最新版を今すぐ試そう！[2024年01月] 試験準備には欠かさない！Associate-Cloud-Engineer問題集
有能な受験者がシミュレーション済みのAssociate-Cloud-Engineer試験PDF問題を試そう
Google Associate-Cloud-Engineer試験では、アプリケーションの展開、インフラストラクチャの構成と展開、GCPリソースの管理、GCPアプリケーションの監視とトラブルシューティングなど、GCPのさまざまな側面をカバーしています。この試験では、Google Compute Engine、Google Kubernetes Engine、Google Cloud StorageなどのGCPツールとテクノロジーを使用することにおける個人の習熟度も評価しています。この試験は、複数選択の質問と、実際のシナリオをシミュレートする実践的なタスクの組み合わせです。
Google Associate-Cloud-Engineer認定試験は、クラウドコンピューティングにおける知識と専門知識を検証するための貴重な資格です。認定試験は、Google Cloudプラットフォームでクラウドソリューションを展開および管理する経験のある個人に適しています。また、クラウドコンピューティングのスキルと知識を向上させ、IT業界でキャリアを進めたい個人にも優れた機会です。
Google Associate-Cloud-Engineer認定は、個人がクラウドコンピューティングの習熟度を示し、雇用市場で競争力を獲得するための優れた方法です。クラウドコンピューティングの専門家に対する需要が高いため、この認定を取得することで、多くのキャリアの機会が開かれ、個人がクラウドコンピューティング業界でキャリアを前進させることができます。
質問 # 18
You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?
- A. Add the support team group to the roles/spanner.databaseReader role.
- B. Add the support team group to the roles/stackdriver.accounts.viewer role.
- C. Add the support team group to the roles/monitoring.viewer role
- D. Add the support team group to the roles/spanner.databaseUser role.
正解：D
質問 # 19
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?
- A. Create a node pool with preemptible VMs and GPUs attached to those VMs.
- B. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
- C. Enable node auto-provisioning on the GKE cluster.
- D. Create a VerticalPodAutscaler for those workloads.
正解：C
解説：
Explanation
auto-provisioning = Attaches and deletes node pools to cluster based on the requirements. Hence creating a GPU node pool, and auto-scaling would be better
https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-provisioning
質問 # 20
For analysis purposes, you need to send all the logs from all of your Compute Engine instances to a BigQuery dataset called platform-logs. You have already installed the Stackdriver Logging agent on all the instances. You want to minimize cost. What should you do?
- A. 1. In Stackdriver Logging, create a filter to view only Compute Engine logs.
2. Click Create Export.
3. Choose BigQuery as Sink Service, and the platform-logsdataset as Sink Destination. - B. 1. Give the BigQuery Data Editor role on the platform-logsdataset to the service accounts used by your instances.
2. Update your instances' metadata to add the following value: logs-destination:
bq://platform-logs. - C. 1. In Stackdriver Logging, create a logs export with a Cloud Pub/Sub topic called logsas a sink.
2. Create a Cloud Function that is triggered by messages in the logstopic.
3. Configure that Cloud Function to drop logs that are not from Compute Engine and to insert Compute Engine logs in the platform-logsdataset. - D. 1. Create a Cloud Function that has the BigQuery User role on the platform-logsdataset.
2. Configure this Cloud Function to create a BigQuery Job that executes this query:
INSERT INTO dataset.platform-logs (timestamp, log)
SELECT timestamp, log FROM compute.logs
WHERE timestamp > DATE_SUB(CURRENT_DATE(), INTERVAL 1 DAY)
3. Use Cloud Scheduler to trigger this Cloud Function once a day.
正解：A
解説：
https://cloud.google.com/logging/docs/export/configure_export_v2
質問 # 21
You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?
- A. 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic.
2. Call your application on Cloud Run from the Cloud Function for every message. - B. 1. Create a service account.
2. Give the Cloud Run Invoker role to that service account for your Cloud Run application.
3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint. - C. 1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal.
2. Create a Cloud Pub/Sub subscription for that topic.
3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application. - D. 1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run.
