Google Associate-Cloud-Engineer 問題集

質問 1：
You need to manage a Cloud Spanner Instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?
A. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45% If you exceed this threshold, add nodes lo your instance.
B. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. Use database query statistics to identity queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.
C. Create an alert in Cloud Monitoring to alert when the percentage to high priority CPU utilization reaches 45% Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage
D. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65% If you exceed this threshold, add nodes to your instance
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You have experimented with Google Cloud using your own credit card and expensed the costs to your company. Your company wants to streamline the billing process and charge the costs of your projects to their monthly invoice. What should you do?
A. Create a ticket with Google Billing Support to ask them to send the invoice to your company.
B. Change the billing account of your projects to the billing account of your company.
C. Set up BigQuery billing export and grant your financial department IAM access to query the data.
D. Grant the financial team the IAM role of#€Billing Account User#€ on the billing account linked to your credit card.
正解：B

質問 3：
You manage three Google Cloud projects with the Cloud Monitoring API enabled. You want to follow Google-recommended practices to visualize CPU and network metrics for all three projects together. What should you do?
A. 1. Create a Cloud Monitoring Dashboard2. Collect metrics and publish them into the Pub/Sub topics 3.
Add CPU and network Charts (or each of (he three projects
B. 1. Create a Cloud Monitoring Dashboard.2. Select the CPU and Network metrics from the three projects.
3. Add CPU and network Charts lot each of the three protects.
C. 1. Create a fourth Google Cloud project2 Create a Cloud Workspace from the fourth project and add the other three projects
D. 1 Create a Service Account and apply roles/viewer on the three projects2. Collect metrics and publish them lo the Cloud Monitoring API3. Add CPU and network Charts for each of the three projects.
正解：B

質問 4：
You need to extract text from audio files by using the Speech-to-Text API. The audio files are pushed to a Cloud Storage bucket. You need to implement a fully managed, serverless compute solution that requires authentication and aligns with Google-recommended practices. You want to automate the call to the API by submitting each file to the API as the audio file arrives in the bucket. What should you do?
A. Create a Cloud Function triggered by Cloud Storage bucket events to submit the file URI to the Google Speech-to-Text API.
B. Run a Python script by using a Linux cron job in Compute Engine to scan the bucket regularly for incoming files, and call the Speech-to-Text API for each unprocessed file.
C. Create an App Engine standard environment triggered by Cloud Storage bucket events to submit the file URI to the Google Speech-to-Text API.
D. Run a Kubernetes job to scan the bucket regularly for incoming files, and call the Speech-to-Text API for each unprocessed file.
正解：C

質問 5：
Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?
A. In the G Suite console, add the users to a special group called [email protected] on the default behavior of the Cloud Platform to grant users access if they are members of this group.
B. Enable Cloud Identity in the GCP Console for your domain.
C. Grant them the required IAM roles using their G Suite email address.
D. Create a CSV sheet with all users' email addresses. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You are designing an application that uses WebSockets and HTTP sessions that are not distributed across the web servers. You want to ensure the application runs properly on Google Cloud Platform. What should you do?
A. Meet with the cloud enablement team to discuss load balancer options.
B. Review the encryption requirements for WebSocket connections with the security team.
C. Convert the WebSocket code to use HTTP streaming.
D. Redesign the application to use a distributed user session service that does not rely on WebSockets and HTTP sessions.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?
A. Add your SREs to a group and then add this group to roles/accessapproval approver role.
B. Add your SREs to roles/accessapproval approver role.
C. Add your SREs to roles/iam.roleAdmin role.
D. Add your SREs to a group and then add this group to roles/iam roleAdmin role.
正解：A

質問 8：
You deployed an App Engine application using gcloud app deploy, but it did not deploy to the intended project. You want to find out why this happened and where the application deployed. What should you do?
A. Check the web-application.xml file for your application and check project settings.
B. Check the app.yaml file for your application and check project settings.
C. Go to Cloud Shell and run gcloud config list to review the Google Cloud configuration used for deployment.
D. Go to Deployment Manager and review settings for deployment of applications.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company's security policies, your application must connect to your database through an encrypted and authenticated connection that requires minimal management and integrates with Identity and Access Management (IAM). What should you do?
A. Deploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure IAM database authentication.
B. Deploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure a database user and password.
C. Deploy a Cloud SQL database and configure a database user and password. Access the database through the Cloud SQL Auth Proxy.
D. Deploy a Cloud SOL database and configure IAM database authentication. Access the database through the Cloud SQL Auth Proxy.
正解：D
解説: (Topexam メンバーにのみ表示されます)