2025 Associate-Cloud-Engineer Question Bank: Free PDF Download Recently Updated Questions
Associate-Cloud-Engineer Certification Exam Dumps with 328 Practice Test Questions
Google Associate Cloud Engineer Certification Exam is a professional certification offered by Google Cloud for individuals interested in becoming an Associate Cloud Engineer. Google Associate Cloud Engineer Exam certification is designed to validate your skills and knowledge in managing and deploying applications, monitoring operations, and configuring cloud solutions on Google Cloud Platform.
Google Associate-Cloud-Engineer exam is a certification exam offered by Google Cloud Platform for individuals who want to showcase their skills and knowledge in deploying applications, monitoring operations, and managing cloud-based solutions on the Google Cloud Platform. Google Associate Cloud Engineer Exam certification exam is ideal for professionals who are looking to jumpstart their careers in cloud computing or cloud engineering.
NEW QUESTION # 168
You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?
- A. Create a health check on port 443 and use that when creating the Managed Instance Group.
- B. Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
- C. In the Instance Template, add a startup script that sends a heartbeat to the metadata server.
- D. In the Instance Template, add the label `health-check'.
Answer: A
Explanation:
MIGs support autohealing, load balancing, autoscaling, and auto-updating. no the Images templates, this is set up in the MIG.
NEW QUESTION # 169
You've created the code for a Cloud Function that will respond to HTTP triggers and return some data in JSON format. You have the code locally, it's tested and working. Which command can you use to create the function inside Google Cloud?
- A. gcloud function create
- B. gcloud functions create
- C. gcloud functions deploy
- D. gcloud function deploy
Answer: C,D
NEW QUESTION # 170
You have been asked to set up Object Lifecycle Management for objects stored in storage buckets. The objects are written once and accessed frequently for 30 days. After 30 days, the objects are not read again unless there is a special need. The object should be kept for three years, and you need to minimize cost.
What should you do?
- A. Set up a policy that uses Nearline storage for 30 days and then moves to Archive storage for three years.
- B. Set up a policy that uses Nearline storage for 30 days, then moves the Coldline for one year, and then moves to Archive storage for two years.
- C. Set up a policy that uses Standard storage for 30 days, then moves to Coldline for one year, and then moves to Archive storage for two years.
- D. Set up a policy that uses Standard storage for 30 days and then moves to Archive storage for three years.
Answer: D
Explanation:
The key to understand the requirement is: "The objects are written once and accessed frequently for 30 days" Standard Storage Standard Storage is best for data that is frequently accessed ("hot" data) and/or stored for only brief periods of time.
Archive Storage
Archive Storage is the lowest-cost, highly durable storage service for data archiving, online backup, and disaster recovery. Unlike the "coldest" storage services offered by other Cloud providers, your data is available within milliseconds, not hours or days. Archive Storage is the best choice for data that you plan to access less than once a year.
https://cloud.google.com/storage/docs/storage-classes#standard
NEW QUESTION # 171
You have a number of applications that have bursty workloads and are heavily dependent on topics to decouple publishing systems from consuming systems. Your company would like to go serverless to enable developers to focus on writing code without worrying about infrastructure. Your solution architect has already identified Cloud Pub/Sub as a suitable alternative for decoupling systems. You have been asked to identify a suitable GCP Serverless service that is easy to use with Cloud Pub/Sub. You want the ability to scale down to zero when there is no traffic in order to minimize costs. You want to follow Google recommended practices.
What should you suggest?
- A. Cloud Functions.
- B. Cloud Run
- C. App Engine Standard
- D. Cloud Run for Anthos
Answer: A
Explanation:
Cloud Functions is Google Cloud's event-driven serverless compute platform that lets you run your code locally or in the cloud without having to provision servers. Cloud Functions scales up or down, so you pay only for compute resources you use. Cloud Functions have excellent integration with Cloud Pub/Sub, lets you scale down to zero and is recommended by Google as the ideal serverless platform to use when dependent on Cloud Pub/Sub.
"If you're building a simple API (a small set of functions to be accessed via HTTP or Cloud Pub/Sub), we recommend using Cloud Functions." Ref: https://cloud.google.com/serverless-options
NEW QUESTION # 172
You want to configure 10 Compute Engine instances for availability when maintenance occurs. Your requirements state that these instances should attempt to automatically restart if they crash. Also, the instances should be highly available including during system maintenance. What should you do?
- A. Create an instance group for the instances. Set the 'Autohealing' health check to healthy (HTTP).
- B. Create an instance template for the instances. Set the 'Automatic Restart' to on. Set the 'On-host maintenance' to Migrate VM instance. Add the instance template to an instance group.
- C. Create an instance group for the instance. Verify that the 'Advanced creation options' setting for 'do not retry machine creation' is set to off.
