What Virtual Associate-Cloud-Engineer Free Draindumps Is

NEW QUESTION 1
You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?

• A. Increase the size of the disk to 1 TB.
• B. Increase the allocated CPU to the instance.
• C. Migrate to use a Local SSD on the instance.
• D. Migrate to use a Regional SSD on the instance.

Answer: C

NEW QUESTION 2
You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate reporting under the same Stackdriver Monitoring dashboard. What should you do?

• A. Use Shared VPC to connect all projects, and link Stackdriver to one of the projects.
• B. For each project, create a Stackdriver accoun
• C. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all other projects.
• D. Configure a single Stackdriver account, and link all projects to the same account.
• E. Configure a single Stackdriver account for one of the project
• F. In Stackdriver, create a Group and add the other project names as criteria for that Group.

Answer: D

NEW QUESTION 3
You have designed a solution on Google Cloud Platform (GCP) that uses multiple GCP products. Your company has asked you to estimate the costs of the solution. You need to provide estimates for the monthly total cost. What should you do?

• A. For each GCP product in the solution, review the pricing details on the products pricing pag
• B. Use the pricing calculator to total the monthly costs for each GCP product.
• C. For each GCP product in the solution, review the pricing details on the products pricing pag
• D. Create a Google Sheet that summarizes the expected monthly costs for each product.
• E. Provision the solution on GC
• F. Leave the solution provisioned for 1 wee
• G. Navigate to the Billing Report page in the Google Cloud Platform Consol
• H. Multiply the 1 week cost to determine the monthly costs.
• I. Provision the solution on GC
• J. Leave the solution provisioned for 1 wee
• K. Use Stackdriver to determine the provisioned and used resource amount
• L. Multiply the 1 week cost to determine the monthly costs.

Answer: A

NEW QUESTION 4
You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?

• A. Use permissions in your role that use the ‘supported’ support level for role permission
• B. Set the role stage to ALPHA while testing the role permissions.
• C. Use permissions in your role that use the ‘supported’ support level for role permission
• D. Set the role stage to BETA while testing the role permissions.
• E. Use permissions in your role that use the ‘testing’ support level for role permission
• F. Set the role stage to ALPHA while testing the role permissions.
• G. Use permissions in your role that use the ‘testing’ support level for role permission
• H. Set the role stage to BETA while testing the role permissions.

Answer: C

NEW QUESTION 5
Your company has an internal application for managing transactional orders. The application is used exclusively by employees in a single physical location. The application requires strong consistency, fast queries, and ACID guarantees for multi-table transactional updates. The first version of the application is implemented inPostgreSQL, and you want to deploy it to the cloud with minimal code changes. Which database is most appropriate for this application?

• A. BigQuery
• B. Cloud SQL
• C. Cloud Spanner
• D. Cloud Datastore

Answer: B

NEW QUESTION 6
You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?

• A. Export Cloud Datastore data using gcloud datastore export.
• B. Create a Cloud Datastore index using gcloud datastore indexes create.
• C. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.
• D. Install the cloud-datastore-emulator component using the gcloud components install command.

Answer: D

NEW QUESTION 7
You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?

• A. Assign the auditor the IAM role roles/logging.privateLogViewe
• B. Perform the export of logs to Cloud Storage.
• C. Assign the auditor the IAM role roles/logging.privateLogViewe
• D. Direct the auditor to also review the logs for changes to Cloud IAM policy.
• E. Assign the auditor’s IAM user to a custom role that has logging.privateLogEntries.list permissio
• F. Perform the export of logs to Cloud Storage.
• G. Assign the auditor’s IAM user to a custom role that has logging.privateLogEntries.list permissio
• H. Direct the auditor to also review the logs for changes to Cloud IAM policy.

Answer: C

NEW QUESTION 8
Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?

• A. Contact cloud-billing@google.com with your bank account details and request a corporate billing account for your company.
• B. Create a ticket with Google Support and wait for their call to share your credit card details over the phone.
• C. In the Google Platform Console, go to the Resource Manage and move all projects to the root Organization.
• D. In the Google Cloud Platform Console, create a new billing account and set up a payment method.

Answer: D

NEW QUESTION 9
You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?

• A. Grant yourself the IAM role of Cloud Spanner Admin
• B. Create a new VPC network with subnetworks in all desired regions
• C. Configure your Cloud Spanner instance to be multi-regional
• D. Enable the Cloud Spanner API

Answer: C

NEW QUESTION 10
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?

• A. Create a new subnet in the same region as the subnet being used.
• B. Add an alias IP range to the subnet used by the GKE clusters.
• C. Create a new VPC, and set up VPC peering with the existing VPC.
• D. Expand the CIDR range of the relevant subnet for the cluster.

Answer: C

Explanation:
To create a VPC peering connection, first create a request to peer with another VPC.

NEW QUESTION 11
You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP. You want to make sure it is reachable by clients over that port. What should you do?

• A. Add the network tag allow-udp-636 to the VM instance running the LDAP server.
• B. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.
• C. Add a network tag of your choice to the instanc
• D. Create a firewall rule to allow ingress on UDP port 636 for that network tag.
• E. Add a network tag of your choice to the instance running the LDAP serve
• F. Create a firewall rule to allow egress on UDP port 636 for that network tag.

Answer: C

NEW QUESTION 12
You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?

• A. Configure Billing Data Export to BigQuery and visualize the data in Data Studio.
• B. Visit the Cost Table page to get a CSV export and visualize it using Data Studio.
• C. Fill all resources in the Pricing Calculator to get an estimate of the monthly cost.
• D. Use the Reports view in the Cloud Billing Console to view the desired cost information.

Answer: A

NEW QUESTION 13
You built an application on your development laptop that uses Google Cloud services. Your application uses Application Default Credentials for authentication and works fine on your development laptop. You want to migrate this application to a Compute Engine virtual machine (VM) and set up authentication using Google- recommended practices and minimal changes. What should you do?

• A. Assign appropriate access for Google services to the service account used by the Compute Engine VM.
• B. Create a service account with appropriate access for Google services, and configure the application to use this account.
• C. Store credentials for service accounts with appropriate access for Google services in a config file, and deploy this config file with your application.
• D. Store credentials for your user account with appropriate access for Google services in a config file, and deploy this config file with your application.

Answer: B

NEW QUESTION 14
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow
Google-recommended practices to set up a high availability Cloud VPN. What should you do?

• A. Use a custom mode VPC network, configure static routes, and use active/passive routing
• B. Use an automatic mode VPC network, configure static routes, and use active/active routing
• C. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
• D. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing

Answer: D

NEW QUESTION 15
Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?

• A. Add your SREs to roles/iam.roleAdmin role.
• B. Add your SREs to roles/accessapproval approver role.
• C. Add your SREs to a group and then add this group to roles/iam roleAdmin role.
• D. Add your SREs to a group and then add this group to roles/accessapproval approver role.

Answer: A

NEW QUESTION 16
You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions. You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?

• A. Create a single budget for all projects and configure budget alerts on this budget.
• B. Create a separate billing account per sandbox project and enable BigQuery billing export
• C. Create a Data Studio dashboard to plot the spending per billing account.
• D. Create a budget per project and configure budget alerts on all of these budgets.
• E. Create a single billing account for all sandbox projects and enable BigQuery billing export
• F. Create a Data Studio dashboard to plot the spending per project.

Answer: C

NEW QUESTION 17
Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

• A. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
• B. Tag all the instances with the same network ta
• C. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
• D. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
• E. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: B

NEW QUESTION 18
......