100%無料Associate-Cloud-Engineer試験問題集リアルGoogle Cloud Certified問題集246解答を掴み取れ！
あなたを余裕でAssociate-Cloud-Engineer試験合格させます！100%試験高合格率保証 [2023]
Google Associate-Cloud-Engineer試験は、複数選択の質問で構成されており、クラウドコンピューティングの基礎、ストレージとコンピューティング、ネットワークの基礎、セキュリティとコンプライアンスなど、さまざまなクラウドコンピューティングの概念に習熟を実証する必要があります。この試験は、Googleクラウドプラットフォームを使用して、組織のニーズを満たすクラウドベースのソリューションを設計および展開する候補者の能力を評価するように設計されています。
Google Associate-Cloud-Engineer（Google Associate Cloud Engineer）認定試験は、Google Cloud Platform（GCP）での作業に興味を持つ個人の知識とスキルをテストするために設計されています。この認定試験は、候補者のGCP上でのアプリケーションの展開、モニタリング、およびメンテナンス能力を評価することに焦点を当てています。試験は、Compute Engine、Storage、Networking、SecurityなどのGCPコアサービスの知識と、それらを効果的に使用する能力を測定します。
質問 # 11
You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA.
What should you do?
- A. Create a Cloud Bigtable cluster and use the HBase API
- B. Download a MongoDB installation package and run it on Compute Engine instances
- C. Deploy MongoDB Alias from the Google Cloud Marketplace
- D. Download a MongoDB installation package, and run it on a Managed Instance Group
正解：D
質問 # 12
You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re-creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?
- A. Create an HTTP load balancer with a backend configuration that references an existing instance group.
Define a balancing mode and set the maximum RPS to 10. - B. Create a managed instance group. Verify that the autoscaling setting is on.
- C. Create a managed instance group. Set the Autohealing health check to healthy (HTTP).
- D. Create an HTTP load balancer with a backend configuration that references an existing instance group.
Set the health check to healthy (HTTP).
正解：C
解説：
Explanation
https://cloud.google.com/compute/docs/instance-groups
https://cloud.google.com/load-balancing/docs/network/transition-to-backend-services#console In order to enable auto-healing, you need to group the instances into a managed instance group.
Managed instance groups (MIGs) maintain the high availability of your applications by proactively keeping your virtual machine (VM) instances available. An auto-healing policy on the MIG relies on an application-based health check to verify that an application is responding as expected. If the auto-healer determines that an application isnt responding, the managed instance group automatically recreates that instance.
It is important to use separate health checks for load balancing and for auto-healing. Health checks for load balancing can and should be more aggressive because these health checks determine whether an instance receives user traffic. You want to catch non-responsive instances quickly, so you can redirect traffic if necessary. In contrast, health checking for auto-healing causes Compute Engine to proactively replace failing instances, so this health check should be more conservative than a load balancing health check.
質問 # 13
You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items.
How should you configure the auditor's permissions?
- A. Select the built-in IAM service Viewer role. Add the user's account to this role.
- B. Create a custom role with view-only project permissions. Add the user's account to the custom role.
- C. Create a custom role with view-only service permissions. Add the user's account to the custom role.
- D. Select the built-in IAM project Viewer role. Add the user's account to this role.
正解：D
解説：
https://cloud.google.com/resource-manager/docs/access-control-proj
質問 # 14
You need to update a deployment in Deployment Manager without any resource downtime in the deployment. Which command should you use?
- A. gcloud deployment-manager deployments create --config <deployment-config- path>
- B. gcloud deployment-manager resources update --config <deployment-config-path>
- C. gcloud deployment-manager deployments update --config <deployment-config- path>
- D. gcloud deployment-manager resources create --config <deployment-config-path>
正解：C
解説：
Update and create resource is not even a command under deployment management service.
https://cloud.google.com/sdk/gcloud/reference/deployment-manager/deployments/update
質問 # 15
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application.
You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce- , that has no overlapping IP ranges with the first VPC. This instance needs to connect to the network application on GKE. You want to minimize effort. What should you do?
- A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Set the service's externalTrafficPolicy to Cluster.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created. - B. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.
2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.
3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.
4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint. - C. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal
3. Peer the two VPCs together.
4. Configure the Compute Engine instance to use the address of the load balancer that has been created. - D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
正解：A
質問 # 16
You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?
- A. Create a new App Engine application in the same project. Deploy the new version in that application. Use the App Engine library to proxy 1% of the requests to the new version.
- B. Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.
- C. Create a new App Engine application in the same project. Deploy the new version in that application. Configure your network load balancer to send 1% of the traffic to that new application.
- D. Deploy the new version in the same application and use the --migrate option.
