あなたを合格させるAssociate-Cloud-Engineerお手軽に試験合格リアルAssociate-Cloud-Engineer練習問題集で更新されたのは2023年10月25日
2023年最新の実際に出ると確認されたで無料Google Associate-Cloud-Engineer試験問題
Google Associate-Cloud-Engineer認定試験は、多肢選択問題で構成され、候補者のGoogle Cloud Platformに関する知識と理解力をテストすることを目的としています。この試験は、アプリケーションの展開、仮想マシンの管理、ネットワーキング、ストレージ、セキュリティなどのトピックをカバーしています。また、候補者がGoogle Cloud Console、Google Cloud SDK、その他のコマンドラインツールを使用する能力も試験されます。
質問 # 32
You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?
- A. Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
- B. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
- C. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
- D. Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
正解：C
質問 # 33
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event.
You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?
- A. Use a custom mode VPC network, configure static routes, and use active/passive routing
- B. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
- C. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing
- D. Use an automatic mode VPC network, configure static routes, and use active/active routing
正解：C
質問 # 34
You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:
You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?
- A. Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
- B. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.
- C. Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
- D. Store the database password inside the Docker image of the container, not in the YAML file.
正解：C
質問 # 35
Users of your application are complaining of slowness when loading the application. You realize the slowness is because the App Engine deployment serving the application is deployed in us-central whereas all users of this application are closest to europe-west3. You want to change the region of the App Engine application to europe-west3 to minimize latency. What's the best way to change the App Engine region?
- A. Contact Google Cloud Support and request the change.
- B. Create a new project and create an App Engine instance in europe-west3
- C. From the console, under the App Engine page, click edit, and change the region drop-down.
- D. Use the gcloud app region set command and supply the name of the new region.
正解：B
解説：
Explanation
App engine is a regional service, which means the infrastructure that runs your app(s) is located in a specific region and is managed by Google to be redundantly available across all the zones within that region. Once an app engine deployment is created in a region, it cant be changed. The only way is to create a new project and create an App Engine instance in europe-west3, send all user traffic to this instance and delete the app engine instance in us-central.
Ref: https://cloud.google.com/appengine/docs/locations
質問 # 36
You have a Compute Engine instance hosting an application used between 9 AM and 6 PM on weekdays. You want to back up this instance daily for disaster recovery purposes. You want to keep the backups for 30 days.
You want the Google-recommended solution with the least management overhead and the least number of services. What should you do?
- A. 1. Create a Cloud Function that creates a snapshot of your instance's disk.
2.Create a Cloud Function that deletes snapshots that are older than 30 days.
3.Use Cloud Scheduler to trigger both Cloud Functions daily at 1:00 AM. - B. 1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk.
2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters:
-Schedule frequency: Daily
-Start time: 1:00 AM - 2:00 AM
-Autodelete snapshots after 30 days - C. 1. Update your instances' metadata to add the following value: snapshot-schedule: 0 1 * * *
2. Update your instances' metadata to add the following value: snapshot-retention: 30 - D. 1. Create a bash script in the instance that copies the content of the disk to Cloud Storage.
2.Create a bash script in the instance that deletes data older than 30 days in the backup Cloud Storage bucket.
3.Configure the instance's crontab to execute these scripts daily at 1:00 AM.
正解：B
質問 # 37
Your company has multiple projects linked to a single billing account in Google Cloud. You need to visualize the costs with specific metrics that should be dynamically calculated based on company-specific criteri a. You want to automate the process. What should you do?
- A. Configure Cloud Billing data export to BigOuery for the billing account. Create a Looker Studio dashboard on top of the BigOuery export.
- B. In the Google Cloud console, visualize the costs related to the projects in the Cost breakdown section.
- C. In the Google Cloud console, use the export functionality of the Cost table. Create a Looker Studiodashboard on top of the CSV export.
- D. In the Google Cloud console, visualize the costs related to the projects in the Reports section.
正解：A
質問 # 38
You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?
- A. Enable the Cloud Spanner API
- B. Grant yourself the IAM role of Cloud Spanner Admin
- C. Create a new VPC network with subnetworks in all desired regions
- D. Configure your Cloud Spanner instance to be multi-regional
正解：B
解説：
Explanation
https://cloud.google.com/spanner/docs/getting-started/set-up
質問 # 39
You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance.
