Google Associate-Cloud-Engineer 問題集

質問 1：
You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?
A. Save file automatic first-of-the- month backup for three years Store the backup file in an Archive class Cloud Storage bucket
B. Set up an on-demand backup tor the first of the month Write the backup to an Archive class Cloud Storage bucket
C. Set up an export job for the first of the month Write the export file to an Archive class Cloud Storage bucket
D. Convert the automatic first-of-the-month backup to an export file Write the export file to a Coldline class Cloud Storage bucket
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?
A. Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
B. Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.
C. Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
D. Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection. You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?
A. Enable parallel composite uploads using gsutil on the file transfer.
B. Use the GCP Console to transfer the file instead of gsutil.
C. Decrease the TCP window size on the machine initiating the transfer.
D. Change the storage class of the bucket from Nearline to Multi-Regional.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Your company implemented BigQuery as an enterprise data warehouse. Users from multiple business units run queries on this data warehouse. However, you notice that query costs for BigQuery are very high, and you need to control costs. Which two methods should you use? (Choose two.)
A. Create separate copies of your BigQuery data warehouse for each business unit.
B. Apply a user- or project-level custom query quota for BigQuery data warehouse.
C. Split the users from business units to multiple projects.
D. Change your BigQuery query model from on-demand to flat rate. Apply the appropriate number of slots to each Project.
E. Split your BigQuery data warehouse into multiple data warehouses for each business unit.
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You are about to deploy a new Enterprise Resource Planning (ERP) system on Google Cloud. The application holds the full database in-memory for fast data access, and you need to configure the most appropriate resources on Google Cloud for this application. What should you do?
A. Provision Compute Engine instances with M1 machine type.
B. Provision preemptible Compute Engine instances.
C. Provision Compute Engine instances with GPUs attached.
D. Provision Compute Engine instances with local SSDs attached.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group.
This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?
A. Enable block project wide keys for the instance. Generate an SSH key for each user in the dev1 group.
Distribute the keys to dev1 users and direct them to use their third-party tools to connect.
B. Set metadata to enable-oslogin=true for the instance. Set the service account to no service account for that instance. Direct them to use the Cloud Shell to ssh to that instance.
C. Enable block project wide keys for the instance. Generate an SSH key and associate the key with that instance. Distribute the key to dev1 users and direct them to use their third-party tools to connect.
D. Set metadata to enable-oslogin=true for the instance. Grant the dev1 group the compute.osLogin role.
Direct them to use the Cloud Shell to ssh to that instance.
正解：D

質問 7：
You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?
A. Open the IAM & admin console to review IAM policies for Cloud Spanner roles.
B. Go to the Stackdriver Monitoring console and review information for Cloud Spanner.
C. Open the Cloud Spanner console to review configurations.
D. Go to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?
A. Download a JSON Private Key for the service account. On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine-service-account.
B. Download a JSON Private Key for the service account. After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine-service-account.json.
C. When creating the VM via the web console, specify the service account under the 'Identity and API Access' section.
D. Download a JSON Private Key for the service account. On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.
正解：C

質問 9：
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?
A. Use gcloud iam roles copy and specify your organization as the destination organization.
B. Use gcloud iam roles copy and specify the production project as the destination project.
C. In the Google Cloud Platform Console, use the 'create role' functionality and select all applicable permissions.
D. In the Google Cloud Platform Console, use the 'create role from role' functionality.
正解：B