Google Associate-Cloud-Engineer Dumps Questions Answers

Google Associate-Cloud-Engineer Dumps

Dumps4download providing 100% reliable Exam dumps that are verified by experts panel. Our Dumps4download Associate-Cloud-Engineer study material are totally unique and exam questions are valid all over the world. By using our Associate-Cloud-Engineer dumps we assure you that you will pass your exam on first attempt. You can easily score more than 97%.

100% exam passing Guarantee on your purchased exams.

100% money back guarantee if you will not clear your exam.

Google Associate-Cloud-Engineer Practice Test Helps You Turn Dreams To Reality!

IT Professionals from every sector are looking up certifications to boost their careers. Google being the leader certification provider earns the most demand in the industry.

The Google Certification is your short-cut to an ever-growing success. In the process, Dumps4download is your strongest coordinator, providing you with the best Associate-Cloud-Engineer Dumps PDF as well as Online Test Engine. Let’s steer your career to a more stable future with interactive and effective Associate-Cloud-Engineer Practice Exam Dumps.

Many of our customers are already excelling in their careers after achieving their goals with our help. You can too be a part of that specialized bunch with a little push in the right direction. Let us help you tread the heights of success.

Apply for the Associate-Cloud-Engineer Exam right away so you can get certified by using our Google Dumps.

Bulk Exams Package

Dumps4download Leads You To A 100% Success in First Attempt!

Our Associate-Cloud-Engineer Dumps PDF is intended to meet the requirements of the most suitable method for exam preparation. We especially hired a team of experts to make sure you get the latest and compliant Associate-Cloud-Engineer Practice Test Questions Answers. These questions are been selected according to the most relevance as well as the highest possibility of appearing in the exam. So, you can be sure of your success in the first attempt.

Interactive & Effective Associate-Cloud-Engineer Dumps PDF + Online Test Engine

Aside from our Google Associate-Cloud-Engineer Dumps PDF, we invest in your best practice through Online Test Engine. They are designed to reflect the actual exam format covering each topic of your exam. Also, with our interactive interface focusing on the exam preparation is easier than ever. With an easy-to-understand, interactive and effective study material assisting you there is nothing that could go wrong. We are 100% sure that our Associate-Cloud-Engineer Questions Answers Practice Exam is the best choice you can make to pass the exam with top score.

How Dumps4download Creates Better Opportunities for You!

Dumps4download knows how hard it is for you to beat this tough Google Exam terms and concepts. That is why to ease your preparation we offer the best possible training tactics we know best. Online Test Engine provides you an exam-like environment and PDF helps you take your study guide wherever you are. Best of all, you can download Associate-Cloud-Engineer Dumps PDF easily or better print it. For the purpose of getting concepts across as easily as possible, we have used simple language. Adding explanations at the end of the Associate-Cloud-Engineer Questions and Answers Practice Test we ensure nothing slips your grasp.

The exam stimulation is 100 times better than any other test material you would encounter. Besides, if you are troubled with anything concerning Google Cloud Certified - Associate Cloud Engineer Exam or the Associate-Cloud-Engineer Dumps PDF, our 24/7 active team is quick to respond. So, leave us a message and your problem will be solved in a few minutes.

Get an Absolutely Free Demo Today!

Dumps4download offers an absolutely free demo version to test the product with sample features before actually buying it. This shows our concern for your best experience. Once you are thoroughly satisfied with the demo you can get the Google Cloud Certified - Associate Cloud Engineer Practice Test Questions instantly.

24/7 Online Support – Anytime, Anywhere

Have a question? You can contact us anytime, anywhere. Our 24/7 Online Support makes sure you have absolutely no problem accessing or using Google Cloud Certified - Associate Cloud Engineer Practice Exam Dumps. What’s more, Dumps4download is mobile compatible so you can access the site without having to log in to your Laptop or PC.

Features to use Dumps4download Associate-Cloud-Engineer Dumps:

• Thousands of satisfied customers.
• Good grades are 100% guaranteed.
• 100% verified by Experts panel.
• Up to date exam data.
• Dumps4download data is 100% trustworthy.
• Passing ratio more than 99%
• 100% money back guarantee.

Google Associate-Cloud-Engineer Frequently Asked Questions

Google Associate-Cloud-Engineer Sample Questions

Question # 1

You are planning to move your company's website and a specific asynchronous background job to Google Cloud Your website contains only static HTML content The background job is started through an HTTP endpoint and generates monthly invoices for your customers. Your website needs to be available in multiple geographic locations and requires autoscaling. You want to have no costs when your workloads are not In use and follow recommended practices. What should you do? 

