Free Access Google.Associate-Cloud-Engineer.v2025-08-21.q142 Practice Test (Page 28)

Question 131

You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?

A.Assign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.

B.Assign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy.

C.Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.listpermission.
Perform the export of logs to Cloud Storage.

D.Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.listpermission.
Direct the auditor to also review the logs for changes to Cloud IAM policy.

Question 132

For analysis purposes, you need to send all the logs from all of your Compute Engine instances to a BigQuery dataset called platform-logs. You have already installed the Stackdriver Logging agent on all the instances.
You want to minimize cost. What should you do?

A.1. Give the BigQuery Data Editor role on the platform-logs dataset to the service accounts used by your instances.2. Update your instances' metadata to add the following value: logs-destination:
bq://platform-logs.

B.1. In Stackdriver Logging, create a filter to view only Compute Engine logs.2. Click Create Export.3.
Choose BigQuery as Sink Service, and the platform-logs dataset as Sink Destination.

C.1. Create a Cloud Function that has the BigQuery User role on the platform-logs dataset.2. Configure this Cloud Function to create a BigQuery Job that executes this query:INSERT INTO dataset.platform-logs (timestamp, log)SELECT timestamp, log FROM compute.logsWHERE timestamp
> DATE_SUB(CURRENT_DATE(), INTERVAL 1 DAY)3. Use Cloud Scheduler to trigger this Cloud Function once a day.

D.1. In Stackdriver Logging, create a logs export with a Cloud Pub/Sub topic called logs as a sink.2.
Create a Cloud Function that is triggered by messages in the logs topic.3. Configure that Cloud Function to drop logs that are not from Compute Engine and to insert Compute Engine logs in the platform-logs dataset.

Question 133

You need to reduce GCP service costs for a division of your company using the fewest possible steps. You need to turn off all configured services in an existing GCP project. What should you do?

A.1. Verify that you are assigned the Organizational Administrator IAM role for this project.
2. Locate the project in the GCP console, enter the project ID and then click Shut down.

B.1. Verify that you are assigned the Organizational Administrators IAM role for this project.
2. Switch to the project in the GCP console, locate the resources and delete them.

C.1. Verify that you are assigned the Project Owners IAM role for this project.
2. Switch to the project in the GCP console, locate the resources and delete them.

D.1. Verify that you are assigned the Project Owners IAM role for this project.
2. Locate the project in the GCP console, click Shut down and then enter the project ID.

Question 134

You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over Internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?

A.Create a single custom VPC with 2 subnets. Create each subnet in a different region and with a different CIDR range.

B.Create 2 custom VPCs, each with a single subnet. Create each subnet in a different region and with a different CIDR range.

C.Create 2 custom VPCs, each with a single subnet. Create each subnet in the same region and with the same CIDR range.

D.Create a single custom VPC with 2 subnets. Create each subnet in the same region and with the same CIDR range.

Question 135

You have deployed an application on a Compute Engine instance. An external consultant needs to access the Linux-based instance. The consultant is connected to your corporate network through a VPN connection, but the consultant has no Google account. What should you do?

A.Instruct the external consultant to use the gcloud compute ssh command line tool by using Identity- Aware Proxy to access the instance.

B.Instruct the external consultant to use the gcloud compute ssh command line tool by using the public IP address of the instance to access it.

C.Instruct the external consultant to generate an SSH key pair, and request the public key from the consultant.
Add the public key to the instance yourself, and have the consultant access the instance through SSH with their private key.

D.Instruct the external consultant to generate an SSH key pair, and request the private key from the consultant.Add the private key to the instance yourself, and have the consultant access the instance through SSH with their public key.

Other Version: 2764Google.Associate-Cloud-Engineer.v2025-07-09.q185; 1866Google.Associate-Cloud-Engineer.v2024-12-02.q208; 2333Google.Associate-Cloud-Engineer.v2023-07-15.q135; 1791Google.Associate-Cloud-Engineer.v2023-04-01.q81; 2089Google.Associate-Cloud-Engineer.v2023-02-27.q85; 1805Google.Associate-Cloud-Engineer.v2023-02-04.q73; 5706Google.Associate-Cloud-Engineer.v2022-07-24.q230; 8225Google.Associate-Cloud-Engineer.v2022-04-13.q194; 81Google.Trainingdump.Associate-Cloud-Engineer.v2021-10-18.by.alvis.136q.pdf

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 290Nokia.4A0-113.v2026-05-01.q69; 250EC-COUNCIL.312-49v11.v2026-04-30.q214; 226Microsoft.MB-820.v2026-04-30.q101; 205Salesforce.MC-202.v2026-04-30.q57; 203BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 454EMC.D-AV-DY-23.v2026-04-27.q184; 1107ServiceNow.CSA.v2026-04-27.q483

Question 131

Question 132

Question 133

Question 134

Question 135

Download PDF File