This page was exported from Exams Labs Braindumps [ http://blog.examslabs.com ] Export date:Wed Feb 5 14:53:14 2025 / +0000 GMT ___________________________________________________ Title: Quickly and Easily Pass Google Exam with Associate-Cloud-Engineer real Dumps Updated on Feb-2025 [Q154-Q169] --------------------------------------------------- Quickly and Easily Pass Google Exam with Associate-Cloud-Engineer real Dumps Updated on Feb-2025 Realistic Associate-Cloud-Engineer Dumps Questions To Gain Brilliant Result NEW QUESTION 154You used the gcloud container clusters command to create two Google Cloud Kubernetes (GKE) clusters prod-cluster and dev-cluster.* prod-cluster is a standard cluster.* dev-cluster is an auto-pilot duster.When you run the Kubect1 get nodes command, you only see the nodes from prod-cluster Which commands should you run to check the node status for dev-cluster?         NEW QUESTION 155Your project has all its Compute Engine resources in the europe-west1 region. You want to set europe-west1 as the default region for gcloud commands. What should you do?  Use Cloud Shell instead of the command line interface of your device. Launch Cloud Shell after you navigate to a resource in the europe-west1 region. The europe-west1 region will automatically become the default region.  Use “gcloud config set compute/region europe-west1” to set the default region for future gcloud commands.  Use “gcloud config set compute/zone europe-west1” to set the default region for future gcloud commands.  Create a VPN from on-premises to a subnet in europe-west1, and use that connection when executing gcloud commands. A is not correct because Cloud Shell will not default to the location that it’s launched from.B is correct because this will ensure that the relevant region is used when not overwritten by a command parameter.C is not correct because this command should be used to set a zone, not a region.D is not correct because a VPN to a specific subnet does not have any effect on the gcloud command region.https://cloud.google.com/compute/docs/regions-zones/changing-default-zone-regionNEW QUESTION 156You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment.What should you do?  Use gcloud to create the new project, and then deploy your application to the new project.  Use gcloud to create the new project and to copy the deployed application to the new project.  Create a Deployment Manager configuration file that copies the current App Engine deployment into a new project.  Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project. gcloud can be used to create a new project and the gcloud app deploy can point to the new project.NEW QUESTION 157Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company’s SSO provider. What should you do?  In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.  In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.  Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.  Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications. NEW QUESTION 158All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States (US). What should you do?  Create a folder to contain all the dev projects Create an organization policy to limit resources in US locations.  Create an organization to contain all the dev projects. Create an Identity and Access Management (IAM) policy to limit the resources in US regions.  Create an Identity and Access Management <IAM) policy to restrict the resources locations in the US. Apply the policy to all dev projects.  Create an Identity and Access Management (IAM)policy to restrict the resources locations in all dev projects. Apply the policy to all dev roles. NEW QUESTION 159Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:* Instances in tier #1 must communicate with tier #2.* Instances in tier #2 must communicate with tier #3.What should you do?  1. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.1.0/24)* Protocols: allow all  1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow TCP:80802. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow TCP: 8080  1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow all  1. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow TCP: 80802. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to10.0.1.0/24)* Protocols: allow TCP: 8080 Explanation1. Create an ingress firewall rule with the following settings: “¢ Targets: all instances with tier #2 service account “¢ Source filter: all instances with tier #1 service account “¢ Protocols: allow TCP:8080 2. Create an ingress firewall rule with the following settings: “¢ Targets: all instances with tier #3 service account “¢ Source filter: all instances with tier #2 service account “¢ Protocols: allow TCP: 8080NEW QUESTION 160You keep attempting to execute a command, and while there’s no error being thrown, you suspect something is going wrong. You want to check out the gcloud logs. However, you can’t recall in which directory they’re located. Your script skills are not what they could be, so you can’t rely on using those fancy command line skills.Which command could you run to show you where the log directory is located?  google logs  gcloud info  gcloud logging  gcloud NEW QUESTION 161You have created an application that is packaged into a Docker image. You want to deploy the Docker image as a workload on Google Kubernetes Engine. What should you do?  Upload the image to Cloud Storage and create a Kubernetes Service referencing the image  Upload the image to Cloud Storage and create a Kubernetes Deployment referencing the image  Upload the image to Container Registry and create a Kubernetes Service referencing the image.  