Newest Google Associate-Cloud-Engineer Practice Questions at Zero Cost

Get a glimpse of the real Associate-Cloud-Engineer certification exam challenges with our free Google Associate-Cloud-Engineer practice test questions.

Question 1

Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire cloud infrastructure through code. How can you ensure that the pipeline has appropriate permissions while your system is following security best practices?

A* Add a step for human approval to the CI/CD pipeline before the execution of the infrastructure
provisioning.
* Use the human approvals IAM account for the provisioning.

B* Attach a single service account to the compute instances.
* Add minimal rights to the service account.
* Allow the service account to impersonate a Cloud Identity user with elevated permissions to create, update, or delete resources.

C* Attach a single service account to the compute instances.
* Add all required Identity and Access Management (IAM) permissions to this service account to create, update, or delete resources

D* Create multiple service accounts, one for each pipeline with the appropriate minimal Identity and
Access Management (IAM) permissions.
* Use a secret manager service to store the key files of the service accounts.
* Allow the CI/CD pipeline to request the appropriate secrets during the execution of the pipeline.

Correct Answer: 1

Question 2

Your continuous integration and delivery (CI/CD) server can't execute Google Cloud actions in a specific project because of permission issues. You need to validate whether the used service account has the appropriate roles in the specific project. What should you do?

AOpen the Google Cloud console, and run a query to determine which resources this service account can access.

BOpen the Google Cloud console, and run a query of the audit logs to find permission denied errors for this service account.

COpen the Google Cloud console, and check the organization policies.

DOpen the Google Cloud console, and check the Identity and Access Management (IAM) roles assigned to the service account at the project or inherited from the folder or organization levels.

Correct Answer: 2

Question 3

After a recent security incident, your startup company wants better insight into what is happening in the Google Cloud environment. You need to monitor unexpected firewall changes and instance creation. Your company prefers simple solutions. What should you do?

AUse Cloud Logging filters to create log-based metrics for firewall and instance actions. Monitor the changes and set up reasonable alerts.

BInstall Kibana on a compute Instance. Create a log sink to forward Cloud Audit Logs filtered for firewalls and
compute instances to Pub/Sub. Target the Pub/Sub topic to push messages to the Kibana instance. Analyze the logs on Kibana in real time.

CTurn on Google Cloud firewall rules logging, and set up alerts for any insert, update, or delete events.

DCreate a log sink to forward Cloud Audit Logs filtered for firewalls and compute instances to Cloud Storage.
Use BigQuery to periodically analyze log events in the storage bucket.

Correct Answer: 3

Question 4

You are planning to migrate your on-premises data to Google Cloud. The data includes:

* 200 TB of video files in SAN storage

* Data warehouse data stored on Amazon Redshift

* 20 GB of PNG files stored on an S3 bucket

You need to load the video files into a Cloud Storage bucket, transfer the data warehouse data into BigQuery, and load the PNG files into a second Cloud Storage bucket. You want to follow Google-recommended practices and avoid writing any code for the migration. What should you do?

AUse gcloud storage for the video files. Dataflow for the data warehouse data, and Storage Transfer Service for the PNG files.

BUse Transfer Appliance for the videos. BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files.

CUse Storage Transfer Service for the video files, BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files.

DUse Cloud Data Fusion for the video files, Dataflow for the data warehouse data, and Storage Transfer Service for the PNG files.

Correct Answer: 4

Question 5

Your company's security vulnerability management policy wonts 3 member of the security team to have visibility into vulnerabilities and other OS metadata for a specific Compute Engine instance This Compute Engine instance hosts a critical application in your Goggle Cloud project. You need to implement your company's security vulnerability management policy. What should you dc?

A* Ensure that the Ops Agent Is Installed on the Compute Engine instance.
* Create a custom metric in the Cloud Monitoring dashboard.
* Provide the security team member with access to this dashboard.

B* Ensure that the Ops Agent is installed on tie Compute Engine instance.
* Provide the security team member roles/configure.inventoryViewer permission.

C* Ensure that the OS Config agent Is Installed on the Compute Engine instance.
* Provide the security team member roles/configure.vulnerabilityViewer permission.

D* Ensure that the OS Config agent is installed on the Compute Engine instance
* Create a log sink Co a BigQuery dataset.
* Provide the security team member with access to this dataset.

Correct Answer: 5

Master the Google Cloud Engineer Associate exam like never before! You’ve reviewed the free Associate-Cloud-Engineer practice questions, but the actual Google Cloud Certified certification exam demands more. Elevate your preparation with Certsmarket premium Associate-Cloud-Engineer practice exam questions.

Explore Free Google Associate-Cloud-Engineer Practice Questions for Exam Mastery

Our Community

What our students say about us?