Free Google Associate-Cloud-Engineer Exam Questions

Question 1

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

A : Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.

B : Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.

C : Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.

D : Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: D

Question 2

You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

A : Create a Cloud Memorystore for Redis instance with 32-GB capacity.

B : Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.

C : Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.

D : Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.

Answer: A

Question 3

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

A : Use gcloud iam roles copy and specify the production project as the destination project.

B : Use gcloud iam roles copy and specify your organization as the destination organization.

C : In the Google Cloud Platform Console, use the ‘create role from role’ functionality.

D : In the Google Cloud Platform Console, use the ‘create role’ functionality and select all applicable permissions.

Answer: A

Question 4

You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

A : Create a Cloud Memorystore for Redis instance with 32-GB capacity.

B : Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.

C : Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.

D : Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.

Answer: A

Question 5

You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?

A : ant yourself the IAM role of Cloud Spanner Admin

B : eate a new VPC network with subnetworks in all desired regions

C : nfigure your Cloud Spanner instance to be multi-regional

D : able the Cloud Spanner API

Answer: D