Associate-Cloud-Engineer exam study solutions

Verified Associate-Cloud-Engineer dumps Q&As – Pass Guarantee Exam Dumps Test Engine [2026]

Associate-Cloud-Engineer dumps and 335 unique questions

Career Path

After acing the certification test, the candidates will possess all the knowledge and skills needed to function in a role of an Associate Cloud Engineer. The responsibilities of these professionals include the deployment of apps, monitoring of operations, and management of enterprise solutions. The successful applicants will be capable of using Google Cloud Console as well as the command-line interface to fulfill common platform-based tasks to maintain deployed solutions that leverage self-managed or Google-managed services on Google Cloud. Some of the other job roles that you can take up after getting certified include the following: an Associate DevOps Engineer, an Associate Software Engineer, an Associate Cloud Migration Engineer, an Associate Consulting Engineer, an Associate Cloud Security Engineer, an Associate DevOps Network Engineer, and an Associate Cloud Operations Engineer. The average salary associated with these positions is $108,752 per year. However, the specialists with some level of experience in the domain can earn as much as $177,000 per annum.

Google Associate-Cloud-Engineer certification is designed to validate the skills of individuals in the field of cloud computing. Google Associate Cloud Engineer Exam certification is awarded to those who have successfully passed the Google Associate Cloud Engineer exam that focuses on the Google Cloud Platform (GCP). Google Associate Cloud Engineer Exam certification is an industry-recognized credential that can help IT professionals advance in their careers and succeed in the competitive job market.

QUESTION 164
You are asked to set up application performance monitoring on Google Cloud projects A, B, and C as a single pane of glass. You want to monitor CPU, memory, and disk. What should you do?

Enable API and then share charts from project A, B, and C.

Enable API and then give the metrics.reader role to projects A, B, and C.

Enable API and then use default dashboards to view all projects in sequence.

Enable API, create a workspace under project A, and then add project B and C.

QUESTION 165
You need to create and manage service accounts for your workloads running on Google Cloud. You want to follow Google-recommended practices. What should you do?
Choose 2 answers

Create as few service accounts as possible.

Delete any unused service accounts immediately.

Create single-purpose service accounts.

Manage service accounts as resources.

Use random names for the service accounts.

QUESTION 166
You are the project owner of a GCP project and want to delegate control to colleagues to manage buckets and files in Cloud Storage. You want to follow Google-recommended practices. Which IAM roles should you grant your colleagues?

Project Editor

Storage Admin

Storage Object Admin

Storage Object Creator

QUESTION 167
You have a number of compute instances belonging to an unmanaged instances group. You need to SSH to one of the Compute Engine instances to run an ad hoc script. You’ve already authenticated gcloud, however, you don’t have an SSH key deployed yet. In the fewest steps possible, what’s the easiest way to SSH to the instance?

Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.

Use the gcloud compute ssh command.

Create a key with the ssh-keygen command. Then use the gcloud compute ssh command.

Create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.

QUESTION 168
You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?

Deploy me application on App Engine.
For each update, create a new version of the same service.
Configure traffic splitting to send a small percentage of traffic to the new version

Deploy the application on App Engine.
For each update, create a new service.
Configure traffic splitting to send a small percentage of traffic to the new service.

Deploy the application on Kubernetes Engine.
For a new release, update the deployment to use the new version

Deploy the application on Kubernetes Engine.
For a now release, create a new deployment for the new version Update the service e to use the now deployment.

QUESTION 169
While working on a project, an application administrator has been given the responsibility of managing all resources. He wants to delegate the responsibility of managing the existing service accounts to another administrator. He will also be responsible to manage the other service accounts that will be created. Which of the following is the best way to delegate the privileges required to manage all the service accounts?

Granting iam.serviceAccountUser to the administrator at the project level

Granting iam.serviceProjectAccountUser to the administrator at the project level

Granting iam.serviceAccountUser to the administrator at the service account level

Granting iam.serviceProjectAccountUser to the administrator at the service account level

QUESTION 170
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

Give “project owner” for web-applications appropriate roles to crm-databases- proj

Give “project owner” role to crm-databases-proj and the web-applications project.