- D. Create an instance template for the instances. Set 'Automatic Restart' to off. Set 'On-host maintenance' to Terminate VM instances. Add the instance template to an instance group.
Answer: B
Explanation:
Create an instance template for the instances so VMs have same specs. Set the "~Automatic Restart' to on to VM automatically restarts upon crash. Set the "~On-host maintenance' to Migrate VM instance. This will take care of VM during maintenance window. It will migrate VM instance making it highly available Add the instance template to an instance group so instances can be managed.
* onHostMaintenance: Determines the behavior when a maintenance event occurs that might cause your instance to reboot.
* [Default] MIGRATE, which causes Compute Engine to live migrate an instance when there is a maintenance event.
* TERMINATE, which stops an instance instead of migrating it.
* automaticRestart: Determines the behavior when an instance crashes or is stopped by the system.
* [Default] true, so Compute Engine restarts an instance if the instance crashes or is stopped.
* false, so Compute Engine does not restart an instance if the instance crashes or is stopped.
Enabling automatic restart ensures that compute engine instances are automatically restarted when they crash.
And Enabling Migrate VM Instance enables live migrates i.e. compute instances are migrated during system maintenance and remain running during the migration.
Automatic Restart If your instance is set to terminate when there is a maintenance event, or if your instance crashes because of an underlying hardware issue, you can set up Compute Engine to automatically restart the instance by setting the automaticRestart field to true. This setting does not apply if the instance is taken offline through a user action, such as calling sudo shutdown, or during a zone outage.Ref: https://cloud.google.com/compute/docs/instances/setting-instance-scheduling-options#autorestart Enabling the Migrate VM Instance option migrates your instance away from an infrastructure maintenance event, and your instance remains running during the migration.Your instance might experience a short period of decreased performance, although generally, most instances should not notice any difference. This is ideal for instances that require constant uptime and can tolerate a short period of decreased performance.Ref: https://cloud.google.com/compute/docs/instances/setting-instance-scheduling-options#live_mi
NEW QUESTION # 173
Your customer wants you to create a secure website with autoscaling based on the compute instance CPU load. You want to enhance performance by storing static content in Cloud Storage. Which resources are needed to distribute the user traffic?
- A. An external HTTP(S) load balancer with a managed SSL certificate to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend.
- B. An external network load balancer pointing to the backend instances to distribute the load evenly. The web servers will forward the request to the Cloud Storage as needed.
- C. An external HTTP(S) load balancer to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend. Install the HTTPS certificates on the instance.
- D. An internal HTTP(S) load balancer together with Identity-Aware Proxy to allow only HTTPS traffic.
Answer: A
Explanation:
An external HTTP(S) load balancer is a Google-recommended solution for distributing web traffic across multiple regions and zones, and providing high availability, scalability, and security for web applications. It supports both IPv4 and IPv6 addresses, and can handle SSL/TLS termination and encryption. It also integrates with Cloud CDN, Cloud Armor, and Cloud Identity-Aware Proxy for enhanced performance and protection.
A managed instance group (MIG) can be used as a backend service for the HTTP(S) load balancer, and can automatically scale the number of VM instances based on the CPU load. A Cloud Storage bucket can also be used as a backend service for the HTTP(S) load balancer, and can serve static content such as images, videos, or HTML files. A URL map can be used to route requests to different backend services based on the path or host of the request. For example, a URL map can send requests for /static/* to the Cloud Storage bucket, and requests for /dynamic/* to the MIG. A managed SSL certificate can be used to secure the connection between the clients and the load balancer, and can be automatically provisioned and renewed by Google.
A is incorrect because an internal HTTP(S) load balancer is only visible within a VPC network, and not to the public internet. It is used for internal applications that need to communicate with other internal services.
Identity-Aware Proxy is a service that provides secure access to web applications without using a VPN. It is not a load balancer, and it does not distribute user traffic.
B is incorrect because installing HTTPS certificates on the instance is not necessary, as the HTTP(S) load balancer can handle SSL/TLS termination and encryption. It is also more complex and less secure to manage the certificates on the instance level, as they need to be updated and synchronized across multiple instances.
D is incorrect because an external network load balancer is a TCP/UDP load balancer that operates at the network layer. It is not suitable for web applications that use HTTP(S) protocols, as it does not support SSL
/TLS termination and encryption, URL maps, or Cloud Storage backends. It is also less efficient and scalable to forward the requests to the Cloud Storage from the web servers, as it adds an extra hop and latency.
HTTP(S) Load Balancing documentation
Setting up HTTP(S) Load Balancing with Cloud Storage
Creating and using SSL certificates
Choosing a load balancer
NEW QUESTION # 174
The DevOps group in your organization needs full control of Compute Engine resources in your development project. However, they should not have permission to create or update any other resources in the project. You want to follow Google's recommendations for setting permissions for the DevOps group. What should you do?
