Google Associate Cloud Engineer Associate Cloud Engineer Exam Questions in PDF

Free Google Associate Cloud Engineer Dumps Questions (page: 5)

You have one GCP account running in your default region and zone and another account running in a non-default region and zone. You want to start a new Compute Engine instance in these two Google Cloud Platform accounts using the command line interface.
What should you do?

  1. Create two configurations using gcloud config configurations create [NAME]. Run gcloud config configurations activate [NAME] to switch between accounts when running the commands to start the Compute Engine instances.
  2. Create two configurations using gcloud config configurations create [NAME]. Run gcloud configurations list to start the Compute Engine instances.
  3. Activate two configurations using gcloud configurations activate [NAME]. Run gcloud config list to start the Compute Engine instances.
  4. Activate two configurations using gcloud configurations activate [NAME]. Run gcloud configurations list to start the Compute Engine instances.

Answer(s): A

Explanation:

"Run gcloud configurations list to start the Compute Engine instances". How the heck are you expecting to "start" GCE instances doing "configuration list".

Each gcloud configuration has a 1 to 1 relationship with the region (if a region is defined). Since we have two different regions, we would need to create two separate configurations using gcloud config configurations create
Ref: https://cloud.google.com/sdk/gcloud/reference/config/configurations/create

Secondly, you can activate each configuration independently by running gcloud config configurations activate [NAME]
Ref: https://cloud.google.com/sdk/gcloud/reference/config/configurations/activate

Finally, while each configuration is active, you can run the gcloud compute instances start [NAME] command to start the instance in the configurations region. https://cloud.google.com/sdk/gcloud/reference/compute/instances/start



You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes.
What should you do?

  1. Use granular logging statements within a Deployment Manager template authored in Python.
  2. Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
  3. Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.
  4. Execute the Deployment Manager template using the ­-preview option in the same project, and observe the state of interdependent resources.

Answer(s): D


Reference:

https://cloud.google.com/deployment-manager/docs/deployments/updating- deployments



You are building a pipeline to process time-series data.
Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?

  1. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
  2. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
  3. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
  4. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery

Answer(s): D


Reference:

https://cloud.google.com/solutions/correlating-time-series-dataflow https://cloud.google.com/blog/products/data-analytics/handling-duplicate-data-in-streaming- pipeline-using-pubsub-dataflow https://cloud.google.com/bigtable/docs/schema-design-time-series



You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment.
What should you do?

  1. Use gcloud to create the new project, and then deploy your application to the new project.
  2. Use gcloud to create the new project and to copy the deployed application to the new project.
  3. Create a Deployment Manager configuration file that copies the current App Engine deployment into a new project.
  4. Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project.

Answer(s): A

Explanation:

You can deploy to a different project by using ­project flag. By default, the service is deployed the current project configured via:

$ gcloud config set core/project PROJECT
To override this value for a single deployment, use the ­project flag:
$ gcloud app deploy ~/my_app/app.yaml ­project=PROJECT

Ref: https://cloud.google.com/sdk/gcloud/reference/app/deploy



You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices.
What should you do?

  1. Add the auditors group to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
  2. Add the auditors group to two new custom IAM roles.
  3. Add the auditor user accounts to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
  4. Add the auditor user accounts to two new custom IAM roles.

Answer(s): A

Explanation:

https://cloud.google.com/iam/docs/job-functions/auditing#scenario_external_auditors

Because if you directly add users to the IAM roles, then if any users left the organization then you have to remove the users from multiple places and need to revoke his/her access from multiple places. But, if you put a user into a group then its very easy to manage these type of situations. Now, if any user left then you just need to remove the user from the group and all the access got revoked

The organization creates a Google group for these external auditors and adds the current auditor to the group. This group is monitored and is typically granted access to the dashboard application. During normal access, the auditors' Google group is only granted access to view the historic logs stored in BigQuery. If any anomalies are discovered, the group is granted permission to view the actual Cloud Logging Admin Activity logs via the dashboard's elevated access mode. At the end of each audit period, the group's access is then revoked. Data is redacted using Cloud DLP before being made accessible for viewing via the dashboard application. The table below explains IAM logging roles that an Organization Administrator can grant to the service account used by the dashboard, as well as the resource level at which the role is granted.



Share your comments for Google Associate Cloud Engineer exam with other users:

Q
Q44
7/30/2023 11:50:00 AM

ans is coldline i think

A
Anastasiia
12/28/2023 9:06:00 AM

totally not correct answers. 21. you have one gcp account running in your default region and zone and another account running in a non-default region and zone. you want to start a new compute engine instance in these two google cloud platform accounts using the command line interface. what should you do? correct: create two configurations using gcloud config configurations create [name]. run gcloud config configurations activate [name] to switch between accounts when running the commands to start the compute engine instances.

A
Asad Khan
11/1/2023 2:44:00 AM

answer 10 should be a because only a new project will be created & the organization is the same.

A
Asad Khan
11/1/2023 3:10:00 AM

answer 16 should be b your organizational policies require you to use virtual machines directly

T
Tar01
7/24/2023 7:07:00 PM

the explanation are really helpful

S
S Roychowdhury
6/26/2023 5:27:00 PM

what is the percentage of common questions in gcp exam compared to 197 dump questions? are they 100% matching with real gcp exam?

AI Tutor 👋 I’m here to help!