Free Access Google.Associate-Cloud-Engineer.v2024-12-02.q208 Practice Test (Page 30)

Question 141

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

A.Give "project owner" for web-applications appropriate roles to crm-databases- proj

B.Give "project owner" role to crm-databases-proj and the web-applications project.

C.Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web-applications.

D.Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.

Question 142

You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?

A.Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.

B.Use the command line to run a dry run query to estimate the number of bytes read.
Then convert that bytes estimate to dollars using the Pricing Calculator.

C.Use the command line to run a dry run query to estimate the number of bytes returned.
Then convert that bytes estimate to dollars using the Pricing Calculator.

D.Run a select count (*) to get an idea of how many records your query will look through.
Then convert that number of rows to dollars using the Pricing Calculator.

Question 143

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

A.Create the instance without a public IP address.

B.Create the instance with Private Google Access enabled.

C.Create a deny-all egress firewall rule on the VPC network.

D.Create a route on the VPC to route all traffic to the instance over the VPN tunnel.

Question 144

Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider. What should you do?

A.Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile & Desktop Apps.

B.Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.

C.In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.

D.In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.

Question 145

You have successfully created a development environment in a project for an application. This application uses Compute Engine and Cloud SQL. Now, you need to create a production environment for this application. The security team has forbidden the existence of network routes between these 2 environments, and asks you to follow Google-recommended practices. What should you do?

A.Create a new project, enable the Compute Engine and Cloud SQL APIs in that project, and replicate the setup you have created in the development environment.

B.Create a new production subnet in the existing VPC and a new production Cloud SQL instance in your existing project, and deploy your application using those resources.

C.Create a new project, modify your existing VPC to be a Shared VPC, share that VPC with your new project, and replicate the setup you have in the development environment in that new project, in the Shared VPC.

D.Ask the security team to grant you the Project Editor role in an existing production project used by another division of your company. Once they grant you that role, replicate the setup you have in the development environment in that project.

Other Version: 2423Google.Associate-Cloud-Engineer.v2025-08-21.q142; 2769Google.Associate-Cloud-Engineer.v2025-07-09.q185; 2334Google.Associate-Cloud-Engineer.v2023-07-15.q135; 1791Google.Associate-Cloud-Engineer.v2023-04-01.q81; 2089Google.Associate-Cloud-Engineer.v2023-02-27.q85; 1805Google.Associate-Cloud-Engineer.v2023-02-04.q73; 5707Google.Associate-Cloud-Engineer.v2022-07-24.q230; 8226Google.Associate-Cloud-Engineer.v2022-04-13.q194; 81Google.Trainingdump.Associate-Cloud-Engineer.v2021-10-18.by.alvis.136q.pdf

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 292Nokia.4A0-113.v2026-05-01.q69; 250EC-COUNCIL.312-49v11.v2026-04-30.q214; 227Microsoft.MB-820.v2026-04-30.q101; 207Salesforce.MC-202.v2026-04-30.q57; 204BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 457EMC.D-AV-DY-23.v2026-04-27.q184; 1108ServiceNow.CSA.v2026-04-27.q483

Question 141

Question 142

Question 143

Question 144

Question 145

Download PDF File