Pass Associate-Cloud-Engineer Exam in First Attempt Guaranteed 2025 Dumps!
Associate-Cloud-Engineer Dumps Full Questions - Exam Study Guide
Target audience and other prerequisites
This certification is intended for the Cloud Engineers who know how to plan and configure Cloud solutions, install Cloud solution environments, implement and deploy Cloud solutions, configure security and access, ensure the successful operation of Cloud solutions.
There are no official requirements for this certificate and its qualifying test. However, before taking the certification exam, it is recommended that you possess at least six months of practical experience with Google Cloud solutions and products.
Google Associate-Cloud-Engineer (ACE) exam is a certification offered by Google Cloud for individuals who want to demonstrate their knowledge and skills related to the Google Cloud Platform (GCP). Google Associate Cloud Engineer Exam certification is designed for professionals who are responsible for deploying applications, monitoring operations, and managing solutions on GCP. The ACE exam is a great way to showcase your expertise in GCP and increase your value as a cloud engineer.
NEW QUESTION # 195
Which of the following is a valid use case for using a primitive role?
- A. When creating a custom role requires more than 10 permissions.
- B. When granting permission to a development project or to the development team.
- C. When there are more than 10 users.
- D. When granting permission to a production project, or to a third-party company.
Answer: B
NEW QUESTION # 196
An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination.
What should you do?
- A. View System Event Logs in Stackdriver. Search for the service account associated with the user.
- B. View the Admin Activity log in Stackdriver. Search for the service account associated with the user.
- C. View System Event Logs in Stackdriver. Search for the user's email as the principal.
- D. View Data Access audit logs in Stackdriver. Search for the user's email as the principal.
Answer: A
NEW QUESTION # 197
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?
- A. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
- B. Enable node auto-provisioning on the GKE cluster.
- C. Create a VerticalPodAutscaler for those workloads.
- D. Create a node pool with preemptible VMs and GPUs attached to those VMs.
Answer: D
Explanation:
Reference:
https://cloud.google.com/kubernetes-engine/docs/how-to/gpus
NEW QUESTION # 198
You just installed the Google Cloud CLI on your new corporate laptop. You need to list the existing instances of your company on Google Cloud. What must you do before you run the gcloud compute instances list command?
Choose 2 answers
- A. Run gcloud config set project $my_project to set the default project for gcloud CLI.
- B. Run gcloud config set compute/zone $my_zone to set the default zone for gcloud CLI.
- C. Run gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI.
- D. Download your Cloud Identity user account key. Place the key file in a folder on your machine where gcloud CLI can find it.
- E. Create a Google Cloud service account, and download the service account key. Place the key file in a folder on your machine where gcloud CLI can find it.
Answer: A,C
Explanation:
Before you run the gcloud compute instances list command, you need to do two things: authenticate with your user account and set the default project for gcloud CLI.
To authenticate with your user account, you need to run gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI. This will authorize the gcloud CLI to access Google Cloud resources on your behalf1.
To set the default project for gcloud CLI, you need to run gcloud config set project $my_project, where
$my_project is the ID of the project that contains the instances you want to list. This will save you from having to specify the project flag for every gcloud command2.
Option B is not recommended, because using a service account key increases the risk of credential leakage and misuse. It is also not necessary, because you can use your user account to authenticate to the gcloud CLI3.
Option C is not correct, because there is no such thing as a Cloud Identity user account key. Cloud Identity is a service that provides identity and access management for Google Cloud users and groups4. Option D is not required, because the gcloud compute instances list command does not depend on the default zone. You can list instances from all zones or filter by a specific zone using the --filter flag.
1: https://cloud.google.com/sdk/docs/authorizing
2: https://cloud.google.com/sdk/gcloud/reference/config/set
3: https://cloud.google.com/iam/docs/best-practices-for-managing-service-account-keys
4: https://cloud.google.com/identity/docs/overview
5: https://cloud.google.com/sdk/gcloud/reference/compute/instances/list
NEW QUESTION # 199
Your projects incurred more costs than you expected last month. Your research reveals that a development GKE container emitted a huge number of logs, which resulted in higher costs. You want to disable the logs quickly using the minimum number of steps. What should you do?
