Online Access Free Google.Associate-Cloud-Engineer.v2025-12-18.q130 Practice Test (Page 26)

Associate-Cloud-Engineer Exam Question 121

You need to update a deployment in Deployment Manager without any resource downtime in the deployment.
Which command should you use?

A.gcloud deployment-manager deployments create --config <deployment-config-path>

B.gcloud deployment-manager deployments update --config <deployment-config-path>

C.gcloud deployment-manager resources create --config <deployment-config-path>

D.gcloud deployment-manager resources update --config <deployment-config-path>

Associate-Cloud-Engineer Exam Question 122

You recently deployed a new version of an application to App Engine and then discovered a bug in the release. You need to immediately revert to the prior version of the application. What should you do?

A.Run gcloud app restore.

B.On the App Engine page of the GCP Console, select the application that needs to be reverted and click Revert.

C.On the App Engine Versions page of the GCP Console, route 100% of the traffic to the previous version.

D.Deploy the original version as a separate application. Then go to App Engine settings and split traffic between applications so that the original version serves 100% of the requests.

Associate-Cloud-Engineer Exam Question 123

You use Cloud Logging lo capture application logs. You now need to use SOL to analyze the application logs in Cloud Logging, and you want to follow Google-recommended practices. What should you do?

A.Export logs to a storage bucket and create an external view in BigQuery.

B.Develop SQL queries by using Gemini for Google Cloud.

C.Enable Log Analytics for the log bucket and create a linked dataset in BigQuery.

D.Create a schema for the storage bucket and run SQL queries for the data in the bucket.

Associate-Cloud-Engineer Exam Question 124

You manage three Google Cloud projects with the Cloud Monitoring API enabled. You want to follow Google-recommended practices to visualize CPU and network metrics for all three projects together. What should you do?

A.1. Create a Cloud Monitoring Dashboard.
2. Select the CPU and Network metrics from the three projects.
3. Add CPU and network Charts lot each of the three protects.

B.1. Create a Cloud Monitoring Dashboard
2. Collect metrics and publish them into the Pub/Sub topics 3. Add CPU and network Charts (or each of (he three projects

C.1 Create a Service Account and apply roles/viewer on the three projects
2. Collect metrics and publish them lo the Cloud Monitoring API
3. Add CPU and network Charts for each of the three projects.

D.1. Create a fourth Google Cloud project
2 Create a Cloud Workspace from the fourth project and add the other three projects

Associate-Cloud-Engineer Exam Question 125

You are deploying an application to Cloud Run. Your application requires the use of an API that runs on Google Kubernetes Engine (GKE). You need to ensure that your Cloud Run service can privately reach the API on GKE, and you want to follow Google-recommended practices. What should you do?

A.Deploy an ingress resource on the GKE cluster to expose the API to the internet. Use Cloud Armor to filter for IP addresses that can connect to the API. On the Cloud Run service, configure the application to fetch its public IP address and update the Cloud Armor policy on startup to allow this IP address to call the API on ports 80 and 443.

B.Create an egress firewall rule on the VPC to allow connections to 0.0.0.0/0 on ports 80 and 443.

C.Create an ingress firewall rule on the VPC to allow connections from 0.0.0.0/0 on ports 80 and 443.

D.Deploy an internal Application Load Balancer to expose the API on GKE to the VPC. Configure Cloud DNS with the IP address of the internal Application Load Balancer. Deploy a Serverless VPC Access connector to allow the Cloud Run service to call the API through the FQDN on Cloud DNS.

Correct Answer: D

The requirement is for private communication between a Cloud Run service and a GKE API, following best practices.
Option A exposes the GKE API to the public internet, which violates the "privately reach" requirement.
Relying on dynamic IP allowlisting with Cloud Armor is complex and less secure than private networking.
Options B and C configure overly permissive firewall rules (allowing all egress or ingress) and do not establish the necessary private network path between Cloud Run (which normally runs outside your VPC) and the GKE cluster within your VPC.
Option D describes the standard Google-recommended pattern for this scenario:
Internal Application Load Balancer (ILB): Expose the GKE service (API) using an ILB. This gives the service a private IP address accessible only within the VPC network (or connected networks).
Cloud DNS: Create a private DNS zone and record pointing a fully qualified domain name (FQDN) to the ILB's private IP address. This allows services to reach the API via a stable name instead of an IP.
Serverless VPC Access Connector: This connector creates a bridge allowing serverless services like Cloud Run to send traffic into your VPC network.
Cloud Run Configuration: Configure the Cloud Run service to use the VPC Access connector. The application code can then call the GKE API using its private FQDN registered in Cloud DNS.
This setup ensures traffic flows entirely over private networks (within the VPC via the ILB and through the VPC Access connector), meeting the private communication requirement securely and reliably.
References:
Serverless VPC Access: "Serverless VPC Access lets your serverless environment send requests to your VPC network..." - https://cloud.google.com/vpc/docs/serverless-vpc-access Internal Application Load Balancer Overview: "Google Cloud internal Application Load Balancers are regional, proxy-based Layer 7 load balancers that enable you to run and scale your services behind an internal IP address..." - https://cloud.google.com/load-balancing/docs/internal Connecting from Cloud Run to a VPC network: Documentation often outlines patterns using VPC Access Connectors and Internal Load Balancers or Private Service Connect. - https://cloud.google.com/run/docs
/configuring/connecting-vpc
GKE Internal Load Balancing: How to expose GKE services internally. - https://cloud.google.com/kubernetes- engine/docs/how-to/internal-load-balancing

Other Version: 235Google.Associate-Cloud-Engineer.v2025-11-11.q153; 1337Google.Associate-Cloud-Engineer.v2024-09-27.q109; 828Google.Associate-Cloud-Engineer.v2024-01-29.q127; 985Google.Associate-Cloud-Engineer.v2023-10-13.q110; 1063Google.Associate-Cloud-Engineer.v2023-05-12.q89; 24037Google.Associate-Cloud-Engineer.v2022-08-13.q158; 4520Google.Associate-Cloud-Engineer.v2022-05-25.q156; 163Google.Torrentvce.Associate-Cloud-Engineer.v2022-04-30.by.janet.156q.pdf; 3638Google.Associate-Cloud-Engineer.v2021-09-01.q128; 143Google.Actual4test.Associate-Cloud-Engineer.v2021-08-17.by.sarah.155q.pdf

Latest Upload: 123Salesforce.Analytics-DA-201.v2025-12-18.q77; 155Google.Associate-Cloud-Engineer.v2025-12-18.q130; 146Microsoft.SC-200.v2025-12-18.q155; 140IFPUG.I40-420.v2025-12-18.q105; 132NMLS.MLO.v2025-12-17.q109; 118SAP.C_HRHPC_2505.v2025-12-17.q41; 184ISACA.CISM-CN.v2025-12-17.q370; 226ISACA.CISA-CN.v2025-12-17.q626; 152PRINCE2.Prince2-Foundation.v2025-12-17.q204; 130SAP.C_THR89_2505.v2025-12-16.q58

Associate-Cloud-Engineer Exam Question 121

Associate-Cloud-Engineer Exam Question 122

Associate-Cloud-Engineer Exam Question 123

Associate-Cloud-Engineer Exam Question 124

Associate-Cloud-Engineer Exam Question 125

Download PDF File