Google ACE Deploying and Implementing a Cloud Solution Practice Test 4 — 15 Questions

Question 1

A company wants to deploy a containerized application on Google Cloud that automatically scales to zero when not in use, and they want to minimize operational overhead. They also need to avoid managing any underlying infrastructure such as Kubernetes clusters or VMs. Which service should they use?

Accepted Answer

Cloud Run. Cloud Run is a fully managed serverless platform that can scale to zero when there is no traffic, and it abstracts away infrastructure management. GKE requires managing a cluster, Compute Engine involves managing VMs, and App Engine is also serverless but Cloud Run provides more flexibility with containers and also scales to zero.

Answer

Google Kubernetes Engine (GKE)

Answer

App Engine Standard Environment

Answer

Compute Engine with managed instance groups

Question 2

A developer wants to create a Compute Engine instance with the default Debian 11 image, 50 GB boot disk, in the us-west1-a zone, and attach it to the default VPC subnet. Which command should they run?

Accepted Answer

gcloud compute instances create my-instance --zone=us-west1-a --machine-type=e2-medium --image-family=debian-11 --image-project=debian-cloud --boot-disk-size=50GB. The correct command uses the default subnet (us-west1) and specifies the required parameters. The --subnet default is not necessary if the instance is in the same region as the default subnet, but specifying it is acceptable. The image family 'debian-11' and project 'debian-cloud' are correct.

Answer

gcloud compute instances create my-instance --zone=us-west1-a --machine-type=e2-medium --image-family=debian-11 --image-project=debian-cloud --boot-disk-size=50GB --no-address

Answer

gcloud compute instances create my-instance --zone=us-west1-a --machine-type=e2-medium --image-family=debian-11 --image-project=debian-cloud --boot-disk-size=50 --subnet=default

Answer

gcloud compute instances create my-instance --zone=us-west1 --machine-type=e2-medium --image-family=debian-10 --image-project=debian-cloud --boot-disk-size=50GB

Question 3

A DevOps engineer is configuring a managed instance group (MIG) for a stateless web application. They want to ensure that when new instances are created via rolling update or autoscaling, a startup script runs to install security patches and deploy the latest application code from a Cloud Storage bucket. What is the BEST way to achieve this?

Accepted Answer

Add the script to the instance template using the metadata key 'startup-script'. Using the instance template's metadata key 'startup-script' is the simplest and most reliable method to run custom scripts on instance startup. A custom image requires more maintenance. SSH from Cloud Shell is not automated. A startup script as part of the instance template is the standard approach.

Answer

Create a custom image with pre-installed patches and code, and use that image in the template

Answer

After the MIG is created, use gcloud compute ssh to run the script on each instance

Answer

Store the script in Cloud Storage and use gcloud compute instances add-metadata on each instance

Question 4

A developer needs to create a zonal GKE cluster with 3 nodes of type e2-standard-4 in zone us-central1-a. Which command should they use?

Accepted Answer

gcloud container clusters create my-cluster --zone=us-central1-a --num-nodes=3 --machine-type=e2-standard-4. The correct command creates a zonal cluster (single zone) with specified node count and machine type. The --region flag creates a regional cluster, which is not required.

Answer

gcloud compute instances create my-cluster --zone=us-central1-a --machine-type=e2-standard-4 --num-nodes=3

Answer

gcloud container clusters create my-cluster --zone=us-central1-a --num-nodes=1 --machine-type=e2-standard-4

Answer

gcloud container clusters create my-cluster --region=us-central1 --num-nodes=3 --machine-type=e2-standard-4

Question 5

After deploying a Kubernetes Deployment named 'web-app', a developer wants to expose it externally on a static IP address. Which kubectl command should they use?

Accepted Answer

kubectl expose deployment web-app --type=LoadBalancer --port=80 --target-port=8080. kubectl expose creates a service. To get an external load balancer with a static IP, the service type must be LoadBalancer. The --type flag specifies the service type.

Answer

kubectl create service clusterip web-app --tcp=80:8080

Answer

gcloud compute forwarding-rules create web-app --port=80

Answer

kubectl expose deployment web-app --type=NodePort --port=80

Question 6

A team is deploying a microservice to Cloud Run that needs to process messages from Pub/Sub. The service should only be invocable by Pub/Sub push deliveries, not by unauthenticated HTTP requests. What should the team do?

Accepted Answer

Deploy with --no-allow-unauthenticated and configure the Pub/Sub subscription to use a service account that has the roles/run.invoker role on the Cloud Run service. To restrict invocation to only Pub/Sub, the Cloud Run service must require authentication and the Pub/Sub subscription must be configured to use a service account to push. The --no-allow-unauthenticated flag ensures only authenticated requests are accepted, and the Pub/Sub subscription's push endpoint must be set with the service's URL and use a service account with the run.invoker role.

Answer

Deploy with --allow-unauthenticated and set up a Pub/Sub subscription with OIDC token audience

Answer

Deploy with --no-allow-unauthenticated and create a VPC connector to allow Pub/Sub internal traffic

Answer

Use Cloud Functions instead, which is more secure for Pub/Sub triggers

Question 7

You want to deploy a Cloud Function triggered by HTTP requests. The function is written in Node.js and the entry point function is named 'helloHttp'. Which command should you use?

Accepted Answer

gcloud functions deploy my-function --runtime nodejs16 --trigger-http --entry-point=helloHttp --region=us-central1. The correct command specifies the runtime (nodejs16), trigger (--trigger-http), entry point (--entry-point=helloHttp), and region. --trigger-topic is for Pub/Sub, not HTTP.

