최신 Associate-Cloud-Engineer 무료덤프 - Google Associate Cloud Engineer

문제1

You need to track and verity modifications to a set of Google Compute Engine instances in your Google Cloud project. In particular, you want to verify OS system patching events on your virtual machines (VMs).
What should you do?

A. Install the Cloud Logging Agent In Cloud Logging review the Compute Engine syslog logs

B. Install the Cloud Logging Agent In Cloud Logging, review the Compute Engine operation logs

C. Review the Compute Engine activity logs Select and review the Admin Event logs

D. Review the Compute Engine activity logs Select and review the System Event logs

정답: C

문제2

Your application stores files on Cloud Storage by using the Standard Storage class. The application only requires access to files created in the last 30 days. You want to automatically save costs on files that are no longer accessed by the application. What should you do?

A. Create a cron job in Cloud Scheduler to call a Cloud Functions instance every day to delete files older than 30 days.

B. Enable object versioning on the storage bucket and add lifecycle rules to expire non-current versions after 30 days

C. Create an object lifecycle on the storage bucket to change the storage class to Archive Storage for objects with an age over 30 days.

D. Create a retention policy on the storage bucket of 30 days, and lock the bucket by using a retention policy lock.

정답: C

문제3

Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?

A. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.

B. Create a custom role by removing delete permissions, and add users to that role only.

C. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.

D. Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.

정답: D

문제4

Your company's security vulnerability management policy wonts 3 member of the security team to have visibility into vulnerabilities and other OS metadata for a specific Compute Engine instance This Compute Engine instance hosts a critical application in your Goggle Cloud project. You need to implement your company's security vulnerability management policy. What should you dc?

A. * Ensure that the OS Config agent Is Installed on the Compute Engine instance.
* Provide the security team member roles/configure.vulnerabilityViewer permission.

B. * Ensure that the OS Config agent is installed on the Compute Engine instance
* Create a log sink Co a BigQuery dataset.
* Provide the security team member with access to this dataset.

C. * Ensure that the Ops Agent is installed on tie Compute Engine instance.
* Provide the security team member roles/configure.inventoryViewer permission.

D. * Ensure that the Ops Agent Is Installed on the Compute Engine instance.
* Create a custom metric in the Cloud Monitoring dashboard.
* Provide the security team member with access to this dashboard.

정답: A

문제5

You have a Bigtable instance that consists of three nodes that store personally identifiable information (Pll) data. You need to log all read or write operations, including any metadata or configuration reads of this database table, in your company's Security Information and Event Management (SIEM) system. What should you do?

A. * Navigate to the Audit Logs page in the Google Cloud console, and enable Data Read. Data Write and Admin Read logs for the Bigtable instance
* Create a Pub/Sub topic as a Cloud Logging sink destination, and add your SIEM as a subscriber to the topic.

B. * Navigate to the Audit Logs page in the Google Cloud console, and enable Admin Write logs for the Biglable instance.
* Create a Cloud Functions instance to export logs from Cloud Logging to your SIEM.

C. * Navigate to Cloud Mentioning in the Google Cloud console, and create a custom monitoring job for the Bigtable instance to track all changes.
* Create an alert by using webhook endpoints. with the SIEM endpoint as a receiver

D. * Install the Ops Agent on the Bigtable instance during configuration. K
* Create a service account with read permissions for the Bigtable instance.
* Create a custom Dataflow job with this service account to export logs to the company's SIEM system.

정답: B

문제6

Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account.
You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?

A. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.

B. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.

C. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.

D. Link the acquired company's projects to your company's billing account.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance.
What should you do?

A. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.

B. Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to the role.

C. Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to a new group.Add the group to the role.

D. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Your managed instance group raised an alert stating that new instance creation has failed to create new instances. You need to maintain the number of running instances specified by the template to be able to process expected application traffic. What should you do?

A. Verify that the instance template being used by the instance group contains valid syntax. Delete any persistent disks with the same name as instance names. Set the disks.autoDelete property to true in the instance template.

