[2026] Google Associate-Cloud-Engineer Practice Verified Answers – Pass Your Exams For Sure! [Q221-Q241] – IT Certification Exam Questions & Answers

Rate this post

Associate-Cloud-Engineer Practice Google Verified Answers – Pass Your Exams For Sure! [2026]

Valid Way To Pass Google Cloud Certified’s Associate-Cloud-Engineer Exam

NEW QUESTION 221
You’ve been tasked with getting all of your team’s public SSH keys onto all of the instances of a particular project. You’ve collected them all. With the fewest steps possible, what is the simplest way to get the keys deployed?

Add all of the keys into a file that’s formatted according to the requirements. Use the gcloud compute instances add-metadata command to upload the keys to each instance

Add all of the keys into a file that’s formatted according to the requirements. Use the gcloud compute project-info add-metadata command to upload the keys.

Use the gcloud compute ssh command to upload all the keys

Format all of the keys as needed and then, using the user interface, upload each key one at a time.

NEW QUESTION 222
You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?

Increase the size of the disk to 1 TB.

Increase the allocated CPU to the instance.

Migrate to use a Local SSD on the instance.

Migrate to use a Regional SSD on the instance.

NEW QUESTION 223
You need to host an application on a Compute Engine instance in a project shared with other teams. You want to prevent the other teams from accidentally causing downtime on that application. Which feature should you use?

Use a Shielded VM.

Use a Preemptible VM.

Use a sole-tenant node.

Enable deletion protection on the instance.

NEW QUESTION 224
You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions.
You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?

Create a single budget for all projects and configure budget alerts on this budget.

Create a separate billing account per sandbox project and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per billing account.

Create a budget per project and configure budget alerts on all of these budgets.

Create a single billing account for all sandbox projects and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per project.

NEW QUESTION 225
You’ve created a Pod using the kubectl run command. Now you’re attempting to remove the Pod, and it keeps being recreated. Which command might help you as you attempt to remove the pod?

gcloud container describe pods

kubectl get pods

kubectl get secrets

kubectl get deployments

NEW QUESTION 226
You are assigned to maintain a Google Kubernetes Engine (GKE) cluster named dev that was deployed on Google Cloud. You want to manage the GKE configuration using the command line interface (CLI). You have just downloaded and installed the Cloud SDK. You want to ensure that future CLI commands by default address this specific cluster. What should you do?

Use the command gcloud config set container/cluster dev.

Use the command gcloud container clusters update dev.

Create a file called gke.default in the ~/.gcloud folder that contains the cluster name.

Create a file called defaults.json in the ~/.gcloud folder that contains the cluster name.

NEW QUESTION 227
Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.

Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
* Instances in tier #1 must communicate with tier #2.
* Instances in tier #2 must communicate with tier #3.
What should you do?

1. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.1.0/24)* Protocols: allow all

1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow TCP:80802. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow TCP: 8080

1. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #2 service account* Source filter: all instances with tier #1 service account* Protocols: allow all2. Create an ingress firewall rule with the following settings:* Targets: all instances with tier #3 service account* Source filter: all instances with tier #2 service account* Protocols: allow all

1. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to 10.0.2.0/24)* Protocols: allow TCP: 80802. Create an egress firewall rule with the following settings:* Targets: all instances* Source filter: IP ranges (with the range set to
10.0.1.0/24)* Protocols: allow TCP: 8080

NEW QUESTION 228
You are hosting an application from Compute Engine virtual machines (VMs) in us-central1-a.
You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?

– Create Compute Engine resources in us-central1-b.
– Balance the load across both us-central1-a and us-central1-b.

– Create a Managed Instance Group and specify us-central1-a as the zone.
– Configure the Health Check with a short Health Interval.

– Create an HTTP(S) Load Balancer.
– Create one or more global forwarding rules to direct traffic to your VMs.

– Perform regular backups of your application.
– Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.
– Restore from backups when notified.

NEW QUESTION 229
You have been asked to set up the billing configuration for a new Google Cloud customer. Your customer wants to group resources that share common IAM policies. What should you do?

Use labels to group resources that share common IAM policies

Use folders to group resources that share common IAM policies

Set up a proper billing account structure to group IAM policies

Set up a proper project naming structure to group IAM policies

NEW QUESTION 230
You’re attempting to set up a new budget with some alerts. Your team lead asked you to use last months spending as a reference for the budget amount. What’s the best way to configure this budget?

Locate the spending data from the File export; use that as the budget amount.

Locate the spending data from the BigQuery export; use that as the budget amount.

Look at the spending data and locate the amount; use that as the budget amount.

Use the “Last month’s spend” option to allow Google Cloud to determine the budget amount.

NEW QUESTION 231
Your company has an existing GCP organization with hundreds of projects and a billing account.
Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?

Link the acquired company’s projects to your company’s billing account.

Configure the acquired company’s billing account and your company’s billing account to export the billing data into the same BigQuery dataset.

Migrate the acquired company’s projects into your company’s GCP organization. Link the migrated projects to your company’s billing account.

Create a new GCP organization and a new billing account. Migrate the acquired company’s projects and your company’s projects into the new GCP organization and link the projects to the new billing account.

NEW QUESTION 232
Your company uses Pub/Sub for event-driven workloads. You have a subscription named email-updates attached to the new-orders topic. You need to fetch and acknowledge waiting messages from this subscription. What should you do?