正解：A
質問 # 17
You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible.
Which range should you use?
- A. 192.168.0.0/16
- B. 0.0.0.0/0
- C. 10.0.0.0/8
- D. 172.16.0.0/12
正解：C
質問 # 18
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2-highmem-16 nodes without any downtime. What should you do?
- A. Create a new cluster with n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- B. Use gcloud container clusters upgrade. Deploy the new services.
- C. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- D. Create a new Node Pool and specify machine type n2-highmem-16. Deploy the new pods.
正解：D
解説：
Explanation
https://cloud.google.com/kubernetes-engine/docs/concepts/deployment
質問 # 19
You need a dynamic way of provisioning VMs on Compute Engine. The exact specifications will be in a dedicated configuration file. You want to follow Google's recommended practices. Which method should you use?
- A. Cloud Composer
- B. Deployment Manager
- C. Managed Instance Group
- D. Unmanaged Instance Group
正解：C
解説：
Reference:
https://cloud.google.com/compute/docs/instances/
質問 # 20
Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider. What should you do?
- A. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.
- B. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
- C. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
- D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.
正解：C
質問 # 21
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?
- A. Select the latest available cluster version for your GKE cluster.
- B. Enable the Node Auto-Upgrades feature for your GKE cluster.
- C. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.
- D. Enable the Node Auto-Repair feature for your GKE cluster.
正解：B
解説：
Creating or upgrading a cluster by specifying the version as latest does not provide automatic upgrades. Enable node auto-upgrades to ensure that the nodes in your cluster are up-to-date with the latest stable version.
https://cloud.google.com/kubernetes-engine/versioning-and-upgrades
Node auto-upgrades help you keep the nodes in your cluster up to date with the cluster master version when your master is updated on your behalf. When you create a new cluster or node pool with Google Cloud Console or the gcloud command, node auto-upgrade is enabled by default.
Ref: https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-upgrades
質問 # 22
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google- recommended practices to obtain the combined logs for all projects. What should you do?
- A. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.
- B. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
- C. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
- D. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
正解：B
解説：
Explanation/Reference: https://cloud.google.com/blog/products/gcp/best-practices-for-working-with-google-cloud-audit- logging
質問 # 23
You received a JSON file that contained a private key of a Service Account in order to get access to several resources in a Google Cloud project. You downloaded and installed the Cloud SDK and want to use this private key for authentication and authorization when performing gcloud commands. What should you do?
- A. Place the private key file in the installation directory of the Cloud SDK and rename it to "credentials.json".
- B. Place the private key file in your home directory and rename it to
"GOOGLE_APPLICATION_CREDENTIALS". - C. Use the command gcloud auth activate-service-accountand point it to the private key.
- D. Use the command gcloud auth loginand point it to the private key.
正解：C
解説：
Explanation/Reference: https://cloud.google.com/sdk/docs/authorizing
質問 # 24
Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1-standard-2 nodes. You need to deploy additional pods requiring n2-highmem-16 nodes without any downtime. What should you do?
- A. Create a new cluster with n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- B. Use gcloud container clusters upgrade. Deploy the new services.
- C. Create a new cluster with both n1-standard-2 and n2-highmem-16 nodes. Redeploy the pods and delete the old cluster.
- D. Create a new Node Pool and specify machine type n2-highmem-16. Deploy the new pods.
正解：D
解説：
https://cloud.google.com/kubernetes-engine/docs/concepts/deployment
質問 # 25
Your company's infrastructure is on-premises, but all machines are running at maximum capacity.
You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?
- A. In Google Cloud, configure the VPC as a host for Shared VPC.
- B. In Google Cloud, configure the VPC for VPC Network Peering.
- C. Set up Cloud VPN between the infrastructure on-premises and Google Cloud.
- D. Create bastion hosts both in your on-premises environment and on Google Cloud. Configure both as proxy servers using their public IP addresses.
正解：C
解説：
Access internal IPs directly
Your VPC network's internal (RFC 1918) IP addresses are directly accessible from your on- premises network with peering, no NAT device or VPN tunnel required.
Hybrid made easy
Today's business climate demands flexibility. Connecting your on-premises resources to your cloud resources seamlessly, with minimum latency or interruption, is a business-critical requirement. The speed and reliability of Cloud Interconnect lets you extend your organization's data center network into Google Cloud, simply and easily, while options such as Cloud VPN provide flexibility for all your workloads. This unlocks the potential of hybrid app development and all the benefits the cloud has to offer.
https://cloud.google.com/hybrid-connectivity
質問 # 26
You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic.
You want to ensure that the available capacity does not decrease during the deployment. What should you do?
