最新 [2025年05月02日]Associate-Cloud-Engineer試験正確解答Google Associate Cloud Engineer ExamのPDF問題
あなたのキャリアーを稼いで飛躍せよGoogle 290問題
Google Associate-Cloud-Engineer認定を取得することは、Google Cloud Platformでのクラウドコンピューティングやクラウドエンジニアリングに関する専門知識を示す素晴らしい方法です。この認定は、競争の激しい求人市場での差別化、収入の向上、Google Cloud Platformの独占的なリソースやイベントへのアクセスを提供します。
Google Associate-Cloud-Engineer試験は、クラウドコンピューティングに関する知識とスキルをテストするGoogleが提供する認定試験です。この試験は、試験受験者がコンピューティング、ストレージ、ネットワーキング、セキュリティを含むGoogle Cloud Platform（GCP）サービスを展開および管理する能力を評価するように設計されています。この試験は、クラウドコンピューティングの経験があり、自分のスキルと知識を確認したい個人を対象としています。
質問 # 122
You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?
- A. Fill all resources in the Pricing Calculator to get an estimate of the monthly cost.
- B. Configure Billing Data Export to BigQuery and visualize the data in Data Studio.
- C. Use the Reports view in the Cloud Billing Console to view the desired cost information.
- D. Visit the Cost Table page to get a CSV export and visualize it using Data Studio.
正解：B
解説：
You can combine all to a single BigQuery using service account, and then push it to DataStudio for analytics.
質問 # 123
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task.
You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
- B. When creating the VM, use machine type n1-standard-96.
- C. When creating the VM, use Intel Skylake as the CPU platform.
- D. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
正解：D
質問 # 124
You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?
- A. Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.
- B. Execute the Deployment Manager template using the --preview option in the same project, and observe the state of interdependent resources.
- C. Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
- D. Use granular logging statements within a Deployment Manager template authored in Python.
正解：B
質問 # 125
Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?
- A. In the G Suite console, add the users to a special group called cloud-console- [email protected]. Rely on the default behavior of the Cloud Platform to grant users access if they are members of this group.
- B. Create a CSV sheet with all users' email addresses. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.
- C. Grant them the required IAM roles using their G Suite email address.
- D. Enable Cloud Identity in the GCP Console for your domain.
正解：C
解説：
To actively adopt the Organization resource, the G Suite or Cloud Identity super admins need to assign the Organization Administrator Cloud IAM role to a user or group.
https://cloud.google.com/resource-manager/docs/creating-managing-organization
質問 # 126
Your team is using Linux instances on Google Cloud. You need to ensure that your team logs in to these instances in the most secure and cost efficient way. What should you do?
- A. Create a bastion host with public internet access. Create the SSH tunnel to the instance through the bastion host.
- B. Use the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic from the IP range 35.235.240.0/20 on port 22.
- C. Use a third party tool to provide remote access to the instances.
- D. Attach a public IP to the instances and allow incoming connections from the internet on port 22 for SSH.
正解：B
質問 # 127
Your customer wants you to create a secure website with autoscaling based on the compute instance CPU load. You want to enhance performance by storing static content in Cloud Storage. Which resources are needed to distribute the user traffic?
- A. An external HTTP(S) load balancer to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend. Install the HTTPS certificates on the instance.
- B. An external network load balancer pointing to the backend instances to distribute the load evenly. The web servers will forward the request to the Cloud Storage as needed.
- C. An external HTTP(S) load balancer with a managed SSL certificate to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend.
- D. An internal HTTP(S) load balancer together with Identity-Aware Proxy to allow only HTTPS traffic.
正解：C
解説：
An external HTTP(S) load balancer is a Google-recommended solution for distributing web traffic across multiple regions and zones, and providing high availability, scalability, and security for web applications. It supports both IPv4 and IPv6 addresses, and can handle SSL/TLS termination and encryption. It also integrates with Cloud CDN, Cloud Armor, and Cloud Identity-Aware Proxy for enhanced performance and protection.
A managed instance group (MIG) can be used as a backend service for the HTTP(S) load balancer, and can automatically scale the number of VM instances based on the CPU load. A Cloud Storage bucket can also be used as a backend service for the HTTP(S) load balancer, and can serve static content such as images, videos, or HTML files. A URL map can be used to route requests to different backend services based on the path or host of the request. For example, a URL map can send requests for /static/* to the Cloud Storage bucket, and requests for /dynamic/* to the MIG. A managed SSL certificate can be used to secure the connection between the clients and the load balancer, and can be automatically provisioned and renewed by Google.
A is incorrect because an internal HTTP(S) load balancer is only visible within a VPC network, and not to the public internet. It is used for internal applications that need to communicate with other internal services.
Identity-Aware Proxy is a service that provides secure access to web applications without using a VPN. It is not a load balancer, and it does not distribute user traffic.
B is incorrect because installing HTTPS certificates on the instance is not necessary, as the HTTP(S) load balancer can handle SSL/TLS termination and encryption. It is also more complex and less secure to manage the certificates on the instance level, as they need to be updated and synchronized across multiple instances.
D is incorrect because an external network load balancer is a TCP/UDP load balancer that operates at the network layer. It is not suitable for web applications that use HTTP(S) protocols, as it does not support SSL
/TLS termination and encryption, URL maps, or Cloud Storage backends. It is also less efficient and scalable to forward the requests to the Cloud Storage from the web servers, as it adds an extra hop and latency.
References:
* HTTP(S) Load Balancing documentation
* Setting up HTTP(S) Load Balancing with Cloud Storage
* Creating and using SSL certificates
* Choosing a load balancer
質問 # 128
You need to create a copy of a custom Compute Engine virtual machine (VM) to facilitate an expected increase in application traffic due to a business acquisition. What should you do?
- A. Create a custom Compute Engine image from a snapshot. Create your images from that image.
- B. Create a Compute Engine snapshot of your base VM. Create your instances from that snapshot.
- C. Create a custom Compute Engine image from a snapshot. Create your instances from that image.
:
A custom image belongs only to your project. To create an instance with a custom image, you must first have a custom image. - D. Create a Compute Engine snapshot of your base VM. Create your images from that snapshot.
正解：C
解説：
Reference:
https://cloud.google.com/compute/docs/instances/create-start-instance
質問 # 129
Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the dat a. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?
- A. Upload the data into Cloud SQL using the import function in the console.
- B. Upload the data into Cloud Spanner using the import function in the console.
- C. Upload the data to Cloud Storage using the gsutil command line tool.
- D. Upload the data to BigQuery using the bq command line tool.
正解：C
解説：
"large quantity" : Cloud Storage or BigQuery "files" a file is nothing but an Object
質問 # 130
You are developing a new application and are looking for a Jenkins installation to build and deploy your source code. You want to automate the installation as quickly and easily as possible.
What should you do?
- A. Create a new Compute Engine instance.
Run the Jenkins executable. - B. Deploy Jenkins through the Google Cloud Marketplace.
- C. Create an instance template with the Jenkins executable.
Create a managed instance group with this template. - D. Create a new Kubernetes Engine cluster.
Create a deployment for the Jenkins image.
正解：D
解説：
https://cloud.google.com/solutions/jenkins-on-kubernetes-engine
質問 # 131
You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?
- A. Configure an internal TCP load balancer.
- B. Configure an external TCP proxy load balancer.
- C. Configure an external SSL proxy load balancer.
- D. Configure an HTTP(S) load balancer.
正解：D
解説：
Explanation/Reference: https://cloud.google.com/load-balancing/docs/https/
質問 # 132
Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?
- A. Create a route on the VPC to route all traffic to the instance over the VPN tunnel.
- B. Create the instance with Private Google Access enabled.
- C. Create the instance without a public IP address.
- D. Create a deny-all egress firewall rule on the VPC network.
正解：C
解説：
Explanation
VMs cannot communicate over the internet without a public IP address. Private Google Access permits access to Google APIs and services in Google's production infrastructure.
https://cloud.google.com/vpc/docs/private-google-access
質問 # 133
You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset What should you do?
- A. Ask the partner to create a Service Account in their project, and have them give the Service Account access to BigQuery in their project
- B. Create a Service Account in your own project, and grant this Service Account access to BigGuery in your project
- C. Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project
- D. Create a Service Account in your own project, and ask the partner to grant this Service Account access to BigQuery in their project
正解：C
解説：
https://gtseres.medium.com/using-service-accounts-across-projects-in-gcp-cf9473fef8f0#:~:text=Go%20to%20the%20destination%20project,Voila!
質問 # 134
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?
- A. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
- B. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- C. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
- D. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
正解：C
質問 # 135
&. You are working for a hospital that stores Its medical images in an on-premises data room. The hospital wants to use Cloud Storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to Cloud Storage. You need to design and implement a solution. What should you do?
- A. Create a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub lope
- B. Deploy a Dataflow job from the batch template "Datastore lo Cloud Storage" Schedule the batch job on the desired interval
- C. In the Cloud Console, go to Cloud Storage Upload the relevant images to the appropriate bucket
- D. Create a script that uses the gsutil command line interface to synchronize the on-premises storage with Cloud Storage Schedule the script as a cron job
正解：B
質問 # 136
A customer is running a critical payroll system in a production environment in one data center and a disaster recovery (DR) environment in another. The application includes load-balanced web servers and failover for the MySQL database. The customer's DR process is manual and error-phone. For this reason, management has asked IT to migrate the application to AWS and make it highly available so that IT no longer has to manually fail over the environment.
How should a Solutions Architect migrate the system to AWS?
- A. Migrate the production environment to a single Availability Zone, and set up instance recovery for Amazon EC2. Decommission the DR environment because it is no longer needed.
