Instant Download Associate-Cloud-Engineer Dumps Q&As Provide PDF&Test Engine
Fast Exam Updates Associate-Cloud-Engineer dumps with PDF Test Engine Practice
NEW QUESTION # 171
Your company has developed a new application that consists of multiple microservices. You want to deploy the application to Google Kubernetes Engine (GKE), and you want to ensure that the cluster can scale as more applications are deployed in the future. You want to avoid manual intervention when each new application is deployed. What should you do?
- A. Create a separate node pool for each application, and deploy each application to its dedicated node pool.
- B. Deploy the application on GKE, and add a VerticalPodAutoscaler to the deployment.
- C. Deploy the application on GKE, and add a HorizontalPodAutoscaler to the deployment.
- D. Create a GKE cluster with autoscaling enabled on the node pool. Set a minimum and maximum for the size of the node pool.
Answer: D
Explanation:
https://cloud.google.com/kubernetes-engine/docs/how-to/cluster-autoscaler#adding_a_node_pool_with_autoscaling
NEW QUESTION # 172
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?
- A. Enable node auto-provisioning on the GKE cluster.
- B. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
- C. Create a VerticalPodAutscaler for those workloads.
- D. Create a node pool with preemptible VMs and GPUs attached to those VMs.
Answer: A
Explanation:
auto-provisioning = Attaches and deletes node pools to cluster based on the requirements. Hence creating a GPU node pool, and auto-scaling would be better https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-provisioning
NEW QUESTION # 173
Your company implemented BigQuery as an enterprise data warehouse. Users from multiple business units run queries on this data warehouse. However, you notice that query costs for BigQuery are very high, and you need to control costs. Which two methods should you use? (Choose two.)
- A. Split your BigQuery data warehouse into multiple data warehouses for each business unit.
- B. Create separate copies of your BigQuery data warehouse for each business unit.
- C. Apply a user- or project-level custom query quota for BigQuery data warehouse.
- D. Change your BigQuery query model from on-demand to flat rate. Apply the appropriate number of slots to each Project.
- E. Split the users from business units to multiple projects.
Answer: C,D
Explanation:
https://cloud.google.com/bigquery/docs/custom-quotashttps://cloud.google.com/bigquery/pricing#flat_rate_prici
NEW QUESTION # 174
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements. You want to select a cost-efficient option. Which storage option should you use?
- A. Cold Storage
- B. Nearline Storage
- C. Regional Storage
- D. Multi-Regional Storage
Answer: B
Explanation:
Nearline, Coldline, and Archive offer ultra low-cost, highly-durable, highly available archival storage. For data accessed less than once a year, Archive is a cost-effective storage option for long-term preservation of data.
Coldline is also ideal for cold storage-data your business expects to touch less than once a quarter. For warmer storage, choose Nearline: data you expect to access less than once a month, but possibly multiple times throughout the year. All storage classes are available across all GCP regions and provide unparalleled sub-second access speeds with a consistent API.
Reference:
https://cloud.google.com/storage/archival
NEW QUESTION # 175
Your company wants to standardize the creation and management of multiple Google Cloud resources using Infrastructure as Code. You want to minimize the amount of repetitive code needed to manage the environment What should you do?
- A. Use curl in a terminal to send a REST request to the relevant Google API for each individual resource.
- B. Use the Cloud Console interface to provision and manage all related resources
- C. Create a bash script that contains all requirement steps as gcloud commands
- D. Develop templates for the environment using Cloud Deployment Manager
Answer: D
NEW QUESTION # 176
You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?
- A. Save file automatic first-of-the- month backup for three years Store the backup file in an Archive class Cloud Storage bucket
- B. Convert the automatic first-of-the-month backup to an export file Write the export file to a Coldline class Cloud Storage bucket
- C. Set up an export job for the first of the month Write the export file to an Archive class Cloud Storage bucket
- D. Set up an on-demand backup tor the first of the month Write the backup to an Archive class Cloud Storage bucket
Answer: A
NEW QUESTION # 177
You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called What should you do?
proj-vm.
- A. Download the private key from the service account, and add the private key to each VM's SSH keys.
- B. When creating the VMs, set the service account's API scope for Compute Engine to read/write.
- C. Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
- D. Download the private key from the service account, and add it to each VMs custom metadata.
Answer: C
NEW QUESTION # 178
You need to select and configure compute resources for a set of batch processing jobs. These jobs take around
2 hours to complete and are run nightly. You want to minimize service costs. What should you do?
