Google ACE Deploying and Implementing a Cloud Solution Practice Test 6 — 15 Questions

Question 1

A company wants to set up a Cloud SQL for MySQL instance with automated backups and a read replica for disaster recovery. Which THREE features or configurations should be enabled?

Accepted Answer

Enable automated backups. Automated backups are enabled by default but must be configured. A read replica requires the binary log to be enabled on the primary. The backup location can be set to multi-regional for DR. Cross-region replication requires a replica in another region. Point-in-time recovery uses binary logs.

Answer

Enable deletion protection on the primary instance

Answer

Assign a public IP address to the read replica

Question 2

A developer wants to create a Compute Engine instance with the default Debian 11 image, a 50 GB boot disk, and in a specific subnet. Which command should be used?

Accepted Answer

gcloud compute instances create my-vm --image-family debian-11 --image-project debian-cloud --boot-disk-size 50GB --subnet my-subnet. The command 'gcloud compute instances create' with flags --image-family, --image-project, --boot-disk-size, and --subnet correctly creates the instance with the specified configuration.

Answer

gcloud compute instances create my-vm --image debian-11 --boot-disk-size 50 --subnet my-subnet

Answer

gcloud compute instances create my-vm --image-family debian-11 --image-project debian-cloud --disk-size 50GB --subnet my-subnet

Answer

gcloud compute instances create my-vm --image-family debian-11 --boot-disk-size 50 --subnet my-subnet

Question 3

A company has a managed instance group (MIG) with a fixed number of instances. They want to add an autoscaling policy that scales based on CPU utilization, with a target utilization of 60%. Which command should be used to update the MIG?

Accepted Answer

gcloud compute instance-groups managed set-autoscaling my-mig --region us-central1 --max-num-replicas 10 --target-cpu-utilization 0.6. The 'gcloud compute instance-groups managed set-autoscaling' command configures autoscaling for a MIG with the specified target CPU utilization.

Answer

gcloud compute instance-groups managed update my-mig --autoscaling --cpu-utilization 60

Answer

gcloud compute instance-groups managed configure-autoscaling my-mig --region us-central1 --target-cpu-utilization 0.6

Answer

gcloud compute instance-groups managed set-autoscaling my-mig --zone us-central1-a --max-num-replicas 10 --target-cpu-utilization 60

Question 4

A team is using Terraform to manage Google Cloud resources. They want to store the Terraform state file in a Cloud Storage bucket to enable collaboration. Which Terraform backend configuration should be used?

Accepted Answer

terraform { backend "gcs" { bucket = "my-tf-state" prefix = "prod" } }. The 'gcs' backend in Terraform stores state in a Cloud Storage bucket. The 'bucket' attribute specifies the bucket name, and 'prefix' is optional for folder structure.

Answer

provider "google" { backend "gcs" { bucket = "my-tf-state" } }

Answer

terraform { backend "cloud-storage" { bucket = "my-tf-state" path = "prod" } }

Answer

terraform { backend "gcs" { bucket = "my-tf-state" folder = "prod" } }

Question 5

A data scientist wants to deploy a Python function that processes messages from a Pub/Sub topic whenever a new message arrives. The function should be stateless and run in a serverless environment. Which deployment command should be used?

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-point my_entry --region us-central1. Cloud Functions is serverless and can be triggered by Pub/Sub. The command 'gcloud functions deploy' with --trigger-topic creates a function that is triggered by messages on the specified topic.

Answer

gcloud run deploy my-function --source . --region us-central1 --trigger-topic my-topic

Answer

gcloud pubsub subscriptions create my-sub --topic my-topic --push-endpoint https://my-function-url

Answer

gcloud functions deploy my-function --runtime python39 --trigger-http --entry-point my_entry --region us-central1

Question 6

A company wants to allow unauthenticated HTTP invocations of a container deployed on Cloud Run. Which flag should be included in the 'gcloud run deploy' command?

Accepted Answer

--allow-unauthenticated. The '--allow-unauthenticated' flag allows unauthenticated invocations. By default, Cloud Run requires authentication.

Answer

--public

Answer

--no-authentication

Answer

--auth-type public

Question 7

A Cloud SQL for MySQL instance needs to be created with the following requirements: MySQL 8.0, db-n1-standard-2 tier, in us-central1, with root password 'secret'. Which command meets these requirements?

Accepted Answer

gcloud sql instances create my-instance --database-version MYSQL_8_0 --tier db-n1-standard-2 --region us-central1 --root-password secret. The 'gcloud sql instances create' command with --database-version, --tier, --region, and --root-password correctly creates the instance.

Answer

gcloud compute instances create my-instance --database-version MYSQL_8_0 --tier db-n1-standard-2 --region us-central1 --root-password secret

Answer

gcloud sql instances create my-instance --database-version MYSQL8 --tier n1-standard-2 --region us-central1 --password secret

Answer

gcloud sql instances create my-instance --database-version MYSQL_8_0 --machine-type db-n1-standard-2 --region us-central1 --root-password secret

Question 8

An engineer needs to view the logs generated by a Cloud Run service to troubleshoot a recent deployment. Which service should they use?

Accepted Answer

Cloud Logging. Cloud Logging (formerly Stackdriver Logging) is the unified logging service for Google Cloud. Cloud Run logs are automatically sent to Cloud Logging.

