Associate-Cloud-Engineer by Google Valid Free Exam Practice Test

Question 1

You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?

A. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations. B. When creating the VM, use Intel Skylake as the CPU platform. C. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs. D. When creating the VM, use machine type n1-standard-96.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

You deployed an App Engine application using gcloud app deploy, but it did not deploy to the intended project. You want to find out why this happened and where the application deployed.
What should you do?

A. Go to Deployment Manager and review settings for deployment of applications. B. Check the web-application.xml file for your application and check project settings. C. Go the Cloud Shell and run gcloud config list to review the Google Cloud configuration used for deployment. D. Check the app.yaml file for your application and check project settings.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?

A. Generate a new SSH key pair. Give the private key to each member of your team.
Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance. B. Ask each member of the team to generate a new SSH key pair and to send you their public key.
Use a configuration management tool to deploy those keys on each instance. C. Generate a new SSH key pair. Give the private key to each member of your team.
Configure the public key in the metadata of each instance. D. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account.
Grant the "compute.osAdminLogin" role to the Google group corresponding to this team.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Which of the following command is used to create buckets in Cloud Storage?

A. gsutil storage buckets create B. gcloud storage buckets create C. gcloud mb D. gsutil mb

Correct Answer: D

Question 5

You are planning to migrate your on-premises data to Google Cloud. The data includes:
- 200 TB of video files in SAN storage
- Data warehouse data stored on Amazon Redshift
- 20 GB of PNG files stored on an S3 bucket
You need to load the video files into a Cloud Storage bucket, transfer the data warehouse data into BigQuery, and load the PNG files into a second Cloud Storage bucket. You want to follow Google-recommended practices and avoid writing any code for the migration. What should you do?

A. Use Transfer Appliance for the videos, BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files. B. Use Storage Transfer Service for the video files, BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files. C. Use gcloud storage for the video files, Dataflow for the data warehouse data, and Storage Transfer Service for the PNG files. D. Use Cloud Data Fusion for the video files, Dataflow for the data warehouse data, and Storage Transfer Service for the PNG files.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

You want to verify the IAM users and roles assigned within a GCP project named my-project.
What should you do?

A. Navigate to the project and then to the Roles section in the GCP Console. Review the roles and status. B. Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles. C. Run gcloud iam service-accounts list. Review the output section. D. Run gcloud iam roles list. Review the output section.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

You have a number of compute instances belonging to an unmanaged instances group. You need to SSH to one of the Compute Engine instances to run an ad hoc script. You've already authenticated gcloud, however, you don't have an SSH key deployed yet. In the fewest steps possible, what's the easiest way to SSH to the instance?

A. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command. B. Create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command. C. Use the gcloud compute ssh command. D. Create a key with the ssh-keygen command. Then use the gcloud compute ssh command.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions. You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?

A. Create a budget per project and configure budget alerts on all of these budgets. B. Create a single budget for all projects and configure budget alerts on this budget. C. Create a single billing account for all sandbox projects and enable BigQuery billing exports.
Create a Data Studio dashboard to plot the spending per project. D. Create a separate billing account per sandbox project and enable BigQuery billing exports.
Create a Data Studio dashboard to plot the spending per billing account.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?

A. Use SSL proxy load balancing for the MIG and a CNAME record in your DNS public zone with the load balancer's IP address. B. Use HTTP(S) load balancing for the MIG and a CNAME record in your DNS private zone with the load balancer's IP address. C. Use HTTP(S) load balancing for the MIG and an A record in your DNS public zone with the load balancer's IP address. D. Use SSL proxy load balancing for the MIG and an A record in your DNS private zone with the load balancer's IP address.

Correct Answer: C

Question 10

Your company is using Google Workspace to manage employee accounts. Anticipated growth will increase the number of personnel from 100 employees to 1,000 employees within 2 years.
Most employees will need access to your company's Google Cloud account. The systems and processes will need to support 10x growth without performance degradation, unnecessary complexity, or security issues. What should you do?

A. Turn on identity federation between Cloud Identity and Google Workspace. Enforce multi-factor authentication for domain wide delegation. B. Use a third-party identity provider service through federation. Synchronize the users from Google Workplace to the third-party provider in real time. C. Organize the users in Cloud Identity into groups. Enforce multi-factor authentication in Cloud Identity. D. Migrate the users to Active Directory. Connect the Human Resources system to Active Directory.
Turn on Google Cloud Directory Sync (GCDS) for Cloud Identity. Turn on Identity Federation from Cloud Identity to Active Directory.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 11

Your company has 5 TB of testing data stored in the production database of a testing tool name Quality Center. The data is being used to create a real-time analytics system which is causing the slow response to the tester while using the tool.
What should you do the improve the load on the database?

A. Run the analytics query only weekends B. Set up Multi-AZ C. Set up a read replica D. Scale the database instance

Correct Answer: C

Question 12

You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic.
You want to ensure that the available capacity does not decrease during the deployment. What should you do?

A. Create a new managed instance group with an updated instance template.
Add the group to the backend service for the load balancer.
When all instances in the new managed instance group are healthy, delete the old managed instance group. B. Create a new instance template with the new application version.
Update the existing managed instance group with the new instance template.
Delete the instances in the managed instance group to allow the managed instance group to recreate the instance using the new instance template. C. Perform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0. D. Perform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 13

You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google- recommended practices to provide the application with access to Cloud Storage. What should you do?

A. 1. Use nslookup to get the IP address for storage.googleapis.com.
2. Negotiate with the security team to be able to give a public IP address to the servers.
3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com. B. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).
2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.
3. Configure your servers to use that instance as a proxy to access Cloud Storage. C. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.
2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.
3. Configure your new instances to use this ILB as proxy. D. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.
2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.
3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 14

Which of the following IP address would you specify to define a CIDR range that will apply to all the destination addresses?

A. 0.0.0.0/0 B. 172.16.0.0/12 C. 192.168.0.0/16 D. 10.0.0.0/8

Correct Answer: A

Google Associate Cloud Engineer - Associate-Cloud-Engineer Exam Practice Test