ASSOCIATE-CLOUD-ENGINEER Exam Questions
410 real ASSOCIATE-CLOUD-ENGINEER exam questions with expert-verified answers and explanations. Page 7 of 9.
- Question #301Configuring access and security
You have a Bigtable instance that consists of three nodes that store personally identifiable information (PII) data. You need to log all read or write operations, including any met...
Audit LogsBigtableData Access logsSIEM - Question #302Deploying and implementing a cloud solution
You want to set up a Google Kubernetes Engine cluster. Verifiable node identity and integrity are required for the cluster, and nodes cannot be accessed from the internet. You want...
GKE Autopilotprivate clustershielded nodesnode integrity - Question #303Deploying and implementing a cloud solution
Your company wants to migrate their on-premises workloads to Google Cloud. The current on- premises workloads consist of: - A Flask web application - A backend API - A scheduled lo...
App EngineCloud RunCloud Schedulerserverless migration - Question #304Configuring access and security
Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire cloud infrastructure through code....
Service AccountsIAMLeast PrivilegeCI/CD Security - Question #305Planning and configuring a cloud solution
Your application stores files on Cloud Storage by using the Standard Storage class. The application only requires access to files created in the last 30 days. You want to automatic...
Cloud StorageObject Lifecycle ManagementCost OptimizationStorage Classes - Question #306Ensuring successful operation of a cloud solution
Your manager asks you to deploy a workload to a Kubernetes cluster. You are not sure of the workload's resource requirements or how the requirements might vary depending on usage p...
Kubernetes AutoscalingVertical Pod AutoscalerHorizontal Pod AutoscalerResource Optimization - Question #307Planning and configuring a cloud solution
You need to migrate invoice documents stored on-premises to Cloud Storage. The documents have the following storage requirements: - Documents must be kept for five years. - Up to f...
Cloud StorageObject VersioningLifecycle ManagementCost Optimization - Question #308Setting up a cloud solution environment
You installed the Google Cloud CLI on your workstation and set the proxy configuration. However, you are worried that your proxy credentials will be recorded in the gcloud CLI logs...
gcloud CLIProxy configurationSecurityCredential management - Question #309Deploying and implementing a cloud solution
Your company developed an application to deploy on Google Kubernetes Engine. Certain parts of the application are not fault-tolerant and are allowed to have downtime. Other parts o...
GKE node poolsSpot VMscost optimizationworkload scheduling - Question #310Deploying and implementing a cloud solution
You need to deploy an application in Google Cloud using serverless technology. You want to test a new version of the application with a small percentage of production traffic. What...
Cloud RunServerlessTraffic SplittingCanary Deployment - Question #311Configuring access and security
Your company's security vulnerability management policy wants a member of the security team to have visibility into vulnerabilities and other OS metadata for a specific Compute Eng...
Compute EngineOS Config agentVulnerability ManagementOS Metadata - Question #312Deploying and implementing a cloud solution
You want to enable your development team to deploy new features to an existing Cloud Run service in production. To minimize the risk associated with a new revision, you want to red...
Cloud RunDeployment StrategyTraffic SplittingRevision Management - Question #313Configuring access and security
You have deployed an application on a Compute Engine instance. An external consultant needs to access the Linux-based instance. The consultant is connected to your corporate networ...
SSH key pairsCompute Engine accessexternal user accessLinux VM - Question #314Ensuring successful operation of a cloud solution
After a recent security incident, your startup company wants better insight into what is happening in the Google Cloud environment. You need to monitor unexpected firewall changes...
Cloud Audit Logslog-based metricssecurity monitoringCloud Logging - Question #315Configuring access and security
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery dataset...
service accountscross-project IAMBigQuery accessleast privilege - Question #316Planning and configuring a cloud solution
Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnetwork with range 172.16.20.128/25. There are no private IP addresses available in the su...
VPC subnetsCIDR expansionDataprocIP address management - Question #317Planning and configuring a cloud solution
You are building a backend service for an ecommerce platform that will persist transaction data from mobile and web clients. After the platform is launched, you expect a large volu...
