Free Google Associate-Cloud-Engineer Exam Questions

Question 1

You are writing a shell script that includes a few gcloud CLI commands to access some Google Cloudresources. You want to test the script in your local development environment with a service account in themost secure way. What should you do?

A : Download the service account key file and save it in a secure location. Set theGOOGLE_APPLICATION_CREDENTIALS environment variable to the key file.

B : Enable service account impersonation, and use the gcloud config set auth/impersonate_service_accountcommand to use it by default.

C : Generate an ID token for the service account. Use the token with the gcloud CLI commands.

D : Download the service account key file, and use it to generate an access token. Use the token with thegcloud CLI commands.

Answer: B

Question 2

Your company wants to provide engineers with access to explore Google Cloud freely in a sandboxenvironment. The total budget for testing across your organization is $1,000. You need to ensure thatengineers are notified when the budget is about to be reached. You want to automate your solution as much aspossible. What should you do?

A : Configure a billing data export to a BigQuery dataset on the Cloud Billing account. Create a dashboard for all costs related to the sandbox experiments. Share the dashboard with all engineers.

B : Create a Google Cloud Folder and ensure that all sandbox projects are located under that Folder. Createa Budget Alert for $1,000 and scope it to the Folder. Configure an email alert to billing administratorsand users once the budget is 90% reached.

C : Create a separate Cloud Billing account for all sandbox projects. Link a credit card with a limit of$1,000 to this billing account. Ensure all sandbox projects are linked to this new Cloud Billing account.

D : Create an email template reminding people to regularly check their Google Cloud spend. Create aCloud Run function that sends the email to all the project owners. Create a daily job in Cloud Schedulerthat triggers the Cloud Run function. Deploy this solution for each sandbox.

Answer: B

Question 3

You are writing a shell script that includes a few gcloud CLI commands to access some Google Cloudresources. You want to test the script in your local development environment with a service account in themost secure way. What should you do?

A : Download the service account key file and save it in a secure location. Set theGOOGLE_APPLICATION_CREDENTIALS environment variable to the key file.

B : Enable service account impersonation, and use the gcloud config set auth/impersonate_service_accountcommand to use it by default.

C : Generate an ID token for the service account. Use the token with the gcloud CLI commands.

D : Download the service account key file, and use it to generate an access token. Use the token with thegcloud CLI commands.

Answer: B

Question 4

You created a cluster.YAML file containingresources: name: cluster type: container.v1.cluster properties: zone: europe-west1-b cluster: description: My GCP ACE cluster initialNodeCount: 2 You want to use Cloud Deployment Manager to create this cluster in GKE. What should you do?

A : gcloud deployment-manager deployments create my-gcp-ace-cluster --config cluster.yaml

B : gcloud deployment-manager deployments create my-gcp-ace-cluster --type container.v1.cluster --config cluster.yaml

C : gcloud deployment-manager deployments apply my-gcp-ace-cluster --type container.v1.cluster --config cluster.yaml

D : gcloud deployment-manager deployments apply my-gcp-ace-cluster --config cluster.yaml

Answer: D

Question 5

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

A : Create a service account with an access scope. Use the access scope‘https://www.googleapis.com/auth/devstorage.write_only’

B : Create a service account with an access scope. Use the access scope‘https://www.googleapis.com/auth/cloud-platform’

C : eate a service account and add it to the IAM role ‘storage.objectCreator’ for that bucket.

D : eate a service account and add it to the IAM role ‘storage.objectAdmin’ for that bucket.

Answer: B