New (2026) Google Associate-Cloud-Engineer Exam Dumps
Best Way To Study For Google Associate-Cloud-Engineer Exam Brilliant Associate-Cloud-Engineer Exam Questions PDF
The Google Associate-Cloud-Engineer exam consists of multiple-choice questions and is designed to test the candidate's practical knowledge and understanding of the Google Cloud Platform. Associate-Cloud-Engineer exam is two hours long, and the candidate needs to score a minimum of 70% to pass. Associate-Cloud-Engineer exam fee is $125, and the certification is valid for two years.
NEW QUESTION # 187
You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub
/Sub API is currently disabled. You will use a service account to authenticate your application to the API.
You want to make sure your application can use Cloud Pub/Sub. What should you do?
- A. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
- B. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
- C. Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
- D. Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
Answer: A
Explanation:
Quickstart: using the Google Cloud Console
This page shows you how to perform basic tasks in Pub/Sub using the Google Cloud Console.
Note: If you are new to Pub/Sub, we recommend that you start with the interactive tutorial.
Before you begin
Set up a Cloud Console project.
Set up a project
Click to:
Create or select a project.
Enable the Pub/Sub API for that project.
You can view and manage these resources at any time in the Cloud Console.
Install and initialize the Cloud SDK.
Note: You can run the gcloud tool in the Cloud Console without installing the Cloud SDK. To run the gcloud tool in the Cloud Console, use Cloud Shell .
https://cloud.google.com/pubsub/docs/quickstart-console
NEW QUESTION # 188
A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?
- A. Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
- B. Navigate to Identity-Aware Proxy and check the permissions for these resources.
- C. Use the command gcloud projects get-iam-policy to view the current role assignments.
- D. In the console, validate which SSH keys have been stored as project-wide keys.
Answer: D
NEW QUESTION # 189
You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?
- A. Create a single custom VPC with 2 subnets. Create each subnet in a different region and with a different CIDR range.
- B. Create 2 custom VPCs, each with a single subnet. Create each subnet in the same region and with the same CIDR range.
- C. Create a single custom VPC with 2 subnets. Create each subnet in the same region and with the same CIDR range.
- D. Create 2 custom VPCs, each with a single subnet. Create each subnet is a different region and with a different CIDR range.
Answer: A
NEW QUESTION # 190
Your team maintains the infrastructure for your organization. The current infrastructure requires changes. You need to share your proposed changes with the rest of the team. You want to follow Google's recommended best practices. What should you do?
- A. Apply the change in a development environment, run gcloud compute instances list, and then save the output in a shared Storage bucket.
- B. Use Deployment Manager templates to describe the proposed changes and store them in Cloud Source Repositories.
- C. Use Deployment Manager templates to describe the proposed changes and store them in a Cloud Storage bucket.
- D. Apply the change in a development environment, run gcloud compute instances list, and then save the output in Cloud Source Repositories.
Answer: B
Explanation:
Explanation
Showing Deployment Manager templates to your team will allow you to define the changes you want to implement in your cloud infrastructure. You can use Cloud Source Repositories to store Deployment Manager templates and collaborate with your team. Cloud Source Repositories are fully-featured, scalable, and private Git repositories you can use to store, manage and track changes to your code.
https://cloud.google.com/source-repositories/docs/features
NEW QUESTION # 191
You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube- system namespace of the cluster. You want a solution that uses the fewest possible services.
What should you do?
- A. In the cluster's definition in Deployment Manager, add a metadata that has kube-system as key and the DaemonSet manifest as value.
- B. Add the cluster's API as a new Type Provider in Deployment Manager, and use the new type to create the DaemonSet.
- C. With Deployment Manager, create a Compute Engine instance with a startup script that uses kubectl to create the DaemonSet.
- D. Use the Deployment Manager Runtime Configurator to create a new Config resource that contains the DaemonSet definition.
Answer: B
Explanation:
Adding an API as a type provider
This page describes how to add an API to Google Cloud Deployment Manager as a type provider. To learn more about types and type providers, read the Types overview documentation.
