최신 Associate-Cloud-Engineer 무료덤프 - Google Associate Cloud Engineer

문제1

You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items.
How should you configure the auditor's permissions?

A. Select the built-in IAM service Viewer role. Add the user's account to this role.

B. Create a custom role with view-only project permissions. Add the user's account to the custom role.

C. Select the built-in IAM project Viewer role. Add the user's account to this role.

D. Create a custom role with view-only service permissions. Add the user's account to the custom role.

정답: C

문제2

You have deployed multiple Linux instances on Compute Engine. You plan on adding more instances in the coming weeks. You want to be able to access all of these instances through your SSH client over me Internet without having to configure specific access on the existing and new instances. You do not want the Compute Engine instances to have a public IP. What should you do?

A. Configure Cloud Identity-Aware Proxy (or HTTPS resources

B. Create an SSH keypair and store the public key as a project-wide SSH Key

C. Create an SSH keypair and store the private key as a project-wide SSH Key

D. Configure Cloud Identity-Aware Proxy for SSH and TCP resources.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate reporting under the same Stackdriver Monitoring dashboard. What should you do?

A. Configure a single Stackdriver account, and link all projects to the same account.

B. For each project, create a Stackdriver account. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all other projects.

C. Use Shared VPC to connect all projects, and link Stackdriver to one of the projects.

D. Configure a single Stackdriver account for one of the projects. In Stackdriver, create a Group and add the other project names as criteria for that Group.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제4

You will have several applications running on different Compute Engine instances in the same project. You want to specify at a more granular level the service account each instance uses when calling Google Cloud APIs. What should you do?

A. When creating the instances, assign the name of each Service Account as instance metadata

B. After starting the instances, use gcloud compute instances update to assign the name of the relevant Service Account as instance metadata

C. After starting the instances, use gcloud compute instances update to specify a Service Account for each instance

D. When creating the instances, specify a Service Account for each instance

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

You are the organization and billing administrator for your company. The engineering team has the Project Creator role on the organization. You do not want the engineering team to be able to link projects to the billing account. Only the finance team should be able to link a project to a billing account, but they should not be able to make any other changes to projects. What should you do?

A. Assign the finance team only the Billing Account User role on the billing account.

B. Assign the engineering team the Billing Account User role on the billing account and the Project Billing Manager role on the organization.

C. Assign the finance team the Billing Account User role on the billing account and the Project Billing Manager role on the organization.

D. Assign the engineering team only the Billing Account User role on the billing account.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Your company completed the acquisition of a startup and is now merging the IT systems of both companies.
The startup had a production Google Cloud project in their organization. You need to move this project into your organization and ensure that the project is billed lo your organization. You want to accomplish this task with minimal effort. What should you do?

A. Create an infrastructure-as-code template tor all resources in the project by using Terraform. and deploy that template to a new project in your organization. Delete the protect from the startup's Google Cloud organization.

B. Create a Private Catalog tor the Google Cloud Marketplace, and upload the resources of the startup's production project to the Catalog. Share the Catalog with your organization, and deploy the resources in your company's project.

C. Use the projects. move method to move the project to your organization. Update the billing account of the project to that of your organization.

D. Ensure that you have an Organization Administrator Identity and Access Management (IAM) role assigned to you in both organizations. Navigate to the Resource Manager in the startup's Google Cloud organization, and drag the project to your company's organization.

정답: D

문제7

Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google's recommended practices. Which storage option should you use?

A. Regional Storage

B. Coldline Storage

C. Nearline Storage

D. Multi-Regional Storage

정답: B

문제8

You have experimented with Google Cloud using your own credit card and expensed the costs to your company. Your company wants to streamline the billing process and charge the costs of your projects to their monthly invoice. What should you do?