Use the gcloud pubsub subscriptions seek email-updates command.

Use the gcloud pubsub topics describe new-orders command.

Use the gcloud pubsub subscriptions pull email-updates -auto-ack command.

Use the gcloud pubsub topics list-subscriptions new-orders -1ilter=”email-updates” command.

NEW QUESTION 233
You used the gcloud container clusters command to create two Google Cloud Kubernetes (GKE) clusters prod-cluster and dev-cluster.
* prod-cluster is a standard cluster.
* dev-cluster is an auto-pilot duster.
When you run the Kubect1 get nodes command, you only see the nodes from prod-cluster Which commands should you run to check the node status for dev-cluster?

NEW QUESTION 234
You built an application on your development laptop that uses Google Cloud services. Your application uses Application Default Credentials for authentication and works fine on your development laptop. You want to migrate this application to a Compute Engine virtual machine (VM) and set up authentication using Google- recommended practices and minimal changes. What should you do?

Assign appropriate access for Google services to the service account used by the Compute Engine VM.

Create a service account with appropriate access for Google services, and configure the application to use this account.

Store credentials for service accounts with appropriate access for Google services in a config file, and deploy this config file with your application.

Store credentials for your user account with appropriate access for Google services in a config file, and deploy this config file with your application.

NEW QUESTION 235
You created a Google Cloud Platform project with an App Engine application inside the project.
You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?

Change the default region property setting in the existing GCP project to asia-northeast1.

Change the region property setting in the existing App Engine application from us-central to asia- northeast1.

Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.

Create a new GCP project and create an App Engine application inside this new project. Specify asia- northeast1 as the region to serve your application.

NEW QUESTION 236
You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub
/Sub API is currently disabled. You will use a service account to authenticate your application to the API.
You want to make sure your application can use Cloud Pub/Sub. What should you do?

Enable the Cloud Pub/Sub API in the API Library on the GCP Console.

Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.

Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.

Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.

NEW QUESTION 237
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

1. In GKE, create a Service of type LoadBalancer that uses the application’s Pods as backend.2. Set the service’s externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

1. In GKE, create a Service of type NodePort that uses the application’s Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.

1. In GKE, create a Service of type LoadBalancer that uses the application’s Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.

1. In GKE, create a Service of type LoadBalancer that uses the application’s Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG’s instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.

NEW QUESTION 238
You developed a new application for App Engine and are ready to deploy it to production. You need to estimate the costs of running your application on Google Cloud Platform as accurately as possible. What should you do?

Create a YAML file with the expected usage. Pass this file to the “gcloud app estimate” command to get an accurate estimation.

Multiply the costs of your application when it was in development by the number of expected users to get an accurate estimation.

Use the pricing calculator for App Engine to get an accurate estimation of the expected charges.

Create a ticket with Google Cloud Billing Support to get an accurate estimation.

NEW QUESTION 239
The core business of your company is to rent out construction equipment at a large scale. All the equipment that is being rented out has been equipped with multiple sensors that send event information every few seconds. These signals can vary from engine status, distance traveled, fuel level, and more. Customers are billed based on the consumption monitored by these sensors. You expect high throughput – up to thousands of events per hour per device – and need to retrieve consistent data based on the time of the event. Storing and retrieving individual signals should be atomic. What should you do?

Create a file in Cloud Storage per device and append new data to that file.

Create a file in Cloud Filestore per device and append new data to that file.

Ingest the data into Datastore. Store data in an entity group based on the device.

Ingest the data into Cloud Bigtable. Create a row key based on the event timestamp.

NEW QUESTION 240
You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault- tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?

Run a test using simulated maintenance events. If the test is successful, use preemptible N1 Standard VMs when running future jobs.

Run a test using simulated maintenance events. If the test is successful, use N1 Standard VMs when running future jobs.

Run a test using a managed instance group. If the test is successful, use N1 Standard VMs in the managed instance group when running future jobs.

Run a test using N1 standard VMs instead of N2. If the test is successful, use N1 Standard VMs when running future jobs.

NEW QUESTION 241
You have deployed an application on a Compute Engine instance. An external consultant needs to access the Linux-based instance. The consultant is connected to your corporate network through a VPN connection, but the consultant has no Google account. What should you do?

Instruct the external consultant to use the gcloud compute ssh command line tool by using Identity-Aware Proxy to access the instance.

Instruct the external consultant to use the gcloud compute ssh command line tool by using the public IP address of the instance to access it.

Instruct the external consultant to generate an SSH key pair, and request the public key from the consultant.
Add the public key to the instance yourself, and have the consultant access the instance through SSH with their private key.

Instruct the external consultant to generate an SSH key pair, and request the private key from the consultant.
Add the private key to the instance yourself, and have the consultant access the instance through SSH with their public key.

Google Associate-Cloud-Engineer certification is an industry-recognized credential that demonstrates an individual’s expertise in cloud engineering using GCP. Google Associate Cloud Engineer Exam certification is an excellent way to showcase your skills to potential employers and increase your chances of getting hired. It is also a valuable asset for individuals looking to advance their careers in cloud computing and work on complex cloud projects using GCP services.

Google Associate-Cloud-Engineer Pre-Exam Practice Tests | It-Tests: https://www.it-tests.com/Associate-Cloud-Engineer.html