Google ACE Practice Test 29 — 15 Questions

Question 1

A company wants to run a stateless containerized web application that scales to zero when not in use. The application receives HTTP requests and must be billed only for the resources consumed during request processing. Which Google Cloud compute service is most appropriate?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Cloud Run. Cloud Run is a serverless container platform that scales to zero and charges per request, CPU, and memory used during request processing. It is ideal for stateless HTTP-triggered workloads.

Answer

Google Kubernetes Engine (GKE) Standard

Answer

Cloud Functions

Answer

Compute Engine

Question 2

A DevOps engineer is using the Google Cloud Pricing Calculator to estimate the monthly cost of a Compute Engine VM running 24/7 for one month. The engineer selects a machine type and adds sustained use discounts. What is the correct way to apply sustained use discounts in the calculator?

Accepted Answer

The calculator automatically applies sustained use discounts based on monthly usage. Sustained use discounts are automatically applied by Google Cloud based on the number of hours a VM runs per month. The calculator includes them automatically when you specify the monthly usage.

Answer

Manually enter a discount percentage

Answer

Select 'Sustained Use Discount' checkbox

Answer

Sustained use discounts are not applicable to Compute Engine

Question 3

You are deploying a high-traffic web application on GKE. You need to automatically scale the number of pods based on CPU utilization. Which THREE steps are required to set up Horizontal Pod Autoscaling (HPA)?

Accepted Answer

Install the metrics-server in the cluster.. To use HPA, you need a deployment (or other scalable resource), you need to apply the HPA resource (e.g., via kubectl autoscale), and you must have metrics-server installed to provide metrics. Creating a service is optional.

Answer

Enable Stackdriver Monitoring for the cluster.

Answer

Expose the Deployment as a Service of type LoadBalancer.

Question 4

A developer is using Cloud Functions (Gen 2) which is based on Cloud Run. They need to handle events from Cloud Storage when a new object is uploaded. Which event type should they use?

Accepted Answer

google.cloud.storage.object.v1.finalized. In Cloud Functions Gen 2, the event type for Cloud Storage object finalization is 'google.cloud.storage.object.v1.finalized'.

Answer

google.cloud.storage.object.v1.metadataUpdated

Answer

google.cloud.storage.object.v1.deleted

Answer

google.cloud.storage.object.v1.archived

Question 5

A company needs to provide outbound internet access to private Compute Engine instances that do not have external IP addresses. The instances must be able to download updates from the internet. Which service should be configured?

Accepted Answer

Cloud NAT. Cloud NAT enables private instances to access the internet for outbound connections while blocking inbound connections from the internet.

Answer

VPC peering

Answer

Cloud VPN

Answer

Private Google Access

Question 6

A company wants to migrate an on-premises PostgreSQL database to Google Cloud. They need a managed database service with high availability and automatic failover. The application uses many stored procedures and extensions specific to PostgreSQL. Which service should they choose?

Accepted Answer

Cloud SQL for PostgreSQL. Cloud SQL for PostgreSQL supports many PostgreSQL extensions and stored procedures. Cloud Spanner is not PostgreSQL-compatible; Firestore is NoSQL; Bare Metal Solution is for on-premises-like deployments, not managed.

Answer

Cloud Spanner

Answer

Bare Metal Solution

Answer

Firestore

Question 7

A team is using BigQuery for analytics. They have a constant query workload and want to reduce costs by switching from on-demand pricing to a flat-rate reservation. They have purchased a BigQuery flat-rate reservation. What additional step is required to use the reservation?

Accepted Answer

Assign the reservation to the desired projects using an assignment. The reservation must be assigned to a project, folder, or organization via a reservation assignment. Without assignment, the reservation is not used, and queries continue to be billed on-demand.

Answer

Enable flat-rate billing in the BigQuery settings

Answer

No additional steps; flat-rate is automatically applied to all queries

Answer

Create a new dataset and move all tables into it

Question 8

A security team wants to ensure that a service account created for an application cannot create new service accounts or modify IAM policies within the project. Which IAM role restriction achieves this?

Accepted Answer

Grant the service account only the specific roles its application requires — omitting IAM admin roles. The principle of least privilege dictates that a service account should only be granted the specific roles required for its application's functionality. By deliberately omitting roles that include IAM administrative permissions (such as roles/iam.serviceAccountAdmin or roles/iam.serviceAccountUser with the iam.serviceAccounts.create permission, or roles/resourcemanager.projectIamAdmin), the service account is inherently restricted from creating new service accounts or modifying IAM policies. This approach avoids the complexity of deny policies and aligns with Google Cloud's recommended IAM best practices.