Cloud Spannerglobal transactionsscalable RDBMSmulti-region - Question #318Configuring access and security
You are in charge of provisioning access for all Google Cloud users in your organization. Your company recently acquired a startup company that has their own Google Cloud organizat...
IAM role copycross-organizationgcloud CLISRE access management - Question #319Deploying and implementing a cloud solution
You need to extract text from audio files by using the Speech-to-Text API. The audio files are pushed to a Cloud Storage bucket. You need to implement a fully managed, serverless c...
Cloud FunctionsCloud Storage triggersSpeech-to-Text APIserverless - Question #320Deploying and implementing a cloud solution
Your customer wants you to create a secure website with autoscaling based on the compute instance CPU load. You want to enhance performance by storing static content in Cloud Stora...
HTTP(S) load balancingmanaged SSL certificateURL mapstatic content - Question #321Planning and configuring a cloud solution
The core business of your company is to rent out construction equipment at large scale. All the equipment that is being rented out has been equipped with multiple sensors that send...
Bigtablerow key designtime-series datahigh throughput IoT - Question #322Setting up a cloud solution environment
You just installed the Google Cloud CLI on your new corporate laptop. You need to list the existing instances of your company on Google Cloud. What must you do before you run the g...
gcloud CLI setupauthenticationproject configurationCloud SDK - Question #323Deploying and implementing a cloud solution
You are planning to migrate your on-premises data to Google Cloud. The data includes: - 200 TB of video files in SAN storage - Data warehouse data stored on Amazon Redshift - 20 GB...
Transfer ApplianceBigQuery Data Transfer ServiceStorage Transfer Servicedata migration - Question #324Deploying and implementing a cloud solution
You want to deploy a new containerized application into Google Cloud by using a Kubernetes manifest. You want to have full control over the Kubernetes deployment, and at the same t...
GKE AutopilotKubernetes manifestscontainer deploymentmanaged GKE - Question #325Planning and configuring a cloud solution
Your team is building a website that handles votes from a large user population. The incoming votes will arrive at various rates. You want to optimize the storage and processing of...
Pub/SubCloud Functionsevent-driven architecturevariable throughput - Question #326Configuring access and security
You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company's security policies, your application must connect to your...
Cloud SQL IAM authenticationCloud SQL Auth Proxyencrypted connectionsIAM integration - Question #327Planning and configuring a cloud solution
You have two Google Cloud projects: project-a with VPC vpc-a (10.0.0.0/16) and project-b with VPC vpc-b (10.8.0.0/16). Your frontend application resides in vpc-a and the backend AP...
VPC peeringcross-project networkingcost-effective connectivityVPC - Question #328Ensuring successful operation of a cloud solution
Your company is running a critical workload on a single Compute Engine VM instance. Your company's disaster recovery policies require you to back up the entire instance's disk data...
persistent disk snapshotsscheduled snapshotsbackup retentiondisaster recovery - Question #329Deploying and implementing a cloud solution
Your company requires that Google Cloud products are created with a specific configuration to comply with your company's security policies. You need to implement a mechanism that w...
Terraforminfrastructure as codesecurity complianceIaC modules - Question #330Setting up a cloud solution environment
You are a Google Cloud organization administrator. You need to configure organization policies and log sinks on Google Cloud projects that cannot be removed by project users to com...
organization policiesfolder hierarchylog sinkssecurity compliance - Question #331Deploying and implementing a cloud solution
You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to imp...
HTTP(S) load balancingmanaged instance groupsDNS recordsHTTPS - Question #332Ensuring successful operation of a cloud solution
You have several hundred microservice applications running in a Google Kubernetes Engine (GKE) cluster. Each microservice is a deployment with resource limits configured for each c...
Vertical Pod AutoscalerGKE resource limitsright-sizingcontainer autoscaling - Question #333Ensuring successful operation of a cloud solution
Your company uses BigQuery to store and analyze data. Upon submitting your query in BigQuery, the query fails with a quotaExceeded error. You need to diagnose the issue causing the...
