Question 1

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

Options :

A : Use gcloud iam roles copy and specify the production project as the destination project.

B : Use gcloud iam roles copy and specify your organization as the destination organization.

C : In the Google Cloud Platform Console, use the ‘create role from role’ functionality.

D : In the Google Cloud Platform Console, use the ‘create role’ functionality and select all applicable permissions.

Answer: A

Question 2

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

Options :

A : Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.

B : Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.

C : Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.

D : Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: D

Question 3

You need to deploy an application in Google Cloud using savorless technology. You want to test a new version of the application with a small percentage of production traffic. What should you do?

Options :

A : Deploy the application lo Cloud. Run. Use gradual rollouts for traffic splitting .

B : Deploy the application lo Google Kubemetes Engine. Use Anthos Service Mesh for traffic splitting.

C : Deploy the application to Cloud functions. Saucily the version number in the functions name.

D : Deploy the application to App Engine. For each new version, create a new service.

Answer: A

Question 4

You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

Options :

A : Create a health check on port 443 and use that when creating the Managed Instance Group.

B : Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.

C : In the Instance Template, add the label ‘health-check’.

D : In the Instance Template, add a startup script that sends a heartbeat to the metadata server.

Answer: A

Question 5

You need a dynamic way of provisioning VMs on Compute Engine. The exact specifications will be in a dedicated configuration file. You want to follow Google’s recommended practices. Which method should you use?

Options :

A : Deployment Manager

B : Cloud Composer

C : Managed Instance Group

D : Unmanaged Instance Group

Answer: A

Free Associate-Cloud-Engineer Mock Exam – Practice Online Confidently

Buying Options: