Question 1

You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?

Options :

A :

Assign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.

B :

Assign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy

C :

Assign the auditor’s IAM user to a custom role that has logging.privateLogEntries.list permission. Perform the export of logs to Cloud Storage.

D :

Assign the auditor’s IAM user to a custom role that has logging.privateLogEntries.list permission. Direct the auditor to also review the logs for changes to Cloud IAM policy

Answer: B

Question 2

Your preview application, deployed on a single-zone Google Kubernetes Engine (GKE) cluster in us-centrall, has gained popularity. You are now ready to make the application generally available. You need to deploy the application to production while ensuring high availability and resilience. You also want to follow Googlerecommended practices. What should you do?

Options :

A :

Use the gcloud container clusters create command with the options--enable-multi-networking and-- enable- autoscaling to create an autoscaling zonal cluster and deploy the application to it.

B :

Use the gcloud container clusters create-auto command to create an autopilot cluster and deploy the application to it.

C :

Use the gcloud container clusters update command with the option—region us-centrall to update the cluster and deploy the application to it.

D : Use the gcloud container clusters update command with the option—node-locations us-centrall-a,uscentrall-b to update the cluster and deploy the application to the nodes.

Answer: B

Question 3

Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

Options :

A : Modify the existing subnet range to 172.16.20.0/24.

B : Create a new Secondary IP Range in the VPC and configure the VMs to use that range.

C :

Create a new VPC network for the VMs. Enable VPC Peering between the VMs’ VPC network and the Dataproc cluster VPC network.

D :

Create a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network. Configure a custom Route exchange.

Answer: A

Question 4

Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the production services in order to perform their job. You want to prevent Google Cloud product changes from broadening their permissions in the future. You want to follow Google-recommended practices. What should you do?

Options :

A : Grant all members of the DevOps team the role of Project Editor on the organization level.

B : Grant all members of the DevOps team the role of Project Editor on the production project.

C :

Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project.

D :

Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the organization level.

Answer: C

Question 5

You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?

Options :

A : When creating the VM, use machine type n1-standard-96.

B : When creating the VM, use Intel Skylake as the CPU platform.

C :

Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.

D :

Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.

Answer: A

Higher Test Marks with Free Online Associate-Cloud-Engineer Exam Practice

Buying Options: