Associate-Cloud-Engineer Practice Exam Questions and Answers

A.  

Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the project.

B.  

Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the dataset.

C.  

Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the dataset.

D.  

Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the project.

A.  

Instruct the external consultant to use the gcloud compute ssh command line tool by using Identity-Aware Proxy to access the instance.

B.  

Instruct the external consultant to use the gcloud compute ssh command line tool by using the public IP address of the instance to access it.

C.  

Instruct the external consultant to generate an SSH key pair, and request the public key from the consultant.Add the public key to the instance yourself, and have the consultant access the instance through SSH with their private key.

D.  

Instruct the external consultant to generate an SSH key pair, and request the private key from the consultant.Add the private key to the instance yourself, and have the consultant access the instance through SSH with their public key.

A.  

Enable Cloud CDN on the website frontend.

B.  

Enable ‘Share publicly’ on the PDF file objects.

C.  

Set Content-Type metadata to application/pdf on the PDF file objects.

D.  

Add a label to the storage bucket with a key of Content-Type and value of application/pdf.

A.  

1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.

B.  

1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.

C.  

1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.

D.  

1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.

A.  

Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.

B.  

Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.

C.  

Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.

D.  

Select Compute Engine. Use VM instance types that support micro bursting.

A.  

Multi-Regional Storage

B.  

Regional Storage

C.  

Nearline Storage

D.  

Coldline Storage

A.  

Build the solution by using YAML manifests, and provision the resources.

B.  

Build the solution by using Terraform, and provision the resources.

C.  

Build the solution by using Python and the cloud SDKs from all providers to provision the resources.

D.  

Build the solution by using Config Connector, and provision the resources.

A.  

Deploy the new version in the same application and use the --migrate option.

B.  

Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.

C.  

Create a new App Engine application in the same project. Deploy the new version in that application. Use the App Engine library to proxy 1% of the requests to the new version.

D.  

Create a new App Engine application in the same project. Deploy the new version in that application. Configure your network load balancer to send 1% of the traffic to that new application.

A.  

Use service account credentials in your on-premises application.

B.  

Use gcloud to create a key file for the service account that has appropriate permissions.

C.  

Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.

D.  

Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.

A.  

Select Cloud SQL (MySQL). Verify that the enable binary logging option is selected.

B.  

Select Cloud SQL (MySQL). Select the create failover replicas option.

C.  

Select Cloud Spanner. Set up your instance with 2 nodes.

D.  

Select Cloud Spanner. Set up your instance as multi-regional.