View Full Google Associate Cloud Engineer Exam Dumps and Practice Test Dumps

 

Q321. Which Google Cloud service provides managed message delivery between publishers and subscribers?

1) Cloud Pub/Sub
2) Cloud SQL
3) Cloud DNS
4) Cloud Monitoring

Correct Answer: 1)

Explanation:

Cloud Pub/Sub is a fully managed messaging service that allows applications and services to exchange messages asynchronously. Publishers send messages to topics, while subscribers receive messages through subscriptions. This design helps decouple application components so that producers and consumers do not need to communicate directly. Pub/Sub can support event-driven applications, distributed systems, and data-processing pipelines. Cloud SQL is a relational database service, Cloud DNS manages DNS zones and records, and Cloud Monitoring provides metrics and alerting. Therefore, Cloud Pub/Sub is the most appropriate service when an application requires managed message delivery between independent publishers and subscribers.

Q322. A company wants to prevent accidental deletion of important Cloud Storage objects for a specified period. Which feature should it use?

1) Cloud Storage lifecycle rules
2) Cloud Storage retention policy
3) Cloud CDN
4) Cloud NAT

Correct Answer: 2)

Explanation:

A Cloud Storage retention policy specifies how long objects must be retained before they can be deleted or replaced. This feature can help organizations meet compliance requirements and prevent accidental removal of important data during the configured retention period. Retention policies are different from lifecycle rules, which automate actions such as transitioning objects between storage classes or deleting objects based on conditions. Cloud CDN provides content caching, while Cloud NAT provides outbound connectivity for private resources. Therefore, when the primary requirement is to prevent objects from being deleted before a defined retention period has elapsed, a Cloud Storage retention policy is the appropriate choice.

Q323. An organization wants to ensure that objects in a Cloud Storage bucket cannot be deleted or shortened from their retention period. Which feature provides this protection?

1) Bucket Lock
2) Cloud Scheduler
3) Cloud Monitoring
4) Object Versioning

Correct Answer: 1)

Explanation:

Cloud Storage Bucket Lock can lock a bucket’s retention policy so that the retention configuration cannot be reduced or removed after the policy is locked. This is particularly useful for compliance and regulatory requirements where data must be retained for a defined period and administrators must not be able to shorten that period. Object Versioning protects previous versions of objects but does not provide the same retention-policy locking mechanism. Cloud Scheduler manages recurring jobs, while Cloud Monitoring provides observability. Therefore, Bucket Lock is the appropriate feature when an organization needs stronger protection against changes that could reduce a bucket’s required retention period.

Q324. A company wants older Cloud Storage objects to automatically move to a lower-cost storage class after a specified number of days. Which feature should be configured?

1) Cloud Storage Object Lifecycle Management
2) Cloud Audit Logs
3) Cloud Router
4) IAM Conditions

Correct Answer: 1)

Explanation:

Cloud Storage Object Lifecycle Management allows organizations to automatically perform actions on objects when they meet configured conditions. For example, a lifecycle rule can transition objects from a frequently accessed storage class to a lower-cost class after a specified period. Lifecycle rules can also be used for actions such as deleting objects after a defined age. This reduces manual administration and can help optimize storage costs. Cloud Audit Logs records activity, Cloud Router manages dynamic routing, and IAM Conditions control access based on conditions. Therefore, Object Lifecycle Management is the correct feature for automatically transitioning older Cloud Storage objects according to defined rules.

Q325. Which Cloud Storage feature allows previous versions of an object to remain available after the object is replaced?

1) Bucket Lock
2) Object Versioning
3) Retention policy
4) Cloud CDN

Correct Answer: 2)

Explanation:

Cloud Storage Object Versioning preserves previous versions of objects when they are replaced or deleted. This can help recover data that was accidentally overwritten or deleted and provides an additional layer of protection for important objects. Each version can have its own generation identifier, allowing applications or administrators to reference a particular version. Bucket Lock focuses on protecting retention policies, while retention policies define how long objects must be retained. Cloud CDN provides caching for content delivery. Therefore, Object Versioning is the correct feature when the requirement is to retain older versions of objects after updates or replacements.

