Associate-Cloud-Engineer Exam Dumps – Our Features

Users of your application are complaining of slowness when loading the application. You realize the slowness is because the App Engine deployment serving the application is deployed in us-central whereas all users of this application are closest to europe-west3. You want to change the region of the App Engine application to europe-west3 to minimize latency. What's the best way to change the App Engine region?

• Create a new project and create an App Engine instance in europe-west3
• Use the gcloud app region set command and supply the name of the new region.
• From the console, under the App Engine page, click edit, and change the region drop-down.
• Contact Google Cloud Support and request the change.

Your company uses BigQuery to store and analyze data. Upon submitting your query in BigQuery, the query fails with a quotaExceeded error. You need to diagnose the issue causing the error. What should you do?Choose 2 answers

• Search errors in Cloud Audit Logs to analyze the issue.
• Configure Cloud Trace to analyze the issue.
• View errors in Cloud Monitoring to analyze the issue.
• Use the information schema views to analyze the underlying issue.
• Use BigQuery Bl Engine to analyzetheissue.

You need to update a deployment in Deployment Manager without any resource downtime in the deployment. Which command should you use?

• gcloud deployment-manager deployments create --config
• gcloud deployment-manager deployments update --config
• gcloud deployment-manager resources create --config
• gcloud deployment-manager resources update --config

You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items.How should you configure the auditor's permissions?

• Create a custom role with view-only project permissions. Add the user's account to the custom role.
• Create a custom role with view-only service permissions. Add the user's account to the custom role.
• Select the built-in IAM project Viewer role. Add the user's account to this role.
• Select the built-in IAM service Viewer role. Add the user's account to this role.

Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

• Modify the existing subnet range to 172.16.20.0/24.
• Create a new Secondary IP Range in the VPC and configure the VMs to use that range.
• Create a new VPC network for the VMs. Enable VPC Peering between the VMs' VPC network and the Dataproc cluster VPC network.
• Create a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network. Configure a custom Route exchange.

Your organization uses Active Directory (AD) to manage user identities. Each user uses this identity for federated access to various on-premises systems. Your security team has adopted a policy that requires users to log into Google Cloud with their AD identity instead of their own login. You want to follow the Google-recommended practices to implement this policy. What should you do?

• Sync Identities with Cloud Directory Sync, and then enable SAML for single sign-on
• Sync Identities in the Google Admin console, and then enable Oauth for single sign-on
• Sync identities with 3rd party LDAP sync, and then copy passwords to allow simplified login with (he same credentials
• Sync identities with Cloud Directory Sync, and then copy passwords to allow simplified login with the same credentials.

You have a workload running on Compute Engine that is critical to your business. You want to ensure that the data on the boot disk of this workload is backed up regularly. You need to be able to restore a backup as quickly as possible in case of disaster. You also want older backups to be cleaned automatically to save on cost. You want to follow Google-recommended practices. What should you do?

• Create a Cloud Function to create an instance template.
• Create a snapshot schedule for the disk using the desired interval.
• Create a cron job to create a new disk from the disk using gcloud.
• Create a Cloud Task to create an image and export it to Cloud Storage.

You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?

• Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
• Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
• Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
• Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.

You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment. What should you do?

• Use gcloud to create the new project, and then deploy your application to the new project.
• Use gcloud to create the new project and to copy the deployed application to the new project.
• Create a Deployment Manager configuration file that copies the current App Engine deployment into a new project.
• Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project.

Your VMs are running in a subnet that has a subnet mask of 255.255.255.240. The current subnet has no more free IP addresses and you require an additional 10 IP addresses for new VMs. The existing and new VMs should all be able to reach each other without additional routes. What should you do?

• Use gcloud to expand the IP range of the current subnet.
• Delete the subnet, and recreate it using a wider range of IP addresses.
• Create a new project. Use Shared VPC to share the current network with the new project.
• Create a new subnet with the same starting IP but a wider range to overwrite the current subnet.