What should you do?
- A. Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to a new group.
Add the group to the role. - B. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
- C. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.
- D. Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to the role.
正解：B
質問 # 40
Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?
- A. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
- B. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
- C. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
- D. Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.
正解：A
解説：
Reference:
Directory Sync Google Cloud Directory Sync enables administrators to synchronize users, groups and other data from an Active Directory/LDAP service to their Google Cloud domain directory https://tools.google.com/dlpage/dirsync/
質問 # 41
You want to configure 10 Compute Engine instances for availability when maintenance occurs. Your requirements state that these instances should attempt to automatically restart if they crash. Also, the instances should be highly available including during system maintenance. What should you do?
- A. Create an instance group for the instances. Set the 'Autohealing' health check to healthy (HTTP).
- B. Create an instance group for the instance. Verify that the 'Advanced creation options' setting for 'do not retry machine creation' is set to off.
- C. Create an instance template for the instances. Set the 'Automatic Restart' to on. Set the 'On-host maintenance' to Migrate VM instance. Add the instance template to an instance group.
- D. Create an instance template for the instances. Set 'Automatic Restart' to off. Set 'On-host maintenance' to Terminate VM instances. Add the instance template to an instance group.
正解：C
解説：
Explanation
Create an instance template for the instances so VMs have same specs. Set the ""Automatic Restart' to on to VM automatically restarts upon crash. Set the ""On-host maintenance' to Migrate VM instance. This will take care of VM during maintenance window. It will migrate VM instance making it highly available Add the instance template to an instance group so instances can be managed.
* onHostMaintenance: Determines the behavior when a maintenance event occurs that might cause your instance to reboot.
* [Default] MIGRATE, which causes Compute Engine to live migrate an instance when there is a maintenance event.
* TERMINATE, which stops an instance instead of migrating it.
* automaticRestart: Determines the behavior when an instance crashes or is stopped by the system.
* [Default] true, so Compute Engine restarts an instance if the instance crashes or is stopped.
* false, so Compute Engine does not restart an instance if the instance crashes or is stopped.
Enabling automatic restart ensures that compute engine instances are automatically restarted when they crash.
And Enabling Migrate VM Instance enables live migrates i.e. compute instances are migrated during system maintenance and remain running during the migration.
Automatic Restart If your instance is set to terminate when there is a maintenance event, or if your instance crashes because of an underlying hardware issue, you can set up Compute Engine to automatically restart the instance by setting the automaticRestart field to true. This setting does not apply if the instance is taken offline through a user action, such as calling sudo shutdown, or during a zone outage.Ref: https://cloud.google.com/compute/docs/instances/setting-instance-scheduling-options#autorestart Enabling the Migrate VM Instance option migrates your instance away from an infrastructure maintenance event, and your instance remains running during the migration. Your instance might experience a short period of decreased performance, although generally, most instances should not notice any difference. This is ideal for instances that require constant uptime and can tolerate a short period of decreased performance.Ref: https://cloud.google.com/compute/docs/instances/setting-instance-scheduling-options#live_mi
質問 # 42
You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?
- A. 1. Create a configuration for each project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned GCP projects. - B. 1. Use the default configuration for one project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned GCP projects. - C. 1. Use the default configuration for one project you need to manage.
2. Use gcloud init to update the configuration values when you need to work with a non-default project. - D. 1. Create a configuration for each project you need to manage.
2. Use gcloud init to update the configuration values when you need to work with a non-default project
正解：A
解説：
Explanation
https://cloud.google.com/sdk/gcloud
https://cloud.google.com/sdk/docs/configurations#multiple_configurations
質問 # 43
A photo-sharing website running on AWS allows users to generate thumbnail images of photos stored in Amazon S3. An Amazon DynamoDB table maintains the locations of photos, and thumbnails are easily re- created from the originals if they are accidentally deleted.
How should the thumbnail images be stored to ensure the LOWEST cost?