Q326. A company stores frequently accessed data in Cloud Storage and needs low-latency access with no minimum storage duration requirement. Which storage class is generally appropriate?

1) Archive
2) Coldline
3) Standard
4) Nearline

Correct Answer: 3)

Explanation:

The Standard storage class is designed for data that is accessed frequently. It provides low-latency access and is suitable for active application data, frequently accessed files, and workloads where access patterns are unpredictable or frequent. Nearline, Coldline, and Archive are intended for progressively less frequently accessed data and can have different pricing and minimum storage-duration considerations. Selecting the appropriate storage class depends on the expected access pattern and retention requirements. Therefore, when data is accessed frequently and the organization wants a storage class suited for active workloads without relying on a minimum storage duration, Standard Storage is the appropriate choice.

Q327. A company wants to store data that is accessed approximately once a month and optimize storage costs. Which Cloud Storage class is generally suitable?

1) Standard
2) Nearline
3) Archive
4) Premium SSD

Correct Answer: 2)

Explanation:

Nearline Storage is designed for data that is accessed relatively infrequently, often around once a month or less frequently. It can provide lower storage costs than Standard Storage while still allowing relatively quick access when data is needed. It is commonly used for backups, data that is periodically accessed, and other information that does not require constant availability for active workloads. Standard Storage is better suited for frequently accessed data, while Archive is intended for data accessed very rarely. Premium SSD is a Compute Engine storage option rather than a Cloud Storage class. Therefore, Nearline is an appropriate choice for monthly-access data.

Q328. A company needs to archive data that may only be accessed once a year. Which Cloud Storage class is most appropriate?

1) Standard
2) Nearline
3) Archive
4) Regional Persistent Disk

Correct Answer: 3)

Explanation:

Archive Storage is designed for long-term retention of data that is accessed very infrequently. It can be appropriate for regulatory records, long-term backups, historical information, and other data that may only need to be retrieved occasionally. While Archive Storage offers lower storage costs, organizations should consider access and retrieval pricing as well as minimum storage-duration requirements when selecting it. Standard Storage is intended for frequently accessed data, while Nearline is more appropriate for data accessed less frequently but still more often than archival data. Therefore, Archive Storage is the best option for information that may only be accessed approximately once a year.

Q329. A Compute Engine VM requires a high-performance temporary local storage option for processing data that does not need to survive VM deletion. Which option should be used?

1) Local SSD
2) Cloud Storage Archive
3) Cloud SQL
4) Cloud DNS

Correct Answer: 1)

Explanation:

Local SSD provides high-performance temporary storage physically associated with a Compute Engine VM. It is useful for workloads that require very fast local storage for temporary data, caches, scratch space, or processing operations where the data can be recreated if necessary. Local SSD data is not intended for durable long-term storage and may not survive certain VM lifecycle events. Persistent Disk is generally more appropriate when data must remain durable and independent of the VM lifecycle. Cloud Storage provides object storage, Cloud SQL provides managed relational databases, and Cloud DNS manages DNS. Therefore, Local SSD is appropriate for high-performance temporary data processing.

Q330. An administrator wants to create a backup of a Compute Engine persistent disk that can later be used to restore the disk. Which feature should be used?

1) Persistent Disk snapshot
2) Cloud DNS zone
3) Firewall rule
4) Cloud NAT

Correct Answer: 1)

Explanation:

Persistent Disk snapshots provide point-in-time backups of persistent disks and can be used to create new disks or restore data later. Snapshots are useful for backup, disaster recovery, migration, and creating repeatable disk states. They provide a convenient way to preserve disk data without manually copying files from the VM. Cloud DNS manages DNS resources, firewall rules control network traffic, and Cloud NAT provides outbound internet access for private resources. Therefore, when an administrator needs a backup of a Compute Engine persistent disk that can later be used for restoration, a Persistent Disk snapshot is the appropriate feature.

Q331. A company wants to protect an application from common web-based attacks such as SQL injection and cross-site scripting. Which Google Cloud service should be considered?

