Online Access Free Associate-Cloud-Engineer Exam Questions

After a recent security incident, your startup company wants better insight into what is happening in the Google Cloud environment. You need to monitor unexpected firewall changes and instance creation. Your company prefers simple solutions. What should you do?

• A.Install Kibana on a compute instance. Create a log sink to forward Cloud Audit Logs filtered for firewalls and compute instances to Pub/Sub. Target the Pub/Sub topic to push messages to the Kibana instance. Analyze the logs on Kibana in real time.
• B.Turn on Google Cloud firewall rules logging, and set up alerts for any insert, update, or delete events.
• C.Create a log sink to forward Cloud Audit Logs filtered for firewalls and compute instances to Cloud Storage. Use BigQuery to periodically analyze log events in the storage bucket.
• D.Use Cloud Logging filters to create log-based metrics for firewall and instance actions. Monitor the changes and set up reasonable alerts.

While working on a project, an application administrator has been given the responsibility of managing all resources. He wants to delegate the responsibility of managing the existing service accounts to another administrator. He will also be responsible to manage the other service accounts that will be created. Which of the following is the best way to delegate the privileges required to manage all the service accounts?

• A.Granting iam.serviceAccountUser to the administrator at the project level
• B.Granting iam.serviceAccountUser to the administrator at the service account level
• C.Granting iam.serviceProjectAccountUser to the administrator at the project level
• D.Granting iam.serviceProjectAccountUser to the administrator at the service account level

You need to immediately change the storage class of an existing Google Cloud bucket.
You need to reduce service cost for infrequently accessed files stored in that bucket and for all files that will be added to that bucket in the future. What should you do?

• A.Create a new bucket and change the default storage class for the bucket import the files from the previous bucket into the new bucket
• B.Use the gsutil to rewrite the storage class for the bucket.
  Change the default storage class for the bucket
• C.Create a new bucket and change the default storage class for the bucket.
  Set up Object Lifecycle management on lite bucket
• D.Use the gsutil to rewrite the storage class for the bucket.
  Set up Object Lifecycle management on the bucket

You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?

• A.Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.
• B.Deploy the new version in the same application and use the --migrate option.
• C.Create a new App Engine application in the same project. Deploy the new version in that application.
  Use the App Engine library to proxy 1% of the requests to the new version.
• D.Create a new App Engine application in the same project. Deploy the new version in that application.
  Configure your network load balancer to send 1% of the traffic to that new application.

You are designing an application that lets users upload and share photos. You expect your application to grow really fast and you are targeting a worldwide audience. You want to delete uploaded photos after 30 days. You want to minimize costs while ensuring your application is highly available. Which GCP storage solution should you choose?

• A.Multiregional Cloud Storage bucket.
• B.Cloud Filestore.
• C.Cloud Datastore database.
• D.Persistent SSD on VM instances.