A. Move your website to Google Kubemetes Engine (GKE). and move your background job to Cloud Functions 
B. Move both your website and background job to Compute Engine. 
C. Move both your website and background job to Cloud Run. 
D. Move your website to Google Kubemetes Engine (GKE), and move your background job to Compute Engine 

Show Answer

---

Question # 2

Your company runs a variety of applications and workloads on Google Cloud and you are responsible for managing cloud costs. You need to identify a solution that enables you to perform detailed cost analysis You also must be able to visualize the cost data in multiple ways on the same dashboard What should you do? 

A. Use the cost breakdown report with the available filters from Cloud Billing to visualize the data 
B. Enable the Cloud Billing export to BigQuery. and use Looker Studio to visualize the data 
C. Run Queries in Cloud Monitoring Create dashboards to visualize the billing metrics 
D. Enable Cloud Monitoring metrics export to BigQuery and use Looker to visualize the data 

Show Answer

---

Question # 3

You are the Google Cloud systems administrator for your organization. User A reports that they received an error when attempting to access the Cloud SQL database in their Google Cloud project, while User B can access the database. You need to troubleshoot the issue for User A, while following Google-recommended practices. What should you do first? 

A. Confirm that network firewall rules are not blocking traffic for User A. 
B. Review recent configuration changes that may have caused unintended modifications to permissions. 
C. Verify that User A has the Identity and Access Management (IAM) Project Owner role assigned. 
D. Review the error message that User A received. 

Show Answer

---

Question # 4

Your company stores data from multiple sources that have different data storage requirements. These data include: 1. Customer data that is structured and read with complex queries 2. Historical log data that is large in volume and accessed infrequently 3. Real-time sensor data with high-velocity writes, which needs to be available for analysis but can tolerate some data loss You need to design the most cost-effective storage solution that fulfills all data storage requirements. What should you do? 

A. Use Spanner for all data.
B. Use Cloud SQL for customer data, Cloud Storage (Coldline) for historical logs, and BigQuery for sensor data.
C. Use Cloud SQL for customer data, Cloud Storage (Archive) for historical logs, and Bigtable for sensor data. 
D. Use Firestore for customer data, Cloud Storage (Nearline) for historical logs, and Bigtable for sensor data. 

Show Answer

---

Question # 5

You are planning to migrate your containerized workloads to Google Kubernetes Engine (GKE). You need to determine which GKE option to use. Your solution must have high availability, minimal downtime, and the ability to promptly apply security updates to your nodes. You also want to pay only for the compute resources that your workloads use without managing nodes. You want to follow Google-recommended practices and minimize operational costs. What should you do? 

A. Configure a Standard multi-zonal GKE cluster. 
B. Configure an Autopilot GKE cluster. 
C. Configure a Standard zonal GKE cluster. 
D. Configure a Standard regional GKE cluster. 

Show Answer

---

Question # 6

You are planning to migrate a database and a backend application to a Standard Google Kubernetes Engine (GKE) cluster. You need to prevent data loss and make sure there are enough nodes available for your backend application based on the demands of your workloads. You want to follow Googlerecommended practices and minimize the amount of manual work required. What should you do?

A. Run your database as a StatefulSet. Configure cluster autoscaling to handle changes in the demands of your workloads. 
B. Run your database as a single Pod. Run the resize command when you notice changes in the demands of your workloads.
C. Run your database as a Deployment. Configure cluster autoscaling to handle changes in the demands of your workloads. 
D. Run your database as a DaemonSet. Run the resize command when you notice changes in the demands of your workloads. 

Show Answer

---

Question # 7

Your company has many legacy third-party applications that rely on a shared NFS server for file sharing between these workloads. You want to modernize the NFS server by using a Google Cloud managed service. You need to select the solution that requires the least amount of change to the application. What should you do? 

A. Configure Firestore. Configure all applications to use Firestore instead of the NFS server. 
B. Deploy a Filestore instance. Replace all NFS mounts with a Filestore mount. 
C. Create a Cloud Storage bucket. Configure all applications to use Cloud Storage client libraries instead of the NFS server.
D. Create a Compute Engine instance and configure an NFS server on the instance. Point all NFS mounts to the Compute Engine instance.

