Google ACE Deploying and Implementing a Cloud Solution Practice Test 3 — 15 Questions

Question 1

A developer wants to create a Compute Engine instance with the default Debian 11 image, a 50 GB boot disk, and in a specific subnet. Which command should be used?

Accepted Answer

gcloud compute instances create my-vm --image-family debian-11 --image-project debian-cloud --boot-disk-size 50GB --subnet my-subnet. The command 'gcloud compute instances create' with flags --image-family, --image-project, --boot-disk-size, and --subnet correctly creates the instance with the specified configuration.

Answer

gcloud compute instances create my-vm --image debian-11 --boot-disk-size 50 --subnet my-subnet

Answer

gcloud compute instances create my-vm --image-family debian-11 --image-project debian-cloud --disk-size 50GB --subnet my-subnet

Answer

gcloud compute instances create my-vm --image-family debian-11 --boot-disk-size 50 --subnet my-subnet

Question 2

A company has a managed instance group (MIG) with a fixed number of instances. They want to add an autoscaling policy that scales based on CPU utilization, with a target utilization of 60%. Which command should be used to update the MIG?

Accepted Answer

gcloud compute instance-groups managed set-autoscaling my-mig --region us-central1 --max-num-replicas 10 --target-cpu-utilization 0.6. The 'gcloud compute instance-groups managed set-autoscaling' command configures autoscaling for a MIG with the specified target CPU utilization.

Answer

gcloud compute instance-groups managed update my-mig --autoscaling --cpu-utilization 60

Answer

gcloud compute instance-groups managed configure-autoscaling my-mig --region us-central1 --target-cpu-utilization 0.6

Answer

gcloud compute instance-groups managed set-autoscaling my-mig --zone us-central1-a --max-num-replicas 10 --target-cpu-utilization 60

Question 3

A DevOps engineer needs to deploy a containerized application to Google Kubernetes Engine (GKE) using a Deployment YAML file. The cluster is already created and kubectl is configured. Which command should they use to create the deployment?

Accepted Answer

kubectl apply -f deployment.yaml. The 'kubectl apply -f' command applies the configuration from a file to create or update resources. 'kubectl create deployment' typically requires inline parameters, not a file.

Answer

gcloud container deployments create my-deployment --config deployment.yaml

Answer

kubectl create -f deployment.yaml

Answer

kubectl run deployment --image=my-image --restart=Always

Question 4

A team is using Terraform to manage Google Cloud resources. They want to store the Terraform state file in a Cloud Storage bucket to enable collaboration. Which Terraform backend configuration should be used?

Accepted Answer

terraform { backend "gcs" { bucket = "my-tf-state" prefix = "prod" } }. The 'gcs' backend in Terraform stores state in a Cloud Storage bucket. The 'bucket' attribute specifies the bucket name, and 'prefix' is optional for folder structure.

Answer

provider "google" { backend "gcs" { bucket = "my-tf-state" } }

Answer

terraform { backend "cloud-storage" { bucket = "my-tf-state" path = "prod" } }

Answer

terraform { backend "gcs" { bucket = "my-tf-state" folder = "prod" } }

Question 5

A data scientist wants to deploy a Python function that processes messages from a Pub/Sub topic whenever a new message arrives. The function should be stateless and run in a serverless environment. Which deployment command should be used?

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-point my_entry --region us-central1. Cloud Functions is serverless and can be triggered by Pub/Sub. The command 'gcloud functions deploy' with --trigger-topic creates a function that is triggered by messages on the specified topic.

Answer

gcloud run deploy my-function --source . --region us-central1 --trigger-topic my-topic

Answer

gcloud pubsub subscriptions create my-sub --topic my-topic --push-endpoint https://my-function-url

Answer

gcloud functions deploy my-function --runtime python39 --trigger-http --entry-point my_entry --region us-central1

Question 6

A developer needs to create a Cloud Storage bucket with the 'Nearline' storage class in the 'us-east1' region for storing data that is accessed less than once a month. Which command should be used?

Accepted Answer

gsutil mb -c nearline -l us-east1 gs://my-bucket. The 'gsutil mb' command creates a bucket with the specified storage class and location. The -c flag sets the storage class, and -l sets the region.

Answer

gcloud storage buckets create my-bucket --storage-class nearline --location us-east1

Answer

gcloud mb --class nearline --region us-east1 gs://my-bucket

Answer

gsutil mb --storage-class nearline --location us-east1 gs://my-bucket

Question 7

A company wants to allow unauthenticated HTTP invocations of a container deployed on Cloud Run. Which flag should be included in the 'gcloud run deploy' command?

Accepted Answer

--allow-unauthenticated. The '--allow-unauthenticated' flag allows unauthenticated invocations. By default, Cloud Run requires authentication.

Answer

--public

Answer

--no-authentication

Answer

--auth-type public

Question 8

A Cloud SQL for MySQL instance needs to be created with the following requirements: MySQL 8.0, db-n1-standard-2 tier, in us-central1, with root password 'secret'. Which command meets these requirements?

