Google ACE Deploying and Implementing a Cloud Solution Practice Test 6 — 15 Questions

Question 1

A developer wants to create a Compute Engine instance with the container-optimized OS image in the default network. Which command should they use?

Accepted Answer

gcloud compute instances create my-instance --image-family=cos-stable --image-project=cos-cloud. The correct command uses '--image-family=cos-stable' and '--image-project=cos-cloud' to specify the Container-Optimized OS image. Option B uses 'gcloud compute instances create' with the correct flags.

Answer

gcloud compute instances create my-instance --image-family=ubuntu-2004-lts --image-project=ubuntu-os-cloud

Answer

gcloud compute instances create my-instance --image-family=cos-stable

Answer

gcloud compute instances create my-instance --image=cos-stable --image-project=cos-cloud

Question 2

An engineer needs to SSH into a Compute Engine instance using OS Login. What must be enabled first?

Accepted Answer

Enable OS Login in the project metadata. OS Login must be enabled at the project or instance level using 'gcloud compute project-info add-metadata --enable-oslogin' or similar. Direct SSH key metadata is not needed if OS Login is used.

Answer

Create an SSH key and upload to the instance

Answer

Grant the compute.osLogin role to the user

Answer

Add SSH keys to the project metadata

Question 3

A company has a managed instance group (MIG) with an autoscaler based on CPU utilization. The MIG is not scaling up even though CPU utilization is consistently above 80%. The instances are running a batch processing workload that takes several minutes to finish. What is the most likely cause?

Accepted Answer

The autoscaler's cooldown period is set too long. If the cooldown period is too long, the autoscaler may wait unnecessarily before scaling up. Also, the application may take time to show increased CPU. However, the typical cause is the autoscaler's cooldown period preventing rapid scale-up.

Answer

The autoscaler's cooldown period is set too short

Answer

The health check is failing on the instances

Answer

The maximum number of instances is already reached

Question 4

An organization wants to deploy a containerized web application on GKE. They need the application to be accessible from the internet via a stable IP address. Which service type should they use when exposing the deployment?

Accepted Answer

LoadBalancer. A LoadBalancer service type provisions a Google Cloud TCP/UDP Load Balancer and assigns a stable external IP address. NodePort exposes on a high port but requires manual setup; ClusterIP is internal only.

Answer

ClusterIP

Answer

NodePort

Answer

ExternalName

Question 5

A team wants to use Cloud Run to deploy a container that processes messages from a Pub/Sub topic. The container is stateless and the workload is expected to have irregular traffic spikes with high concurrency. Which scaling configuration is most appropriate?

Accepted Answer

Set min-instances to 0 and max-instances to 100 with concurrency of 80. Cloud Run can set a maximum number of concurrent requests per container instance. For Pub/Sub processing, setting max-instances can control cost, and the CPU is always allocated during request processing. The key is to allow multiple concurrent requests to handle spikes efficiently.

Answer

Set min-instances to 0 and max-instances to 1000 with concurrency of 1

Answer

Set min-instances to 10 and max-instances to 100 with concurrency of 1

Answer

Set min-instances to 1 and max-instances to 100 with concurrency of 1

Question 6

Which gcloud command is used to deploy a Cloud Function triggered by HTTP requests?

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-http. The command 'gcloud functions deploy' with --trigger-http creates an HTTP-triggered function. --runtime specifies the language runtime. --trigger-topic is for Pub/Sub triggers.

Answer

gcloud functions call my-function --data '{"key":"value"}'

Answer

gcloud run deploy my-function --source . --platform managed

Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic

Question 7

A company wants to store archival data that is accessed less than once a year. The data must be preserved for 10 years. Which Cloud Storage storage class is most cost-effective?

Accepted Answer

Archive. Archive class is the lowest-cost storage for data accessed less than once a year, with a 365-day minimum storage duration. Coldline is slightly more expensive but for less than once a year, Archive is better.

Answer

Standard

Answer

Nearline

Answer

Coldline

Question 8

A team is using Terraform to manage GCP infrastructure. They want to store the state file in a Cloud Storage bucket with versioning enabled. Which backend configuration is correct?

Accepted Answer

terraform { backend "gcs" { bucket = "my-bucket" prefix = "terraform/state" } }. To use Cloud Storage as a backend, you must specify 'bucket' and optionally 'prefix' for the state file path. The provider block is for the Google provider, not state storage.

Answer

provider "google" { backend "gcs" { bucket = "my-bucket" } }

Answer

terraform { backend "gcs" { bucket = "my-bucket" versioning = true } }

Answer

terraform { backend "cloud-storage" { bucket = "my-bucket" } }

Question 9

A developer wants to run a one-time query on a large dataset stored in Cloud Storage using BigQuery without loading the data into a table. Which feature should they use?

Accepted Answer

Use a BigQuery federated query with an external table definition. BigQuery federated queries allow querying external data sources (like Cloud Storage) directly using external tables or the EXTERNAL_QUERY function. This avoids loading data.

Answer

Create a permanent table and load the data using gcloud bq load

Answer

Use Cloud SQL to query the data via federated query

Answer

Use gcloud sql import to load data into BigQuery

Question 10

An administrator needs to create a Cloud SQL for PostgreSQL instance with 16 vCPUs and 60 GB of memory. Which tier should they specify?

Accepted Answer

db-custom-16-61440. Cloud SQL tiers follow the pattern db-custom-#vcpus-#memoryMB. 16 vCPUs and 60 GB (61440 MB) uses db-custom-16-61440.

Answer

db-custom-16-60

Answer

db-n1-standard-16

Answer

db-custom-16-60000

Question 11

Which kubectl command lists all pods in the current namespace?

Accepted Answer

kubectl get pods. The command 'kubectl get pods' lists all pods. 'kubectl get all' includes services, deployments, etc. 'kubectl describe pods' shows detailed info. 'kubectl list pods' is invalid.

Answer

kubectl list pods

Answer

kubectl describe pods

Answer

kubectl get all

Question 12

A company has a Cloud Run service that needs to access a Cloud SQL database. What is the recommended way to connect securely?

Accepted Answer

Use Cloud SQL Proxy by adding the Cloud SQL instance connection name to the Cloud Run service. Cloud Run can use the Cloud SQL Proxy via a sidecar container or the built-in Cloud SQL connection using Unix sockets when the Cloud SQL client libraries are used. The recommended way is to use the Cloud SQL proxy (sidecar) or the Cloud SQL connector.

Answer

Use a public IP for the Cloud SQL instance and whitelist the Cloud Run service's IP

Answer

Store database credentials in environment variables

Answer

Use VPC peering to connect Cloud Run to Cloud SQL

Question 13

A company wants to deploy a stateless microservice on GCP. The service experiences unpredictable traffic bursts and must scale to zero when idle to minimize costs. Which two services meet these requirements?

Accepted Answer

Cloud Functions (HTTP trigger). Cloud Run (fully managed) and Cloud Functions (with HTTP trigger) both scale to zero when idle and handle burst traffic. GKE with clusters does not scale to zero (node pool minimum size > 0). Compute Engine MIG can scale down but not to zero (minimum instance count required).

Answer

Compute Engine managed instance group with autoscaling

Answer

App Engine Standard environment

Answer

Google Kubernetes Engine (GKE) with a managed instance group

Question 14

A data engineering team wants to create a Cloud Storage bucket for storing sensitive analytics data. They require encryption at rest with customer-managed keys (CMEK) and want to restrict access to a specific service account. Which three steps are necessary?

Accepted Answer

Set the bucket's default encryption to use the KMS key. To use CMEK, you must create a Cloud KMS key ring and key, then configure the bucket to use that key. Access is controlled via IAM; granting the service account roles/storage.objectAdmin allows full object management. Note: The KMS key must be in the same region as the bucket.

Answer

Enable uniform bucket-level access

Answer

Create a service account and download its JSON key

Question 15

A developer is deploying a new application on GKE and needs to configure a HorizontalPodAutoscaler (HPA). Which two resources are required for HPA to work correctly?

Accepted Answer

CPU utilization metrics. HPA requires a deployment (or other scalable resource) and a target metric, usually CPU utilization. The HPA will scale the deployment based on the metric. A ConfigMap and a service are not strictly required for HPA.

Answer

A Service

Answer

A ConfigMap

Answer

A NodePort service