Answer

Create an IAM deny policy blocking iam.serviceAccounts.create and iam.projects.setIamPolicy for the service account

Answer

Set an organization policy constraint restricting service account creation to admin users only

Answer

Disable the IAM API for the project so service accounts cannot manage IAM

Question 9

Your Cloud Run service has a new revision that you want to gradually shift traffic to. You want to send 10% of traffic to the new revision and 90% to the current one. Which TWO steps are required? (Choose TWO.)

Accepted Answer

Create the new revision by updating the service with a new image tag.. You first create the new revision (by updating the service) and then modify traffic percentages.

Answer

Set a new default URL for the new revision.

Answer

Delete the old revision.

Answer

Enable VPC ingress for the new revision.

Question 10

A company needs to connect their on-premises data center to Google Cloud via a dedicated, high-bandwidth connection with low latency. They anticipate consistent high traffic. Which connectivity option should they use?

Accepted Answer

Dedicated Interconnect. Dedicated Interconnect provides direct physical connections between on-premises and Google Cloud, offering high bandwidth and low latency. Cloud VPN is over the internet; Carrier Peering is for enterprise customers; VPC peering is for connecting VPCs within Google Cloud.

Answer

Carrier Peering

Answer

Cloud VPN

Answer

VPC peering

Question 11

A developer wants to deploy a new application on Google Cloud. The application consists of a frontend service that serves web traffic and a backend service that processes images. Both services need to be containerized. Which two compute options are serverless and support container deployment? (Choose 2)

Accepted Answer

Cloud Functions (2nd gen). Cloud Run and Cloud Functions (2nd gen) both support container images and are serverless (no server management, scale automatically). GKE and Compute Engine are not serverless. Cloud Functions (1st gen) does not support containers.

Answer

Google Kubernetes Engine (GKE)

Answer

Compute Engine

Answer

Cloud Functions (1st gen)

Question 12

A company needs to deploy a web application on Google Cloud that requires high availability across multiple regions. Select TWO services that can help achieve this.

Accepted Answer

Global HTTP(S) Load Balancing. Global HTTP(S) Load Balancing distributes traffic across regions, and Cloud SQL with cross-region replication provides database redundancy. Compute Engine instances in multiple regions serve traffic, and load balancing handles failover.

Answer

Cloud VPN

Answer

Cloud NAT

Answer

Cloud CDN

Question 13

A company wants to migrate a large on-premises MySQL database to Cloud SQL with minimal downtime. Which TWO steps should they take?

Accepted Answer

Set up a Cloud VPN connection between on-premises and Google Cloud. Database Migration Service (DMS) can migrate with minimal downtime using CDC. For the final cutover, a brief write-stop is required to ensure consistency.

Answer

Configure a read replica on-premises and promote it in Google Cloud

Answer

Use gcloud sql import command for the final migration

Answer

Export the database to a SQL dump file and import it to Cloud SQL

Question 14

A company wants to migrate an on-premises MySQL database to Cloud SQL with minimal downtime. The database is 500 GB. Which TWO steps should be taken? (Choose 2 correct answers.)

Accepted Answer

Create a Cloud SQL instance to serve as the target for the migration.. To minimize downtime, you can perform a Database Migration Service (DMS) continuous migration or export/import with a consistent snapshot. DMS supports MySQL and provides continuous sync. Alternatively, you can export the database using mysqldump, then import, but this requires downtime. However, for minimal downtime, DMS is best. Another approach is to create a read replica then promote, but Cloud SQL does not support external read replicas directly. The correct two are: use DMS for continuous migration, and optionally create a clone for testing, but the question asks for migration steps. The best two from the options: use DMS migration job and create a Cloud SQL instance.

Answer

Export the database using gcloud sql export sql, then import to Cloud SQL.

Answer

Create a Cloud SQL instance and configure it as an external replica of the on-premises database.

Answer

Use mysqldump to backup the database and restore into Cloud SQL.

Question 15

You are troubleshooting a slow application that uses multiple microservices. You suspect a particular service is causing high latency. Which TWO Google Cloud tools should you use to identify the root cause? (Select 2)

Accepted Answer

Cloud Monitoring. Cloud Trace traces requests across services to pinpoint latency, and Cloud Monitoring can show metrics like request latency and error rates.

Answer

Cloud Profiler

Answer

Cloud Logging

Answer

Cloud Debugger