100%無料Google Cloud Certified Associate-Cloud-Engineer問題集PDFお試しサンプル認定ガイドカバー率
PDF試験材料2024年最新の実際に出るAssociate-Cloud-Engineer問題集
この試験は、複数選択と複数選択の質問で構成されており、2時間タイミングが合っています。 Google Associate Cloud Engineer Examの合格スコアは70％であり、テストを受けるのに125ドルかかります。この試験では、アプリケーションの展開、計算リソースの管理、ストレージおよびデータベースサービスの管理、GCP環境の監視とトラブルシューティングなど、さまざまなトピックをカバーしています。試験に合格した候補者は、Google Associate Cloud Engineer認定を獲得します。これは2年間有効であり、GCPサービスの使用における専門知識と習熟度を示します。
質問 # 12
You want to select and configure a solution for storing and archiving data on Google Cloud Platform. You need to support compliance objectives for data from one geographic location. This data is archived after 30 days and needs to be accessed annually. What should you do?
- A. Select Multi-Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Nearline Storage.
- B. Select Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Coldline Storage.
- C. Select Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Nearline Storage.
- D. Select Multi-Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Coldline Storage.
正解：B
解説：
The Real description is about Coldline storage Class:
Coldline Storage
Coldline Storage is a very-low-cost, highly durable storage service for storing infrequently accessed data. Coldline Storage is a better choice than Standard Storage or Nearline Storage in scenarios where slightly lower availability, a 90-day minimum storage duration, and higher costs for data access are acceptable trade-offs for lowered at-rest storage costs.
Coldline Storage is ideal for data you plan to read or modify at most once a quarter. Note, however, that for data being kept entirely for backup or archiving purposes, Archive Storage is more cost-effective, as it offers the lowest storage costs.
https://cloud.google.com/storage/docs/storage-classes#coldline
質問 # 13
You have a single binary application that you want to run on Google Cloud Platform. You decided to automatically scale the application based on underlying infrastructure CPU usage. Your organizational policies require you to use virtual machines directly. You need to ensure that the application scaling is operationally efficient and completed as quickly as possible. What should you do?
- A. Create an instance template, and use the template in a managed instance group that scales up and down based on the time of day.
- B. Use a set of third-party tools to build automation around scaling the application up and down, based on Stackdriver CPU usage monitoring.
- C. Create a Google Kubernetes Engine cluster, and use horizontal pod autoscaling to scale the application.
- D. Create an instance template, and use the template in a managed instance group with autoscaling configured.
正解：C
質問 # 14
You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube-systemnamespace of the cluster. You want a solution that uses the fewest possible services. What should you do?
- A. In the cluster's definition in Deployment Manager, add a metadata that has kube-systemas key and the DaemonSet manifest as value.
- B. Add the cluster's API as a new Type Provider in Deployment Manager, and use the new type to create the DaemonSet.
- C. With Deployment Manager, create a Compute Engine instance with a startup script that uses kubectlto create the DaemonSet.
- D. Use the Deployment Manager Runtime Configurator to create a new Config resource that contains the DaemonSet definition.
正解：C
解説：
Explanation/Reference: https://cloud.google.com/kubernetes-engine/docs/how-to/cluster-access-for-kubectl
質問 # 15
You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?
- A. Using the GCP Console, filter the Activity log to view the information.
- B. Create a trace in Stackdriver to view the information.
- C. Using the GCP Console, filter the Stackdriver log to view the information.
- D. View the bucket in the Storage section of the GCP Console.
正解：C
解説：
The data access logs are not an option in activity log.
質問 # 16
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
- B. When creating the VM, use Intel Skylake as the CPU platform.
- C. When creating the VM, use machine type n1-standard-96.
- D. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
正解：C
解説：
https://cloud.google.com/compute/docs/machine-types
質問 # 17
Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?
- A. Create a ticket with Google Support and wait for their call to share your credit card details over the phone.
