Google ACE Deploying and Implementing a Cloud Solution Practice Test 3 — 15 Questions

Question 1

A team is creating a managed instance group (MIG) for a stateless web application. They need to ensure that instances are automatically replaced if they become unhealthy and that new instances are rolled out gradually with no downtime during updates. Which set of configurations should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a MIG with a health check configured for autohealing; set rolling update with maxSurge=1 and maxUnavailable=0.. To automatically replace unhealthy instances, you must enable autohealing by configuring a health check on the MIG. For gradual updates with no downtime, use a rolling update with maxSurge=1 (allows one new instance to be created before deleting old ones) and maxUnavailable=0 (ensures no instances become unavailable during the update). Option C correctly includes both a health check and the proper rolling update parameters. Option A omits the health check, so unhealthy instances are not replaced. Option B uses maxUnavailable=1, which allows some downtime during updates. Option D omits the health check and uses maxUnavailable=1, failing to meet both requirements.

Answer

Create a MIG without health check; set rolling update with maxSurge=1 and maxUnavailable=0.

Answer

Create a MIG with a health check for autohealing; set rolling update with maxSurge=0 and maxUnavailable=1.

Answer

Create a MIG without health check; set rolling update with maxSurge=0 and maxUnavailable=1.

Question 2

An engineer is deploying a containerized application on Google Kubernetes Engine (GKE) and needs to expose it to the internet with a static external IP address. The cluster is in a VPC-native configuration. Which approach should the engineer take to meet this requirement?

Accepted Answer

Reserve a static external IP address in the same region as the cluster, then create a Service of type LoadBalancer and assign the static IP via the loadBalancerIP field.. To expose a service with a static external IP on GKE, the engineer should reserve a static external IP address, then create a Service of type LoadBalancer and specify that IP address in the service spec using the loadBalancerIP field. Option C correctly describes this. Option A is incorrect because a Service of type NodePort does not provide an external IP on its own; combining it with Cloud NAT does not expose the service with a static external IP. Option B is incorrect because ClusterIP is internal only and cannot be combined with Cloud Load Balancing for a static external IP. Option D is incorrect because while an Ingress can expose a service, it typically requires additional configuration for a static IP and the described approach with NodePort is not straightforward.

Answer

Create a Service of type NodePort and then use a Cloud NAT with a static IP.

Answer

Create a Service of type ClusterIP and then use a Cloud Load Balancing service with the static IP.

Answer

Create a Service of type NodePort and then create an Ingress resource with a static IP annotation.

Question 3

A developer wants to deploy a containerized application on Cloud Run from a source code repository, without building a container image manually. The application is written in Node.js and includes a Dockerfile. Which command should the developer use to deploy directly from source?

Accepted Answer

gcloud run deploy my-service --source . --region=us-central1 --platform managed. Cloud Run supports deploying directly from source using the `gcloud run deploy` command with the `--source` flag. This command automatically builds a container image using Cloud Build from the source code in the specified directory and deploys it to Cloud Run. Option C is correct because it uses `--source .` to deploy from the current directory. Option A uses `--image` which expects a pre-built image. Option B is for App Engine, not Cloud Run. Option D is for Cloud Functions, not Cloud Run.

Answer

gcloud run deploy --image=gcr.io/my-project/my-image --region=us-central1

Answer

gcloud app deploy --source .

Answer

gcloud functions deploy my-function --runtime nodejs14 --trigger-http --source .

Question 4

A company wants to store backup files that are accessed only a few times per year, with retrieval times of up to a few hours. The files must be stored at the lowest possible cost. Which Cloud Storage storage class should the company use?

Accepted Answer

Archive. The Archive storage class is the lowest-cost option for long-term storage of data accessed less than once a year, with retrieval times in hours. It is ideal for backups and archival data. Standard is for frequently accessed data. Nearline is for data accessed once a month. Coldline is for data accessed once a quarter.

Answer

Coldline

Answer

Nearline

Answer

Standard

Question 5

An engineer needs to create a Cloud SQL MySQL instance with 4 vCPUs, 15 GB of RAM, and a root password. The instance should be in the us-east1 region. Which command should the engineer run?

