Associate-Cloud-Engineer無料認定試験材料はこちらの246問題
リアルAssociate-Cloud-Engineerは100%カバー率リアル試験問題を試そう！
Google Associate-Cloud-Engineer認定試験は、Google Cloudプラットフォームサービスを運営および管理する候補者の能力と能力のテストに焦点を当てています。この試験は、Google Cloudプラットフォームでアプリケーションを展開、監視、維持するために必要な知識とスキルを検証するように設計されています。
質問 # 124
You have an App Engine application running in us-east1. You've noticed 90% of your traffic comes from the West Coast. You'd like to change the region. What's the best way to change the App Engine region?
- A. Use the gcloud app region set command and supply the name of the new region.
- B. Contact Google Cloud Support and request the change.
- C. From the console, under the App Engine page, click edit, and change the region drop-down.
- D. Create a new project and create an App Engine instance in us-west2.
正解：D
質問 # 125
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?
- A. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.
- B. Migrate the workload to a Compute Engine Preemptible VM.
- C. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
- D. Create an Instance Template with Preemptible VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.
正解：D
解説：
Install the workload in a compute engine VM, start and stop the instance as needed, because as per the question the VM runs for 30 hours, process can be performed offline and should not be interrupted, if interrupted we need to restart the batch process again. Preemptible VMs are cheaper, but they will not be available beyond 24hrs, and if the process gets interrupted the preemptible VM will restart.
質問 # 126
You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?
- A. Visit the Cost Table page to get a CSV export and visualize it using Data Studio.
- B. Fill all resources in the Pricing Calculator to get an estimate of the monthly cost.
- C. Configure Billing Data Export to BigQuery and visualize the data in Data Studio.
- D. Use the Reports view in the Cloud Billing Console to view the desired cost information.
正解：C
解説：
You can combine all to a single BigQuery using service account, and then push it to DataStudio for analytics.
質問 # 127
You are building a pipeline to process time-series data. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?
- A. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery
- B. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
- C. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
- D. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
正解：A
質問 # 128
You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP.
You want to make sure it is reachable by clients over that port. What should you do?
- A. Add a network tag of your choice to the instance running the LDAP server. Create a firewall rule to allow egress on UDP port 636 for that network tag.
- B. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.
- C. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port
636 for that network tag. - D. Add the network tag allow-udp-636 to the VM instance running the LDAP server.
正解：C
質問 # 129
You want to configure a solution for archiving data in a Cloud Storage bucket. The solution must be cost- effective. Data with multiple versions should be archived after 30 days. Previous versions are accessed once a month for reporting. This archive data is also occasionally updated at month-end. What should you do?
- A. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Nearline Storage.
- B. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Coldline Storage.
- C. Add a bucket lifecycle rule that archives data with newer versions after 30 days to Coldline Storage.
- D. Add a bucket lifecycle rule that archives data from regional storage after 30 days to Nearline Storage.
正解：A
解説：
Explanation/Reference: https://cloud.google.com/storage/docs/managing-lifecycles
質問 # 130
A customer is running a critical payroll system in a production environment in one data center and a disaster recovery (DR) environment in another. The application includes load-balanced web servers and failover for the MySQL database. The customer's DR process is manual and error-phone. For this reason, management has asked IT to migrate the application to AWS and make it highly available so that IT no longer has to manually fail over the environment.
How should a Solutions Architect migrate the system to AWS?
- A. Migrate the production environment to a single Availability Zone, and set up instance recovery for Amazon EC2. Decommission the DR environment because it is no longer needed.
- B. Migrate the production environment to span multiple Availability Zones, using Elastic Load Balancing and Multi-AZ Amazon RDS. Decommission the DR environment because it is no longer needed.
- C. Migrate the production and DR environments to different regions. Let AWS manage failover between the environments.
- D. Migrate the production and DR environments to different Availability Zones within the same region. Let AWS manage failover between the environments.
正解：C
質問 # 131
You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images.
The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires. The other microservices are workloads that are optimized for n1-standard machine types.
You need to optimize your cluster so that all workloads are using resources as efficiently as possible. What should you do?
