Google ACE Practice Test 36 — 15 Questions

Question 1

You are using Cloud Run and want to split traffic so that 10% of requests go to revision v2 and 90% go to revision v1. Which command should you use?

Accepted Answer

gcloud run services update-traffic --to-revisions v1=90,v2=10. gcloud run services update-traffic allows traffic splitting between revisions.

Answer

gcloud run deploy --image my-image --traffic v1=90,v2=10

Answer

gcloud run services update --traffic v1=90,v2=10

Answer

gcloud run revisions update v2 --traffic 10

Question 2

Your application uses Pub/Sub to process orders. You notice that the subscription backlog is growing. Which tool should you use to analyze the latency of each step in the processing pipeline?

Accepted Answer

Cloud Trace. Cloud Trace provides end-to-end latency analysis across distributed services, helping identify bottlenecks.

Answer

Cloud Monitoring

Answer

Cloud Profiler

Answer

Cloud Logging

Question 3

You have a Cloud Run service that you want to update to use a new container image. You also want to keep the previous revision available in case you need to roll back. Which command should you use?

Accepted Answer

gcloud run deploy my-service --image gcr.io/my-project/my-app:v2. gcloud run deploy creates a new revision and by default keeps the previous revision(s).

Answer

gcloud run revisions update my-service --image gcr.io/my-project/my-app:v2

Answer

gcloud run services update --image gcr.io/my-project/my-app:v2

Answer

kubectl set image service/my-service my-app=gcr.io/my-project/my-app:v2

Question 4

Your GKE cluster has a node pool that you want to enable autoscaling on. The initial node count is 3, and you want the cluster to scale between 1 and 10 nodes. Which command should you use?

Accepted Answer

gcloud container node-pools update my-pool --cluster=my-cluster --enable-autoscaling --min-nodes 1 --max-nodes 10 --region us-central1. The correct command is gcloud container node-pools update with --enable-autoscaling and the min and max node flags. The cluster name and region/zone are required.

Answer

gcloud container clusters update my-cluster --enable-autoscaling --min-nodes 1 --max-nodes 10 --region us-central1

Answer

gcloud container clusters update my-cluster --enable-autoscaling --min-size 1 --max-size 10 --region us-central1

Answer

gcloud container node-pools update my-pool --cluster=my-cluster --autoscaling --min 1 --max 10 --region us-central1

Question 5

Your GKE cluster is running an older version of Kubernetes. You need to upgrade the cluster's control plane and node pools. Which two steps should you perform? (Choose two.)

Accepted Answer

Upgrade the cluster's control plane using gcloud container clusters upgrade. Upgrading a GKE cluster involves upgrading the cluster (control plane) first using gcloud container clusters upgrade, and then upgrading node pools separately (or they can be auto-upgraded). You cannot upgrade nodes without upgrading the control plane first. Draining nodes is not a step for upgrading, it's for maintenance.

Answer

Create a new cluster with the desired version and migrate workloads

Answer

Drain all nodes using kubectl drain before upgrading

Answer

Manually update the kubelet version on each node

Question 6

Your team wants to send Cloud Monitoring alerts to a Slack channel. You have created a Pub/Sub topic and subscription. Which notification channel type should you configure in Cloud Monitoring?

Accepted Answer

Pub/Sub. Cloud Monitoring can send notifications to Pub/Sub topics, which can then be processed by a subscriber like Slack webhook.

Answer

PagerDuty

Answer

Slack

Answer

Email

Question 7

You need to alert when the CPU utilization of your Compute Engine instance exceeds 80% for 5 minutes. What should you create in Cloud Monitoring?

Accepted Answer

A metric threshold alerting policy. A metric threshold alerting policy triggers when a metric crosses a threshold for a specified duration.

Answer

An uptime check

Answer

A log-based alert

Answer

A dashboard chart

Question 8

Match each GCP networking concept to its description.