Accepted Answer

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-custom-4-15360 --region=us-east1 --root-password=myPassword. The correct command is D. It specifies the required MySQL 8.0 version, the custom tier db-custom-4-15360 (which provides 4 vCPUs and 15 GB RAM), the region us-east1, and includes the --root-password flag to set the root password. Option A is missing the --root-password flag. Option B uses the wrong tier (db-n1-standard-4 is a predefined tier, not custom, and the region includes a zone). Option C uses the wrong tier (db-custom-2-7680 provides only 2 vCPUs and 7.5 GB RAM, insufficient for the requirements).

Answer

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-custom-4-15360 --region=us-east1

Answer

gcloud sql instances create my-instance --database-version=MYSQL_5_7 --tier=db-n1-standard-4 --region=us-east1-a --root-password=myPassword

Answer

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-custom-2-7680 --region=us-east1 --root-password=myPassword

Question 6

A team is using Terraform to manage Google Cloud resources. They want to store the Terraform state file in a Cloud Storage bucket to enable collaboration. The bucket is in project 'state-project'. Which backend configuration should they use?

Accepted Answer

terraform { backend "gcs" { bucket = "state-project-tfstate" prefix = "prod" } }. To store Terraform state in Google Cloud Storage (GCS), use the 'gcs' backend with the bucket name and an optional prefix. Option A correctly specifies the 'gcs' backend with bucket 'state-project-tfstate' and prefix 'prod'. Option B uses the 'cloud' backend, which is not a valid Terraform backend. Option C uses the 'remote' backend, which is for Terraform Cloud, not GCS. Option D uses the 's3' backend for AWS S3, not GCS.

Answer

terraform { backend "cloud" { bucket = "my-bucket" } }

Answer

terraform { backend "remote" { hostname = "app.terraform.io" organization = "my-org" workspaces { name = "prod" } } }

Answer

terraform { backend "s3" { bucket = "my-bucket" key = "prod/terraform.tfstate" region = "us-east1" } }

Question 7

An administrator needs to create a Cloud Storage bucket in the US with the Nearline storage class and make objects publicly readable via IAM. Which gcloud command should they use to create the bucket?

Accepted Answer

gsutil mb -c NEARLINE -l US gs://my-bucket. The correct command is `gsutil mb -c NEARLINE -l US gs://my-bucket`. This creates a bucket with the Nearline storage class in the US multi-region. Option B uses an invalid flag `-s` (the correct flag for storage class is `-c`) and specifies a regional location (US-CENTRAL1) instead of a multi-region. Option C uses `gcloud storage buckets create` with `--storage-class`, which is not a valid flag; the correct gcloud flag is `--default-storage-class`. Option D uses `gcloud storage buckets create` with `--default-storage-class` but specifies the location as `us` (lowercase), which is invalid; the correct location for a multi-region bucket in the US is `US` (uppercase). Therefore, only command A correctly creates a bucket meeting the requirements.

Answer

gsutil mb -s NEARLINE -l US-CENTRAL1 gs://my-bucket

Answer

gcloud storage buckets create gs://my-bucket --storage-class=NEARLINE --region=US

Answer

gcloud storage buckets create gs://my-bucket --default-storage-class=NEARLINE --location=us

Question 8

An engineer deployed a container to Cloud Run but the service is not receiving traffic. The engineer checks the logs and finds no errors. The container listens on port 8080. What is the most likely cause of the issue?

Accepted Answer

The container is listening on port 3000 instead of the port Cloud Run expects.. Cloud Run injects a PORT environment variable (default 8080) and expects the container to listen on that port. If the container listens on a different port, such as 3000, Cloud Run will not route traffic to it. Option A is incorrect because Cloud Run supports deploying from source using buildpacks. Option C is incorrect because authentication settings do not affect traffic routing; they control access. Option D is incorrect because Cloud Run can handle concurrent requests, but a container that doesn't support concurrency will still receive traffic, just one at a time. Therefore, the most likely cause is a port mismatch.

Answer

The container was deployed from source and Cloud Run requires a pre-built image.

