Question 1

You have a number of compute instances belonging to an unmanaged instances group. You need to SSH to one of the Compute Engine instances to run an ad hoc script. You've already authenticated gcloud, however, you don't have an SSH key deployed yet. In the fewest steps possible, what's the easiest way to SSH to the instance?

Options :

A : Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.

B : Use the gcloud compute ssh command.

C : Create a key with the ssh-keygen command. Then use the gcloud compute ssh command.

D : Create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.

Answer: B

Question 2

Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google’s recommended practices. Which storage option should you use?

Options :

A : Multi-Regional Storage

B : Regional Storage

C : Nearline Storage

D : Coldline Storage

Answer: D

Question 3

You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?

Options :

A : Open the Cloud Spanner console to review configurations.

B : Open the IAM & admin console to review IAM policies for Cloud Spanner roles.

C : Go to the Stackdriver Monitoring console and review information for Cloud Spanner.

D :

Go to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.

Answer: D

Question 4

You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?

Options :

A : Use service account credentials in your on-premises application.

B : Use gcloud to create a key file for the service account that has appropriate permissions.

C :

Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.

D :

Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.

Answer: B

Question 5

You have successfully created a development environment in a project for an application. This application

uses Compute Engine and Cloud SQL. Now, you need to create a production environment for this application.

The security team has forbidden the existence of network routes between these 2 environments, and asks you

to follow Google-recommended practices. What should you do?

Options :

A :

Create a new project, enable the Compute Engine and Cloud SQL APIs in that project, and replicate the setup you have created in the development environment.

B :

Create a new production subnet in the existing VPC and a new production Cloud SQL instance in your existing project, and deploy your application using those resources

C :

Create a new project, modify your existing VPC to be a Shared VPC, share that VPC with your new project, and replicate the setup you have in the development environment in that new project, in the Shared VPC.

D :

Ask the security team to grant you the Project Editor role in an existing production project used by another division of your company. Once they grant you that role, replicate the setup you have in the development environment in that project.

Answer: A

Smartly Prepare Exam with Free Online Associate-Cloud-Engineer Practice Test

Buying Options: