud Storage.
  • C1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine. 2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend. 3. Configure your new instances to use this ILB as proxy.
  • D1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in Google Cloud. 2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel. 3. In your on-premises network, configure your DNS server to resolve .googleapis.com as a CNAME to restricted.googleapis.com.
  解答を表示
• #77

  You create a Deployment with 2 replicas in a Google Kubernetes Engine cluster that has a single preemptible node pool. After a few minutes, you use kubectl to examine the status of your Pod and observe that one of them is still in Pending status. What is the most likely cause?

  • AThe pending Pod's resource requests are too large to fit on a single node of the cluster.
  • BToo many Pods are already running in the cluster, and there are not enough resources left to schedule the pending Pod.
  • CThe node pool is configured with a service account that does not have permission to pull the container image used by the pending Pod.
  • DThe pending Pod was originally scheduled on a node that has been preempted between the creation of the Deployment and your verification of the Pods' status. It is currently being rescheduled on a new node.
  解答を表示
• #78

  You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?

  • ACreate a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
  • BCreate a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
  • CCreate a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
  • DCreate two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.
  解答を表示
• #79

  You are using multiple configurations for gcloud. You want to review the configured Kubernetes Engine cluster of an inactive configuration using the fewest possible steps. What should you do?

  • AUse gcloud config configurations describe to review the output.
  • BUse gcloud config configurations activate and gcloud config list to review the output.
  • CUse kubectl config get-contexts to review the output.
  • DUse kubectl config use-context and kubectl config view to review the output.
  解答を表示
• #80

  You need to create a new billing account and then link it with an existing Google Cloud Platform project. What should you do?

  • AVerify that you are Project Billing Manager for the GCP project. Update the existing project to link it to the existing billing account.
  • BVerify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project.
  • CVerify that you are Billing Administrator for the billing account. Create a new project and link the new project to the existing billing account.
  • DVerify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing account.
  解答を表示

スコアの記録、時間制限付き模擬試験、AI解説をご利用になりますか？ 無料アカウントを作成