Associate-Cloud-Engineer無料問題集「Google Associate Cloud Engineer」

質問 1

You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?

（A）Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Perform the export of logs to Cloud Storage.

（B）Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Direct the auditor to also review the logs for changes to Cloud IAM policy.

（C）Assign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.

（D）Assign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

You have a Compute Engine instance hosting an application used between 9 AM and 6 PM on weekdays.
You want to back up this instance daily for disaster recovery purposes. You want to keep the backups for 30 days. You want the Google-recommended solution with the least management overhead and the least number of services. What should you do?

（A）1. Create a bash script in the instance that copies the content of the disk to Cloud Storage.
2.Create a bash script in the instance that deletes data older than 30 days in the backup Cloud Storage bucket.
3.Configure the instance's crontab to execute these scripts daily at 1:00 AM.

（B）1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk.
2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters:
-Schedule frequency: Daily
-Start time: 1:00 AM - 2:00 AM
-Autodelete snapshots after 30 days

（C）1. Create a Cloud Function that creates a snapshot of your instance's disk.
2.Create a Cloud Function that deletes snapshots that are older than 30 days.
3.Use Cloud Scheduler to trigger both Cloud Functions daily at 1:00 AM.

（D）1. Update your instances' metadata to add the following value: snapshot-schedule: 0 1 * * *
2. Update your instances' metadata to add the following value: snapshot-retention: 30

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You have a workload running on Compute Engine that is critical to your business. You want to ensure that the data on the boot disk of this workload is backed up regularly. You need to be able to restore a backup as quickly as possible in case of disaster. You also want older backups to be cleaned automatically to save on cost. You want to follow Google-recommended practices. What should you do?

（A）Create a cron job to create a new disk from the disk using gcloud.

（B）Create a Cloud Task to create an image and export it to Cloud Storage.

（C）Create a snapshot schedule for the disk using the desired interval.

（D）Create a Cloud Function to create an instance template.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You have a VM instance running in a VPC with single-stack subnets. You need to ensure that the VM instance has a fixed IP address so that other services hosted in the same VPC can communicate with the VM.
You want to follow Google-recommended practices while minimizing cost. What should you do?

（A）Reserve a new static external IPv6 address and assign the new IP address to the VM.

（B）Reserve a new static external IP address and assign the new IP address to the VM.

（C）Promote the existing IP address of the VM to become a static external IP address.

（D）Promote the existing IP address of the VM to become a static internal IP address.

正解：C 解答を投票する

質問 5

You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.

You check the status of the deployed pods and notice that one of them is still in PENDING status:

You want to find out why the pod is stuck in pending status. What should you do?

（A）Review details of the myapp-service Service object and check for error messages.

（B）Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.

（C）Review details of the myapp-deployment Deployment object and check for error messages.

（D）View logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

You have a managed instance group comprised of preemptible VM's. All of the VM's keepdeleting and recreating themselves every minute. What is a possible cause of thisbehavior?

（A）Your zonal capacity is limited, causing all preemptible VM's to be shutdown torecover capacity. Try deploying your group to another zone.

（B）Your managed instance group's VM's are toggled to only last 1 minute inpreemptible settings.

（C）Your managed instance group's health check is repeatedly failing, either to amisconfigured health check or misconfigured firewall rules not allowing the healthcheck to access the instance

（D）You have hit your instance quota for the region.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

You received a JSON file that contained a private key of a Service Account in order to get access to several resources in a Google Cloud project. You downloaded and installed the Cloud SDK and want to use this private key for authentication and authorization when performing gcloud commands. What should you do?

（A）Place the private key file in your home directory and rename it to '' GOOGLE_APPUCATION_CREDENTiALS".

（B）Use the command gcloud auth activate-service-account and point it to the private key

（C）Place the private key file in the installation directory of the Cloud SDK and rename it to "credentials ison"

（D）Use the command gcloud auth login and point it to the private key

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

You have been asked to migrate a docker application from datacenter to cloud. Your solution architect has suggested uploading docker images to GCR in one project and running an application in a GKE cluster in a separate project. You want to store images in the project img-278322 and run the application in the project prod-278986. You want to tag the image as acme_track_n_trace:v1. You want to follow Google- recommended practices. What should you do?

（A）Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace:v1

（B）Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace

（C）Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace

（D）Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace:v1

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Your company uses BigQuery for data warehousing. Over time, many different business units in your company have created 1000+ datasets across hundreds of projects. Your CIO wants you to examine all datasets to find tables that contain an employee_ssn column. You want to minimize effort in performing this task. What should you do?

（A）Write a script that loops through all the projects in your organization and runs a query on INFORMATION_SCHEMA.COLUMNS view to find the employee_ssn column.

（B）Write a Cloud Dataflow job that loops through all the projects in your organization and runs a query on INFORMATION_SCHEMA.COLUMNS view to find employee_ssn column.

（C）Go to Data Catalog and search for employee_ssn in the search box.

（D）Write a shell script that uses the bq command line tool to loop through all the projects in your organization.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?

（A）Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.

