Google ACE Practice Test 9 — 10 Questions

Question 1

Your company's compliance policy requires that all customer data stored in Cloud Storage must be encrypted using keys stored in a Hardware Security Module (HSM). The encryption keys must be managed by your security team and must not be exportable. Which configuration meets these requirements?

Accepted Answer

Use Cloud KMS HSM-backed keys (protection level: HSM) with Cloud Storage CMEK.. Option B is correct because Cloud KMS HSM-backed keys (protection level: HSM) ensure that encryption keys are stored in a Hardware Security Module, are managed by the security team, and are non-exportable by design. When used with Cloud Storage CMEK, this configuration meets the compliance requirement for HSM-based key storage with full customer control and no key export capability.

Answer

Use Cloud KMS software keys (protection level: SOFTWARE) with Cloud Storage CMEK.

Answer

Use Customer-Supplied Encryption Keys (CSEK) managed by your security team.

Answer

Enable Google-managed encryption with HSM by selecting it in Cloud Storage settings.

Question 2

Match each IAM role to its typical access level.

Question 3

Match each GCP networking concept to its description.

Question 4

Match each Cloud Storage storage class to its typical use case.

Question 5

Match each Google Kubernetes Engine (GKE) concept to its definition.

Question 6

Match each Cloud Monitoring resource to its purpose.

Question 7

Match each Google Cloud security term to its definition.

Question 8

You want to receive email notifications when your GCP project's billing reaches 50%, 80%, and 100% of a monthly budget. Which GCP feature should you configure?

Accepted Answer

Cloud Billing Budget with alert thresholds at 50%, 80%, and 100%.. Option B is correct because Cloud Billing Budgets allow you to set a budget amount for a GCP project and define alert threshold percentages (e.g., 50%, 80%, 100%). When the actual cost or forecasted cost reaches any threshold, Cloud Billing automatically sends email notifications to Billing Administrators and users you specify. This is the native, purpose-built feature for budget-based billing alerts.

Answer

Cloud Monitoring alerting policies on billing metrics.

Answer

Set a project spending limit in the Cloud Console billing settings.

Answer

Enable billing export to BigQuery and create a scheduled query that sends alert emails.

Question 9

Order the steps to set up a Cloud Storage bucket with uniform bucket-level access and make objects publicly readable.

Question 10

Order the steps to set up a Cloud IAM policy that grants a user the 'roles/compute.admin' role on a specific project.