Associate-Cloud-Engineer 試験問題を無料オンラインアクセス

You are asked to set up application performance monitoring on Google Cloud projects A, B, and C as a single pane of glass. You want to monitor CPU, memory, and disk. What should you do?

• A.Enable API and then use default dashboards to view all projects in sequence.
• B.Enable API and then give the metrics.reader role to projects A, B, and C.
• C.Enable API and then share charts from project A, B, and C.
• D.Enable API, create a workspace under project A, and then add project B and C.

You are deploying an application to Cloud Run. Your application requires the use of an API that runs on Google Kubernetes Engine (GKE). You need to ensure that your Cloud Run service can privately reach the API on GKE, and you want to follow Google-recommended practices. What should you do?

• A.Deploy an ingress resource on the GKE cluster to expose the API to the internet. Use Cloud Armor to filter for IP addresses that can connect to the API. On the Cloud Run service, configure the application to fetch its public IP address and update the Cloud Armor policy on startup to allow this IP address to call the API on ports 80 and 443.
• B.Deploy an internal Application Load Balancer to expose the API on GKE to the VPC. Configure Cloud DNS with the IP address of the internal Application Load Balancer. Deploy a Serverless VPC Access connector to allow the Cloud Run service to call the API through the FQDN on Cloud DNS.
• C.Create an egress firewall rule on the VPC to allow connections to 0.0.0.0/0 on ports 80 and 443.
• D.Create an ingress firewall rule on the VPC to allow connections from 0.0.0.0/0 on ports 80 and
  443.

Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?

• A.Add the group for the finance team to roles/billing viewer role.
• B.Add the group for the finance team to roles/billing user role.
• C.Add the group for the finance team to roles/billing admin role.
• D.Add the group for the finance team to roles/billing project/Manager role.

Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment).
What should you do?

• A.Create a new service with the new version of the application.
  Split traffic between this version and the version that is currently running.
• B.Create a new revision with the new version of the application.
  Split traffic between this version and the version that is currently running.
• C.Create a new service with the new version of the application.
  Add HTTP Load Balancer in front of both services.
• D.Create a new revision with the new version of the application.
  Add HTTP Load Balancer in front of both revisions.

You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called What should you do?
proj-vm.

• A.Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
• B.Download the private key from the service account, and add it to each VMs custom metadata.
• C.When creating the VMs, set the service account's API scope for Compute Engine to read/write.
• D.Download the private key from the service account, and add the private key to each VM's SSH keys.