Google ACE Deploying and Implementing a Cloud Solution Practice Test 7 — 15 Questions

Question 1

After deploying a Kubernetes Deployment named 'web-app', a developer wants to expose it externally on a static IP address. Which kubectl command should they use?

Accepted Answer

kubectl expose deployment web-app --type=LoadBalancer --port=80 --target-port=8080. kubectl expose creates a service. To get an external load balancer with a static IP, the service type must be LoadBalancer. The --type flag specifies the service type.

Answer

kubectl create service clusterip web-app --tcp=80:8080

Answer

gcloud compute forwarding-rules create web-app --port=80

Answer

kubectl expose deployment web-app --type=NodePort --port=80

Question 2

A team is deploying a microservice to Cloud Run that needs to process messages from Pub/Sub. The service should only be invocable by Pub/Sub push deliveries, not by unauthenticated HTTP requests. What should the team do?

Accepted Answer

Deploy with --no-allow-unauthenticated and configure the Pub/Sub subscription to use a service account that has the roles/run.invoker role on the Cloud Run service. To restrict invocation to only Pub/Sub, the Cloud Run service must require authentication and the Pub/Sub subscription must be configured to use a service account to push. The --no-allow-unauthenticated flag ensures only authenticated requests are accepted, and the Pub/Sub subscription's push endpoint must be set with the service's URL and use a service account with the run.invoker role.

Answer

Deploy with --allow-unauthenticated and set up a Pub/Sub subscription with OIDC token audience

Answer

Deploy with --no-allow-unauthenticated and create a VPC connector to allow Pub/Sub internal traffic

Answer

Use Cloud Functions instead, which is more secure for Pub/Sub triggers

Question 3

You want to deploy a Cloud Function triggered by HTTP requests. The function is written in Node.js and the entry point function is named 'helloHttp'. Which command should you use?

Accepted Answer

gcloud functions deploy my-function --runtime nodejs16 --trigger-http --entry-point=helloHttp --region=us-central1. The correct command specifies the runtime (nodejs16), trigger (--trigger-http), entry point (--entry-point=helloHttp), and region. --trigger-topic is for Pub/Sub, not HTTP.

Answer

gcloud functions deploy --source . --runtime nodejs16 --trigger-http --entry-point=helloHttp

Answer

gcloud run deploy my-function --source . --runtime nodejs16 --entry-point=helloHttp

Answer

gcloud functions deploy my-function --runtime nodejs16 --trigger-topic my-topic --entry-point=helloHttp

Question 4

A company wants to migrate an on-premises MySQL database to Cloud SQL. They need to import an existing SQL dump file stored in a Cloud Storage bucket. Which command should they use?

Accepted Answer

gcloud sql import sql my-instance gs://my-bucket/dump.sql --database=mydb. gcloud sql import sql is the correct command to import a SQL dump file into a Cloud SQL instance. The command specifies the instance, the bucket path, and the database name.

Answer

gcloud compute ssh my-instance --command='mysql < dump.sql'

Answer

gcloud sql databases create mydb --instance=my-instance --import=gs://my-bucket/dump.sql

Answer

gsutil cp gs://my-bucket/dump.sql | mysql -h my-instance -u root -p

Question 5

An engineer is using Terraform to manage GCP resources. They want to store the Terraform state file remotely so that the team can collaborate. Which backend configuration should they use?

Accepted Answer

backend "gcs" { bucket = "my-terraform-state" }. Terraform supports storing state in GCS by using the 'gcs' backend. The bucket must be created before configuration. The 'local' backend stores state locally, which does not enable collaboration. 'cloud' is not a valid backend type. 'consul' is not GCP-native.

Answer

backend "cloud" { bucket = "my-terraform-state" }

Answer

backend "local" { path = "terraform.tfstate" }

Answer

backend "consul" { address = "consul.example.com" }

Question 6

A company is deploying a microservice on Cloud Run. They want to ensure that the service can handle high traffic spikes by allowing multiple concurrent requests per container instance. They also want to minimize cold starts. Which two settings should they configure? (Choose two.)

Accepted Answer

Set min-instances to a value greater than 0 (e.g., 1). Setting concurrency to a higher value (e.g., 80) allows each container instance to handle multiple requests simultaneously, improving throughput. Setting min-instances to a value greater than 0 keeps instances warm to reduce cold starts. Max-instances limits scaling but does not help with cold starts. CPU always on keeps CPU allocated but does not directly affect cold starts. Timeout affects request duration, not concurrency or cold starts.

Answer

Set the timeout to 900 seconds

Answer

Set CPU always on to true

Answer

Set max-instances to a high value

Question 7

A DevOps engineer is creating a GKE cluster for a production workload that requires high availability and resilience to zone failures. They also need to deploy a stateless application that can scale based on CPU usage. Which two actions should they take? (Choose two.)

Accepted Answer

Enable horizontal pod autoscaling on the deployment with CPU target utilization. A regional cluster spans multiple zones, providing high availability. An HPA scales pods based on CPU. A zonal cluster is not highly available. Node auto-repair is for node health, not resilience to zone failure. Using a deployment with replicas is good, but the question asks for actions related to cluster creation and scaling.

