최신 Associate-Cloud-Engineer 무료덤프 - Google Associate Cloud Engineer

문제1

You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone.
You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?

A. In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.

B. Create a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1-d.

C. Set the europe-west1-d zone as the default zone using the gcloud config subcommand.

D. In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance.
What should you do?

A. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.

B. Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to the role.

C. Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to a new group.Add the group to the role.

D. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

You have an on-premises data analytics set of binaries that processes data files in memory for about 45 minutes every midnight. The sizes of those data files range from 1 gigabyte to 16 gigabytes. You want to migrate this application to Google Cloud with minimal effort and cost. What should you do?

A. Upload the code to Cloud Functions. Use Cloud Scheduler to start the application.

B. Lift and shift to a VM on Compute Engine. Use an instance schedule to start and stop the instance.

C. Create a container for the set of binaries Deploy the container to Google Kubernetes Engine (GKE) and use the Kubernetes scheduler to start the application.

D. Create a container for the set of binaries. Use Cloud Scheduler to start a Cloud Run job for the container.

정답: D

문제4

You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?

A. Deploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.

B. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.

C. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.

D. Deploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

You are hosting an application from Compute Engine virtual machines (VMs) in us-central1-a. You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?

A. - Create a Managed Instance Group and specify us-central1-a as the zone.
-Configure the Health Check with a short Health Interval.

B. - Create an HTTP(S) Load Balancer.
-Create one or more global forwarding rules to direct traffic to your VMs.

C. - Create Compute Engine resources in us-central1-b.
-Balance the load across both us-central1-a and us-central1-b.

D. - Perform regular backups of your application.
-Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.
-Restore from backups when notified.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible. What should you do?

A. Create a new Kubernetes Engine cluster. Create a deployment for the Jenkins image.

B. Deploy Jenkins through the Google Cloud Marketplace.

C. Create an instance template with the Jenkins executable. Create a managed instance group with this template.

D. Create a new Compute Engine instance. Run the Jenkins executable.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제7

You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

A. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.

B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.

C. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP.
You want to make sure it is reachable by clients over that port. What should you do?

A. Add a network tag of your choice to the instance running the LDAP server. Create a firewall rule to allow egress on UDP port 636 for that network tag.

B. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.

C. Add the network tag allow-udp-636 to the VM instance running the LDAP server.

D. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port
636 for that network tag.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Your company has embraced a hybrid cloud strategy where some of the applications are deployed on Google Cloud. A Virtual Private Network (VPN) tunnel connects your Virtual Private Cloud (VPC) in Google Cloud with your company's on-premises network. Multiple applications in Google Cloud need to connect to an on-premises database server, and you want to avoid having to change the IP configuration in all of your applications when the IP of the database changes.
What should you do?

A. Query the Compute Engine internal DNS from the applications to retrieve the IP of the database.

B. Create a private zone on Cloud DNS, and configure the applications with the DNS name.

C. Configure Cloud NAT for all subnets of your VPC to be used when egressing from the VM instances.

D. Configure the IP of the database as custom metadata for each instance, and query the metadata server.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제10

You deployed an application on a managed instance group in Compute Engine. The application accepts Transmission Control Protocol (TCP) traffic on port 389 and requires you to preserve the IP address of the client who is making a request. You want to expose the application to the internet by using a load balancer.
What should you do?

A. Expose the application by using an SSL Proxy Load Balancer.

B. Expose the application by using a TCP Proxy Load Balancer.

C. Expose the application by using an external TCP Network Load Balancer.

D. Expose the application by using an internal TCP Network Load Balancer.

정답: B

문제11

Your organization uses Active Directory (AD) to manage user identities. Each user uses this identity for federated access to various on-premises systems. Your security team has adopted a policy that requires users to log into Google Cloud with their AD identity instead of their own login. You want to follow the Google-recommended practices to implement this policy. What should you do?

A. Sync Identities in the Google Admin console, and then enable Oauth for single sign-on

B. Sync identities with 3rd party LDAP sync, and then copy passwords to allow simplified login with (he same credentials

C. Sync Identities with Cloud Directory Sync, and then enable SAML for single sign-on

D. Sync identities with Cloud Directory Sync, and then copy passwords to allow simplified login with the same credentials.

정답: C

문제12

You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset What should you do?

A. Create a Service Account in your own project, and ask the partner to grant this Service Account access to BigQuery in their project

B. Ask the partner to create a Service Account in their project, and have them give the Service Account access to BigQuery in their project

C. Create a Service Account in your own project, and grant this Service Account access to BigGuery in your project

D. Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제13

Your coworker has helped you set up several configurations for gcloud. You've noticed that you're running commands against the wrong project. Being new to the company, you haven't yet memorized any of the projects. With the fewest steps possible, what's the fastest way to switch to the correct configuration?

A. Run gcloud config configurations list followed by gcloud config configurations activate.

B. Run gcloud config list followed by gcloud config activate.

C. Run gcloud configurations list followed by gcloud configurations activate .

D. Re-authenticate with the gcloud auth login command and select the correct configurations on login.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제14

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

A. Use the command gcloud projects get-iam-policy to view the current role assignments.

B. Enable Audit Logs on the IAM & admin page for all resources, and validate the results.

C. Navigate to Identity-Aware Proxy and check the permissions for these resources.

D. In the console, validate which SSH keys have been stored as project-wide keys.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제15

You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?

A. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.

B. Use the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.

C. Run a select count (*) to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.

D. Use the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.

정답: D

문제16

You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm. What should you do?

A. Download the private key from the service account, and add it to each VMs custom metadata.

B. Download the private key from the service account, and add the private key to each VM's SSH keys.

C. Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.

D. When creating the VMs, set the service account's API scope for Compute Engine to read/write.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제17

You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

A. Enable the Node Auto-Upgrades feature for your GKE cluster.

B. Enable the Node Auto-Repair feature for your GKE cluster.

C. Select the latest available cluster version for your GKE cluster.

D. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

우리와 연락하기

문의할 점이 있으시면 메일을 보내오세요. 12시간이내에 답장드리도록 하고 있습니다.

근무시간: ( UTC+9 ) 9:00-24:00
월요일~토요일

서포트: 바로 연락하기

최신 Associate-Cloud-Engineer 무료덤프 - Google Associate Cloud Engineer

우리와 연락하기

유용한 링크

최신 업데이트