Free Access Google.Associate-Cloud-Engineer.v2023-04-01.q81 Practice Test (Page 15)

Question 66

You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table dat a. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?

A.Add the support team group to the roles/spanner.databaseUser role.

B.Add the support team group to the roles/monitoring.viewer role

C.Add the support team group to the roles/spanner.databaseReader role.

D.Add the support team group to the roles/stackdriver.accounts.viewer role.

Question 67

You want to configure a solution for archiving data in a Cloud Storage bucket. The solution must be cost-effective. Data with multiple versions should be archived after 30 days. Previous versions are accessed once a month for reporting. This archive data is also occasionally updated at month-end. What should you do?

A.Add a bucket lifecycle rule that archives data from regional storage after 30 days to Nearline Storage.

B.Add a bucket lifecycle rule that archives data from regional storage after 30 days to Coldline Storage.

C.Add a bucket lifecycle rule that archives data with newer versions after 30 days to Coldline Storage.

D.Add a bucket lifecycle rule that archives data with newer versions after 30 days to Nearline Storage.

Question 68

You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

A.1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.

B.1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

C.1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.

D.1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

Question 69

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

A.Create the instance without a public IP address.

B.Create the instance with Private Google Access enabled.

C.Create a deny-all egress firewall rule on the VPC network.

D.Create a route on the VPC to route all traffic to the instance over the VPN tunnel.

Question 70

You need to create a Compute Engine instance in a new project that doesn't exist yet. What should you do?

A.Using the Cloud SDK, create a new project, enable the Compute Engine API in that project, and then create the instance specifying your new project.

B.Enable the Compute Engine API in the Cloud Console, use the Cloud SDK to create the instance, and then use the --project flag to specify a new project.

C.Enable the Compute Engine API in the Cloud Console. Go to the Compute Engine section of the Console to create a new instance, and look for the Create In A New Project option in the creation form.

D.Using the Cloud SDK, create the new instance, and use the --project flag to specify the new project.
Answer yes when prompted by Cloud SDK to enable the Compute Engine API.

Other Version: 393Google.Associate-Cloud-Engineer.v2025-08-21.q142; 878Google.Associate-Cloud-Engineer.v2025-07-09.q185; 766Google.Associate-Cloud-Engineer.v2024-12-02.q208; 1386Google.Associate-Cloud-Engineer.v2023-07-15.q135; 1383Google.Associate-Cloud-Engineer.v2023-02-27.q85; 1280Google.Associate-Cloud-Engineer.v2023-02-04.q73; 4493Google.Associate-Cloud-Engineer.v2022-07-24.q230; 6707Google.Associate-Cloud-Engineer.v2022-04-13.q194; 81Google.Trainingdump.Associate-Cloud-Engineer.v2021-10-18.by.alvis.136q.pdf

Latest Upload: 117Oracle.1Z0-1057-23.v2025-09-10.q47; 150Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 162TheSecOpsGroup.CNSP.v2025-09-08.q20; 220CFAInstitute.ESG-Investing.v2025-09-08.q173; 155PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 145Salesforce.Data-Architect.v2025-09-05.q216; 139Adobe.AD0-E605.v2025-09-05.q50; 183Nutanix.NCP-MCI-6.10.v2025-09-05.q55; 114Oracle.1z0-591.v2025-09-05.q104

Question 66

Question 67

Question 68

Question 69

Question 70

Download PDF File