The Google Associate-Cloud-Engineer Online Practice Test Engine

P.S. Free & New Associate-Cloud-Engineer dumps are available on Google Drive shared by Dumpexams: https://drive.google.com/open?id=1RhsA6GI3lHQ8eULc1QGDYY6URaebCJ8h

These people who used our products have thought highly of our Associate-Cloud-Engineer study materials. If you decide to buy our products and tale it seriously consideration, we can make sure that it will be very easy for you to simply pass your exam and get the Associate-Cloud-Engineer certification in a short time. We are also willing to help you achieve your dream. Now give me a chance to show you our Associate-Cloud-Engineer Study Materials. You will have no regret spending your valuable time on our introduction. Besides, our Associate-Cloud-Engineer study quiz is priced reasonably, so we do not overcharge you at all.

Google Associate-Cloud-Engineer Exam Syllabus Topics:

Section	Weight	Objectives
Topic 1: Setting up a cloud solution environment	20%	- Setting up cloud projects and accounts 1. Enable APIs 2. Manage users and groups 3. Apply organizational policies 4. Create resource hierarchy 5. Manage quotas and limits 6. Manage IAM roles and permissions - Managing billing configuration 1. Set budgets and alerts 2. Configure billing exports 3. Link projects to billing accounts 4. Create and manage billing accounts
Topic 2: Ensuring successful operation of a cloud solution	20%	- Managing resources 1. Troubleshoot common issues 2. Update configurations 3. Scale resources - Managing cost and performance 1. Optimize resource usage 2. Analyze cost reports - Monitoring and logging 1. Use Cloud Logging 2. Set up alerts 3. Use Cloud Monitoring
Topic 3: Planning and configuring a cloud solution	17.5%	- Planning and configuring network resources 1. Plan firewall rules 2. Plan hybrid connectivity 3. Choose load balancing options 4. Design VPC networks - Planning and configuring compute resources 1. Plan instance configuration 2. Choose storage options 3. Plan data storage solutions 4. Select compute options - Planning and configuring storage resources 1. Select storage classes 2. Plan data durability and availability
Topic 4: Deploying and implementing a cloud solution	25%	- Deploying and implementing Google Kubernetes Engine resources 1. Create and manage clusters 2. Configure networking for GKE 3. Deploy workloads - Deploying and implementing data solutions 1. Provision databases 2. Set up data processing pipelines - Deploying and implementing serverless resources 1. Create Cloud Functions 2. Deploy Cloud Run services - Deploying and implementing Compute Engine resources 1. Configure access and security 2. Manage images and snapshots 3. Create managed instance groups 4. Launch virtual machines
Topic 5: Configuring access and security	17.5%	- Managing data security 1. Manage access to data 2. Enable encryption - Configuring network security 1. Manage security controls 2. Configure private access 3. Secure VPC networks - Managing IAM 1. Define roles and permissions 2. Implement least privilege access 3. Manage service accounts

>> Associate-Cloud-Engineer Test Engine <<

Associate-Cloud-Engineer Test Topics Pdf - New Associate-Cloud-Engineer Test Dumps

With a Associate-Cloud-Engineer certification, you can not only get a good position in many companies, but also make your financial free come true. Besides, you can have more opportunities and challenge that will make your life endless possibility. We promise you that Associate-Cloud-Engineer Actual Exam must be worth purchasing, and they can be your helper on your way to get success in gaining the Associate-Cloud-Engineer certificate. Come and you will be a winner!

Google Associate Cloud Engineer Exam Sample Questions (Q11-Q16):

NEW QUESTION # 11
You want to configure 10 Compute Engine instances for availability when maintenance occurs. Your requirements state that these instances should attempt to automatically restart if they crash. Also, the instances should be highly available including during system maintenance. What should you do?

A. Create an instance template for the instances. Set 'Automatic Restart' to off. Set 'On-host maintenance' to Terminate VM instances. Add the instance template to an instance group.
B. Create an instance group for the instances. Set the 'Autohealing' health check to healthy (HTTP).
C. Create an instance template for the instances. Set the 'Automatic Restart' to on. Set the 'On-host maintenance' to Migrate VM instance. Add the instance template to an intsance group.
D. Create an instance group for the instance. Verify that the 'Advanced creation options' setting for 'do not retry machine creation' is set to off.

Answer: A

NEW QUESTION # 12
You have a Compute Engine instance hosting a production application. You want to receive an email if the instance consumes more than 90% of its CPU resources for more than 15 minutes. You want to use Google services. What should you do?

