Free Google Associate-Cloud-Engineer Exam Questions

Question 1

You created a cluster.YAML file containingresources: name: cluster type: container.v1.cluster properties: zone: europe-west1-b cluster: description: My GCP ACE cluster initialNodeCount: 2 You want to use Cloud Deployment Manager to create this cluster in GKE. What should you do?

A : gcloud deployment-manager deployments create my-gcp-ace-cluster --config cluster.yaml

B : gcloud deployment-manager deployments create my-gcp-ace-cluster --type container.v1.cluster --config cluster.yaml

C : gcloud deployment-manager deployments apply my-gcp-ace-cluster --type container.v1.cluster --config cluster.yaml

D : gcloud deployment-manager deployments apply my-gcp-ace-cluster --config cluster.yaml

Answer: D

Question 2

You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers’ Pods. What should you do?

A : Use Binary Authorization and whitelist only the container images used by your customers’ Pods.

B : Use the Container Analysis API to detect vulnerabilities in the containers used by your customers’ Pods.

C : Create a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customers’ Pods.

D : Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google. com/gke-os-distribution: cos_containerd to the specification of your customers’ Pods.

Answer: C

Question 3

You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?

A : 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic.2. Call your application on Cloud Run from the Cloud Function for every message.

B : 1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run.2. Create a Cloud Pub /Sub subscription for that topic.3. Make your application pull messages from that subscription.

C : 1. Create a service account.2. Give the Cloud Run Invoker role to that service account for your Cloud Run application.3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint.

D : 1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal.2. Create a Cloud Pub/Sub subscription for that topic.3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application.

Answer: C

Question 4

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

A : Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.

B : Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.

C : Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.

D : Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: D

Question 5

Your preview application, deployed on a single-zone Google Kubernetes Engine (GKE) cluster in us-centrall, has gained popularity. You are now ready to make the application generally available. You need to deploy the application to production while ensuring high availability and resilience. You also want to follow Googlerecommended practices. What should you do?

A : Use the gcloud container clusters create command with the options--enable-multi-networking and-- enable- autoscaling to create an autoscaling zonal cluster and deploy the application to it.

B : Use the gcloud container clusters create-auto command to create an autopilot cluster and deploy the application to it.

C : Use the gcloud container clusters update command with the option—region us-centrall to update the cluster and deploy the application to it.

D : Use the gcloud container clusters update command with the option—node-locations us-centrall-a,uscentrall-b to update the cluster and deploy the application to the nodes.

Answer: B