Associate Cloud Engineer exam

You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items. How should you configure the auditor's permissions?A . Create a custom role with view-only project permissions. Add the user's account to the custom role.B...

You want to configure 10 Compute Engine instances for availability when maintenance occurs. Your requirements state that these instances should attempt to automatically restart if they crash. Also, the instances should be highly available including during system maintenance. What should you do?A . Create an instance template for the instances....

You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC...

You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube-system namespace of the cluster. You want a solution that uses the fewest possible services. What should you do?A . Add the cluster’s...

You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?A . Create a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress...

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?A . Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.B . Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to...

You need to update a deployment in Deployment Manager without any resource downtime in the deployment. Which command should you use?A . gcloud deployment-manager deployments create --config <deployment-config-path>B . gcloud deployment-manager deployments update --config <deployment-config-path>C . gcloud deployment-manager resources create --config <deployment-config-path>D . gcloud deployment-manager resources update --config <deployment-config-path>View AnswerAnswer:...

Create an egress firewall rule with the following settings: • Targets: all instances • Source filter: IP ranges (with the range set to 10.0.1.0/24) • Protocols: allow TCP: 8080View AnswerAnswer: B Explanation:

You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?A . When creating the VM...

In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application.View AnswerAnswer: C Explanation: https://cloud.google.com/run/docs/tutorials/pubsub#integrating-pubsub