[2025年11月]更新のGoogle Associate-Cloud-Engineer試験練習テスト問題
更新された認定試験Associate-Cloud-Engineer問題集で練習テスト問題
Google Associate-Cloud-Engineer認定試験は、クラウドコンピューティングにおける知識と専門知識を検証するための貴重な資格です。認定試験は、Google Cloudプラットフォームでクラウドソリューションを展開および管理する経験のある個人に適しています。また、クラウドコンピューティングのスキルと知識を向上させ、IT業界でキャリアを進めたい個人にも優れた機会です。
質問 # 150
You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?
- A. Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
- B. In the Instance Template, add a startup script that sends a heartbeat to the metadata server.
- C. In the Instance Template, add the label `health-check'.
- D. Create a health check on port 443 and use that when creating the Managed Instance Group.
正解：D
解説：
MIGs support autohealing, load balancing, autoscaling, and auto-updating. no the Images templates, this is set up in the MIG.
質問 # 151
Your team has developed a stateless application which requires it to be run directly on virtual machines. The application is expected to receive a fluctuating amount of traffic and needs to scale automatically. You need to deploy the application. What should you do?
- A. Deploy the application on Cloud Run and configure autoscaling.
- B. Deploy the application on a Kubernetes Engine cluster and configure node pool autoscaling.
- C. Deploy the application on a managed instance group and configure autoscaling.
- D. Deploy the application on Cloud Functions and configure the maximum number instances.
正解：C
解説：
A managed instance group (MIG) is a group of identical virtual machines (VMs) that you can manage as a single entity. You can use a MIG to deploy and maintain a stateless application that runs directly on VMs. A MIG can automatically scale the number of VMsbased on the load or a schedule. A MIG can also automatically heal the VMs if they become unhealthy or unavailable. A MIG is suitable for applications that need to run on VMs rather than containers or serverless platforms.
B is incorrect because Kubernetes Engine is a managed service for running containerized applications on a cluster of nodes. It is not necessary to use Kubernetes Engine if the application does not use containers and can run directly on VMs.
C is incorrect because Cloud Functions is a serverless platform for running event-driven code in response to triggers. It is not suitable for applications that need to run continuously and handle HTTP requests.
D is incorrect because Cloud Run is a serverless platform for running stateless containerized applications. It is not suitable for applications that do not use containers and can run directly on VMs.
References:
* Managed instance groups documentation
* Choosing a compute option for Google Cloud
質問 # 152
You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible.
What should you do?
- A. Create a new Compute Engine instance.
Run the Jenkins executable. - B. Create an instance template with the Jenkins executable.
Create a managed instance group with this template. - C. Deploy Jenkins through the Google Cloud Marketplace.
- D. Create a new Kubernetes Engine cluster.
Create a deployment for the Jenkins image.
正解：D
解説：
https://cloud.google.com/solutions/jenkins-on-kubernetes-engine
質問 # 153
You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps. What should you do?
- A. Install a RDP client in your desktop. Set a Windows username and password in the GCP Console. Use the credentials to log in to the instance.
- B. Set a Windows password in the GCP Console. Verify that a firewall rule for port 22 exists. Click the RDP button in the GCP Console and supply the credentials to log in.
- C. Install a RDP client on your desktop. Verify that a firewall rule for port 3389 exists.
- D. Set a Windows username and password in the GCP Console. Verify that a firewall rule for port 3389 exists. Click the RDP button in the GCP Console, and supply the credentials to log in.
正解：A
質問 # 154
You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?
- A. Open the IAM & admin console to review IAM policies for Cloud Spanner roles.
- B. Open the Cloud Spanner console to review configurations.
- C. Go to the Stackdriver Monitoring console and review information for Cloud Spanner.
- D. Go to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.
正解：D
解説：
Stackdriver logging allows filtering of logs based on resource (i.e. Cloud Spanner) then sub category of granting access will provide info as to when a role was granted to the user.
質問 # 155
You want to permanently delete a Pub/Sub topic managed by Config Connector in your Google Cloud project. What should you do?
- A. Use gcloud CLI to update the topic label managed-by-cnrm to false.
- B. Use gcloud CLI to delete the topic.
- C. Use kubect1 to create the label deleted-by-cnrm and to change its value to true for the topic resource.
- D. Use kubect1 to delete the topic resource.
正解：D
質問 # 156
You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset What should you do?
- A. Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project
- B. Create a Service Account in your own project, and grant this Service Account access to BigGuery in your project
- C. Create a Service Account in your own project, and ask the partner to grant this Service Account access to BigQuery in their project
- D. Ask the partner to create a Service Account in their project, and have them give the Service Account access to BigQuery in their project
正解：A
解説：
https://gtseres.medium.com/using-service-accounts-across-projects-in-gcp-cf9473fef8f0#:~:text=Go%20to%
20the%20destination%20project,Voila!
質問 # 157
You are using multiple configurations for gcloud. You want to review the configured Kubernetes Engine cluster of an inactive configuration using the fewest possible steps. What should you do?
- A. Use kubectl config get-contexts to review the output.
- B. Use gcloud config configurations describe to review the output.
