Online Access Free Google.Associate-Cloud-Engineer.v2022-08-13.q158 Practice Test (Page 27)

Associate-Cloud-Engineer Exam Question 126

You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide the application with access to Cloud Storage. What should you do?

A.1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com.

B.1. Use nslookup to get the IP address for storage.googleapis.com.2. Negotiate with the security team to be able to give a public IP address to the servers.3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.

C.1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.3. Configure your new instances to use this ILB as proxy.

D.1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.3. Configure your servers to use that instance as a proxy to access Cloud Storage.

Associate-Cloud-Engineer Exam Question 127

You are working a System Administrator and have been asked to make sure that all images are patched up to date and developers are not allowed to use old images which are not up to date as per PCI compliance. How would you achieve this?

A.Mark image as deprecated to prevent users from using the old image.

B.Drop a mail to all the developers regarding which image to use whenever you patch images.

C.None of the above.

D.Mark image as obsolete to prevent users from using the old image.

Associate-Cloud-Engineer Exam Question 128

You want to find out who in your organization has Owner access to a project called "my- project".What should you do?

A.In the Google Cloud Platform Console, go to the IAM page for your organization and apply the filter "Role:Owner".

B.In the Google Cloud Platform Console, go to the IAM page for your project and apply the filter
"Role:Owner".

C.Use "gcloud iam list-grantable-role --project my-project" from your Terminal.

D.Use "gcloud iam list-grantable-role" from Cloud Shell on the project page.

Associate-Cloud-Engineer Exam Question 129

You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?

A.Download a JSON Private Key for the service account.
On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine- service-account.

B.Download a JSON Private Key for the service account.
On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.

C.When creating the VM via the web console, specify the service account under the `Identity and API Access' section.

D.Download a JSON Private Key for the service account.
After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine- service-account.json.

Associate-Cloud-Engineer Exam Question 130

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

A.Use gcloud iam roles copy and specify the production project as the destination project.

B.Use gcloud iam roles copy and specify your organization as the destination organization.

C.In the Google Cloud Platform Console, use the 'create role from role' functionality.

D.In the Google Cloud Platform Console, use the 'create role' functionality and select all applicable permissions.

Other Version: 214Google.Associate-Cloud-Engineer.v2025-12-18.q130; 271Google.Associate-Cloud-Engineer.v2025-11-11.q153; 1377Google.Associate-Cloud-Engineer.v2024-09-27.q109; 871Google.Associate-Cloud-Engineer.v2024-01-29.q127; 994Google.Associate-Cloud-Engineer.v2023-10-13.q110; 1068Google.Associate-Cloud-Engineer.v2023-05-12.q89; 4531Google.Associate-Cloud-Engineer.v2022-05-25.q156; 163Google.Torrentvce.Associate-Cloud-Engineer.v2022-04-30.by.janet.156q.pdf; 3657Google.Associate-Cloud-Engineer.v2021-09-01.q128; 143Google.Actual4test.Associate-Cloud-Engineer.v2021-08-17.by.sarah.155q.pdf

Latest Upload: 115SAP.C_THR84_2505.v2026-01-12.q37; 104Salesforce.CRT-261.v2026-01-12.q83; 147Microsoft.SC-400.v2026-01-11.q164; 132SAP.C_THR88_2505.v2026-01-11.q67; 136CIPS.L4M6.v2026-01-11.q106; 115SAP.C_S4CS_2502.v2026-01-11.q35; 147Lpi.101-500.v2026-01-11.q128; 110Salesforce.Health-Cloud-Accredited-Professional.v2026-01-10.q45; 162Microsoft.AZ-900.v2026-01-10.q234; 141VMware.3V0-32.23.v2026-01-10.q133

Associate-Cloud-Engineer Exam Question 126

Associate-Cloud-Engineer Exam Question 127

Associate-Cloud-Engineer Exam Question 128

Associate-Cloud-Engineer Exam Question 129

Associate-Cloud-Engineer Exam Question 130

Download PDF File