Free Google Associate-Cloud-Engineer Exam Questions

Question 1

Your preview application, deployed on a single-zone Google Kubernetes Engine (GKE) cluster in us-centrall, has gained popularity. You are now ready to make the application generally available. You need to deploy the application to production while ensuring high availability and resilience. You also want to follow Googlerecommended practices. What should you do?

A : Use the gcloud container clusters create command with the options--enable-multi-networking and-- enable- autoscaling to create an autoscaling zonal cluster and deploy the application to it.

B : Use the gcloud container clusters create-auto command to create an autopilot cluster and deploy the application to it.

C : Use the gcloud container clusters update command with the option—region us-centrall to update the cluster and deploy the application to it.

D : Use the gcloud container clusters update command with the option—node-locations us-centrall-a,uscentrall-b to update the cluster and deploy the application to the nodes.

Answer: B

Question 2

Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire cloud infrastructure through code. How can you ensure that the pipeline has appropriate permissions while your system is following security best practices?

A : • Add a step for human approval to the CI/CD pipeline before the execution of the infrastructureprovisioning.• Use the human approvals IAM account for the provisioning.

B : • Attach a single service account to the compute instances.• Add minimal rights to the service account.• Allow the service account to impersonate a Cloud Identity user with elevated permissions to create, update, or delete resources.

C : • Attach a single service account to the compute instances.• Add all required Identity and Access Management (IAM) permissions to this service account to create, update, or delete resources

D : • Create multiple service accounts, one for each pipeline with the appropriate minimal Identity andAccess Management (IAM) permissions.• Use a secret manager service to store the key files of the service accounts.• Allow the CI/CD pipeline to request the appropriate secrets during the execution of the pipeline.

Answer: B

Question 3

You manage three Google Cloud projects with the Cloud Monitoring API enabled. You want to follow Google-recommended practices to visualize CPU and network metrics for all three projects together. What should you do?

A : 1. Create a Cloud Monitoring Dashboard2. Collect metrics and publish them into the Pub/Sub topics 3. Add CPU and network Charts (or each of (he three projects

B : 1. Create a Cloud Monitoring Dashboard.2. Select the CPU and Network metrics from the three projects. 3. Add CPU and network Charts lot each of the three protects.

C : 1 Create a Service Account and apply roles/viewer on the three projects2. Collect metrics and publish them lo the Cloud Monitoring API3. Add CPU and network Charts for each of the three projects.

D : 1. Create a fourth Google Cloud project2 Create a Cloud Workspace from the fourth project and add the other three projects

Answer: B

Question 4

You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps. What should you do?

A : Install a RDP client on your desktop. Verify that a firewall rule for port 3389 exists.

B : Install a RDP client in your desktop. Set a Windows username and password in the GCP Console. Use the credentials to log in to the instance.

C : Set a Windows password in the GCP Console. Verify that a firewall rule for port 22 exists. Click the RDP button in the GCP Console and supply the credentials to log in.

D : Set a Windows username and password in the GCP Console. Verify that a firewall rule for port 3389 exists. Click the RDP button in the GCP Console, and supply the credentials to log in.

Answer: D

Question 5

You have an application that is currently processing transactions by using a group of managed VM instances. You need to migrate the application so that it is serverless and scalable. You want to implement an asynchronous transaction processing system, while minimizing management overhead. What should you do?

A : Install Kafka on VM instances to acknowledge incoming transactions. Use Cloud Run to process transactions.

B : Install Kafka on VM Instances to acknowledge incoming transactions. Use VM Instances to process transactions.

C : Use Pub/Sub to acknowledge incoming transactions. Use VM instances to process transactions.

D : Use Pub/Sub to acknowledge incoming transactions. Use Cloud Run to process transactions.

Answer: D