Google Associate-Cloud-Engineer Exam Info and Free Practice Test | PassLeader
Pass Google Associate-Cloud-Engineer Premium Files Test Engine pdf - Free Dumps Collection
Google Cloud Computing is one of the biggest and fastest-growing cloud computing platforms in the world. As organizations increasingly move towards the cloud, the demand for professionals skilled in managing and operating cloud-based solutions is on the rise. One way to demonstrate your proficiency in this field is by earning the Google Associate-Cloud-Engineer certification.
NEW QUESTION # 109
You created an update for your application on App Engine. You want to deploy the update without impacting your users. You want to be able to roll back as quickly as possible if it fails. What should you do?
- A. Deploy the update as a new version. Migrate traffic from the current version to the new version.
- B. Delete the current version of your application. Deploy the update using the same version identifier as the deleted version.
- C. Notify your users of an upcoming maintenance window. Deploy the update in that maintenance window.
- D. Deploy the update as the same version that is currently running.
Answer: A
Explanation:
A and B are not correct because this will make the application temporarily unavailable to users.
C is not correct because to roll back, you'll need to redeploy the previous deployment because the app was overwritten with the same version number. Therefore this takes longer than a rollback using method D.
D is correct because this makes sure there is no downtime and you can roll back the fastest.
https://cloud.google.com/appengine/docs/admin-api/migrating-splitting-traffic
NEW QUESTION # 110
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account.
You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?
- A. Link the acquired company's projects to your company's billing account.
- B. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
- C. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
- D. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
Answer: B
Explanation:
Explanation/Reference: https://cloud.google.com/resource-manager/docs/migrating-projects-billing
NEW QUESTION # 111
Your company has an internal application for managing transactional orders. The application is used exclusively by employees in a single physical location. The application requires strong consistency, fast queries, and ACID guarantees for multi-table transactional updates. The first version of the application is implemented inPostgreSQL, and you want to deploy it to the cloud with minimal code changes. Which database is most appropriate for this application?
- A. Cloud Datastore
- B. BigQuery
- C. Cloud SQL
- D. Cloud Spanner
Answer: C
NEW QUESTION # 112
You received a JSON file that contained a private key of a Service Account in order to get access to several resources in a Google Cloud project. You downloaded and installed the Cloud SDK and want to use this private key for authentication and authorization when performing gcloud commands. What should you do?
- A. Place the private key file in your home directory and rename it to
`'GOOGLE_APPUCATION_CREDENTiALS". - B. Use the command gcloud auth activate-service-account and point it to the private key
- C. Use the command gcloud auth login and point it to the private key
- D. Place the private key file in the installation directory of the Cloud SDK and rename it to "credentials ison"
Answer: B
Explanation:
https://cloud.google.com/sdk/docs/authorizing
NEW QUESTION # 113
You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?
- A. Create the instance with the default Compute Engine service account Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
- B. Create a new service account and assign this service account to the new instance Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
- C. Create a new service account and assig n this service account to the new instance Grant the service account permissions on Cloud Storage.
- D. Create the instance with the default Compute Engine service account Grant the service account permissions on Cloud Storage.
Answer: A
Explanation:
Explanation
https://cloud.google.com/iam/docs/best-practices-for-using-and-managing-service-accounts If an application uses third-party or custom identities and needs to access a resource, such as a BigQuery dataset or a Cloud Storage bucket, it must perform a transition between principals. Because Google Cloud APIs don't recognize third-party or custom identities, the application can't propagate the end-user's identity to BigQuery or Cloud Storage. Instead, the application has to perform the access by using a different Google identity.
NEW QUESTION # 114
Your manager needs you to test out the latest version of MS-SQL on a Windows instance. You've created the VM and need to connect into the instance. What steps should you follow to connect to the instance?
- A. From the console click the SSH button to automatically connect.
- B. Generate a Windows password in the console, then use a client capable of communicating via RDP and provide the credentials.
- C. Connect in with your own RDP client using your Google Cloud username and password.
- D. Generate a Windows password in the console, then use the RDP button to connect in through the console.
Answer: A,B
NEW QUESTION # 115
You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?
- A. Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
- B. Use granular logging statements within a Deployment Manager template authored in Python.
- C. Execute the Deployment Manager template using the ?preview option in the same project, and observe the state of interdependent resources.
- D. Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.
Answer: C
Explanation:
https://cloud.google.com/deployment-manager/docs/deployments/updating-deployments
NEW QUESTION # 116
You have a Kubernetes cluster with 1 node-pool. The cluster receives a lot of traffic and needs to grow. You decide to add a node. What should you do?
- A. Edit the managed instance group of the cluster and increase the number of VMs by 1.
- B. Use "kubectl container clusters resize" with the desired number of nodes.
- C. Edit the managed instance group of the cluster and enable autoscaling.
- D. Use "gcloud container clusters resize" with the desired number of nodes.
Answer: D
Explanation:
A is correct because this resizes the cluster to the desired number of nodes.
B is not correct because you need to use gcloud, not kubectl.
C is not correct because you should not manually manage the MIG behind a cluster.
D is not correct because you should not manually manage the MIG behind a cluster.
NEW QUESTION # 117
Your company has a mission-critical application that serves users globally. You need to select a transactional, relational data storage system for this application. Which two products should you consider
- A. Cloud Datastore
- B. Cloud Spanner
- C. BigQuery
- D. Cloud Bigtable
- E. Cloud SQL
Answer: B,E
Explanation:
A is not correct because BigQuery is not a transactional system.
