Free Google Associate-Cloud-Engineer Exam Dumps Questions & Answers

Your company is using Google Workspace to manage employee accounts. Anticipated growth will increase the number of personnel from 100 employees to 1,000 employees within 2 years.
Most employees will need access to your company's Google Cloud account. The systems and processes will need to support 10x growth without performance degradation, unnecessary complexity, or security issues. What should you do?

• A.Turn on identity federation between Cloud Identity and Google Workspace. Enforce multi-factor authentication for domain wide delegation.
• B.Migrate the users to Active Directory. Connect the Human Resources system to Active Directory.
  Turn on Google Cloud Directory Sync (GCDS) for Cloud Identity. Turn on Identity Federation from Cloud Identity to Active Directory.
• C.Organize the users in Cloud Identity into groups. Enforce multi-factor authentication in Cloud Identity.
• D.Use a third-party identity provider service through federation. Synchronize the users from Google Workplace to the third-party provider in real time.

You have been asked to migrate a docker application from datacenter to cloud. Your solution architect has suggested uploading docker images to GCR in one project and running an application in a GKE cluster in a separate project. You want to store images in the project img-
278322 and run the application in the project prod-278986. You want to tag the image as acme_track_n_trace:v1. You want to follow Google-recommended practices. What should you do?

• A.Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace
• B.Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace
• C.Run gcloud builds submit --tag gcr.io/img-278322/acme_track_n_trace:v1
• D.Run gcloud builds submit --tag gcr.io/prod-278986/acme_track_n_trace:v1

You have a Bigtable instance that consists of three nodes that store personally identifiable information (PII) data. You need to log all read or write operations, including any metadata or configuration reads of this database table, in your company's Security Information and Event Management (SIEM) system. What should you do?

• A.- Install the Ops Agent on the Bigtable instance during configuration.
  - Create a service account with read permissions for the Bigtable instance.
  - Create a custom Dataflow job with this service account to export logs to the company's SIEM system.
• B.- Navigate to the Audit Logs page in the Google Cloud console, and enable Data Read, Data Write and Admin Read logs for the Bigtable instance.
  - Create a Pub/Sub topic as a Cloud Logging sink destination, and add your SIEM as a subscriber to the topic.
• C.- Navigate to the Audit Logs page in the Google Cloud console, and enable Admin Write logs for the Bigtable instance.
  - Create a Cloud Functions instance to export logs from Cloud Logging to your SIEM.
• D.- Navigate to Cloud Monitoring in the Google Cloud console, and create a custom monitoring job for the Bigtable instance to track all changes.
  - Create an alert by using webhook endpoints, with the SIEM endpoint as a receiver.

You are planning to deploy an application to Google Cloud. Your application processes asynchronous events from Google services and must be accessible from the public Internet. You need to identify how to deploy your application. You want to follow a standardized process while minimizing development costs. You also want to have no costs when your workloads are not in use. What should you do?

• A.Deploy your code to Cloud Run. Use Eventarc for event delivery.
• B.Deploy your code to Compute Engine. Use Pub/Sub for event delivery.
• C.Deploy your code to GKE. Use Pub/Sub for event delivery.
• D.Deploy your code to GKE. Use Eventarc for event delivery.

You are building a backend service for an ecommerce platform that will persist transaction data from mobile and web clients. After the platform is launched, you expect a large volume of global transactions. Your business team wants to run SQL queries to analyze the data. You need to build a highly available and scalable data store for the platform. What should you do?

• A.Create a multi-region Cloud Spanner instance with an optimized schema.
• B.Create a multi-region Firestore database with aggregation query enabled.
• C.Create a multi-region Cloud SQL for PostgreSQL database with optimized indexes.
• D.Create a multi-region BigQuery dataset with optimized tables.