Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

Pass the Google Google Cloud Certified Associate-Cloud-Engineer Questions and answers with CertsForce

Viewing page 6 out of 10 pages
Viewing questions 51-60 out of questions
Questions # 51:

You have a number of applications that have bursty workloads and are heavily dependent on topics to decouple publishing systems from consuming systems. Your company would like to go serverless to enable developers to focus on writing code without worrying about infrastructure. Your solution architect has already identified Cloud Pub/Sub as a suitable alternative for decoupling systems. You have been asked to identify a suitable GCP Serverless service that is easy to use with Cloud Pub/Sub. You want the ability to scale down to zero when there is no traffic in order to minimize costs. You want to follow Google recommended practices. What should you suggest?

Options:

A.

Cloud Run for Anthos


B.

Cloud Run


C.

App Engine Standard


D.

Cloud Functions.


Expert Solution
Questions # 52:

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

Options:

A.

Give “project owner” for web-applications appropriate roles to crm-databases- proj


B.

Give “project owner” role to crm-databases-proj and the web-applications project.


C.

Give “project owner” role to crm-databases-proj and bigquery.dataViewer role to web-applications.


D.

Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.


Expert Solution
Questions # 53:

You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?

Options:

A.

Add the support team group to the roles/monitoring.viewer role


B.

Add the support team group to the roles/spanner.databaseUser role.


C.

Add the support team group to the roles/spanner.databaseReader role.


D.

Add the support team group to the roles/stackdriver.accounts.viewer role.


Expert Solution
Questions # 54:

You have created an application that is packaged into a Docker image. You want to deploy the Docker image as a workload on Google Kubernetes Engine. What should you do?

Options:

A.

Upload the image to Cloud Storage and create a Kubernetes Service referencing the image.


B.

Upload the image to Cloud Storage and create a Kubernetes Deployment referencing the image.


C.

Upload the image to Container Registry and create a Kubernetes Service referencing the image.


D.

Upload the image to Container Registry and create a Kubernetes Deployment referencing the image.


Expert Solution
Questions # 55:

You host a static website on Cloud Storage. Recently, you began to include links to PDF files on this site. Currently, when users click on the links to these PDF files, their browsers prompt them to save the file onto their local system. Instead, you want the clicked PDF files to be displayed within the browser window directly, without prompting the user to save the file locally. What should you do?

Options:

A.

Enable Cloud CDN on the website frontend.


B.

Enable ‘Share publicly’ on the PDF file objects.


C.

Set Content-Type metadata to application/pdf on the PDF file objects.


D.

Add a label to the storage bucket with a key of Content-Type and value of application/pdf.


Expert Solution
Questions # 56:

(You are managing a stateful application deployed on Google Kubernetes Engine (GKE) that can only have one replica. You recently discovered that the application becomes unstable at peak times. You have identified that the application needs more CPU than what has been configured in the manifest at these peak times. You want Kubernetes to allocate the application sufficient CPU resources during these peak times, while ensuring cost efficiency during off-peak periods. What should you do?)

Options:

A.

Enable cluster autoscaling on the GKE cluster.


B.

Configure a Vertical Pod Autoscaler on the Deployment.


C.

Configure a Horizontal Pod Autoscaler on the Deployment.


D.

Enable node auto-provisioning on the GKE cluster.


Expert Solution
Questions # 57:

Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

Options:

A.

1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery jobUser role to the group.


B.

1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery dataViewer user role to the group.


C.

1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery jobUser role to the group.


D.

1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery dataViewer user role to the group.


Expert Solution
Questions # 58:

Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

Options:

A.

Modify the existing subnet range to 172.16.20.0/24.


B.

Create a new Secondary IP Range in the VPC and configure the VMs to use that range.


C.

Create a new VPC network for the VMs. Enable VPC Peering between the VMs’ VPC network and the Dataproc cluster VPC network.


D.

Create a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network. Configure a custom Route exchange.


Expert Solution
Questions # 59:

You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?

Options:

A.

Use SSL proxy load balancing for the MIG and an A record in your DNS private zone with the load balancer's IP address.


B.

Use SSL proxy load balancing for the MIG and a CNAME record in your DNS public zone with the load balancer's IP address.


C.

Use HTTP(S) load balancing for the MIG and a CNAME record in your DNS private zone with the load balancer's IP address.


D.

Use HTTP(S) load balancing for the MIG and an A record in your DNS public zone with the load balancer's IP address.


Expert Solution
Questions # 60:

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

Options:

A.

Use gcloud iam roles copy and specify the production project as the destination project.


B.

Use gcloud iam roles copy and specify your organization as the destination organization.


C.

In the Google Cloud Platform Console, use the ‘create role from role’ functionality.


D.

In the Google Cloud Platform Console, use the ‘create role’ functionality and select all applicable permissions.


Expert Solution
Viewing page 6 out of 10 pages
Viewing questions 51-60 out of questions