B is correct because Cloud SQL is a relational and transactional database in the list.
C Is correct because Spanner is a relational and transactional database in the list.
D is not correct because Cloud Bigtable provides transactional support but it's not relational.
E Is not correct because Datastore is not a relational data storage system.
NEW QUESTION # 118
You created a Kubernetes deployment by running kubectl run nginx image=nginx labels=app=prod. Your Kubernetes cluster is also used by a number of other deployments. How can you find the identifier of the pods for this nginx deployment?
- A. gcloud list gke-deployments -filter={pod }
- B. kubectl get deployments -output=pods
- C. gcloud get pods -selector="app=prod"
- D. kubectl get pods -I "app=prod"
Answer: D
Explanation:
Explanation
This command correctly lists pods that have the label app=prod. When creating the deployment, we used the label app=prod so listing pods that have this label retrieve the pods belonging to nginx deployments. You can list pods by using Kubernetes CLI kubectl get pods.
Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container-images/ Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container-images/#list-containers
NEW QUESTION # 119
You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic. You want to ensure that the available capacity does not decrease during the deployment. What should you do?
- A. Create a new instance template with the new application version. Update the existing managed instance group with the new instance template. Delete the instances in the managed instance group to allow the managed instance group to recreate the instance using the new instance template.
- B. Perform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.
- C. Perform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0.
- D. Create a new managed instance group with an updated instance template. Add the group to the backend service for the load balancer. When all instances in the new managed instance group are healthy, delete the old managed instance group.
Answer: C
NEW QUESTION # 120
Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?
- A. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery jobUser role to the group.
- B. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery jobUser role to the group.
- C. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery dataViewer user role to the group.
- D. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery dataViewer user role to the group.
Answer: A
Explanation:
Explanation
Read the dataset's metadata and to list tables in the dataset. Read data and metadata from the dataset's tables.
When applied at the project or organization level, this role can also enumerate all datasets in the project.
Additional roles, however, are necessary to allow the running of jobs.
BigQuery Data Viewer
(roles/bigquery.dataViewer)
When applied to a table or view, this role provides permissions to:
Read data and metadata from the table or view.
This role cannot be applied to individual models or routines.
When applied to a dataset, this role provides permissions to:
Read the dataset's metadata and list tables in the dataset.
Read data and metadata from the dataset's tables.
When applied at the project or organization level, this role can also enumerate all datasets in the project.
Additional roles, however, are necessary to allow the running of jobs.
Lowest-level resources where you can grant this role:
Table
View
BigQuery Job User
(roles/bigquery.jobUser)
Provides permissions to run jobs, including queries, within the project.
Lowest-level resources where you can grant this role:
Project
to run jobs https://cloud.google.com/bigquery/docs/access-control#bigquery.jobUser databaseUser needs additional role permission to run jobs https://cloud.google.com/spanner/docs/iam#spanner.databaseUser
NEW QUESTION # 121
Your team uses a third-party monitoring solution. They've asked you to deploy it to the nodes in your Kubernetes Engine Cluster. What's the best way to do that?
- A. Use Deployment Manager to deploy the monitoring solution.
- B. Deploy the monitoring pod as a Deployment.
- C. Connect to each node via SSH and install the monitoring solution.
- D. Deploy the monitoring pod as a DaemonSet.
Answer: D
NEW QUESTION # 122
All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States (US). What should you do?
- A. Create an organization to contain all the dev projects. Create an Identity and Access Management (1AM) policy to limit the resources in US regions.
- B. Create an Identity and Access Management (IAM)policy to restrict the resources locations in all dev projects. Apply the policy to all dev roles.
- C. Create a folder to contain all the dev projects Create an organization policy to limit resources in US locations.
- D. Create an Identity and Access Management <IAM) policy to restrict the resources locations in the US. Apply the policy to all dev projects.
Answer: D
NEW QUESTION # 123
You received a JSON file that contained a private key of a Service Account in order to get access to several resources in a Google Cloud project. You downloaded and installed the Cloud SDK and want to use this private key for authentication and authorization when performing gcloud commands. What should you do?
- A. Place the private key file in your home directory and rename it to
''GOOGLE_APPUCATION_CREDENTiALS". - B. Use the command gcloud auth activate-service-account and point it to the private key
- C. Use the command gcloud auth login and point it to the private key
- D. Place the private key file in the installation directory of the Cloud SDK and rename it to "credentials ison"
Answer: B
Explanation:
Explanation
Authorizing with a service account
gcloud auth activate-service-account authorizes access using a service account. As with gcloud init and gcloud auth login, this command saves the service account credentials to the local system on successful completion and sets the specified account as the active account in your Cloud SDK configuration.
https://cloud.google.com/sdk/docs/authorizing#authorizing_with_a_service_account
NEW QUESTION # 124
......
Updated Official licence for Associate-Cloud-Engineer Certified by Associate-Cloud-Engineer Dumps PDF: https://www.passleader.top/Google/Associate-Cloud-Engineer-exam-braindumps.html
New 2023 Realistic Associate-Cloud-Engineer Dumps Test Engine Exam Questions in here: https://drive.google.com/open?id=1_yBzQ3B9E4F2msKIBfsr9PNcQr96apdg