Google ACE Deploying and Implementing a Cloud Solution Practice Test 7 — 15 Questions

Question 1

An engineer deployed a new version of their application on GKE using a Deployment. Users report that the new version has a bug. The engineer wants to quickly revert to the previous version. How can they achieve this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Run kubectl rollout undo deployment/. The `kubectl rollout undo` command is specifically designed to revert a Deployment to a previous revision. When you run `kubectl rollout undo deployment/`, Kubernetes updates the Deployment's pod template to match the previous ReplicaSet, triggering a new rollout that restores the old version. This is the fastest and most reliable way to roll back a bad deployment.

Answer

Scale the deployment to zero and then scale back up

Answer

Run kubectl delete deployment and re-apply the old manifest

Answer

Run kubectl rollout history deployment/<deployment-name>

Question 2

A company wants to create a Cloud Storage bucket to store archival data that is accessed infrequently (less than once a year). The data must be stored at the lowest possible cost. Which storage class should they choose?

Accepted Answer

Archive. Archive storage is designed for data accessed less than once a year and offers the lowest storage cost among the classes listed, at the expense of higher retrieval cost and longer access latency (typically hours). Since the requirement explicitly states infrequent access (less than once a year) and lowest possible cost, Archive is the correct match. Coldline, Nearline, and Standard all cost more per gigabyte because they offer faster retrieval.

Answer

Coldline

Answer

Nearline

Answer

Standard

Question 3

An organization needs to deploy a regional Cloud SQL MySQL instance with 4 vCPUs and 15 GB of memory. The instance should be highly available within a single region. Which gcloud command should they use?

Accepted Answer

gcloud sql instances create my-instance --tier=db-n1-standard-4 --region=us-central1 --database-version=MYSQL_8_0 --root-password=password123 --availability-type=REGIONAL. A regional (highly available) Cloud SQL instance requires the `--availability-type=REGIONAL` flag, which provisions a standby in a different zone within the same region and enables automatic failover. Option A includes this flag along with the correct tier, region, database version, and root password, making it the only command that satisfies all stated requirements.

Answer

gcloud sql instances create my-instance --tier=db-n1-highmem-4 --region=us-central1 --database-version=MYSQL_8_0

Answer

gcloud sql instances create my-instance --tier=db-n1-standard-4 --region=us-central1 --database-version=MYSQL_8_0 --root-password=password123

Answer

gcloud sql instances create my-instance --tier=db-n1-standard-4 --region=us-central1

Question 4

A data analyst wants to import a SQL dump file from a Cloud Storage bucket into an existing Cloud SQL database. Which command should they use?

Accepted Answer

gcloud sql import sql my-instance gs://my-bucket/dump.sql --database=mydb. The correct command is 'gcloud sql import sql gs:/// --database='. This imports a SQL dump file. The other commands either use wrong syntax or wrong import type (csv for CSV files).

Answer

gcloud sql instances import my-instance gs://my-bucket/dump.sql --database=mydb

Answer

gcloud sql import csv my-instance gs://my-bucket/dump.sql --database=mydb

Answer

gcloud sql databases import my-instance gs://my-bucket/dump.sql

Question 5

An engineer needs to create a GKE cluster with 3 nodes of machine type e2-medium in the us-central1 region. Which command should they use?

Accepted Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --region=us-central1. The correct command is 'gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --region=us-central1'. The --zone flag is for zonal clusters, not regional. The other options either use wrong zone or wrong flags.

Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium

Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --region=us-central1-a

Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --zone=us-central1-a

Question 6

A team is using Terraform to deploy infrastructure. They want to ensure that the Terraform state file is encrypted at rest using a customer-managed encryption key (CMEK). What should they configure?

Accepted Answer

Use a Cloud Storage bucket with CMEK enabled by default; no Terraform configuration needed. To use CMEK with the GCS backend, you have two valid approaches: 1) Use an existing Cloud Storage bucket that already has CMEK enabled by default—no Terraform encryption configuration is needed because the bucket itself enforces encryption. 2) When creating a new bucket via the `google_storage_bucket` resource, set the `encryption` block with a `default_kms_key_name` to specify a CMEK key. The provider block does not have a `kms_key` argument, and the `terraform` backend block does not support a `kms_key` argument for GCS. Both options A and B are correct.

Answer

Set the kms_key argument in the google provider block

Answer

Set the kms_key argument in the terraform backend block

Question 7

A developer wants to deploy a Cloud Function that is triggered by messages in a Pub/Sub topic. Which TWO flags are required in the gcloud functions deploy command?

Accepted Answer

--runtime. Option A (--runtime) is correct because gcloud functions deploy requires you to specify the language runtime (for example, --runtime=nodejs20 or --runtime=python311) so the platform knows which execution environment to build and run the function in. Option B (--trigger-topic) is correct because it is the flag that configures the function's event trigger as a Pub/Sub topic, binding the function to messages published to that topic. Option C (--timeout) is not required; it only overrides the default function execution timeout. Option D (--memory) is not required; it only adjusts the allocated memory for the function. Option E (--entry-point) is not required for a single-function deployment, since the entry point is only needed when the source contains multiple functions and you must disambiguate which one to deploy.