- A. Create a new managed instance group with an updated instance template.
Add the group to the backend service for the load balancer.
When all instances in the new managed instance group are healthy, delete the old managed instance group. - B. Perform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0.
- C. Perform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.
- D. Create a new instance template with the new application version.
Update the existing managed instance group with the new instance template.
Delete the instances in the managed instance group to allow the managed instance group to recreate the instance using the new instance template.
正解：B
解説：
We need to ensure the global capacity remains intact, for that reason we need to establish maxUnavailable to 0. On the other hand, we need to ensure new instances can be created. We do that by establishing the maxSurge to 1.
Option C is more expensive and more difficult to set up and option D won't meet requirements since it won't keep global capacity intact.
https://cloud.google.com/compute/docs/instance-groups/rolling-out-updates-to-managed- instance-groups#options
質問 # 27
Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?
- A. 1. Create an IAM entry for each data scientist's user account.
2. Assign the BigQuery dataViewer user role to the group. - B. 1. Create an IAM entry for each data scientist's user account.
2. Assign the BigQuery jobUser role to the group. - C. 1. Create a dedicated Google group in Cloud Identity.
2. Add each data scientist's user account to the group.
3. Assign the BigQuery dataViewer user role to the group. - D. 1. Create a dedicated Google group in Cloud Identity.
2. Add each data scientist's user account to the group.
3. Assign the BigQuery jobUser role to the group.
正解：C
解説：
Explanation/Reference: https://cloud.google.com/bigquery/docs/cloud-sql-federated-queries
質問 # 28
Your company is moving its entire workload to Compute Engine. Some servers should be accessible through the Internet, and other servers should only be accessible over the internal network. All servers need to be able to talk to each other over specific ports and protocols. The current on-premises network relies on a demilitarized zone (DMZ) for the public servers and a Local Area Network (LAN) for the private servers. You need to design the networking infrastructure on Google Cloud to match these requirements. What should you do?
- A. 1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.
- B. 1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.
- C. 1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.
- D. 1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.
正解：B
解説：
https://cloud.google.com/vpc/docs/vpc-peering
質問 # 29
You need to enable traffic between multiple groups of Compute Engine instances that are currently running two different GCP projects. Each group of Compute Engine instances is running in its own VPC. What should you do?
- A. Verify that you are the Project Administrator of both projects. Create two new VPCs and add all instances.
- B. Verify that you are the Project Administrator of both projects. Create a new VPC and add all instances.
- C. Verify that both projects are in a GCP Organization. Create a new VPC and add all instances.
- D. Verify that both projects are in a GCP Organization. Share the VPC from one project and request that the Compute Engine instances in the other project use this shared VPC.
正解：D
質問 # 30
Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?
- A. Grant them the required IAM roles using their G Suite email address.
- B. In the G Suite console, add the users to a special group called [email protected].
Rely on the default behavior of the Cloud Platform to grant users access if they are members of this group. - C. Create a CSV sheet with all users' email addresses. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.
- D. Enable Cloud Identity in the GCP Console for your domain.
正解：A
質問 # 31
You want to configure 10 Compute Engine instances for availability when maintenance occurs. Your requirements state that these instances should attempt to automatically restart if they crash. Also, the instances should be highly available including during system maintenance. What should you do?
- A. Create an instance group for the instance. Verify that the 'Advanced creation options' setting for 'do not retry machine creation' is set to off.
- B. Create an instance template for the instances. Set the 'Automatic Restart' to on. Set the 'On-host maintenance' to Migrate VM instance. Add the instance template to an intsance group.
- C. Create an instance templated for the instances. Set 'Automatic Restart' to off. Set 'On-host maintenance' to Terminate VM instances. Add the instance template to an instance group.
- D. Create an instance group for the instances. Set the 'Autohealing' health check to healthy (HTTP).
正解：C
質問 # 32
You are using Container Registry to centrally store your company's container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?
- A. Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.
- B. Create a service account, and give it access to Cloud Storage. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.
- C. In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes.
- D. When you create the GKE cluster, choose the Allow full access to all Cloud APIs option under 'Access scopes'.
正解：C
解説：
Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account. is not right. As mentioned above, Container Registry ignores permissions set on individual objects within the storage bucket so this isnt going to work.
Ref: https://cloud.google.com/container-registry/docs/access-control
質問 # 33
......
学習材料は有効Associate-Cloud-Engineer効率的問題集：https://jp.fast2test.com/Associate-Cloud-Engineer-premium-file.html
Associate-Cloud-Engineer問題集本日限定！無料アクセス可能に！：https://drive.google.com/open?id=19YvprlWXXSPkFpKrvxzkgfqPBs6xYLv9