- A. Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.
- B. Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.
- C. Select Compute Engine. Use VM instance types that support micro bursting.
- D. Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
Answer: D
Explanation:
If your apps are fault-tolerant and can withstand possible instance preemptions, then preemptible instances can reduce your Compute Engine costs significantly. For example, batch processing jobs can run on preemptible instances. If some of those instances stop during processing, the job slows but does not completely stop. Preemptible instances complete your batch processing tasks without placing additional workload on your existing instances and without requiring you to pay full price for additional normal instances.
https://cloud.google.com/compute/docs/instances/preemptible
NEW QUESTION # 179
You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?
- A. 1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal.
2. Create a Cloud Pub/Sub subscription for that topic.
3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application. - B. 1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run.
2. Create a Cloud Pub/Sub subscription for that topic.
3. Make your application pull messages from that subscription. - C. 1. Create a service account.
2. Give the Cloud Run Invoker role to that service account for your Cloud Run application.
3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint. - D. 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic.
2. Call your application on Cloud Run from the Cloud Function for every message.
Answer: C
NEW QUESTION # 180
You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes. Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?
- A. Select Add GPUs. Add estimated cost for cluster management.
- B. Fill in local SSD. Add estimated cost for cluster management.
- C. Fill in local SSD. Fill in persistent disk storage and snapshot storage.
- D. Select Add GPUs. Fill in persistent disk storage and snapshot storage.
Answer: C
Explanation:
Local SSD is sufficient for high IOPS.
https://cloud.google.com/products/calculator
NEW QUESTION # 181
You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?
- A. Increase the size of the disk to 1 TB.
- B. Migrate to use a Local SSD on the instance.
- C. Increase the allocated CPU to the instance.
- D. Migrate to use a Regional SSD on the instance.
Answer: B
NEW QUESTION # 182
You have one GCP account running in your default region and zone and another account running in a non-default region and zone. You want to start a new Compute Engine instance in these two Google Cloud Platform accounts using the command line interface. What should you do?
- A. Create two configurations using gcloud config configurations create [NAME]. Run gcloud configurations list to start the Compute Engine instances.
- B. Activate two configurations using gcloud configurations activate [NAME]. Run gcloud configurations list to start the Compute Engine instances.
- C. Create two configurations using gcloud config configurations create [NAME]. Run gcloud config configurations activate [NAME] to switch between accounts when running the commands to start the Compute Engine instances.
- D. Activate two configurations using gcloud configurations activate [NAME]. Run gcloud config list to start the Compute Engine instances.
Answer: C
Explanation:
"Run gcloud configurations list to start the Compute Engine instances". How the heck are you expecting to
"start" GCE instances doing "configuration list".
Each gcloud configuration has a 1 to 1 relationship with the region (if a region is defined). Since we have two different regions, we would need to create two separate configurations using gcloud config configurations createRef: https://cloud.google.com/sdk/gcloud/reference/config/configurations/create Secondly, you can activate each configuration independently by running gcloud config configurations activate
[NAME]Ref: https://cloud.google.com/sdk/gcloud/reference/config/configurations/activate Finally, while each configuration is active, you can run the gcloud compute instances start [NAME] command to start the instance in the configurations region.https://cloud.google.com/sdk/gcloud/reference/compute/instances/start
NEW QUESTION # 183
You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?
- A. Use HTTP(S) load balancing for the MIG and an A record in your DNS public zone with the load balancer's IP address.
- B. Use SSL proxy load balancing for the MIG and an A record in your DNS private zone with the load balancer's IP address.
- C. Use SSL proxy load balancing for the MIG and a CNAME record in your DNS public zone with the load balancer's IP address.
- D. Use HTTP(S) load balancing for the MIG and a CNAME record in your DNS private zone with the load balancer's IP address.
Answer: A
Explanation:
HTTP(S) load balancing is a Google-recommended practice for distributing web traffic across multiple regions and zones, and providing high availability, scalability, and security for web applications. It supports both IPv4 and IPv6 addresses, and can handle SSL/TLS termination and encryption. It also integrates with Cloud CDN, Cloud Armor, and Cloud Identity-Aware Proxy for enhanced performance and protection. A MIG can be used as a backend service for HTTP(S) load balancing, and can automatically scale and heal the VM instances that host the web application.