1) Cloud Armor
2) Cloud Scheduler
3) Cloud Storage
4) Cloud Router

Correct Answer: 1)

Explanation:

Cloud Armor provides application protection capabilities for Google Cloud workloads and can help defend against common web-based attacks. Its security policies can include rules designed to detect and mitigate malicious HTTP(S) traffic, including patterns associated with common application-layer attacks. Cloud Armor can work with Google Cloud load-balancing architectures to help protect applications before malicious traffic reaches backend services. Cloud Scheduler manages recurring jobs, Cloud Storage provides object storage, and Cloud Router handles dynamic route exchange. Therefore, Cloud Armor is the most appropriate service when an organization wants to protect a web application against common application-layer attacks such as SQL injection and cross-site scripting.

Q332. A website serves the same static images and files to users around the world. Which Google Cloud service can reduce latency by caching content closer to users?

1) Cloud CDN
2) Cloud SQL
3) Cloud NAT
4) Cloud Audit Logs

Correct Answer: 1)

Explanation:

Cloud CDN uses Google’s distributed edge network to cache eligible content closer to users. When users request cached content, the request can often be served from a nearby edge location instead of repeatedly retrieving the content from the backend. This can reduce latency and improve application performance, particularly for websites serving static files such as images, videos, JavaScript, and stylesheets. Cloud SQL is a managed relational database, Cloud NAT provides outbound connectivity, and Cloud Audit Logs records administrative activity. Therefore, Cloud CDN is the appropriate service for improving delivery performance when users around the world frequently request the same content.

Q333. Which Google Cloud service can distribute incoming application traffic across multiple backend instances?

1) Cloud Load Balancing
2) Cloud KMS
3) Cloud Scheduler
4) Cloud Storage

Correct Answer: 1)

Explanation:

Cloud Load Balancing distributes incoming traffic across available backend resources according to the configured load-balancing architecture. It can improve application availability, scalability, and performance by directing requests to healthy backend instances or services. Google Cloud provides different load-balancing options for various traffic types and deployment requirements. Cloud KMS manages cryptographic keys, Cloud Scheduler runs scheduled tasks, and Cloud Storage provides object storage. Load balancing can also integrate with health checks so that traffic is not sent to unhealthy backends. Therefore, Cloud Load Balancing is the appropriate service when an application needs incoming traffic distributed across multiple backend resources.

Q334. A managed instance group should automatically replace an unhealthy VM after its health check fails. Which feature provides this behavior?

1) Autohealing
2) Cloud CDN
3) Cloud DNS
4) Object Versioning

Correct Answer: 1)

Explanation:

Managed instance group autohealing uses health checks to determine whether instances are functioning properly. When an instance fails the configured health check, the managed instance group can automatically recreate or repair the unhealthy VM according to its configuration. This improves application availability by reducing the need for administrators to manually replace failed instances. Autohealing is different from autoscaling: autoscaling changes the number of instances based on demand, while autohealing focuses on replacing unhealthy instances. Cloud CDN handles content caching, Cloud DNS manages DNS, and Object Versioning protects previous Cloud Storage object versions. Therefore, autohealing is the correct feature for automatically replacing unhealthy VMs.

Q335. A company wants a managed service that automatically increases or decreases Cloud Run instances based on incoming requests. Which capability provides this behavior?

1) Cloud Run autoscaling
2) Persistent Disk snapshots
3) Cloud DNS forwarding
4) Cloud KMS

Correct Answer: 1)

Explanation:

Cloud Run automatically manages the number of running container instances based on incoming workload demand. As request volume increases, Cloud Run can create additional instances to handle traffic. When demand decreases, it can reduce the number of active instances, helping organizations avoid paying for unnecessary capacity. This serverless scaling model eliminates the need to manually provision and manage virtual machines for the application. Persistent Disk snapshots provide disk backups, Cloud DNS forwarding controls DNS query behavior, and Cloud KMS manages encryption keys. Therefore, Cloud Run autoscaling is the correct capability when the application needs instances to adjust automatically according to incoming requests.

Q336. A Cloud Run service needs to access a password without storing the password directly in application source code. Which service should store the password?

