Google Associate Cloud Engineer Exam Questions and Answers (Page: 4)

QUESTION: 16

You have a single binary application that you want to run on Google Cloud Platform. You decided to automatically scale the application based on underlying infrastructure CPU usage. Your organizational policies require you to use virtual machines directly. You need to ensure that the application scaling is operationally efficient and completed as quickly as possible.
What should you do?

Create a Google Kubernetes Engine cluster, and use horizontal pod autoscaling to scale the application.
Create an instance template, and use the template in a managed instance group with autoscaling configured.
Create an instance template, and use the template in a managed instance group that scales up and down based on the time of day.
Use a set of third-party tools to build automation around scaling the application up and down, based on Stackdriver CPU usage monitoring.

Answer(s): B

Explanation:

Managed instance groups offer autoscaling capabilities that let you automatically add or delete instances from a managed instance group based on increases or decreases in load (CPU Utilization in this case). Autoscaling helps your apps gracefully handle increases in traffic and reduce costs when the need for resources is lower. You define the autoscaling policy and the autoscaler performs automatic scaling based on the measured load (CPU Utilization in this case). Autoscaling works by adding more instances to your instance group when there is more load (upscaling), and deleting instances when the need for instances is lowered (downscaling). Ref:
https://cloud.google.com/compute/docs/autoscaler

Reveal Solution Next Question

QUESTION: 17

You are analyzing Google Cloud Platform service costs from three separate projects. You want to use this information to create service cost estimates by service type, daily and monthly, for the next six months using standard query syntax.
What should you do?

Export your bill to a Cloud Storage bucket, and then import into Cloud Bigtable for analysis.
Export your bill to a Cloud Storage bucket, and then import into Google Sheets for analysis.
Export your transactions to a local file, and perform analysis with a desktop tool.
Export your bill to a BigQuery dataset, and then write time window-based SQL queries for analysis.

Answer(s): D

Explanation:

"...we recommend that you enable Cloud Billing data export to BigQuery at the same time that you create a Cloud Billing account. " https://cloud.google.com/billing/docs/how-to/export-data-bigquery https://medium.com/google-cloud/analyzing-google-cloud-billing-data-with-big-query- 30bae1c2aae4

Reveal Solution Next Question

QUESTION: 18

You need to set up a policy so that videos stored in a specific Cloud Storage Regional bucket are moved to Coldline after 90 days, and then deleted after one year from their creation. How should you set up the policy?

Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 275 days (365 90)
Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 365 days.
Use gsutil rewrite and set the Delete action to 275 days (365-90).
Use gsutil rewrite and set the Delete action to 365 days.

Answer(s): A

Explanation:

https://cloud.google.com/storage/docs/lifecycle#setstorageclass-cost # The object's time spent set at the original storage class counts towards any minimum storage duration that applies for the new storage class.

Reveal Solution Next Question

QUESTION: 19

You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account.
What should you do?

When creating the VM via the web console, specify the service account under the `Identity and API Access' section.
Download a JSON Private Key for the service account. On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.
Download a JSON Private Key for the service account. On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine-service-account.
Download a JSON Private Key for the service account. After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine-service-account.json.

Answer(s): A

Reference:

https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for- instances https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances Changing the service account and access scopes for an instance If you want to run the VM as a different identity, or you determine that the instance needs a different set of scopes to call the required APIs, you can change the service account and the access scopes of an existing instance. For example, you can change access scopes to grant access to a new API, or change an instance so that it runs as a service account that you created, instead of the Compute Engine default service account. However, Google recommends that you use the fine-grained IAM policies instead of relying on access scopes to control resource access for the service account. To change an instance's service account and access scopes, the instance must be temporarily stopped. To stop your instance, read the documentation for Stopping an instance. After changing the service account or access scopes, remember to restart the instance. Use one of the following methods to the change service account or access scopes of the stopped instance.

Reveal Solution Next Question

QUESTION: 20

You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps.
What should you do?

Install a RDP client on your desktop. Verify that a firewall rule for port 3389 exists.
Install a RDP client in your desktop. Set a Windows username and password in the GCP Console.
Use the credentials to log in to the instance.
Set a Windows password in the GCP Console. Verify that a firewall rule for port 22 exists. Click the RDP button in the GCP Console and supply the credentials to log in.
Set a Windows username and password in the GCP Console. Verify that a firewall rule for port 3389 exists. Click the RDP button in the GCP Console, and supply the credentials to log in.

Answer(s): D

Explanation:

https://cloud.google.com/compute/docs/instances/connecting-to-windows#remote-desktop- connection-app https://cloud.google.com/compute/docs/instances/windows/generating-credentials https://cloud.google.com/compute/docs/instances/connecting-to-windows#before-you-begin

Reveal Solution Next Question

Google Google Associate Cloud Engineer Exam (page: 4) Google Associate Cloud Engineer Updated on: 07-Feb-2026

QUESTION: 16

Explanation:

QUESTION: 17

Explanation:

QUESTION: 18

Explanation:

QUESTION: 19

Reference:

QUESTION: 20

Explanation:

Google Google Associate Cloud Engineer Exam (page: 4)
Google Associate Cloud Engineer
Updated on: 07-Feb-2026