Google ACE Deploying and Implementing a Cloud Solution Practice Test 5 — 15 Questions

Question 1

A developer needs to create a Compute Engine VM with 4 vCPUs, 15 GB of memory, and a Debian 10 boot disk. Which gcloud compute instances create command is correct?

Accepted Answer

gcloud compute instances create my-vm --machine-type=n1-standard-4 --image-family=debian-10 --image-project=debian-cloud. The correct command specifies machine-type n1-standard-4 (4 vCPU, 15 GB RAM), image-family debian-10, and image-project debian-cloud. The other options either use wrong machine type, wrong image project, or miss required flags.

Answer

gcloud compute instances create my-vm --machine-type=n1-highmem-4 --image-family=debian-10 --image-project=debian-cloud

Answer

gcloud compute instances create my-vm --machine-type=n1-standard-4 --image-family=ubuntu-1804 --image-project=ubuntu-os-cloud

Answer

gcloud compute instances create my-vm --machine-type=n1-standard-4

Question 2

An organization wants to deploy a containerized web application on Google Cloud with minimum operational overhead. The application should scale to zero when not in use and only incur costs when serving requests. Which service should they choose?

Accepted Answer

Cloud Run. Cloud Run is a fully managed serverless platform that scales to zero, charges only for request processing time, and abstracts infrastructure management. GKE requires cluster management and nodes always running. App Engine Flexible requires at least one instance always running. Compute Engine requires full VM management.

Answer

App Engine Flexible Environment

Answer

Google Kubernetes Engine (GKE)

Answer

Compute Engine with container-optimized OS

Question 3

A team is using Terraform to manage Google Cloud infrastructure. They want to store Terraform state files in a remote backend that supports locking to prevent concurrent modifications. Which backend should they use?

Accepted Answer

Cloud Storage. Google Cloud Storage (GCS) is the recommended backend for Terraform on GCP. It supports state locking via object versioning and a lock mechanism (using the state lock table in a GCS bucket). Cloud Shell is not a backend. Cloud Source Repositories is for source code. Bigtable is for NoSQL workloads.

Answer

Cloud Source Repositories

Answer

Cloud Shell

Answer

Cloud Bigtable

Question 4

A DevOps engineer needs to deploy a containerized microservice to Cloud Run that processes messages from Pub/Sub. The service must authenticate to Google Cloud APIs using a service account. Which Cloud Run deployment command should they use to ensure the service uses a specific service account?

Accepted Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --service-account my-sa@my-project.iam.gserviceaccount.com --platform managed. Cloud Run supports the --service-account flag to attach a specific service account. The --image flag specifies the container image. The other options either use incorrect flags (--account is for gcloud CLI user, not service account) or miss required flags.

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --account my-sa@my-project.iam.gserviceaccount.com

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --impersonate-service-account my-sa@my-project.iam.gserviceaccount.com

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image

Question 5

An engineer deployed a new version of their application on GKE using a Deployment. Users report that the new version has a bug. The engineer wants to quickly revert to the previous version. How can they achieve this?

Accepted Answer

Run kubectl rollout undo deployment/<deployment-name>. Kubernetes Deployments support rollbacks using 'kubectl rollout undo'. The command automatically reverts to the previous revision. Deleting and recreating the Deployment would require re-creating from the previous manifest. 'kubectl rollout history' shows history but doesn't roll back. Scaling down then up does not revert the version.

Answer

Scale the deployment to zero and then scale back up

Answer

Run kubectl delete deployment and re-apply the old manifest

Answer

Run kubectl rollout history deployment/<deployment-name>

Question 6

A company wants to create a Cloud Storage bucket to store archival data that is accessed infrequently (less than once a year). The data must be stored at the lowest possible cost. Which storage class should they choose?

Accepted Answer

Archive. Archive storage class is the lowest-cost option for long-term archival data accessed less than once a year. Nearline and Coldline have higher retrieval costs but are for data accessed less frequently than standard, not as low as Archive. Standard is for frequently accessed data.

Answer

Coldline

Answer

Nearline

Answer

Standard

Question 7

A developer created a Cloud Function with HTTP trigger. When they send a POST request to the function's URL, they get a 403 Forbidden error. The function is deployed with --allow-unauthenticated flag? What is the most likely cause?

Accepted Answer

The function does not have the Cloud Functions Invoker role for allUsers. The --allow-unauthenticated flag only allows unauthenticated invocations for Cloud Functions (v1) if IAM policy is also set. However, for Cloud Functions (2nd gen) and Cloud Run, --allow-unauthenticated sets the IAM policy. The 403 error often means the function does not have the allUsers invoker role. The developer may have omitted the --allow-unauthenticated flag or used a different flag. The function URL is correct; missing region causes a different error. Wrong runtime would cause a different error.

Answer

The function uses a runtime that does not support HTTP triggers

Answer

The function is not deployed in the correct region

Answer

The function URL is malformed

Question 8

An organization needs to deploy a regional Cloud SQL MySQL instance with 4 vCPUs and 15 GB of memory. The instance should be highly available within a single region. Which gcloud command should they use?