Show Answer

---

Question # 8

You are deploying an application to Cloud Run. Your application requires the use of an API that runs on Google Kubernetes Engine (GKE). You need to ensure that your Cloud Run service can privately reach the API on GKE, and you want to follow Google-recommended practices. What should you do?

A. Deploy an ingress resource on the GKE cluster to expose the API to the internet. Use Cloud Armor to filter for IP addresses that can connect to the API. On the Cloud Run service, configure the application to fetch its public IP address and update the Cloud Armor policy on startup to allow this IP address to call the API on ports 80 and 443.
B. Create an egress firewall rule on the VPC to allow connections to 0.0.0.0/0 on ports 80 and 443. 
C. Create an ingress firewall rule on the VPC to allow connections from 0.0.0.0/0 on ports 80 and 443. 
D. Deploy an internal Application Load Balancer to expose the API on GKE to the VPC. Configure Cloud DNS with the IP address of the internal Application Load Balancer. Deploy a Serverless VPC Access connector to allow the Cloud Run service to call the API through the FQDN on Cloud DNS. 

Show Answer

---

Question # 9

You assist different engineering teams in deploying their infrastructure on Google Cloud. Your company has defined certain practices required for all workloads. You need to provide the engineering teams with a solution that enables teams to deploy their infrastructure independently without having to know all implementation details of the company's required practices. What should you do? 

A. Create a service account per team, and grant the service account the Project Editor role. Ask the teams to provision their infrastructure through the Google Cloud CLI (gcloud CLI), while impersonating their dedicated service account. 
B. Provide training for all engineering teams you work with to understand the companys required practices. Allow the engineering teams to provision the infrastructure to best meet their needs.  
C. Configure organization policies to enforce your companys required practices. Ask the teams to provision their infrastructure by using the Google Cloud console.
D. Write Terraform modules for each component that are compliant with the companys required practices, and ask teams to implement their infrastructure through these modules. 

Show Answer

---

Question # 10

Your organization has decided to deploy all its compute workloads to Kubernetes on Google Cloud and two other cloud providers. You want to build an infrastructure-as-code solution to automate the provisioning process for all cloud resources. What should you do? 

A. Build the solution by using YAML manifests, and provision the resources. 
B. Build the solution by using Terraform, and provision the resources. 
C. Build the solution by using Python and the cloud SDKs from all providers to provision the resources. 
D. Build the solution by using Config Connector, and provision the resources. 

Show Answer

---

Question # 11

You are planning to migrate your on-premises VMs to Google Cloud. You need to set up a landing zone in Google Cloud before migrating the VMs. You must ensure that all VMs in your production environment can communicate with each other through private IP addresses. You need to allow all VMs in your Google Cloud organization to accept connections on specific TCP ports. You want to follow Google-recommended practices, and you need to minimize your operational costs. What should you do? 

A. Create individual VPCs per Google Cloud project. Peer all the VPCs together. Apply organization policies on the organization level.
B. Create individual VPCs for each Google Cloud project. Peer all the VPCs together. Apply hierarchical firewall policies on the organization level.
C. Create a host VPC project with each production project as its service project. Apply organization policies on the organization level. 
D. Create a host VPC project with each production project as its service project. Apply hierarchical firewall policies on the organization level. 

Show Answer

---

Question # 12

You are deploying an application to Google Kubernetes Engine (GKE) that needs to call an external third-party API. You need to provide the external API vendor with a list of IP addresses for their firewall to allow traffic from your application. You want to follow Google-recommended practices and avoid any risk of interrupting traffic to the API due to IP address changes. What should you do?

A. Configure your GKE cluster with one node, and set the node to have a static external IP address. Ensure that the GKE cluster autoscaler is off. Send the external IP address of the node to the vendor to be added to the allowlist. 
B. Configure your GKE cluster with private nodes. Configure a Cloud NAT instance with static IP addresses. Provide these IP addresses to the vendor to be added to the allowlist.
C. Configure your GKE cluster with public nodes. Write a Cloud Function that pulls the public IP addresses of each node in the cluster. Trigger the function to run every day with Cloud Scheduler. Send the list to the vendor by email every day. 
D. Configure your GKE cluster with private nodes. Configure a Cloud NAT instance with dynamic IP addresses. Provide these IP addresses to the vendor to be added to the allowlist. 

Show Answer

---

Question # 13

You have an application that is currently processing transactions by using a group of managed VM instances. You need to migrate the application so that it is serverless and scalable. You want to implement an asynchronous transaction processing system, while minimizing management overhead. What should you do? 

A. Install Kafka on VM instances to acknowledge incoming transactions. Use Cloud Run to process transactions.
B. Install Kafka on VM Instances to acknowledge incoming transactions. Use VM Instances to process transactions.
C. Use Pub/Sub to acknowledge incoming transactions. Use VM instances to process transactions. 
D. Use Pub/Sub to acknowledge incoming transactions. Use Cloud Run to process transactions. 

Show Answer

---

Question # 14

(You host your website on Compute Engine. The number of global users visiting your website is rapidly expanding. You need to minimize latency and support user growth in multiple geographical regions. You also want to follow Google-recommended practices and minimize operational costs. Which two actions should you take? Choose 2 answers) 

A. Deploy all of your VMs in a single Google Cloud region with the largest available CIDR range. 
B. Deploy your VMs in multiple Google Cloud regions closest to your users geographical locations. 
C. Use an external Application Load Balancer in Regional mode. 
D. Use an external Application Load Balancer in Global mode. 
E. Use a Network Load Balancer. 

Show Answer

---

Question # 15

(You are managing a stateful application deployed on Google Kubernetes Engine (GKE) that can only have one replic a. You recently discovered that the application becomes unstable at peak times. You have identified that the application needs more CPU than what has been configured in the manifest at these peak times. You want Kubernetes to allocate the application sufficient CPU resources during these peak times, while ensuring cost efficiency during off-peak periods. What should you do?) 

A. Enable cluster autoscaling on the GKE cluster. 
B. Configure a Vertical Pod Autoscaler on the Deployment. 
C. Configure a Horizontal Pod Autoscaler on the Deployment. 
D. Enable node auto-provisioning on the GKE cluster. 

Show Answer

---

Question # 16

(Your companys developers use an automation that you recently built to provision Linux VMs in Compute Engine within a Google Cloud project to perform various tasks. You need to manage the Linux account lifecycle and access for these users. You want to follow Google-recommended practices to simplify access management while minimizing operational costs. What should you do?)

A. Enable OS Login for all VMs. Use IAM roles to grant user permissions.
B. Enable OS Login for all VMs. Write custom startup scripts to update user permissions. 
C. Require your developers to create public SSH keys. Make the owner of the public key the root user. 
D. Require your developers to create public SSH keys. Write custom startup scripts to update user permissions. 

Show Answer

---

Question # 17

(You are migrating your on-premises workload to Google Cloud. Your company is implementing its Cloud Billing configuration and requires access to a granular breakdown of its Google Cloud costs. You need to ensure that the Cloud Billing datasets are available in BigQuery so you can conduct a detailed analysis of costs. What should you do?) 

A. Enable the BigQuery API and ensure that the BigQuery User IAM role is selected. Change the BigQuery dataset to select a data location.
B. Create a Cloud Billing account. Enable the BigQuery Data Transfer Service API to export pricing data. 
C. Enable Cloud Billing data export to BigQuery when you create a Cloud Billing account. 
D. Enable Cloud Billing on the project and link a Cloud Billing account. Then view the billing data table in the BigQuery dataset. 

Show Answer

---

Question # 18

(You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?)

A. Use a proxy Network Load Balancer for the MIG and an A record in your DNS private zone with the load balancer's IP address. 
B. Use a proxy Network Load Balancer for the MIG and a CNAME record in your DNS public zone with the load balancer's IP address. 
C. Use an Application Load Balancer for the MIG and a CNAME record in your DNS private zone with the load balancer's IP address. 
D. Use an Application Load Balancer for the MIG and an A record in your DNS public zone with the load balancer's IP address. 

Show Answer

---

Question # 19

(Your company is modernizing its applications and refactoring them to containerized microservices. You need to deploy the infrastructure on Google Cloud so that teams can deploy their applications. The applications cannot be exposed publicly. You want to minimize management and operational overhead. What should you do?) 

A. Provision a Standard zonal Google Kubernetes Engine (GKE) cluster. 
B. Provision a fleet of Compute Engine instances and install Kubernetes. 
C. Provision a Google Kubernetes Engine (GKE) Autopilot cluster. 
D. Provision a Standard regional Google Kubernetes Engine (GKE) cluster. 

