[2023年更新]無料Associate-Cloud-Engineer試験問題集はパス試験は超簡単
Associate-Cloud-Engineer試験問題集でAssociate-Cloud-Engineer練習テスト問題
質問 95
You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic. You want to ensure that the available capacity does not decrease during the deployment. What should you do?
- A. Perform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.
- B. Create a new instance template with the new application version. Update the existing managed instance group with the new instance template. Delete the instances in the managed instance group to allow the managed instance group to recreate the instance using the new instance template.
- C. Create a new managed instance group with an updated instance template. Add the group to the backend service for the load balancer. When all instances in the new managed instance group are healthy, delete the old managed instance group.
- D. Perform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0.
正解: D
質問 96
Which is the correct command to bind an IAM policy to a service account at an organisation or folder level?
- A. gcloud iam service-accounts keys create amazon-prj --iam-account amazon@amazon- prj.iam.gserviceaccount.com
- B. gcloud projects add-iam-policy-binding amazon-prj --member serviceAccount:amazonamazon- prj.iam.gserviceaccount.com --role roles/viewer
- C. gcloud organizations add-iam-policy-binding org_id --member serviceAccount:whizlab@amazon- prj.iam.gserviceaccount.com --role roles/viewer
- D. gcloud organizations add-iam-policy-binding --member serviceAccount:whizlab@amazon- prj.iam.gserviceaccount.com --role roles/viewer
正解: C
質問 97
Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?
- A. Download and deploy the Jenkins Java WAR to App Engine Standard.
- B. Create a new Compute Engine instance and install Jenkins through the command line interface.
- C. Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.
- D. Use GCP Marketplace to launch the Jenkins solution.
正解: D
質問 98
You are building a pipeline to process time-series data. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?
- A. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
- B. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
- C. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery
- D. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
正解: C
質問 99
You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone. You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?
- A. In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.
- B. Create a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1-d.
- C. In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.
- D. Set the europe-west1-d zone as the default zone using the gcloud config subcommand.
正解: A
解説:
Explanation/Reference: https://cloud.google.com/compute/docs/gcloud-compute
質問 100
You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.
You check the status of the deployed pods and notice that one of them is still in PENDING status:
You want to find out why the pod is stuck in pending status. What should you do?
- A. View logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.
- B. Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.
- C. Review details of the myapp-deployment Deployment object and check for error messages.
- D. Review details of the myapp-service Service object and check for error messages.
正解: B
解説:
https://kubernetes.io/docs/tasks/debug-application-cluster/debugapplication/#debugging-pods You can't view logs of a pod that isn't deployed, so D is incorrect.
C allows you to check the pod deployment messages and look for errors.
質問 101
You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA.
What should you do?
- A. Download a MongoDB installation package, and run it on a Managed Instance Group
- B. Create a Cloud Bigtable cluster and use the HBase API
- C. Download a MongoDB installation package and run it on Compute Engine instances
- D. Deploy MongoDB Alias from the Google Cloud Marketplace
正解: D
質問 102
You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?
- A. Create a new App Engine application in the same project. Deploy the new version in that application.
Configure your network load balancer to send 1% of the traffic to that new application. - B. Deploy the new version in the same application and use the --migrateoption.
- C. Deploy the new version in the same application and use the --splitsoption to give a weight of 99 to the current version and a weight of 1 to the new version.
- D. Create a new App Engine application in the same project. Deploy the new version in that application. Use the App Engine library to proxy 1% of the requests to the new version.
正解: D
質問 103
You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?
- A. Add the support team group to the roles/stackdriver.accounts.viewer role.
- B. Add the support team group to the roles/spanner.databaseReader role.
- C. Add the support team group to the roles/spanner.databaseUser role.
- D. Add the support team group to the roles/monitoring.viewer role
正解: C
質問 104
You are heading the Cloud & DevOps department in a financial company and have been asked to create a custom role for one of your colleague who needs access to deploy an application to App Engine. Which permission will you use?
- A. App Engine Admin
- B. App Engine Deployer
- C. App Engine Viewer
- D. App Engine Editor
正解: B
質問 105
You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional
2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?
- A. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.
- B. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
- C. Create a Cloud Memorystore for Redis instance with 32-GB capacity.
- D. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of
32 GB.
正解: B
質問 106
You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?
- A. Download a JSON Private Key for the service account. On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.
- B. Download a JSON Private Key for the service account. On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine-service-account.
- C. Download a JSON Private Key for the service account. After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine-service-account.json.
- D. When creating the VM via the web console, specify the service account under the 'Identity and API Access' section.
正解: D
解説:
Explanation/Reference: https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances
質問 107
You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?
- A. Fill all resources in the Pricing Calculator to get an estimate of the monthly cost.
