Free Access Google.Associate-Cloud-Engineer.v2025-07-09.q185 Practice Test (Page 33)

Question 156

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

A.Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.

B.Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.

C.Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.

D.Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Question 157

You are configuring Cloud DNS. You want !to create DNS records to point home.mydomain.com, mydomain.
com. and www.mydomain.com to the IP address of your Google Cloud load balancer. What should you do?

A.Create one CNAME record to point mydomain.com to the load balancer, and create two A records to point WWW and HOME lo mydomain.com respectively.

B.Create one CNAME record to point mydomain.com to the load balancer, and create two AAAA records to point WWW and HOME to mydomain.com respectively.

C.Create one A record to point mydomain.com lo the load balancer, and create two NS records to point WWW and HOME to mydomain.com respectively.

D.Create one A record to point mydomain.com to the load balancer, and create two CNAME records to point WWW and HOME to mydomain.com respectively.

Question 158

Your company is moving from an on-premises environment to Google Cloud Platform (GCP). You have multiple development teams that use Cassandra environments as backend databases. They all need a development environment that is isolated from other Cassandra instances. You want to move to GCP quickly and with minimal support effort. What should you do?

A.1. Build an instruction guide to install Cassandra on GCP.
2. Make the instruction guide accessible to your developers.

B.1. Advise your developers to go to Cloud Marketplace.
2. Ask the developers to launch a Cassandra image for their development work.

C.1. Build a Cassandra Compute Engine instance and take a snapshot of it.
2. Use the snapshot to create instances for your developers.

D.1. Build a Cassandra Compute Engine instance and take a snapshot of it.
2. Upload the snapshot to Cloud Storage and make it accessible to your developers.

Question 159

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

A.Use the command gcloud projects get-iam-policy to view the current role assignments.

B.Enable Audit Logs on the IAM & admin page for all resources, and validate the results.

C.Navigate to Identity-Aware Proxy and check the permissions for these resources.

D.In the console, validate which SSH keys have been stored as project-wide keys.

Question 160