Answer

The service requires authentication but --allow-unauthenticated was not set.

Answer

The container does not support concurrent requests.

Question 9

An engineer is configuring a GKE cluster and wants to enable Horizontal Pod Autoscaling (HPA) for a deployment named 'web-frontend'. The deployment currently has 3 replicas. The engineer wants to automatically scale the number of pods based on CPU utilization, targeting 50% average CPU utilization. Which command should the engineer run?

Accepted Answer

kubectl autoscale deployment web-frontend --cpu-percent=50 --min=3 --max=10. The correct command is kubectl autoscale deployment web-frontend --cpu-percent=50 --min=3 --max=10. This creates an HPA that scales between 3 and 10 replicas based on CPU utilization targeting 50%. Option A uses gcloud container clusters autoscale, which is for node autoscaling, not pod autoscaling. Option B uses --max-cpu flag which is invalid; the correct flag is --cpu-percent. Option D uses --cpu which is incorrect; kubectl autoscale uses --cpu-percent.

Answer

gcloud container clusters autoscale web-frontend --target-cpu-utilization=0.5 --min-nodes=3 --max-nodes=10

Answer

kubectl autoscale deployment web-frontend --max-cpu=50 --min=3 --max=10

Answer

kubectl autoscale deployment web-frontend --cpu=50 --min=3 --max=10

Question 10

A developer needs to SSH into a Compute Engine instance that has OS Login enabled. The developer's Google account is already granted the roles/compute.osLogin role. Which command should the developer use to connect?

Accepted Answer

gcloud compute ssh instance-name --zone=us-central1-a. When OS Login is enabled, the preferred method is `gcloud compute ssh`, which uses OS Login by default. Option B is correct. Option A uses `ssh` with a key, but OS Login typically uses `gcloud`. Option C uses `gcloud compute instances get-serial-port-output` which retrieves serial port output, not SSH. Option D uses `gcloud compute connect-to-serial-port` which is for serial console access, not SSH.

Answer

ssh -i ~/.ssh/google_key user@instance-ip

Answer

gcloud compute instances get-serial-port-output instance-name --zone=us-central1-a

Answer

gcloud compute connect-to-serial-port instance-name --zone=us-central1-a

Question 11

An engineer is using gsutil to upload a large number of files to a Cloud Storage bucket. The upload is proceeding very slowly. Which two actions could improve the upload performance? (Choose two.)

Accepted Answer

Use the gsutil -m option to enable parallel multi-threading.. To improve upload performance to Cloud Storage, you can use two techniques: increasing parallelism and enabling parallel composite uploads. The gsutil -m option (Option A) enables parallel multi-threading, allowing multiple files to be uploaded concurrently. This significantly speeds up bulk uploads. Additionally, you can enable parallel composite uploads for large files by setting the parallel composite upload threshold to a value smaller than the file size (Option D). This causes gsutil to split files into multiple components and upload them in parallel, then reassemble them in the cloud. Option B increases the number of retries, which would only add overhead in case of failures, not improve speed. Option C changes the storage class, which does not affect upload throughput. Option E sets ACLs, which affects permissions but not performance.

Answer

Increase the number of retries using gsutil -o Boto:num_retries=10.

Answer

Change the storage class of the bucket to Standard.

Answer

Set a custom ACL on the bucket to allow faster writes.

Question 12

A company is migrating a legacy monolithic application to GKE. The application consists of multiple microservices that need to communicate with each other. The team wants to manage traffic routing, implement canary deployments, and provide SSL termination. Which three Google Cloud services should they consider using together? (Choose three.)

Accepted Answer

Cloud Endpoints. Cloud Load Balancing provides SSL termination and distributes traffic to backend services, enabling traffic routing and canary deployments by adjusting weights between versions. Cloud CDN caches content, reducing latency and offloading traffic, beneficial for microservices. Cloud Endpoints provides API management, including traffic routing, versioning, and canary releases for APIs. Together, these three services address the requirements. Cloud NAT (for outbound connectivity) and Cloud Armor (security) do not provide the required functionality.

