Cymbal superstore is piloting an update to its ecommerce app for the flagship store in minneapolis, minnesota. the app is implemented as a three-tier web service with traffic originating from the local area and resources dedicated for it in us-central1. you need to configure a secure, low-cost network load-balancing architecture for it. how do you proceed?

An understaffed organization is planning to build a mission-critical application that requires single-digit latency and must be highly available at all times without manual intervention. The application would access data stored in a database running in the backend. As a Solutions Architect, which database would you recommend to be used with this application? Options are : • Amazon RDS • Amazon Redshift • Amazon Aurora • Amazon DynamoDB (Correct) Answer :Amazon DynamoDB A company wants to migrate a workload to AWS. The chief information security officer requires that all data be encrypted at rest when stored in the cloud. The company wants complete control of encryption key lifecycle management. The company must be able to immediately remove the key material and audit key usage independently of AWS CloudTrail. The chosen services should integrate with other storage services that will be used on AWS. Which service satisfies these security requirements? Options are : • AWS Key Management Service (AWS KMS) with AWS managed customer master keys (CMKs) • AWS Key Management Service (AWS KMS) with an external key material origin • AWS Key Management Service (AWS KMS) with AWS CloudHSM (Correct) • AWS CloudHSM with the CloudHSM client Answer :AWS Key Management Service (AWS KMS) with AWS CloudHSM You want to develop an application that accepts large files from the users with a typical file size of around 2 gigabytes. The application takes a few seconds to extracts metadata from eac...

Prévia do material em texto Preparing for Your Associate Cloud Engineer Journey Course Workbook Certification Exam Guide Sections 1 Setting up a cloud solution environment 2 Planning and configuring a cloud solution 3 Deploying and implementing a cloud solution 4 Ensuring successful operation of a cloud solution 5 Configuring access and security Section 1: Setting up a cloud solution environment 1 1. Diagnostic Question 01 A. Assign Stella a roles/compute.viewer role. B. Assign Stella compute.instances.get permissions on all of the projects she needs to monitor. C. Add Stella to a Google Group in your organization. Bind that group to roles/compute.viewer. D. Assign the “viewer” policy to Stella. Stella is a new member of a team in your company who has been put in charge of monitoring VM instances in the organization. Stella will need the required permissions to perform this role. How should you grant her those permissions? 1 1. Diagnostic Question 02 A. Organization, Project, Resource, Folder. B. Organization, Folder, Project, Resource. C. Project, Organization, Folder, Resource. D. Resource, Folder, Organization, Project. How are resource hierarchies organized in Google Cloud? 1 1. Diagnostic Question 03 A. The Project ID. B. The Project Name. C. The Project Number. D. The Project Category. What Google Cloud project attributes can be changed? 1 1. Diagnostic Question 04 A. Assign Jane the roles/storage.objectCreator on every project. B. Assign Jane the roles/viewer on eac...

Notes: Hi all, Google Associate Cloud Engineer Practice Exam Part 4 will familiarize you with types of questions you may encounter on the certification exam and help you determine your readiness or if you need more preparation and/or experience. Successful completion of the practice exam does not guarantee you will pass the certification exam as the actual exam is longer and covers a wider range of topics. We highly recommend you should take 1. You deployed a workload to your GKE cluster by running the command kubectl apply -f app.yaml. You also enabled a LoadBalancer service to expose the deployment by running kubectl apply – f service.yaml. Your pods are struggling due to increased load so you decided to enable horizontal pod autoscaler by running kubectl autoscale deployment [YOUR DEPLOYMENT] –cpu-percent=5t -min= 1 max=10. You noticed the autoscaler has launched several new pods but the new pods have failed with the message “Insufficient cpu”. What should you do to resolve this issue? A. Use “kubectl container clusters resize” to add more nodes to the node pool. B. Use “gcloud container clusters resize” to add more nodes to the node pool. C. Edit the managed instance group of the cluster and enable autoscaling. D. Edit the managed instance group of the cluster and increase the number of VMs by 1. Answer: B 10. Your organization is planning to deploy a Python web application to Google Cloud. The web application uses a custom Linux distribution and you want to minimize r...

• Assign permissions to a Google account referenced by the application • Assign permissions through a Google Workspace account referenced by the application • Assign permissions through service account referenced by the application • Assign permissions through a Cloud Identity account referenced by the application Question 2 You are trying to assign roles to the dev and prod projects of Cymbal Superstore’s e-commerce app but are receiving an error when you try to run set-iam policy. The projects are organized into an ecommerce folder in the Cymbal Superstore organizational hierarchy. You want to follow best practices for the permissions you need while respecting the practice of least privilege. What should you do? • Ask your administrator for resourcemanager.projects.setIamPolicy roles for each project • Ask your administrator for the roles/resourcemanager.folderIamAdmin for the ecommerce folder • Ask your administrator for the roles/resourcemanager.organizationAdmin for Cymbal Superstore • Ask your administrator for the roles/iam.securityAdmin role in IAM. Question 3 You have a custom role implemented for administration of the dev/test environment for Cymbal Superstore’s transportation management application. You are developing a pilot to use Cloud Run instead of Cloud Functions. You want to ensure your administrators have the correct access to the new resources. What should you do? • Make the change to the custom role locally and run an update on the custom role • Delete...