support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. Associate Cloud Engineer

Free Associate Cloud Engineer Exam Braindumps
Associate Cloud Engineer Questions 151–155 (page: 32)

Updated On: 10-Feb-2026
Page 32 of 69
PDF with 391 Questions

You are working with a user to set up an application in a new VPC behind a firewall. The user is concerned about data egress. You want to configure the fewest open egress ports.
What should you do?

  1. Set up a low-priority (65534) rule that blocks all egress and a high-priority rule (1000) that allows only the appropriate ports.
  2. Set up a high-priority (1000) rule that pairs both ingress and egress ports.
  3. Set up a high-priority (1000) rule that blocks all egress and a low-priority (65534) rule that allows only the appropriate ports.
  4. Set up a high-priority (1000) rule to allow the appropriate ports.

Answer(s): A


Reference:

https://cloud.google.com/vpc/docs/firewalls#default_firewall_rules



Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling.
What should you do?

  1. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
  2. Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
  3. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
  4. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer(s): A


Reference:

https://cloud.google.com/compute/docs/access/iam



You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet.
What should you do?

  1. Use App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
  2. Use Cloud Functions and configure the bucket as a trigger resource.
  3. Use Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
  4. Use Dataflow as a batch job, and configure the bucket as a data source.

Answer(s): B


Reference:

https://stackoverflow.com/questions/60097828/trigger-python-codes-from-google-cloud-bucket-to- run-against-csv-file-from-anoth



You have been asked to set up Object Lifecycle Management for objects stored in storage buckets. The objects are written once and accessed frequently for 30 days. After 30 days, the objects are not read again unless there is a special need. The objects should be kept for three years, and you need to minimize cost.
What should you do?

  1. Set up a policy that uses Nearline storage for 30 days and then moves to Archive storage for three years.
  2. Set up a policy that uses Standard storage for 30 days and then moves to Archive storage for three years.
  3. Set up a policy that uses Nearline storage for 30 days, then moves the Coldline for one year, and then moves to Archive storage for two years.
  4. Set up a policy that uses Standard storage for 30 days, then moves to Coldline for one year, and then moves to Archive storage for two years.

Answer(s): B


Reference:

https://cloud.google.com/storage/docs/lifecycle



You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements.
What should you do?

  1. Enable the Identity Aware Proxy API on the project.
  2. Scan the bucket using the Data Loss Prevention API.
  3. Allow only a single Service Account access to read the data.
  4. Enable Data Access audit logs for the Cloud Storage API.

Answer(s): D


Reference:

https://cloud.google.com/storage/docs/audit-logs



  PDF
Viewing page 32 of 69
Viewing questions 156 - 160 out of 391 questions


Post your Comments and Discuss Google Associate Cloud Engineer exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!