Google ACE Practice Test 39 — 15 Questions

Question 1

You are setting up a new organization in Google Cloud. You want to restrict the regions where resources can be created to comply with data residency requirements. What should you do?

Accepted Answer

Set an organization policy with a constraint on allowed resource locations. Organization policies allow you to set constraints at the organization, folder, or project level. The 'gcp.resource-locations' constraint can restrict resource locations.

Answer

Create a service account with limited permissions

Answer

Set a budget alert that notifies when resources are created outside allowed regions

Answer

Use IAM roles to restrict which users can create resources in specific regions

Question 2

You want to use gcloud CLI to set the default project to 'my-project' and the default compute zone to 'us-central1-a'. Which two gcloud config commands should you run?

Accepted Answer

gcloud config set project my-project and gcloud config set compute/zone us-central1-a. The commands are 'gcloud config set project my-project' and 'gcloud config set compute/zone us-central1-a'.

Answer

gcloud config configurations set project my-project and gcloud config configurations set zone us-central1-a

Answer

gcloud config set project my-project and gcloud config set zone us-central1-a

Answer

gcloud projects set my-project and gcloud compute zones set us-central1-a

Question 3

An engineer needs to give a data analyst access to run BigQuery queries but prevent them from viewing or modifying data in Cloud Storage. The analyst should be able to create new datasets. Which IAM role should the engineer assign at the project level?

Accepted Answer

roles/bigquery.dataEditor. The role roles/bigquery.dataEditor allows creating datasets and querying data, but does not grant any Cloud Storage permissions.

Answer

roles/storage.objectViewer

Answer

roles/bigquery.dataOwner

Answer

roles/bigquery.user

Question 4

An engineer needs to enable the Compute Engine API for a project using the gcloud command line. Which command should they run?

Accepted Answer

gcloud services enable compute.googleapis.com. The command 'gcloud services enable compute.googleapis.com' enables the Compute Engine API for the current project. The other options either list services or are incorrect.

Answer

gcloud compute instances enable-api

Answer

gcloud services list --enabled

Answer

gcloud api enable compute

Question 5

A developer needs to authenticate to Google Cloud from their local machine to run application code that reads from Cloud Storage. They use a service account. Which gcloud command should they use to obtain application credentials?

Accepted Answer

gcloud auth activate-service-account --key-file=KEY_FILE. The command 'gcloud auth application-default login' obtains user credentials for Application Default Credentials (ADC). For a service account, they would use 'gcloud auth activate-service-account' or set the GOOGLE_APPLICATION_CREDENTIALS environment variable.

Answer

gcloud auth login

Answer

gcloud config set account service-account@project.iam.gserviceaccount.com

Answer

gcloud auth application-default login

Question 6

An engineer needs to create a new GCP project using the Cloud SDK. They have already installed and initialized gcloud with a user account that has Billing Account Administrator and Project Creator roles. Which command creates the project 'my-new-project'?

Accepted Answer

gcloud projects create my-new-project. The correct command to create a project is 'gcloud projects create'. It creates a new project with the specified ID.

Answer

gcloud config set project my-new-project

Answer

gcloud alpha projects create my-new-project

Answer

gcloud init my-new-project

Question 7

An engineer is setting up Cloud Shell for the first time. They notice that their home directory persists across sessions. How much storage is allocated to the home directory in Cloud Shell?

Accepted Answer

5 GB. Cloud Shell provides 5 GB of persistent home directory storage.

Answer

10 GB

Answer

1 GB

Answer

20 GB

Question 8

A DevOps engineer wants to set up budget alerts for a GCP project so that the finance team is notified when costs reach 50% and 90% of the budget. Which two configurations are required? (Choose TWO.)

Accepted Answer

Create a budget in the Cloud Billing console. To set up a budget alert with thresholds, you need to create a budget (specifying the amount and scope) and then set alert thresholds (percentages). The budget can also include Pub/Sub notifications, but the question asks for required configurations.

Answer

Enable billing export to BigQuery

Answer

Set up a Cloud Function to monitor billing

Answer

Assign the roles/billing.admin IAM role to the finance team

Question 9

An organization has multiple GCP projects and wants to centralize billing analysis across all projects. They need to export detailed billing data (e.g., cost per SKU per project) to a BigQuery dataset. Which billing export option should they configure?

Accepted Answer

Export detailed billing data to BigQuery. The standard usage cost export to BigQuery provides detailed billing data for analysis.

Answer

Export to CSV to Cloud Storage

Answer

Export to Cloud Billing report

Answer

Export to a Pub/Sub topic

Question 10

What is the basic role that grants full control over all resources in a GCP project?

Accepted Answer

Owner. The Owner role (roles/owner) grants full access, including the ability to manage roles and billing.

Answer

Editor

Answer

Viewer

Answer

Admin

Question 11

An organization wants to enforce that all projects under a specific folder have a set of constraints, such as disabling default network creation and requiring shielded VMs. What is the most efficient way to achieve this?

Accepted Answer

Apply organization policies at the folder level.. Organization policies can be applied at the folder level, inheriting to all projects within that folder. This is more efficient than applying per project. Using Cloud Shell is irrelevant. IAM cannot enforce such constraints. Service accounts are for authentication.

Answer

Use Cloud Shell to run scripts in each project.

Answer

Create IAM roles to restrict default network creation.

Answer

Use a service account to enforce policies.

Question 12

A developer wants to use Cloud Shell for managing GCP resources. Which three statements about Cloud Shell are true? (Choose THREE.)

Accepted Answer

It provides a web-based terminal in the GCP Console. Cloud Shell provides a browser-based terminal with persistent 5GB home directory, and comes pre-installed with common tools like gcloud, kubectl, and terraform. It also includes a code editor.

Answer

It allows unlimited session duration without any timeout

Answer

It can be used only for projects that have billing enabled

Question 13

An engineer needs to create a new project and set up the environment. They are using the gcloud command-line tool. Which two commands are required to create a project and link it to a billing account? (Choose TWO.)

Accepted Answer

gcloud billing projects link PROJECT_ID --billing-account=BILLING_ACCOUNT_ID. To create a project and link a billing account, you need to create the project (gcloud projects create) and then link the billing account (gcloud billing projects link).

Answer

gcloud alpha billing accounts create

Answer

gcloud services enable cloudbilling.googleapis.com

Answer

gcloud config set project PROJECT_ID

Question 14

A company wants to analyze terabytes of structured data using SQL queries. The data is stored in CSV files in Cloud Storage. Which TWO Google Cloud services can be used together to query the data directly without loading it into a database? (Choose 2)

Accepted Answer

BigQuery. BigQuery can query external data sources using external tables or federated queries, including Cloud Storage. Cloud Storage is the storage location for the CSV files. BigQuery can directly query files in Cloud Storage using an external table or a federated query.

Answer

Cloud SQL

Answer

Dataproc

Answer

Dataflow

Question 15

An engineer wants to deploy a Python function that processes messages from a Pub/Sub topic. The function should be triggered whenever a message is published to the topic. Which command should the engineer use to deploy the function?

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-point main --region=us-central1. To deploy a Cloud Function triggered by a Pub/Sub topic, use gcloud functions deploy with --trigger-topic. Option C is correct. Option A uses --trigger-http for HTTP triggers. Option B uses --trigger-topic but misspells --entry-point as --entry-points. Option D uses --trigger-bucket for Cloud Storage events.

Answer

gcloud functions deploy my-function --runtime python39 --trigger-http --entry-point main --region=us-central1

Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-points main --region=us-central1

Answer

gcloud functions deploy my-function --runtime python39 --trigger-bucket my-bucket --entry-point main --region=us-central1