• ホーム
  • ブログ
  • 更新されたのは2025年03月27日認定試験Associate-Cloud-Engineer問題集で練習テスト問題 [Q31-Q53]

更新されたのは2025年03月27日認定試験Associate-Cloud-Engineer問題集で練習テスト問題 [Q31-Q53]

Share

更新されたのは2025年03月27日認定試験Associate-Cloud-Engineer問題集で練習テスト問題

更新された検証済みのAssociate-Cloud-Engineer問題集と解答で合格保証もしくは全額返金

質問 # 31
You have a virtual machine that is currently configured with 2 vCPUs and 4 GB of memory. It is running out of memory. You want to upgrade the virtual machine to have 8 GB of memory. What should you do?

  • A. Use gcloud to add metadata to the VM. Set the key to required-memory-size and the value to 8 GB.
  • B. Stop the VM, increase the memory to 8 GB, and start the VM.
  • C. Stop the VM, change the machine type to n1-standard-8, and start the VM.
  • D. Rely on live migration to move the workload to a machine with more memory.

正解：B

解説：
In Google compute engine, if predefined machine types don't meet your needs, you can create an instance with custom virtualized hardware settings. Specifically, you can create an instance with a custom number of vCPUs and custom memory, effectively using a custom machine type. Custom machine types are ideal for the following scenarios: 1. Workloads that aren't a good fit for the predefined machine types that are available to you. 2. Workloads that require more processing power or more memory but don't need all of the upgrades that are provided by the next machine type level.In our scenario, we only need a memory upgrade. Moving to a bigger instance would also bump up the CPU which we don't need so we have to use a custom machine type.
It is not possible to change memory while the instance is running so you need to first stop the instance, change the memory and then start it again. See below a screenshot that shows how CPU/Memory can be customized for an instance that has been stopped.Ref: https://cloud.google.com/compute/docs/instances/creating-instance-with-custom-machine-type


質問 # 32
Your company processes high volumes of IoT data that are time-stamped. The total data volume can be several petabytes. The data needs to be written and changed at a high speed. You want to use the most performant storage option for your data. Which product should you use?

  • A. Cloud Bigtable
  • B. BigQuery
  • C. Cloud Storage
  • D. Cloud Datastore

正解：A

解説：
A is not correct because Cloud Datastore is not the most performant product for frequent writes or timestamp-based queries.
B is not correct because Cloud Storage stores blobs, which cannot be queried.
C is correct because Cloud Bigtable is the most performant storage option to work with IoT and time series data.
D is not correct because although it can store the data, BigQuery is very slow at changing data.
https://cloud.google.com/bigtable/docs/schema-design-time-series


質問 # 33
You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate reporting under the same Stackdriver Monitoring dashboard. What should you do?

  • A. For each project, create a Stackdriver account. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all other projects.
  • B. Configure a single Stackdriver account, and link all projects to the same account.
  • C. Configure a single Stackdriver account for one of the projects. In Stackdriver, create a Group and add the other project names as criteria for that Group.
  • D. Use Shared VPC to connect all projects, and link Stackdriver to one of the projects.

正解：B

解説：
When you intially click on Monitoring(Stackdriver Monitoring) it creates a workspac(a stackdriver account) linked to the ACTIVE(CURRENT) Project from which it was clicked.
Now if you change the project and again click onto Monitoring it would create an another workspace(a stackdriver account) linked to the changed ACTIVE(CURRENT) Project, we don't want this as this would not consolidate our result into a single dashboard(workspace/stackdriver account).
If you have accidently created two diff workspaces merge them under Monitoring > Settings > Merge Workspaces > MERGE.
If we have only one workspace and two projects we can simply add other GCP Project under Monitoring > Settings > GCP Projects > Add GCP Projects.
https://cloud.google.com/monitoring/settings/multiple-projects
Nothing about groups https://cloud.google.com/monitoring/settings?hl=en


質問 # 34
You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?

  • A. Change the region property setting in the existing App Engine application from us-central to asia-northeast1.
  • B. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
  • C. Change the default region property setting in the existing GCP project to asia-northeast1.
  • D. Create a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application.

正解：D

解説：
https://cloud.google.com/appengine/docs/flexible/managing-projects-apps-billing#:~:text=Each%20Cloud%20pr Two App engine can't be running on the same project: you can check this easy diagram for more info:
https://cloud.google.com/appengine/docs/standard/an-overview-of-app-engine#components_of_an_application And you can't change location after setting it for your app Engine.
https://cloud.google.com/appengine/docs/standard/locations
App Engine is regional and you cannot change an apps region after you set it. Therefore, the only way to have an app run in another region is by creating a new project and targeting the app engine to run in the required region (asia-northeast1 in our case).
Ref: https://cloud.google.com/appengine/docs/locations


質問 # 35
You have been asked to migrate a docker application from datacenter to cloud. Your solution architect has suggested uploading docker images to GCR in one project and running an application in a GKE cluster in a separate project. You want to store images in the project img-278322 and run the application in the project prod-278986. You want to tag the image as acme_track_n_trace:v1. You want to follow Google-recommended practices. What should you do?