A type provider exposes all of the resources of a third-party API to Deployment Manager as base types that you can use in your configurations. These types must be directly served by a RESTful API that supports Create, Read, Update, and Delete (CRUD).
If you want to use an API that is not automatically provided by Google with Deployment Manager, you must add the API as a type provider.
https://cloud.google.com/deployment-manager/docs/configuration/type-providers/creating-type- provider
NEW QUESTION # 192
You are managing a project for the Business Intelligence (BI) department in your company. A data pipeline ingests data into BigQuery via streaming. You want the users in the BI department to be able to run the custom SQL queries against the latest data in BigQuery. What should you do?
- A. Assign the IAM role of BigQuery User to a Google Group that contains the members of the BI team.
- B. Create a Data Studio dashboard that uses the related BigQuery tables as a source and give the BI team view access to the Data Studio dashboard.
- C. Create a Service Account for the BI team and distribute a new private key to each member of the BI team.
- D. Use Cloud Scheduler to schedule a batch Dataflow job to copy the data from BigQuery to the BI team's internal data warehouse.
Answer: A
Explanation:
roles/bigquery.user
When applied to a dataset, this role provides the ability to read the dataset's metadata and list tables in the dataset.
When applied to a project, this role also provides the ability to run jobs, including queries, within the project. A member with this role can enumerate their own jobs, cancel their own jobs, and enumerate datasets within a project. Additionally, allows the creation of new datasets within the project; the creator is granted the BigQuery Data Owner role (roles/bigquery.dataOwner) on these new datasets.
NEW QUESTION # 193
You are running an application on multiple virtual machines within a managed instance group and have autoscaling enabled. The autoscaling policy is configured so that additional instances are added to the group if the CPU utilization of instances goes above 80%. VMs are added until the instance group reaches its maximum limit of five VMs or until CPU utilization of instances lowers to 80%. The initial delay for HTTP health checks against the instances is set to 30 seconds. The virtual machine instances take around three minutes to become available for users. You observe that when the instance group autoscales, it adds more instances then necessary to support the levels of end-user traffic. You want to properly maintain instance group sizes when autoscaling.
What should you do?
- A. Use a TCP health check instead of an HTTP health check.
- B. Set the maximum number of instances to 1.
- C. Increase the initial delay of the HTTP health check to 200 seconds.
- D. Decrease the maximum number of instances to 3.
Answer: C
NEW QUESTION # 194
Your developers have created an application that needs to be able to make calls to Cloud Storage and BigQuery. The code is going to run inside a container and will run on Kubernetes Engine and on-premises.
What's the best way for them to authenticate to the Google Cloud services?
- A. Use the default service account for Compute Engine which already has the required permissions.
- B. Create a service account, with editor permissions, generate and download a key. Use the key to authenticate inside the application.
- C. Use the default service account for App Engine which already has the required permissions.
- D. Create a service account, grant it the least viable privileges to the required services, generate and download a key. Use the key to authenticate inside the application.
Answer: D
NEW QUESTION # 195
You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?
- A. Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to BETA while testing the role permissions.
- B. Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
- C. Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
- D. Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to BETA while testing the role permissions.
Answer: B
Explanation:
When setting support levels for permissions in custom roles, you can set to one of SUPPORTED, TESTING or NOT_SUPPORTED.
Ref: https://cloud.google.com/iam/docs/custom-roles-permissions-support
NEW QUESTION # 196
You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?
- A. Set up an on-demand backup tor the first of the month Write the backup to an Archive class Cloud Storage bucket
- B. Save file automatic first-of-the- month backup for three years Store the backup file in an Archive class Cloud Storage bucket
- C. Set up an export job for the first of the month Write the export file to an Archive class Cloud Storage bucket
- D. Convert the automatic first-of-the-month backup to an export file Write the export file to a Coldline class Cloud Storage bucket
Answer: C
Explanation:
https://cloud.google.com/sql/docs/mysql/backup-recovery/backups#can_i_export_a_backup
https://cloud.google.com/sql/docs/mysql/import-export#automating_export_operations
NEW QUESTION # 197
You have a Compute Engine instance hosting an application used between 9 AM and 6 PM on weekdays. You want to back up this instance daily for disaster recovery purposes. You want to keep the backups for 30 days. You want the Google-recommended solution with the least management overhead and the least number of services. What should you do?
