Google ACE Deploying and Implementing a Cloud Solution Practice Test 5 — 15 Questions

Question 1

A Cloud Function needs to be triggered whenever a message is published to a Pub/Sub topic. Which 'gcloud functions deploy' command flag is required to set the trigger?

Accepted Answer

--trigger-topic. For a Cloud Function triggered by Pub/Sub messages, the required flag is --trigger-topic, which specifies the Pub/Sub topic name. This flag automatically wires the function as a subscriber to that topic and sets the correct event type.

Answer

--trigger-http

Answer

--trigger-event

Answer

--trigger-bucket

Question 2

A company wants to deploy a microservice on GKE. The deployment requires 3 replicas, and the service must be accessible via a fixed public IP address. Which Kubernetes resource should be used to expose the deployment?

Accepted Answer

Service of type LoadBalancer. A Kubernetes Service of type LoadBalancer provisions a cloud provider load balancer with an external IP that routes to the pods backing the deployment. On GKE, this creates a Google Cloud external passthrough Network Load Balancer with a stable public IP, which matches the fixed public IP requirement.

Answer

Ingress resource

Answer

Service of type ClusterIP

Answer

Service of type NodePort

Question 3

Which gcloud command creates a regional GKE cluster named 'my-cluster' with 3 nodes per zone in the 'us-central1' region?

Accepted Answer

gcloud container clusters create my-cluster --region us-central1 --num-nodes 3. The correct command uses --region us-central1 to create a regional cluster and --num-nodes 3 to set three nodes per zone. A regional GKE cluster replicates nodes across all zones in the region, so --num-nodes specifies the count per zone. This matches the requirement of a regional cluster with 3 nodes per zone.

Answer

gcloud container clusters create my-cluster --zone us-central1 --num-nodes 3

Answer

gcloud container clusters create my-cluster --zone us-central1-a --num-nodes 3

Answer

gcloud container clusters create my-cluster --region us-central1 --nodes 3

Question 4

An engineer needs to migrate a large on-premises database to Cloud SQL for PostgreSQL. The database is 500 GB and can tolerate a few hours of downtime. The migration must minimize manual intervention. Which approach should the engineer use?

Accepted Answer

Use Database Migration Service (DMS). Database Migration Service supports homogeneous migrations (including PostgreSQL to Cloud SQL) and automates the process. It supports continuous replication and minimal downtime. The others are not ideal: pg_dump requires manual steps and downtime; gcloud sql import is for file import; Compute Engine with pg_dump involves manual steps.

Answer

Use pg_dump to export and pg_restore to import

Answer

Use gcloud sql import to import a dump file

Answer

Set up a Compute Engine instance to run pg_dump and then gcloud sql import

Question 5

An organization wants to use Cloud Storage to host a static website. The bucket name must match the domain name. They already own the domain 'example.com' and want to serve the site from 'www.example.com'. Which bucket name should they create?

Accepted Answer

www.example.com. For Cloud Storage static website hosting, the bucket name must exactly match the domain used to serve the site. Since the site will be served from 'www.example.com', the bucket must be named 'www.example.com'. GCS requires globally unique bucket names, and the CNAME/A record for the domain must point to the bucket.

Answer

example.com

Answer

www_example_com

Answer

example-com-bucket

Question 6

Which kubectl command is used to view the logs of a specific pod named 'my-pod'?

Accepted Answer

kubectl logs my-pod. The 'kubectl logs' command streams logs from a pod. 'kubectl describe' shows metadata, 'kubectl get' shows status, and 'kubectl exec' runs commands inside the pod.

Answer

kubectl exec my-pod -- logs

Answer

kubectl get pod my-pod

Answer

kubectl describe pod my-pod

Question 7

A team is deploying a web application on Cloud Run. The application needs to be available globally with low latency, and the team wants to use a custom domain with an SSL certificate. Which TWO actions are required to achieve this?

Accepted Answer

Configure a custom domain mapping on the Cloud Run service. Cloud Run services are regional; to serve globally, you need a global load balancer (e.g., using an external HTTPS load balancer with serverless NEG). Mapping a custom domain to the service is also required.

Answer

Set the --ingress=all flag on the Cloud Run service

Answer

Use Cloud CDN to cache content

Answer

Deploy the service as a Cloud Run for Anthos on GKE

Question 8

A company wants to set up a Cloud SQL for MySQL instance with automated backups and a read replica for disaster recovery. Which THREE features or configurations should be enabled?

Accepted Answer

Enable automated backups. Automated backups are enabled by default but must be configured. A read replica requires the binary log to be enabled on the primary. The backup location can be set to multi-regional for DR. Cross-region replication requires a replica in another region. Point-in-time recovery uses binary logs.