Give “project owner” role to crm-databases-proj and bigquery.dataViewer role to web-applications.

Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.

QUESTION 171
What conditions could cause a Multi-AZ Amazon RDS failover to occur? (Choose two.)

The RDS instance is stopped manually

A replica of the RDS instance is created in a different region

An Availability Zone becomes unavailable

Another master user is created

A failure of the primary database instance

QUESTION 172
You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?

Add the support team group to the roles/monitoring.viewer role

Add the support team group to the roles/spanner.databaseUser role.

Add the support team group to the roles/spanner.databaseReader role.

Add the support team group to the roles/stackdriver.accounts.viewer role.

QUESTION 173
All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States (US). What should you do?

Create a folder to contain all the dev projects Create an organization policy to limit resources in US locations.

Create an organization to contain all the dev projects. Create an Identity and Access Management (1AM) policy to limit the resources in US regions.

Create an Identity and Access Management <IAM) policy to restrict the resources locations in the US.
Apply the policy to all dev projects.

Create an Identity and Access Management (IAM)policy to restrict the resources locations in all dev projects. Apply the policy to all dev roles.

QUESTION 174
You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic. You want to ensure that the available capacity does not decrease during the deployment. What should you do?

Perform a rolling-action start-update with maxSurge set to 0 and maxUnavailable set to 1.

Perform a rolling-action start-update with maxSurge set to 1 and maxUnavailable set to 0.

Create a new managed instance group with an updated instance template. Add the group to the backend service for the load balancer. When all instances in the new managed instance group are healthy, delete the old managed instance group.

Create a new instance template with the new application version. Update the existing managed instance group with the new instance template. Delete the instances in the managed instance group to allow the managed instance group to recreate the instance using the new instance template.

QUESTION 175
You have a Bigtable instance that consists of three nodes that store personally identifiable information (Pll) dat a. You need to log all read or write operations, including any metadata or configuration reads of this database table, in your company’s Security Information and Event Management (SIEM) system. What should you do?

* Navigate to Cloud Mentioning in the Google Cloud console, and create a custom monitoring job for the Bigtable instance to track all changes.
* Create an alert by using webhook endpoints. with the SIEM endpoint as a receiver

* Navigate to the Audit Logs page in the Google Cloud console, and enable Data Read. Data Write and Admin Read logs for the Bigtable instance
* Create a Pub/Sub topic as a Cloud Logging sink destination, and add your SIEM as a subscriber to the topic.

* Install the Ops Agent on the Bigtable instance during configuration. K
* Create a service account with read permissions for the Bigtable instance.
* Create a custom Dataflow job with this service account to export logs to the company’s SIEM system.

* Navigate to the Audit Logs page in the Google Cloud console, and enable Admin Write logs for the Biglable instance.
* Create a Cloud Functions instance to export logs from Cloud Logging to your SIEM.

QUESTION 176
You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in thissubnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application.
You want to follow Google-recommended practices. What should you do?

1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance’s private address as the endpoint.

1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer’s address as the endpoint.

1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance’s private address as the endpoint.

1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance’s private address as the endpoint.

QUESTION 177
You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?

When creating the VM via the web console, specify the service account under the `Identity and API Access’ section.

Download a JSON Private Key for the service account.
On the Project Metadata, add that JSON as the value for the key compute-engine-service- account.

Download a JSON Private Key for the service account.
On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine- service-account.

Download a JSON Private Key for the service account.
After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine- service-account.json.

QUESTION 178
You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone.
You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?

Set the europe-west1-d zone as the default zone using the gcloud config subcommand.

In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.

In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.

Create a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1-d.

QUESTION 179
You have a managed instance group comprised of preemptible VM’s. All of the VM’s keepdeleting and recreating themselves every minute. What is a possible cause of thisbehavior?

Your zonal capacity is limited, causing all preemptible VM’s to be shutdown torecover capacity. Try deploying your group to another zone.

You have hit your instance quota for the region.

Your managed instance group’s VM’s are toggled to only last 1 minute inpreemptible settings.

Your managed instance group’s health check is repeatedly failing, either to amisconfigured health check or misconfigured firewall rules not allowing the healthcheck to access the instance

QUESTION 180
Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?

Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.

Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.

Create a custom role by removing delete permissions, and add users to that role only.

Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.

QUESTION 181
You want to enable your development team to deploy new features to an existing Cloud Run service in production. To minimize the risk associated with a new revision, you want to reduce the number of customers who might be affected by an outage without introducing any development or operational costs to your customers. You want to follow Google-recommended practices for managing revisions to a service. What should you do9

Deploy your application to a second Cloud Run service, and ask your customers to use the second Cloud Run service.

Ask your customers to retry access to your service with exponential backoff to mitigate any potential problems after the new revision is deployed.

Gradually roll out the new revision and split customer traffic between the revisions to allow rollback in case a problem occurs.

Send all customer traffic to the new revision, and roll back to a previous revision if you witness any problems in production.

QUESTION 182
You need to create a copy of a custom Compute Engine virtual machine (VM) to facilitate an expected increase in application traffic due to a business acquisition. What should you do?

Create a Compute Engine snapshot of your base VM.
Create your images from that snapshot.

Create a Compute Engine snapshot of your base VM.
Create your instances from that snapshot.

Create a custom Compute Engine image from a snapshot.
Create your images from that image.

Create a custom Compute Engine image from a snapshot.
Create your instances from that image.

QUESTION 183
Your company is closely monitoring their cloud spend. You need to allow different teams to monitor their Google Cloud costs. You must ensure that team members receive notifications when their cloud spend reaches certain thresholds and give team members the ability to create dashboards for additional insights with detailed billing data. You want to follow Google-recommended practices and minimize engineering costs. What should you do?

Deploy Grafana to Compute Engine. Create a dashboard for each team that uses the data from the Cloud Billing API. Ask each team to create their own alerts in Cloud Monitoring.

Set up alerts for each team based on required thresholds. Create a shell script to read data from the Cloud Billing API and push the results to BigQuery. Grant team members access to BigQuery.

Deploy Grafana to Compute Engine. Create a dashboard for each team that uses the data from the Cloud Billing Budget API. Ask each team to create their own alerts in Grafana.

Set up alerts for each team based on required thresholds. Set up billing exports to BigQuery. Grant team members access to BigQuery.

QUESTION 184
Your company publishes large files on an Apache web server that runs on a Compute Engine instance. The Apache web server is not the only application running in the project. You want to receive an email when the egress network costs for the server exceed 100 dollars for the current month as measured by Google Cloud Platform (GCP). What should you do?

Set up a budget alert on the project with an amount of 100 dollars, a threshold of 100%, and notification type of “email.”

Set up a budget alert on the billing account with an amount of 100 dollars, a threshold of 100%, and notification type of “email.”

Export the billing data to BigQuery. Create a Cloud Function that uses BigQuery to sum the egress network costs of the exported billing data for the Apache web server for the current month and sends an email if it is over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.

Use the Stackdriver Logging Agent to export the Apache web server logs to Stackdriver Logging. Create a Cloud Function that uses BigQuery to parse the HTTP response log data in Stackdriver for the current month and sends an email if the size of all HTTP responses, multiplied by current GCP egress prices, totals over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.

QUESTION 185
You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?

Deploy the new version in the same application and use the –migrate option.

Deploy the new version in the same application and use the –splits option to give a weight of 99 to the current version and a weight of 1 to the new version.

Create a new App Engine application in the same project. Deploy the new version in that application.
Use the App Engine library to proxy 1% of the requests to the new version.

Create a new App Engine application in the same project. Deploy the new version in that application.
Configure your network load balancer to send 1% of the traffic to that new application.

Associate-Cloud-Engineer Dumps for Pass Guaranteed – Pass Associate-Cloud-Engineer Exam: https://www.prepawayexam.com/Google/braindumps.Associate-Cloud-Engineer.ete.file.html

Prepaway Exam Dumps

Tag: Associate-Cloud-Engineer exam study solutions

[Q164-Q185] Verified Associate-Cloud-Engineer dumps Q&As – Pass Guarantee Exam Dumps Test Engine [2026]

Career Path

Tag Archives: Associate-Cloud-Engineer exam study solutions

Career Path