最新なGoogle Associate-Cloud-Engineer問題集（410題）、真実試験の問題を全部にカバー！

質問 1：
You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible.
Which range should you use?
A. 0.0.0.0/0
B. 172.16.0.0/12
C. 192.168.0.0/16
D. 10.0.0.0/8
正解：D
解説: (Pass4Test メンバーにのみ表示されます)

質問 2：
You are migrating a business critical application from your local data center into Google Cloud.
As part of your high-availability strategy, you want to ensure that any data used by the application will be immediately available if a zonal failure occurs. What should you do?
A. Store the application data on a regional persistent disk. Create a snapshot schedule for the disk.
If an outage occurs, create a new disk from the most recent snapshot and attach it to a new VM in another zone.
B. Store the application data on a regional persistent disk. If an outage occurs, create an instance in another zone with this disk attached.
C. Store the application data on a zonal persistent disk. Create a snapshot schedule for the disk. If an outage occurs, create a new disk from the most recent snapshot and attach it to a new VM in another zone.
D. Store the application data on a zonal persistent disk. If an outage occurs, create an instance in another zone with this disk attached.
正解：B
解説: (Pass4Test メンバーにのみ表示されます)

質問 3：
Your company uses BigQuery for data warehousing. Over time, many different business units in your company have created 1000+ datasets across hundreds of projects. Your CIO wants you to examine all datasets to find tables that contain an employee_ssn column. You want to minimize effort in performing this task. What should you do?
A. Write a shell script that uses the bq command line tool to loop through all the projects in your organization.
B. Go to Data Catalog and search for employee_ssn in the search box.
C. Write a script that loops through all the projects in your organization and runs a query on INFORMATION_SCHEMA.COLUMNS view to find the employee_ssn column.
D. Write a Cloud Dataflow job that loops through all the projects in your organization and runs a query on INFORMATION_SCHEMA.COLUMNS view to find employee_ssn column.
正解：B
解説: (Pass4Test メンバーにのみ表示されます)

質問 4：
You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP. You want to make sure it is reachable by clients over that port. What should you do?
A. Add the network tag allow-udp-636 to the VM instance running the LDAP server.
B. Create a route called allow-udp-636 and set the next hop to be the VM instance running the LDAP server.
C. Add a network tag of your choice to the instance. Create a firewall rule to allow ingress on UDP port 636 for that network tag.
D. Add a network tag of your choice to the instance running the LDAP server. Create a firewall rule to allow egress on UDP port 636 for that network tag.
正解：C
解説: (Pass4Test メンバーにのみ表示されます)

質問 5：
You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?
A. Use permissions in your role that use the `supported' support level for role permissions.
Set the role stage to BETA while testing the role permissions.
B. Use permissions in your role that use the `testing' support level for role permissions.
Set the role stage to ALPHA while testing the role permissions.
C. Use permissions in your role that use the `supported' support level for role permissions.
Set the role stage to ALPHA while testing the role permissions.
D. Use permissions in your role that use the `testing' support level for role permissions.
Set the role stage to BETA while testing the role permissions.
正解：C
解説: (Pass4Test メンバーにのみ表示されます)

質問 6：
You are working on a project named amazon-ace, and want to list all the roles assigned to users in the project. Which of the following gcloud command would you use?
A. gcloud projects list amazon-ace
B. gcloud iam get-iam-policy amazon-ace
C. gcloud iam list amazon-ace
D. gcloud projects get-iam-policy amazon-ace
正解：D