Pass with professional Associate-Cloud-Engineer actual quiz materials

You have set a firewall rule that will permit inbound connections to a VM instance named server-
2.
You want to apply this rule only if there is not another rule that would deny that traffic. What priority would you give to this rule?

• A. 1000
• B. 0
• C. 65535
• D. 1

Your company is moving its entire workload to Compute Engine. Some servers should be accessible through the Internet, and other servers should only be accessible over the internal network. All servers need to be able to talk to each other over specific ports and protocols. The current on-premises network relies on a demilitarized zone (DMZ) for the public servers and a Local Area Network (LAN) for the private servers. You need to design the networking infrastructure on Google Cloud to match these requirements. What should you do?

• A. 1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN.
  2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.
• B. 1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN.
  2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.
• C. 1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN.
  2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.
• D. 1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN.
  2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.

Your company wants to migrate your data from an on-premises relational database to Google Cloud. Your current database can no longer scale with respect to the growth of your users, and you expect the number of users to rapidly grow. You need to choose a relational database that allows you to globally scale while minimizing your management and administration efforts. You also want to follow Google-recommended practices. What should you do?

• A. Use Firestore.
• B. Use Spanner.
• C. Use BigQuery.
• D. Use Cloud SQL.

Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?

• A. Add the users to a group, and add this group to roles/browser role.
• B. Add the users to a group, and add this group to roles/iam.roleViewer role.
• C. Add the users to roles/browser role.
• D. Add the users to roles/iam.roleViewer role.

Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted.
You want to migrate this workload to the cloud while minimizing cost. What should you do?

• A. Migrate the workload to a Compute Engine VM.
  Start and stop the instance as needed.
• B. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
• C. Create an Instance Template with Preemptible VMs On.
  Create a Managed Instance Group from the template and adjust Target CPU Utilization.
  Migrate the workload.
• D. Migrate the workload to a Compute Engine Preemptible VM.