Use the best ways of preparing for Associate-Cloud-Engineer Exam Dumps with Lead2PassExam Google Associate-Cloud-Engineer dump PDF [2021]
Google Associate-Cloud-Engineer exam candidates will surely pass the Exam if they consider the Associate-Cloud-Engineer dumps learning material presented by Lead2PassExam.
NEW QUESTION 19
You want to verify the IAM users and roles assigned within a GCP project named my-project. What should you do?
- A. Navigate to the project and then to the Roles section in the GCP Console. Review the roles and status.
- B. Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles.
- C. Run gcloud iam service-accounts list. Review the output section.
- D. Run gcloud iam roles list. Review the output section.
Answer: A
NEW QUESTION 20
You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?
- A. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
- B. Run a select count (*) to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.
- C. Use the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.
- D. Use the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.
Answer: D
NEW QUESTION 21
You need to immediately change the storage class of an existing Google Cloud bucket.
You need to reduce service cost for infrequently accessed files stored in that bucket and for all files that will be added to that bucket in the future. What should you do?
- A. Use the gsutil to rewrite the storage class for the bucket.
Set up Object Lifecycle management on the bucket - B. Create a new bucket and change the default storage class for the bucket import the files from the previous bucket into the new bucket
- C. Use the gsutil to rewrite the storage class for the bucket.
Change the default storage class for the bucket - D. Create a new bucket and change the default storage class for the bucket.
Set up Object Lifecycle management on lite bucket
Answer: A
NEW QUESTION 22
You have a large 5-TB AVRO file stored in a Cloud Storage bucket. Your analysts are proficient only in SQL and need access to the data stored in this file. You want to find a cost-effective way to complete their request as soon as possible. What should you do?
- A. Create a Hadoop cluster and copy the AVRO file to NDFS by compressing it. Load the file in a hive table and provide access to your analysts so that they can run SQL queries.
- B. Create a BigQuery table and load data in BigQuery. Run a SQL query on this table and drop this table after you complete your request.
- C. Create external tables in BigQuery that point to Cloud Storage buckets and run a SQL query on these external tables to complete your request.
- D. Load data in Cloud Datastore and run a SQL query against it.
Answer: C
NEW QUESTION 23
You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?
- A. Create a health check on port 443 and use that when creating the Managed Instance Group.
- B. In the Instance Template, add a startup script that sends a heartbeat to the metadata server.
- C. Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
- D. In the Instance Template, add the label `health-check'.
Answer: D
NEW QUESTION 24
You have created an application that is packaged into a Docker image. You want to deploy the Docker image as a workload on Google Kubernetes Engine. What should you do?
- A. Upload the image to Cloud Storage and create a Kubernetes Deployment referencing the image
- B. Upload the image to Cloud Storage and create a Kubernetes Service referencing the image
- C. Upload the image to Container Registry and create a Kubernetes Service referencing the image.
- D. Upload the image to Container Registry and create a Kubernetes Deployment referencing the mage
Answer: C
NEW QUESTION 25
You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?
- A. Create a new App Engine application in the same project. Deploy the new version in that application. Use the App Engine library to proxy 1% of the requests to the new version.
- B. Create a new App Engine application in the same project. Deploy the new version in that application.
Configure your network load balancer to send 1% of the traffic to that new application. - C. Deploy the new version in the same application and use the --splitsoption to give a weight of 99 to the current version and a weight of 1 to the new version.
- D. Deploy the new version in the same application and use the --migrateoption.
Answer: C
NEW QUESTION 26
You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate reporting under the same Stackdriver Monitoring dashboard.
What should you do?
- A. Use Shared VPC to connect all projects, and link Stackdriver to one of the projects.
- B. Configure a single Stackdriver account, and link all projects to the same account.
- C. For each project, create a Stackdriver account. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all other projects.
- D. Configure a single Stackdriver account for one of the projects. In Stackdriver, create a Group and add the other project names as criteria for that Group.
Answer: D
NEW QUESTION 27
Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google's recommended practices. Which storage option should you use?
- A. Regional Storage
- B. Multi-Regional Storage
- C. Coldline Storage
- D. Nearline Storage
Answer: C
NEW QUESTION 28
You need to verify that a Google Cloud Platform service account was created at a particular time.