- B. Configure Billing Data Export to BigQuery and visualize the data in Data Studio.
- C. Visit the Cost Table page to get a CSV export and visualize it using Data Studio.
- D. Use the Reports view in the Cloud Billing Console to view the desired cost information.
正解: B
質問 108
You are hosting an application from Compute Engine virtual machines (VMs) in us-central1-a. You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?
- A. - Create an HTTP(S) Load Balancer.
-Create one or more global forwarding rules to direct traffic to your VMs. - B. - Perform regular backups of your application.
-Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.
-Restore from backups when notified. - C. - Create a Managed Instance Group and specify us-central1-a as the zone.
-Configure the Health Check with a short Health Interval. - D. - Create Compute Engine resources in us-central1-b.
-Balance the load across both us-central1-a and us-central1-b.
正解: C
質問 109
You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?
- A. View the bucket in the Storage section of the GCP Console.
- B. Using the GCP Console, filter the Stackdriver log to view the information.
- C. Create a trace in Stackdriver to view the information.
- D. Using the GCP Console, filter the Activity log to view the information.
正解: D
解説:
Audit logs meet the requirement:
Admin Activity logs: Entries for operations that modify the configuration or metadata of a project, bucket, or object.
Data Access logs: Entries for operations that modify objects or read a project, bucket, or object.
質問 110
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. When creating the VM, use Intel Skylake as the CPU platform.
- B. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
- C. When creating the VM, use machine type n1-standard-96.
- D. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
正解: C
解説:
N1 machine series have up to 96 vCPUs, 6.5 GB of memory per vCPU, and are available on Intel Sandy Bridge, Ivy Bridge, Haswell, Broadwell, and Skylake CPU platforms.
https://cloud.google.com/compute/docs/machine-types
質問 111
You are building an application that processes data files uploaded from thousands of suppliers. Your primary goals for the application are data security and the expiration of aged data. You need to design the application to:
* Restrict access so that suppliers can access only their own data.
* Give suppliers write access to data only for 30 minutes.
* Delete data that is over 45 days old.
You have a very short development cycle, and you need to make sure that the application requires minimal maintenance. Which two strategies should you use? (Choose two.)
- A. Set up an SFTP server for your application, and create a separate user for each supplier.
- B. Build a lifecycle policy to delete Cloud Storage objects after 45 days.
- C. Develop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than 45 days.
- D. Use signed URLs to allow suppliers limited time access to store their objects.
- E. Build a Cloud function that triggers a timer of 45 days to delete objects that have expired.
正解: B,C
質問 112
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application.
You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce- , that has no overlapping IP ranges with the first VPC. This instance needs to connect to the network application on GKE. You want to minimize effort. What should you do?
- A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Set the service's externalTrafficPolicy to Cluster.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created. - B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created. - C. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.
2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.
3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.
4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint. - D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal
3. Peer the two VPCs together.
4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
正解: A
質問 113
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your dat a. Your users need to be able to access this archived data once a quarter for some regulatory requirements. You want to select a cost-efficient option. Which storage option should you use?
- A. Cold Storage
- B. Multi-Regional Storage
- C. Nearline Storage
- D. Regional Storage
正解: C
解説:
Nearline, Coldline, and Archive offer ultra low-cost, highly-durable, highly available archival storage. For data accessed less than once a year, Archive is a cost-effective storage option for long-term preservation of data.
Coldline is also ideal for cold storage-data your business expects to touch less than once a quarter. For warmer storage, choose Nearline: data you expect to access less than once a month, but possibly multiple times throughout the year. All storage classes are available across all GCP regions and provide unparalleled sub-second access speeds with a consistent API.
質問 114
You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?
- A. Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
- B. Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
- C. Create a service account with an access scope. Use the access scope
'https://www.googleapis.com/auth/cloud-platform'. - D. Create a service account with an access scope. Use the access scope
'https://www.googleapis.com/auth/devstorage.write_only'.
正解: C
質問 115
Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?
- A. Add the users to a group, and add this group to roles/iam.roleViewer role.
- B. Add the users to a group, and add this group to roles/browser role.
- C. Add the users to roles/iam.roleViewer role.
- D. Add the users to roles/browser role.
正解: B
解説:
Google recommend groups and roles/browser provides Read access to browse the hierarchy for a project, including the folder, organization, and Cloud IAM policy. This role doesn't include permission to view resources in the project.
質問 116
......
Google Associate-Cloud-Engineer 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
Associate-Cloud-Engineer試験問題集でAssociate-Cloud-Engineer練習テスト問題：https://www.goshiken.com/Google/Associate-Cloud-Engineer-mondaishu.html
無料Associate-Cloud-Engineer学習問題集ガイド試験問題解答はここ：https://drive.google.com/open?id=19izMXQrWjLqeaZmH9tu2r74voNMbeOW0