Answer

Cloud NAT

Answer

Cloud Armor

Question 13

An engineer is deploying a Cloud Function that processes files uploaded to a Cloud Storage bucket. The function needs to be triggered by new object creation events. The engineer has already written the function code. Which commands should the engineer run to create the bucket and deploy the function with the correct trigger? (Choose three.)

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-bucket my-bucket --entry-point main --region=us-central1. To create a Cloud Storage bucket, you can use either the `gsutil mb` command (option D) or the `gcloud storage buckets create` command (option E); both are valid. To deploy a Cloud Function triggered by Cloud Storage events, use `gcloud functions deploy` with the `--trigger-bucket` flag (option A). Option B is incorrect because it uses `--trigger-http` (HTTP trigger), which does not match the requirement. Option C is incorrect because it omits the trigger flag entirely. The task requires two distinct commands: one to create the bucket and one to deploy the function with the correct trigger. Therefore, the question should ask to choose two commands, for example, A and D.

Answer

gcloud functions deploy my-function --runtime python39 --trigger-http --entry-point main --region=us-central1

Answer

gcloud functions deploy my-function --runtime python39 --entry-point main --region=us-central1

Answer

gcloud storage buckets create gs://my-bucket --location=us-central1

Question 14

An engineer needs to create a Compute Engine instance with 4 vCPUs, 16 GB of memory, and a 100 GB boot disk using the Ubuntu 22.04 LTS image. Which gcloud command accomplishes this?

Accepted Answer

gcloud compute instances create my-vm --zone=us-central1-a --machine-type=n1-standard-4 --image-family=ubuntu-2204-lts --image-project=ubuntu-os-cloud --boot-disk-size=100GB. The correct command is Option C. It uses machine-type n1-standard-4 (4 vCPU, 15 GB memory, closest to 16 GB), image-family ubuntu-2204-lts (Ubuntu 22.04 LTS), image-project ubuntu-os-cloud (official Ubuntu image project), and boot-disk-size 100GB. Option A uses ubuntu-2004-lts (Ubuntu 20.04 LTS, not 22.04). Option B uses n1-highmem-4 (4 vCPU, 26 GB memory) which exceeds the memory requirement, and uses ubuntu-minimal-2204-lts (minimal image, not standard). Option D uses e2-standard-4 (4 vCPU, 16 GB memory) but image-project debian-cloud is incorrect (should be ubuntu-os-cloud).

Answer

gcloud compute instances create my-vm --zone=us-central1-a --machine-type=n1-standard-4 --image-family=ubuntu-2004-lts --boot-disk-size=100GB

Answer

gcloud compute instances create my-vm --zone=us-central1-a --machine-type=n1-highmem-4 --image-family=ubuntu-minimal-2204-lts --image-project=ubuntu-os-cloud --boot-disk-size=100GB

Answer

gcloud compute instances create my-vm --zone=us-central1-a --machine-type=e2-standard-4 --image-family=ubuntu-2204-lts --image-project=debian-cloud --boot-disk-size=100GB

Question 15

A company has a managed instance group (MIG) of web servers behind a load balancer. They want to deploy a new version of the application with zero downtime and the ability to roll back quickly if issues arise. Which update strategy should they use?

Accepted Answer

Create a new instance template with the updated application, then perform a rolling update on the MIG using the canary update strategy with a target of 10% for the new template. Validate and then promote to 100%.. A canary update strategy (using a new instance template and starting with a small subset of instances) allows you to validate the new version with a small percentage of traffic, and if issues arise, you can easily roll back by stopping the canary. Option A (deleting and recreating the MIG) would cause downtime. Option B (rolling update with maxSurge=0 and maxUnavailable=1) is a valid approach but does not provide the quick rollback capability of a canary; it replaces instances one by one, but if a problem is detected, rolling back requires another update. Option D (creating a new MIG and separate load balancer) is more complex than needed and still requires DNS changes, which can cause delays and potential errors.

Answer

Delete the MIG and recreate it with the new instance template.

Answer

Perform a rolling update on the MIG with maxSurge=0 and maxUnavailable=1 to replace instances one by one.

Answer

Create a new MIG with the new template and a separate load balancer, then update DNS to point to the new load balancer.