- A. Use the node pool with general-purpose machine type nodes for lite mage rendering microservice Create a nodepool with compute-optimized machine type nodes for the other microservices
- B. Create a node pool with compute-optimized machine type nodes for the image rendering microservice Use the node pool with general-purpose machine type nodes for the other microservices
- C. Assign the pods of the image rendering microservice a higher pod priority than the older microservices
- D. Configure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment Keep the resource requests for the other microservices at the default
正解：B
質問 # 132
You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?
- A. Run gcloud initto set the current project to my-project, and then run gcloud services list --available.
- B. Run gcloud projects describe <project ID>to verify the project value, and then run gcloud services list --available.
- C. Run gcloud infoto view the account value, and then run gcloud services list -- account <Account>.
- D. Run gcloud projects listto get the project ID, and then run gcloud services list -
-project <project ID>.
正解：D
質問 # 133
You need to deploy an application, which is packaged in a container image, in a new project. The application exposes an HTTP endpoint and receives very few requests per day. You want to minimize costs. What should you do?
- A. Deploy the container on Cloud Run on GKE.
- B. Deploy the container on App Engine Flexible.
- C. Deploy the container on Cloud Run.
- D. Deploy the container on Google Kubernetes Engine, with cluster autoscaling and horizontal pod autoscaling enabled.
正解：A
質問 # 134
You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?
- A. Deploy me application on App Engine For each update, create a new version of the same service Configure traffic splitting to send a small percentage of traffic to the new version
- B. Deploy the application on Kubernetes Engine For a now release, create a new deployment for the new version Update the service e to use the now deployment.
- C. Deploy the application on App Engine For each update, create a new service Configure traffic splitting to send a small percentage of traffic to the new service.
- D. Deploy the application on Kubernetes Engine For a new release, update the deployment to use the new version
正解：A
質問 # 135
You have successfully created a development environment in a project for an application. This application uses Compute Engine and Cloud SQL. Now, you need to create a production environment for this application. The security team has forbidden the existence of network routes between these 2 environments, and asks you to follow Google-recommended practices. What should you do?
- A. Create a new production subnet in the existing VPC and a new production Cloud SQL instance in your existing project, and deploy your application using those resources.
- B. Ask the security team to grant you the Project Editor role in an existing production project used by another division of your company. Once they grant you that role, replicate the setup you have in the development environment in that project.
- C. Create a new project, modify your existing VPC to be a Shared VPC, share that VPC with your new project, and replicate the setup you have in the development environment in that new project, in the Shared VPC.
- D. Create a new project, enable the Compute Engine and Cloud SQL APIs in that project, and replicate the setup you have created in the development environment.
正解：D
質問 # 136
You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google- recommended practices. What should you do?
- A. Add the auditors group to two new custom IAM roles.
- B. Add the auditor user accounts to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.
- C. Add the auditors group to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.
- D. Add the auditor user accounts to two new custom IAM roles.
正解：B
解説：
Explanation/Reference: https://cloud.google.com/iam/docs/roles-audit-logging
質問 # 137
Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?
- A. Add the group for the finance team to roles/billing viewer role.
- B. Add the group for the finance team to roles/billing project/Manager role.
- C. Add the group for the finance team to roles/billing user role.
- D. Add the group for the finance team to roles/billing admin role.
正解：A
解説：
Explanation
"Billing Account Viewer access would usually be granted to finance teams, it provides access to spend information, but does not confer the right to link or unlink projects or otherwise manage the properties of the billing account." https://cloud.google.com/billing/docs/how-to/billing-access
質問 # 138
You need to create a new billing account and then link it with an existing Google Cloud Platform project. What should you do?
- A. Verify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing account.
- B. Verify that you are Project Billing Manager for the GCP project. Update the existing project to link it to the existing billing account.
- C. Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project.
- D. Verify that you are Billing Administrator for the billing account. Create a new project and link the new project to the existing billing account.
正解：D
解説：
Reference:
https://cloud.google.com/billing/docs/how-to/modify-project
質問 # 139
Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider. What should you do?
- A. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
- B. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.
- C. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
- D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.
正解：B
質問 # 140
You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?
- A. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.
- B. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.
- C. Deploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.
- D. Deploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.
