Google ACE Deploying and Implementing a Cloud Solution Practice Test 8 — 15 Questions

Question 1

An engineer needs to create a Compute Engine instance with 4 vCPUs, 16 GB of memory, and a 100 GB boot disk using the Ubuntu 22.04 LTS image. Which gcloud command accomplishes this?

Accepted Answer

gcloud compute instances create my-vm --zone=us-central1-a --machine-type=n1-standard-4 --image-family=ubuntu-2204-lts --image-project=ubuntu-os-cloud --boot-disk-size=100GB. The correct command specifies machine-type n1-standard-4 (4 vCPU, 15 GB memory; closest to 16 GB), boot-disk-size 100GB, and image-family ubuntu-2204-lts with image-project ubuntu-os-cloud. Option A is correct. Option B uses wrong image-project; C has wrong image-family; D omits image-project and uses wrong image-family.

Answer

gcloud compute instances create my-vm --zone=us-central1-a --machine-type=n1-standard-4 --image-family=ubuntu-2004-lts --boot-disk-size=100GB

Answer

gcloud compute instances create my-vm --zone=us-central1-a --machine-type=n1-highmem-4 --image-family=ubuntu-minimal-2204-lts --image-project=ubuntu-os-cloud --boot-disk-size=100GB

Answer

gcloud compute instances create my-vm --zone=us-central1-a --machine-type=e2-standard-4 --image-family=ubuntu-2204-lts --image-project=debian-cloud --boot-disk-size=100GB

Question 2

A company has a managed instance group (MIG) of web servers behind a load balancer. They want to deploy a new version of the application with zero downtime and the ability to roll back quickly if issues arise. Which update strategy should they use?

Accepted Answer

Create a new instance template with the updated application, then perform a rolling update on the MIG using the canary update strategy with a target of 10% for the new template. Validate and then promote to 100%.. A rolling update with a canary approach (creating a new version of the instance template, then updating the MIG with a canary deployment) allows incremental rollout and immediate rollback by stopping the canary. Option A (proactive rolling update) is correct. Option B (recreate) causes downtime; C (blue/green with MIG label) requires manual traffic switch; D (rolling update with maxSurge=0 and maxUnavailable=1) allows some downtime.

Answer

Delete the MIG and recreate it with the new instance template.

Answer

Perform a rolling update on the MIG with maxSurge=0 and maxUnavailable=1 to replace instances one by one.

Answer

Create a new MIG with the new template and a separate load balancer, then update DNS to point to the new load balancer.

Question 3

A developer wants to deploy a containerized application to Cloud Run that should be publicly accessible over the internet. The container image is stored in Container Registry. Which gcloud command should they use?

Accepted Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --region us-central1 --platform managed --allow-unauthenticated. The correct command includes --allow-unauthenticated to grant public access, --region, --image, and --platform managed. Option C is correct. Option A missing --allow-unauthenticated; B uses wrong platform flag; D uses --platform gke which is for GKE.

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --region us-central1 --platform cloud-run --allow-unauthenticated

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --region us-central1 --platform gke --allow-unauthenticated

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --region us-central1 --platform managed

Question 4

A team is using Terraform to manage Google Cloud resources. They want to store the Terraform state file in a Cloud Storage bucket with versioning enabled. Which backend configuration should they use?

Accepted Answer

terraform {
  backend "gcs" {
    bucket = "my-terraform-state-bucket"
    prefix = "terraform/state"
  }
}. The correct backend is 'gcs' with a bucket name and prefix. Option A is correct. Option B uses 'remote' which is for Terraform Cloud; C uses 'cloud' which is not a valid backend; D uses 'gcs' but with the wrong bucket format.

Answer

terraform {
  backend "cloud" {
    bucket = "my-terraform-state-bucket"
    prefix = "terraform/state"
  }
}

Answer

terraform {
  backend "gcs" {
    bucket = "gs://my-terraform-state-bucket"
    prefix = "terraform/state"
  }
}

Answer

terraform {
  backend "remote" {
    hostname = "app.terraform.io"
    organization = "my-org"
    workspaces { name = "my-workspace" }
  }
}

Question 5

An organization needs to deploy a Cloud Function that processes messages from a Pub/Sub topic and writes results to BigQuery. The function must be triggered by every message published to the topic. Which deployment command is correct?

Accepted Answer

gcloud functions deploy process-messages --runtime python310 --trigger-topic my-topic --entry-point process --region us-central1 --memory 256MB. The correct command uses --trigger-topic with the topic name, runtime Python 3.10, entry point, region, and memory. Option D is correct. Option A uses --trigger-http; B uses --trigger-topic but with invalid runtime; C uses --trigger-topic but misses --memory.

Answer

gcloud functions deploy process-messages --runtime python310 --trigger-http --entry-point process --region us-central1 --memory 256MB

Answer

gcloud functions deploy process-messages --runtime python310 --trigger-topic my-topic --entry-point process --region us-central1

Answer

gcloud functions deploy process-messages --runtime nodejs18 --trigger-topic my-topic --entry-point process --region us-central1 --memory 256MB

Question 6

A developer needs to upload a large number of files from their local machine to a Cloud Storage bucket. Which command should they use?

Accepted Answer

gsutil cp /local/dir/* gs://my-bucket/. gsutil cp is the correct command for uploading files. Option B is correct. Option A creates a bucket; C lists files; D syncs a directory but is overkill for simple upload.

Answer

gcloud storage ls gs://my-bucket

Answer

gcloud storage buckets create gs://my-bucket

Answer

gsutil rsync -r /local/dir gs://my-bucket/

Question 7

A company wants to run a stateful application on Compute Engine with persistent storage that can be attached to another instance in case of failure. Which storage option should they use?