Answer

Enable node auto-repair on the node pool

Answer

Create a zonal cluster in a single zone

Answer

Set the deployment replicas to 1

Question 8

A developer needs to create a Compute Engine VM with 4 vCPUs, 15 GB of memory, and a Debian 10 boot disk. Which gcloud compute instances create command is correct?

Accepted Answer

gcloud compute instances create my-vm --machine-type=n1-standard-4 --image-family=debian-10 --image-project=debian-cloud. The correct command specifies machine-type n1-standard-4 (4 vCPU, 15 GB RAM), image-family debian-10, and image-project debian-cloud. The other options either use wrong machine type, wrong image project, or miss required flags.

Answer

gcloud compute instances create my-vm --machine-type=n1-highmem-4 --image-family=debian-10 --image-project=debian-cloud

Answer

gcloud compute instances create my-vm --machine-type=n1-standard-4 --image-family=ubuntu-1804 --image-project=ubuntu-os-cloud

Answer

gcloud compute instances create my-vm --machine-type=n1-standard-4

Question 9

An organization wants to deploy a containerized web application on Google Cloud with minimum operational overhead. The application should scale to zero when not in use and only incur costs when serving requests. Which service should they choose?

Accepted Answer

Cloud Run. Cloud Run is a fully managed serverless platform that scales to zero, charges only for request processing time, and abstracts infrastructure management. GKE requires cluster management and nodes always running. App Engine Flexible requires at least one instance always running. Compute Engine requires full VM management.

Answer

App Engine Flexible Environment

Answer

Google Kubernetes Engine (GKE)

Answer

Compute Engine with container-optimized OS

Question 10

A team is using Terraform to manage Google Cloud infrastructure. They want to store Terraform state files in a remote backend that supports locking to prevent concurrent modifications. Which backend should they use?

Accepted Answer

Cloud Storage. Google Cloud Storage (GCS) is the recommended backend for Terraform on GCP. It supports state locking via object versioning and a lock mechanism (using the state lock table in a GCS bucket). Cloud Shell is not a backend. Cloud Source Repositories is for source code. Bigtable is for NoSQL workloads.

Answer

Cloud Source Repositories

Answer

Cloud Shell

Answer

Cloud Bigtable

Question 11

A DevOps engineer needs to deploy a containerized microservice to Cloud Run that processes messages from Pub/Sub. The service must authenticate to Google Cloud APIs using a service account. Which Cloud Run deployment command should they use to ensure the service uses a specific service account?

Accepted Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --service-account my-sa@my-project.iam.gserviceaccount.com --platform managed. Cloud Run supports the --service-account flag to attach a specific service account. The --image flag specifies the container image. The other options either use incorrect flags (--account is for gcloud CLI user, not service account) or miss required flags.

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --account my-sa@my-project.iam.gserviceaccount.com

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --impersonate-service-account my-sa@my-project.iam.gserviceaccount.com

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image

Question 12

An engineer deployed a new version of their application on GKE using a Deployment. Users report that the new version has a bug. The engineer wants to quickly revert to the previous version. How can they achieve this?

Accepted Answer

Run kubectl rollout undo deployment/<deployment-name>. Kubernetes Deployments support rollbacks using 'kubectl rollout undo'. The command automatically reverts to the previous revision. Deleting and recreating the Deployment would require re-creating from the previous manifest. 'kubectl rollout history' shows history but doesn't roll back. Scaling down then up does not revert the version.

Answer

Scale the deployment to zero and then scale back up

Answer

Run kubectl delete deployment and re-apply the old manifest

Answer

Run kubectl rollout history deployment/<deployment-name>

Question 13

A company wants to create a Cloud Storage bucket to store archival data that is accessed infrequently (less than once a year). The data must be stored at the lowest possible cost. Which storage class should they choose?

Accepted Answer

Archive. Archive storage class is the lowest-cost option for long-term archival data accessed less than once a year. Nearline and Coldline have higher retrieval costs but are for data accessed less frequently than standard, not as low as Archive. Standard is for frequently accessed data.

Answer

Coldline

Answer

Nearline

Answer

Standard

Question 14

A data analyst wants to import a SQL dump file from a Cloud Storage bucket into an existing Cloud SQL database. Which command should they use?

Accepted Answer

gcloud sql import sql my-instance gs://my-bucket/dump.sql --database=mydb. The correct command is 'gcloud sql import sql gs:/// --database='. This imports a SQL dump file. The other commands either use wrong syntax or wrong import type (csv for CSV files).

Answer

gcloud sql instances import my-instance gs://my-bucket/dump.sql --database=mydb

Answer

gcloud sql import csv my-instance gs://my-bucket/dump.sql --database=mydb

Answer

gcloud sql databases import my-instance gs://my-bucket/dump.sql

Question 15

An engineer needs to create a GKE cluster with 3 nodes of machine type e2-medium in the us-central1 region. Which command should they use?

Accepted Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --region=us-central1. The correct command is 'gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --region=us-central1'. The --zone flag is for zonal clusters, not regional. The other options either use wrong zone or wrong flags.

Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium

Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --region=us-central1-a

Answer

gcloud container clusters create my-cluster --num-nodes=3 --machine-type=e2-medium --zone=us-central1-a