Answer

Enable deletion protection on the primary instance

Answer

Assign a public IP address to the read replica

Question 9

A team is using Terraform to manage Google Cloud resources. They want to store the Terraform state file in a Cloud Storage bucket to enable collaboration. Which Terraform backend configuration should be used?

Accepted Answer

terraform { backend "gcs" { bucket = "my-tf-state" prefix = "prod" } }. The 'gcs' backend in Terraform stores state in a Cloud Storage bucket. The 'bucket' attribute specifies the bucket name, and 'prefix' is optional for folder structure.

Answer

provider "google" { backend "gcs" { bucket = "my-tf-state" } }

Answer

terraform { backend "cloud-storage" { bucket = "my-tf-state" path = "prod" } }

Answer

terraform { backend "gcs" { bucket = "my-tf-state" folder = "prod" } }

Question 10

A data scientist wants to deploy a Python function that processes messages from a Pub/Sub topic whenever a new message arrives. The function should be stateless and run in a serverless environment. Which deployment command should be used?

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-point my_entry --region us-central1. The correct command is 'gcloud functions deploy' with '--trigger-topic', which deploys a Cloud Function (2nd gen or 1st gen) that is invoked by Pub/Sub messages. This matches the requirement for a stateless, serverless function triggered by a Pub/Sub topic. The runtime and entry point flags are also correctly specified.

Answer

gcloud run deploy my-function --source . --region us-central1 --trigger-topic my-topic

Answer

gcloud pubsub subscriptions create my-sub --topic my-topic --push-endpoint https://my-function-url

Answer

gcloud functions deploy my-function --runtime python39 --trigger-http --entry-point my_entry --region us-central1

Question 11

A company wants to allow unauthenticated HTTP invocations of a container deployed on Cloud Run. Which flag should be included in the 'gcloud run deploy' command?

Accepted Answer

--allow-unauthenticated. The '--allow-unauthenticated' flag allows unauthenticated invocations. By default, Cloud Run requires authentication.

Answer

--public

Answer

--no-authentication

Answer

--auth-type public

Question 12

A Cloud SQL for MySQL instance needs to be created with the following requirements: MySQL 8.0, db-n1-standard-2 tier, in us-central1, with root password 'secret'. Which command meets these requirements?

Accepted Answer

gcloud sql instances create my-instance --database-version MYSQL_8_0 --tier db-n1-standard-2 --region us-central1 --root-password secret. The 'gcloud sql instances create' command with --database-version, --tier, --region, and --root-password correctly creates the instance.

Answer

gcloud compute instances create my-instance --database-version MYSQL_8_0 --tier db-n1-standard-2 --region us-central1 --root-password secret

Answer

gcloud sql instances create my-instance --database-version MYSQL8 --tier n1-standard-2 --region us-central1 --password secret

Answer

gcloud sql instances create my-instance --database-version MYSQL_8_0 --machine-type db-n1-standard-2 --region us-central1 --root-password secret

Question 13

An engineer needs to view the logs generated by a Cloud Run service to troubleshoot a recent deployment. Which service should they use?

Accepted Answer

Cloud Logging. Cloud Logging (formerly Stackdriver Logging) is the unified logging service for Google Cloud. Cloud Run logs are automatically sent to Cloud Logging.

Answer

Cloud Monitoring

Answer

Error Reporting

Answer

Cloud Trace

Question 14

A company wants to deploy a containerized application on Cloud Run that is built from source code in a local directory. They want Cloud Run to automatically build the container image using Cloud Build. Which command should be used?

Accepted Answer

gcloud run deploy my-service --source . --region us-central1. The command gcloud run deploy my-service --source . --region us-central1 uses the --source flag to indicate that Cloud Run should build the container image from the local source code using Cloud Build, then deploy it. This is the correct way to deploy from source.

Answer

gcloud app deploy --source .

Answer

gcloud run deploy my-service --image . --region us-central1

Answer

gcloud builds submit --tag gcr.io/my-project/my-image . && gcloud run deploy my-service --image gcr.io/my-project/my-image

Question 15

An engineer wants to create a regional GKE cluster with 3 nodes by default. Which command should be used?

Accepted Answer

gcloud container clusters create my-cluster --region us-central1 --num-nodes 3. The 'gcloud container clusters create' command with --region (not --zone) creates a regional cluster. --num-nodes specifies the number of nodes per zone.

Answer

gcloud container clusters create my-cluster --zone us-central1-a --num-nodes 3

Answer

gcloud container clusters create my-cluster --region us-central1 --nodes 3

Answer

gcloud compute clusters create my-cluster --region us-central1 --size 3