2023 Free Google Associate-Cloud-Engineer Exam Files Downloaded Instantly

Pass Google Associate-Cloud-Engineer exam Dumps 100 Pass Guarantee With Latest Demo

Training

While the exam curriculum covers a lot of knowledge and skills, Google offers enough tools to help candidates systematize their preparation process. Self-paced and in-classroom courses as well we lab practice are also available.

So, you can take advantage of Architecting with Google Compute Engine, a three-day course that will introduce you to Google Cloud infrastructure and platform services by focusing on Compute Engine.

Alternatively, candidates can pose their questions to an expert instructor regarding Google Сloud products at a one-day Google Cloud Fundamentals: Core Infrastructure training session that includes lectures, presentations, and lab activities.

In addition, Google recommends that all applicants who want to know more about the format, structure, and topics of the certification exam finish the Preparing for the Associate Cloud Engineer Examination course. It helps applicants to assess their strengths and weaknesses and be fully prepared on the day of the final test.

If you are not confident in your readiness, you can also check your skills by answering sample questions alongside doing self-paced labs offered by the vendor.

 

NEW QUESTION 110
You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone. You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?

• A. Set the europe-west1-d zone as the default zone using the gcloud config subcommand.
• B. In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.
• C. In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.
• D. Create a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1-d.

Answer: B

Explanation:
Explanation/Reference: https://cloud.google.com/compute/docs/gcloud-compute

 

NEW QUESTION 111
The sales team has a project named Sales Data Digest that has the ID acme-data-digest You need to set up similar Google Cloud resources for the marketing team but their resources must be organized independently of the sales team. What should you do?

• A. Create a Project Lien on acme-data digest and then grant the Project Editor role to the Marketing team
• B. Grant the Project Editor role to the Marketing learn for acme data digest
• C. Create a new protect named Meeting Data Digest and use the ID acme-data-digest Grant the Project Editor role to the Marketing team.
• D. Create another protect with the ID acme-marketing-data-digest for the Marketing team and deploy the resources there

Answer: D

Explanation:
The resources for the marketing team should be independent from the Sales team. Resources are tied and separated by projects.

 

NEW QUESTION 112
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

• A. Enable the Node Auto-Upgrades feature for your GKE cluster.
• B. Select the latest available cluster version for your GKE cluster.
• C. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.
• D. Enable the Node Auto-Repair feature for your GKE cluster.

Answer: A

 

NEW QUESTION 113
You're looking for the IP address of a specific instance that is running in your default zone. Which command and flag(s) could you use to return just the IP address?

• A. The gcloud compute list along with the filter and format flags.
• B. The gcloud compute instances list along with the o flag and jsonpath value.
• C. The gcloud compute list along with the o flag and jsonpath value.
• D. The gcloud compute instances list along with the filter and format flags.

Answer: D

 

NEW QUESTION 114
Your company developed a mobile game that is deployed on Google Cloud. Gamers are connecting to the game with their personal phones over the Internet. The game sends UDP packets to update the servers about the gamers' actions while they are playing in multiplayer mode. Your game backend can scale over multiple virtual machines (VMs), and you want to expose the VMs over a single IP address. What should you do?

• A. Configure an External Network load balancer in front of the application servers.
• B. Configure an Internal UDP load balancer in front of the application servers.
• C. Configure an SSL Proxy load balancer in front of the application servers.
• D. Configure an External HTTP(s) load balancer in front of the application servers.

Answer: A

Explanation:
Cell phones are sending UDP packets and the only that can receive that type of traffic is a External Network TCP/UDP.
https://cloud.google.com/load-balancing/docs/network

 

NEW QUESTION 115
You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?

• A. Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.
• B. Deploy the new version in the same application and use the --migrate option.
• C. Create a new App Engine application in the same project. Deploy the new version in that application.
  Use the App Engine library to proxy 1% of the requests to the new version.
• D. Create a new App Engine application in the same project. Deploy the new version in that application.
  Configure your network load balancer to send 1% of the traffic to that new application.

Answer: C

 

NEW QUESTION 116
You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide the application with access to Cloud Storage. What should you do?

• A. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.
  2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.
  3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com.
• B. 1. Use nslookupto get the IP address for storage.googleapis.com.
  2. Negotiate with the security team to be able to give a public IP address to the servers.
  3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.
• C. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).
  2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.
  3. Configure your servers to use that instance as a proxy to access Cloud Storage.
• D. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.
  2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.
  3. Configure your new instances to use this ILB as proxy.

Answer: D

 

NEW QUESTION 117
Your developers are trying to select the best compute service to run a static website. They have a dozen HTML pages, a few Javascript files, and some CSS. They need the site to be highly available for the few weeks it is running. They also have a limited budget.
What is the best service to use to run the site?

• A. Kubernetes Engine
• B. Compute Engine
• C. Cloud Storage
• D. App Engine

Answer: C

 

NEW QUESTION 118
You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

• A. Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
• B. Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
• C. Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.
• D. Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.