- A. 1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE container resource.
- B. 1. Go to the Logs ingestion window in Stackdriver Logging, and disable the log source for the GKE Cluster Operations resource.
- C. 1. Go to the GKE console, and delete existing clusters.
2. Recreate a new cluster.
3. Clear the option to enable legacy Stackdriver Logging. - D. 1. Go to the GKE console, and delete existing clusters.
2. Recreate a new cluster.
3. Clear the option to enable legacy Stackdriver Monitoring.
Answer: A
Explanation:
GKE Containers have more log than GKE Cluster Operations:
.-GKE Containe:
cluster_name: An immutable name for the cluster the container is running in.
namespace_id: Immutable ID of the cluster namespace the container is running in.
instance_id: Immutable ID of the GCE instance the container is running in.
pod_id: Immutable ID of the pod the container is running in.
container_name: Immutable name of the container.
zone: The GCE zone in which the instance is running.
VS
.-GKE Cluster Operations
project_id: The identifier of the GCP project associated with this resource, such as "my-project".
cluster_name: The name of the GKE Cluster.
location: The location in which the GKE Cluster is running.
https://cloud.google.com/logging/docs/api/v2/resource-list
NEW QUESTION # 200
You have been asked to set up Object Lifecycle Management for objects stored in storage buckets. The objects are written once and accessed frequently for 30 days. After 30 days, the objects are not read again unless there is a special need. The object should be kept for three years, and you need to minimize cost. What should you do?
- A. Set up a policy that uses Nearline storage for 30 days and then moves to Archive storage for three years.
- B. Set up a policy that uses Nearline storage for 30 days, then moves the Coldline for one year, and then moves to Archive storage for two years.
- C. Set up a policy that uses Standard storage for 30 days, then moves to Coldline for one year, and then moves to Archive storage for two years.
- D. Set up a policy that uses Standard storage for 30 days and then moves to Archive storage for three years.
Answer: D
Explanation:
Explanation
The key to understand the requirement is : "The objects are written once and accessed frequently for 30 days" Standard Storage Standard Storage is best for data that is frequently accessed ("hot" data) and/or stored for only brief periods of time.
Archive Storage
Archive Storage is the lowest-cost, highly durable storage service for data archiving, online backup, and disaster recovery. Unlike the "coldest" storage services offered by other Cloud providers, your data is available within milliseconds, not hours or days. Archive Storage is the best choice for data that you plan to access less than once a year.
https://cloud.google.com/storage/docs/storage-classes#standard
NEW QUESTION # 201
You need to connect to one of your Compute Engine instances using SSH. You've already authenticated gcloud, however, you don't have an SSH key deployed yet. In the fewest steps possible, what's the easiest way to connect to the app?
- A. Create a key with the ssh-keygen command. Then use the gcloud compute ssh command.
- B. Create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
- C. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
- D. Use the gcloud compute ssh command.
Answer: D
NEW QUESTION # 202
You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?
- A. When creating the VM via the web console, specify the service account under the `Identity and API Access' section.
- B. Download a JSON Private Key for the service account.
On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine- service-account. - C. Download a JSON Private Key for the service account.
On the Project Metadata, add that JSON as the value for the key compute-engine-service-account. - D. Download a JSON Private Key for the service account.
After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine- service-account.json.
Answer: A
NEW QUESTION # 203
Your organization has three existing Google Cloud projects. You need to bill the Marketing department for only their Google Cloud services for a new initiative within their group. What should you do?
- A. 1.Verify that you are assigned the Billing Administrator IAM role for your organization's Google Cloud account
2.Create a new Google Cloud Project for the Marketing department
3.Set the default key-value project labels to department marketing for all services in this project - B. 1.Verify that you ace assigned the Billing Administrator IAM role tor your organization's Google Cloud Project for the Marketing department
2.Link the new project to a Marketing Billing Account - C. 1.Verify that you are assigned the Organization Administrator IAM role for your organization's Google Cloud account
2.Create a new Google Cloud Project for the Marketing department
3. Link the new project to a Marketing Billing Account. - D. 1.Verity that you are assigned the Organization Administrator IAM role for your organization's Google Cloud account
2.Create a new Google Cloud Project for the Marketing department
3.Set the default key value project labels to department marketing for all services in this protect
Answer: B
Explanation:
roles/billing.admin role is an owner role for a billing account. Use it to manage payment instruments, configure billing exports, view cost information, link and unlink projects and manage other user roles on the billing account.