Answer

--timeout

Answer

--memory

Answer

--entry-point

Question 8

A developer wants to create a Compute Engine instance with the container-optimized OS image in the default network. Which command should they use?

Accepted Answer

gcloud compute instances create my-instance --image-family=cos-stable --image-project=cos-cloud. The command 'gcloud compute instances create my-instance --image-family=cos-stable --image-project=cos-cloud' correctly specifies both the image family (cos-stable) and the image project (cos-cloud) where Container-Optimized OS images reside. Both flags are required because image families are scoped to a project. This creates an instance with the COS image in the default network (default network is used when --network is omitted).

Answer

gcloud compute instances create my-instance --image-family=ubuntu-2004-lts --image-project=ubuntu-os-cloud

Answer

gcloud compute instances create my-instance --image-family=cos-stable

Answer

gcloud compute instances create my-instance --image=cos-stable --image-project=cos-cloud

Question 9

An engineer needs to SSH into a Compute Engine instance using OS Login. What must be enabled first?

Accepted Answer

Enable OS Login in the project metadata. OS Login must first be enabled at the project (or instance) level by setting the `enable-oslogin` metadata key to TRUE. Only after OS Login is enabled can IAM roles like `roles/compute.osLogin` be granted and take effect. Enabling OS Login is the prerequisite configuration step that changes how SSH authentication is managed on the instance.

Answer

Create an SSH key and upload to the instance

Answer

Grant the compute.osLogin role to the user

Answer

Add SSH keys to the project metadata

Question 10

An organization wants to deploy a containerized web application on GKE. They need the application to be accessible from the internet via a stable IP address. Which service type should they use when exposing the deployment?

Accepted Answer

LoadBalancer. A LoadBalancer service type provisions a Google Cloud TCP/UDP Load Balancer and assigns a stable external IP address. NodePort exposes on a high port but requires manual setup; ClusterIP is internal only.

Answer

ClusterIP

Answer

NodePort

Answer

ExternalName

Question 11

Which gcloud command is used to deploy a Cloud Function triggered by HTTP requests?

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-http. The command 'gcloud functions deploy' with --trigger-http creates an HTTP-triggered function. --runtime specifies the language runtime. --trigger-topic is for Pub/Sub triggers.

Answer

gcloud functions call my-function --data '{"key":"value"}'

Answer

gcloud run deploy my-function --source . --platform managed

Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic

Question 12

A company wants to store archival data that is accessed less than once a year. The data must be preserved for 10 years. Which Cloud Storage storage class is most cost-effective?

Accepted Answer

Archive. Google Cloud Storage Archive storage class is the most cost-effective for data accessed less than once a year and retained for 10 years. Archive has the lowest storage cost but higher retrieval costs and a minimum storage duration of 365 days. It is designed for long-term archival of data that is rarely accessed, making it ideal for this use case.

Answer

Standard

Answer

Nearline

Answer

Coldline

Question 13

A team is using Terraform to manage GCP infrastructure. They want to store the state file in a Cloud Storage bucket with versioning enabled. Which backend configuration is correct?

Accepted Answer

terraform { backend "gcs" { bucket = "my-bucket" prefix = "terraform/state" } }. To use Cloud Storage as a backend, you must specify 'bucket' and optionally 'prefix' for the state file path. The provider block is for the Google provider, not state storage.

Answer

provider "google" { backend "gcs" { bucket = "my-bucket" } }

Answer

terraform { backend "gcs" { bucket = "my-bucket" versioning = true } }

Answer

terraform { backend "cloud-storage" { bucket = "my-bucket" } }

Question 14

A developer wants to run a one-time query on a large dataset stored in Cloud Storage using BigQuery without loading the data into a table. Which feature should they use?

Accepted Answer

Use a BigQuery federated query with an external table definition. BigQuery federated queries (external tables) let you query data stored outside BigQuery — such as CSV, JSON, Avro, or Parquet files in Cloud Storage — without loading it into a native BigQuery table. This is exactly the one-time query use case described. The external table definition points at the GCS URI, and BigQuery reads the data at query time.

Answer

Create a permanent table and load the data using gcloud bq load

Answer

Use Cloud SQL to query the data via federated query

Answer

Use gcloud sql import to load data into BigQuery

Question 15

An administrator needs to create a Cloud SQL for PostgreSQL instance with 16 vCPUs and 60 GB of memory. Which tier should they specify?

Accepted Answer

db-custom-16-61440. Cloud SQL tiers follow the pattern db-custom-#vcpus-#memoryMB. 16 vCPUs and 60 GB (61440 MB) uses db-custom-16-61440.

Answer

db-custom-16-60

Answer

db-n1-standard-16

Answer

db-custom-16-60000