Answer: C

Explanation:
Reference:
https://towardsdatascience.com/enlightened-datalab-notebooks-35ce8ef374c0

 

NEW QUESTION 119
Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

• A. Create a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network. Configure a custom Route exchange.
  A subnet has a single primary IP address range and, optionally, one or more secondary IP address ranges. For each subnet IP address range, Google Cloud creates a subnet route. When you use VPC Network Peering, Google Cloud always exchanges the subnet routes that don't use privately reused public IP addresses between the two peered networks. If firewall rules in each network permit communication, VM instances in one network can communicate with instances in the peered network.
• B. Create a new Secondary IP Range in the VPC and configure the VMs to use that range.
• C. Create a new VPC network for the VMs. Enable VPC Peering between the VMs' VPC network and the Dataproc cluster VPC network.
• D. Modify the existing subnet range to 172.16.20.0/24.

Answer: B

Explanation:
Reference:
https://cloud.google.com/vpc/docs/vpc-peering

 

NEW QUESTION 120
You need to select and configure compute resources for a set of batch processing jobs. These jobs take around 2 hours to complete and are run nightly. You want to minimize service costs. What should you do?

• A. Select Compute Engine. Use VM instance types that support micro bursting.
• B. Select Google Kubernetes Engine. Use a single-node culster with a small instance type.
• C. Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
• D. Select Google Kubernetes Engine. Use a three-node cluster with micro instance type.

Answer: C

 

NEW QUESTION 121
You want to configure 10 Compute Engine instances for availability when maintenance occurs. Your requirements state that these instances should attempt to automatically restart if they crash. Also, the instances should be highly available including during system maintenance. What should you do?

• A. Create an instance templated for the instances. Set 'Automatic Restart' to off. Set 'On-host maintenance' to Terminate VM instances. Add the instance template to an instance group.
• B. Create an instance template for the instances. Set the 'Automatic Restart' to on. Set the 'On-host maintenance' to Migrate VM instance. Add the instance template to an intsance group.
• C. Create an instance group for the instances. Set the 'Autohealing' health check to healthy (HTTP).
• D. Create an instance group for the instance. Verify that the 'Advanced creation options' setting for 'do not retry machine creation' is set to off.

Answer: A

 

NEW QUESTION 122
You need to create a new billing account and then link it with an existing Google Cloud Platform project.
What should you do?

• A. Verify that you are Billing Administrator for the billing account.
  Create a new project and link the new project to the existing billing account.
• B. Verify that you are Project Billing Manager for the GCP project.
  Create a new billing account and link the new billing account to the existing project.
• C. Verify that you are Project Billing Manager for the GCP project.
  Update the existing project to link it to the existing billing account.
• D. Verify that you are Billing Administrator for the billing account.
  Update the existing project to link it to the existing billing account.

Answer: A

 

NEW QUESTION 123
You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google- recommended practices to provide the application with access to Cloud Storage. What should you do?

• A. 1. Use nslookup to get the IP address for storage.googleapis.com.
  2. Negotiate with the security team to be able to give a public IP address to the servers.
  3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.
• B. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.
  2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.
  3. Configure your new instances to use this ILB as proxy.
• C. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).
  2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.
  3. Configure your servers to use that instance as a proxy to access Cloud Storage.
• D. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.
  2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.
  3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com.

Answer: D

Explanation:
https://cloud.google.com/vpc/docs/configure-private-google-access-hybrid

 

NEW QUESTION 124
Your project has all its Compute Engine resources in the europe-west1 region. You want to set europe-west1 as the default region for gcloud commands. What should you do?

• A. Use "gcloud config set compute/zone europe-west1" to set the default region for future gcloud commands.
• B. Create a VPN from on-premises to a subnet in europe-west1, and use that connection when executing gcloud commands.
• C. Use "gcloud config set compute/region europe-west1" to set the default region for future gcloud commands.
• D. Use Cloud Shell instead of the command line interface of your device. Launch Cloud Shell after you navigate to a resource in the europe-west1 region. The europe-west1 region will automatically become the default region.

Answer: C

Explanation:
A is not correct because Cloud Shell will not default to the location that it's launched from.
B is correct because this will ensure that the relevant region is used when not overwritten by a command parameter.
C is not correct because this command should be used to set a zone, not a region.
D is not correct because a VPN to a specific subnet does not have any effect on the gcloud command region.
https://cloud.google.com/compute/docs/regions-zones/changing-default-zone-region

 

NEW QUESTION 125
......

Deploying & Implementing Cloud Solutions

To answer the questions related to this domain, the examinees need to show that they know how to deploy and implement Compute Engine resources, Google Kubernetes Engine resources, App Engine resources, Cloud Run resources, and Cloud Functions resources. Moreover, they should have a good understanding of how to deploy and implement data solutions as well as networking resources. They also need to have the capacity to perform the deployment of a solution with the help of Cloud Marketplace. Additionally, their ability to perform the deployment of application infrastructure with the help of Cloud Deployment Manager is required.

 

Read Online Associate-Cloud-Engineer Test Practice Test Questions Exam Dumps: https://prep4sure.vce4dumps.com/Associate-Cloud-Engineer-latest-dumps.html