正解：C
解説：
GCP App Engine natively offers traffic splitting functionality between versions. You can use traffic splitting to specify a percentage distribution of traffic across two or more of the versions within a service. Splitting traffic allows you to conduct A/B testing between your versions and provides control over the pace when rolling out features.
Ref: https://cloud.google.com/appengine/docs/standard/python/splitting-traffic
質問 # 141
An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?
- A. Move both projects under the same folder.
- B. Create a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
- C. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.Share the folder with the IoT team.
- D. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
正解：D
解説：
Explanation
Predefined roles
The following table describes Identity and Access Management (IAM) roles that are associated with Cloud Storage and lists the permissions that are contained in each role. Unless otherwise noted, these roles can be applied either to entire projects or specific buckets.
Storage Object Creator (roles/storage.objectCreator) Allows users to create objects. Does not give permission to view, delete, or overwrite objects.
https://cloud.google.com/storage/docs/access-control/iam-roles#standard-roles
質問 # 142
You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?
- A. Increase the size of the disk to 1 TB.
- B. Increase the allocated CPU to the instance.
- C. Migrate to use a Regional SSD on the instance.
- D. Migrate to use a Local SSD on the instance.
正解：D
解説：
Explanation/Reference: https://cloud.google.com/compute/docs/disks/performance
質問 # 143
You have a Compute Engine instance hosting an application used between 9 AM and 6 PM on weekdays. You want to back up this instance daily for disaster recovery purposes. You want to keep the backups for 30 days.
You want the Google-recommended solution with the least management overhead and the least number of services. What should you do?
- A. 1. Create a Cloud Function that creates a snapshot of your instance's disk.
2.Create a Cloud Function that deletes snapshots that are older than 30 days.
3.Use Cloud Scheduler to trigger both Cloud Functions daily at 1:00 AM. - B. 1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk.
2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters:
-Schedule frequency: Daily
-Start time: 1:00 AM - 2:00 AM
-Autodelete snapshots after 30 days - C. 1. Update your instances' metadata to add the following value: snapshot-schedule: 0 1 * * *
2. Update your instances' metadata to add the following value: snapshot-retention: 30 - D. 1. Create a bash script in the instance that copies the content of the disk to Cloud Storage.
2.Create a bash script in the instance that deletes data older than 30 days in the backup Cloud Storage bucket.
3.Configure the instance's crontab to execute these scripts daily at 1:00 AM.
正解：B
解説：
Explanation
Creating scheduled snapshots for persistent disk This document describes how to create a snapshot schedule to regularly and automatically back up your zonal and regional persistent disks. Use snapshot schedules as a best practice to back up your Compute Engine workloads. After creating a snapshot schedule, you can apply it to one or more persistent disks. https://cloud.google.com/compute/docs/disks/scheduled-snapshots
質問 # 144
You are working for a hospital that stores Its medical images in an on-premises data room. The hospital wants to use Cloud Storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to Cloud Storage. You need to design and implement a solution. What should you do?
- A. In the Cloud Console, go to Cloud Storage Upload the relevant images to the appropriate bucket
- B. Create a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub lope
- C. Create a script that uses the gsutil command line interface to synchronize the on- premises storage with Cloud Storage Schedule the script as a cron job
- D. Deploy a Dataflow job from the batch template "Datastore lo Cloud Storage" Schedule the batch job on the desired interval
正解：D
質問 # 145
You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions. You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?
- A. Create a separate billing account per sandbox project and enable BigQuery billing exports.
Create a Data Studio dashboard to plot the spending per billing account. - B. Create a single billing account for all sandbox projects and enable BigQuery billing exports.
Create a Data Studio dashboard to plot the spending per project. - C. Create a budget per project and configure budget alerts on all of these budgets.
- D. Create a single budget for all projects and configure budget alerts on this budget.
正解：C
解説：
Key is anyone goes above $500 means it requires project level.
https://cloud.google.com/billing/docs/how-to/budgets
質問 # 146
......
Associate-Cloud-Engineer試験問題集簡単なまとめ：https://www.goshiken.com/Google/Associate-Cloud-Engineer-mondaishu.html
Associate-Cloud-Engineer最新Google Cloud Certifiedトレーニングと認定をゲット：https://drive.google.com/open?id=10NvBcsn8fg23qB7udwrLStu0a5DWBxEN