Associate-Cloud-Engineer最も有効な質問と解答で勉強

You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called What should you do?
proj-vm.

• A. Download the private key from the service account, and add it to each VMs custom metadata.
• B. When creating the VMs, set the service account's API scope for Compute Engine to read/write.
• C. Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
• D. Download the private key from the service account, and add the private key to each VM's SSH keys.

You have a Bigtable instance that consists of three nodes that store personally identifiable information (PII) data. You need to log all read or write operations, including any metadata or configuration reads of this database table, in your company's Security Information and Event Management (SIEM) system. What should you do?

• A. - Navigate to Cloud Monitoring in the Google Cloud console, and create a custom monitoring job for the Bigtable instance to track all changes.
  - Create an alert by using webhook endpoints, with the SIEM endpoint as a receiver.
• B. - Navigate to the Audit Logs page in the Google Cloud console, and enable Data Read, Data Write and Admin Read logs for the Bigtable instance.
  - Create a Pub/Sub topic as a Cloud Logging sink destination, and add your SIEM as a subscriber to the topic.
• C. - Install the Ops Agent on the Bigtable instance during configuration.
  - Create a service account with read permissions for the Bigtable instance.
  - Create a custom Dataflow job with this service account to export logs to the company's SIEM system.
• D. - Navigate to the Audit Logs page in the Google Cloud console, and enable Admin Write logs for the Bigtable instance.
  - Create a Cloud Functions instance to export logs from Cloud Logging to your SIEM.

Your organization is migrating to Google Cloud. You want only users with company-issued Google accounts to access your Google Cloud environment. You must ensure that users of the same department can only access resources within their own department. You want to minimize operational costs while following Google-recommended practices. What should you do?

• A. Assign users to the relevant Google Groups, and provide access to cloud resources through Identity and Access Management (IAM) roles. Periodically identify and remove non-company issued Google accounts.
• B. Create a folder for each department in Resource Manager. Grant the users of each department the Folder Admin role on the folder of their department.
• C. Assign users to the relevant Google Groups, and provide access to cloud resources through Identity and Access Management (IAM) roles. Use organization policies to block non-company issued emails.
• D. Create a folder for each department in Resource Manager. Grant all company users the Folder Admin role on the organization level.

You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?

• A. Deploy the new version in the same application and use the --migrate option.
• B. Create a new App Engine application in the same project. Deploy the new version in that application.
  Use the App Engine library to proxy 1% of the requests to the new version.
• C. Deploy the new version in the same application and use the --splits option to give a weight of 99 to the current version and a weight of 1 to the new version.
• D. Create a new App Engine application in the same project. Deploy the new version in that application.
  Configure your network load balancer to send 1% of the traffic to that new application.

Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?

• A. In the Google Platform Console, go to the Resource Manage and move all projects to the root Organizarion.
• B. In the Google Cloud Platform Console, create a new billing account and set up a payment method.
• C. Contact [email protected] with your bank account details and request a corporate billing account for your company.
• D. Create a ticket with Google Support and wait for their call to share your credit card details over the phone.