Upload the image to Container Registry and create a Kubernetes Deployment referencing the mage Upload your docker image on container registry then give a ref while creating deployment.NEW QUESTION 162You need to reduce GCP service costs for a division of your company using the fewest possible steps. You need to turn off all configured services in an existing GCP project. What should you do?  1. Verify that you are assigned the Project Owners IAM role for this project.2. Locate the project in the GCP console, click Shut down and then enter the project ID.  1. Verify that you are assigned the Project Owners IAM role for this project.2. Switch to the project in the GCP console, locate the resources and delete them.  1. Verify that you are assigned the Organizational Administrator IAM role for this project.2. Locate the project in the GCP console, enter the project ID and then click Shut down.  1. Verify that you are assigned the Organizational Administrators IAM role for this project.2. Switch to the project in the GCP console, locate the resources and delete them. No need of giving Organization admin role for doing this.If you have the project owner role, you can locate the project and shut it down.NEW QUESTION 163You need to enable traffic between multiple groups of Compute Engine instances that are currently running two different GCP projects. Each group of Compute Engine instances is running in its own VPC. What should you do?  Verify that both projects are in a GCP Organization. Create a new VPC and add all instances.  Verify that both projects are in a GCP Organization. Share the VPC from one project and request that the Compute Engine instances in the other project use this shared VPC.  Verify that you are the Project Administrator of both projects. Create two new VPCs and add all instances.  Verify that you are the Project Administrator of both projects. Create a new VPC and add all instances. NEW QUESTION 164You have an application that receives SSL-encrypted TCP traffic on port 443. Clients for this application are located all over the world. You want to minimize latency for the clients. Which load balancing option should you use?  HTTPS Load Balancer  Network Load Balancer  SSL Proxy Load Balancer  Internal TCP/UDP Load Balancer. Add a firewall rule allowing ingress traffic from 0.0.0.0/0 on the target instances. Reference:https://cloud.google.com/load-balancing/docs/sslNEW QUESTION 165You are building an application that processes data files uploaded from thousands of suppliers. Your primary goals for the application are data security and the expiration of aged dat a. You need to design the application to:* Restrict access so that suppliers can access only their own data.* Give suppliers write access to data only for 30 minutes.* Delete data that is over 45 days old.You have a very short development cycle, and you need to make sure that the application requires minimal maintenance. Which two strategies should you use? (Choose two.)  Build a lifecycle policy to delete Cloud Storage objects after 45 days.  Use signed URLs to allow suppliers limited time access to store their objects.  Set up an SFTP server for your application, and create a separate user for each supplier.  Build a Cloud function that triggers a timer of 45 days to delete objects that have expired.  Develop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than 45 days. (A) Object Lifecycle ManagementDeleteThe Delete action deletes an object when the object meets all conditions specified in the lifecycle rule.Exception: In buckets with Object Versioning enabled, deleting the live version of an object causes it to become a noncurrent version, while deleting a noncurrent version deletes that version permanently.https://cloud.google.com/storage/docs/lifecycle#delete(B) Signed URLsThis page provides an overview of signed URLs, which you use to give time-limited resource access to anyone in possession of the URL, regardless of whether they have a Google accounthttps://cloud.google.com/storage/docs/access-control/signed-urlsNEW QUESTION 166You need to update a deployment in Deployment Manager without any resource downtime in the deployment. Which command should you use?  gcloud deployment-manager deployments create –config <deployment-config- path>  gcloud deployment-manager deployments update –config <deployment-config- path>  gcloud deployment-manager resources create –config <deployment-config-path>  gcloud deployment-manager resources update –config <deployment-config-path> https://cloud.google.com/sdk/gcloud/reference/deployment-manager/deployments/updateNEW QUESTION 167You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?  Use a custom mode VPC network, configure static routes, and use active/passive routing  Use an automatic mode VPC network, configure static routes, and use active/active routing  Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing  Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing NEW QUESTION 168Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?  Link the acquired company’s projects to your company’s billing account.  Configure the acquired company’s billing account and your company’s billing account to export the billing data into the same BigQuery dataset.  Migrate the acquired company’s projects into your company’s GCP organization. Link the migrated projects to your company’s billing account.  Create a new GCP organization and a new billing account. Migrate the acquired company’s projects and your company’s projects into the new GCP organization and link the projects to the new billing account. NEW QUESTION 169You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection.You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?  Use the GCP Console to transfer the file instead of gsutil.  Enable parallel composite uploads using gsutil on the file transfer.  Decrease the TCP window size on the machine initiating the transfer.  Change the storage class of the bucket from Nearline to Multi-Regional.  Loading … Start your Associate-Cloud-Engineer Exam Questions Preparation: https://www.examslabs.com/Google/Google-Cloud-Certified/best-Associate-Cloud-Engineer-exam-dumps.html --------------------------------------------------- Images: https://blog.examslabs.com/wp-content/plugins/watu/loading.gif https://blog.examslabs.com/wp-content/plugins/watu/loading.gif --------------------------------------------------- --------------------------------------------------- Post date: 2025-02-05 09:07:28 Post date GMT: 2025-02-05 09:07:28 Post modified date: 2025-02-05 09:07:28 Post modified date GMT: 2025-02-05 09:07:28