Free Google Associate-Cloud-Engineer Exam Questions

Question 1

You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection. You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?

A : Use the GCP Console to transfer the file instead of gsutil.

B : Enable parallel composite uploads using gsutil on the file transfer.

C : Decrease the TCP window size on the machine initiating the transfer.

D : Change the storage class of the bucket from Nearline to Multi-Regional.

Answer: B

Question 2

You are writing a shell script that includes a few gcloud CLI commands to access some Google Cloudresources. You want to test the script in your local development environment with a service account in themost secure way. What should you do?

A : Download the service account key file and save it in a secure location. Set theGOOGLE_APPLICATION_CREDENTIALS environment variable to the key file.

B : Enable service account impersonation, and use the gcloud config set auth/impersonate_service_accountcommand to use it by default.

C : Generate an ID token for the service account. Use the token with the gcloud CLI commands.

D : Download the service account key file, and use it to generate an access token. Use the token with thegcloud CLI commands.

Answer: B

Question 3

(Your company uses a multi-cloud strategy that includes Google Cloud. You want to centralize application logs in a third-party software-as-a-service (SaaS) tool from all environments. You need to integrate logs originating from Cloud Logging, and you want to ensure the export occurs with the least amount of delay possible. What should you do?)

A : Use a Cloud Scheduler cron job to trigger a Cloud Function that queries Cloud Logging and sends the logs to the SaaS tool.

B : Create a Cloud Logging sink and configure Pub/Sub as the destination. Configure the SaaS tool to subscribe to the Pub/Sub topic to retrieve the logs.

C : Create a Cloud Logging sink and configure Cloud Storage as the destination. Configure the SaaS tool to read the Cloud Storage bucket to retrieve the logs.

D : Create a Cloud Logging sink and configure BigQuery as the destination. Configure the SaaS tool to query BigQuery to retrieve the logs

Answer: B

Question 4

Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire cloud infrastructure through code. How can you ensure that the pipeline has appropriate permissions while your system is following security best practices?

A : • Add a step for human approval to the CI/CD pipeline before the execution of the infrastructureprovisioning.• Use the human approvals IAM account for the provisioning.

B : • Attach a single service account to the compute instances.• Add minimal rights to the service account.• Allow the service account to impersonate a Cloud Identity user with elevated permissions to create, update, or delete resources.

C : • Attach a single service account to the compute instances.• Add all required Identity and Access Management (IAM) permissions to this service account to create, update, or delete resources

D : • Create multiple service accounts, one for each pipeline with the appropriate minimal Identity andAccess Management (IAM) permissions.• Use a secret manager service to store the key files of the service accounts.• Allow the CI/CD pipeline to request the appropriate secrets during the execution of the pipeline.

Answer: B

Question 5

You manage three Google Cloud projects with the Cloud Monitoring API enabled. You want to follow Google-recommended practices to visualize CPU and network metrics for all three projects together. What should you do?

A : 1. Create a Cloud Monitoring Dashboard2. Collect metrics and publish them into the Pub/Sub topics 3. Add CPU and network Charts (or each of (he three projects

B : 1. Create a Cloud Monitoring Dashboard.2. Select the CPU and Network metrics from the three projects. 3. Add CPU and network Charts lot each of the three protects.

C : 1 Create a Service Account and apply roles/viewer on the three projects2. Collect metrics and publish them lo the Cloud Monitoring API3. Add CPU and network Charts for each of the three projects.

D : 1. Create a fourth Google Cloud project2 Create a Cloud Workspace from the fourth project and add the other three projects

Answer: B