（B）Create an Instance Template with Preemptible VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.

（C）Migrate the workload to a Compute Engine Preemptible VM.

（D）Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

Your team is using Linux instances on Google Cloud. You need to ensure that your team logs in to these instances in the most secure and cost efficient way. What should you do?

（A）Use the gcloud compute ssh command with the --tunnel-through-iap flag. Allow ingress traffic from the IP range 35.235.240.0/20 on port 22.

（B）Use a third party tool to provide remote access to the instances.

（C）Attach a public IP to the instances and allow incoming connections from the internet on port 22 for SSH.

（D）Create a bastion host with public internet access. Create the SSH tunnel to the instance through the bastion host.

正解：D 解答を投票する

質問 12

During a recent audit of your existing Google Cloud resources, you discovered several users with email addresses outside of your Google Workspace domain.
You want to ensure that your resources are only shared with users whose email addresses match your domain.
You need to remove any mismatched users, and you want to avoid having to audit your resources to identify mismatched users. What should you do?

（A）Set an organizational policy constraint to limit identities by domain to automatically remove mismatched users.

（B）Set an organizational policy constraint to limit identities by domain, and then retroactively remove the existing mismatched users.

（C）Create a Cloud Scheduler task to regularly scan your projects and delete mismatched users.

（D）Create a Cloud Scheduler task to regularly scan your resources and delete mismatched users.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

You want to configure a solution for archiving data in a Cloud Storage bucket. The solution must be cost- effective. Data with multiple versions should be archived after 30 days. Previous versions are accessed once a month for reporting. This archive data is also occasionally updated at month-end. What should you do?

（A）Add a bucket lifecycle rule that archives data with newer versions after 30 days to Coldline Storage.

（B）Add a bucket lifecycle rule that archives data with newer versions after 30 days to Nearline Storage.

（C）Add a bucket lifecycle rule that archives data from regional storage after 30 days to Coldline Storage.

（D）Add a bucket lifecycle rule that archives data from regional storage after 30 days to Nearline Storage.

正解：B 解答を投票する

質問 14

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in the crm-databases project. You want to follow Google-recommended practices to grant access to the service account in the web-applications project. What should you do?

（A）Grant "project owner" role to crm-databases and roles/bigquery.dataViewer role to web-applications.

（B）Grant roles/bigquery.dataViewer role to crm-databases and appropriate roles to web-applications.

（C）Grant "project owner" role to crm-databases and the web-applications project.

（D）Grant "project owner" for web-applications appropriate roles to crm-databases.

正解：A 解答を投票する

質問 15

You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?

（A）Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.

（B）Create a new App Engine application in the same project. Deploy the new version in that application.
Use the App Engine library to proxy 1% of the requests to the new version.

（C）Create a new App Engine application in the same project. Deploy the new version in that application.Configure your network load balancer to send 1% of the traffic to that new application.

（D）Deploy the new version in the same application and use the --migrate option.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 16

You are creating a Google Kubernetes Engine (GKE) cluster with a cluster autoscaler feature enabled. You need to make sure that each node of the cluster will run a monitoring pod that sends container metrics to a third-party monitoring solution. What should you do?

（A）Reference the monitoring pod in a cluster initializer at the GKE cluster creation time.

（B）Reference the monitoring pod in a Deployment object.

（C）Deploy the monitoring pod in a StatefulSet object.

（D）Deploy the monitoring pod in a DaemonSet object.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

You are performing a monthly security check of your Google Cloud environment and want to know who has access to view data stored in your Google Cloud Project. What should you do?

（A）Create a Data Loss Prevention job.

（B）Review the Identity-Aware Proxy settings for each resource.

（C）Review the IAM permissions for any role that allows for data access.

（D）Enable Audit Logs for all APIs that are related to data storage.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 18

You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task.
You want to make sure the application runs in a similar environment on GCP. What should you do?

（A）Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.

（B）When creating the VM, use Intel Skylake as the CPU platform.

（C）When creating the VM, use machine type n1-standard-96.

（D）Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 19

Your company completed the acquisition of a startup and is now merging the IT systems of both companies.
The startup had a production Google Cloud project in their organization. You need to move this project into your organization and ensure that the project is billed lo your organization. You want to accomplish this task with minimal effort. What should you do?

（A）Create an infrastructure-as-code template tor all resources in the project by using Terraform. and deploy that template to a new project in your organization. Delete the protect from the startup's Google Cloud organization.

（B）Use the projects. move method to move the project to your organization. Update the billing account of the project to that of your organization.

（C）Ensure that you have an Organization Administrator Identity and Access Management (IAM) role assigned to you in both organizations. Navigate to the Resource Manager in the startup's Google Cloud organization, and drag the project to your company's organization.

（D）Create a Private Catalog tor the Google Cloud Marketplace, and upload the resources of the startup's production project to the Catalog. Share the Catalog with your organization, and deploy the resources in your company's project.

正解：C 解答を投票する

Associate-Cloud-Engineer 無料問題集「Google Associate Cloud Engineer」

弊社を連絡する

関連リンク

トップ試験