- B. In the Google Cloud Platform Console, create a new billing account and set up a payment method.
- C. In the Google Platform Console, go to the Resource Manage and move all projects to the root Organization.
- D. Contact [email protected] with your bank account details and request a corporate billing account for your company.
正解：B
解説：
Explanation
(https://cloud.google.com/resource-manager/docs/project-migration#change_billing_account)
https://cloud.google.com/billing/docs/concepts
https://cloud.google.com/resource-manager/docs/project-migration
質問 # 18
You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?
- A. 1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
- B. 1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
- C. 1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
- D. 1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.
正解：D
質問 # 19
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements.
You want to select a cost-efficient option. Which storage option should you use?
- A. Multi-Regional Storage
- B. Nearline Storage
- C. Coldline Storage
- D. Regional Storage
正解：C
解説：
Explanation
Coldline Storage is a very-low-cost, highly durable storage service for storing infrequently accessed data.
Coldline Storage is ideal for data you plan to read or modify at most once a quarter. Since we have a requirement to access data once a quarter and want to go with the most cost-efficient option, we should select Coldline Storage.
Ref: https://cloud.google.com/storage/docs/storage-classes#coldline
質問 # 20
You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes. Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?
- A. Select Add GPUs. Add estimated cost for cluster management.
- B. Fill in local SSD. Fill in persistent disk storage and snapshot storage.
- C. Select Add GPUs. Fill in persistent disk storage and snapshot storage.
- D. Fill in local SSD. Add estimated cost for cluster management.
正解：C
解説：
Reference:
https://cloud.google.com/products/calculator#tab=container
質問 # 21
You need to verify that a Google Cloud Platform service account was created at a particular time.
What should you do?
- A. Filter the Activity log to view the Configuration category. Filter the Resource type to Service Account.
- B. Filter the Activity log to view the Configuration category. Filter the Resource type to Google Project.
- C. Filter the Activity log to view the Data Access category. Filter the Resource type to Google Project.
- D. Filter the Activity log to view the Data Access category. Filter the Resource type to Service Account.
正解：A
解説：
You don't need data access logs and configuration counts as creation.
質問 # 22
Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?
- A. Create a new Compute Engine instance and install Jenkins through the command line interface.
- B. Download and deploy the Jenkins Java WAR to App Engine Standard.
- C. Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.
- D. Use GCP Marketplace to launch the Jenkins solution.
正解：D
解説：
https://cloud.google.com/solutions/using-jenkins-for-distributed-builds-on-compute-engine
質問 # 23
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?
- A. Enable node auto-provisioning on the GKE cluster.
- B. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
- C. Create a VerticalPodAutscaler for those workloads.
- D. Create a node pool with preemptible VMs and GPUs attached to those VMs.
正解：A
解説：
Explanation
auto-provisioning = Attaches and deletes node pools to cluster based on the requirements. Hence creating a GPU node pool, and auto-scaling would be better
https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-provisioning
質問 # 24
You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes.
Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?
- A. Select Add GPUs. Add estimated cost for cluster management.
- B. Fill in local SSD. Fill in persistent disk storage and snapshot storage.
- C. Select Add GPUs. Fill in persistent disk storage and snapshot storage.
- D. Fill in local SSD. Add estimated cost for cluster management.
正解：C
質問 # 25
Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range
172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?
- A. Modify the existing subnet range to 172.16.20.0/24.
- B. Create a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network. Configure a custom Route exchange.
- C. Create a new VPC network for the VMs. Enable VPC Peering between the VMs' VPC network and the Dataproc cluster VPC network.
- D. Create a new Secondary IP Range in the VPC and configure the VMs to use that range.
正解：C
解説：
Explanation
A subnet has a single primary IP address range and, optionally, one or more secondary IP address ranges. For each subnet IP address range, Google Cloud creates a subnet route. When you use VPC Network Peering, Google Cloud always exchanges the subnet routes that don't use privately reused public IP addresses between the two peered networks. If firewall rules in each network permit communication, VM instances in one network can communicate with instances in the peered network.