  • A. Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace:v1
  • B. Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace
  • C. Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace
  • D. Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace:v1

正解：A

解説：
Explanation
Run gcloud builds submit tag gcr.io/img-278322/acme_track_n_trace:v1. is the right answer.
This command correctly tags the image as acme_track_n_trace:v1 and uploads the image to the img-278322 project.
Ref: https://cloud.google.com/sdk/gcloud/reference/builds/submit


質問 # 36
You are using Data Studio to visualize a table from your data warehouse that is built on top of BigQuery. Data is appended to the data warehouse during the day. At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Data Studio are broken, and you want to analyze the problem. What should you do?

  • A. In Cloud Logging create a filter for your Data Studio report
  • B. Use the BigQuery interface to review the nightly Job and look for any errors
  • C. Review the Error Reporting page in the Cloud Console to find any errors.
  • D. Use Cloud Debugger to find out why the data was not refreshed correctly

正解：D

解説：
Cloud Debugger helps inspect the state of an application, at any code location, without stopping or slowing down the running app // https://cloud.google.com/debugger/docs


質問 # 37
You have created a new project in Google Cloud through the gcloud command line interface (CLI) and linked a billing account. You need to create a new Compute Engine instance using the CLI.
You need to perform the prerequisite stops. What should you do?

  • A. Create a Cloud Monitoring Workspace.
  • B. Grant yourself the IAM role of Computer Admin.
  • C. Create a VPC network in the project.
  • D. Enable the compute googleapis.com API.

正解：D

解説：
Always grant access to apis first in order to use GCP services


質問 # 38
You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?

  • A. Create a sink to BigQuery to export all the logs.
    Create a Data Studio dashboard on the exported logs.
  • B. Create a custom log-based metrics for the specific error to be used in an Alerting Policy.
  • C. In the Log Viewer, filter the logs on severity `Error' and the name of the Service Account.
  • D. Grant Project Owner access to the Service Account.

正解：C

解説：
https://cloud.google.com/logging/docs/view/advanced-queries8E6BA412E7DB6A14A62CC68E5EB6DAE3


質問 # 39
You have a definition for an instance template that contains a web application. You are asked to deploy the application so that it can scale based on the HTTP traffic it receives. What should you do?

  • A. Create the necessary amount of instances required for peak user traffic based on the instance template. Create an unmanaged instance group and add the instances to that instance group.
    Configure the instance group as the Backend Service of an HTTP load balancer.
  • B. Create a VM from the instance template. Create an App Engine application in Automatic Scaling mode that forwards all traffic to the VM.
  • C. Create a VM from the instance template. Create a custom image from the VM's disk. Export the image to Cloud Storage. Create an HTTP load balancer and add the Cloud Storage bucket as its backend service.
  • D. Create a managed instance group based on the instance template. Configure autoscaling based on HTTP traffic and configure the instance group as the backend service of an HTTP load balancer.

正解：D

解説：
A Is not correct because the Load Balancer will just load balance access to the uploaded image itself, and not create or autoscale VMs based on that image.
B Is not correct because while the App Engine can scale as a proxy, all requests will still end up on the same Compute Engine instance, which needs to scale itself.
C is correct because a managed instance group can use an instance template to scale based on HTTP traffic.
D is not correct because unmanaged instance groups do not offer autoscaling.
https://cloud.google.com/compute/docs/instance-
groups/#managed_instance_groups_and_autoscaling
https://cloud.google.com/compute/docs/images/export-image
https://cloud.google.com/compute/docs/load-balancing/http/adding-a-backend-bucket-to-content- based-load-balancing


質問 # 40
You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API.
You want to make sure your application can use Cloud Pub/Sub. What should you do?

  • A. Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
  • B. Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
  • C. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
  • D. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.

正解：C

解説：
Explanation
Quickstart: using the Google Cloud Console
This page shows you how to perform basic tasks in Pub/Sub using the Google Cloud Console.
Note: If you are new to Pub/Sub, we recommend that you start with the interactive tutorial.
Before you begin
Set up a Cloud Console project.
Set up a project
Click to:
Create or select a project.
Enable the Pub/Sub API for that project.
You can view and manage these resources at any time in the Cloud Console.
Install and initialize the Cloud SDK.
Note: You can run the gcloud tool in the Cloud Console without installing the Cloud SDK. To run the gcloud tool in the Cloud Console, use Cloud Shell .
https://cloud.google.com/pubsub/docs/quickstart-console


質問 # 41
Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?