2. Create a Cloud Pub/Sub subscription for that topic.
3. Make your application pull messages from that subscription.
正解：B
質問 # 22
&. You are working for a hospital that stores Its medical images in an on-premises data room. The hospital wants to use Cloud Storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to Cloud Storage. You need to design and implement a solution. What should you do?
- A. Create a script that uses the gsutil command line interface to synchronize the on-premises storage with Cloud Storage Schedule the script as a cron job
- B. In the Cloud Console, go to Cloud Storage Upload the relevant images to the appropriate bucket
- C. Deploy a Dataflow job from the batch template "Datastore lo Cloud Storage" Schedule the batch job on the desired interval
- D. Create a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub lope
正解：C
質問 # 23
You are working for a hospital that stores Its medical images in an on-premises data room. The hospital wants to use Cloud Storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to Cloud Storage. You need to design and implement a solution. What should you do?
- A. Deploy a Dataflow job from the batch template "Datastore lo Cloud Storage" Schedule the batch job on the desired interval
- B. In the Cloud Console, go to Cloud Storage Upload the relevant images to the appropriate bucket
- C. Create a script that uses the gsutil command line interface to synchronize the on-premises storage with Cloud Storage Schedule the script as a cron job
- D. Create a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub lope
正解：C
解説：
they require cloud storage for archival and the want to automate the process to upload new medical image to cloud storage, hence we go for gsutil to copy on-prem images to cloud storage and automate the process via cron job. whereas Pub/Sub listens to the changes in the Cloud Storage bucket and triggers the pub/sub topic, which is not required.
質問 # 24
You have deployed multiple Linux instances on Compute Engine. You plan on adding more instances in the coming weeks. You want to be able to access all of these instances through your SSH client over me Internet without having to configure specific access on the existing and new instances. You do not want the Compute Engine instances to have a public IP. What should you do?
- A. Configure Cloud Identity-Aware Proxy for SSH and TCP resources.
- B. Create an SSH keypair and store the public key as a project-wide SSH Key
- C. Configure Cloud Identity-Aware Proxy (or HTTPS resources
- D. Create an SSH keypair and store the private key as a project-wide SSH Key
正解：A
解説：
Use IAP TCP to enable access to VM instances that do not have external IP addresses or do not permit direct access over the internet.
https://cloud.google.com/iap/docs/using-tcp-forwarding
質問 # 25
Your company developed a mobile game that is deployed on Google Cloud. Gamers are connecting to the game with their personal phones over the Internet. The game sends UDP packets to update the servers about the gamers' actions while they are playing in multiplayer mode. Your game backend can scale over multiple virtual machines (VMs), and you want to expose the VMs over a single IP address. What should you do?
- A. Configure an Internal UDP load balancer in front of the application servers.
- B. Configure an External HTTP(s) load balancer in front of the application servers.
- C. Configure an SSL Proxy load balancer in front of the application servers.
- D. Configure an External Network load balancer in front of the application servers.
正解：A
解説：
Explanation
cell phones are sending UDP packets and the only that can receive that type of traffic is a External Network TCP/UDP https://cloud.google.com/load-balancing/docs/network
https://cloud.google.com/load-balancing/docs/choosing-load-balancer#lb-decision-tree
質問 # 26
You are using Data Studio to visualize a table from your data warehouse that is built on top of BigQuery. Data is appended to the data warehouse during the day. At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Data Studio are broken, and you want to analyze the problem. What should you do?
- A. Review the Error Reporting page in the Cloud Console to find any errors.
- B. In Cloud Logging create a filter for your Data Studio report
- C. Use Cloud Debugger to find out why the data was not refreshed correctly
- D. Use the BigQuery interface to review the nightly Job and look for any errors
正解：C
解説：
Cloud Debugger helps inspect the state of an application, at any code location, without stopping or slowing down the running app // https://cloud.google.com/debugger/docs
質問 # 27
You are deploying a production application on Compute Engine. You want to prevent anyone from accidentally destroying the instance by clicking the wrong button. What should you do?
- A. Disable Automatic restart on the instance.
- B. Disable the flag "Delete boot disk when instance is deleted."
- C. Enable delete protection on the instance.
- D. Enable Preemptibility on the instance.
