Google Associate Cloud Engineer Exam Questions and Answers (Page: 5)

QUESTION: 21

You have one GCP account running in your default region and zone and another account running in a non-default region and zone. You want to start a new Compute Engine instance in these two Google Cloud Platform accounts using the command line interface.
What should you do?

Create two configurations using gcloud config configurations create [NAME]. Run gcloud config configurations activate [NAME] to switch between accounts when running the commands to start the Compute Engine instances.
Create two configurations using gcloud config configurations create [NAME]. Run gcloud configurations list to start the Compute Engine instances.
Activate two configurations using gcloud configurations activate [NAME]. Run gcloud config list to start the Compute Engine instances.
Activate two configurations using gcloud configurations activate [NAME]. Run gcloud configurations list to start the Compute Engine instances.

Answer(s): A

Explanation:

"Run gcloud configurations list to start the Compute Engine instances". How the heck are you expecting to "start" GCE instances doing "configuration list".

Each gcloud configuration has a 1 to 1 relationship with the region (if a region is defined). Since we have two different regions, we would need to create two separate configurations using gcloud config configurations create
Ref: https://cloud.google.com/sdk/gcloud/reference/config/configurations/create

Secondly, you can activate each configuration independently by running gcloud config configurations activate [NAME]
Ref: https://cloud.google.com/sdk/gcloud/reference/config/configurations/activate

Finally, while each configuration is active, you can run the gcloud compute instances start [NAME] command to start the instance in the configurations region. https://cloud.google.com/sdk/gcloud/reference/compute/instances/start

Reveal Solution Next Question

QUESTION: 22

You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes.
What should you do?

Use granular logging statements within a Deployment Manager template authored in Python.
Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.
Execute the Deployment Manager template using the -preview option in the same project, and observe the state of interdependent resources.

Answer(s): D

Reference:

https://cloud.google.com/deployment-manager/docs/deployments/updating- deployments

Reveal Solution Next Question

QUESTION: 23

You are building a pipeline to process time-series data.
Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?

Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery

Answer(s): D

Reference:

https://cloud.google.com/solutions/correlating-time-series-dataflow https://cloud.google.com/blog/products/data-analytics/handling-duplicate-data-in-streaming- pipeline-using-pubsub-dataflow https://cloud.google.com/bigtable/docs/schema-design-time-series

Reveal Solution Next Question

QUESTION: 24

You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment.
What should you do?

Use gcloud to create the new project, and then deploy your application to the new project.
Use gcloud to create the new project and to copy the deployed application to the new project.
Create a Deployment Manager configuration file that copies the current App Engine deployment into a new project.
Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project.

Answer(s): A

Explanation:

You can deploy to a different project by using project flag. By default, the service is deployed the current project configured via:

$ gcloud config set core/project PROJECT
To override this value for a single deployment, use the project flag:
$ gcloud app deploy ~/my_app/app.yaml project=PROJECT

Ref: https://cloud.google.com/sdk/gcloud/reference/app/deploy

Reveal Solution Next Question

QUESTION: 25

You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices.
What should you do?

Add the auditors group to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
Add the auditors group to two new custom IAM roles.
Add the auditor user accounts to the `logging.viewer' and `bigQuery.dataViewer' predefined IAM roles.
Add the auditor user accounts to two new custom IAM roles.

Answer(s): A

Explanation:

https://cloud.google.com/iam/docs/job-functions/auditing#scenario_external_auditors

Because if you directly add users to the IAM roles, then if any users left the organization then you have to remove the users from multiple places and need to revoke his/her access from multiple places. But, if you put a user into a group then its very easy to manage these type of situations. Now, if any user left then you just need to remove the user from the group and all the access got revoked

The organization creates a Google group for these external auditors and adds the current auditor to the group. This group is monitored and is typically granted access to the dashboard application. During normal access, the auditors' Google group is only granted access to view the historic logs stored in BigQuery. If any anomalies are discovered, the group is granted permission to view the actual Cloud Logging Admin Activity logs via the dashboard's elevated access mode. At the end of each audit period, the group's access is then revoked. Data is redacted using Cloud DLP before being made accessible for viewing via the dashboard application. The table below explains IAM logging roles that an Organization Administrator can grant to the service account used by the dashboard, as well as the resource level at which the role is granted.

Reveal Solution Next Question

Google Google Associate Cloud Engineer Exam (page: 5) Google Associate Cloud Engineer Updated on: 25-Dec-2025

QUESTION: 21

Explanation:

QUESTION: 22

Reference:

QUESTION: 23

Reference:

QUESTION: 24

Explanation:

QUESTION: 25

Explanation:

Google Google Associate Cloud Engineer Exam (page: 5)
Google Associate Cloud Engineer
Updated on: 25-Dec-2025