- A. Grant the basic role roles/viewer and the predefined role roles/compute.admin to the DevOps group.
- B. Create an IAM policy and grant all compute. instanceAdmln." permissions to the policy Attach the policy to the DevOps group.
- C. Create a custom role at the folder level and grant all compute. instanceAdmln. * permissions to the role Grant the custom role to the DevOps group.
- D. Grant the basic role roles/editor to the DevOps group.
Answer: A
NEW QUESTION # 175
You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?
- A. Expand the CIDR range of the relevant subnet for the cluster.
- B. Add an alias IP range to the subnet used by the GKE clusters.
- C. Create a new subnet in the same region as the subnet being used.
- D. Create a new VPC, and set up VPC peering with the existing VPC.
Answer: A
Explanation:
Every subnet must have a primary IP address range. You can expand the primary IP address range at any time, even when Google Cloud resources use the subnet; however, you cannot shrink or change a subnet's primary IP address scheme after the subnet has been created. The first two and last two IP addresses of a primary IP address range are reserved by Google Cloud.
https://cloud.google.com/kubernetes-engine/docs/concepts/alias-ips
NEW QUESTION # 176
You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?
- A. Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
- B. Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
- C. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
- D. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
Answer: D
NEW QUESTION # 177
Your company set up a complex organizational structure on Google Cloud. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members, and you want to follow Google-recommended practices.
What should you do?
- A. Add the users to a group, and add this group to roles/browser.
- B. Add the users to roles/iam.roleViewer role.
- C. Add the users to roles/browser role.
- D. Add the users to a group, and add this group to roles/iam.roleViewer role.
Answer: A
NEW QUESTION # 178
You want to set up a Google Kubernetes Engine cluster Verifiable node identity and integrity are required for the cluster, and nodes cannot be accessed from the internet. You want to reduce the operational cost of managing your cluster, and you want to follow Google-recommended practices. What should you do?
- A. Deploy a standard public cluster and enable shielded nodes.
- B. Deploy a public autopilot cluster.
- C. Deploy a private autopilot cluster
- D. Deploy a standard private cluster and enable shielded nodes.
Answer: C
NEW QUESTION # 179
You have developed an application that consists of multiple microservices, with each microservice packaged in its own Docker container image. You want to deploy the entire application on Google Kubernetes Engine so that each microservice can be scaled individually. What should you do?
- A. Create and deploy a Job per microservice.
- B. Create and deploy a Custom Resource Definition per microservice.
- C. Create and deploy a Deployment per microservice.
- D. Create and deploy a Docker Compose File.
Answer: C
NEW QUESTION # 180
You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?
- A. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
- B. Use the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.
- C. Use the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.
- D. Run a select count (*) to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.
Answer: B
NEW QUESTION # 181
Your company has an internal application for managing transactional orders. The application is used exclusively by employees in a single physical location. The application requires strong consistency, fast queries, and ACID guarantees for multi-table transactional updates. The first version of the application is implemented inPostgreSQL, and you want to deploy it to the cloud with minimal code changes. Which database is most appropriate for this application?
- A. Cloud Datastore
- B. BigQuery
- C. Cloud Spanner
- D. Cloud SQL
Answer: D
Explanation:
Explanation
https://cloud.google.com/sql/docs/postgres
NEW QUESTION # 182
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2-highmem-16 nodes without any downtime. What should you do?
- A. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- B. Use gcloud container clusters upgrade. Deploy the new services.
- C. Create a new cluster with n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- D. Create a new Node Pool and specify machine type n2-highmem-16. Deploy the new pods.
Answer: D
Explanation:
https://cloud.google.com/kubernetes-engine/docs/concepts/deployment
NEW QUESTION # 183
You're working as a Cloud Engineer for a small company. The lead developer needs to create some new projects in order to get started with deploying the codebase. She tried to create a project and received an error. She messaged you on Slack to ask for help, though, she couldn't recall the exact error message. You checked and found that she does have Project Creator permissions. Keeping in mind the principle of least privilege, what is the best role to grant her so that she can create billable projects?
- A. The "Billing Account Viewer" role.
- B. The "Project Owner" role.
- C. The "Billing Account User" role.
- D. The "Billing Account Administrator" role.
Answer: C
NEW QUESTION # 184
......
New Associate-Cloud-Engineer Exam Dumps with High Passing Rate: https://www.examdiscuss.com/Google/exam/Associate-Cloud-Engineer/
Google Associate-Cloud-Engineer Actual Questions and Braindumps: https://drive.google.com/open?id=10zKA6l82nj7mfxyeO70ltBdYoag_caI-