Associate-Cloud-Engineer 試験問題を無料オンラインアクセス

You manage an App Engine Service that aggregates and visualizes data from BigQuery. The application is deployed with the default App Engine Service account. The data that needs to be visualized resides in a different project managed by another team. You do not have access to this project, but you want your application to be able to read data from the BigQuery dataset. What should you do?

• A.Ask the other team to grant your default App Engine Service account the role of BigQuery Job User.
• B.In Cloud IAM of your project, ensure that the default App Engine service account has the role of BigQuery Data Viewer.
• C.In Cloud IAM of your project, grant a newly created service account from the other team the role of BigQuery Job User in your project.
• D.Ask the other team to grant your default App Engine Service account the role of BigQuery Data Viewer.

Your company requires all developers to have the same permissions, regardless of the Google Cloud project they are working on. Your company's security policy also restricts developer permissions to Compute Engine.
Cloud Functions, and Cloud SQL. You want to implement the security policy with minimal effort. What should you do?

• A.* Add all developers to a Google group in Google Groups for Workspace.* Assign the predefined role of Compute Admin to the Google group at the Google Cloud organization level.
• B.* Add all developers to a Google group in Cloud Identity.* Assign predefined roles for Compute Engine, Cloud Functions, and Cloud SQL permissions to the Google group for each project in the Google Cloud organization.
• C.* Create a custom role with Compute Engine, Cloud Functions, and Cloud SQL permissions in one project within the Google Cloud organization.* Copy the role across all projects created within the organization with the gcloud iam roles copy command.* Assign the role to developers in those projects.
• D.* Add all developers to a Google group in Cloud Identity.* Create a custom role with Compute Engine, Cloud Functions, and Cloud SQL permissions at the Google Cloud organization level.* Assign the custom role to the Google group.

(You manage a VPC network in Google Cloud with a subnet that is rapidly approaching its private IP address capacity. You expect the number of Compute Engine VM instances in the same region to double within a week. You need to implement a Google-recommended solution that minimizes operational costs and does not require downtime. What should you do?)

• A.Delete the existing subnet, and create a new subnet with double the IP range available.
• B.Permit additional traffic from the expected range of private IP addresses to reach your VMs by configuring firewall rules.
• C.Create a second VPC with the same subnet IP range, and connect this VPC to the existing VPC by using VPC Network Peering.
• D.Use the Google Cloud CLI tool to expand the primary IP range of your subnet.

You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group.
This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?

• A.Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for that instance. Direct them to use the Cloud Shell to ssh to that instance.
• B.Enable block project wide keys for the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.
• C.Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group.
  Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
• D.Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role.
  Direct them to use the Cloud Shell to ssh to that instance.

You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

• A.Cloud SQL
• B.Cloud Spanner
• C.Cloud Firestore
• D.Cloud Datastore