Google ACE Practice Test 40 — 15 Questions

Question 1

Which gcloud command creates a regional GKE cluster named 'my-cluster' with 3 nodes per zone in the 'us-central1' region?

Accepted Answer

gcloud container clusters create my-cluster --region us-central1 --num-nodes 3. To create a regional cluster, use --region (not --zone). The --num-nodes flag sets nodes per zone.

Answer

gcloud container clusters create my-cluster --zone us-central1 --num-nodes 3

Answer

gcloud container clusters create my-cluster --zone us-central1-a --num-nodes 3

Answer

gcloud container clusters create my-cluster --region us-central1 --nodes 3

Question 2

A DevOps engineer is creating a GKE cluster for a production workload that requires high availability and resilience to zone failures. They also need to deploy a stateless application that can scale based on CPU usage. Which two actions should they take? (Choose two.)

Accepted Answer

Enable horizontal pod autoscaling on the deployment with CPU target utilization. A regional cluster spans multiple zones, providing high availability. An HPA scales pods based on CPU. A zonal cluster is not highly available. Node auto-repair is for node health, not resilience to zone failure. Using a deployment with replicas is good, but the question asks for actions related to cluster creation and scaling.

Answer

Enable node auto-repair on the node pool

Answer

Create a zonal cluster in a single zone

Answer

Set the deployment replicas to 1

Question 3

You need to store a database password securely in Google Cloud. The password will be used by a Compute Engine instance. Which service should you use?

Accepted Answer

Secret Manager. Secret Manager is the correct service for storing secrets like database passwords. It provides encryption, access control, and versioning.

Answer

Cloud Storage

Answer

Cloud KMS

Answer

Cloud Firestore

Question 4

An organization wants to migrate a 5 TB on-premises MongoDB database to Google Cloud. They need to minimize latency for write operations and support global users with strong consistency. Which three services or tools should they consider for this migration? (Choose 3)

Accepted Answer

Transfer Appliance. MongoDB Atlas is available on Google Cloud and provides global distribution with strong consistency. Database Migration Service does not support MongoDB natively. Bigtable is not compatible. Cloud Spanner is globally distributed and strongly consistent. Transfer Appliance is for large data transfers. BigQuery is not suitable.

Answer

Database Migration Service

Answer

Cloud Bigtable

Question 5

A company is deploying a web application on Compute Engine and wants to distribute traffic across multiple instances in different zones for high availability. They also need to terminate SSL/TLS at the load balancer. Which TWO services should they use together?

Accepted Answer

Managed instance group. An external HTTP(S) load balancer provides SSL/TLS termination and distributes traffic across instances in multiple zones. Managed instance groups allow you to manage the instances and autoscale if needed. The load balancer uses the instance group as a backend.

Answer

Cloud CDN

Answer

Internal TCP/UDP load balancer

Answer

Cloud NAT

Question 6

A company needs to store and analyze large amounts of log data (hundreds of terabytes) with occasional SQL queries. The data is rarely accessed after 30 days and must be kept for compliance for 7 years. They want to minimize storage costs. Which three actions should they take? (Choose THREE.)

Accepted Answer

Use Cloud Storage Object Lifecycle Management to move objects to Nearline after 30 days, then to Coldline after 90 days, then to Archive after 1 year. BigQuery is ideal for log analysis. For historical data, moving older data to lower-cost storage classes like NEARLINE or COLDLINE reduces cost. Partitioning and clustering improve query performance and reduce costs. Cloud Storage is an alternative, but BigQuery is better for SQL queries.

Answer

Store the data in BigQuery and set an expiration on the table to delete data after 30 days

Answer

Use BigQuery partitions based on ingestion time and set partition expiration to 30 days

Question 7

A DevOps engineer is responsible for deploying a new microservice to GKE. They need to expose the service externally on a static IP address and scale based on HTTP request load. Which THREE resources must be created? (Choose 3 correct answers.)

Accepted Answer

Deployment. To expose a microservice externally with a static IP and load-based scaling, you typically create a Deployment, a Service of type LoadBalancer (which provisions a TCP load balancer with a static IP), and a HorizontalPodAutoscaler to scale based on CPU (or custom metrics). Ingress is not required if using LoadBalancer, but it's another option. ConfigMap is not needed for this.

Answer

Ingress

Answer

ConfigMap

Question 8

Which kubectl command is used to view the logs of a specific pod named 'my-pod'?

Accepted Answer

kubectl logs my-pod. The 'kubectl logs' command streams logs from a pod. 'kubectl describe' shows metadata, 'kubectl get' shows status, and 'kubectl exec' runs commands inside the pod.

