Free Access Google.Associate-Cloud-Engineer.v2022-07-24.q230 Practice Test (Page 6)

Question 21

A company has many applications on Amazon EC2 instances running in Auto Scaling groups. Company policies require that data on the attached Amazon EBS volume must be retained.
Which actions will meet this requirement without impacting performance?

A.Enable Termination Protection on the Amazon EC2 instances.

B.Disable DeleteOnTermination for the Amazon EBS volumes.

C.Use Amazon EC2 user data to set up a synchronization job for root volume data.

D.Change the auto scaling Health Check to point to a source on the root volume.

Question 22

You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed.
What should you do?

A.Create a new subnet in the same region as the subnet being used.

B.Add an alias IP range to the subnet used by the GKE clusters.

C.Create a new VPC, and set up VPC peering with the existing VPC.

D.Expand the CIDR range of the relevant subnet for the cluster.

Question 23

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

A.In the console, validate which SSH keys have been stored as project-wide keys.

B.Navigate to Identity-Aware Proxy and check the permissions for these resources.

C.Enable Audit Logs on the IAM & admin page for all resources, and validate the results.

D.Use the command gcloud projects get-iam-policy to view the current role assignments.

Question 24

An employee was terminated, but their access to Google Cloud Platform (GCP) was not removed until 2 weeks later. You need to find out this employee accessed any sensitive customer information after their termination.
What should you do?

A.View Data Access audit logs in Stackdriver. Search for the user's email as the principal.

B.View System Event Logs in Stackdriver. Search for the service account associated with the user.

C.View the Admin Activity log in Stackdriver. Search for the service account associated with the user.

D.View System Event Logs in Stackdriver. Search for the user's email as the principal.

Question 25

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

A.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.

B.Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.

C.Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.

D.Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.

Other Version: 393Google.Associate-Cloud-Engineer.v2025-08-21.q142; 876Google.Associate-Cloud-Engineer.v2025-07-09.q185; 766Google.Associate-Cloud-Engineer.v2024-12-02.q208; 1385Google.Associate-Cloud-Engineer.v2023-07-15.q135; 1218Google.Associate-Cloud-Engineer.v2023-04-01.q81; 1366Google.Associate-Cloud-Engineer.v2023-02-27.q85; 1276Google.Associate-Cloud-Engineer.v2023-02-04.q73; 6685Google.Associate-Cloud-Engineer.v2022-04-13.q194; 81Google.Trainingdump.Associate-Cloud-Engineer.v2021-10-18.by.alvis.136q.pdf

Latest Upload: 106Oracle.1Z0-1057-23.v2025-09-10.q47; 146Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 148TheSecOpsGroup.CNSP.v2025-09-08.q20; 199CFAInstitute.ESG-Investing.v2025-09-08.q173; 150PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 139Salesforce.Data-Architect.v2025-09-05.q216; 135Adobe.AD0-E605.v2025-09-05.q50; 173Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 113Oracle.1z0-591.v2025-09-05.q104

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File