Online Access Free Google.Associate-Cloud-Engineer.v2025-11-11.q153 Practice Test (Page 9)

Associate-Cloud-Engineer Exam Question 36

You are using Container Registry to centrally store your company's container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?

A.In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes.

B.When you create the GKE cluster, choose the Allow full access to all Cloud APIs option under 'Access scopes'.

C.Create a service account, and give it access to Cloud Storage. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.

D.Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.

Associate-Cloud-Engineer Exam Question 37

You need to select and configure compute resources for a set of batch processing jobs. These jobs take around
2 hours to complete and are run nightly. You want to minimize service costs. What should you do?

A.Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.

B.Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.

C.Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.

D.Select Compute Engine. Use VM instance types that support micro bursting.

Associate-Cloud-Engineer Exam Question 38

You need to migrate invoice documents stored on-premises to Cloud Storage. The documents have the following storage requirements:
* Documents must be kept for five years.
* Up to five revisions of the same invoice document must be stored, to allow for corrections.
* Documents older than 365 days should be moved to lower cost storage tiers.
You want to follow Google-recommended practices to minimize your operational and development costs.
What should you do?

A.Enable retention policies on the bucket, and use Cloud Scheduler to invoke a Cloud Function to move or delete your documents based on their metadata.

B.Enable retention policies on the bucket, use lifecycle rules to change the storage classes of the objects, set the number of versions, and delete old files.

C.Enable object versioning on the bucket, and use Cloud Scheduler to invoke a Cloud Functions instance to move or delete your documents based on their metadata.

D.Enable object versioning on the bucket, use lifecycle conditions to change the storage class of the objects, set the number of versions, and delete old files.

Associate-Cloud-Engineer Exam Question 39

You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

A.Store the database password inside the Docker image of the container, not in the YAML file.

B.Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.

C.Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.

D.Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.

Associate-Cloud-Engineer Exam Question 40

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

A.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth
/devstorage.write_only'.

B.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth
/cloud-platform'.

C.Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.

D.Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.

Other Version: 180Google.Associate-Cloud-Engineer.v2025-12-18.q130; 1359Google.Associate-Cloud-Engineer.v2024-09-27.q109; 864Google.Associate-Cloud-Engineer.v2024-01-29.q127; 993Google.Associate-Cloud-Engineer.v2023-10-13.q110; 1065Google.Associate-Cloud-Engineer.v2023-05-12.q89; 24080Google.Associate-Cloud-Engineer.v2022-08-13.q158; 4524Google.Associate-Cloud-Engineer.v2022-05-25.q156; 163Google.Torrentvce.Associate-Cloud-Engineer.v2022-04-30.by.janet.156q.pdf; 3648Google.Associate-Cloud-Engineer.v2021-09-01.q128; 143Google.Actual4test.Associate-Cloud-Engineer.v2021-08-17.by.sarah.155q.pdf

Latest Upload: 139Microsoft.AZ-305.v2025-12-28.q154; 164IIA.IIA-CIA-Part2.v2025-12-28.q267; 221Cisco.350-401.v2025-12-28.q554; 131HashiCorp.Terraform-Associate-003.v2025-12-27.q108; 138LinuxFoundation.KCNA.v2025-12-27.q59; 142Google.Professional-Cloud-Security-Engineer.v2025-12-26.q111; 163VMware.2V0-13.25.v2025-12-26.q237; 134Microsoft.AI-900-CN.v2025-12-26.q125; 114SAP.C_BCBAI_2502.v2025-12-26.q30; 128SAP.C_OCM_2503.v2025-12-26.q35

Associate-Cloud-Engineer Exam Question 36

Associate-Cloud-Engineer Exam Question 37

Associate-Cloud-Engineer Exam Question 38

Associate-Cloud-Engineer Exam Question 39

Associate-Cloud-Engineer Exam Question 40

Download PDF File