Answer

Cloud Monitoring

Answer

Error Reporting

Answer

Cloud Trace

Question 9

A company wants to deploy a containerized application on Cloud Run that is built from source code in a local directory. They want Cloud Run to automatically build the container image using Cloud Build. Which command should be used?

Accepted Answer

gcloud run deploy my-service --source . --region us-central1. The 'gcloud run deploy' command with --source and --region flags tells Cloud Run to build and deploy from source. Cloud Build is invoked automatically.

Answer

gcloud app deploy --source .

Answer

gcloud run deploy my-service --image . --region us-central1

Answer

gcloud builds submit --tag gcr.io/my-project/my-image . && gcloud run deploy my-service --image gcr.io/my-project/my-image

Question 10

An engineer wants to create a regional GKE cluster with 3 nodes by default. Which command should be used?

Accepted Answer

gcloud container clusters create my-cluster --region us-central1 --num-nodes 3. The 'gcloud container clusters create' command with --region (not --zone) creates a regional cluster. --num-nodes specifies the number of nodes per zone.

Answer

gcloud container clusters create my-cluster --zone us-central1-a --num-nodes 3

Answer

gcloud container clusters create my-cluster --region us-central1 --nodes 3

Answer

gcloud compute clusters create my-cluster --region us-central1 --size 3

Question 11

A DevOps engineer is responsible for deploying a new microservice to GKE. They need to expose the service externally on a static IP address and scale based on HTTP request load. Which THREE resources must be created? (Choose 3 correct answers.)

Accepted Answer

Deployment. To expose a microservice externally with a static IP and load-based scaling, you typically create a Deployment, a Service of type LoadBalancer (which provisions a TCP load balancer with a static IP), and a HorizontalPodAutoscaler to scale based on CPU (or custom metrics). Ingress is not required if using LoadBalancer, but it's another option. ConfigMap is not needed for this.

Answer

Ingress

Answer

ConfigMap

Question 12

A company wants to migrate an on-premises MySQL database to Cloud SQL with minimal downtime. The database is 500 GB. Which TWO steps should be taken? (Choose 2 correct answers.)

Accepted Answer

Create a Cloud SQL instance to serve as the target for the migration.. To minimize downtime, you can perform a Database Migration Service (DMS) continuous migration or export/import with a consistent snapshot. DMS supports MySQL and provides continuous sync. Alternatively, you can export the database using mysqldump, then import, but this requires downtime. However, for minimal downtime, DMS is best. Another approach is to create a read replica then promote, but Cloud SQL does not support external read replicas directly. The correct two are: use DMS for continuous migration, and optionally create a clone for testing, but the question asks for migration steps. The best two from the options: use DMS migration job and create a Cloud SQL instance.

Answer

Export the database using gcloud sql export sql, then import to Cloud SQL.

Answer

Create a Cloud SQL instance and configure it as an external replica of the on-premises database.

Answer

Use mysqldump to backup the database and restore into Cloud SQL.

Question 13

A company wants to deploy a containerized application on Google Cloud that automatically scales to zero when not in use, and they want to minimize operational overhead. They also need to avoid managing any underlying infrastructure such as Kubernetes clusters or VMs. Which service should they use?

Accepted Answer

Cloud Run. Cloud Run is a fully managed serverless platform that can scale to zero when there is no traffic, and it abstracts away infrastructure management. GKE requires managing a cluster, Compute Engine involves managing VMs, and App Engine is also serverless but Cloud Run provides more flexibility with containers and also scales to zero.

Answer

Google Kubernetes Engine (GKE)

Answer

App Engine Standard Environment

Answer

Compute Engine with managed instance groups

Question 14

A DevOps engineer is configuring a managed instance group (MIG) for a stateless web application. They want to ensure that when new instances are created via rolling update or autoscaling, a startup script runs to install security patches and deploy the latest application code from a Cloud Storage bucket. What is the BEST way to achieve this?

Accepted Answer

Add the script to the instance template using the metadata key 'startup-script'. Using the instance template's metadata key 'startup-script' is the simplest and most reliable method to run custom scripts on instance startup. A custom image requires more maintenance. SSH from Cloud Shell is not automated. A startup script as part of the instance template is the standard approach.

Answer

Create a custom image with pre-installed patches and code, and use that image in the template

Answer

After the MIG is created, use gcloud compute ssh to run the script on each instance

Answer

Store the script in Cloud Storage and use gcloud compute instances add-metadata on each instance

Question 15

A developer needs to create a zonal GKE cluster with 3 nodes of type e2-standard-4 in zone us-central1-a. Which command should they use?

Accepted Answer

gcloud container clusters create my-cluster --zone=us-central1-a --num-nodes=3 --machine-type=e2-standard-4. The correct command creates a zonal cluster (single zone) with specified node count and machine type. The --region flag creates a regional cluster, which is not required.

Answer

gcloud compute instances create my-cluster --zone=us-central1-a --machine-type=e2-standard-4 --num-nodes=3

Answer

gcloud container clusters create my-cluster --zone=us-central1-a --num-nodes=1 --machine-type=e2-standard-4

Answer

gcloud container clusters create my-cluster --region=us-central1 --num-nodes=3 --machine-type=e2-standard-4