Associate-Cloud-Engineer問題集、Google実際の試験問題

質問 1

An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate- reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

A. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.
Share the folder with the IoT team.

B. Move both projects under the same folder.

C. Create a Shared VPC network between both projects.
Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.

D. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports- storage.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 2

Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization.
What should you do?

A. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.

B. Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.

C. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.

D. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions. You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?

A. Create a single budget for all projects and configure budget alerts on this budget.

B. Create a separate billing account per sandbox project and enable BigQuery billing exports.
Create a Data Studio dashboard to plot the spending per billing account.

C. Create a single billing account for all sandbox projects and enable BigQuery billing exports.
Create a Data Studio dashboard to plot the spending per project.

D. Create a budget per project and configure budget alerts on all of these budgets.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 4

You recently discovered an issue with your rolling update in Google Kubernetes Engine (GKE).
You now need to roll back a rolling update. What should you do?

A. Use the kubectl rollout restartcommand to revert the deployment.

B. Manually scale down the new Pods and scale up the old Pods.

C. Delete the deployment.

D. Use the kubectl rollout undocommand.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

You are building a pipeline to process time-series data.
Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?

A. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery

B. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery

C. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable

D. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 6

You have developed a containerized web application that will serve internal colleagues during business hours. You want to ensure that no costs are incurred outside of the hours the application is used. You have just created a new Google Cloud project and want to deploy the application. What should you do?

A. Deploy the container on Cloud Run for Anthos, and set the minimum number of instances to zero.

B. Deploy the container on App Engine flexible environment with manual scaling, and set the value instancesto zero in the app.yaml.

C. Deploy the container on App Engine flexible environment with autoscaling, and set the value min_instancesto zero in the app.yaml.

D. Deploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 7

You are writing a shell script that includes a few gcloud CLI commands to access some Google Cloud resources. You want to test the script in your local development environment with a service account in the most secure way. What should you do?

A. Generate an ID token for the service account. Use the token with the gcloud CLI commands.

B. Download the service account key file, and use it to generate an access token. Use the token with the gcloud CLI commands.

C. Download the service account key file and save it in a secure location. Set the GOOGLE_APPLICATION_CREDENTIALSenvironment variable to the key file.

D. Enable service account impersonation, and use the gcloud config set command to use it by default.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 8

You are hosting an application from Compute Engine virtual machines (VMs) in us-central1-a.
You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?

A. - Perform regular backups of your application.
- Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.
- Restore from backups when notified.

B. - Create a Managed Instance Group and specify us-central1-a as the zone.
- Configure the Health Check with a short Health Interval.

C. - Create Compute Engine resources in us-central1-b.
- Balance the load across both us-central1-a and us-central1-b.

D. - Create an HTTP(S) Load Balancer.
- Create one or more global forwarding rules to direct traffic to your VMs.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 9

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web- applications project. What should you do?

A. Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.

B. Give "project owner" for web-applications appropriate roles to crm-databases- proj

C. Give "project owner" role to crm-databases-proj and the web-applications project.

D. Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web- applications.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 10

Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps.
What should you do?

A. Modify the existing subnet range to 172.16.20.0/24.

B. Create a new VPC network for the VMs with a subnet of 172.32.0.0/16.
Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network.
Configure a custom Route exchange.

C. Create a new VPC network for the VMs.
Enable VPC Peering between the VMs' VPC network and the Dataproc cluster VPC network.

D. Create a new Secondary IP Range in the VPC and configure the VMs to use that range.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 11

Your company stores data from multiple sources that have different data storage requirements.
These data include:
1. Customer data that is structured and read with complex queries
2. Historical log data that is large in volume and accessed
infrequently
3. Real-time sensor data with high-velocity writes, which needs to be
available for analysis but can tolerate some data loss
You need to design the most cost-effective storage solution that fulfills all data storage requirements.
What should you do?

A. Use Cloud SQL for customer data, Cloud Storage (Archive) for historical logs, and Bigtable for sensor data.

B. Use Spanner for all data.

C. Use Cloud SQL for customer data, Cloud Storage (Coldline) for historical logs, and BigQuery for sensor data.

D. Use Firestore for customer data, Cloud Storage (Nearline) for historical logs, and Bigtable for sensor data.

正解: A

解説: (PassTest メンバーにのみ表示されます)

Google Associate Cloud Engineer - Associate-Cloud-Engineer 模擬練習