Google Cloud Certified - Associate Cloud

Engineer
Google Associate-Cloud-Engineer
Version Demo

Total Demo Questions: 10

Total Premium Questions: 247

https://examprince.com

support@examprince.com
QUESTION NO: 1

Your organization has a dedicated person who creates and manages all service accounts for Google Cloud projects. You
need to assign this person the minimum role for projects. What should you do?

A. Add the user to roles/iam.roleAdmin role.

B. Add the user to roles/iam.securityAdmin role.

C. Add the user to roles/iam.serviceAccountUser role.

D. Add the user to roles/iam.serviceAccountAdmin role.

ANSWER: D

QUESTION NO: 2

You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is
currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your
application can use Cloud Pub/Sub. What should you do?

A. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.

B. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.

C. Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the
application being deployed.

D. Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on
the first connection to Cloud Pub/Sub.

ANSWER: A

QUESTION NO: 3

You are building an application that processes data files uploaded from thousands of suppliers. Your primary goals for the
application are data security and the expiration of aged data. You need to design the application to:

• Restrict access so that suppliers can access only their own data.

• Give suppliers write access to data only for 30 minutes.

• Delete data that is over 45 days old.

You have a very short development cycle, and you need to make sure that the application requires minimal maintenance.
Which two strategies should you use? (Choose two.)

ExamPrince - Pass Your Next Certification Exam Fast!

B. Use signed URLs to allow suppliers limited time access to store their objects.

C. Set up an SFTP server for your application, and create a separate user for each supplier.

D. Build a Cloud function that triggers a timer of 45 days to delete objects that have expired.

E. Develop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than 45 days.

ANSWER: A E

QUESTION NO: 4

Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the
datasets. You want a solution that follows Google-recommended practices. What should you do?

A. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.

B. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.

C. Create a custom role by removing delete permissions, and add users to that role only.

D. Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.

ANSWER: B

QUESTION NO: 5

You need to update a deployment in Deployment Manager without any resource downtime in the deployment. Which
command should you use?

A. gcloud deployment-manager deployments create --config

B. gcloud deployment-manager deployments update --config

C. gcloud deployment-manager resources create --config

D. gcloud deployment-manager resources update --config

ANSWER: B

Explanation:

Reference: https://cloud.google.com/sdk/gcloud/reference/deployment-manager/deployments/update

ExamPrince - Pass Your Next Certification Exam Fast!

You need to create a new billing account and then link it with an existing Google Cloud Platform project. What should you
do?

A. Verify that you are Project Billing Manager for the GCP project. Update the existing project to link it to the existing billing
account.

B. Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing
account to the existing project.

C. Verify that you are Billing Administrator for the billing account. Create a new project and link the new project to the
existing billing account.

D. Verify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing
account.

ANSWER: B

QUESTION NO: 7

Your company implemented BigQuery as an enterprise data warehouse. Users from multiple business units run queries on
this data warehouse. However, you notice that query costs for BigQuery are very high, and you need to control costs. Which
two methods should you use? (Choose two.)

A. Split the users from business units to multiple projects.

B. Apply a user- or project-level custom query quota for BigQuery data warehouse.

C. Create separate copies of your BigQuery data warehouse for each business unit.

D. Split your BigQuery data warehouse into multiple data warehouses for each business unit.

E. Change your BigQuery query model from on-demand to flat rate. Apply the appropriate number of slots to each Project.

ANSWER: B E

QUESTION NO: 8

You need to track and verity modifications to a set of Google Compute Engine instances in your Google Cloud project. In
particular, you want to verify OS system patching events on your virtual machines (VMs). What should you do?

A. Review the Compute Engine activity logs Select and review the Admin Event logs

B. Review the Compute Engine activity logs Select and review the System Event logs

C. Install the Cloud Logging Agent In Cloud Logging review the Compute Engine syslog logs

D. Install the Cloud Logging Agent In Cloud Logging, review the Compute Engine operation logs

ExamPrince - Pass Your Next Certification Exam Fast!

QUESTION NO: 9

The sales team has a project named Sales Data Digest that has the ID acme-data-digest You need to set up similar Google
Cloud resources for the marketing team but their resources must be organized independently of the sales team. What should
you do?

A. Grant the Project Editor role to the Marketing learn for acme data digest

B. Create a Project Lien on acme-data digest and then grant the Project Editor role to the Marketing team

C. Create another protect with the ID acme-marketing-data-digest for the Marketing team and deploy the resources there

D. Create a new protect named Meeting Data Digest and use the ID acme-data-digest Grant the Project Editor role to the
Marketing team.

ANSWER: C

QUESTION NO: 10

You have deployed multiple Linux instances on Compute Engine. You plan on adding more instances in the coming weeks.
You want to be able to access all of these instances through your SSH client over the internet without having to configure
specific access on the existing and new instances. You do not want the Compute Engine instances to have a public IP. What
should you do?

A. Configure Cloud Identity-Aware Proxy for HTTPS resources.

B. Configure Cloud Identity-Aware Proxy for SSH and TCP resources

C. Create an SSH keypair and store the public key as a project-wide SSH Key.

D. Create an SSH keypair and store the private key as a project-wide SSH Key.

ANSWER: B

ExamPrince - Pass Your Next Certification Exam Fast!