- C. Use kubectl config use-context and kubectl config view to review the output.
- D. Use gcloud config configurations activate and gcloud config list to review the output.
正解：C
解説：
Reference:
kubectl config view -o jsonpath='{.users[].name}' # display the first user kubectl config view -o jsonpath='{.users[*].name}' # get a list of users kubectl config get-contexts # display list of contexts kubectl config current-context # display the current-context kubectl config use-context my-cluster-name # set the default context to my-cluster-name
https://kubernetes.io/docs/reference/kubectl/cheatsheet/
質問 # 158
You have created a new project in Google Cloud through the gcloud command line interface (CLI) and linked a billing account. You need to create a new Compute Engine instance using the CLI.
You need to perform the prerequisite stops. What should you do?
- A. Create a Cloud Monitoring Workspace.
- B. Grant yourself the IAM role of Computer Admin.
- C. Enable the compute googleapis.com API.
- D. Create a VPC network in the project.
正解：C
解説：
Always grant access to apis first in order to use GCP services
質問 # 159
(You are migrating your on-premises workload to Google Cloud. Your company is implementing its Cloud Billing configuration and requires access to a granular breakdown of its Google Cloud costs. You need to ensure that the Cloud Billing datasets are available in BigQuery so you can conduct a detailed analysis of costs. What should you do?)
- A. Enable Cloud Billing data export to BigQuery when you create a Cloud Billing account.
- B. Enable Cloud Billing on the project and link a Cloud Billing account. Then view the billing data table in the BigQuery dataset.
- C. Enable the BigQuery API and ensure that the BigQuery User IAM role is selected. Change the BigQuery dataset to select a data location.
- D. Create a Cloud Billing account. Enable the BigQuery Data Transfer Service API to export pricing data.
正解：A
解説：
The most direct and recommended way to get a granular breakdown of your Google Cloud costs in BigQuery is to enable Cloud Billing data export to BigQuery when you create or manage your Cloud Billing account.
This automatically sets up a daily export of your billing data to a BigQuery dataset you specify.
Option A: Enabling the BigQuery API and managing IAM roles are necessary for interacting with BigQuery, but they don't automatically populate it with Cloud Billing data. Selecting a data location is also important for BigQuery datasets but is a separate step from enabling billing export.
Option B: The BigQuery Data Transfer Service is used for transferring data from various sources into BigQuery, but for Cloud Billing data, the direct export feature is the standard and simpler method.
Option D: Enabling Cloud Billing and linking an account makes billing data available in the Cloud Billing console, but it doesn't automatically export it to BigQuery for detailed analysis. You need to explicitly configure the BigQuery export.
Reference to Google Cloud Certified - Associate Cloud Engineer Documents:
The process of setting up Cloud Billing export to BigQuery is clearly documented in the Google Cloud Billing documentation, which is a fundamental area for the Associate Cloud Engineer certification.
Understanding how to access and analyze billing data is crucial for cost management.
質問 # 160
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?
- A. Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
- B. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
- C. Move both projects under the same folder.
- D. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.
Share the folder with the IoT team.
正解：C
質問 # 161
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?
- A. Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
- B. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.Share the folder with the IoT team.
- C. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
- D. Move both projects under the same folder.
正解：C
解説：
Predefined roles
The following table describes Identity and Access Management (IAM) roles that are associated with Cloud Storage and lists the permissions that are contained in each role. Unless otherwise noted, these roles can be applied either to entire projects or specific buckets.
Storage Object Creator (roles/storage.objectCreator) Allows users to create objects. Does not give permission to view, delete, or overwrite objects.
https://cloud.google.com/storage/docs/access-control/iam-roles#standard-roles Reference: https://cloud.google.com/billing/docs/onboarding-checklist
質問 # 162
The sales team has a project named Sales Data Digest that has the ID acme-data-digest You need to set up similar Google Cloud resources for the marketing team but their resources must be organized independently of the sales team. What should you do?
- A. Create a Project Lien on acme-data digest and then grant the Project Editor role to the Marketing team
- B. Create a new protect named Meeting Data Digest and use the ID acme-data-digest Grant the Project Editor role to the Marketing team.
- C. Grant the Project Editor role to the Marketing learn for acme data digest
- D. Create another protect with the ID acme-marketing-data-digest for the Marketing team and deploy the resources there
正解：D
質問 # 163
You have developed a containerized web application that will serve Internal colleagues during business hours.
You want to ensure that no costs are incurred outside of the hours the application is used. You have just created a new Google Cloud project and want to deploy the application. What should you do?
- A. Deploy the container on App Engine flexible environment with manual scaling, and set the value instances to zero in the app yaml
- B. Deploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero.
- C. Deploy the container on App Engine flexible environment with autoscaling. and set the value min_instances to zero in the app yaml
- D. Deploy the container on Cloud Run for Anthos, and set the minimum number of instances to zero
正解：C
質問 # 164
You have deployed an application on a single Compute Engine instance. The application writes logs to disk. Users start reporting errors with the application. You want to diagnose the problem. What should you do?
- A. Connect to the instance's serial console and read the application logs.