A. Create a ticket with Google Billing Support to ask them to send the invoice to your company.

B. Set up BigQuery billing export and grant your financial department IAM access to query the data.

C. Grant the financial team the IAM role of #€Billing Account User#€ on the billing account linked to your credit card.

D. Change the billing account of your projects to the billing account of your company.

정답: D

문제9

Your continuous integration and delivery (CI/CD) server can't execute Google Cloud actions in a specific project because of permission issues. You need to validate whether the used service account has the appropriate roles in the specific project. What should you do?

A. Open the Google Cloud console, and check the organization policies.

B. Open the Google Cloud console, and run a query of the audit logs to find permission denied errors for this service account.

C. Open the Google Cloud console, and run a query to determine which resources this service account can access.

D. Open the Google Cloud console, and check the Identity and Access Management (IAM) roles assigned to the service account at the project or inherited from the folder or organization levels.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제10

You are assisting a new Google Cloud user who just installed the Google Cloud SDK on their VM. The server needs access to Cloud Storage. The user wants your help to create a new storage bucket. You need to make this change in multiple environments. What should you do?

A. Use a Persistent Disk SSD in the same zone as the VM to improve performance of the VM

B. Use the gsutii command to create a storage bucket in the same region as the VM

C. Use a local SSD to improve performance of the VM for the targeted workload

D. Use a Deployment Manager script to automate creating storage buckets in an appropriate region

정답: D

문제11

You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?

A. 1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.

B. 1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

C. 1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

D. 1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제12

You are responsible for a web application on Compute Engine. You want your support team to be notified automatically if users experience high latency for at least 5 minutes. You need a Google-recommended solution with no development cost. What should you do?

A. Create an alert policy to send a notification when the HTTP response latency exceeds the specified threshold.

B. Export Cloud Monitoring metrics to BigQuery and use a Looker Studio dashboard to monitor your web applications latency.

C. Implement an App Engine service which invokes the Cloud Monitoring API and sends a notification in case of anomalies.

D. Use the Cloud Monitoring dashboard to observe latency and take the necessary actions when the response latency exceeds the specified threshold.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제13

You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?

A. Expand the CIDR range of the relevant subnet for the cluster.

B. Create a new subnet in the same region as the subnet being used.

C. Add an alias IP range to the subnet used by the GKE clusters.

D. Create a new VPC, and set up VPC peering with the existing VPC.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제14

You have an application that receives SSL-encrypted TCP traffic on port 443. Clients for this application are located all over the world. You want to minimize latency for the clients. Which load balancing option should you use?

A. Internal TCP/UDP Load Balancer. Add a firewall rule allowing ingress traffic from 0.0.0.0/0 on the target instances.

B. Network Load Balancer

C. HTTPS Load Balancer

D. SSL Proxy Load Balancer

정답: D

문제15

You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible. What should you do?

A. Create a new Kubernetes Engine cluster. Create a deployment for the Jenkins image.

B. Deploy Jenkins through the Google Cloud Marketplace.

C. Create an instance template with the Jenkins executable. Create a managed instance group with this template.

D. Create a new Compute Engine instance. Run the Jenkins executable.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제16

Your company wants to migrate their on-premises workloads to Google Cloud. The current on-premises workloads consist of:
* A Flask web application
* AbackendAPI
* A scheduled long-running background job for ETL and reporting.
You need to keep operational costs low You want to follow Google-recommended practices to migrate these workloads to serverless solutions on Google Cloud. What should you do?

A. Run the web application on a Cloud Storage bucket and the backend API on Cloud Run Use Cloud Tasks to run your background job on Cloud Run.

B. Run the web application on a Cloud Storage bucket and the backend API on Cloud Run. Use Cloud Tasks to run your background job on Compute Engine

C. Migrate the web application to App Engine and the backend API to Cloud Run Use Cloud Tasks to run your background job on Compute Engine

D. Migrate the web application to App Engine and the backend API to Cloud Run. Use Cloud Tasks to run your background job on Cloud Run.

정답: D

최신 Associate-Cloud-Engineer 무료덤프 - Google Associate Cloud Engineer

우리와 연락하기

유용한 링크

최신 업데이트