Show Answer

---

Question # 20

(You are migrating your companys on-premises compute resources to Google Cloud. You need to deploy batch processing jobs that run every night. The jobs require significant CPU and memory for several hours but can tolerate interruptions. You must ensure that the deployment is cost-effective. What should you do?) 

A. Containerize the batch processing jobs and deploy them on Compute Engine. 
B. Use custom machine types on Compute Engine. 
C. Use the M1 machine series on Compute Engine. 
D. Use Spot VMs on Compute Engine. 

Show Answer

---

Question # 21

(You have an application running inside a Compute Engine instance. You want to provide the application with secure access to a BigQuery dataset. You must ensure that credentials are only valid for a short period of time, and your application will only have access to the intended BigQuery dataset. You want to follow Google-recommended practices and minimize your operational costs. What should you do?) 

A. Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the project. 
B. Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the dataset. 
C. Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the dataset. 
D. Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the project. 

Show Answer

---

Question # 22

(Your company was recently impacted by a service disruption that caused multiple Dataflow jobs to get stuck, resulting in significant downtime in downstream applications and revenue loss. You were able to resolve the issue by identifying and fixing an error you found in the code. You need to design a solution with minimal management effort to identify when jobs are stuck in the future to ensure that this issue does not occur again. What should you do?) 

A. Set up Error Reporting to identify stack traces that indicate slowdowns in Dataflow jobs. Set up alerts based on these log entries.
B. Use the Personalized Service Health dashboard to identify issues with Dataflow jobs across regions. 
C. Update the Dataflow job configurations to send messages to a Pub/Sub topic when there are delays. Configure a backup Dataflow job to process jobs that are delayed. Use Cloud Tasks to trigger an alert when messages are pushed to the Pub/Sub topic. 
D. Set up Cloud Monitoring alerts on the data freshness metric for the Dataflow jobs to receive a notification when a certain threshold is reached. 

Show Answer

---

Question # 23

(Your company was recently impacted by a service disruption that caused multiple Dataflow jobs to get stuck, resulting in significant downtime in downstream applications and revenue loss. You were able to resolve the issue by identifying and fixing an error you found in the code. You need to design a solution with minimal management effort to identify when jobs are stuck in the future to ensure that this issue does not occur again. What should you do?) 

A. Set up Error Reporting to identify stack traces that indicate slowdowns in Dataflow jobs. Set up alerts based on these log entries.
B. Use the Personalized Service Health dashboard to identify issues with Dataflow jobs across regions. 
C. Update the Dataflow job configurations to send messages to a Pub/Sub topic when there are delays. Configure a backup Dataflow job to process jobs that are delayed. Use Cloud Tasks to trigger an alert when messages are pushed to the Pub/Sub topic. 
D. Set up Cloud Monitoring alerts on the data freshness metric for the Dataflow jobs to receive a notification when a certain threshold is reached. 

Show Answer

---

Question # 24

(You manage a VPC network in Google Cloud with a subnet that is rapidly approaching its private IP address capacity. You expect the number of Compute Engine VM instances in the same region to double within a week. You need to implement a Google-recommended solution that minimizes operational costs and does not require downtime. What should you do?)

A. Create a second VPC with the same subnet IP range, and connect this VPC to the existing VPC by using VPC Network Peering.
B. Delete the existing subnet, and create a new subnet with double the IP range available. 
C. Use the Google Cloud CLI tool to expand the primary IP range of your subnet. 
D. Permit additional traffic from the expected range of private IP addresses to reach your VMs by configuring firewall rules. 

Show Answer

---

Question # 25

(Your company uses a multi-cloud strategy that includes Google Cloud. You want to centralize application logs in a third-party software-as-a-service (SaaS) tool from all environments. You need to integrate logs originating from Cloud Logging, and you want to ensure the export occurs with the least amount of delay possible. What should you do?)

A. Use a Cloud Scheduler cron job to trigger a Cloud Function that queries Cloud Logging and sends the logs to the SaaS tool. 
B. Create a Cloud Logging sink and configure Pub/Sub as the destination. Configure the SaaS tool to subscribe to the Pub/Sub topic to retrieve the logs.
C. Create a Cloud Logging sink and configure Cloud Storage as the destination. Configure the SaaS tool to read the Cloud Storage bucket to retrieve the logs. 
D. Create a Cloud Logging sink and configure BigQuery as the destination. Configure the SaaS tool to query BigQuery to retrieve the logs.