Accepted Answer

Firewall Rule: A set of rules that control incoming and outgoing traffic to instances. VPC is a global network, Subnet is regional, Firewall rules control traffic, Cloud Router uses BGP for hybrid connectivity, and VPC Peering connects VPCs privately.

Answer

VPC: A regional IP address range within a VPC

Answer

Subnet: A global, isolated virtual network within Google Cloud

Question 9

You need to drain a GKE node for maintenance, ensuring that daemonsets and pods using emptyDir volumes are handled properly. Which command should you use?

Accepted Answer

kubectl drain NODE --ignore-daemonsets --delete-emptydir-data. kubectl drain with flags ignores daemonsets and deletes emptyDir pods.

Answer

kubectl taint nodes NODE key=value:NoSchedule

Answer

kubectl delete node NODE

Answer

kubectl cordon NODE && kubectl delete pods --all

Question 10

You have a Pub/Sub subscription that is accumulating a backlog of messages. Which Cloud Monitoring metric should you alert on to detect this condition?

Accepted Answer

pubsub.googleapis.com/subscription/oldest_unacked_message_age. The Pub/Sub subscription's 'oldest_unacked_message_age' metric indicates how long the oldest unacknowledged message has been pending. A high value suggests a backlog that is not being processed.

Answer

pubsub.googleapis.com/subscription/sent_messages_count

Answer

pubsub.googleapis.com/subscription/unacked_messages_by_region

Answer

pubsub.googleapis.com/subscription/ack_message_count

Question 11

You are configuring a Cloud NAT to allow private Compute Engine instances to access the internet for updates. What other resource is required to set up Cloud NAT?

Accepted Answer

A Cloud Router. Cloud NAT requires a Cloud Router to manage dynamic routing and NAT configurations. The Cloud Router is created in the same region and VPC network as the NAT gateway.

Answer

A Cloud VPN tunnel

Answer

An interconnect attachment

Answer

A VPC peering connection

Question 12

You need to drain a GKE node for maintenance without disrupting running workloads that are managed by a DaemonSet. Which TWO flags should you use with kubectl drain? (Choose two.)

Accepted Answer

--delete-emptydir-data. kubectl drain evicts pods. By default, it will fail if there are pods not managed by a ReplicationController/ReplicaSet/Deployment or if there are DaemonSet pods. The --ignore-daemonsets flag allows draining despite DaemonSet pods. The --delete-emptydir-data flag is needed if any pods use emptyDir volumes.

Answer

--grace-period=0

Answer

--disable-eviction

Answer

--force

Question 13

You need to view the current IAM policy for a project named 'my-project' in JSON format. Which command should you use?

Accepted Answer

gcloud projects get-iam-policy my-project --format json. The correct command is 'gcloud projects get-iam-policy my-project --format json'. The 'add-iam-policy-binding' command is for adding bindings, 'set-iam-policy' is for setting from a file, and 'list' is not a valid subcommand for IAM policies.

Answer

gcloud projects add-iam-policy-binding my-project --format json

Answer

gcloud iam service-accounts list --project my-project

Answer

gcloud projects set-iam-policy my-project policy.json

Question 14

You need to collect and analyze latency traces for a microservices application running on GKE. You want to identify which services are contributing to overall latency. Which Google Cloud service should you enable and use?

Accepted Answer

Cloud Trace. Cloud Trace is a distributed tracing service that collects latency data from applications and provides tools to analyze performance bottlenecks.

Answer

Cloud Logging

Answer

Cloud Profiler

Answer

Cloud Monitoring

Question 15

You have a Compute Engine instance that is running a CPU-intensive workload. After monitoring, you realize the machine type needs to be upgraded to a larger CPU. What is the correct sequence to change the machine type?

Accepted Answer

Stop the instance, run gcloud compute instances set-machine-type, then start the instance. Changing the machine type requires stopping the instance, then using gcloud compute instances set-machine-type, and finally starting the instance.

Answer

Run gcloud compute instances set-machine-type while the instance is running

Answer

Delete the instance and create a new one with the desired machine type

Answer

Use gcloud compute instances update to change the machine type