Google ACE Deploying and Implementing a Cloud Solution — 10 Questions

Question 1

You want to create a Compute Engine instance with a default machine type of n1-standard-1, using the latest Debian 11 image, with a 50GB boot disk, in the us-central1-a zone. Which gcloud command accomplishes this?

Accepted Answer

gcloud compute instances create my-instance --machine-type=n1-standard-1 --image-family=debian-11 --image-project=debian-cloud --boot-disk-size=50GB --zone=us-central1-a. The correct command uses --machine-type, --image-family, --image-project, --boot-disk-size, and --zone. Option A includes all required flags correctly.

Answer

gcloud compute instances create my-instance --machine-type=n1-standard-1 --image-family=debian-10 --image-project=debian-cloud --boot-disk-size=50 --zone=us-central1-a

Answer

gcloud compute instances create my-instance --machine-type=n1-standard-1 --image-family=debian-11 --image-project=debian-cloud --boot-disk-size=50GB --region=us-central1-a

Answer

gcloud compute instances create my-instance --machine-type=n1-standard-1 --image-family=debian-11 --image-project=debian-cloud --root-disk-size=50GB --zone=us-central1-a

Question 2

You have a managed instance group (MIG) with instances that need to run a startup script to configure monitoring agents. You created the instance template without a startup script. Which action should you take to add the startup script?

Accepted Answer

Create a new instance template with the startup script, then update the MIG to use the new template via a rolling update.. Instance templates are immutable; you cannot modify them. You must create a new instance template with the startup script and update the MIG to use it via rolling update or by setting the template.

Answer

Use gcloud compute instances add-metadata to add the startup script to each running instance.

Answer

Delete the MIG and recreate it with a new template; you cannot change the template of an existing MIG.

Answer

Edit the existing instance template and add the startup script under 'metadata'.

Question 3

An organization needs to deploy a containerized web application on Google Kubernetes Engine (GKE) and expose it to the internet with a static IP address. The cluster is regional, with 3 nodes. Which sequence of kubectl commands achieves this?

Accepted Answer

gcloud compute addresses create web-ip --region=us-central1; kubectl create deployment web --image=web:v1; kubectl expose deployment web --type=LoadBalancer --port=80 --load-balancer-ip=web-ip. You deploy the application, then expose it with a LoadBalancer service. To get a static IP, you must reserve a global static IP address (using gcloud) and assign it via annotation --load-balancer-ip. Option D is correct.

Answer

kubectl create deployment web --image=web:v1; kubectl expose deployment web --type=LoadBalancer --port=80; then reserve a regional static IP with gcloud compute addresses create web-ip --region us-central1 and assign it via annotation.

Answer

kubectl create deployment web --image=web:v1 --replicas=3; kubectl expose deployment web --type=NodePort --port=80; then use gcloud compute addresses create web-ip --global; kubectl patch service web -p '{"spec":{"loadBalancerIP":"<IP>"}}'

Answer

gcloud compute addresses create web-ip --global; then kubectl create deployment web --image=web:v1; kubectl expose deployment web --type=LoadBalancer --port=80; then patch service to set loadBalancerIP.

Question 4

You deployed a Cloud Run service with gcloud run deploy --image gcr.io/my-project/my-image --platform managed --region us-central1 --allow-unauthenticated. Users report intermittent 503 errors. What is the most likely cause?

Accepted Answer

The service is hitting the maximum number of concurrent requests per container instance (default 80) and needs more instances.. Cloud Run services have a default maximum number of concurrent requests per container instance (default 80). If traffic exceeds that, new instances are created, but if there is a sudden spike or the container takes too long to start, requests may be dropped with 503. Increasing max instances or concurrency settings can help.

Answer

The region us-central1 does not support Cloud Run.

Answer

The container image is not compatible with the managed platform.

Answer

The --allow-unauthenticated flag causes IAM permission errors.

Question 5

You are managing a Cloud Functions deployment that processes messages from a Pub/Sub topic. You need to ensure the function can read messages from the topic and acknowledge them. Which IAM role should you assign to the function's service account?

Accepted Answer

roles/pubsub.subscriber. The Pub/Sub Subscriber role (roles/pubsub.subscriber) grants permission to pull messages and acknowledge them. The function's service account needs this role on the topic or subscription.

Answer

roles/pubsub.publisher

Answer

roles/pubsub.viewer

Answer

roles/iam.serviceAccountUser

Question 6

You need to create a Cloud Storage bucket with the default storage class for frequently accessed data in the us-west1 region. Which command creates the bucket?

Accepted Answer

gsutil mb -c standard -l us-west1 gs://my-bucket. The default storage class is Standard. Command gsutil mb -l us-west1 gs://my-bucket creates a bucket with Standard class in us-west1.

Answer

gsutil mb -s standard -l us-west1 gs://my-bucket

Answer

gsutil mb -l us-west1 gs://my-bucket

Answer

gcloud storage buckets create --storage-class=standard --location=us-west1 gs://my-bucket

Question 7

You need to deploy an application that requires a regional MySQL database with automated backups, high availability, and failover. You also need to store static assets that are publicly accessible. Which TWO Google Cloud services should you use?

Accepted Answer

Cloud SQL (MySQL). Cloud SQL with MySQL provides managed MySQL with high availability (regional) and automated backups. Cloud Storage can host static assets publicly.

Answer

Bigtable

Answer

Cloud Filestore

Answer

Cloud Spanner

Question 8

You are using Terraform to manage a GKE cluster. After running 'terraform apply', the cluster is created. Later, you manually delete the cluster via the Cloud Console. What should you do next to align your Terraform state with the actual infrastructure?

Accepted Answer

Run 'terraform state rm google_container_cluster.my_cluster' to remove the cluster from state, then decide whether to recreate.. If a resource is deleted outside Terraform, 'terraform apply' will try to recreate it from the existing state. To update state to reflect the deletion, you must run 'terraform state rm' to remove the resource from state, then optionally apply to recreate if desired.

Answer

Run 'terraform refresh' to automatically update the state.

Answer

Run 'terraform apply' again to recreate the cluster.

Answer

Run 'terraform destroy' to destroy all resources.

Question 9

You need to allow SSH access to a Compute Engine instance. Which method is the recommended way to manage SSH keys for multiple users?

Accepted Answer

Enable OS Login and assign IAM roles to users.. OS Login is the recommended method for managing SSH access to Compute Engine instances, as it links SSH keys to user accounts and integrates with IAM.

Answer

Add SSH keys to the instance metadata.

Answer

Use gcloud compute ssh with the --ssh-key-file flag.

Answer

Create a custom image with preconfigured SSH keys.

Question 10

You are deploying a high-traffic web application on GKE. You need to automatically scale the number of pods based on CPU utilization. Which THREE steps are required to set up Horizontal Pod Autoscaling (HPA)?

Accepted Answer

Install the metrics-server in the cluster.. To use HPA, you need a deployment (or other scalable resource), you need to apply the HPA resource (e.g., via kubectl autoscale), and you must have metrics-server installed to provide metrics. Creating a service is optional.

Answer

Enable Stackdriver Monitoring for the cluster.

Answer

Expose the Deployment as a Service of type LoadBalancer.