  • A. Add your SREs to roles/accessapproval approver role.
  • B. Add your SREs to a group and then add this group to roles/accessapproval approver role.
  • C. Add your SREs to a group and then add this group to roles/iam roleAdmin role.
  • D. Add your SREs to roles/iam.roleAdmin role.

正解：B

解説：
Google recommended practices lead us to use groups rather than granting each individual SRE permissions.


質問 # 42
Your team has been working on building a web application. The plan is to deploy to Kubernetes. You currently have a Dockerfile that works locally. How can you get the application deployed to Kubernetes?

  • A. Use kubectl to push the convert the Dockerfile into a deployment.
  • B. Use kubectl apply to push the Dockerfile to Kubernetes.
  • C. Use docker to create a container image, save the image to Cloud Storage, deploy the uploaded image to Kubernetes with kubectl.
  • D. Use docker to create a container image, push it to the Google Container Registry, deploy the uploaded image to Kubernetes with kubectl.

正解：D


質問 # 43
You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?

  • A. Basic Scaling with max_instancesset to 3.
  • B. Automatic Scaling with min_idle_instancesset to 3.
  • C. Manual Scaling with 3 instances.
  • D. Basic Scaling with min_instancesset to 3.

正解：B

解説：
Explanation/Reference: https://cloud.google.com/appengine/docs/standard/python/how-instances-are-managed


質問 # 44
You need to reduce GCP service costs for a division of your company using the fewest possible steps. You need to turn off all configured services in an existing GCP project. What should you do?

  • A. 1. Verify that you are assigned the Organizational Administrator IAM role for this project.
    2. Locate the project in the GCP console, enter the project ID and then click Shut down.
  • B. 1. Verify that you are assigned the Project Owners IAM role for this project.
    2. Switch to the project in the GCP console, locate the resources and delete them.
  • C. 1. Verify that you are assigned the Project Owners IAM role for this project.
    2. Locate the project in the GCP console, click Shut down and then enter the project ID.
  • D. 1. Verify that you are assigned the Organizational Administrators IAM role for this project.
    2. Switch to the project in the GCP console, locate the resources and delete them.

正解：A


質問 # 45
You are designing an application that uses WebSockets and HTTP sessions that are not distributed across the web servers. You want to ensure the application runs properly on Google Cloud Platform. What should you do?

  • A. Convert the WebSocket code to use HTTP streaming.
  • B. Meet with the cloud enablement team to discuss load balancer options.
  • C. Review the encryption requirements for WebSocket connections with the security team.
  • D. Redesign the application to use a distributed user session service that does not rely on WebSockets and HTTP sessions.

正解：B

解説：
Explanation
Google HTTP(S) Load Balancing has native support for the WebSocket protocol when you use HTTP or HTTPS, not HTTP/2, as the protocol to the backend.
Ref: https://cloud.google.com/load-balancing/docs/https#websocket_proxy_support So the next possible step is to Meet with the cloud enablement team to discuss load balancer options.
We dont need to convert WebSocket code to use HTTP streaming or Redesign the application, as WebSocket support is offered by Google HTTP(S) Load Balancing. Reviewing the encryption requirements is a good idea but it has nothing to do with WebSockets.


質問 # 46
You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?

  • A. Add the support team group to the roles/spanner.databaseUser role.
  • B. Add the support team group to the roles/spanner.databaseReader role.
  • C. Add the support team group to the roles/monitoring.viewer role
  • D. Add the support team group to the roles/stackdriver.accounts.viewer role.

正解：A


質問 # 47
You have a Compute Engine instance hosting a production application. You want to receive an email if the instance consumes more than 90% of its CPU resources for more than 15 minutes.
You want to use Google services. What should you do?

  • A. 1. Create a consumer Gmail account.
    2. Write a script that monitors the CPU usage.
    3. When the CPU usage exceeds the threshold, have that script send an email using the Gmail account and smtp.gmail.com on port 25 as SMTP server.
  • B. 1. In Stackdriver Logging, create a logs-based metric to extract the CPU usage by using this regular expression: CPU Usage: ([0-9] {1,3})%
    2. In Stackdriver Monitoring, create an Alerting Policy based on this metric.
    3. Configure your email address in the notification channel.
  • C. 1. Create a Stackdriver Workspace, and associate your Google Cloud Platform (GCP) project with it.
    2. Create an Alerting Policy in Stackdriver that uses the threshold as a trigger condition.
    3. Configure your email address in the notification channel.
  • D. 1. Create a Stackdriver Workspace, and associate your GCP project with it.
    2. Write a script that monitors the CPU usage and sends it as a custom metric to Stackdriver.
    3. Create an uptime check for the instance in Stackdriver.

正解：C


質問 # 48
You have a single binary application that you want to run on Google Cloud Platform. You decided to automatically scale the application based on underlying infrastructure CPU usage. Your organizational policies require you to use virtual machines directly. You need to ensure that the application scaling is operationally efficient and completed as quickly as possible. What should you do?

