Downloadable Google Associate-Cloud-Engineer Exam Engine Online

NEW QUESTION 1
You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible. What should you do?

• A. Deploy Jenkins through the Google Cloud Marketplace.
• B. Create a new Compute Engine instanc
• C. Run the Jenkins executable.
• D. Create a new Kubernetes Engine cluste
• E. Create a deployment for the Jenkins image.
• F. Create an instance template with the Jenkins executabl
• G. Create a managed instance group with this template.

Answer: A

NEW QUESTION 2
Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company’s SSO provider. What should you do?

• A. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
• B. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
• C. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.
• D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.

Answer: C

NEW QUESTION 3
You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?

• A. * 1. Create a configuration for each project you need to manage.* 2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
• B. * 1. Create a configuration for each project you need to manage.* 2. Use gcloud init to update the configuration values when you need to work with a non-default project
• C. * 1. Use the default configuration for one project you need to manage.* 2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
• D. * 1. Use the default configuration for one project you need to manage.* 2. Use gcloud init to update the configuration values when you need to work with a non-default project.

Answer: D

NEW QUESTION 4
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

• A. Use gcloud iam roles copy and specify the production project as the destination project.
• B. Use gcloud iam roles copy and specify your organization as the destination organization.
• C. In the Google Cloud Platform Console, use the ‘create role from role’ functionality.
• D. In the Google Cloud Platform Console, use the ‘create role’ functionality and select all applicable permissions.

Answer: B

NEW QUESTION 5
You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

• A. Create a health check on port 443 and use that when creating the Managed Instance Group.
• B. Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
• C. In the Instance Template, add the label ‘health-check’.
• D. In the Instance Template, add a startup script that sends a heartbeat to the metadata server.

Answer: C

NEW QUESTION 6
You are working with a user to set up an application in a new VPC behind a firewall. The user is concerned about data egress. You want to configure the fewest open egress ports. What should you do?

• A. Set up a low-priority (65534) rule that blocks all egress and a high-priority rule (1000) that allows only the appropriate ports.
• B. Set up a high-priority (1000) rule that pairs both ingress and egress ports.
• C. Set up a high-priority (1000) rule that blocks all egress and a low-priority (65534) rule that allows only the appropriate ports.
• D. Set up a high-priority (1000) rule to allow the appropriate ports.

Answer: C

NEW QUESTION 7
You need to reduce GCP service costs for a division of your company using the fewest possible steps. You need to turn off all configured services in an existing GCP project. What should you do?

• A. * 1. Verify that you are assigned the Project Owners IAM role for this project.* 2. Locate the project in the GCP console, click Shut down and then enter the project ID.
• B. * 1. Verify that you are assigned the Project Owners IAM role for this project.* 2. Switch to the project in the GCP console, locate the resources and delete them.
• C. 1. Verify that you are assigned the Organizational Administrator IAM role for this project.* 2. Locate the project in the GCP console, enter the project ID and then click Shut down.
• D. * 1. Verify that you are assigned the Organizational Administrators IAM role for this project.* 2. Switch to the project in the GCP console, locate the resources and delete them.

Answer: C

NEW QUESTION 8
You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?

• A. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.
• B. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.
• C. Deploy a new version as a separate app in App Engin
• D. Then configure App Engine using GCP Console to split traffic between the two apps.
• E. Deploy a new version of your application in App Engin
• F. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.

Answer: A

NEW QUESTION 9
You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps. What should you do?

• A. Install a RDP client on your deskto
• B. Verify that a firewall rule for port 3389 exists.
• C. Install a RDP client in your deskto
• D. Set a Windows username and password in the GCP Consol
• E. Use the credentials to log in to the instance.
• F. Set a Windows password in the GCP Consol
• G. Verify that a firewall rule for port 22 exist
• H. Click theRDP button in the GCP Console and supply the credentials to log in.
• I. Set a Windows username and password in the GCP Consol
• J. Verify that a firewall rule for port 3389 exist
• K. Click the RDP button in the GCP Console, and supply the credentials to log in.

Answer: B

NEW QUESTION 10
You’ve deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

• A. Store the database password inside the Docker image of the container, not in the YAML file.
• B. Store the database password inside a Secret objec
• C. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
• D. Store the database password inside a ConfigMap objec
• E. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
• F. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.

Answer: C

NEW QUESTION 11
Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?

• A. Enable Cloud Identity in the GCP Console for your domain.
• B. Grant them the required IAM roles using their G Suite email address.
• C. Create a CSV sheet with all users’ email addresse
• D. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.
• E. In the G Suite console, add the users to a special group called cloud-console-users@yourdomain.com.Rely on the default behavior of the Cloud Platform to grant users access if they are members of this group.

Answer: B

NEW QUESTION 12
You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

• A. Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
• B. Use Cloud Functions and configure the bucket as a trigger resource.
• C. Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
• D. Use Dataflow as a batch job, and configure the bucket as a data source.

Answer: A

NEW QUESTION 13
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

• A. Move both projects under the same folder.
• B. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
• C. Create a Shared VPC network between both project
• D. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
• E. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.Share the folder with the IoT team.

Answer: D

NEW QUESTION 14
You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images. The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires. The other microservices are workloads that are optimized for n1-standard machine types. You need to optimize your cluster so that all workloads are using resources as efficiently as possible. What should you do?

• A. Assign the pods of the image rendering microservice a higher pod priority than the older microservices
• B. Create a node pool with compute-optimized machine type nodes for the image rendering microservice Use the node pool with general-purposemachine type nodes for the other microservices
• C. Use the node pool with general-purpose machine type nodes for lite mage rendering microservice Create a nodepool with compute-optimized machine type nodes for the other microservices
• D. Configure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment Keep the resource requests for the other microservices at the default

Answer: B

NEW QUESTION 15
You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?

• A. Using the GCP Console, filter the Activity log to view the information.
• B. Using the GCP Console, filter the Stackdriver log to view the information.
• C. View the bucket in the Storage section of the GCP Console.
• D. Create a trace in Stackdriver to view the information.

Answer: A

NEW QUESTION 16
Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google’s recommended practices. Which storage option should you use?

• A. Multi-Regional Storage
• B. Regional Storage
• C. Nearline Storage
• D. Coldline Storage

Answer: D

NEW QUESTION 17
You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re-creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?

• A. Create an HTTP load balancer with a backend configuration that references an existing instance group.Set the health check to healthy (HTTP).
• B. Create an HTTP load balancer with a backend configuration that references an existing instance group.Define a balancing mode and set the maximum RPS to 10.
• C. Create a managed instance grou
• D. Set the Autohealing health check to healthy (HTTP).
• E. Create a managed instance grou
• F. Verify that the autoscaling setting is on.

Answer: A

NEW QUESTION 18
......