Google ACE Practice Test 35 — 15 Questions

Question 1

An organization wants to use Cloud Storage to host a static website. The bucket name must match the domain name. They already own the domain 'example.com' and want to serve the site from 'www.example.com'. Which bucket name should they create?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

www.example.com. To host a website with a custom domain using Cloud Storage, you must use a bucket name that matches the domain (or subdomain). For 'www.example.com', the bucket must be named 'www.example.com'. For the apex domain, it would be 'example.com'.

Answer

example.com

Answer

www_example_com

Answer

example-com-bucket

Question 2

A data scientist wants to deploy a Python function that processes messages from a Pub/Sub topic whenever a new message arrives. The function should be stateless and run in a serverless environment. Which deployment command should be used?

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-point my_entry --region us-central1. Cloud Functions is serverless and can be triggered by Pub/Sub. The command 'gcloud functions deploy' with --trigger-topic creates a function that is triggered by messages on the specified topic.

Answer

gcloud run deploy my-function --source . --region us-central1 --trigger-topic my-topic

Answer

gcloud pubsub subscriptions create my-sub --topic my-topic --push-endpoint https://my-function-url

Answer

gcloud functions deploy my-function --runtime python39 --trigger-http --entry-point my_entry --region us-central1

Question 3

An engineer needs to allow an external IP address (203.0.113.5) to access a Compute Engine instance that only has an internal IP. The instance is in a VPC with Cloud NAT. Which TWO steps are necessary to enable this access?

Accepted Answer

Grant the user the roles/iap.tunnelResourceAccessor IAM role on the instance. To access an internal-only instance from the internet, you need an IAP TCP forwarding tunnel (gcloud compute start-iap-tunnel) and the appropriate IAM role (roles/iap.tunnelResourceAccessor) to use IAP. Alternatively, you could use a bastion host, but IAP is cleaner.

Answer

Set a firewall rule allowing ingress from the IP 203.0.113.5 to port 22

Answer

Modify the Cloud NAT to allow the external IP

Answer

Assign a public IP to the instance

Question 4

A developer wants to create a Compute Engine instance with the default Debian 11 image, a 50 GB boot disk, and in a specific subnet. Which command should be used?

Accepted Answer

gcloud compute instances create my-vm --image-family debian-11 --image-project debian-cloud --boot-disk-size 50GB --subnet my-subnet. The command 'gcloud compute instances create' with flags --image-family, --image-project, --boot-disk-size, and --subnet correctly creates the instance with the specified configuration.

Answer

gcloud compute instances create my-vm --image debian-11 --boot-disk-size 50 --subnet my-subnet

Answer

gcloud compute instances create my-vm --image-family debian-11 --image-project debian-cloud --disk-size 50GB --subnet my-subnet

Answer

gcloud compute instances create my-vm --image-family debian-11 --boot-disk-size 50 --subnet my-subnet

Question 5

A company has a managed instance group (MIG) with a fixed number of instances. They want to add an autoscaling policy that scales based on CPU utilization, with a target utilization of 60%. Which command should be used to update the MIG?

Accepted Answer

gcloud compute instance-groups managed set-autoscaling my-mig --region us-central1 --max-num-replicas 10 --target-cpu-utilization 0.6. The 'gcloud compute instance-groups managed set-autoscaling' command configures autoscaling for a MIG with the specified target CPU utilization.

Answer

gcloud compute instance-groups managed update my-mig --autoscaling --cpu-utilization 60

Answer

gcloud compute instance-groups managed configure-autoscaling my-mig --region us-central1 --target-cpu-utilization 0.6

Answer

gcloud compute instance-groups managed set-autoscaling my-mig --zone us-central1-a --max-num-replicas 10 --target-cpu-utilization 60

Question 6

A company wants to migrate an on-premises MySQL database to Cloud SQL. They need to import an existing SQL dump file stored in a Cloud Storage bucket. Which command should they use?

Accepted Answer

gcloud sql import sql my-instance gs://my-bucket/dump.sql --database=mydb. gcloud sql import sql is the correct command to import a SQL dump file into a Cloud SQL instance. The command specifies the instance, the bucket path, and the database name.

Answer

gcloud compute ssh my-instance --command='mysql < dump.sql'

Answer

gcloud sql databases create mydb --instance=my-instance --import=gs://my-bucket/dump.sql

Answer

gsutil cp gs://my-bucket/dump.sql | mysql -h my-instance -u root -p

Question 7

A company wants to deploy a containerized application on Cloud Run that is built from source code in a local directory. They want Cloud Run to automatically build the container image using Cloud Build. Which command should be used?

Accepted Answer

gcloud run deploy my-service --source . --region us-central1. The 'gcloud run deploy' command with --source and --region flags tells Cloud Run to build and deploy from source. Cloud Build is invoked automatically.

Answer

gcloud app deploy --source .

Answer

gcloud run deploy my-service --image . --region us-central1

Answer

gcloud builds submit --tag gcr.io/my-project/my-image . && gcloud run deploy my-service --image gcr.io/my-project/my-image

Question 8

You want to deploy a Cloud Function triggered by HTTP requests. The function is written in Node.js and the entry point function is named 'helloHttp'. Which command should you use?

