Google ACE Deploying and Implementing a Cloud Solution Practice Test 7 — 15 Questions

Question 1

An engineer needs to create a Compute Engine instance with a specific custom subnet, an Ubuntu 20.04 LTS image, and a 50 GB boot disk. The engineer also wants to run a startup script that installs Apache. Which gcloud command should the engineer use to create this instance?

Accepted Answer

gcloud compute instances create my-instance --machine-type=e2-medium --image-family=ubuntu-2004-lts --image-project=ubuntu-os-cloud --boot-disk-size=50GB --subnet=my-subnet --zone=us-central1-a --metadata startup-script='apt-get update && apt-get install -y apache2'. The correct command uses gcloud compute instances create with flags --machine-type, --image-family, --image-project, --boot-disk-size, --subnet, and --metadata startup-script. Option A includes all required flags. Option B uses the wrong image (Ubuntu 18.04). Option C misspells --machine-type as --machine. Option D incorrectly uses --image instead of --image-family.

Answer

gcloud compute instances create my-instance --machine=e2-medium --image-family=ubuntu-2004-lts --image-project=ubuntu-os-cloud --boot-disk-size=50GB --subnet=my-subnet --zone=us-central1-a --metadata=startup-script='apt-get update && apt-get install -y apache2'

Answer

gcloud compute instances create my-instance --machine-type=e2-medium --image-family=ubuntu-1804-lts --image-project=ubuntu-os-cloud --boot-disk-size=50GB --subnet=my-subnet --zone=us-central1-a --metadata=startup-script='apt-get update && apt-get install -y apache2'

Answer

gcloud compute instances create my-instance --machine-type=e2-medium --image=ubuntu-2004-lts --image-project=ubuntu-os-cloud --boot-disk-size=50GB --subnet=my-subnet --zone=us-central1-a --metadata startup-script='apt-get update && apt-get install -y apache2'

Question 2

A team is creating a managed instance group (MIG) for a stateless web application. They need to ensure that instances are automatically replaced if they become unhealthy and that new instances are rolled out gradually with no downtime during updates. Which set of configurations should they use?

Accepted Answer

Create a MIG with a health check configured for autohealing; set rolling update with maxSurge=1 and maxUnavailable=0.. To replace unhealthy instances, enable autohealing with a health check. For gradual updates with no downtime, use a rolling update with maxSurge set to a positive value (e.g., 1) and maxUnavailable set to 0. Option A correctly specifies both. Option B uses maxUnavailable=1 which allows some downtime. Option C sets maxSurge=0 which prevents new instances from being created before old ones are deleted, causing downtime. Option D omits autohealing.

Answer

Create a MIG without health check; set rolling update with maxSurge=1 and maxUnavailable=0.

Answer

Create a MIG with a health check for autohealing; set rolling update with maxSurge=0 and maxUnavailable=1.

Answer

Create a MIG without health check; set rolling update with maxSurge=0 and maxUnavailable=1.

Question 3

An engineer is deploying a containerized application on Google Kubernetes Engine (GKE) and needs to expose it to the internet with a static external IP address. The cluster is in a VPC-native configuration. Which approach should the engineer take to meet this requirement?

Accepted Answer

Reserve a static external IP address in the same region as the cluster, then create a Service of type LoadBalancer and assign the static IP via the loadBalancerIP field.. To expose a service with a static external IP on GKE, the engineer should reserve a static external IP address, then create a Service of type LoadBalancer and specify that IP address in the service spec using the loadBalancerIP field. Option A correctly describes this. Option B uses an Ingress, which can also work but typically requires additional configuration (e.g., for static IP). Option C uses NodePort, which doesn't provide a static external IP by itself. Option D uses ClusterIP, which is internal only.

Answer

Create a Service of type NodePort and then use a Cloud NAT with a static IP.

Answer

Create a Service of type ClusterIP and then use a Cloud Load Balancing service with the static IP.

Answer

Create a Service of type NodePort and then create an Ingress resource with a static IP annotation.

Question 4

A developer wants to deploy a containerized application on Cloud Run from a source code repository, without building a container image manually. The application is written in Node.js and includes a Dockerfile. Which command should the developer use to deploy directly from source?

Accepted Answer

gcloud run deploy my-service --source . --region=us-central1 --platform managed. Cloud Run supports deploying directly from source using gcloud run deploy with the --source flag. This command automatically builds a container image using Cloud Build and deploys it to Cloud Run. Option B is correct. Option A uses --image, which expects a pre-built image. Option C is for Cloud Functions. Option D is for App Engine.

Answer

gcloud run deploy --image=gcr.io/my-project/my-image --region=us-central1

Answer

gcloud app deploy --source .