Show Answer

---

Question # 26

(Your company has a rapidly growing social media platform and a user base primarily located in North Americ a. Due to increasing demand, your current on-premises PostgreSQL database, hosted in your United States headquarters data center, no longer meets your needs. You need to identify a cloud-based database solution that offers automatic scaling, multi-region support for future expansion, and maintains low latency.) 

A. Use Bigtable. 
B. Use BigQuery. 
C. Use Spanner. 
D. Use Cloud SQL for PostgreSQL. 

Show Answer

---

Question # 27

(Your company is migrating its workloads to Google Cloud due to an expiring data center contract. The on-premises environment and Google Cloud are not connected. You have decided to follow a liftand- shift approach, and you plan to modernize the workloads in a future project. Several old applications connect to each other through hard-coded internal IP addresses. You want to migrate these workloads quickly without modifying the application code. You also want to maintain all functionality. What should you do?)

A. Create a VPC with non-overlapping CIDR ranges compared to your on-premises network. When migrating individual workloads, assign each workload a new static internal IP address. 
B. Migrate your DNS server first. Configure Cloud DNS with a forwarding zone to your migrated DNS server. Then migrate all other workloads with ephemeral internal IP addresses.
C. Migrate all workloads to a single VPC subnet. Configure Cloud NAT for the subnet and manually assign a static IP address to the Cloud NAT gateway. 
D. Create a VPC with the same CIDR ranges as your on-premises network. When migrating individual workloads, assign each workload the same static internal IP address.

Show Answer

---

Question # 28

(You are deploying an application to Google Kubernetes Engine (GKE). The application needs to make API calls to a private Cloud Storage bucket. You need to configure your application Pods to authenticate to the Cloud Storage API, but your organization policy prevents the usage of service account keys. You want to follow Google-recommended practices. What should you do?) 

A. Create the GKE cluster and deploy the application. Request a security exception to create a Google service account key. Set the constraints/iam.serviceAccountKeyExpiryHours organization policy to 8 hours
B. Create the GKE cluster and deploy the application. Request a security exception to create a Google service account key. Set the constraints/iam.serviceAccountKeyExpiryHours organization policy to 24 hours. 
C. Create the GKE cluster with Workload Identity Federation. Configure the default node service account to access the bucket. Deploy the application into the cluster so the application can use the node service account permissions. Use Identity and Access Management (IAM) to grant the service account access to the bucket. 
D. Create the GKE cluster with Workload Identity Federation. Create a Google service account and a Kubernetes ServiceAccount, and configure both service accounts to use Workload Identity Federation. Attach the Kubernetes ServiceAccount to the application Pods and configure the Google service account to access the bucket with Identity and Access Management (IAM).

Show Answer

---

Question # 29

(You need to migrate multiple PostgreSQL databases from your on-premises data center to Google Cloud. You want to significantly improve the performance of your databases while minimizing changes to your data schema and application code. You expect to exceed 150 TB of data per geographical region. You want to follow Google-recommended practices and minimize your operational costs. What should you do?)

A. Migrate your data to AlloyDB. 
B. Migrate your data to Spanner. 
C. Migrate your data to Firebase. 
D. Migrate your data to Bigtable. 

Show Answer

---

Question # 30

(You are managing an application deployed on Cloud Run. The development team has released a new version of the application. You want to deploy and redirect traffic to this new version of the application. To ensure traffic to the new version of the application is served with no startup time, you want to ensure that there are two idle instances available for incoming traffic before adjusting the traffic flow. You also want to minimize administrative overhead. What should you do?) 

A. Ensure the checkbox "Serve this revision immediately" is unchecked when deploying the new revision. Before changing the traffic rules, use a traffic simulation tool to send load to the new revision. 
B. Configure service autoscaling and set the minimum number of instances to 2. 
C. Configure revision autoscaling for the new revision and set the minimum number of instances to 2. 
D. Configure revision autoscaling for the existing revision and set the minimum number of instances to 2. 

Show Answer

---

Question # 31

(You are developing an internet of things (IoT) application that captures sensor data from multiple devices that have already been set up. You need to identify the global data storage product your company should use to store this data. You must ensure that the storage solution you choose meets your requirements of sub-millisecond latency. What should you do?)

A. Store the IoT data in Spanner. Use caches to speed up the process and avoid latencies. 
B. Store the IoT data in Bigtable. 
C. Capture IoT data in BigQuery datasets. 
D. Store the IoT data in Cloud Storage. Implement caching by using Cloud CDN. 