正解：B
解説：
Explanation
Preventing Accidental VM Deletion This document describes how to protect specific VM instances from deletion by setting the deletionProtection property on an Instance resource. To learn more about VM instances, read the Instances documentation. As part of your workload, there might be certain VM instances that are critical to running your application or services, such as an instance running a SQL server, a server used as a license manager, and so on. These VM instances might need to stay running indefinitely so you need a way to protect these VMs from being deleted. By setting the deletionProtection flag, a VM instance can be protected from accidental deletion. If a user attempts to delete a VM instance for which you have set the deletionProtection flag, the request fails. Only a user that has been granted a role with compute.instances.create permission can reset the flag to allow the resource to be deleted.
https://cloud.google.com/compute/docs/instances/preventing-accidental-vm-deletion
質問 # 28
You need to verify that a Google Cloud Platform service account was created at a particular time.
What should you do?
- A. Filter the Activity log to view the Data Access category. Filter the Resource type to Google Project.
- B. Filter the Activity log to view the Configuration category. Filter the Resource type to Google Project.
- C. Filter the Activity log to view the Data Access category. Filter the Resource type to Service Account.
- D. Filter the Activity log to view the Configuration category. Filter the Resource type to Service Account.
正解：D
解説：
You don't need data access logs and configuration counts as creation.
質問 # 29
The development team needs a regional MySQL database with point-in-time recovery for a new proof- of-concept application. What's the most inexpensive way to enable point-in-time recovery?
- A. Create hourly back-ups.
- B. Replicate to a Cloud Spanner database.
- C. Create a read replica in the same region.
- D. Enable binary logging.
正解：D
質問 # 30
You have an object in a Cloud Storage bucket that you want to share with an external company. The object contains sensitive data. You want access to the content to be removed after four hours. The external company does not have a Google account to which you can grant specific user-based access privileges. You want to use the most secure method that requires the fewest steps. What should you do?
- A. Create a new Cloud Storage bucket specifically for the external company to access. Copy the object to that bucket. Delete the bucket after four hours have passed.
- B. Set object access to 'public' and use object lifecycle management to remove the object after four hours.
- C. Configure the storage bucket as a static website and furnish the object's URL to the company. Delete the object from the storage bucket after four hours.
- D. Create a signed URL with a four-hour expiration and share the URL with the company.
正解：D
解説：
Explanation
Signed URLs are used to give time-limited resource access to anyone in possession of the URL, regardless of whether they have a Google account. https://cloud.google.com/storage/docs/access-control/signed-urls
質問 # 31
Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?
- A. Create a deny-all egress firewall rule on the VPC network.
- B. Create the instance without a public IP address.
- C. Create the instance with Private Google Access enabled.
- D. Create a route on the VPC to route all traffic to the instance over the VPN tunnel.
正解：B
解説：
Private Google Access allows access to the external IP addresses. which is against the requirements.
質問 # 32
You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?
- A. Start the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.
- B. Use the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.
- C. Reserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.
- D. Reserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.
正解：C
解説：
IP 10.0.3.21 is internal by default, and to ensure that it will be static non-changing it should be selected as static internal ip address.
質問 # 33
Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider. What should you do?
- A. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.
- B. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
- C. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
- D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.
正解：C
解説：
Explanation
https://support.google.com/cloudidentity/answer/6262987?hl=en&ref_topic=7558767
質問 # 34
You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?
- A. Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
- B. Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
- C. Create a service account with an access scope. Use the access scope
'https://www.googleapis.com/auth/cloud-platform'. - D. Create a service account with an access scope. Use the access scope
'https://www.googleapis.com/auth/devstorage.write_only'.
正解：A
解説：
Explanation
https://cloud.google.com/iam/docs/understanding-service-accounts#using_service_accounts_with_compute_engi
https://cloud.google.com/storage/docs/access-control/iam-roles
質問 # 35
......
検証済み材料を使うならまずAssociate-Cloud-Engineerテストエンジンを試そう：https://jp.fast2test.com/Associate-Cloud-Engineer-premium-file.html
合格するに必要な問題集はAssociate-Cloud-Engineer試験：https://drive.google.com/open?id=11gNEI7TOOoiu_94A7XWe65FlVLKZ99Mv