  • A. Create a Google Kubernetes Engine cluster, and use horizontal pod autoscaling to scale the application.
  • B. Create an instance template, and use the template in a managed instance group with autoscaling configured.
  • C. Create an instance template, and use the template in a managed instance group that scales up and down based on the time of day.
  • D. Use a set of third-party tools to build automation around scaling the application up and down, based on Stackdriver CPU usage monitoring.

正解：B

解説：
Managed instance groups offer autoscaling capabilities that let you automatically add or delete instances from a managed instance group based on increases or decreases in load (CPU Utilization in this case). Autoscaling helps your apps gracefully handle increases in traffic and reduce costs when the need for resources is lower. You define the autoscaling policy and the autoscaler performs automatic scaling based on the measured load (CPU Utilization in this case). Autoscaling works by adding more instances to your instance group when there is more load (upscaling), and deleting instances when the need for instances is lowered (downscaling). Ref: https://cloud.google.com/compute/docs/autoscaler


質問 # 49
Your managed instance group raised an alert stating that new instance creation has failed to create new instances. You need to maintain the number of running instances specified by the template to be able to process expected application traffic. What should you do?

  • A. Create an instance template that contains valid syntax that will be used by the instance group. Verify that the instance name and persistent disk name values are not the same in the template.
  • B. Delete the current instance template and replace it with a new instance template. Verify that the instance name and persistent disk name values are not the same in the template. Set the disks.autoDelete property to true in the instance template.
  • C. Create an instance template that contains valid syntax which will be used by the instance group. Delete any persistent disks with the same name as instance names.
  • D. Verify that the instance template being used by the instance group contains valid syntax. Delete any persistent disks with the same name as instance names. Set the disks.autoDelete property to true in the instance template.

正解：C

解説：
Explanation
https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-migs
https://cloud.google.com/compute/docs/instance-templates#how_to_update_instance_templates


質問 # 50
Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account.
You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?

  • A. Migrate the acquired company's projects into your company's GCP organization. Link the migrated projects to your company's billing account.
  • B. Create a new GCP organization and a new billing account. Migrate the acquired company's projects and your company's projects into the new GCP organization and link the projects to the new billing account.
  • C. Link the acquired company's projects to your company's billing account.
  • D. Configure the acquired company's billing account and your company's billing account to export the billing data into the same BigQuery dataset.

正解：C

解説：
Explanation
https://cloud.google.com/resource-manager/docs/project-migration#oauth_consent_screen
https://cloud.google.com/resource-manager/docs/project-migration


質問 # 51
You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?

  • A. Use permissions in your role that use the `supported' support level for role permissions.
    Set the role stage to ALPHA while testing the role permissions.
  • B. Use permissions in your role that use the `testing' support level for role permissions.
    Set the role stage to ALPHA while testing the role permissions.
  • C. Use permissions in your role that use the `testing' support level for role permissions.
    Set the role stage to BETA while testing the role permissions.
  • D. Use permissions in your role that use the `supported' support level for role permissions.
    Set the role stage to BETA while testing the role permissions.

正解：A

解説：
You need a custom role with permissions supported in prod and you want to publish the status of the role.
https://cloud.google.com/iam/docs/custom-roles-permissions-support
SUPPORTED The permission is fully supported in custom roles.
TESTING The permission is being tested to check its compatibility with custom roles. You can include the permission in custom roles, but you might see unexpected behavior. Not recommended for production use.
NOT_SUPPORTED The permission is not supported in custom roles.
You can't use TESTING as it is not good for prod. And you need first version which should be ALPHA.


質問 # 52
You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?

  • A. Run gcloud projects listto get the project ID, and then run gcloud services list -
    -project <project ID>.
  • B. Run gcloud projects describe <project ID>to verify the project value, and then run gcloud services list --available.
  • C. Run gcloud initto set the current project to my-project, and then run gcloud services list --available.
  • D. Run gcloud infoto view the account value, and then run gcloud services list -- account <Account>.

正解：A

解説：
https://cloud.google.com/sdk/gcloud/reference/services/list#--available
--available
Return the services available to the project to enable. This list will include any services that the project has already enabled.
To list the services the current project has enabled for consumption, run:
gcloud services list --enabled
To list the services the current project can enable for consumption, run:
gcloud services list --available


質問 # 53
......

試験エンジンはAssociate-Cloud-Engineer試験無料お試しサンプル365日更新されます：https://www.goshiken.com/Google/Associate-Cloud-Engineer-mondaishu.html

Associate-Cloud-EngineerのPDF問題とテストエンジンには290問があります：https://drive.google.com/open?id=10NvBcsn8fg23qB7udwrLStu0a5DWBxEN

関するブログ

もっと
Associate-Cloud-Engineer無料問題集