Show Answer

---

Question # 32

(Your digital media company stores a large number of video files on-premises. Each video file ranges from 100 MB to 100 GB. You are currently storing 150 TB of video data in your on-premises network, with no room for expansion. You need to migrate all infrequently accessed video files older than one year to Cloud Storage to ensure that on-premises storage remains available for new files. You must also minimize costs and control bandwidth usage. What should you do?) 

A. Create a Cloud Storage bucket. Establish an Identity and Access Management (IAM) role with write permissions to the bucket. Use the gsutil tool to directly copy files over the network to Cloud Storage. 
B. Set up a Cloud Interconnect connection between the on-premises network and Google Cloud. Establish a private endpoint for Filestore access. Transfer the data from the existing Network File System (NFS) to Filestore. 
C. Use Transfer Appliance to request an appliance. Load the data locally, and ship the appliance back to Google for ingestion into Cloud Storage. 
D. Use Storage Transfer Service to move the data from the selected on-premises file storage systems to a Cloud Storage bucket. 

Show Answer

---

Question # 33

(You are managing the security configuration of your company's Google Cloud organization. The Operations team needs specific permissions on both a Google Kubernetes Engine (GKE) cluster and a Cloud SQL instance. Two predefined Identity and Access Management (IAM) roles exist that contain a subset of the permissions needed by the team. You need to configure the necessary IAM permissions for this team while following Google-recommended practices. What should you do?)

A. Grant the team the two predefined IAM roles. 
B. Create a custom IAM role that combines the permissions from the two relevant predefined roles. 
C. Create a custom IAM role that includes only the required permissions from the predefined roles. 
D. Grant the team the IAM roles of Kubernetes Engine Admin and Cloud SQL Admin. 

Show Answer

---

Question # 34

You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company's security policies, your application must connect to your database through an encrypted and authenticated connection that requires minimal management and integrates with Identity and Access Management (IAM). What should you do? 

A. Deploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure a database user and password.  
B. Deploy a Cloud SOL database and configure IAM database authentication. Access the database through the Cloud SQL Auth Proxy. 
C. Deploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure IAM database authentication. 
D. Deploy a Cloud SQL database and configure a database user and password. Access the database through the Cloud SQL Auth Proxy. 

Show Answer

---

Question # 35

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in the crmdatabases project. You want to follow Google-recommended practices to grant access to the service account in the web-applications project. What should you do?

A. Grant "project owner" for web-applications appropriate roles to crm-databases.  
B. Grant "project owner" role to crm-databases and the web-applications project. 
C. Grant "project owner" role to crm-databases and roles/bigquery.dataViewer role to webapplications. 
D. Grant roles/bigquery.dataViewer role to crm-databases and appropriate roles to web-applications. 

Show Answer

---

Question # 36

You have several hundred microservice applications running in a Google Kubernetes Engine (GKE) cluster. Each microservice is a deployment with resource limits configured for each container in the deployment. You've observed that the resource limits for memory and CPU are not appropriately set for many of the microservices. You want to ensure that each microservice has right sized limits for memory and CPU. What should you do? 

A. Modify the cluster's node pool machine type and choose a machine type with more memory and CPU. 
B. Configure a Horizontal Pod Autoscaler for each microservice. 
C. Configure GKE cluster autoscaling. 
D. Configure a Vertical Pod Autoscaler for each microservice. 

Show Answer

---

Question # 37

Your company is running a critical workload on a single Compute Engine VM instance. Your company's disaster recovery policies require you to backup the entire instance's disk data every day. The backups must be retained for 7 days. You must configure a backup solution that complies with your company's security policies and requires minimal setup and configuration. What should you do?

A. Configure the instance to use persistent disk asynchronous replication. 
B. Configure daily scheduled persistent disk snapshots with a retention period of 7 days. 
C. Configure Cloud Scheduler to trigger a Cloud Function each day that creates a new machine image and deletes machine images that are older than 7 days.
D. Configure a bash script using gsutil to run daily through a cron job. Copy the disk's files to a Cloud Storage bucket with archive storage class and an object lifecycle rule to delete the objects after 7 days. 

Show Answer

---

Question # 38

You need to deploy a third-party software application onto a single Compute Engine VM instance. The application requires the highest speed read and write disk access for the internal database. You need to ensure the instance will recover on failure. What should you do? 

