Associate-Cloud-Engineer Exam Training Practice Tests (Google Associate Cloud Engineer)]

Question 1

You are a Google Cloud Engineer and assigned to set up a project for the team of four members.
You need to grant only general permissions for all the resources of the project. You decided to grant a primitive role to each person for different levels of access on the basis of their responsibilities in the project. What is not considered as a primitive role in the Google Cloud Platform console?

A. Viewer B. Publisher C. Owner D. Editor

Correct Answer: B

Question 2

You need to create a new Kubernetes Cluster on Google Cloud Platform that can autoscale the number of worker nodes. What should you do?

A. Configure a Compute Engine instance as a worker and add it to an unmanaged instance group.
Add a load balancer to the instance group and rely on the load balancer to create additional Compute Engine instances when needed. B. Create a cluster on Kubernetes Engine and enable autoscaling on Kubernetes Engine. C. Create a cluster on Kubernetes Engine and enable autoscaling on the instance group of the cluster. D. Create Compute Engine instances for the workers and the master, and install Kubernetes. Rely on Kubernetes to create additional Compute Engine instances when needed.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

You are setting up a Windows VM on Compute Engine and want to make sure you can log in to the VM via RDP. What should you do?

A. After the VM has been created, use your Google Account credentials to log in into the VM. B. After the VM has been created, use gcloud compute reset-windows-password to retrieve the login credentials for the VM. C. After the VM has been created, download the JSON private key for the default Compute Engine service account. Use the credentials in the JSON file to log in to the VM. D. When creating the VM, add metadata to the instance using `windows-password' as the key and a password as the value.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling.
What should you do?

A. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner. B. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User. C. Tag all the instances with the same network tag.
Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag. D. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

You need to host an application on a Compute Engine instance in a project shared with other teams. You want to prevent the other teams from accidentally causing downtime on that application. Which feature should you use?

A. Use a Preemptible VM. B. Enable deletion protection on the instance. C. Use a sole-tenant node. D. Use a Shielded VM.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

A. Create a route on the VPC to route all traffic to the instance over the VPN tunnel. B. Create a deny-all egress firewall rule on the VPC network. C. Create the instance without a public IP address. D. Create the instance with Private Google Access enabled.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

You create a Deployment with 2 replicas in a Google Kubernetes Engine cluster that has a single preemptible node pool. After a few minutes, you use kubectlto examine the status of your Pod and observe that one of them is still in Pendingstatus:

What is the most likely cause?

A. Too many Pods are already running in the cluster, and there are not enough resources left to schedule the pending Pod. B. The node pool is configured with a service account that does not have permission to pull the container image used by the pending Pod. C. The pending Pod was originally scheduled on a node that has been preempted between the creation of the Deployment and your verification of the Pods' status. It is currently being rescheduled on a new node. D. The pending Pod's resource requests are too large to fit on a single node of the cluster.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?

A. When creating the VM, use Intel Skylake as the CPU platform. B. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs. C. When creating the VM, use machine type n1-standard-96. D. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

You are working a System Administrator and have been asked to make sure that all images are patched up to date and developers are not allowed to use old images which are not up to date as per PCI compliance. How would you achieve this?

A. Mark image as deprecated to prevent users from using the old image. B. None of the above. C. Drop a mail to all the developers regarding which image to use whenever you patch images. D. Mark image as obsolete to prevent users from using the old image.

Correct Answer: D

Question 10

Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?

A. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery. B. Create an export to the sink that saves logs from Cloud Audit to BigQuery. C. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL. D. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 11

You have deployed a Django 1.5 Python application to App Engine. This version of Django requires Python 3. Due to some issues, App Engine is trying to run the application using Python
2. Which of the following file would you check and modify (if required) to ensure that Python 3 is used with the application?

A. cron.yaml B. app.config C. app.yaml D. services.yaml

Correct Answer: C

Question 12

You developed a new application for App Engine and are ready to deploy it to production. You need to estimate the costs of running your application on Google Cloud Platform as accurately as possible. What should you do?

A. Use the pricing calculator for App Engine to get an accurate estimation of the expected charges. B. Create a ticket with Google Cloud Billing Support to get an accurate estimation. C. Create a YAML file with the expected usage. Pass this file to the "gcloud app estimate" command to get an accurate estimation. D. Multiply the costs of your application when it was in development by the number of expected users to get an accurate estimation.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 13

You have developed a containerized web application that will serve internal colleagues during business hours. You want to ensure that no costs are incurred outside of the hours the application is used. You have just created a new Google Cloud project and want to deploy the application. What should you do?

A. Deploy the container on App Engine flexible environment with autoscaling, and set the value min_instancesto zero in the app.yaml. B. Deploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero. C. Deploy the container on Cloud Run for Anthos, and set the minimum number of instances to zero. D. Deploy the container on App Engine flexible environment with manual scaling, and set the value instancesto zero in the app.yaml.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 14

You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?

A. 1. Create a service account.
2. Give the Cloud Run Invoker role to that service account for your Cloud Run application.
3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint. B. 1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run.
2. Create a Cloud Pub/Sub subscription for that topic.
3. Make your application pull messages from that subscription. C. 1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal.
2. Create a Cloud Pub/Sub subscription for that topic.
3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application. D. 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic.
2. Call your application on Cloud Run from the Cloud Function for every message.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Google Associate Cloud Engineer - Associate-Cloud-Engineer Exam Practice Test