BigQuery quota errorsINFORMATION_SCHEMACloud Audit Logsquery diagnostics - Question #334Deploying and implementing a cloud solution
Your team has developed a stateless application which requires it to be run directly on virtual machines. The application is expected to receive a fluctuating amount of traffic and...
managed instance groupautoscalingstateless workloadCompute Engine - Question #335Ensuring successful operation of a cloud solution
Your web application is hosted on Cloud Run and needs to query a Cloud SQL database. Every morning during a traffic spike, you notice API quota errors in Cloud SQL logs. The projec...
Cloud Run min instancesCloud SQL quotacold start mitigationtraffic spike - Question #336Deploying and implementing a cloud solution
You need to deploy a single stateless web application with a web interface and multiple endpoints. For security reasons, the web application must be reachable from an internal IP a...
Cloud RunPrivate Service Connectinternal IP accessVPC networking - Question #337Setting up a cloud solution environment
Your coworker has helped you set up several configurations for gcloud. You've noticed that you're running commands against the wrong project. Being new to the company, you haven't...
gcloud configurationsgcloud CLIproject switching - Question #338Planning and configuring a cloud solution
The storage costs for your application logs have far exceeded the project budget. The logs are currently being retained indefinitely in the Cloud Storage bucket myapp-gcp-ace-logs....
Cloud Storage lifecycleobject expirationgsutil lifecycle setcost optimization - Question #339Setting up a cloud solution environment
Users of your application are complaining of slowness when loading the application. You realize the slowness is because the App Engine deployment serving the application is deploye...
App Engine regionproject creationregion immutability - Question #340Planning and configuring a cloud solution
A company wants to build an application that stores images in a Cloud Storage bucket and wants to generate thumbnails as well as resize the images. They want to use a google manage...
Cloud Functionsserverlessscale to zeroevent-driven - Question #341Planning and configuring a cloud solution
You are designing an application that lets users upload and share photos. You expect your application to grow really fast and you are targeting a worldwide audience. You want to de...
multiregional Cloud Storageobject lifecyclehigh availabilityglobal distribution - Question #342Planning and configuring a cloud solution
You are designing an application that uses WebSockets and HTTP sessions that are not distributed across the web servers. You want to ensure the application runs properly on Google...
WebSocketssession affinityload balancingstateful sessions - Question #343Ensuring successful operation of a cloud solution
You have a number of compute instances belonging to an unmanaged instances group. You need to SSH to one of the Compute Engine instances to run an ad hoc script. You've already aut...
gcloud compute sshSSH key managementCompute Engine access - Question #344Deploying and implementing a cloud solution
You created a cluster.YAML file containing resources: name: cluster type: container.v1.cluster properties: zone: europe-west1-b cluster: description: My GCP ACE cluster initialNode...
Cloud Deployment ManagerYAML configgcloud deployment-managerGKE cluster provisioning - Question #345Ensuring successful operation of a cloud solution
You created a Kubernetes deployment by running kubectl run nginx image=nginx labels=app=prod. Your Kubernetes cluster is also used by a number of other deployments. How can you fin...
kubectl label selectorpod filteringGKE operations - Question #346Ensuring successful operation of a cloud solution
You created a Kubernetes deployment by running kubectl run nginx image=nginx replicas=1. After a few days, you decided you no longer want this deployment. You identified the pod an...
kubectl delete deploymentpod lifecycleReplicaSet behaviorGKE - Question #347Planning and configuring a cloud solution
You have a number of applications that have bursty workloads and are heavily dependent on topics to decouple publishing systems from consuming systems. Your company would like to g...
Cloud FunctionsPub/Sub integrationserverlessscale to zero - Question #348Deploying and implementing a cloud solution
You have been asked to migrate a docker application from datacenter to cloud. Your solution architect has suggested uploading docker images to GCR in one project and running an app...
Container RegistryCloud Buildimage taggingcross-project registry - Question #349Configuring access and security
You have files in a Cloud Storage bucket that you need to share with your suppliers. You want to restrict the time that the files are available to your suppliers to 1 hour. You wan...
signed URLsservice accounttemporary accessCloud Storage - Question #350Ensuring successful operation of a cloud solution
You have a managed instance group comprised of preemptible VM's. All of the VM's keepdeleting and recreating themselves every minute. What is a possible cause of thisbehavior?
managed instance grouppreemptible VMshealth checksVM recreation