Accepted Answer

gcloud sql instances create my-instance --database-version MYSQL_8_0 --tier db-n1-standard-2 --region us-central1 --root-password secret. The 'gcloud sql instances create' command with --database-version, --tier, --region, and --root-password correctly creates the instance.

Answer

gcloud compute instances create my-instance --database-version MYSQL_8_0 --tier db-n1-standard-2 --region us-central1 --root-password secret

Answer

gcloud sql instances create my-instance --database-version MYSQL8 --tier n1-standard-2 --region us-central1 --password secret

Answer

gcloud sql instances create my-instance --database-version MYSQL_8_0 --machine-type db-n1-standard-2 --region us-central1 --root-password secret

Question 9

An engineer needs to view the logs generated by a Cloud Run service to troubleshoot a recent deployment. Which service should they use?

Accepted Answer

Cloud Logging. Cloud Logging (formerly Stackdriver Logging) is the unified logging service for Google Cloud. Cloud Run logs are automatically sent to Cloud Logging.

Answer

Cloud Monitoring

Answer

Error Reporting

Answer

Cloud Trace

Question 10

A company wants to deploy a containerized application on Cloud Run that is built from source code in a local directory. They want Cloud Run to automatically build the container image using Cloud Build. Which command should be used?

Accepted Answer

gcloud run deploy my-service --source . --region us-central1. The 'gcloud run deploy' command with --source and --region flags tells Cloud Run to build and deploy from source. Cloud Build is invoked automatically.

Answer

gcloud app deploy --source .

Answer

gcloud run deploy my-service --image . --region us-central1

Answer

gcloud builds submit --tag gcr.io/my-project/my-image . && gcloud run deploy my-service --image gcr.io/my-project/my-image

Question 11

A developer needs to make a Cloud Storage bucket publicly readable for all users. Which command should be used to set the appropriate IAM binding?

Accepted Answer

gsutil iam ch allUsers:objectViewer gs://my-bucket. The 'gsutil iam ch' command with 'allUsers' as the member and 'objectViewer' as the role grants public read access. Alternatively, 'gsutil acl ch' can be used, but modern best practice uses IAM.

Answer

gsutil acl ch -u AllUsers:R gs://my-bucket

Answer

gcloud storage buckets add-iam-policy-binding my-bucket --member allUsers --role roles/storage.objectViewer

Answer

gsutil iam set public-read gs://my-bucket

Question 12

An engineer wants to create a regional GKE cluster with 3 nodes by default. Which command should be used?

Accepted Answer

gcloud container clusters create my-cluster --region us-central1 --num-nodes 3. The 'gcloud container clusters create' command with --region (not --zone) creates a regional cluster. --num-nodes specifies the number of nodes per zone.

Answer

gcloud container clusters create my-cluster --zone us-central1-a --num-nodes 3

Answer

gcloud container clusters create my-cluster --region us-central1 --nodes 3

Answer

gcloud compute clusters create my-cluster --region us-central1 --size 3

Question 13

A company wants to deploy a web application that receives high traffic and requires automatic scaling based on CPU usage, with zero-downtime deployments. The application is containerized. Which TWO services should be considered? (Choose 2 correct answers.)

Accepted Answer

Cloud Run. GKE with Horizontal Pod Autoscaler (HPA) and Cloud Run both support containerized applications and automatic scaling based on CPU. Cloud Run is simpler for stateless containers. GKE provides more control. Managed Instance Groups are for VMs, not containers. App Engine Standard is for specific runtimes.

Answer

App Engine Standard Environment

Answer

Compute Engine with autoscaling

Answer

Managed Instance Groups

Question 14

A DevOps engineer is responsible for deploying a new microservice to GKE. They need to expose the service externally on a static IP address and scale based on HTTP request load. Which THREE resources must be created? (Choose 3 correct answers.)

Accepted Answer

Deployment. To expose a microservice externally with a static IP and load-based scaling, you typically create a Deployment, a Service of type LoadBalancer (which provisions a TCP load balancer with a static IP), and a HorizontalPodAutoscaler to scale based on CPU (or custom metrics). Ingress is not required if using LoadBalancer, but it's another option. ConfigMap is not needed for this.

Answer

Ingress

Answer

ConfigMap

Question 15

A company wants to migrate an on-premises MySQL database to Cloud SQL with minimal downtime. The database is 500 GB. Which TWO steps should be taken? (Choose 2 correct answers.)

Accepted Answer

Create a Cloud SQL instance to serve as the target for the migration.. To minimize downtime, you can perform a Database Migration Service (DMS) continuous migration or export/import with a consistent snapshot. DMS supports MySQL and provides continuous sync. Alternatively, you can export the database using mysqldump, then import, but this requires downtime. However, for minimal downtime, DMS is best. Another approach is to create a read replica then promote, but Cloud SQL does not support external read replicas directly. The correct two are: use DMS for continuous migration, and optionally create a clone for testing, but the question asks for migration steps. The best two from the options: use DMS migration job and create a Cloud SQL instance.

Answer

Export the database using gcloud sql export sql, then import to Cloud SQL.

Answer

Create a Cloud SQL instance and configure it as an external replica of the on-premises database.

Answer

Use mysqldump to backup the database and restore into Cloud SQL.