NEW QUESTION # 204
You created an update for your application on App Engine. You want to deploy the update without impacting your users. You want to be able to roll back as quickly as possible if it fails. What should you do?
- A. Notify your users of an upcoming maintenance window. Deploy the update in that maintenance window.
- B. Delete the current version of your application. Deploy the update using the same version identifier as the deleted version.
- C. Deploy the update as the same version that is currently running.
- D. Deploy the update as a new version. Migrate traffic from the current version to the new version.
Answer: D
Explanation:
A and B are not correct because this will make the application temporarily unavailable to users.
C is not correct because to roll back, you'll need to redeploy the previous deployment because the app was overwritten with the same version number. Therefore this takes longer than a rollback using method D.
D is correct because this makes sure there is no downtime and you can roll back the fastest.
https://cloud.google.com/appengine/docs/admin-api/migrating-splitting-traffic
NEW QUESTION # 205
You created a Google Cloud Platform project with an App Engine application inside the project.
You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?
- A. Change the default region property setting in the existing GCP project to asia-northeast1.
- B. Create a new GCP project and create an App Engine application inside this new project.
Specify asia-northeast1 as the region to serve your application. - C. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
- D. Change the region property setting in the existing App Engine application from us-central to asia- northeast1.
Answer: B
Explanation:
Each Cloud project can contain only a single App Engine application, and once created you cannot change the location of your App Engine application.
https://cloud.google.com/appengine/docs/flexible/nodejs/managing-projects-apps-billing#create
NEW QUESTION # 206
You received a JSON file that contained a private key of a Service Account in order to get access to several resources in a Google Cloud project. You downloaded and installed the Cloud SDK and want to use this private key for authentication and authorization when performing gcloud commands. What should you do?
- A. Place the private key file in your home directory and rename it to
''GOOGLE_APPUCATION_CREDENTiALS". - B. Use the command gcloud auth activate-service-account and point it to the private key
- C. Use the command gcloud auth login and point it to the private key
- D. Place the private key file in the installation directory of the Cloud SDK and rename it to "credentials ison"
Answer: B
Explanation:
Explanation
Authorizing with a service account
gcloud auth activate-service-account authorizes access using a service account. As with gcloud init and gcloud auth login, this command saves the service account credentials to the local system on successful completion and sets the specified account as the active account in your Cloud SDK configuration.
https://cloud.google.com/sdk/docs/authorizing#authorizing_with_a_service_account
NEW QUESTION # 207
Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?
- A. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account.
Grant the "compute.osAdminLogin" role to the Google group corresponding to this team. - B. Generate a new SSH key pair. Give the private key to each member of your team.
Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance. - C. Generate a new SSH key pair. Give the private key to each member of your team.
Configure the public key in the metadata of each instance. - D. Ask each member of the team to generate a new SSH key pair and to send you their public key.
Use a configuration management tool to deploy those keys on each instance.
Answer: A
Explanation:
We recommend collecting users with the same responsibilities into groups and assigning IAM roles to the groups rather than to individual users. For example, you can create a "data scientist" group and assign appropriate roles to enable interaction with BigQuery and Cloud Storage. When a new data scientist joins your team, you can simply add them to the group and they will inherit the defined permissions. You can create and manage groups through the Admin Console.
https://cloud.google.com/compute/docs/instances/managing-instance-access
NEW QUESTION # 208
Your team has developed a stateless application which requires it to be run directly on virtual machines. The application is expected to receive a fluctuating amount of traffic and needs to scale automatically. You need to deploy the application. What should you do?
- A. Deploy the application on a managed instance group and configure autoscaling.