- A. 1. Update your instances' metadata to add the following value: snapshot-schedule: 0 1 * * *
2. Update your instances' metadata to add the following value: snapshot-retention: 30 - B. 1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk.
2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters:
- Schedule frequency: Daily
- Start time: 1:00 AM - 2:00 AM
- Autodelete snapshots after 30 days - C. 1. Create a bash script in the instance that copies the content of the disk to Cloud Storage.
2. Create a bash script in the instance that deletes data older than 30 days in the backup Cloud Storage bucket.
3. Configure the instance's crontab to execute these scripts daily at 1:00 AM. - D. 1. Create a Cloud Function that creates a snapshot of your instance's disk.
2. Create a Cloud Function that deletes snapshots that are older than 30 days.
3. Use Cloud Scheduler to trigger both Cloud Functions daily at 1:00 AM.
Answer: B
NEW QUESTION # 198
You will have several applications running on different Compute Engine instances in the same project. You want to specify at a more granular level the service account each instance uses when calling Google Cloud APIs. What should you do?
- A. After starting the instances, use gcloud compute instances update to specify a Service Account for each instance
- B. When creating the instances, assign the name of each Service Account as instance metadata
- C. After starting the instances, use gcloud compute instances update to assign the name of the relevant Service Account as instance metadata
- D. When creating the instances, specify a Service Account for each instance
Answer: D
Explanation:
When you create an instance using the gcloud command-line tool or the Google Cloud Console, you can specify which service account the instance uses when calling Google Cloud APIs.
https://cloud.google.com/compute/docs/access/service-
accounts#associating_a_service_account_to_an_instance
NEW QUESTION # 199
You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google- recommended practices to provide the application with access to Cloud Storage. What should you do?
- A. 1. Use nslookup to get the IP address for storage.googleapis.com.
2. Negotiate with the security team to be able to give a public IP address to the servers.
3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com. - B. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).
2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.
3. Configure your servers to use that instance as a proxy to access Cloud Storage. - C. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.
2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.
3. Configure your new instances to use this ILB as proxy. - D. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.
2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.
3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com.
Answer: D
Explanation:
https://cloud.google.com/vpc/docs/configure-private-google-access-hybrid
NEW QUESTION # 200
You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?
- A. 1. Use the default configuration for one project you need to manage.2. Use gcloud init to update the configuration values when you need to work with a non-default project.
- B. 1. Create a configuration for each project you need to manage.2. Use gcloud init to update the configuration values when you need to work with a non-default project
- C. 1. Create a configuration for each project you need to manage.2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
- D. 1. Use the default configuration for one project you need to manage.2. Activate the appropriate configuration when you work with each of your assigned GCP projects.
Answer: C
Explanation:
https://cloud.google.com/sdk/gcloud
https://cloud.google.com/sdk/docs/configurations#multiple_configurations
NEW QUESTION # 201
You want to configure a solution for archiving data in a Cloud Storage bucket. The solution must be cost-effective. Data with multiple versions should be archived after 30 days. Previous versions are accessed once a month for reporting. This archive data is also occasionally updated at month-end. What should you do?
- A. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Nearline Storage.
- B. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Coldline Storage.
- C. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Coldline Storage.
- D. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Nearline Storage.
Answer: D
Explanation:
Reference:
Nearline Storage is ideal for data you plan to read or modify on average once per month or less. And this option archives just the noncurrent versions which is what we want to do.
Ref: https://cloud.google.com/storage/docs/storage-classes#nearline
NEW QUESTION # 202
Your managed instance group raised an alert stating that new instance creation has failed to create new instances. You need to maintain the number of running instances specified by the template to be able to process expected application traffic. What should you do?
- A. Create an instance template that contains valid syntax which will be used by the instance group.
Delete any persistent disks with the same name as instance names. - B. Create an instance template that contains valid syntax that will be used by the instance group.
