Free Access Google.Associate-Cloud-Engineer.v2025-08-21.q142 Practice Test (Page 24)

Question 111

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

A.Give "project owner" for web-applications appropriate roles to crm-databases- proj

B.Give "project owner" role to crm-databases-proj and the web-applications project.

C.Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web-applications.

D.Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.

Question 112

Your security team has been reluctant to move to the cloud because they don't have the level of network visibility they're used to. Which feature might help them to gain insights into your Google Cloud network?

A.Firewall rules

B.Flow logs

C.Subnets

D.Routes

Question 113

You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group.
This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?

A.Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group.
Distribute the keys to dev1 users and direct them to use their third-party tools to connect.

B.Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for that instance. Direct them to use the Cloud Shell to ssh to that instance.

C.Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role.
Direct them to use the Cloud Shell to ssh to that instance.

D.Enable block project wide keys for the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.

Question 114

You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?

A.Export Cloud Datastore data using gcloud datastore export.

B.Create a Cloud Datastore index using gcloud datastore indexes create.

C.Install the google-cloud-sdk-datastore-emulator component using the apt get install command.

D.Install the cloud-datastore-emulator component using the gcloud components install command.

Question 115