A. 1. Create a Stackdriver Workspace, and associate your GCP project with it.2.Write a script that monitors the CPU usage and sends it as a custom metric to Stackdriver.3.Create an uptime check for the instance in Stackdriver.
B. 1. Create a consumer Gmail account.2.Write a script that monitors the CPU usage.3.When the CPU usage exceeds the threshold, have that script send an email using the Gmail account and smtp.gmail.
com on port 25 as SMTP server.
C. 1. In Stackdriver Logging, create a logs-based metric to extract the CPU usage by using this regular expression: CPU Usage: ([0-9] {1,3}) %2.In Stackdriver Monitoring, create an Alerting Policy based on this metric.3.Configure your email address in the notification channel.
D. 1. Create a Stackdriver Workspace, and associate your Google Cloud Platform (GCP) project with it.2.
Create an Alerting Policy in Stackdriver that uses the threshold as a trigger condition.3.Configure your email address in the notification channel.

Answer: D

Explanation:
Specifying conditions for alerting policies This page describes how to specify conditions for alerting policies.
The conditions for an alerting policy define what is monitored and when to trigger an alert. For example, suppose you want to define an alerting policy that emails you if the CPU utilization of a Compute Engine VM instance is above 80% for more than 3 minutes. You use the conditions dialog to specify that you want to monitor the CPU utilization of a Compute Engine VM instance, and that you want an alerting policy to trigger when that utilization is above 80% for 3 minutes.https://cloud.google.com/monitoring/alerts/ui-conditions-ga
https://cloud.google.com/monitoring/alerts/using-alerting-uihttps://cloud.google.com/monitoring/support
/notification-options

NEW QUESTION # 13
Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.

Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
* Instances in tier #1 must communicate with tier #2.
* Instances in tier #2 must communicate with tier #3.
What should you do?

A. 1. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow TCP: 80802. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to
10.0.1.0/24)* Protocols: allow TCP: 8080
B. 1. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.1.0/24)* Protocols: allow all
C. 1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow all
D. 1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow TCP:80802. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow TCP: 8080

Answer: D

NEW QUESTION # 14
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
C. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.
D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

Answer: A

Explanation:
performs a peering between the two VPC's (the statement makes sure that this option is feasible since it clearly specifies that there is no overlapping between the ip ranges of both vpc's), deploy the LoadBalancer as internal with the annotation, and configure the endpoint so that the compute engine instance can access the application internally, that is, without the need to have a public ip at any time and therefore, without the need to go outside the google network. The traffic, therefore, never crosses the public internet.
https://medium.com/pablo-perez/k8s-externaltrafficpolicy-local-or-cluster-40b259a19404
https://cloud.google.com/kubernetes-engine/docs/how-to/internal-load-balancing clients in a VPC network connected to the LoadBalancer network using VPC Network Peering can also access the Service
https://cloud.google.com/kubernetes-engine/docs/how-to/service-parameters

NEW QUESTION # 15
Your company requires all developers to have the same permissions, regardless of the Google Cloud project they are working on. Your company's security policy also restricts developer permissions to Compute Engine.
Cloud Functions, and Cloud SQL. You want to implement the security policy with minimal effort. What should you do?

A. * Add all developers to a Google group in Cloud Identity.
* Create a custom role with Compute Engine, Cloud Functions, and Cloud SQL permissions at the Google Cloud organization level.
* Assign the custom role to the Google group.
B. * Create a custom role with Compute Engine, Cloud Functions, and Cloud SQL permissions in one project within the Google Cloud organization.
* Copy the role across all projects created within the organization with the gcloud iam roles copy command.
* Assign the role to developers in those projects.
C. * Add all developers to a Google group in Google Groups for Workspace.
* Assign the predefined role of Compute Admin to the Google group at the Google Cloud organization level.
D. * Add all developers to a Google group in Cloud Identity.
* Assign predefined roles for Compute Engine, Cloud Functions, and Cloud SQL permissions to the Google group for each project in the Google Cloud organization.

Answer: A

Explanation:
https://www.cloudskillsboost.google/focuses/1035?parent=catalog#:~:text=custom%20role%20at%20the%20org

NEW QUESTION # 16
......

We would like to benefit our customers from different countries who decide to choose our Associate-Cloud-Engineer study guide in the long run, so we cooperation with the leading experts in the field to renew and update our study materials. Our leading experts aim to provide you the newest information in this field in order to help you to keep pace with the times and fill your knowledge gap. We can assure you that you will get the latest version of our Associate-Cloud-Engineer Training Materials for free from our company in the whole year after payment. Do not miss the opportunity to buy the best Associate-Cloud-Engineer preparation questions in the international market which will also help you to advance with the times.

Associate-Cloud-Engineer Test Topics Pdf: https://www.dumpexams.com/Associate-Cloud-Engineer-real-answers.html

P.S. Free & New Associate-Cloud-Engineer dumps are available on Google Drive shared by Dumpexams: https://drive.google.com/open?id=1RhsA6GI3lHQ8eULc1QGDYY6URaebCJ8h