Accepted Answer

gcloud sql instances create my-instance --tier=db-n1-standard-4 --region=us-central1 --database-version=MYSQL_8_0 --root-password=password123. The correct command uses --tier=db-n1-standard-4 (4 vCPU, 15 GB RAM), --region, --database-version= MYSQL_8_0, and --root-password. The --availability-type flag is not required for regional; it defaults to zonal. db-n1-highmem-4 has 26 GB RAM. The other commands either miss required flags or use wrong tier.

Answer

gcloud sql instances create my-instance --tier=db-n1-standard-4 --region=us-central1 --database-version=MYSQL_8_0 --root-password=password123 --availability-type=REGIONAL

Answer

gcloud sql instances create my-instance --tier=db-n1-highmem-4 --region=us-central1 --database-version=MYSQL_8_0

Answer

gcloud sql instances create my-instance --tier=db-n1-standard-4 --region=us-central1

Question 9

A company's application running on Compute Engine uses a startup script to install software. The script is failing intermittently. The engineer wants to view the startup script output for a specific instance to debug. How can they access the startup script logs?

Accepted Answer

SSH into the instance and view /var/log/syslog. Startup script output is logged to /var/log/syslog on the VM instance. The engineer can SSH into the instance and check the syslog. Serial console output also shows startup script output but requires access. Cloud Logging can capture startup script logs if configured, but by default they are not sent. Cloud Console does not show startup script output directly under VM instances details.

Answer

Check the serial console output in Cloud Console

Answer

Use gcloud compute instances get-serial-port-output

Answer

View the instance's logs in Cloud Logging

Question 10

A data analyst wants to import a SQL dump file from a Cloud Storage bucket into an existing Cloud SQL database. Which command should they use?

Accepted Answer

gcloud sql import sql my-instance gs://my-bucket/dump.sql --database=mydb. The correct command is 'gcloud sql import sql gs:/// --database='. This imports a SQL dump file. The other commands either use wrong syntax or wrong import type (csv for CSV files).

Answer

gcloud sql instances import my-instance gs://my-bucket/dump.sql --database=mydb

Answer

gcloud sql import csv my-instance gs://my-bucket/dump.sql --database=mydb

Answer

gcloud sql databases import my-instance gs://my-bucket/dump.sql

Question 11

An engineer needs to create a GKE cluster with 3 nodes of machine type e2-medium in the us-central1 region. Which command should they use?

Accepted Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --region=us-central1. The correct command is 'gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --region=us-central1'. The --zone flag is for zonal clusters, not regional. The other options either use wrong zone or wrong flags.

Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium

Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --region=us-central1-a

Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --zone=us-central1-a

Question 12

A team is using Terraform to deploy infrastructure. They want to ensure that the Terraform state file is encrypted at rest using a customer-managed encryption key (CMEK). What should they configure?

Accepted Answer

Set the encryption block in the google_storage_bucket resource. To use CMEK with GCS backend, the bucket must be configured with a default KMS key. The Terraform configuration does not specify encryption directly; it's set on the bucket itself. The google_backend block does not have a kms_key argument. provider block does not set encryption. The correct approach is to create a bucket with encryption set using google_kms_key.

Answer

Use a Cloud Storage bucket with CMEK enabled by default; no Terraform configuration needed

Answer

Set the kms_key argument in the google provider block

Answer

Set the kms_key argument in the terraform backend block

Question 13

A company wants to deploy a stateless web application on Google Cloud. The application should automatically scale based on CPU utilization and distribute traffic across instances. Which TWO services can meet these requirements?

Accepted Answer

Google Kubernetes Engine with Horizontal Pod Autoscaler. Compute Engine managed instance groups (MIGs) with autoscaling based on CPU utilization can handle this. Also, GKE with Horizontal Pod Autoscaler scales pods based on CPU. Cloud Run scales automatically but does not offer CPU-based autoscaling (scales based on request concurrency). Cloud Functions scales based on concurrency. App Engine Standard also scales automatically based on load but not CPU-based.

Answer

App Engine Standard Environment

Answer

Cloud Functions

Answer

Cloud Run

Question 14

An organization needs to deploy a containerized application on GKE that requires persistent storage. The storage must be highly available across zones within a region. Which THREE components are required to achieve this?

Accepted Answer

StatefulSet. To achieve highly available persistent storage across zones, you need a regional Persistent Disk (PD), a StatefulSet to manage pod identity and ordering, and a PodDisruptionBudget to ensure minimum availability during disruptions. PVC alone is not sufficient. The VolumeAttachment is not relevant.

Answer

VolumeAttachment

Answer

PersistentVolumeClaim (PVC)

Question 15

A developer wants to deploy a Cloud Function that is triggered by messages in a Pub/Sub topic. Which TWO flags are required in the gcloud functions deploy command?

Accepted Answer

--runtime. For a Pub/Sub-triggered Cloud Function, you must specify --trigger-topic and --runtime. The --entry-point is optional if the function name matches. --memory and --timeout are optional.

Answer

--timeout

Answer

--memory

Answer

--entry-point