Free 2022 Associate-Cloud-Engineer Dumps 100 Pass Guarantee With Latest Demo
Prepare Associate-Cloud-Engineer Question Answers Free Update With 100% Exam Passing Guarantee [2022]
The Google ACE exam covers five broad topics. Each section has a list of components that the candidates must study and understand before attempting the certification test. The domains are the following:
Setting Up Cloud Solution Environments
- Install and configure Cloud SDK CLI (Command Line Interface).
- Manage billing configuration: this involves skills in creating multiple billing accounts; linking projects to a specific billing account; determining the billing budget and alerts; creating billing exports for daily/monthly estimated charges;
- Set up Cloud accounts and projects: the activities under this component include creating projects; assigning the specific users to predetermined IAM roles for a project; managing the users within Cloud Identity allowing APIs in projects; provisioning multiple Stackdriver workspaces;
Below are the requirements of Associate Cloud Engineer Exam
There is no prerequisite for Oracle Associate Cloud Engineer certification.
Career prospects
The professionals with the Google Associate Cloud Engineer certification can explore different job roles. Some of these include a Cloud Operations Engineer, a Cloud Services Engineer, a Cloud Solutions Systems Engineer, a Cloud Network Engineer, and a Software Engineer. The average salary for these certified specialists is $74,000 per year. The actual salary depends on your position and level of experience.
NEW QUESTION 77
You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?
- A. Basic Scaling with min_instancesset to 3.
- B. Automatic Scaling with min_idle_instancesset to 3.
- C. Manual Scaling with 3 instances.
- D. Basic Scaling with max_instancesset to 3.
Answer: B
Explanation:
Explanation/Reference: https://cloud.google.com/appengine/docs/standard/python/how-instances-are-managed
NEW QUESTION 78
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have
96 vCPUs. - B. When creating the VM, use Intel Skylake as the CPU platform.
- C. When creating the VM, use machine type n1-standard-96.
- D. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
Answer: B
NEW QUESTION 79
Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?
- A. Create a ticket with Google Support and wait for their call to share your credit card details over the phone.
- B. In the Google Cloud Platform Console, create a new billing account and set up a payment method.
- C. Contact [email protected] with your bank account details and request a corporate billing account for your company.
- D. In the Google Platform Console, go to the Resource Manage and move all projects to the root Organization.
Answer: B
Explanation:
Reference:
https://www.whizlabs.com/blog/google-cloud-interview-questions/
NEW QUESTION 80
You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?
- A. Start the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.
- B. Reserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.
- C. Use the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.
- D. Reserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.
Answer: B
Explanation:
IP 10.0.3.21 is internal by default, and to ensure that it will be static non-changing it should be selected as static internal ip address.
NEW QUESTION 81
Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.
Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
* Instances in tier #1 must communicate with tier #2.
* Instances in tier #2 must communicate with tier #3.
What should you do?
- A. 1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow all
- B. 1. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.1.0/24)* Protocols: allow all
- C. 1. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow TCP: 80802. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to
10.0.1.0/24)* Protocols: allow TCP: 8080 - D. 1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow TCP:80802. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow TCP: 8080
Answer: D
NEW QUESTION 82
You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?
- A. Create a new VPC network with subnetworks in all desired regions
- B. Configure your Cloud Spanner instance to be multi-regional
- C. Grant yourself the IAM role of Cloud Spanner Admin
- D. Enable the Cloud Spanner API
Answer: B
NEW QUESTION 83
You've created a bucket to store some data archives for compliance. The data isn't likely to need to be viewed. However, you need to store it for at least 7 years. What is the best default storage class?
- A. Coldline
- B. Regional
- C. Multi-regional
- D. Nearline
Answer: A,B
NEW QUESTION 84
You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?
- A. Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.
- B. Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
- C. Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
- D. Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.
Answer: A
NEW QUESTION 85
Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?
- A. Create the instance without a public IP address.
- B. Create the instance with Private Google Access enabled.
- C. Create a deny-all egress firewall rule on the VPC network.
- D. Create a route on the VPC to route all traffic to the instance over the VPN tunnel.
Get private access to Google services, such as storage, big data, analytics, or machine learning, without having to give your service a public IP address.
Answer: B
Explanation:
Reference:
https://cloud.google.com/vpc
NEW QUESTION 86
Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.
Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
* Instances in tier #1 must communicate with tier #2.
* Instances in tier #2 must communicate with tier #3.
What should you do?
- A. 1. Create an ingress firewall rule with the following settings:
* Targets: all instances with tier #2 service account
* Source filter: all instances with tier #1 service account
* Protocols: allow all
2. Create an ingress firewall rule with the following settings:
* Targets: all instances with tier #3 service account
* Source filter: all instances with tier #2 service account
* Protocols: allow all - B. 1. Create an ingress firewall rule with the following settings:
* Targets: all instances
* Source filter: IP ranges (with the range set to 10.0.2.0/24)
* Protocols: allow all
2. Create an ingress firewall rule with the following settings:
* Targets: all instances
* Source filter: IP ranges (with the range set to 10.0.1.0/24)
* Protocols: allow all - C. 1. Create an egress firewall rule with the following settings:
* Targets: all instances
* Source filter: IP ranges (with the range set to 10.0.2.0/24)
* Protocols: allow TCP: 8080
2. Create an egress firewall rule with the following settings:
* Targets: all instances
* Source filter: IP ranges (with the range set to 10.0.1.0/24)
* Protocols: allow TCP: 8080 - D. 1. Create an ingress firewall rule with the following settings:
* Targets: all instances with tier #2 service account
* Source filter: all instances with tier #1 service account
* Protocols: allow TCP:8080
2. Create an ingress firewall rule with the following settings:
* Targets: all instances with tier #3 service account
* Source filter: all instances with tier #2 service account
* Protocols: allow TCP: 8080
Answer: D
NEW QUESTION 87
You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?
- A. 1. Create a configuration for each project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned GCP projects. - B. 1. Create a configuration for each project you need to manage.
2. Use gcloud init to update the configuration values when you need to work with a non-default project - C. 1. Use the default configuration for one project you need to manage.
2. Use gcloud init to update the configuration values when you need to work with a non-default project. - D. 1. Use the default configuration for one project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
Answer: C
NEW QUESTION 88
Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.
Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
* Instances in tier #1 must communicate with tier #2.
* Instances in tier #2 must communicate with tier #3.
What should you do?
- A. 1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow all
- B. 1. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.1.0/24)* Protocols: allow all
- C. 1. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow TCP: 80802. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to
10.0.1.0/24)* Protocols: allow TCP: 8080 - D. 1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow TCP:80802. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow TCP: 8080
Answer: D
NEW QUESTION 89
You host a static website on Cloud Storage. Recently, you began to include links to PDF files on this site.
Currently, when users click on the links to these PDF files, their browsers prompt them to save the file onto their local system. Instead, you want the clicked PDF files to be displayed within the browser window directly, without prompting the user to save the file locally. What should you do?
- A. Set Content-Type metadata to application/pdf on the PDF file objects.
- B. Add a label to the storage bucket with a key of Content-Type and value of application/pdf.
- C. Enable Cloud CDN on the website frontend.
- D. Enable 'Share publicly' on the PDF file objects.
Answer: A
NEW QUESTION 90
You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?
- A. Create a new App Engine application in the same project. Deploy the new version in that application.
Use the App Engine library to proxy 1% of the requests to the new version. - B. Deploy the new version in the same application and use the --migrate option.
- C. Create a new App Engine application in the same project. Deploy the new version in that application.
Configure your network load balancer to send 1% of the traffic to that new application. - D. Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.
Answer: D
NEW QUESTION 91
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention.
What should you do?
- A. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
- B. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
- C. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- D. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
Answer: B
Explanation:
Explanation
Explanation/Reference: https://cloud.google.com/logging/docs/audit/
NEW QUESTION 92
You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible.
Which range should you use?
- A. 172.16.0.0/12
- B. 192.168.0.0/16
- C. 0.0.0.0/0
- D. 10.0.0.0/8
Answer: D
Explanation:
https://cloud.google.com/vpc/docs/vpc#manually_created_subnet_ip_ranges From the RFC 1918 defined ranges, 10.0.0.0/8 is the "largest".
NEW QUESTION 93
......
Dumps Real Google Associate-Cloud-Engineer Exam Questions [Updated 2022]: https://freedownload.prep4sures.top/Associate-Cloud-Engineer-real-sheets.html