Accepted Answer

Persistent Disk. Persistent Disk (PD) is a network-attached block storage that can be detached and reattached to another VM in the same zone. Option A is correct. Option B (Local SSD) is ephemeral; C (Cloud Storage) is object storage; D (Filestore) is file storage but not designed for block-level attachment.

Answer

Filestore

Answer

Cloud Storage bucket

Answer

Local SSD

Question 8

A DevOps engineer needs to create a GKE cluster with 3 nodes per zone in us-central1-a and us-central1-b, with nodes of type e2-standard-2. The cluster should be regional. Which command is correct?

Accepted Answer

gcloud container clusters create my-cluster --region us-central1 --node-locations us-central1-a,us-central1-b --num-nodes 3 --machine-type e2-standard-2. A regional cluster is created by specifying --region (not --zone). Option D is correct. Option A uses --zone (zonal); B uses --region but missing --num-nodes; C uses both zone and region incorrectly.

Answer

gcloud container clusters create my-cluster --region us-central1 --machine-type e2-standard-2

Answer

gcloud container clusters create my-cluster --zone us-central1-a --region us-central1 --num-nodes 3 --machine-type e2-standard-2

Answer

gcloud container clusters create my-cluster --zone us-central1-a --num-nodes 3 --machine-type e2-standard-2

Question 9

An organization needs to import a SQL dump file from a Cloud Storage bucket into an existing Cloud SQL for PostgreSQL instance. Which command should they use?

Accepted Answer

gcloud sql import sql my-instance gs://bucket/dump.sql --database=mydb. The correct command is gcloud sql import sql. Option D is correct. Option A is for exporting; B uses incorrect subcommand; C is for importing CSV, not SQL dump.

Answer

gcloud sql export sql my-instance gs://bucket/dump.sql

Answer

gcloud sql instances import my-instance gs://bucket/dump.sql

Answer

gcloud sql import csv my-instance gs://bucket/dump.sql --database=mydb

Question 10

A company runs a web application on Compute Engine instances behind a load balancer. They want to automatically scale the number of instances based on CPU utilization. Which two resources must they create? (Choose TWO.)

Accepted Answer

Managed instance group (MIG) with autoscaling policy. To auto-scale Compute Engine instances, you need an instance template (to define the VM configuration) and a managed instance group (MIG) with an autoscaling policy. Option A and D are correct. Option B is a Cloud Function, not relevant; C is a Cloud Storage bucket; E is Cloud SQL.

Answer

Cloud Storage bucket

Answer

Cloud SQL instance

Answer

Cloud Function

Question 11

A developer wants to deploy a containerized application to GKE and expose it externally via a load balancer. Which three kubectl commands are needed? (Choose THREE.)

Accepted Answer

kubectl create deployment my-app --image=gcr.io/my-project/my-app. To deploy and expose a container in GKE, you can use kubectl create deployment to create the deployment, kubectl expose to create a service of type LoadBalancer, and kubectl get service to verify the external IP. Option B, C, and D are correct. Option A creates a pod directly (not recommended for deployment); E is for scaling.

Answer

kubectl autoscale deployment my-app --cpu-percent=50 --min=1 --max=10

Answer

kubectl run my-app --image=gcr.io/my-project/my-app

Question 12

An engineer needs to create a Cloud Storage bucket for storing sensitive financial data that must be encrypted at rest using a customer-managed encryption key (CMEK) stored in Cloud KMS. Which two actions are required? (Choose TWO.)

Accepted Answer

Use gcloud storage buckets create with --encryption-key flag pointing to the KMS key.. To use CMEK for Cloud Storage, you need to create a key ring and key in Cloud KMS, and then specify the key when creating the bucket via the --encryption-key flag. Option A and D are correct. Option B (gsutil) does not support CMEK; C is for granting access to the service account; E is for default encryption, not CMEK.

Answer

Use gsutil mb -o default_encryption_key=...

Answer

Grant the Cloud Storage service account the Cloud KMS CryptoKey Encrypter/Decrypter role.

Answer

Set default encryption on the bucket using gsutil defaulte encryption set.

Question 13

A company wants to deploy a new application on Google Cloud that requires a regional managed instance group with automatic scaling based on HTTP load. Which two resources must they create? (Choose TWO.)

Accepted Answer

HTTP(S) Load Balancer. For a regional MIG with HTTP load balancing, you need an instance template (to define VMs) and a load balancer (e.g., HTTP(S) Load Balancer). Option A and D are correct. Option B is for GKE; C is for Cloud Run; E is for Cloud Functions.

Answer

Cloud Run service

Answer

GKE cluster

Answer

Cloud Function

Question 14

A DevOps engineer is setting up a CI/CD pipeline that deploys a containerized application to Cloud Run. The application source code is in a Cloud Source Repository. Which three steps are required to deploy from source? (Choose THREE.)

Accepted Answer

Use gcloud run deploy with the --source flag pointing to the source code.. To deploy from source to Cloud Run, you can use Cloud Build to build the container image from source, push it to Container Registry, and then deploy to Cloud Run. Option A, C, and D are correct. Option B is for deploying from an existing image; E is not a standard step.

Answer

Create a GKE cluster to host the application.

Answer

Use gcloud run deploy --image to deploy the container image.

Question 15

A company has a Cloud SQL for MySQL instance that needs to be replicated to a different region for disaster recovery. Which two actions should they take? (Choose TWO.)

Accepted Answer

Create a read replica of the primary instance in the target region.. To set up cross-region replication for Cloud SQL, you create a read replica in the desired region and enable cross-region replication. Option A and D are correct. Option B is for on-premises replication; C is for internal replication; E is not needed.

Answer

Configure an external replica from the primary instance.

Answer

Enable binary logging on the primary instance.

Answer

Set up a failover replica in the same zone.