Free Access Google.Associate-Cloud-Engineer.v2024-12-02.q208 Practice Test (Page 2)

Question 1

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

A.Create the instance without a public IP address.

B.Create the instance with Private Google Access enabled.

C.Create a deny-all egress firewall rule on the VPC network.

D.Create a route on the VPC to route all traffic to the instance over the VPN tunnel.
Get private access to Google services, such as storage, big data, analytics, or machine learning, without having to give your service a public IP address.

Question 2

You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group.
This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?

A.Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for that instance. Direct them to use the Cloud Shell to ssh to that instance.

B.Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role.
Direct them to use the Cloud Shell to ssh to that instance.

C.Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group.
Distribute the keys to dev1 users and direct them to use their third-party tools to connect.

D.Enable block project wide keys for the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.

Question 3

Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider. What should you do?

A.In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.

B.In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.

C.Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.

D.Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.

Question 4

You are hosting an application from Compute Engine virtual machines (VMs) in us-central1- a. You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?

A.- Create Compute Engine resources in us-central1-b.
- Balance the load across both us-central1-a and us-central1-b.

B.- Create a Managed Instance Group and specify us-central1-a as the zone.
- Configure the Health Check with a short Health Interval.

C.- Create an HTTP(S) Load Balancer.
- Create one or more global forwarding rules to direct traffic to your VMs.

D.- Perform regular backups of your application.
- Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.

Question 5

You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items.
How should you configure the auditor's permissions?

A.Create a custom role with view-only service permissions. Add the user's account to the custom role.

B.Select the built-in IAM service Viewer role. Add the user's account to this role.

C.Select the built-in IAM project Viewer role. Add the user's account to this role.

D.Create a custom role with view-only project permissions. Add the user's account to the custom role.

Other Version: 2865Google.Associate-Cloud-Engineer.v2025-08-21.q142; 3265Google.Associate-Cloud-Engineer.v2025-07-09.q185; 2654Google.Associate-Cloud-Engineer.v2023-07-15.q135; 2023Google.Associate-Cloud-Engineer.v2023-04-01.q81; 2280Google.Associate-Cloud-Engineer.v2023-02-27.q85; 2007Google.Associate-Cloud-Engineer.v2023-02-04.q73; 6161Google.Associate-Cloud-Engineer.v2022-07-24.q230; 8641Google.Associate-Cloud-Engineer.v2022-04-13.q194; 81Google.Trainingdump.Associate-Cloud-Engineer.v2021-10-18.by.alvis.136q.pdf

Latest Upload: 173NAHQ.CPHQ.v2026-09-03.q481; 113SAP.C-S4CPB-2602.v2026-09-02.q7; 109Cisco.700-805.v2026-09-02.q86; 161MSSC.CLT-4.0.v2026-09-02.q43; 126Fitness.NCSF-CPT.v2026-09-02.q18; 174Google.Generative-AI-Leader.v2026-09-02.q77; 139PECB.ISO-14001-Lead-Auditor.v2026-09-01.q39; 126Google.GCP-DE.v2026-09-01.q27; 160Cisco.300-820.v2026-09-01.q105; 154Cisco.500-220.v2026-09-01.q72

Question 1

Question 2

Question 3

Question 4

Question 5

Download PDF File