Associate-Cloud-Engineer Exam Dumps - Google Cloud Certified - Associate Cloud Engineer

Searching for workable clues to ace the Google Associate-Cloud-Engineer Exam? You’re on the right place! ExamCert has realistic, trusted and authentic exam prep tools to help you achieve your desired credential. ExamCert’s Associate-Cloud-Engineer PDF Study Guide, Testing Engine and Exam Dumps follow a reliable exam preparation strategy, providing you the most relevant and updated study material that is crafted in an easy to learn format of questions and answers. ExamCert’s study tools aim at simplifying all complex and confusing concepts of the exam and introduce you to the real exam scenario and practice it with the help of its testing engine and real exam dumps

Go to page:

<< First
Prev
4
5
6
7
8
9
10
11
12
13
Next
Last >>

Question # 73

You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customersâ€™ Pods. What should you do?

Use Binary Authorization and whitelist only the container images used by your customersâ€™ Pods.

Use the Container Analysis API to detect vulnerabilities in the containers used by your customersâ€™ Pods.

Create a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customersâ€™ Pods.

Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google.com/gke-os-distribution: cos_containerd to the specification of your customersâ€™ Pods.

Full Access

Question # 74

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in the crm-databases project. You want to follow Google-recommended practices to grant access to the service account in the web-applications project. What should you do?

Grant "project owner" for web-applications appropriate roles to crm-databases.

Grant "project owner" role to crm-databases and the web-applications project.

Grant "project owner" role to crm-databases and roles/bigquery.dataViewer role to web-applications.

Grant roles/bigquery.dataViewer role to crm-databases and appropriate roles to web-applications.

Full Access

Question # 75

You need to create a custom VPC with a single subnet. The subnetâ€™s range must be as large as possible. Which range should you use?

.00.0.0/0

10.0.0.0/8

172.16.0.0/12

192.168.0.0/16

Full Access

Question # 76

Your coworker has helped you set up several configurations for gcloud. You've noticed that you're running commands against the wrong project. Being new to the company, you haven't yet memorized any of the projects. With the fewest steps possible, what's the fastest way to switch to the correct configuration?

Run gcloud configurations list followed by gcloud configurations activate .

Run gcloud config list followed by gcloud config activate.

Run gcloud config configurations list followed by gcloud config configurations activate.

Re-authenticate with the gcloud auth login command and select the correct configurations on login.

Full Access

Question # 77

You are in charge of provisioning access for all Google Cloud users in your organization. Your company recently acquired a startup company that has their own Google Cloud organization. You need to ensure that your Site Reliability Engineers (SREs) have the same project permissions in the startup company's organization as in your own organization. What should you do?

In the Google Cloud console for your organization, select Create role from selection, and choose destination as the startup company's organization

In the Google Cloud console for the startup company, select Create role from selection and choose source as the startup company's Google Cloud organization.

Use the gcloud iam roles copy command, and provide the Organization ID of the startup company'sGoogle Cloud Organization as the destination.

Use the gcloud iam roles copy command, and provide the project IDs of all projects in the startup company s organization as the destination.

Full Access

Question # 78

Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire cloud infrastructure through code. How can you ensure that the pipeline has appropriate permissions while your system is following security best practices?

â€¢ Add a step for human approval to the CI/CD pipeline before the execution of the infrastructureprovisioning.â€¢ Use the human approvals IAM account for the provisioning.

â€¢ Attach a single service account to the compute instances.â€¢ Add minimal rights to the service account.â€¢ Allow the service account to impersonate a Cloud Identity user with elevated permissions to create, update, or delete resources.

â€¢ Attach a single service account to the compute instances.â€¢ Add all required Identity and Access Management (IAM) permissions to this service account to create, update, or delete resources

â€¢ Create multiple service accounts, one for each pipeline with the appropriate minimal Identity andAccess Management (IAM) permissions.â€¢ Use a secret manager service to store the key files of the service accounts.â€¢ Allow the CI/CD pipeline to request the appropriate secrets during the execution of the pipeline.

Full Access

Question # 79

You have developed a web application that serves traffic for a local event and are expecting unpredictable traffic. You have containerized the application, and you now want to deploy the application on Google Cloud. You also want to minimize costs. What should you do?

Deploy the web application as a Cloud Run service.

Deploy the web application on Google Kubernetes Engine In Standard mode.

Deploy the web application as a Cloud Run job.

Deploy the web application on Google Kubernetes Engine in Autopilot mode.

Full Access

Question # 80

You have an on-premises data analytics set of binaries that processes data files in memory for about 45 minutes every midnight. The sizes of those data files range from 1 gigabyte to 16 gigabytes. You want to migrate this application to Google Cloud with minimal effort and cost. What should you do?

Upload the code to Cloud Functions. Use Cloud Scheduler to start the application.

Create a container for the set of binaries. Use Cloud Scheduler to start a Cloud Run job for the container.

Create a container for the set of binaries Deploy the container to Google Kubernetes Engine (GKE) and use the Kubernetes scheduler to start the application.

Lift and shift to a VM on Compute Engine. Use an instance schedule to start and stop the instance.

Full Access

Go to page: