Free Access Google.Associate-Cloud-Engineer.v2022-07-24.q230 Practice Test (Page 40)

Question 191

You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

A.1. In GKE, create a Service of type NodePortthat uses the application's Pods as backend.
2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.
3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.
4. Configure the Compute Engine instance to use the address of proxyin gce-networkas endpoint.

B.1. In GKE, create a Serviceof type LoadBalancerthat uses the application's Pods as backend.
2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal
3. Peer the two VPCs together.
4. Configure the Compute Engine instance to use the address of the load balancer that has been created.

C.1. In GKE, create a Serviceof type LoadBalancer that uses the application's Pods as backend.
2. Set the service's externalTrafficPolicyto Cluster.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

D.1. In GKE, create a Serviceof type LoadBalancerthat uses the application's Pods as backend.
2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

Question 192

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

A.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/ devstorage.write_only'.

B.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/ cloud-platform'.

C.Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.

D.Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.

Question 193

You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices. What should you do?

A.Add the auditor user accounts to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.

B.Add the auditors group to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.

C.Add the auditors group to two new custom IAM roles.

D.Add the auditor user accounts to two new custom IAM roles.

Question 194

You need to update a deployment in Deployment Manager without any resource downtime in the deployment. Which command should you use?

A.gcloud deployment-manager resources create --config <deployment-config-path>

B.gcloud deployment-manager deployments create --config <deployment-config-path>

C.gcloud deployment-manager deployments update --config <deployment-config-path>

D.gcloud deployment-manager resources update --config <deployment-config-path>

Question 195

You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment. What should you do?

A.Use gcloud to create the new project, and then deploy your application to the new project.

B.Create a Deployment Manager configuration file that copies the current App Engine deployment into a new project.

C.Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project.

D.Use gcloud to create the new project and to copy the deployed application to the new project.

Other Version: 393Google.Associate-Cloud-Engineer.v2025-08-21.q142; 878Google.Associate-Cloud-Engineer.v2025-07-09.q185; 766Google.Associate-Cloud-Engineer.v2024-12-02.q208; 1386Google.Associate-Cloud-Engineer.v2023-07-15.q135; 1228Google.Associate-Cloud-Engineer.v2023-04-01.q81; 1376Google.Associate-Cloud-Engineer.v2023-02-27.q85; 1280Google.Associate-Cloud-Engineer.v2023-02-04.q73; 6699Google.Associate-Cloud-Engineer.v2022-04-13.q194; 81Google.Trainingdump.Associate-Cloud-Engineer.v2021-10-18.by.alvis.136q.pdf

Latest Upload: 107Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 156TheSecOpsGroup.CNSP.v2025-09-08.q20; 207CFAInstitute.ESG-Investing.v2025-09-08.q173; 155PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 144Salesforce.Data-Architect.v2025-09-05.q216; 136Adobe.AD0-E605.v2025-09-05.q50; 177Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 191

Question 192

Question 193

Question 194

Question 195

Download PDF File