Answer

gcloud functions deploy my-function --runtime nodejs14 --trigger-http --source .

Question 5

A company wants to store backup files that are accessed only a few times per year, with retrieval times of up to a few hours. The files must be stored at the lowest possible cost. Which Cloud Storage storage class should the company use?

Accepted Answer

Archive. The Archive storage class is the lowest-cost option for long-term storage of data accessed less than once a year, with retrieval times in hours. It is ideal for backups and archival data. Standard is for frequently accessed data. Nearline is for data accessed once a month. Coldline is for data accessed once a quarter.

Answer

Coldline

Answer

Nearline

Answer

Standard

Question 6

An engineer needs to create a Cloud SQL MySQL instance with 4 vCPUs, 15 GB of RAM, and a root password. The instance should be in the us-east1 region. Which command should the engineer run?

Accepted Answer

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-custom-4-15360 --region=us-east1 --root-password=myPassword. The correct command is gcloud sql instances create with --database-version=MYSQL_8_0, --tier=db-custom-4-15360 (4 vCPU, 15 GB RAM), --region=us-east1, and --root-password. Option A has correct flags. Option B uses wrong tier (db-custom-2-7680 is 2 vCPU, 7.5 GB RAM). Option C is missing --root-password. Option D uses wrong region format (us-east1-a) and wrong tier.

Answer

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-custom-4-15360 --region=us-east1

Answer

gcloud sql instances create my-instance --database-version=MYSQL_5_7 --tier=db-n1-standard-4 --region=us-east1-a --root-password=myPassword

Answer

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-custom-2-7680 --region=us-east1 --root-password=myPassword

Question 7

An engineer wants to deploy a Python function that processes messages from a Pub/Sub topic. The function should be triggered whenever a message is published to the topic. Which command should the engineer use to deploy the function?

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-point main --region=us-central1. To deploy a Cloud Function triggered by a Pub/Sub topic, use gcloud functions deploy with --trigger-topic. Option C is correct. Option A uses --trigger-http for HTTP triggers. Option B uses --trigger-topic but misspells --entry-point as --entry-points. Option D uses --trigger-bucket for Cloud Storage events.

Answer

gcloud functions deploy my-function --runtime python39 --trigger-http --entry-point main --region=us-central1

Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-points main --region=us-central1

Answer

gcloud functions deploy my-function --runtime python39 --trigger-bucket my-bucket --entry-point main --region=us-central1

Question 8

A team is using Terraform to manage Google Cloud resources. They want to store the Terraform state file in a Cloud Storage bucket to enable collaboration. The bucket is in project 'state-project'. Which backend configuration should they use?

Accepted Answer

terraform { backend "gcs" { bucket = "state-project-tfstate" prefix = "prod" } }. To store Terraform state in GCS, use the 'gcs' backend with bucket name and optional prefix. Option A is correct. Option B uses 'remote' backend incorrectly. Option C uses 's3' backend for AWS. Option D uses 'cloud' backend which is not valid.

Answer

terraform { backend "cloud" { bucket = "my-bucket" } }

Answer

terraform { backend "remote" { hostname = "app.terraform.io" organization = "my-org" workspaces { name = "prod" } } }

Answer

terraform { backend "s3" { bucket = "my-bucket" key = "prod/terraform.tfstate" region = "us-east1" } }

Question 9

An administrator needs to create a Cloud Storage bucket in the US with the Nearline storage class and make objects publicly readable via IAM. Which gcloud command should they use to create the bucket?

Accepted Answer

gsutil mb -c NEARLINE -l US gs://my-bucket. The correct command is gcloud storage buckets create with --default-storage-class and --location flags. Option B uses gsutil mb with -c for storage class and -l for location. Option A uses gcloud storage but location should be a region, not 'us'. Option C uses gsutil but -s is not a valid flag. Option D incorrectly uses --region.

Answer

gsutil mb -s NEARLINE -l US-CENTRAL1 gs://my-bucket

Answer

gcloud storage buckets create gs://my-bucket --storage-class=NEARLINE --region=US

Answer

gcloud storage buckets create gs://my-bucket --default-storage-class=NEARLINE --location=us

Question 10

An engineer deployed a container to Cloud Run but the service is not receiving traffic. The engineer checks the logs and finds no errors. The container listens on port 8080. What is the most likely cause of the issue?

Accepted Answer

The container is listening on port 3000 instead of the port Cloud Run expects.. Cloud Run expects the container to listen on the port specified in the PORT environment variable (default 8080). If the container listens on a different port (e.g., 3000), Cloud Run will not route traffic to it. Option A is likely. Option B: Cloud Run can handle multiple requests per container (concurrency). Option C: Cloud Run requires a container image; source deployment works. Option D: Cloud Run can be invoked without authentication when --allow-unauthenticated is used.