- B. Deploy the application on a Kubernetes Engine cluster and configure node pool autoscaling.
- C. Deploy the application on Cloud Run and configure autoscaling.
- D. Deploy the application on Cloud Functions and configure the maximum number instances.
Answer: A
NEW QUESTION # 209
You need to create a copy of a custom Compute Engine virtual machine (VM) to facilitate an expected increase in application traffic due to a business acquisition. What should you do?
- A. Create a custom Compute Engine image from a snapshot. Create your images from that image.
- B. Create a Compute Engine snapshot of your base VM. Create your images from that snapshot.
- C. Create a Compute Engine snapshot of your base VM. Create your instances from that snapshot.
- D. Create a custom Compute Engine image from a snapshot. Create your instances from that image.
Answer: D
Explanation:
A custom image belongs only to your project. To create an instance with a custom image, you must first have a custom image.
Reference:
Preparing your instance for an image
You can create an image from a disk even while it is attached to a running VM instance. However, your image will be more reliable if you put the instance in a state that is easier for the image to capture. Use one of the following processes to prepare your boot disk for the image:
Stop the instance so that it can shut down and stop writing any data to the persistent disk.
If you can't stop your instance before you create the image, minimize the amount of writes to the disk and sync your file system.
Pause apps or operating system processes that write data to that persistent disk.
Run an app flush to disk if necessary. For example, MySQL has a FLUSH statement. Other apps might have similar processes.
Stop your apps from writing to your persistent disk.
Run sudo sync.
After you prepare the instance, create the image.
https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#prepare_instance_for_image
NEW QUESTION # 210
Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment).
What should you do?
- A. Create a new revision with the new version of the application. Split traffic between this version and the version that is currently running.
- B. Create a new service with the new version of the application. Add an HTTP Load Balancer in front of both services.
- C. Create a new service with the new version of the application. Split traffic between this version and the version that is currently running.
- D. Create a new revision with the new version of the application. Add an HTTP Load Balancer in front of both revisions.
Answer: A
Explanation:
Explanation
https://cloud.google.com/kuberun/docs/rollouts-rollbacks-traffic-migration
NEW QUESTION # 211
You need to create a copy of a custom Compute Engine virtual machine (VM) to facilitate an expected increase in application traffic due to a business acquisition. What should you do?
- A. Create a custom Compute Engine image from a snapshot. Create your images from that image.
- B. Create a Compute Engine snapshot of your base VM. Create your images from that snapshot.
- C. Create a Compute Engine snapshot of your base VM. Create your instances from that snapshot.
- D. Create a custom Compute Engine image from a snapshot. Create your instances from that image.
Answer: D
Explanation:
A custom image belongs only to your project. To create an instance with a custom image, you must first have a custom image.
Reference: https://cloud.google.com/compute/docs/instances/create-start-instance Preparing your instance for an image You can create an image from a disk even while it is attached to a running VM instance. However, your image will be more reliable if you put the instance in a state that is easier for the image to capture. Use one of the following processes to prepare your boot disk for the image:
Stop the instance so that it can shut down and stop writing any data to the persistent disk.
If you can't stop your instance before you create the image, minimize the amount of writes to the disk and sync your file system.
Pause apps or operating system processes that write data to that persistent disk.
Run an app flush to disk if necessary. For example, MySQL has a FLUSH statement. Other apps might have similar processes.
Stop your apps from writing to your persistent disk.
Run sudo sync.
After you prepare the instance, create the image.
https://cloud.google.com/compute/docs/images/create-delete-deprecate-private- images#prepare_instance_for_image
NEW QUESTION # 212
You need to select and configure compute resources for a set of batch processing jobs. These jobs take around
2 hours to complete and are run nightly. You want to minimize service costs. What should you do?
- A. Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.
- B. Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.
- C. Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
- D. Select Compute Engine. Use VM instance types that support micro bursting.
Answer: C
NEW QUESTION # 213
......
Google Cloud Certified Free Certification Exam Material from NewPassLeader with 328 Questions: https://pass4lead.newpassleader.com/Google/Associate-Cloud-Engineer-exam-preparation-materials.html