Accepted Answer

gcloud functions deploy my-function --runtime nodejs16 --trigger-http --entry-point=helloHttp --region=us-central1. The correct command specifies the runtime (nodejs16), trigger (--trigger-http), entry point (--entry-point=helloHttp), and region. --trigger-topic is for Pub/Sub, not HTTP.

Answer

gcloud functions deploy --source . --runtime nodejs16 --trigger-http --entry-point=helloHttp

Answer

gcloud run deploy my-function --source . --runtime nodejs16 --entry-point=helloHttp

Answer

gcloud functions deploy my-function --runtime nodejs16 --trigger-topic my-topic --entry-point=helloHttp

Question 9

A developer wants to run a one-time query on a large dataset stored in Cloud Storage using BigQuery without loading the data into a table. Which feature should they use?

Accepted Answer

Use a BigQuery federated query with an external table definition. BigQuery federated queries allow querying external data sources (like Cloud Storage) directly using external tables or the EXTERNAL_QUERY function. This avoids loading data.

Answer

Create a permanent table and load the data using gcloud bq load

Answer

Use Cloud SQL to query the data via federated query

Answer

Use gcloud sql import to load data into BigQuery

Question 10

A developer needs to create a Compute Engine VM with 4 vCPUs, 15 GB of memory, and a Debian 10 boot disk. Which gcloud compute instances create command is correct?

Accepted Answer

gcloud compute instances create my-vm --machine-type=n1-standard-4 --image-family=debian-10 --image-project=debian-cloud. The correct command specifies machine-type n1-standard-4 (4 vCPU, 15 GB RAM), image-family debian-10, and image-project debian-cloud. The other options either use wrong machine type, wrong image project, or miss required flags.

Answer

gcloud compute instances create my-vm --machine-type=n1-highmem-4 --image-family=debian-10 --image-project=debian-cloud

Answer

gcloud compute instances create my-vm --machine-type=n1-standard-4 --image-family=ubuntu-1804 --image-project=ubuntu-os-cloud

Answer

gcloud compute instances create my-vm --machine-type=n1-standard-4

Question 11

An engineer deployed a new version of their application on GKE using a Deployment. Users report that the new version has a bug. The engineer wants to quickly revert to the previous version. How can they achieve this?

Accepted Answer

Run kubectl rollout undo deployment/<deployment-name>. Kubernetes Deployments support rollbacks using 'kubectl rollout undo'. The command automatically reverts to the previous revision. Deleting and recreating the Deployment would require re-creating from the previous manifest. 'kubectl rollout history' shows history but doesn't roll back. Scaling down then up does not revert the version.

Answer

Scale the deployment to zero and then scale back up

Answer

Run kubectl delete deployment and re-apply the old manifest

Answer

Run kubectl rollout history deployment/<deployment-name>

Question 12

An engineer needs to SSH into a Compute Engine instance using OS Login. What must be enabled first?

Accepted Answer

Enable OS Login in the project metadata. OS Login must be enabled at the project or instance level using 'gcloud compute project-info add-metadata --enable-oslogin' or similar. Direct SSH key metadata is not needed if OS Login is used.

Answer

Create an SSH key and upload to the instance

Answer

Grant the compute.osLogin role to the user

Answer

Add SSH keys to the project metadata

Question 13

A company has a Cloud Run service that needs to access a Cloud SQL database. What is the recommended way to connect securely?

Accepted Answer

Use Cloud SQL Proxy by adding the Cloud SQL instance connection name to the Cloud Run service. Cloud Run can use the Cloud SQL Proxy via a sidecar container or the built-in Cloud SQL connection using Unix sockets when the Cloud SQL client libraries are used. The recommended way is to use the Cloud SQL proxy (sidecar) or the Cloud SQL connector.

Answer

Use a public IP for the Cloud SQL instance and whitelist the Cloud Run service's IP

Answer

Store database credentials in environment variables

Answer

Use VPC peering to connect Cloud Run to Cloud SQL

Question 14

A team is deploying a containerized microservice on GKE. They want to ensure the service is externally accessible via a stable IP address and can automatically scale the number of pods based on CPU utilization. Which TWO actions should they perform?

Accepted Answer

Expose the deployment using kubectl expose deployment my-service --type=LoadBalancer. To expose the service externally with a stable IP, use a LoadBalancer service type. To autoscale pods based on CPU, create a HorizontalPodAutoscaler. NodePort only exposes on node IPs, not stable external. ClusterIP is internal. Cluster autoscaler scales nodes, not pods.

Answer

Set the service type as ClusterIP

Answer

Create a Cluster Autoscaler on the GKE cluster

Answer

Expose the deployment using kubectl expose deployment my-service --type=NodePort

Question 15

You need to export logs from Cloud Logging to a BigQuery dataset for long-term analysis. What should you create?

Accepted Answer

A log sink with BigQuery as the destination. Log sinks are used to route logs to destinations like BigQuery, Cloud Storage, or Pub/Sub.

Answer

An alerting policy with a log-based trigger

Answer

A log-based metric

Answer

An export job in BigQuery