B. Delete the current instance template and replace it with a new instance template. Verify that the instance name and persistent disk name values are not the same in the template. Set the disks.autoDelete property to true in the instance template.

C. Create an instance template that contains valid syntax which will be used by the instance group. Delete any persistent disks with the same name as instance names.

D. Create an instance template that contains valid syntax that will be used by the instance group. Verify that the instance name and persistent disk name values are not the same in the template.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제9

An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

A. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.Share the folder with the IoT team.

B. Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.

C. Move both projects under the same folder.

D. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제10

You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?

A. Expand the CIDR range of the relevant subnet for the cluster.

B. Create a new subnet in the same region as the subnet being used.

C. Add an alias IP range to the subnet used by the GKE clusters.

D. Create a new VPC, and set up VPC peering with the existing VPC.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제11

You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?

A. Deploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.

B. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.

C. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.

D. Deploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제12

You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?

A. Run gcloud projects list to get the project ID, and then run gcloud services list --project <project ID>.

B. Run gcloud init to set the current project to my-project, and then run gcloud services list --available.

C. Run gcloud projects describe <project ID> to verify the project value, and then run gcloud services list
--available.

D. Run gcloud info to view the account value, and then run gcloud services list --account <Account>.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제13

You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

A. Cloud Firestore

B. Cloud SQL

C. Cloud Datastore

D. Cloud Spanner

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제14

You are managing a Data Warehouse on BigQuery. An external auditor will review your company's processes, and multiple external consultants will need view access to the data. You need to provide them with view access while following Google-recommended practices. What should you do?

A. Create a Google Group that contains the consultants, and grant the group the role of BigQuery Viewer

B. Create a Google Group that contains the consultants and grant the group the role of BigQuery Editor

C. Grant each individual external consultant the role of BigQuery Editor

D. Grant each individual external consultant the role of BigQuery Viewer

정답: A

문제15

You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML.
You need to enable authentication to the APIs from your on-premises environment. What should you do?

A. Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.

B. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.

C. Use gcloud to create a key file for the service account that has appropriate permissions.

D. Use service account credentials in your on-premises application.

정답: C

문제16

You have a number of compute instances belonging to an unmanaged instances group. You need to SSH to one of the Compute Engine instances to run an ad hoc script. You've already authenticated gcloud, however, you don't have an SSH key deployed yet. In the fewest steps possible, what's the easiest way to SSH to the instance?

A. Create a key with the ssh-keygen command. Then use the gcloud compute ssh command.

B. Create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.

C. Use the gcloud compute ssh command.

D. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제17

You are building an application that processes data files uploaded from thousands of suppliers. Your primary goals for the application are data security and the expiration of aged data. You need to design the application to:
*Restrict access so that suppliers can access only their own data.
*Give suppliers write access to data only for 30 minutes.
*Delete data that is over 45 days old.
You have a very short development cycle, and you need to make sure that the application requires minimal maintenance. Which two strategies should you use? (Choose two.)

A. Set up an SFTP server for your application, and create a separate user for each supplier.

B. Build a Cloud function that triggers a timer of 45 days to delete objects that have expired.

C. Use signed URLs to allow suppliers limited time access to store their objects.

D. Build a lifecycle policy to delete Cloud Storage objects after 45 days.

E. Develop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than 45 days.

정답: C,D

설명: (DumpTOP 회원만 볼 수 있음)

문제18

You host a static website on Cloud Storage. Recently, you began to include links to PDF files on this site.
Currently, when users click on the links to these PDF files, their browsers prompt them to save the file onto their local system. Instead, you want the clicked PDF files to be displayed within the browser window directly, without prompting the user to save the file locally. What should you do?

A. Enable Cloud CDN on the website frontend.

B. Add a label to the storage bucket with a key of Content-Type and value of application/pdf.

C. Enable 'Share publicly' on the PDF file objects.

D. Set Content-Type metadata to application/pdf on the PDF file objects.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

최신 Associate-Cloud-Engineer 무료덤프 - Google Associate Cloud Engineer

우리와 연락하기

유용한 링크

최신 업데이트