1) Secret Manager
2) Cloud Scheduler
3) Cloud CDN
4) Cloud DNS

Correct Answer: 1)

Explanation:

Secret Manager provides a secure location for storing sensitive information such as passwords, API keys, tokens, and other application secrets. Cloud Run services can be configured to access secrets without embedding them directly in application source code. This improves security and simplifies secret rotation because application code does not need to contain or expose sensitive values. Cloud Scheduler is designed for recurring jobs, Cloud CDN provides content caching, and Cloud DNS manages DNS records. Therefore, Secret Manager is the appropriate service for securely storing a password that must be accessed by a Cloud Run application.

Q337. A GKE cluster needs additional worker capacity when workloads increase. Which feature can automatically add or remove nodes based on pending workload requirements?

1) Cluster autoscaler
2) Cloud DNS
3) Cloud KMS
4) Cloud Storage lifecycle management

Correct Answer: 1)

Explanation:

The GKE cluster autoscaler adjusts the number of nodes in a node pool based on workload requirements. When pods cannot be scheduled because existing nodes lack sufficient resources, the autoscaler can add nodes. When capacity is no longer required, it can remove suitable nodes to optimize resource usage. This differs from the Horizontal Pod Autoscaler, which adjusts the number of pod replicas rather than the number of cluster nodes. Cloud DNS manages DNS, Cloud KMS manages encryption keys, and Cloud Storage lifecycle management automates object actions. Therefore, the cluster autoscaler is the correct feature for automatically adjusting GKE node capacity.

Q338. A GKE application needs the number of pod replicas to increase when CPU utilization rises. Which Kubernetes feature should be used?

1) Horizontal Pod Autoscaler
2) Cloud NAT
3) Cloud Router
4) Cloud Storage Versioning

Correct Answer: 1)

Explanation:

The Kubernetes Horizontal Pod Autoscaler, supported by GKE, automatically adjusts the number of pod replicas based on configured metrics such as CPU utilization. When demand increases and the monitored metric exceeds the configured target, the autoscaler can increase the number of replicas. When demand decreases, it can reduce replicas within the configured limits. This is different from the GKE cluster autoscaler, which changes the number of nodes available to run workloads. Cloud NAT handles outbound connectivity, Cloud Router manages dynamic routing, and Cloud Storage Versioning preserves object versions. Therefore, Horizontal Pod Autoscaler is the appropriate choice for scaling pod replicas based on CPU utilization.

Q339. A GKE cluster should not expose its Kubernetes control plane directly to the public internet. Which cluster configuration should be considered?

1) Private cluster
2) Public bucket
3) Cloud CDN
4) External IP address

Correct Answer: 1)

Explanation:

A GKE private cluster is designed to provide stronger network isolation for cluster components and workloads. In a private cluster configuration, nodes can be created without external IP addresses, reducing their direct exposure to the public internet. Access to the control plane can also be configured according to the cluster’s networking and security requirements. This design is useful for organizations that want to minimize public exposure and maintain tighter control over Kubernetes infrastructure. Cloud CDN is used for content delivery, public buckets expose storage resources, and external IP addresses provide public network connectivity. Therefore, a private GKE cluster is the appropriate configuration for reducing public exposure.

Q340. Which Google Cloud service can provide an overview of resources and their configuration across an organization for governance and inventory purposes?

1) Cloud Asset Inventory
2) Cloud Scheduler
3) Cloud NAT
4) Cloud CDN

Correct Answer: 1)

Explanation:

Cloud Asset Inventory provides centralized visibility into Google Cloud resources and their associated metadata and configuration information. It can help administrators understand what resources exist across projects and organizations and can support governance, auditing, compliance, and security investigations. This visibility becomes particularly valuable in large environments where manually tracking resources across many projects would be difficult. Cloud Scheduler is used for recurring jobs, Cloud NAT provides outbound internet connectivity for private resources, and Cloud CDN caches content at edge locations. Therefore, Cloud Asset Inventory is the appropriate service when an organization needs a broad resource inventory for governance and management purposes.