Associate-Cloud-Engineer PDF Download Dec-2025 Google Test To Gain Brilliante Result!
Provide Updated Google Associate-Cloud-Engineer Dumps as Practice Test and PDF
NEW QUESTION # 117
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google-recommended practices to obtain the combined logs for all projects. What should you do?
- A. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery.
Configure the table expiration to 60 days. - B. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset.
Configure the table expiration to 60 days. - C. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
- D. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage.
Create a lifecycle rule to delete objects after 60 days.
Answer: B
Explanation:
Since we only care about the logs within 60 days, we can set the expiration time to 60 to retain only the logs within that time frame. Once data is beyond 60 days old, it wouldn't be included in future analyzations.
https://cloud.google.com/bigquery/docs/managing-tables#updating_a_tables_expiration_time
NEW QUESTION # 118
You've been asked to add a new IAM member and grant them access to run some queries on BigQuery. Considering the principle of least privilege, which role should you assign?
- A. roles/bigquery.admin
- B. roles/bigquery.dataOwner
- C. Project Editor
- D. roles/bigquery.dataViewer and roles/bigquery.jobUser
Answer: C,D
NEW QUESTION # 119
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?
- A. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name. Share the folder with the IoT team.
- B. Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
- C. Move both projects under the same folder.
- D. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
Answer: A
Explanation:
Reference:
https://cloud.google.com/billing/docs/onboarding-checklist
NEW QUESTION # 120
Your company requires all developers to have the same permissions, regardless of the Google Cloud project they are working on. Your company's security policy also restricts developer permissions to Compute Engine. Cloud Functions, and Cloud SQL. You want to implement the security policy with minimal effort. What should you do?
- A. * Create a custom role with Compute Engine, Cloud Functions, and Cloud SQL permissions in one project within the Google Cloud organization.
* Copy the role across all projects created within the organization with the gcloud iam roles copy command.
* Assign the role to developers in those projects. - B. * Add all developers to a Google group in Cloud Identity.
* Create a custom role with Compute Engine, Cloud Functions, and Cloud SQL permissions at the Google Cloud organization level.
* Assign the custom role to the Google group. - C. * Add all developers to a Google group in Cloud Identity.
* Assign predefined roles for Compute Engine, Cloud Functions, and Cloud SQL permissions to the Google group for each project in the Google Cloud organization. - D. * Add all developers to a Google group in Google Groups for Workspace.
* Assign the predefined role of Compute Admin to the Google group at the Google Cloud organization level.
Answer: B
Explanation:
https://www.cloudskillsboost.google/focuses/1035?parent=catalog#:~:text=custom%20role%20at%20the%20organization%20level
NEW QUESTION # 121
You have a Bigtable instance that consists of three nodes that store personally identifiable information (Pll) data. You need to log all read or write operations, including any metadata or configuration reads of this database table, in your company's Security Information and Event Management (SIEM) system. What should you do?
- A. * Navigate to the Audit Logs page in the Google Cloud console, and enable Data Read. Data Write and Admin Read logs for the Bigtable instance* Create a Pub/Sub topic as a Cloud Logging sink destination, and add your SIEM as a subscriber to the topic.
- B. * Navigate to Cloud Mentioning in the Google Cloud console, and create a custom monitoring job for theBigtable instance to track all changes.* Create an alert by using webhook endpoints. with the SIEM endpoint as a receiver
- C. * Install the Ops Agent on the Bigtable instance during configuration. K* Create a service account with read permissions for the Bigtable instance.* Create a custom Dataflow job with this service account to export logs to the company's SIEM system.
- D. * Navigate to the Audit Logs page in the Google Cloud console, and enable Admin Write logs for theBiglable instance.* Create a Cloud Functions instance to export logs from Cloud Logging to your SIEM.
Answer: D
NEW QUESTION # 122
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements.
You want to select a cost-efficient option. Which storage option should you use?
- A. Nearline Storage
- B. Multi-Regional Storage
- C. Coldline Storage
- D. Regional Storage
Answer: C
Explanation:
Coldline Storage is a very-low-cost, highly durable storage service for storing infrequently accessed data.
Coldline Storage is ideal for data you plan to read or modify at most once a quarter. Since we have a requirement to access data once a quarter and want to go with the most cost-efficient option, we should select Coldline Storage.
Ref: https://cloud.google.com/storage/docs/storage-classes#coldline
NEW QUESTION # 123
You need to add a group of new users to Cloud Identity. Some of the users already have existing Google accounts. You want to follow one of Google's recommended practices and avoid conflicting accounts. What should you do?
- A. Invite the user to transfer their existing account
- B. Invite the user to use an email alias to resolve the conflict
- C. Tell the user that they must delete their existing account
- D. Tell the user to remove all personal email from the existing account
Answer: B
NEW QUESTION # 124
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2-highmem-16 nodes without any downtime. What should you do?
- A. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- B. Create a new cluster with n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- C. Use gcloud container clusters upgrade. Deploy the new services.
- D. Create a new Node Pool and specify machine type n2-highmem-16. Deploy the new pods.
Answer: D
Explanation:
https://cloud.google.com/kubernetes-engine/docs/concepts/deployment
NEW QUESTION # 125
You have an application that receives SSL-encrypted TCP traffic on port 443. Clients for this application are located all over the world. You want to minimize latency for the clients. Which load balancing option should you use?
- A. Internal TCP/UDP Load Balancer. Add a firewall rule allowing ingress traffic from 0.0.0.0/0 on the target instances.