- B. Migrate the production and DR environments to different regions. Let AWS manage failover between the environments.
- C. Migrate the production and DR environments to different Availability Zones within the same region. Let AWS manage failover between the environments.
- D. Migrate the production environment to span multiple Availability Zones, using Elastic Load Balancing and Multi-AZ Amazon RDS. Decommission the DR environment because it is no longer needed.
正解：B
質問 # 137
Your team uses a third-party monitoring solution. They've asked you to deploy it to the nodes in your Kubernetes Engine Cluster. What's the best way to do that?
- A. Deploy the monitoring pod as a DaemonSet.
- B. Connect to each node via SSH and install the monitoring solution.
- C. Deploy the monitoring pod as a Deployment.
- D. Use Deployment Manager to deploy the monitoring solution.
正解：A
質問 # 138
You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?
- A. Create a HAProxy pod in the cluster to load-balance the traffic to all the pods of the application. Forward the public traffic to HAProxy with an iptable rule. Configure the DNS name of your application using the public IP of the node HAProxy is running on.
- B. Create a Kubernetes Service of type ClusterIP for your application. Configure the public DNS name of your application using the IP of this Service.
- C. Create a Kubernetes Service of type NodePort to expose the application on port 443 of each node of the Kubernetes cluster. Configure the public DNS name of your application with the IP of every node of the cluster to achieve load-balancing.
- D. Create a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.
正解：D
質問 # 139
Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?
- A. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery dataViewer user role to the group.
- B. 1. Create an IAM entry for each data scientist's user account.2. Assign the BigQuery jobUser role to the group.
- C. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery dataViewer user role to the group.
- D. 1. Create a dedicated Google group in Cloud Identity.2. Add each data scientist's user account to the group.3. Assign the BigQuery jobUser role to the group.
正解：D
解説：
Explanation
Read the dataset's metadata and to list tables in the dataset. Read data and metadata from the dataset's tables.
When applied at the project or organization level, this role can also enumerate all datasets in the project.
Additional roles, however, are necessary to allow the running of jobs.
BigQuery Data Viewer
(roles/bigquery.dataViewer)
When applied to a table or view, this role provides permissions to:
Read data and metadata from the table or view.
This role cannot be applied to individual models or routines.
When applied to a dataset, this role provides permissions to:
Read the dataset's metadata and list tables in the dataset.
Read data and metadata from the dataset's tables.
When applied at the project or organization level, this role can also enumerate all datasets in the project.
Additional roles, however, are necessary to allow the running of jobs.
Lowest-level resources where you can grant this role:
Table
View
BigQuery Job User
(roles/bigquery.jobUser)
Provides permissions to run jobs, including queries, within the project.
Lowest-level resources where you can grant this role:
Project
to run jobs https://cloud.google.com/bigquery/docs/access-control#bigquery.jobUser databaseUser needs additional role permission to run jobs https://cloud.google.com/spanner/docs/iam#spanner.databaseUser
質問 # 140
Which of the following command is used to create buckets in Cloud Storage?
- A. gsutil storage buckets create
- B. gcloud storage buckets create
- C. gcloud mb
- D. gsutil mb
正解：D
質問 # 141
Your company implemented BigQuery as an enterprise data warehouse. Users from multiple business units run queries on this data warehouse. However, you notice that query costs for BigQuery are very high, and you need to control costs. Which two methods should you use?
(Choose two.)
- A. Change your BigQuery query model from on-demand to flat rate. Apply the appropriate number of slots to each Project.
- B. Split the users from business units to multiple projects.
- C. Create separate copies of your BigQuery data warehouse for each business unit.
- D. Apply a user- or project-level custom query quota for BigQuery data warehouse.
- E. Split your BigQuery data warehouse into multiple data warehouses for each business unit.
正解：A、D
質問 # 142
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements.
You want to select a cost-efficient option. Which storage option should you use?
- A. Multi-Regional Storage
- B. Regional Storage
- C. Nearline Storage
- D. Cold Storage
正解：D
解説：
Explanation
Nearline, Coldline, and Archive offer ultra low-cost, highly-durable, highly available archival storage. For data accessed less than once a year, Archive is a cost-effective storage option for long-term preservation of data.
Coldline is also ideal for cold storage-data your business expects to touch less than once a quarter. For warmer storage, choose Nearline: data you expect to access less than once a month, but possibly multiple times throughout the year. All storage classes are available across all GCP regions and provide unparalleled sub-second access speeds with a consistent API.
質問 # 143
......
正真正銘のベスト資料はAssociate-Cloud-Engineerオンライン練習試験：https://www.passtest.jp/Google/Associate-Cloud-Engineer-shiken.html
練習できるAssociate-Cloud-EngineerにはPassTest画期的なあなたをGoogle Associate Cloud Engineer Exam試験合格させます合格率：https://drive.google.com/open?id=1N_okP_f_Aq9ulfix-dGwicrYTCpZQlCV