support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. Associate Cloud Engineer

Free Associate Cloud Engineer Exam Braindumps
Associate Cloud Engineer Questions 161–165 (page: 34)

Updated On: 10-Feb-2026
Page 34 of 69
PDF with 391 Questions

You are performing a monthly security check of your Google Cloud environment and want to know who has access to view data stored in your Google Cloud Project.
What should you do?

  1. Enable Audit Logs for all APIs that are related to data storage.
  2. Review the IAM permissions for any role that allows for data access.
  3. Review the Identity-Aware Proxy settings for each resource.
  4. Create a Data Loss Prevention job.

Answer(s): B


Reference:

https://cloud.google.com/compute/docs/access



Your company has embraced a hybrid cloud strategy where some of the applications are deployed on Google Cloud. A Virtual Private Network (VPN) tunnel connects your Virtual Private Cloud (VPC) in Google Cloud with your company's on-premises network. Multiple applications in Google Cloud need to connect to an on-premises database server, and you want to avoid having to change the IP configuration in all of your applications when the IP of the database changes.
What should you do?

  1. Configure Cloud NAT for all subnets of your VPC to be used when egressing from the VM instances.
  2. Create a private zone on Cloud DNS, and configure the applications with the DNS name.
  3. Configure the IP of the database as custom metadata for each instance, and query the metadata server.
  4. Query the Compute Engine internal DNS from the applications to retrieve the IP of the database.

Answer(s): B


Reference:

https://cloud.google.com/nat/docs/overview



You have developed a containerized web application that will serve internal colleagues during business hours. You want to ensure that no costs are incurred outside of the hours the application is used. You have just created a new Google Cloud project and want to deploy the application.
What should you do?

  1. Deploy the container on Cloud Run for Anthos, and set the minimum number of instances to zero.
  2. Deploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero.
  3. Deploy the container on App Engine flexible environment with autoscaling, and set the value min_instances to zero in the app.yaml.
  4. Deploy the container on App Engine flexible environment with manual scaling, and set the value instances to zero in the app.yaml.

Answer(s): B


Reference:

https://www.cloudthat.com/resources/blog/effortlessly-deploy-containers-with-google-cloud-run



You have experimented with Google Cloud using your own credit card and expensed the costs to your company. Your company wants to streamline the billing process and charge the costs of your projects to their monthly invoice.
What should you do?

  1. Grant the financial team the IAM role of "Billing Account User" on the billing account linked to your credit card.
  2. Set up BigQuery billing export and grant your financial department IAM access to query the data.
  3. Create a ticket with Google Billing Support to ask them to send the invoice to your company.
  4. Change the billing account of your projects to the billing account of your company.

Answer(s): D



You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset.
What should you do?

  1. Create a Service Account in your own project, and grant this Service Account access to BigQuery in your project.
  2. Create a Service Account in your own project, and ask the partner to grant this Service Account access to BigQuery in their project.
  3. Ask the partner to create a Service Account in their project, and have them give the Service Account access to BigQuery in their project.
  4. Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project.

Answer(s): D


Reference:

https://cloud.google.com/bigquery/docs/samples/bigquery-create-dataset-iam



  PDF
Viewing page 34 of 69
Viewing questions 166 - 170 out of 391 questions


Post your Comments and Discuss Google Associate Cloud Engineer exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!