Google Associate-Cloud-Engineer 問題集

質問 1：
You have an object in a Cloud Storage bucket that you want to share with an external company. The object contains sensitive data. You want access to the content to be removed after four hours. The external company does not have a Google account to which you can grant specific user-based access privileges. You want to use the most secure method that requires the fewest steps. What should you do?
A. Set object access to 'public' and use object lifecycle management to remove the object after four hours.
B. Configure the storage bucket as a static website and furnish the object's URL to the company. Delete the object from the storage bucket after four hours.
C. Create a signed URL with a four-hour expiration and share the URL with the company.
D. Create a new Cloud Storage bucket specifically for the external company to access. Copy the object to that bucket. Delete the bucket after four hours have passed.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?
A. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
B. Enable node auto-provisioning on the GKE cluster.
C. Create a node pool with preemptible VMs and GPUs attached to those VMs.
D. Create a VerticalPodAutscaler for those workloads.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?
A. Use SSL proxy load balancing for the MIG and a CNAME record in your DNS public zone with the load balancer's IP address.
B. Use HTTP(S) load balancing for the MIG and an A record in your DNS public zone with the load balancer's IP address.
C. Use HTTP(S) load balancing for the MIG and a CNAME record in your DNS private zone with the load balancer's IP address.
D. Use SSL proxy load balancing for the MIG and an A record in your DNS private zone with the load balancer's IP address.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group.
This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?
A. Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group.
Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
B. Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for that instance. Direct them to use the Cloud Shell to ssh to that instance.
C. Enable block project wide keys for the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.
D. Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role.
Direct them to use the Cloud Shell to ssh to that instance.
正解：D

質問 5：
You have been asked to set up the billing configuration for a new Google Cloud customer. Your customer wants to group resources that share common IAM policies. What should you do?
A. Set up a proper billing account structure to group IAM policies
B. Set up a proper project naming structure to group IAM policies
C. Use labels to group resources that share common IAM policies
D. Use folders to group resources that share common IAM policies
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You want to select and configure a solution for storing and archiving data on Google Cloud Platform. You need to support compliance objectives for data from one geographic location. This data is archived after 30 days and needs to be accessed annually. What should you do?
A. Select Multi-Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Coldline Storage.
B. Select Multi-Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Nearline Storage.
C. Select Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Nearline Storage.
D. Select Regional Storage. Add a bucket lifecycle rule that archives data after 30 days to Coldline Storage.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Your company has multiple projects linked to a single billing account in Google Cloud. You need to visualize the costs with specific metrics that should be dynamically calculated based on company-specific criteria. You want to automate the process. What should you do?
A. In the Google Cloud console, use the export functionality of the Cost table. Create a Looker Studiodashboard on top of the CSV export.
B. In the Google Cloud console, visualize the costs related to the projects in the Cost breakdown section.
C. In the Google Cloud console, visualize the costs related to the projects in the Reports section.
D. Configure Cloud Billing data export to BigOuery for the billing account. Create a Looker Studio dashboard on top of the BigOuery export.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Your VMs are running in a subnet that has a subnet mask of 255.255.255.240. The current subnet has no more free IP addresses and you require an additional 10 IP addresses for new VMs. The existing and new VMs should all be able to reach each other without additional routes. What should you do?
A. Delete the subnet, and recreate it using a wider range of IP addresses.
B. Create a new subnet with the same starting IP but a wider range to overwrite the current subnet.
C. Use gcloud to expand the IP range of the current subnet.
D. Create a new project. Use Shared VPC to share the current network with the new project.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You have a number of compute instances belonging to an unmanaged instances group. You need to SSH to one of the Compute Engine instances to run an ad hoc script. You've already authenticated gcloud, however, you don't have an SSH key deployed yet. In the fewest steps possible, what's the easiest way to SSH to the instance?
A. Create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
B. Use the gcloud compute ssh command.
C. Create a key with the ssh-keygen command. Then use the gcloud compute ssh command.
D. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
正解：B
解説: (Topexam メンバーにのみ表示されます)