Google Associate-Cloud-Engineer Practice Exam Questions

Google Associate-Cloud-Engineer Sample Question Answers

Question # 1

You are planning to move your company's website and a specific asynchronous background job to Google Cloud Your website contains only static HTML content The background job is started through an HTTP endpoint and generates monthly invoices for your customers. Your website needs to be available in multiple geographic locations and requires autoscaling. You want to have no costs when your workloads are not In use and follow recommended practices. What should you do? 

A. Move your website to Google Kubemetes Engine (GKE). and move your background job to Cloud Functions 
B. Move both your website and background job to Compute Engine. 
C. Move both your website and background job to Cloud Run. 
D. Move your website to Google Kubemetes Engine (GKE), and move your background job to Compute Engine 

Show Answer

Question # 2

Your company runs a variety of applications and workloads on Google Cloud and you are responsible for managing cloud costs. You need to identify a solution that enables you to perform detailed cost analysis You also must be able to visualize the cost data in multiple ways on the same dashboard What should you do? 

A. Use the cost breakdown report with the available filters from Cloud Billing to visualize the data 
B. Enable the Cloud Billing export to BigQuery. and use Looker Studio to visualize the data 
C. Run Queries in Cloud Monitoring Create dashboards to visualize the billing metrics 
D. Enable Cloud Monitoring metrics export to BigQuery and use Looker to visualize the data 

Show Answer

Question # 3

You are the Google Cloud systems administrator for your organization. User A reports that they received an error when attempting to access the Cloud SQL database in their Google Cloud project, while User B can access the database. You need to troubleshoot the issue for User A, while following Google-recommended practices. What should you do first? 

A. Confirm that network firewall rules are not blocking traffic for User A. 
B. Review recent configuration changes that may have caused unintended modifications to permissions. 
C. Verify that User A has the Identity and Access Management (IAM) Project Owner role assigned. 
D. Review the error message that User A received. 

Show Answer

Question # 4

Your company stores data from multiple sources that have different data storage requirements. These data include: 1. Customer data that is structured and read with complex queries 2. Historical log data that is large in volume and accessed infrequently 3. Real-time sensor data with high-velocity writes, which needs to be available for analysis but can tolerate some data loss You need to design the most cost-effective storage solution that fulfills all data storage requirements. What should you do? 

A. Use Spanner for all data.
B. Use Cloud SQL for customer data, Cloud Storage (Coldline) for historical logs, and BigQuery for sensor data.
C. Use Cloud SQL for customer data, Cloud Storage (Archive) for historical logs, and Bigtable for sensor data. 
D. Use Firestore for customer data, Cloud Storage (Nearline) for historical logs, and Bigtable for sensor data. 

Show Answer

Question # 5

You are planning to migrate your containerized workloads to Google Kubernetes Engine (GKE). You need to determine which GKE option to use. Your solution must have high availability, minimal downtime, and the ability to promptly apply security updates to your nodes. You also want to pay only for the compute resources that your workloads use without managing nodes. You want to follow Google-recommended practices and minimize operational costs. What should you do? 

A. Configure a Standard multi-zonal GKE cluster. 
B. Configure an Autopilot GKE cluster. 
C. Configure a Standard zonal GKE cluster. 
D. Configure a Standard regional GKE cluster. 

Show Answer

Question # 6

You are planning to migrate a database and a backend application to a Standard Google Kubernetes Engine (GKE) cluster. You need to prevent data loss and make sure there are enough nodes available for your backend application based on the demands of your workloads. You want to follow Googlerecommended practices and minimize the amount of manual work required. What should you do?

A. Run your database as a StatefulSet. Configure cluster autoscaling to handle changes in the demands of your workloads. 
B. Run your database as a single Pod. Run the resize command when you notice changes in the demands of your workloads.
C. Run your database as a Deployment. Configure cluster autoscaling to handle changes in the demands of your workloads. 
D. Run your database as a DaemonSet. Run the resize command when you notice changes in the demands of your workloads. 

Show Answer

Question # 7

Your company has many legacy third-party applications that rely on a shared NFS server for file sharing between these workloads. You want to modernize the NFS server by using a Google Cloud managed service. You need to select the solution that requires the least amount of change to the application. What should you do? 

A. Configure Firestore. Configure all applications to use Firestore instead of the NFS server. 
B. Deploy a Filestore instance. Replace all NFS mounts with a Filestore mount. 
C. Create a Cloud Storage bucket. Configure all applications to use Cloud Storage client libraries instead of the NFS server.
D. Create a Compute Engine instance and configure an NFS server on the instance. Point all NFS mounts to the Compute Engine instance.

Show Answer

Question # 8

You are deploying an application to Cloud Run. Your application requires the use of an API that runs on Google Kubernetes Engine (GKE). You need to ensure that your Cloud Run service can privately reach the API on GKE, and you want to follow Google-recommended practices. What should you do?

A. Deploy an ingress resource on the GKE cluster to expose the API to the internet. Use Cloud Armor to filter for IP addresses that can connect to the API. On the Cloud Run service, configure the application to fetch its public IP address and update the Cloud Armor policy on startup to allow this IP address to call the API on ports 80 and 443.
B. Create an egress firewall rule on the VPC to allow connections to 0.0.0.0/0 on ports 80 and 443. 
C. Create an ingress firewall rule on the VPC to allow connections from 0.0.0.0/0 on ports 80 and 443. 
D. Deploy an internal Application Load Balancer to expose the API on GKE to the VPC. Configure Cloud DNS with the IP address of the internal Application Load Balancer. Deploy a Serverless VPC Access connector to allow the Cloud Run service to call the API through the FQDN on Cloud DNS. 

Show Answer

Question # 9

You assist different engineering teams in deploying their infrastructure on Google Cloud. Your company has defined certain practices required for all workloads. You need to provide the engineering teams with a solution that enables teams to deploy their infrastructure independently without having to know all implementation details of the company's required practices. What should you do? 

A. Create a service account per team, and grant the service account the Project Editor role. Ask the teams to provision their infrastructure through the Google Cloud CLI (gcloud CLI), while impersonating their dedicated service account. 
B. Provide training for all engineering teams you work with to understand the companys required practices. Allow the engineering teams to provision the infrastructure to best meet their needs.  
C. Configure organization policies to enforce your companys required practices. Ask the teams to provision their infrastructure by using the Google Cloud console.
D. Write Terraform modules for each component that are compliant with the companys required practices, and ask teams to implement their infrastructure through these modules. 

Show Answer

Question # 10

Your organization has decided to deploy all its compute workloads to Kubernetes on Google Cloud and two other cloud providers. You want to build an infrastructure-as-code solution to automate the provisioning process for all cloud resources. What should you do? 

A. Build the solution by using YAML manifests, and provision the resources. 
B. Build the solution by using Terraform, and provision the resources. 
C. Build the solution by using Python and the cloud SDKs from all providers to provision the resources. 
D. Build the solution by using Config Connector, and provision the resources. 

Show Answer