質問 # 26
You are creating a Kubernetes Engine cluster to deploy multiple pods inside the cluster. All container logs must be stored in BigQuery for later analysis. You want to follow Google- recommended practices. Which two approaches can you take?
- A. Turn on Stackdriver Monitoring during the Kubernetes Engine cluster creation.
- B. Use the Stackdriver Logging export feature to create a sink to Cloud Storage. Create a Cloud Dataflow job that imports log files from Cloud Storage to BigQuery.
- C. Turn on Stackdriver Logging during the Kubernetes Engine cluster creation.
- D. Develop a custom add-on that uses Cloud Logging API and BigQuery API. Deploy the add-on to your Kubernetes Engine cluster.
- E. Use the Stackdriver Logging export feature to create a sink to BigQuery. Specify a filter expression to export log records related to your Kubernetes Engine cluster only.
正解：C、E
解説：
A Is correct because creating a cluster with Stackdriver Logging option will enable all the container logs to be stored in Stackdriver Logging.
B Is not correct because creating a cluster with Stackdriver Monitoring option will enable monitoring metrics to be gathered, but it has nothing to do with logging.
C is not correct, because even if you can develop a Kubernetes addon that will send logs to BigQuery, this is not a Google-recommended practice.
D is incorrect because this is not a Google recommended practice.
E Is correct because Stackdriver Logging support exporting logs to BigQuery by creating sinks (see links below).
https://cloud.google.com/kubernetes-engine/docs/how-to/logging
https://cloud.google.com/logging/docs/export/configure_export_v2
https://kubernetes.io/docs/reference/labels-annotations-taints/
質問 # 27
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?
- A. Set metadata to enable-oslogin=truefor the instance. Set the service account to no service accountfor that instance. Direct them to use the Cloud Shell to ssh to that instance.
- B. Set metadata to enable-oslogin=truefor the instance. Grant the dev1 group the compute.osLoginrole. Direct them to use the Cloud Shell to ssh to that instance.
- C. Enable block project wide keysfor the instance. Generate an SSH key for each user in the dev1 group. Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
- D. Enable block project wide keysfor the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.
正解：B
質問 # 28
You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?
- A. Create a Kubernetes Service of type ClusterIP for your application. Configure the public DNS name of your application using the IP of this Service.
- B. Create a HAProxy pod in the cluster to load-balance the traffic to all the pods of the application. Forward the public traffic to HAProxy with an iptable rule. Configure the DNS name of your application using the public IP of the node HAProxy is running on.
- C. Create a Kubernetes Service of type NodePort to expose the application on port 443 of each node of the Kubernetes cluster. Configure the public DNS name of your application with the IP of every node of the cluster to achieve load-balancing.
- D. Create a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.
正解：D
解説：
Reference:
https://cloud.google.com/kubernetes-engine/docs/tutorials/http-balancer
質問 # 29
......
Google Associate-Cloud-Engineer試験は、Compute Engine、Kubernetes Engine、Cloud Storage、Stackdriver、IAMなどのGoogle Cloud Platform製品やサービスの知識を試験することを目的としています。この試験は、アプリケーションの展開や管理、オペレーションの監視、アクセスやセキュリティコントロールの設定能力を評価します。
試験の資格を得るには、GCPテクノロジーとサービスの操作と、クラウドコンピューティングの概念と原則の確固たる理解の経験が必要です。また、GCPでアプリケーションの展開と管理の経験があるはずです。
更新されたのはGoogle Associate-Cloud-Engineer問題集PDFオンラインエンジン：https://www.passtest.jp/Google/Associate-Cloud-Engineer-shiken.html
Associate-Cloud-Engineer.PDFで問題解答PDFサンプル問題信頼され続ける：https://drive.google.com/open?id=17XOmQKB4Uh7e8sCdjGOiRSggmEfAqZYv