Answer

gcloud functions deploy --source . --runtime nodejs16 --trigger-http --entry-point=helloHttp

Answer

gcloud run deploy my-function --source . --runtime nodejs16 --entry-point=helloHttp

Answer

gcloud functions deploy my-function --runtime nodejs16 --trigger-topic my-topic --entry-point=helloHttp

Question 8

An administrator needs to create a Cloud Storage bucket in the US multi-region with the 'nearline' storage class. Which command should they use?

Accepted Answer

gsutil mb -c nearline -l US gs://my-bucket. gsutil mb creates a bucket. The -c flag sets storage class, -l sets location. The storage class 'nearline' is correct for infrequently accessed data.

Answer

gsutil mb -s nearline -l US gs://my-bucket

Answer

gsutil mb -c nearline -l US-CENTRAL1 gs://my-bucket

Answer

gcloud storage buckets create gs://my-bucket --storage-class=nearline --location=US

Question 9

A company wants to migrate an on-premises MySQL database to Cloud SQL. They need to import an existing SQL dump file stored in a Cloud Storage bucket. Which command should they use?

Accepted Answer

gcloud sql import sql my-instance gs://my-bucket/dump.sql --database=mydb. gcloud sql import sql is the correct command to import a SQL dump file into a Cloud SQL instance. The command specifies the instance, the bucket path, and the database name.

Answer

gcloud compute ssh my-instance --command='mysql < dump.sql'

Answer

gcloud sql databases create mydb --instance=my-instance --import=gs://my-bucket/dump.sql

Answer

gsutil cp gs://my-bucket/dump.sql | mysql -h my-instance -u root -p

Question 10

An engineer is using Terraform to manage GCP resources. They want to store the Terraform state file remotely so that the team can collaborate. Which backend configuration should they use?

Accepted Answer

backend "gcs" { bucket = "my-terraform-state" }. Terraform supports storing state in GCS by using the 'gcs' backend. The bucket must be created before configuration. The 'local' backend stores state locally, which does not enable collaboration. 'cloud' is not a valid backend type. 'consul' is not GCP-native.

Answer

backend "cloud" { bucket = "my-terraform-state" }

Answer

backend "local" { path = "terraform.tfstate" }

Answer

backend "consul" { address = "consul.example.com" }

Question 11

A developer wants to make objects in a Cloud Storage bucket publicly readable. They want to grant access to allUsers with the objectViewer role. Which command should they use?

Accepted Answer

gsutil iam ch allUsers:objectViewer gs://my-bucket. gsutil iam ch grants IAM roles to members. The correct command adds the roles/storage.objectViewer role to allUsers. gsutil acl ch is the legacy ACL method; the question asks for IAM, so iam ch is appropriate.

Answer

gsutil acl ch -u AllUsers:R gs://my-bucket

Answer

gcloud storage buckets add-iam-policy-binding my-bucket --member allUsers --role roles/storage.objectViewer

Answer

gsutil iam ch allUsers:storage.objectViewer gs://my-bucket

Question 12

A team needs to set up autoscaling for a managed instance group based on CPU utilization. They want the average CPU across the group to stay around 60%. Which autoscaling policy configuration should they use?

Accepted Answer

Set the autoscaling policy to use the target CPU utilization of 0.6. The autoscaling policy uses a target CPU utilization metric. The correct configuration sets the target to 0.6 (60%). Specifying a utilization target of 60 ensures the autoscaler maintains average CPU at 60%.

Answer

Set the autoscaling policy to use the target CPU utilization of 60

Answer

No autoscaling is needed; MIGs automatically scale based on load

Answer

Set the autoscaling policy to use the target HTTP load balancing utilization of 60%

Question 13

A company is deploying a microservice on Cloud Run. They want to ensure that the service can handle high traffic spikes by allowing multiple concurrent requests per container instance. They also want to minimize cold starts. Which two settings should they configure? (Choose two.)

Accepted Answer

Set min-instances to a value greater than 0 (e.g., 1). Setting concurrency to a higher value (e.g., 80) allows each container instance to handle multiple requests simultaneously, improving throughput. Setting min-instances to a value greater than 0 keeps instances warm to reduce cold starts. Max-instances limits scaling but does not help with cold starts. CPU always on keeps CPU allocated but does not directly affect cold starts. Timeout affects request duration, not concurrency or cold starts.

Answer

Set the timeout to 900 seconds

Answer

Set CPU always on to true

Answer

Set max-instances to a high value

Question 14

A DevOps engineer is creating a GKE cluster for a production workload that requires high availability and resilience to zone failures. They also need to deploy a stateless application that can scale based on CPU usage. Which two actions should they take? (Choose two.)

Accepted Answer

Enable horizontal pod autoscaling on the deployment with CPU target utilization. A regional cluster spans multiple zones, providing high availability. An HPA scales pods based on CPU. A zonal cluster is not highly available. Node auto-repair is for node health, not resilience to zone failure. Using a deployment with replicas is good, but the question asks for actions related to cluster creation and scaling.

Answer

Enable node auto-repair on the node pool

Answer

Create a zonal cluster in a single zone

Answer

Set the deployment replicas to 1

Question 15

A developer wants to deploy a Cloud Run service from source code in a local directory. Which two commands or steps are necessary? (Choose two.)

Accepted Answer

Run gcloud builds submit --tag gcr.io/my-project/my-image .. gcloud run deploy with --source builds and deploys from source in one step. Alternatively, you can build a container with Cloud Build and then deploy, but the question asks for necessary steps. The --source flag handles both. gcloud builds submit is needed if you build separately. gcloud run deploy without --source expects a pre-built image. gcloud functions deploy is for Cloud Functions, not Cloud Run.

Answer

Run gcloud functions deploy my-function --source . --runtime nodejs16

Answer

Run gcloud app deploy --source .

Answer

Run gcloud run deploy --image=gcr.io/my-project/my-image --region=us-central1