Verify that the instance name and persistent disk name values are not the same in the template. - C. Delete the current instance template and replace it with a new instance template.
Verify that the instance name and persistent disk name values are not the same in the template.
Set the disks.autoDeleteproperty to truein the instance template. - D. Verify that the instance template being used by the instance group contains valid syntax.
Delete any persistent disks with the same name as instance names.
Set the disks.autoDeleteproperty to truein the instance template.
Answer: D
Explanation:
Reference: https://cloud.google.com/compute/docs/instance-groups/creating-groups-of-managed- instances
NEW QUESTION # 203
You create a Deployment with 2 replicas in a Google Kubernetes Engine cluster that has a single preemptible node pool. After a few minutes, you use kubectl to examine the status of your Pod and observe that one of them is still in Pending status:
What is the most likely cause?
- A. Too many Pods are already running in the cluster, and there are not enough resources left to schedule the pending Pod.
- B. The node pool is configured with a service account that does not have permission to pull the container image used by the pending Pod.
- C. The pending Pod was originally scheduled on a node that has been preempted between the creation of the Deployment and your verification of the Pods' status. It is currently being rescheduled on a new node.
- D. The pending Pod's resource requests are too large to fit on a single node of the cluster.
Answer: A
Explanation:
The pending Pods resource requests are too large to fit on a single node of the cluster. Too many Pods are already running in the cluster, and there are not enough resources left to schedule the pending Pod. is the right answer.
When you have a deployment with some pods in running and other pods in the pending state, more often than not it is a problem with resources on the nodes. Heres a sample output of this use case. We see that the problem is with insufficient CPU on the Kubernetes nodes so we have to either enable auto-scaling or manually scale up the nodes.
NEW QUESTION # 204
You are hosting an application from Compute Engine virtual machines (VMs) in us-central1-a. You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?
- A. - Create a Managed Instance Group and specify us-central1-a as the zone.
- Configure the Health Check with a short Health Interval. - B. - Perform regular backups of your application.
- Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.
- Restore from backups when notified. - C. - Create an HTTP(S) Load Balancer.
- Create one or more global forwarding rules to direct traffic to your VMs. - D. - Create Compute Engine resources in us-central1-b.
- Balance the load across both us-central1-a and us-central1-b.
Answer: D
NEW QUESTION # 205
You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?
- A. In the Instance Template, add a startup script that sends a heartbeat to the metadata server.
- B. Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
- C. Create a health check on port 443 and use that when creating the Managed Instance Group.
- D. In the Instance Template, add the label 'health-check'.
Answer: D
NEW QUESTION # 206
Your management has asked an external auditor to review all the resources in a specific project. The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?
- A. Create a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.
- B. Ask the auditor for their Google account, and give them the Viewer role on the project.
- C. Create a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.
- D. Ask the auditor for their Google account, and give them the Security Reviewer role on the project.
Answer: B
NEW QUESTION # 207
You want to configure 10 Compute Engine instances for availability when maintenance occurs.
Your requirements state that these instances should attempt to automatically restart if they crash.
Also, the instances should be highly available including during system maintenance. What should you do?
- A. Create an instance group for the instances.
Set the `Autohealing' health check to healthy (HTTP). - B. Create an instance template for the instances.
Set the `Automatic Restart' to on. Set the `On-host maintenance' to Migrate VM instance.
Add the instance template to an intsance group. - C. Create an instance template for the instances.
`Automatic Restart' to off. Set `On-host maintenance' to Terminate VM instances.
Add the instance template to an instance group. - D. Create an instance group for the instance.
Verify that the `Advanced creation options' setting for `do not retry machine creation' is set to off.
Answer: C
NEW QUESTION # 208
......
Updated Verified Pass Associate-Cloud-Engineer Exam - Real Questions and Answers: https://www.actualtorrent.com/Associate-Cloud-Engineer-questions-answers.html
Dumps Moneyack Guarantee - Associate-Cloud-Engineer Dumps Approved Dumps: https://drive.google.com/open?id=1pGiJE2RnRZovRLDXOSR3_MBQN_9BCct8