- A. Amazon Glacier
- B. Amazon S3 Standard-Infrequent Access (S3 Standard-IA) with cross-region replication
- C. Amazon S3 with cross-region replication
- D. Amazon S3
正解：D
質問 # 44
You created a cluster.YAML file containing
resources:
name: cluster
type: container.v1.cluster
properties:
zone: europe-west1-b
cluster:
description: My GCP ACE cluster
initialNodeCount: 2
You want to use Cloud Deployment Manager to create this cluster in GKE. What should you do?
- A. gcloud deployment-manager deployments create my-gcp-ace-cluster --config cluster.yaml
- B. gcloud deployment-manager deployments create my-gcp-ace-cluster --type container.v1.cluster --config cluster.yaml
- C. gcloud deployment-manager deployments apply my-gcp-ace-cluster --config cluster.yaml
- D. gcloud deployment-manager deployments apply my-gcp-ace-cluster --type container.v1.cluster --config cluster.yaml
正解：C
解説：
Explanation
gcloud deployment-manager deployments create creates deployments based on the configuration file.
(Infrastructure as code). All the configuration related to the artifacts is in the configuration file. This command correctly creates a cluster based on the provided cluster.yaml configuration file.
Ref: https://cloud.google.com/sdk/gcloud/reference/deployment-manager/deployments/create
質問 # 45
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?
- A. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
- B. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
- C. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- D. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
正解：C
解説：
Coldline Storage is the perfect service to store audit logs from all the projects and is very cost- efficient as well. Coldline Storage is a very low-cost, highly durable storage service for storing infrequently accessed data.
質問 # 46
Your coworker has helped you set up several configurations for gcloud. You've noticed that you're running commands against the wrong project. Being new to the company, you haven't yet memorized any of the projects. With the fewest steps possible, what's the fastest way to switch to the correct configuration?
- A. Run gcloud configurations list followed by gcloud configurations activate .
- B. Run gcloud config configurations list followed by gcloud config configurations activate.
- C. Run gcloud config list followed by gcloud config activate.
- D. Re-authenticate with the gcloud auth login command and select the correct configurations on login.
正解：B
質問 # 47
Your team has some new functionality that they want to roll out slowly so they can monitor for errors. The change contains some significant changes to the user interface. You've chosen to use traffic splitting to perform a canary deployment. You're going to start by rolling out the code to 15% of your users. How should you go about setting up traffic splitting?
- A. Use the gcloud app deploy command with the distribution flag to deploy and split the traffic in one command.
- B. Deploy the new version. Split the traffic using an IP or cookie based distribution.
- C. Deploy the new version using the no-promote flag. Split the traffic using a random distribution.
- D. Deploy the new version using the no-promote flag. Split the traffic using distribution.
正解：D
質問 # 48
You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?
- A. Manual Scaling with 3 instances.
- B. Basic Scaling with min_instances set to 3.
- C. Automatic Scaling with min_idle_instances set to 3.
- D. Basic Scaling with max_instances set to 3.
正解：C
解説：
Reference:
https://cloud.google.com/appengine/docs/standard/python/how-instances-are-managed
質問 # 49
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements.
You want to select a cost-efficient option. Which storage option should you use?
- A. Cold Storage
- B. Nearline Storage
- C. Multi-Regional Storage
- D. Regional Storage
正解：A
解説：
Explanation
Nearline, Coldline, and Archive offer ultra low-cost, highly-durable, highly available archival storage. For data accessed less than once a year, Archive is a cost-effective storage option for long-term preservation of data.
Coldline is also ideal for cold storage-data your business expects to touch less than once a quarter. For warmer storage, choose Nearline: data you expect to access less than once a month, but possibly multiple times throughout the year. All storage classes are available across all GCP regions and provide unparalleled sub-second access speeds with a consistent API.
質問 # 50
......
Associate-Cloud-Engineerリアル試験問題解答は無料：https://www.passtest.jp/Google/Associate-Cloud-Engineer-shiken.html
Associate-Cloud-Engineer試験問題、リアルAssociate-Cloud-Engineer練習問題集：https://drive.google.com/open?id=1Qd8f_XKVPwVPFYiRC77XwaouxvA7iXNq