最新的Google Associate-Cloud-Engineer免費考試真題

問題1

Your company has developed a new application that consists of multiple microservices. You want to deploy the application to Google Kubernetes Engine (GKE), and you want to ensure that the cluster can scale as more applications are deployed in the future. You want to avoid manual intervention when each new application is deployed. What should you do?

A. Create a GKE cluster with autoscaling enabled on the node pool. Set a minimum and maximum for the size of the node pool.

B. Deploy the application on GKE, and add a VerticalPodAutoscaler to the deployment.

C. Create a separate node pool for each application, and deploy each application to its dedicated node pool.

D. Deploy the application on GKE, and add a HorizontalPodAutoscaler to the deployment.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題2

You have set a firewall rule that will permit inbound connections to a VM instance named server-
2.
You want to apply this rule only if there is not another rule that would deny that traffic. What priority would you give to this rule?

A. 1000

B. 1

C. 0

D. 65535

正確答案: D

說明：（僅 Fast2test 成員可見）

問題3

You are managing the security configuration of your company's Google Cloud organization. The Operations team needs specific permissions on both a Google Kubernetes Engine (GKE) cluster and a Cloud SQL instance. Two predefined Identity and Access Management (IAM) roles exist that contain a subset of the permissions needed by the team. You need to configure the necessary IAM permissions for this team while following Google-recommended practices. What should you do?

A. Create a custom IAM role that includes only the required permissions from the predefined roles.

B. Create a custom IAM role that combines the permissions from the two relevant predefined roles.

C. Grant the team the two predefined IAM roles.

D. Grant the team the IAM roles of Kubernetes Engine Admin and Cloud SQL Admin.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題4

You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application.
You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce- , that has no overlapping IP ranges with the first VPC. This instance needs to connect to the network application on GKE. You want to minimize effort. What should you do?

A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal
3. Peer the two VPCs together.
4. Configure the Compute Engine instance to use the address of the load balancer that has been created.

B. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.
2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.
3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.
4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.

C. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Set the service's externalTrafficPolicy to Cluster.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題5

You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions. You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?

A. Create a single budget for all projects and configure budget alerts on this budget.

B. Create a single billing account for all sandbox projects and enable BigQuery billing exports.
Create a Data Studio dashboard to plot the spending per project.

C. Create a budget per project and configure budget alerts on all of these budgets.

D. Create a separate billing account per sandbox project and enable BigQuery billing exports.
Create a Data Studio dashboard to plot the spending per billing account.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題6

Which of the following IP address would you specify to define a CIDR range that will apply to all the destination addresses?

A. 192.168.0.0/16

B. 10.0.0.0/8

C. 172.16.0.0/12

D. 0.0.0.0/0

正確答案: D

問題7

You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?

A. Configure an HTTP(S) load balancer.

B. Configure an external TCP proxy load balancer.

C. Configure an external SSL proxy load balancer.

D. Configure an internal TCP load balancer.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題8

A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs.
You want to minimize cost. What should you do?

A. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.

B. Enable node auto-provisioning on the GKE cluster.

C. Create a VerticalPodAutscaler for those workloads.

D. Create a node pool with preemptible VMs and GPUs attached to those VMs.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題9

You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone. You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?

A. Create a Metadata entry on the Compute Engine page with key compute/zone and value europe- west1-d

B. In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.

C. Set the europe-west1-d zone as the default zone using the gcloud config subcommand.

D. In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題10

You need to manage a Cloud Spanner Instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?

A. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%.
Use database query statistics to identity queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.

B. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45%.
If you exceed this threshold, add nodes lo your instance.

C. Create an alert in Cloud Monitoring to alert when the percentage ot high priority CPU utilization reaches 45%.
Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.

D. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%.
If you exceed this threshold, add nodes to your instance.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題11

An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination. What should you do?

A. View System Event Logs in Stackdriver. Search for the service account associated with the user.

B. View the Admin Activity log in Stackdriver. Search for the service account associated with the user.

C. View System Event Logs in Stackdriver. Search for the user's email as the principal.

D. View Data Access audit logs in Stackdriver. Search for the user's email as the principal.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題12

You are creating a Google Kubernetes Engine (GKE) cluster with a cluster autoscaler feature enabled. You need to make sure that each node of the cluster will run a monitoring pod that sends container metrics to a third-party monitoring solution. What should you do?

A. Reference the monitoring pod in a cluster initializer at the GKE cluster creation time.

B. Deploy the monitoring pod in a StatefulSet object.

C. Deploy the monitoring pod in a DaemonSet object.

D. Reference the monitoring pod in a Deployment object.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題13

You installed the Google Cloud CLI on your workstation and set the proxy configuration.
However, you are worried that your proxy credentials will be recorded in the gcloud CLI logs. You want to prevent your proxy credential from being logged. What should you do?

A. Configure username and password by using gcloud config set proxy/username and gcloud config set proxy/password commands.

B. Provide values for CLOUDSDK_PROXY_USERNAME and CLOUDSDK_PROXY_PASSWORD in the gcloud CLI tool configuration file.

C. Set the CLOUDSDK_PROXY_USERNAME and CLOUDSDK_PROXY_PASSWORD properties by using environment variables in your command line tool.

D. Encode username and password in sha256 encoding, and save in to a text file. Use filename as a value in the gcloud config set core/custom_ca_certs_file command.

正確答案: C

最新的Google Associate Cloud Engineer - Associate-Cloud-Engineer免費考試真題

聯系我們

站內鏈接

最新更新