Question 1

You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?

Options :

A : Use granular logging statements within a Deployment Manager template authored in Python.

B :

Monitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.

C :

Execute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.

D :

Execute the Deployment Manager template using the –-preview option in the same project, and observe the state of interdependent resources.

Answer: D

Question 2

You are deploying a production application on Compute Engine. You want to prevent anyone from accidentally destroying the instance by clicking the wrong button. What should you do?

Options :

A : Disable the flag “Delete boot disk when instance is deleted.”

B : Enable delete protection on the instance.

C : Disable Automatic restart on the instance.

D :

Enable Preemptibility on the instance.

Answer: D

Question 3

You have an object in a Cloud Storage bucket that you want to share with an external company. The object

contains sensitive data. You want access to the content to be removed after four hours. The external company

does not have a Google account to which you can grant specific user-based access privileges. You want to use

the most secure method that requires the fewest steps. What should you do?

Options :

A : Create a signed URL with a four-hour expiration and share the URL with the company.

B : Set object access to ‘public’ and use object lifecycle management to remove the object after four hours.

C :

Configure the storage bucket as a static website and furnish the object’s URL to the company. Delete the object from the storage bucket after four hours.

D :

Create a new Cloud Storage bucket specifically for the external company to access. Copy the object to that bucket. Delete the bucket after four hours have passed.

Answer: A

Question 4

You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?

Options :

A : Open the Cloud Spanner console to review configurations.

B : Open the IAM & admin console to review IAM policies for Cloud Spanner roles.

C : Go to the Stackdriver Monitoring console and review information for Cloud Spanner.

D :

Go to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.

Answer: D

Question 5

Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?

Options :

A : Assign the appropriate permissions, and then use Cloud Monitoring to review metrics

B : Use the export logs API to provide the Admin Activity Audit Logs in the format they want

C :

Turn on Data Access Logs for the buckets they want to audit, and Then build a query in the log viewer that filters on Cloud Storage

D : Assign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs

Answer: C

Higher Test Marks with Free Online Associate-Cloud-Engineer Exam Practice

Buying Options: