Halloween Sale Special - 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: big75certs

Legit Associate-Cloud-Engineer Exam Download

Google Cloud Certified - Associate Cloud Engineer Questions and Answers

Question 17

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

Options:

A.

Create the instance without a public IP address.

B.

Create the instance with Private Google Access enabled.

C.

Create a deny-all egress firewall rule on the VPC network.

D.

Create a route on the VPC to route all traffic to the instance over the VPN tunnel.

Question 18

You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your data. Your users need to be able to access this archived data once a quarter for some regulatory requirements. You want to select a cost-efficient option. Which storage option should you use?

Options:

A.

Coldline Storage

B.

Nearline Storage

C.

Regional Storage

D.

Multi-Regional Storage

Question 19

You need to create a custom VPC with a single subnet. The subnet’s range must be as large as possible. Which range should you use?

Options:

A.

.00.0.0/0

B.

10.0.0.0/8

C.

172.16.0.0/12

D.

192.168.0.0/16

Question 20

You are a Google Cloud organization policy administrator for your company that operates in a regulated industry. You need to enforce a policy that restricts all new location-based Google Cloud resources to the australia-southeast1 and australia-southeast2 regions only. You want to ensure that this policy requires minimal configuration. What should you do?

Options:

A.

Create a custom organization policy that uses the resource.location == ' australia-southeast1 ' || resource.location == ' australia-southeast2 ' Common Expression Language (CEL) condition.

B.

Modify the gcp.resourceLocations list constraint by adding in:australia-locations to the allowed_values list.

C.

Modify the gcp.resourceLocations list constraint by adding in:australia-locations to the denied_values list.

D.

Create a custom organization policy that uses the resource.location.startsWith( ' australia ' ) Common Expression Language (CEL) condition.