Google Associate-Cloud-Engineer 問題集

質問 1：
The DevOps group in your organization needs full control of Compute Engine resources in your development project. However, they should not have permission to create or update any other resources in the project. You want to follow Google's recommendations for setting permissions for the DevOps group. What should you do?
A. Create a custom role at the folder level and grant all compute. instanceAdmln. * permissions to the role Grant the custom role to the DevOps group.
B. Create an IAM policy and grant all compute. instanceAdmln." permissions to the policy Attach the policy to the DevOps group.
C. Grant the basic role roles/viewer and the predefined role roles/compute.admin to the DevOps group.
D. Grant the basic role roles/editor to the DevOps group.
正解：D

質問 2：
You use Cloud Logging lo capture application logs. You now need to use SOL to analyze the application logs in Cloud Logging, and you want to follow Google-recommended practices. What should you do?
A. Enable Log Analytics for the log bucket and create a linked dataset in BigQuery.
B. Export logs to a storage bucket and create an external view in BigQuery.
C. Create a schema for the storage bucket and run SQL queries for the data in the bucket.
D. Develop SQL queries by using Gemini for Google Cloud.
正解：A

質問 3：
Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?
A. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.
B. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
C. Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
D. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?
A. Add your SREs to a group and then add this group to roles/accessapproval approver role.
B. Add your SREs to roles/accessapproval approver role.
C. Add your SREs to roles/iam.roleAdmin role.
D. Add your SREs to a group and then add this group to roles/iam roleAdmin role.
正解：A

質問 5：
You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional
2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?
A. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of
32 GB.
B. Create a Cloud Memorystore for Redis instance with 32-GB capacity.
C. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.
D. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You are using Data Studio to visualize a table from your data warehouse that is built on top of BigQuery.
Data is appended to the data warehouse during the day. At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Data Studio are broken, and you want to analyze the problem. What should you do?
A. Use the BigQuery interface to review the nightly Job and look for any errors
B. Review the Error Reporting page in the Cloud Console to find any errors.
C. In Cloud Logging create a filter for your Data Studio report
D. Use the open source CLI tool. Snapshot Debugger, to find out why the data was not refreshed correctly.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?
A. Create a custom role by removing delete permissions, and add users to that role only.
B. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.
C. Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.
D. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You are deploying an application to a Compute Engine VM in a managed instance group. The application must be running at all times, but only a single instance of the VM should run per GCP project. How should you configure the instance group?
A. Set autoscaling to On, set the minimum number of instances to 1, and then set the maximum number of instances to 2.
B. Set autoscaling to Off, set the minimum number of instances to 1, and then set the maximum number of instances to 1.
C. Set autoscaling to On, set the minimum number of instances to 1, and then set the maximum number of instances to 1.
D. Set autoscaling to Off, set the minimum number of instances to 1, and then set the maximum number of instances to 2.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?
A. Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
B. Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.
C. Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
D. Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
正解：B
解説: (Topexam メンバーにのみ表示されます)