Question 1

You need to deploy a third-party software application onto a single Compute Engine VM instance. The application requires the highest speed read and write disk access for the internal database. You need to ensure the instance will recover on failure. What should you do?

ACreate an instance template. Set the disk type to be an SSD Persistent Disk. Launch the instance template as part of a stateful managed instance group.

BCreate an instance template. Set the disk type to be an SSD Persistent Disk. Launch the instance template as part of a stateless managed instance group.

CCreate an instance template. Set the disk type to be Hyperdisk Extreme. Launch the instance template as part of a stateful managed instance group.

DCreate an instance template. Set the disk type to be Hyperdisk Extreme. Launch the instance template as part of a stateless managed instance group.

Answer : A

Question 2

Your company is running a critical workload on a single Compute Engine VM instance. Your company's disaster recovery policies require you to backup the entire instance's disk data every day. The backups must be retained for 7 days. You must configure a backup solution that complies with your company's security policies and requires minimal setup and configuration. What should you do?

AConfigure the instance to use persistent disk asynchronous replication.

BConfigure daily scheduled persistent disk snapshots with a retention period of 7 days.

CConfigure Cloud Scheduler to trigger a Cloud Function each day that creates a new machine image and deletes machine images that are older than 7 days.

DConfigure a bash script using gsutil to run daily through a cron job. Copy the disk's files to a Cloud Storage bucket with archive storage class and an object lifecycle rule to delete the objects after 7 days.

Answer : B

Question 3

You have several hundred microservice applications running in a Google Kubernetes Engine (GKE) cluster. Each microservice is a deployment with resource limits configured for each container in the deployment. You've observed that the resource limits for memory and CPU are not appropriately set for many of the microservices. You want to ensure that each microservice has right sized limits for memory and CPU. What should you do?

AModify the cluster's node pool machine type and choose a machine type with more memory and CPU.

BConfigure a Horizontal Pod Autoscaler for each microservice.

CConfigure GKE cluster autoscaling.

DConfigure a Vertical Pod Autoscaler for each microservice.

Answer : D

Question 4

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in the crm-databases project. You want to follow Google-recommended practices to grant access to the service account in the web-applications project. What should you do?

AGrant 'project owner' for web-applications appropriate roles to crm-databases.

BGrant 'project owner' role to crm-databases and the web-applications project.

CGrant 'project owner' role to crm-databases and roles/bigquery.dataViewer role to web-applications.

DGrant roles/bigquery.dataViewer role to crm-databases and appropriate roles to web-applications.

Answer : C

Question 5

You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company's security policies, your application must connect to your database through an encrypted and authenticated connection that requires minimal management and integrates with Identity and Access Management (IAM). What should you do?

ADeploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure a database user and password.

BDeploy a Cloud SOL database and configure IAM database authentication. Access the database through the Cloud SQL Auth Proxy.

CDeploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure IAM database authentication.

DDeploy a Cloud SQL database and configure a database user and password. Access the database through the Cloud SQL Auth Proxy.

Answer : B

Cloud SQL Auth Proxy: This proxy ensures secure connections to your Cloud SQL database by automatically handling encryption (SSL/TLS) and IAM-based authentication. It simplifies the management of secure connections without needing to manage SSL/TLS certificates manually. IAM Database Authentication: This allows you to use IAM credentials to authenticate to the database, providing a unified and secure authentication mechanism that integrates seamlessly with Google Cloud IAM.

Free Google Associate Cloud Engineer Practice Questions

Google Associate Cloud Engineer Sample Exam Questions

Question 1

Question 2

Question 3

Question 4

Question 5