다운로드 Google : Associate-Cloud-Engineer 질문 & 답 PDF & Test Software

2026년에도 Google Associate Cloud Engineer은 Google이 공인하는 인증으로 실무 역량을 증명하는 데 효과적입니다. PassTIP의 Associate-Cloud-Engineer 연습문제 410문항으로 인증 취득에 한 걸음 더 가까워지시기 바랍니다.

Google Associate-Cloud-Engineer 시험 개요:

Google Associate-Cloud-Engineer 시험 요강 주제:

Associate-Cloud-Engineer 시험, 수험생이 가장 많이 묻는 질문

최신 Google Cloud Certified Associate-Cloud-Engineer 무료샘플문제

문제 #1

The sales team has a project named Sales Data Digest that has the ID acme-data-digest You need to set up similar Google Cloud resources for the marketing team but their resources must be organized independently of the sales team. What should you do?

A. Create a Project Lien on acme-data digest and then grant the Project Editor role to the Marketing team
B. Create a new protect named Meeting Data Digest and use the ID acme-data-digest Grant the Project Editor role to the Marketing team.
C. Create another protect with the ID acme-marketing-data-digest for the Marketing team and deploy the resources there
D. Grant the Project Editor role to the Marketing learn for acme data digest

문제 #2

Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider.
What should you do?

A. In Cloud Identity, set up SSO with a third-party identity provider with Google as a service provider.
B. In Cloud Identity, set up SSO with Google as an identity provider to access custom SAML apps.
C. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Mobile
& Desktop Apps.
D. Obtain OAuth 2.0 credentials, configure the user consent screen, and set up OAuth 2.0 for Web Server Applications.

문제 #3

Your organization is migrating to Google Cloud. You want only users with company-issued Google accounts to access your Google Cloud environment. You must ensure that users of the same department can only access resources within their own department. You want to minimize operational costs while following Google-recommended practices. What should you do?

A. Assign users to the relevant Google Groups, and provide access to cloud resources through Identity and Access Management (IAM) roles. Use organization policies to block non-company issued emails.
B. Create a folder for each department in Resource Manager. Grant the users of each department the Folder Admin role on the folder of their department.
C. Assign users to the relevant Google Groups, and provide access to cloud resources through Identity and Access Management (IAM) roles. Periodically identify and remove non-company issued Google accounts.
D. Create a folder for each department in Resource Manager. Grant all company users the Folder Admin role on the organization level.

문제 #4

You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application.
You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce- , that has no overlapping IP ranges with the first VPC. This instance needs to connect to the network application on GKE. You want to minimize effort. What should you do?

A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal
3. Peer the two VPCs together.
4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
C. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.
2. Set the service's externalTrafficPolicy to Cluster.
3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
D. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.
2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.
3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.
4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.

문제 #5

Your company is running a critical workload on a single Compute Engine VM instance. Your company's disaster recovery policies require you to back up the entire instance's disk data every day. The backups must be retained for 7 days. You must configure a backup solution that complies with your company's security policies and requires minimal setup and configuration.
What should you do?

A. Configure the instance to use persistent disk asynchronous replication.
B. Configure a bash script using gsutil to run daily through a cron job. Copy the disk's files to a Cloud Storage bucket with archive storage class and an object lifecycle rule to delete the objects after 7 days.
C. Configure Cloud Scheduler to trigger a Cloud Function each day that creates a new machine image and deletes machine images that are older than 7 days.
D. Configure daily scheduled persistent disk snapshots with a retention period of 7 days.

질문과 대답: