Free Google Associate-Cloud-Engineer Exam Questions

Question 1

Your company wants to provide engineers with access to explore Google Cloud freely in a sandboxenvironment. The total budget for testing across your organization is $1,000. You need to ensure thatengineers are notified when the budget is about to be reached. You want to automate your solution as much aspossible. What should you do?

A : Configure a billing data export to a BigQuery dataset on the Cloud Billing account. Create a dashboard for all costs related to the sandbox experiments. Share the dashboard with all engineers.

B : Create a Google Cloud Folder and ensure that all sandbox projects are located under that Folder. Createa Budget Alert for $1,000 and scope it to the Folder. Configure an email alert to billing administratorsand users once the budget is 90% reached.

C : Create a separate Cloud Billing account for all sandbox projects. Link a credit card with a limit of$1,000 to this billing account. Ensure all sandbox projects are linked to this new Cloud Billing account.

D : Create an email template reminding people to regularly check their Google Cloud spend. Create aCloud Run function that sends the email to all the project owners. Create a daily job in Cloud Schedulerthat triggers the Cloud Run function. Deploy this solution for each sandbox.

Answer: B

Question 2

You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

A : Create a health check on port 443 and use that when creating the Managed Instance Group.

B : Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.

C : In the Instance Template, add the label ‘health-check’.

D : In the Instance Template, add a startup script that sends a heartbeat to the metadata server.

Answer: A

Question 3

You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in thissubnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?

A : 1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

B : 1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.

C : 1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

D : 1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

Answer: C

Question 4

Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire cloud infrastructure through code. How can you ensure that the pipeline has appropriate permissions while your system is following security best practices?

A : • Add a step for human approval to the CI/CD pipeline before the execution of the infrastructureprovisioning.• Use the human approvals IAM account for the provisioning.

B : • Attach a single service account to the compute instances.• Add minimal rights to the service account.• Allow the service account to impersonate a Cloud Identity user with elevated permissions to create, update, or delete resources.

C : • Attach a single service account to the compute instances.• Add all required Identity and Access Management (IAM) permissions to this service account to create, update, or delete resources

D : • Create multiple service accounts, one for each pipeline with the appropriate minimal Identity andAccess Management (IAM) permissions.• Use a secret manager service to store the key files of the service accounts.• Allow the CI/CD pipeline to request the appropriate secrets during the execution of the pipeline.

Answer: B

Question 5

Your company has an internal application for managing transactional orders. The application is used exclusively by employees in a single physical location. The application requires strong consistency, fast queries, and ACID guarantees for multi-table transactional updates. The first version of the application is implemented inPostgreSQL, and you want to deploy it to the cloud with minimal code changes. Which database is most appropriate for this application?

A : BigQuery

B : Cloud SQL

C : Cloud Spanner

D : Cloud Datastore

Answer: B