- B. SSL Proxy Load Balancer
- C. Network Load Balancer
- D. HTTPS Load Balancer
Answer: B
Explanation:
Reference: https://cloud.google.com/load-balancing/docs/ssl
SSL Proxy Load Balancing support for the following ports: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993,
995, 1883, 3389, 5222, 5432, 5671, 5672, 5900, 5901, 6379, 8085, 8099, 9092, 9200, and 9300. When you use Google- managed SSL certificates with SSL Proxy Load Balancing, the frontend port for traffic must be
443 to enable the Google-managed SSL certificates to be provisioned and renewed.
https://cloud.google.com/load-balancing/images/choose-lb.svg
NEW QUESTION # 126
You have one GCP account running in your default region and zone and another account running in a non- default region and zone. You want to start a new Compute Engine instance in these two Google Cloud Platform accounts using the command line interface. What should you do?
- A. Create two configurations using gcloud config configurations create [NAME].Run gcloud config configurations activate [NAME]to switch between accounts when running the commands to start the Compute Engine instances.
- B. Activate two configurations using gcloud configurations activate [NAME].Run gcloud config listto start the Compute Engine instances.
- C. Create two configurations using gcloud config configurations create [NAME].Run gcloud configurations listto start the Compute Engine instances.
- D. Activate two configurations using gcloud configurations activate [NAME].Run gcloud configurations listto start the Compute Engine instances.
Answer: A
NEW QUESTION # 127
A company is launching a static website using the zone apex (mycompany.com). The company wants to use Amazon Route 53 for DNS.
Which steps should the company perform to implement a scalable and cost-effective solution? (Choose two.)
- A. Host the website using AWS Elastic Beanstalk, and map a Route 53 alias record to the Beanstalk stack.
- B. Host the website on an Amazon EC2 instance with ELB and Auto Scaling, and map a Route 53 alias record to the ELB endpoint.
- C. Host the website on an Amazon EC2 instance, and map a Route 53 alias record to the public IP address of the Amazon EC2 instance.
- D. Create a Route 53 hosted zone, and set the NS records of the domain to use Route 53 name servers.
- E. Serve the website from an Amazon S3 bucket, and map a Route 53 alias record to the website endpoint.
Answer: B,E
NEW QUESTION # 128
You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate reporting under the same Stackdriver Monitoring dashboard. What should you do?
- A. Configure a single Stackdriver account, and link all projects to the same account.
- B. For each project, create a Stackdriver account. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all other projects.
- C. Configure a single Stackdriver account for one of the projects. In Stackdriver, create a Group and add the other project names as criteria for that Group.
- D. Use Shared VPC to connect all projects, and link Stackdriver to one of the projects.
Answer: C
NEW QUESTION # 129
You created a Kubernetes deployment by running kubectl run nginx image=nginx replicas=1. After a few days, you decided you no longer want this deployment. You identified the pod and deleted it by running kubectl delete pod. You noticed the pod got recreated.
$ kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-84748895c4-nqqmt 1/1 Running 0 9m41s
$ kubectl delete pod nginx-84748895c4-nqqmt
pod nginx-84748895c4-nqqmt deleted
$ kubectl get pods
NAME READY STATUS RESTARTS AGE
nginx-84748895c4-k6bzl 1/1 Running 0 25s
What should you do to delete the deployment and avoid pod getting recreated?
- A. kubectl delete deployment nginx
- B. kubectl delete -deployment=nginx
- C. kubectl delete pod nginx-84748895c4-k6bzl -no-restart 2
- D. kubectl delete inginx
Answer: A
Explanation:
Explanation
This command correctly deletes the deployment. Pods are managed by kubernetes workloads (deployments).
When a pod is deleted, the deployment detects the pod is unavailable and brings up another pod to maintain the replica count. The only way to delete the workload is by deleting the deployment itself using the kubectl delete deployment command.
$ kubectl delete deployment nginx
deployment.apps nginx deleted
Ref: https://kubernetes.io/docs/reference/kubectl/cheatsheet/#deleting-resources
NEW QUESTION # 130
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted.
You want to migrate this workload to the cloud while minimizing cost. What should you do?
- A. Create an Instance Template with Preemptible VMs On.
Create a Managed Instance Group from the template and adjust Target CPU Utilization.
Migrate the workload. - B. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
- C. Migrate the workload to a Compute Engine Preemptible VM.
- D. Migrate the workload to a Compute Engine VM.
Start and stop the instance as needed.
Answer: D
Explanation:
Install the workload in a compute engine VM, start and stop the instance as needed, because as per the question the VM runs for 30 hours, process can be performed offline and should not be interrupted, if interrupted we need to restart the batch process again. Preemptible VMs are cheaper, but they will not be available beyond 24hrs, and if the process gets interrupted the preemptible VM will restart.
NEW QUESTION # 131
You need to add a group of new users to Cloud Identity. Some of the users already have existing Google accounts. You want to follow one of Google's recommended practices and avoid conflicting accounts. What should you do?
- A. Invite the user to transfer their existing account
- B. Tell the user that they must delete their existing account
- C. Tell the user to remove all personal email from the existing account
- D. Invite the user to use an email alias to resolve the conflict
Answer: A
Explanation:
https://cloud.google.com/architecture/identity/migrating-consumer-accounts
NEW QUESTION # 132
......
Associate-Cloud-Engineer Dumps are Available for Instant Access: https://examsforall.actual4dump.com/Google/Associate-Cloud-Engineer-actualtests-dumps.html