Pass the Google Google Cloud Certified Associate-Cloud-Engineer Questions and answers with CertsForce

Viewing page 8 out of 10 pages
Viewing questions 71-80 out of questions
Questions # 71:

Your company is using Google Workspace to manage employee accounts. Anticipated growth will increase the number of personnel from 100 employees to 1.000 employees within 2 years. Most employees will need access to your company's Google Cloud account. The systems and processes will need to support 10x growth without performance degradation, unnecessary complexity, or security issues. What should you do?

Options:

A.

Migrate the users to Active Directory. Connect the Human Resources system to Active Directory. Turn on Google Cloud Directory Sync (GCDS) for Cloud Identity. Turn on Identity Federation from Cloud Identity to Active Directory.


B.

Organize the users in Cloud Identity into groups. Enforce multi-factor authentication in Cloud Identity.


C.

Turn on identity federation between Cloud Identity and Google Workspace. Enforce multi-factor authentication for domain wide delegation.


D.

Use a third-party identity provider service through federation. Synchronize the users from Google Workplace to the third-party provider in real time.


Expert Solution
Questions # 72:

You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?

Options:

A.

Create a single custom VPC with 2 subnets. Create each subnet in a different region and with a different CIDR range.


B.

Create a single custom VPC with 2 subnets. Create each subnet in the same region and with the same CIDR range.


C.

Create 2 custom VPCs, each with a single subnet. Create each subnet is a different region and with a different CIDR range.


D.

Create 2 custom VPCs, each with a single subnet. Create each subnet in the same region and with the same CIDR range.


Expert Solution
Questions # 73:

The core business of your company is to rent out construction equipment at a large scale. All the equipment that is being rented out has been equipped with multiple sensors that send event information every few seconds. These signals can vary from engine status, distance traveled, fuel level, and more. Customers are billed based on the consumption monitored by these sensors. You expect high throughput – up to thousands of events per hour per device – and need to retrieve consistent databased on the time of the event. Storing and retrieving individual signals should be atomic. What should you do?

Options:

A.

Create a file in Cloud Storage per device and append new data to that file.


B.

Create a file in Cloud Filestore per device and append new data to that file.


C.

Ingest the data into Datastore. Store data in an entity group based on the device.


D.

Ingest the data into Cloud Bigtable. Create a row key based on the event timestamp.


Expert Solution
Questions # 74:

You create a Deployment with 2 replicas in a Google Kubernetes Engine cluster that has a single preemptible node pool. After a few minutes, you use kubectl to examine the status of your Pod and observe that one of them is still in Pending status:

Question # 74

What is the most likely cause?

Options:

A.

The pending Pod's resource requests are too large to fit on a single node of the cluster.


B.

Too many Pods are already running in the cluster, and there are not enough resources left to schedule the pending Pod.


C.

The node pool is configured with a service account that does not have permission to pull the container image used by the pending Pod.


D.

The pending Pod was originally scheduled on a node that has been preempted between the creation of the Deployment and your verification of the Pods’ status. It is currently being rescheduled on a new node.


Expert Solution
Questions # 75:

(You need to migrate multiple PostgreSQL databases from your on-premises data center to Google Cloud. You want to significantly improve the performance of your databases while minimizing changes to your data schema and application code. You expect to exceed 150 TB of data per geographical region. You want to follow Google-recommended practices and minimize your operational costs. What should you do?)

Options:

A.

Migrate your data to AlloyDB.


B.

Migrate your data to Spanner.


C.

Migrate your data to Firebase.


D.

Migrate your data to Bigtable.


Expert Solution
Questions # 76:

You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes. Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?

Options:

A.

Fill in local SSD. Fill in persistent disk storage and snapshot storage.


B.

Fill in local SSD. Add estimated cost for cluster management.


C.

Select Add GPUs. Fill in persistent disk storage and snapshot storage.


D.

Select Add GPUs. Add estimated cost for cluster management.


Expert Solution
Questions # 77:

You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

Options:

A.

Enable the Node Auto-Repair feature for your GKE cluster.


B.

Enable the Node Auto-Upgrades feature for your GKE cluster.


C.

Select the latest available cluster version for your GKE cluster.


D.

Select “Container-Optimized OS (cos)” as a node image for your GKE cluster.


Expert Solution
Questions # 78:

You’ve deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:

Question # 78

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

Options:

A.

Store the database password inside the Docker image of the container, not in the YAML file.


B.

Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.


C.

Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.


D.

Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.


Expert Solution
Questions # 79:

Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

Options:

A.

Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.


B.

Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.


C.

Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.


D.

Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.


Expert Solution
Questions # 80:

You need to create a new billing account and then link it with an existing Google Cloud Platform project. What should you do?

Options:

A.

Verify that you are Project Billing Manager for the GCP project. Update the existing project to link it to the existing billing account.


B.

Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project.


C.

Verify that you are Billing Administrator for the billing account. Create a new project and link the new project to the existing billing account.


D.

Verify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing account.


Expert Solution
Viewing page 8 out of 10 pages
Viewing questions 71-80 out of questions