Online Access Free Associate-Cloud-Engineer Exam Questions

You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?

• A.Create the instance with the default Compute Engine service account Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
• B.Create a new service account and assign this service account to the new instance Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
• C.Create a new service account and assig n this service account to the new instance Grant the service account permissions on Cloud Storage.
• D.Create the instance with the default Compute Engine service account Grant the service account permissions on Cloud Storage.

You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate reporting under the same Stackdriver Monitoring dashboard. What should you do?

• A.Use Shared VPC to connect all projects, and link Stackdriver to one of the projects.
• B.Configure a single Stackdriver account, and link all projects to the same account.
• C.For each project, create a Stackdriver account. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all other projects.
• D.Configure a single Stackdriver account for one of the projects. In Stackdriver, create a Group and add the other project names as criteria for that Group.

You have been asked to migrate a docker application from datacenter to cloud. Your solution architect has suggested uploading docker images to GCR in one project and running an application in a GKE cluster in a separate project. You want to store images in the project img-278322 and run the application in the project prod-278986. You want to tag the image as acme_track_n_trace:v1. You want to follow Google- recommended practices. What should you do?

• A.Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace
• B.Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace
• C.Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace:v1
• D.Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace:v1

You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone. You want to avoid having to specify this zone with each CLI command when managing these instances.
What should you do?

• A.In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.
• B.Create a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1- d.
• C.In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.
• D.Set the europe-west1-d zone as the default zone using the gcloud config subcommand.

You are developing an application that will be deployed on Google Cloud. The application will use a service account to retrieve data from BigGuery. Before you deploy your application, you want to test the permissions of this service account from your local machine to ensure there will be no authentication issues. You want to ensure that you use the most secure method while following Google-recommended practices What should you do?

• A.Configure the gcloud CLI with Application Default Credentials using your user account. Issue a relevant BigGuery request through the gcloud CLI to test the access.
• B.Generate a service account key, and configure the gcloud CLI to use this key. Issue a relevant BlgQuery request through the gcloud CLI to test the access.
• C.Configure the gcloud CLI to use service account impersonation. Issue a relevant BigQuery request through the gcloud CLI to test the access.
• D.Grant the service account the BlgQuery Administrator 1AM role to ensure the service account has all required access.