- B. Install and configure the Cloud Logging Agent and view the logs from Cloud Logging.
- C. Configure a Health Check on the instance and set a Low Healthy Threshold value.
- D. Navigate to Cloud Logging and view the application logs.
正解：B
解説：
Reference:
https://cloud.google.com/error-reporting/docs/setup/compute-engine
質問 # 165
You are using Data Studio to visualize a table from your data warehouse that is built on top of BigQuery.
Data is appended to the data warehouse during the day. At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Data Studio are broken, and you want to analyze the problem. What should you do?
- A. Use the open source CLI tool. Snapshot Debugger, to find out why the data was not refreshed correctly.
- B. In Cloud Logging create a filter for your Data Studio report
- C. Use the BigQuery interface to review the nightly Job and look for any errors
- D. Review the Error Reporting page in the Cloud Console to find any errors.
正解：A
解説：
Cloud Debugger helps inspect the state of an application, at any code location, without stopping or slowing down the running app // https://cloud.google.com/debugger/docs
質問 # 166
You need to manage a Cloud Spanner Instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?
- A. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45% If you exceed this threshold, add nodes lo your instance.
- B. Create an alert in Cloud Monitoring to alert when the percentage ot high priority CPU utilization reaches 45% Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage
- C. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. Use database query statistics to identity queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.
- D. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65% If you exceed this threshold, add nodes to your instance
正解：D
解説：
https://cloud.google.com/spanner/docs/cpu-utilization#recommended-max
質問 # 167
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?
- A. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
- B. Create a VerticalPodAutscaler for those workloads.
- C. Create a node pool with preemptible VMs and GPUs attached to those VMs.
- D. Enable node auto-provisioning on the GKE cluster.
正解：D
解説：
auto-provisioning = Attaches and deletes node pools to cluster based on the requirements. Hence creating a GPU node pool, and auto-scaling would be better
https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-provisioning
質問 # 168
Your company is moving from an on-premises environment to Google Cloud Platform (GCP). You have multiple development teams that use Cassandra environments as backend databases. They all need a development environment that is isolated from other Cassandra instances. You want to move to GCP quickly and with minimal support effort. What should you do?
- A. 1. Build a Cassandra Compute Engine instance and take a snapshot of it.
2. Upload the snapshot to Cloud Storage and make it accessible to your developers.
3. Build instructions to create a Compute Engine instance from the snapshot so that developers can do it themselves. - B. 1. Advise your developers to go to Cloud Marketplace.
2. Ask the developers to launch a Cassandra image for their development work. - C. 1. Build an instruction guide to install Cassandra on GCP.
2. Make the instruction guide accessible to your developers. - D. 1. Build a Cassandra Compute Engine instance and take a snapshot of it.
2. Use the snapshot to create instances for your developers.
正解：B
解説：
You can deploy Cassandra as a Service, called Astra, on the Google Cloud Marketplace. Not only do you get a unified bill for all GCP services, your Developers can now create Cassandra clusters on Google Cloud in minutes and build applications with Cassandra as a database as a service without the operational overhead of managing Cassandra.
質問 # 169
You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?
- A. Configure an external TCP proxy load balancer.
- B. Configure an internal TCP load balancer.
- C. Configure an HTTP(S) load balancer.
- D. Configure an external SSL proxy load balancer.
正解：C
解説：
Explanation/Reference: https://cloud.google.com/load-balancing/docs/https/
質問 # 170
You are using Data Studio to visualize a table from your data warehouse that is built on top of BigQuery. Data is appended to the data warehouse during the day. At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Data Studio are broken, and you want to analyze the problem. What should you do?
- A. Use Cloud Debugger to find out why the data was not refreshed correctly
- B. In Cloud Logging create a filter for your Data Studio report
- C. Use the BigQuery interface to review the nightly Job and look for any errors
- D. Review the Error Reporting page in the Cloud Console to find any errors.
正解：B
解説：
Cloud Debugger helps inspect the state of an application, at any code location, without stopping or slowing down the running app // https://cloud.google.com/debugger/docs
質問 # 171
You are hosting an application from Compute Engine virtual machines (VMs) in us-central1-a.
You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?
- A. - Create a Managed Instance Group and specify us-central1-a as the zone.
- Configure the Health Check with a short Health Interval. - B. - Create an HTTP(S) Load Balancer.
- Create one or more global forwarding rules to direct traffic to your VMs. - C. - Create Compute Engine resources in us-central1-b.
- Balance the load across both us-central1-a and us-central1-b. - D. - Perform regular backups of your application.
- Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.
- Restore from backups when notified.
正解：C
解説：
Create Compute Engine resources in us "central1 "b. " Balance the load across both us
"central1"a and us "central1"b.
質問 # 172
......
更新された検証済みのAssociate-Cloud-Engineer問題集と解答で合格保証もしくは全額返金：https://www.goshiken.com/Google/Associate-Cloud-Engineer-mondaishu.html
Associate-Cloud-EngineerのPDF問題とテストエンジンには328問があります：https://drive.google.com/open?id=10NvBcsn8fg23qB7udwrLStu0a5DWBxEN