A. Create an instance template. Set the disk type to be an SSD Persistent Disk. Launch the instance template as part of a stateful managed instance group. 
B. Create an instance template. Set the disk type to be an SSD Persistent Disk. Launch the instance template as part of a stateless managed instance group.
C. Create an instance template. Set the disk type to be Hyperdisk Extreme. Launch the instance template as part of a stateful managed instance group. 
D. Create an instance template. Set the disk type to be Hyperdisk Extreme. Launch the instance template as part of a stateless managed instance group. 

Show Answer

---

Question # 39

You want to deploy a new containerized application into Google Cloud by using a Kubernetes manifest. You want to have full control over the Kubernetes deployment, and at the same time, you want to minimize configuring infrastructure. What should you do? 

A. Deploy the application on GKE Autopilot. 
B. Deploy the application on GKE Standard. 
C. Deploy the application on Cloud Functions. 
D. Deploy the application on Cloud Run. 

Show Answer

---

Question # 40

Your preview application, deployed on a single-zone Google Kubernetes Engine (GKE) cluster in uscentrall, has gained popularity. You are now ready to make the application generally available. You need to deploy the application to production while ensuring high availability and resilience. You also want to follow Google-recommended practices. What should you do? 

A. Use the gcloud container clusters create command with the options--enable-multi-networking and--enable- autoscaling to create an autoscaling zonal cluster and deploy the application to it.
B. Use the gcloud container clusters create-auto command to create an autopilot cluster and deploy the application to it. 
C. Use the gcloud container clusters update command with the option”region us-centrall to update the cluster and deploy the application to it. 
D. Use the gcloud container clusters update command with the option”node-locations us-centralla, us-centrall-b to update the cluster and deploy the application to the nodes. 

Show Answer

---

Question # 41

You use Cloud Logging lo capture application logs. You now need to use SOL to analyze the application logs in Cloud Logging, and you want to follow Google-recommended practices. What should you do?

A. Develop SQL queries by using Gemini for Google Cloud. 
B. Enable Log Analytics for the log bucket and create a linked dataset in BigQuery. 
C. Create a schema for the storage bucket and run SQL queries for the data in the bucket. 
D. Export logs to a storage bucket and create an external view in BigQuery. 

Show Answer

---

Question # 42

Your company requires that Google Cloud products are created with a specific configuration to comply with your company's security policies You need to implement a mechanism that will allow software engineers at your company to deploy and update Google Cloud products in a preconfigured and approved manner. What should you do? 

A. Create Java packages that utilize the Google Cloud Client Libraries for Java to configure Google Cloud products. Store and share the packages in a source code rep
B. Create bash scripts that utilize the Google Cloud CLI to configure Google Cloud products. Store and share the bash scripts in a source code repository
C. Create Terraform modules that utilize the Google Cloud Terraform Provider to configure Google Cloud products. Store and share the modules in a source code repository. 
D. Use the Google Cloud APIs by using curl to configure Google Cloud products. Store and share the curl commands in a source code repository. 

Show Answer

---

Question # 43

You are building a backend service for an ecommerce platform that will persist transaction data from mobile and web clients. After the platform is launched, you expect a large volume of global  transactions. Your business team wants to run SQL queries to analyze the dat a. You need to build a highly available and scalable data store for the platform. What should you do?

A. Create a multi-region Cloud Spanner instance with an optimized schema. 
B. Create a multi-region Firestore database with aggregation query enabled. 
C. Create a multi-region Cloud SQL for PostgreSQL database with optimized indexes. 
D. Create a multi-region BigQuery dataset with optimized tables. 

Show Answer

---

Question # 44

You have two Google Cloud projects: project-a with VPC vpc-a (10.0.0.0) and project-b with VPC vpc-b (10.8.0.0). Your frontend application resides in vpc-a and the backend API services ate deployed in vpc-b. You need to efficiently and cost-effectively enable communication between these Google Cloud projects. You also want to follow Google-recommended practices. What should you do? 

A. Configure a Cloud Router in vpc-a and another Cloud Router in vpc-b. 
B. Configure a Cloud Interconnect connection between vpc-a and vpc-b. 
C. Create VPC Network Peering between vpc-a and vpc-b. 
D. Create an OpenVPN connection between vpc-a and vpc-b. 

Show Answer

---

Testimonials