Google ACE Practice Test 34 — 15 Questions

Question 1

A Cloud Shell user wants to persist Terraform state files across sessions. What is the best approach?

Accepted Answer

Store them in the home directory ($HOME). Cloud Shell provides a persistent 5GB home directory. Storing state files there ensures they persist across sessions.

Answer

Store them in /tmp

Answer

Store them in a Cloud Storage bucket and mount via gcsfuse

Answer

Store them on the instance's local SSD

Question 2

A company wants to track costs for each department by using labels on resources. What is the next step after labeling resources to view costs per label?

Accepted Answer

View billing reports filtered by label. Labels are key-value pairs attached to resources. To view cost breakdown, you can use billing reports or export to BigQuery and query by label.

Answer

Export billing to Cloud Storage and analyze

Answer

Create a billing account budget

Answer

Use the Cost Table in Cloud Console

Question 3

An organization needs to separate development, staging, and production environments using the GCP resource hierarchy. Which approach is most effective?

Accepted Answer

Create folders for dev, staging, and prod under the organization, then place projects in each folder. Using folders under the organization node allows isolating environments, and organization policies can be applied at the folder level for governance.

Answer

Use labels on projects to denote environment, but keep all in one folder

Answer

Create separate projects for each environment without folders

Answer

Create a single project and use separate VPC networks per environment

Question 4

You create a new Google Cloud project using the Cloud Console. After creating the project, you need to enable the Compute Engine API. What is the correct command to do this using the Cloud Shell?

Accepted Answer

gcloud services enable compute.googleapis.com. The gcloud services enable command is used to enable APIs for a project. The correct syntax is 'gcloud services enable compute.googleapis.com'.

Answer

gcloud projects enable compute.googleapis.com

Answer

gcloud compute enable compute.googleapis.com

Answer

gcloud api enable compute

Question 5

A developer wants to use gcloud CLI with application default credentials (ADC) to authenticate to Google APIs from their local machine. Which command should they run first?

Accepted Answer

gcloud auth application-default login. gcloud auth application-default login sets up ADC for the user. This stores credentials that can be used by Google client libraries.

Answer

gcloud auth login

Answer

gcloud init

Answer

gcloud config set auth/application_default true

Question 6

Which Google Cloud service is a fully managed, serverless data warehouse for analytics at petabyte scale, with built-in machine learning capabilities and automatic scaling?

Accepted Answer

BigQuery. BigQuery is a serverless, highly scalable data warehouse that supports SQL queries, automatic scaling, and integrated ML (BigQuery ML).

Answer

Cloud Storage

Answer

Dataproc

Answer

Cloud SQL

Question 7

You are managing a project and need to create a custom IAM role that allows only the permissions compute.instances.list and compute.instances.get. What is the correct way to create this role using gcloud?

Accepted Answer

gcloud iam roles create viewer --project=my-project --permissions="compute.instances.list,compute.instances.get". The command 'gcloud iam roles create' is used to create custom roles. The permissions are specified with the --permissions flag.

Answer

gcloud iam service-accounts create viewer --permissions="compute.instances.list,compute.instances.get"

Answer

gcloud iam roles create viewer --organization=123456 --permissions="compute.instances.*"

Answer

gcloud iam custom-roles create viewer --project=my-project --permissions='compute.instances.list,compute.instances.get'

Question 8

Which gcloud command is used to set the default project for a configuration profile?

Accepted Answer

gcloud config set project. The command 'gcloud config set project [PROJECT_ID]' sets the default project in the current active configuration. The other commands are for other purposes.

Answer

gcloud init

Answer

gcloud projects set

Answer

gcloud projects list

Question 9

What is the purpose of the gcloud init command?

Accepted Answer

To set up a new gcloud configuration and authenticate.. gcloud init is used to initialize or reinitialize the gcloud environment, including setting default project, authentication, and compute region/zone. It can also create a new configuration profile.