Answer

The container was deployed from source and Cloud Run requires a pre-built image.

Answer

The service requires authentication but --allow-unauthenticated was not set.

Answer

The container does not support concurrent requests.

Question 11

An engineer is configuring a GKE cluster and wants to enable Horizontal Pod Autoscaling (HPA) for a deployment named 'web-frontend'. The deployment currently has 3 replicas. The engineer wants to automatically scale the number of pods based on CPU utilization, targeting 50% average CPU utilization. Which command should the engineer run?

Accepted Answer

kubectl autoscale deployment web-frontend --cpu-percent=50 --min=3 --max=10. The correct command is kubectl autoscale deployment web-frontend --cpu-percent=50 --min=3 --max=10. This creates an HPA that scales between 3 and 10 replicas based on CPU. Option A is correct. Option B uses wrong flag --cpu. Option C uses --target-cpu-utilization which is for gcloud, not kubectl. Option D uses --max-cpu which is invalid.

Answer

gcloud container clusters autoscale web-frontend --target-cpu-utilization=0.5 --min-nodes=3 --max-nodes=10

Answer

kubectl autoscale deployment web-frontend --max-cpu=50 --min=3 --max=10

Answer

kubectl autoscale deployment web-frontend --cpu=50 --min=3 --max=10

Question 12

A developer needs to SSH into a Compute Engine instance that has OS Login enabled. The developer's Google account is already granted the roles/compute.osLogin role. Which command should the developer use to connect?

Accepted Answer

gcloud compute ssh instance-name --zone=us-central1-a. When OS Login is enabled, the preferred method is gcloud compute ssh, which uses OS Login by default. Option A is correct. Option B uses SSH with a key but OS Login typically uses gcloud. Option C uses gcloud compute connect-to-serial-port which is for serial console. Option D uses gcloud compute instances get-serial-port-output.

Answer

ssh -i ~/.ssh/google_key user@instance-ip

Answer

gcloud compute instances get-serial-port-output instance-name --zone=us-central1-a

Answer

gcloud compute connect-to-serial-port instance-name --zone=us-central1-a

Question 13

An engineer is using gsutil to upload a large number of files to a Cloud Storage bucket. The upload is proceeding very slowly. Which two actions could improve the upload performance? (Choose two.)

Accepted Answer

Use the gsutil -m option to enable parallel multi-threading.. To improve upload performance, you can use parallel composite uploads (gsutil -o GSUtil:parallel_composite_upload_threshold=150M) and increase the number of parallel threads (gsutil -m). Option A and C are correct. Option B increases the number of retries, which may slow down. Option D changes storage class, which doesn't affect upload speed. Option E changes ACL settings.

Answer

Increase the number of retries using gsutil -o Boto:num_retries=10.

Answer

Change the storage class of the bucket to Standard.

Answer

Set a custom ACL on the bucket to allow faster writes.

Question 14

A company is migrating a legacy monolithic application to GKE. The application consists of multiple microservices that need to communicate with each other. The team wants to manage traffic routing, implement canary deployments, and provide SSL termination. Which three Google Cloud services should they consider using together? (Choose three.)

Accepted Answer

Cloud Endpoints. To manage traffic routing, canary deployments, and SSL termination in GKE, a common pattern is to use Cloud Load Balancing (for SSL and traffic routing), GKE Ingress (often with an Ingress controller like NGINX or GKE Ingress), and Cloud CDN for caching. Alternatively, using Cloud Endpoints for API management. The combination of Cloud Load Balancing, Cloud CDN, and Cloud Endpoints can provide the required features. Option A, C, and D are correct. Cloud NAT is for outbound internet access, and Cloud Armor is for security.

Answer

Cloud NAT

Answer

Cloud Armor

Question 15

An engineer is deploying a Cloud Function that processes files uploaded to a Cloud Storage bucket. The function needs to be triggered by new object creation events. The engineer has already written the function code. Which commands should the engineer run to create the bucket and deploy the function with the correct trigger? (Choose two.)

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-bucket my-bucket --entry-point main --region=us-central1. To create a bucket, use gsutil mb. To deploy a Cloud Function triggered by Cloud Storage events, use gcloud functions deploy with --trigger-bucket. Option B and C are correct. Option A creates a bucket but with wrong command. Option D is missing trigger. Option E is for HTTP trigger.

Answer

gcloud functions deploy my-function --runtime python39 --trigger-http --entry-point main --region=us-central1

Answer

gcloud functions deploy my-function --runtime python39 --entry-point main --region=us-central1

Answer

gcloud storage buckets create gs://my-bucket --location=us-central1