최신 Associate-Cloud-Engineer 무료덤프 - Google Associate Cloud Engineer

문제1

Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

A. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery dataViewer user role to the group.

B. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery jobUser role to the group.

C. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery dataViewer user role to the group.

D. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery jobUser role to the group.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제2

During a recent audit of your existing Google Cloud resources, you discovered several users with email addresses outside of your Google Workspace domain.
You want to ensure that your resources are only shared with users whose email addresses match your domain.
You need to remove any mismatched users, and you want to avoid having to audit your resources to identify mismatched users. What should you do?

A. Create a Cloud Scheduler task to regularly scan your projects and delete mismatched users.

B. Create a Cloud Scheduler task to regularly scan your resources and delete mismatched users.

C. Set an organizational policy constraint to limit identities by domain, and then retroactively remove the existing mismatched users.

D. Set an organizational policy constraint to limit identities by domain to automatically remove mismatched users.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제3

You need to add a group of new users to Cloud Identity. Some of the users already have existing Google accounts. You want to follow one of Google's recommended practices and avoid conflicting accounts. What should you do?

A. Tell the user to remove all personal email from the existing account

B. Invite the user to transfer their existing account

C. Invite the user to use an email alias to resolve the conflict

D. Tell the user that they must delete their existing account

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제4

You are responsible for a web application on Compute Engine. You want your support team to be notified automatically if users experience high latency for at least 5 minutes. You need a Google-recommended solution with no development cost. What should you do?

A. Create an alert policy to send a notification when the HTTP response latency exceeds the specified threshold.

B. Export Cloud Monitoring metrics to BigQuery and use a Looker Studio dashboard to monitor your web applications latency.

C. Implement an App Engine service which invokes the Cloud Monitoring API and sends a notification in case of anomalies.

D. Use the Cloud Monitoring dashboard to observe latency and take the necessary actions when the response latency exceeds the specified threshold.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?

A. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key in the metadata of each instance.

B. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the "compute.osAdminLogin" role to the Google group corresponding to this team.

C. Ask each member of the team to generate a new SSH key pair and to send you their public key. Use a configuration management tool to deploy those keys on each instance.

D. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제6

You want to select and configure a cost-effective solution for relational data on Google Cloud Platform. You are working with a small set of operational data in one geographic location. You need to support point-in-time recovery. What should you do?

A. Select Cloud SQL (MySQL). Select the create failover replicas option.

B. Select Cloud SQL (MySQL). Verify that the enable binary logging option is selected.

C. Select Cloud Spanner. Set up your instance with 2 nodes.

D. Select Cloud Spanner. Set up your instance as multi-regional.

정답: B

문제7

You used the gcloud container clusters command to create two Google Cloud Kubernetes (GKE) clusters prod-cluster and dev-cluster.
* prod-cluster is a standard cluster.
* dev-cluster is an auto-pilot duster.
When you run the Kubect1 get nodes command, you only see the nodes from prod-cluster Which commands should you run to check the node status for dev-cluster?

A.

B.

C.

D.

정답: C

문제8

You just installed the Google Cloud CLI on your new corporate laptop. You need to list the existing instances of your company on Google Cloud. What must you do before you run the gcloud compute instances list command?
Choose 2 answers

A. Download your Cloud Identity user account key. Place the key file in a folder on your machine where gcloud CLI can find it.

B. Create a Google Cloud service account, and download the service account key. Place the key file in a folder on your machine where gcloud CLI can find it.

C. Run gcloud config set compute/zone $my_zone to set the default zone for gcloud CLI.

D. Run gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI.

E. Run gcloud config set project $my_project to set the default project for gcloud CLI.

정답: D,E

설명: (DumpTOP 회원만 볼 수 있음)

문제9

You are deploying a production application on Compute Engine. You want to prevent anyone from accidentally destroying the instance by clicking the wrong button. What should you do?

A. Enable Preemptibility on the instance.

B. Disable the flag "Delete boot disk when instance is deleted."

C. Enable delete protection on the instance.

D. Disable Automatic restart on the instance.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제10

You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP.
You want to make sure it is reachable by clients over that port. What should you do?

A. Add a network tag of your choice to the instance running the LDAP server. Create a firewall rule to allow egress on UDP port 636 for that network tag.

B. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.

C. Add the network tag allow-udp-636 to the VM instance running the LDAP server.

D. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port
636 for that network tag.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제11

Your management has asked an external auditor to review all the resources in a specific project. The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?

A. Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.

B. Ask the auditor for their Google account, and give them the Security Reviewer role on the project.

C. Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.

D. Ask the auditor for their Google account, and give them the Viewer role on the project.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제12

You are in charge of provisioning access for all Google Cloud users in your organization. Your company recently acquired a startup company that has their own Google Cloud organization. You need to ensure that your Site Reliability Engineers (SREs) have the same project permissions in the startup company's organization as in your own organization. What should you do?

A. In the Google Cloud console for your organization, select Create role from selection, and choose destination as the startup company's organization

B. Use the gcloud iam roles copy command, and provide the Organization ID of the startup company's Google Cloud Organization as the destination.

C. In the Google Cloud console for the startup company, select Create role from selection and choose source as the startup company's Google Cloud organization.

D. Use the gcloud iam roles copy command, and provide the project IDs of all projects in the startup company s organization as the destination.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제13

Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?

A. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.

B. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.

C. Create an Instance Template with Preemptible VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.

D. Migrate the workload to a Compute Engine Preemptible VM.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제14

You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?

A. Deploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.

B. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.

C. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.

D. Deploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제15

You are the organization and billing administrator for your company. The engineering team has the Project Creator role on the organization. You do not want the engineering team to be able to link projects to the billing account. Only the finance team should be able to link a project to a billing account, but they should not be able to make any other changes to projects. What should you do?

A. Assign the finance team only the Billing Account User role on the billing account.

B. Assign the engineering team the Billing Account User role on the billing account and the Project Billing Manager role on the organization.

C. Assign the finance team the Billing Account User role on the billing account and the Project Billing Manager role on the organization.

D. Assign the engineering team only the Billing Account User role on the billing account.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제16

You are using Container Registry to centrally store your company's container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?

A. Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.

B. Create a service account, and give it access to Cloud Storage. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.

C. In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes.

D. When you create the GKE cluster, choose the Allow full access to all Cloud APIs option under 'Access scopes'.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제17

You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?

A. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.

B. Use the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.

C. Run a select count (*) to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.

D. Use the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.

정답: D

문제18

You have a Dockerfile that you need to deploy on Kubernetes Engine. What should you do?

A. Use gcloud app deploy <dockerfilename>.

B. Create a docker image from the Dockerfile and upload it to Cloud Storage. Create a Deployment YAML file to point to that image. Use kubectl to create the deployment with that file.

C. Create a docker image from the Dockerfile and upload it to Container Registry. Create a Deployment YAML file to point to that image. Use kubectl to create the deployment with that file.

D. Use kubectl app deploy <dockerfilename>.

정답: C

최신 Associate-Cloud-Engineer 무료덤프 - Google Associate Cloud Engineer

우리와 연락하기

유용한 링크

최신 업데이트