Free Access Google.Associate-Cloud-Engineer.v2022-07-24.q230 Practice Test (Page 2)

Question 1

Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

A.Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.

B.Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.

C.Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.

D.Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.

Question 2

You need to create a new billing account and then link it with an existing Google Cloud Platform project.
What should you do?

A.Verify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing account.

B.Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project.

C.Verify that you are Billing Administrator for the billing account. Create a new project and link the new project to the existing billing account.

D.Verify that you are Project Billing Manager for the GCP project. Update the existing project to link it to the existing billing account.

Question 3

You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube- system namespace of the cluster. You want a solution that uses the fewest possible services.
What should you do?

A.With Deployment Manager, create a Compute Engine instance with a startup script that uses kubectl to create the DaemonSet.

B.In the cluster's definition in Deployment Manager, add a metadata that has kube-system as key and the DaemonSet manifest as value.

C.Add the cluster's API as a new Type Provider in Deployment Manager, and use the new type to create the DaemonSet.

D.Use the Deployment Manager Runtime Configurator to create a new Config resource that contains the DaemonSet definition.

Question 4

Your developers have been thoroughly logging everything that happens in the API. The API allows end users to request the data as JSON, XML, CSV, and XLS. Supporting all of these formats is taking a lot of developer effort. Management would like to start tracking which options are used over the next month. Without modifying the code, what's the fastest way to be able to report on this data at the end of the month?

A.Create a custom counter logging metric that uses a regex to extract the data format into a label. At the end of the month, use the metric
viewer to see the group by the label.

B.Create a custom monitoring metric in code and edit the API code to set the metric each time the API is called.

C.Export the logs to excel, and search for the different fields.

D.Create a log sink that filters for rows that mention the data format. Export that to BigQuery, and run a query at the end of the month.

Question 5

You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide the application with access to Cloud Storage. What should you do?

A.1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud Platform (GCP).2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance.3. Configure your servers to use that instance as a proxy to access Cloud Storage.

B.1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine.2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend.3. Configure your new instances to use this ILB as proxy.

C.1. Use nslookup to get the IP address for storage.googleapis.com.2. Negotiate with the security team to be able to give a public IP address to the servers.3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.

D.1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in GCP.2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel.3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com.

Other Version: 393Google.Associate-Cloud-Engineer.v2025-08-21.q142; 876Google.Associate-Cloud-Engineer.v2025-07-09.q185; 766Google.Associate-Cloud-Engineer.v2024-12-02.q208; 1385Google.Associate-Cloud-Engineer.v2023-07-15.q135; 1218Google.Associate-Cloud-Engineer.v2023-04-01.q81; 1365Google.Associate-Cloud-Engineer.v2023-02-27.q85; 1266Google.Associate-Cloud-Engineer.v2023-02-04.q73; 6680Google.Associate-Cloud-Engineer.v2022-04-13.q194; 81Google.Trainingdump.Associate-Cloud-Engineer.v2021-10-18.by.alvis.136q.pdf

Latest Upload: 105Oracle.1Z0-1057-23.v2025-09-10.q47; 145Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 130SAP.C-S4EWM-2023.v2025-09-08.q83; 148TheSecOpsGroup.CNSP.v2025-09-08.q20; 190CFAInstitute.ESG-Investing.v2025-09-08.q173; 145PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 138Salesforce.Data-Architect.v2025-09-05.q216; 133Adobe.AD0-E605.v2025-09-05.q50; 172Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 113Oracle.1z0-591.v2025-09-05.q104

Question 1

Question 2

Question 3

Question 4

Question 5

Download PDF File