What should you do?
- A. Filter the Activity log to view the Configuration category. Filter the Resource type to Service Account.
- B. Filter the Activity log to view the Data Access category. Filter the Resource type to Google Project.
- C. Filter the Activity log to view the Configuration category. Filter the Resource type to Google Project.
- D. Filter the Activity log to view the Data Access category. Filter the Resource type to Service Account.
Answer: A
NEW QUESTION 29
Your management has asked an external auditor to review all the resources in a specific project.
The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?
- A. Ask the auditor for their Google account, and give them the Security Reviewer role on the project.
- B. Ask the auditor for their Google account, and give them the Viewer role on the project.
- C. Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.
- D. Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.
Answer: C
Explanation:
https://cloud.google.com/iam/docs/roles-audit-logging#scenario_external_auditors
NEW QUESTION 30
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?
- A. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
- B. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- C. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
- D. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
Answer: B
NEW QUESTION 31
Your customer has implemented a solution that uses Cloud Spanner and notices some read latency-related performance issues on one table. This table is accessed only by their users using a primary key. The table schema is shown below.
You want to resolve the issue. What should you do?
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: B
NEW QUESTION 32
You're working on setting up a cluster of virtual machines with GPUs to perform some 3D rendering for a customer. They're on a limited budget and are looking for ways to save money. What is the best solution for implementing this?
- A. Use App Engine with Flexible Environments.
- B. Use an unmanaged instance group with preemptible instances.
- C. Use App Engine with Standard Environments.
- D. Use an autoscaled managed instance group containing some preemptible instances.
Answer: C,D
NEW QUESTION 33
You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?
- A. Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
- B. Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtable.
Use the BigQuery console to join these tables through user fields, and apply appropriate filters. - C. Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
- D. Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
Answer: A
NEW QUESTION 34
Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?
- A. Add the users to a group, and add this group to roles/iam.roleViewer role.
- B. Add the users to a group, and add this group to roles/browser role.
- C. Add the users to roles/iam.roleViewer role.
- D. Add the users to roles/browser role.
Answer: D
NEW QUESTION 35
You need to configure optimal data storage for files stored in Cloud Storage for minimal cost. The files are used in a mission-critical analytics pipeline that is used continually. The users are in Boston, MA (United States). What should you do?
- A. Configure dual-regional storage for the dual region closest to the users.
Configure a Standard storage class - B. Configure dual-regional storage for the dual region closest to the users.
Configure a Nearline storage class - C. Configure regional storage for the region closest to the users.
Configure a Standard storage class - D. Configure regional storage for the region closest to the users.
Configure a Nearline storage class
Answer: C
NEW QUESTION 36
You have a simple web application that you're trying to deploy in a secure and inexpensive way. The application is running inside a Docker container on port 8080. Once the application is initially deployed, the developers are going to take ownership of future deployments.
What is the best option for running the application?
- A. Use an on-premises Kubernetes cluster.
- B. Use Kubernetes Engine.
- C. Use an App Engine Standard Environment.
- D. Use an App Engine Flexible Environment.
Answer: D
NEW QUESTION 37
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?
- A. Move both projects under the same folder.
- B. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.
Share the folder with the IoT team. - C. Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
- D. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
Answer: A
NEW QUESTION 38
You need to verify the assigned permissions in a custom IAM role. What should you do?
- A. Use the GCP Console, Security section to view the information.
- B. Use the GCP Console, IAM section to view the information.
- C. Use the "gcloud init" command to view the information.
- D. Use the GCP Console, API section to view the information.
Answer: B
Explanation:
A is correct because this is the correct console area to view permission assigned to a custom role in a particular project.
B is not correct because 'gcloud init' will not provide the information required.
C and D are not correct because these are not the correct areas to view this information
NEW QUESTION 39
......
Full Associate-Cloud-Engineer Practice Test and 245 unique questions with explanations waiting just for you, get it now: https://drive.google.com/open?id=1cn0dU1_HLBbGgqRt_Zb14toY_o5CwWsT
Accurate & Verified Answers As Seen in the Real Exam here: https://www.lead2passexam.com/Google/valid-Associate-Cloud-Engineer-exam-dumps.html