Free Questions for Associate-Cloud-Engineer by dumpshq
Shared by Hopkins on 24-05-2024
For More Free Questions and Preparation Resources
Check the Links on Last Page
Question 1
Question Type: MultipleChoice
2. Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed
data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?
Options:
A) Assign the appropriate permissions, and then use Cloud Monitoring to review metrics
B) Use the export logs API to provide the Admin Activity Audit Logs in the format they want
C) Turn on Data Access Logs for the buckets they want to audit, and Then build a query in the log viewer that filters on Cloud Storage
D) Assign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs
Answer:
A
Question 2
Question Type: MultipleChoice
You need to create a Compute Engine instance in a new project that doesn't exist yet. What should you do?
Options:
A) Using the Cloud SDK, create a new project, enable the Compute Engine API in that project, and then create the instance specifying
your new project.
B) Enable the Compute Engine API in the Cloud Console, use the Cloud SDK to create the instance, and then use the ----project flag to
specify a new project.
C) Using the Cloud SDK, create the new instance, and use the ----project flag to specify the new project.
Answer yes when prompted by Cloud SDK to enable the Compute Engine API.
D) Enable the Compute Engine API in the Cloud Console. Go to the Compute Engine section of the Console to create a new instance,
and look for the Create In A New Project option in the creation form.
Answer:
A
Question 3
Question Type: MultipleChoice
Your developers are trying to connect to an Ubuntu server over SSH to diagnose some errors. However, the connection times out.
Which command should help solve the problem?
Options:
A) gcloud compute firewall-rules create 'open-ssh' --network $NETWORK --allow tcp:22
B) gcloud compute firewall-rules create 'open-ssh'
C) gcloud compute firewall-rules create 'open-ssh' --network $NETWORK --deny tcp:22
D) gcloud compute firewall-rules create 'open-ssh' --network $NETWORK --allow tcp:3389
Answer:
A
Question 4
Question Type: MultipleChoice
Your developers have created an application that needs to be able to make calls to Cloud Storage and BigQuery. The code is going to
run inside a container and will run on Kubernetes Engine and on-premises.
What's the best way for them to authenticate to the Google Cloud services?
Options:
A) Create a service account, grant it the least viable privileges to the required services, generate and download a key. Use the key to
authenticate inside the application.
B) Use the default service account for App Engine which already has the required permissions.
C) Use the default service account for Compute Engine which already has the required permissions.
D) Create a service account, with editor permissions, generate and download a key. Use the key to authenticate inside the application.
Answer:
A
Question 5
Question Type: MultipleChoice
What's the easiest way to ensure that the nodes in your Kubernetes cluster are always up-to-date with the latest stable version of
Kubernetes?
Options:
A) Opt into the Kubernetes Node Update program from the quotas page.
B) Run the kubectl nodes update command.
C) Run the kubectl nodes upgrade command.
D) Enable the automatic node upgrades setting.
Answer:
D
Question 6
Question Type: MultipleChoice
Your security team has been reluctant to move to the cloud because they don't have the level of network visibility they're used to. Which
feature might help them to gain insights into your Google Cloud network?
Options:
A) Routes
B) Subnets
C) Flow logs
D) Firewall rules
Answer:
C
Question 7
Question Type: MultipleChoice
You're deploying an application to a Compute Engine instance, and it's going to need to make calls to read from Cloud Storage and
Bigtable. You want to make sure you're following the principle of least privilege. What's the easiest way to ensure the code can
authenticate to the required Google Cloud APIs?
Options:
A) Create a new user account with the required roles. Store the credentials in Cloud Key Management Service and download them to
the instance in code.
B) Use the default Compute Engine service account and set its scopes. Let the code find the default service account using 'Application
Default Credentials'.
C) Create a new service account and key with the required limited permissions. Set the instance to use the new service account. Edit the
code to use the service account key.
D) Register the application with the Binary Registration Service and apply the required roles.
Answer:
B
Question 8
Question Type: MultipleChoice
You and your team have been working on a new application over the past couple weeks. While it's still in development, it's becoming a
bit costly for your limited budget. The entire team had a meeting on Friday to talk about how to save money until you're able to launch.
One of your team members suggested shutting down some services overnight and during the weekend. Though no official decision was
made before leaving for the weekend, a junior team member sent out an email saying he found a solution to the problem.
When arriving at the office on Monday, you find that your project is no longer in the drop-down inside the Console. What's the most likely
reason for the missing project?
Options:
A) The project was moved to another account.
B) Your trial credits expired, and the project was removed.
C) The engineer removed the project and attached all of the resources directly to the Organization.
D) The engineer clicked the 'shut down' link thinking it was like a light switch that he could toggle on and off.
Answer:
D
Question 9
Question Type: MultipleChoice
Your boss has asked you to set up the CFO as a user inside Google Cloud. Before walking away, she said, "And obviously you know
which role to assign him."
Which role was she likely talking about, and why is it obvious? (Select one role and one reason)
Options:
A) Reason: This role will ensure the CFO has full access to the project.
B) Role: Billing Account Viewer
C) Reason: This role will ensure the CFO has access to view the spending data.
D) Role: Project Owner
E) Role: Billing Account Admin
F) Reason:: This role will ensure the CFO can perform any billing task that they may need.
Answer:
B, C
Question 10
Question Type: MultipleChoice
You're attempting to remove the zone property from the Compute Engine service, that was set with the incorrect value. Which command
would accomplish your task?
Options:
A) gcloud config unset compute/zone
B) gcloud config unset zone
C) gcloud config configurations unset compute/zone
D) gcloud unset compute/zone
Answer:
A
Question 11
Question Type: MultipleChoice
You've been asked to add Martha Jones as a member of the "Production Storefront App" project; Using the email address
[Link]@[Link] with the App Engine Admin role. You browse to the IAM page in the console and attempt to add her, however,
you get the following error.
"Email addresses and domains must be associated with an active Google Account or Google Apps account."
What's the most likely cause for this error?
Options:
A) Martha has already been added as a to this project as a different member.
B) Martha has been denied access due to a policy on the Organization.
C) Martha hasn't been added as a user inside the Company's G Suite account.
D) Martha has an outstanding bill with Google and can't be added until the bill is paid.
Answer:
C
To Get Premium Files for Associate-Cloud-Engineer Visit
[Link]
For More Free Questions Visit
[Link]