To configure DNS for HTTP(S) load balancing, you need to create an A record in your DNS public zone with the load balancer's IP address. This will map your domain name to the load balancer's IP address, and allow users to access your web application using the domain name. A CNAME record is not recommended, as it can cause latency and DNS resolution issues. A private zone is not suitable, as it is only visible within your VPC network, and not to the public internet.
References:
* HTTP(S) Load Balancing documentation
* Setting up DNS records for HTTP(S) load balancing
* Choosing a load balancer
NEW QUESTION # 184
You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?
- A. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Perform the export of logs to Cloud Storage.
- B. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Direct the auditor to also review the logs for changes to Cloud IAM policy.
- C. Assign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.
- D. Assign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy.
Answer: A
NEW QUESTION # 185
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account.
You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?
- A. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.
- B. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
- C. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
- D. Link the acquired company's projects to your company's billing account.
Answer: C
NEW QUESTION # 186
Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.
Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
* Instances in tier #1 must communicate with tier #2.
* Instances in tier #2 must communicate with tier #3.
What should you do?
- A. 1. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow TCP: 80802. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to
10.0.1.0/24)* Protocols: allow TCP: 8080 - B. 1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow all
- C. 1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow TCP:80802. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow TCP: 8080
- D. 1. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.1.0/24)* Protocols: allow all
Answer: C
Explanation:
1. Create an ingress firewall rule with the following settings: "¢ Targets: all instances with tier #2 service account "¢ Source filter: all instances with tier #1 service account "¢ Protocols: allow TCP:8080 2. Create an ingress firewall rule with the following settings: "¢ Targets: all instances with tier #3 service account "¢ Source filter: all instances with tier #2 service account "¢ Protocols: allow TCP: 8080
NEW QUESTION # 187
You have developed an application that consists of multiple microservices, with each microservice packaged in its own Docker container image. You want to deploy the entire application on Google Kubernetes Engine so that each microservice can be scaled individually.
What should you do?
- A. Create and deploy a Docker Compose File.
- B. Create and deploy a Job per microservice.
- C. Create and deploy a Deployment per microservice.
- D. Create and deploy a Custom Resource Definition per microservice.
Answer: C
Explanation:
Can deploy each service through
kubectl apply -f <deployment_config.yaml>
NEW QUESTION # 188
Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the data. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?
- A. Upload the data into Cloud SQL using the import function in the console.
- B. Upload the data to BigQuery using the bq command line tool.
- C. Upload the data to Cloud Storage using the gsutil command line tool.
- D. Upload the data into Cloud Spanner using the import function in the console.
Answer: B
Explanation:
Reference:
https://cloud.google.com/solutions/performing-etl-from-relational-database-into-bigquery
NEW QUESTION # 189
You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset. What should you do?
- A. Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project.
- B. Create a Service Account in your own project, and grant this Service Account access to BigQuery in your project.
- C. Create a Service Account in your own project, and ask the partner to grant this Service Account access to BigQuery in their project.
- D. Ask the partner to create a Service Account in their project, and have them give the Service Account access to BigQuery in their project.
Answer: A
NEW QUESTION # 190
You are managing a Data Warehouse on BigQuery. An external auditor will review your company's processes, and multiple external consultants will need view access to the data. You need to provide them with view access while following Google-recommended practices. What should you do?
- A. Create a Google Group that contains the consultants, and grant the group the role of BigQuery Viewer
- B. Grant each individual external consultant the role of BigQuery Editor
- C. Create a Google Group that contains the consultants and grant the group the role of BigQuery Editor
- D. Grant each individual external consultant the role of BigQuery Viewer
Answer: A
NEW QUESTION # 191
You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices. What should you do?
- A. Add the auditors group to two new custom IAM roles.
- B. Add the auditor user accounts to two new custom IAM roles.
- C. Add the auditor user accounts to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.
- D. Add the auditors group to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.
Answer: C
NEW QUESTION # 192
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention.
What should you do?
- A. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
- B. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- C. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
- D. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
Answer: B
Explanation:
Coldline Storage is the perfect service to store audit logs from all the projects and is very cost-efficient as well.
Coldline Storage is a very low-cost, highly durable storage service for storing infrequently accessed data.
NEW QUESTION # 193
......
Exam Valid Dumps with Instant Download Free Updates: https://freetorrent.dumpsmaterials.com/Associate-Cloud-Engineer-real-torrent.html