Answer

To create a billing account.

Answer

To initialize a new project in Google Cloud.

Answer

To enable APIs for a project.

Question 10

A company uses Cloud SQL for MySQL to host a database. The database must be accessible from a Compute Engine VM in the same region but in a different VPC network (VPC-A). The company does not want to use public IP addresses or VPN. What should the engineer do to enable connectivity?

Accepted Answer

Set up VPC Network Peering between VPC-A and the VPC where Cloud SQL is deployed, and configure Cloud SQL with a private IP. Cloud SQL private services access requires the Cloud SQL instance to be in a VPC network. For connectivity across VPCs, VPC Network Peering can be used, as both VPCs are in the same project or across projects. Private services access connects Cloud SQL to a VPC, and peering allows another VPC to access it.

Answer

Export the Cloud SQL instance as a dump and recreate it in VPC-A

Answer

Configure the Cloud SQL instance with a public IP and allow the VM's IP in authorized networks

Answer

Use Cloud VPN to connect VPC-A to the VPC where Cloud SQL is deployed

Question 11

A developer is using Cloud Shell and wants to ensure that their gcloud configuration persists after the Cloud Shell session ends. They have set the compute and access settings using `gcloud config set`. What should they do to keep these settings for future sessions?

Accepted Answer

The settings are automatically preserved because Cloud Shell's home directory persists. gcloud configurations are stored in the user's home directory and persist across Cloud Shell sessions because the $HOME directory is persistent (with 5GB of persistent disk storage). No additional action is needed.

Answer

They need to create a startup script to apply the settings each time

Answer

They must run `gcloud config configurations save default` before ending the session

Answer

They must use `gcloud config set --persist` flag

Question 12

A user wants to estimate the monthly cost of running a Compute Engine VM with 8 vCPUs, 32 GB of memory, and a 100 GB persistent disk in us-central1 for one year. They plan to use the VM 24/7. Which tool should they use?

Accepted Answer

Google Cloud Pricing Calculator. The Google Cloud Pricing Calculator allows users to estimate costs for GCP services, including Compute Engine instances with specific machine types, persistent disks, and usage duration.

Answer

Cloud Asset Inventory

Answer

Cloud Billing reports

Answer

Cloud Monitoring

Question 13

A developer is deploying a containerized application on Cloud Run. The application needs to be invoked by external HTTPS requests without requiring authentication. Which flag should be included in the 'gcloud run deploy' command?

Accepted Answer

--allow-unauthenticated. The --allow-unauthenticated flag makes the Cloud Run service publicly accessible. By default, Cloud Run requires authentication via IAM. Adding this flag grants the 'run.invoker' role to allUsers.

Answer

--invoker=public

Answer

--ingress=internal

Answer

--no-allow-unauthenticated

Question 14

A company wants to deploy a microservice on GKE. The deployment requires 3 replicas, and the service must be accessible via a fixed public IP address. Which Kubernetes resource should be used to expose the deployment?

Accepted Answer

Service of type LoadBalancer. A LoadBalancer service provisions a Google Cloud TCP/UDP Load Balancer with a public IP. NodePort exposes on node ports but not a fixed IP. ClusterIP is internal only. Ingress is a more advanced option but not the simplest for a fixed IP.

Answer

Ingress resource

Answer

Service of type ClusterIP

Answer

Service of type NodePort

Question 15

A developer is using Cloud Functions with HTTP trigger. The function needs to process a request payload and return a response. What is the correct way to send a JSON response from the function?

Accepted Answer

res.send({ 'status': 'ok' }). In Cloud Functions (Node.js runtime), the response is sent via the res (response) object. The correct method is res.send() or res.json(). res.send() can send JSON directly.

Answer

response.end(JSON.stringify({ 'status': 'ok' }))

Answer

return { 'status': 'ok' }

Answer

context.done(null, { 'status': 'ok' })