Answer

kubectl exec my-pod -- logs

Answer

kubectl get pod my-pod

Answer

kubectl describe pod my-pod

Question 9

A team is deploying a web application on Cloud Run. The application needs to be available globally with low latency, and the team wants to use a custom domain with an SSL certificate. Which TWO actions are required to achieve this?

Accepted Answer

Configure a custom domain mapping on the Cloud Run service. Cloud Run services are regional; to serve globally, you need a global load balancer (e.g., using an external HTTPS load balancer with serverless NEG). Mapping a custom domain to the service is also required.

Answer

Set the --ingress=all flag on the Cloud Run service

Answer

Use Cloud CDN to cache content

Answer

Deploy the service as a Cloud Run for Anthos on GKE

Question 10

A developer is deploying a new application on GKE and needs to configure a HorizontalPodAutoscaler (HPA). Which two resources are required for HPA to work correctly?

Accepted Answer

CPU utilization metrics. HPA requires a deployment (or other scalable resource) and a target metric, usually CPU utilization. The HPA will scale the deployment based on the metric. A ConfigMap and a service are not strictly required for HPA.

Answer

A Service

Answer

A ConfigMap

Answer

A NodePort service

Question 11

A company wants to set up a Cloud SQL for MySQL instance with automated backups and a read replica for disaster recovery. Which THREE features or configurations should be enabled?

Accepted Answer

Enable automated backups. Automated backups are enabled by default but must be configured. A read replica requires the binary log to be enabled on the primary. The backup location can be set to multi-regional for DR. Cross-region replication requires a replica in another region. Point-in-time recovery uses binary logs.

Answer

Enable deletion protection on the primary instance

Answer

Assign a public IP address to the read replica

Question 12

A Cloud SQL for MySQL instance needs to be created with the following requirements: MySQL 8.0, db-n1-standard-2 tier, in us-central1, with root password 'secret'. Which command meets these requirements?

Accepted Answer

gcloud sql instances create my-instance --database-version MYSQL_8_0 --tier db-n1-standard-2 --region us-central1 --root-password secret. The 'gcloud sql instances create' command with --database-version, --tier, --region, and --root-password correctly creates the instance.

Answer

gcloud compute instances create my-instance --database-version MYSQL_8_0 --tier db-n1-standard-2 --region us-central1 --root-password secret

Answer

gcloud sql instances create my-instance --database-version MYSQL8 --tier n1-standard-2 --region us-central1 --password secret

Answer

gcloud sql instances create my-instance --database-version MYSQL_8_0 --machine-type db-n1-standard-2 --region us-central1 --root-password secret

Question 13

A data engineering team wants to create a Cloud Storage bucket for storing sensitive analytics data. They require encryption at rest with customer-managed keys (CMEK) and want to restrict access to a specific service account. Which three steps are necessary?

Accepted Answer

Set the bucket's default encryption to use the KMS key. To use CMEK, you must create a Cloud KMS key ring and key, then configure the bucket to use that key. Access is controlled via IAM; granting the service account roles/storage.objectAdmin allows full object management. Note: The KMS key must be in the same region as the bucket.

Answer

Enable uniform bucket-level access

Answer

Create a service account and download its JSON key

Question 14

An engineer wants to create a regional GKE cluster with 3 nodes by default. Which command should be used?

Accepted Answer

gcloud container clusters create my-cluster --region us-central1 --num-nodes 3. The 'gcloud container clusters create' command with --region (not --zone) creates a regional cluster. --num-nodes specifies the number of nodes per zone.

Answer

gcloud container clusters create my-cluster --zone us-central1-a --num-nodes 3

Answer

gcloud container clusters create my-cluster --region us-central1 --nodes 3

Answer

gcloud compute clusters create my-cluster --region us-central1 --size 3

Question 15

A company is deploying a microservice on Cloud Run. They want to ensure that the service can handle high traffic spikes by allowing multiple concurrent requests per container instance. They also want to minimize cold starts. Which two settings should they configure? (Choose two.)

Accepted Answer

Set min-instances to a value greater than 0 (e.g., 1). Setting concurrency to a higher value (e.g., 80) allows each container instance to handle multiple requests simultaneously, improving throughput. Setting min-instances to a value greater than 0 keeps instances warm to reduce cold starts. Max-instances limits scaling but does not help with cold starts. CPU always on keeps CPU allocated but does not directly affect cold starts. Timeout affects request duration, not concurrency or cold starts.

Answer

Set the timeout to 900 seconds

Answer

Set CPU always on to true

Answer

Set max-instances to a high value