Google ACE Deploying and Implementing a Cloud Solution Practice Test 8 — 15 Questions

Question 1

Which kubectl command lists all pods in the current namespace?

Accepted Answer

kubectl get pods. The command 'kubectl get pods' lists all pods. 'kubectl get all' includes services, deployments, etc. 'kubectl describe pods' shows detailed info. 'kubectl list pods' is invalid.

Answer

kubectl list pods

Answer

kubectl describe pods

Answer

kubectl get all

Question 2

A company has a Cloud Run service that needs to access a Cloud SQL database. What is the recommended way to connect securely?

Accepted Answer

Use Cloud SQL Proxy by adding the Cloud SQL instance connection name to the Cloud Run service. The recommended way for Cloud Run to connect to Cloud SQL is to use the Cloud SQL Auth Proxy (or the built-in Cloud SQL connector) by specifying the instance connection name in the Cloud Run service configuration. This provides secure, IAM-authenticated, encrypted connectivity without exposing the database to the public internet. It is the Google-recommended pattern for serverless-to-Cloud SQL connectivity.

Answer

Use a public IP for the Cloud SQL instance and whitelist the Cloud Run service's IP

Answer

Store database credentials in environment variables

Answer

Use VPC peering to connect Cloud Run to Cloud SQL

Question 3

A data engineering team wants to create a Cloud Storage bucket for storing sensitive analytics data. They require encryption at rest with customer-managed keys (CMEK) and want to restrict access to a specific service account. Which three steps are necessary?

Accepted Answer

Set the bucket's default encryption to use the KMS key. To use CMEK, you must create a Cloud KMS key ring and key, then configure the bucket to use that key. Access is controlled via IAM; granting the service account roles/storage.objectAdmin allows full object management. Note: The KMS key must be in the same region as the bucket.

Answer

Enable uniform bucket-level access

Answer

Create a service account and download its JSON key

Question 4

A developer is deploying a new application on GKE and needs to configure a HorizontalPodAutoscaler (HPA). Which two resources are required for HPA to work correctly?

Accepted Answer

CPU utilization metrics. HPA requires a deployment (or other scalable resource) and a target metric, usually CPU utilization. The HPA will scale the deployment based on the metric. A ConfigMap and a service are not strictly required for HPA.

Answer

A Service

Answer

A ConfigMap

Answer

A NodePort service

Question 5

A team is creating a managed instance group (MIG) for a stateless web application. They need to ensure that instances are automatically replaced if they become unhealthy and that new instances are rolled out gradually with no downtime during updates. Which set of configurations should they use?

Accepted Answer

Create a MIG with a health check configured for autohealing; set rolling update with maxSurge=1 and maxUnavailable=0.. A health check is required for autohealing — without it, the MIG cannot detect unhealthy instances and replace them. For zero-downtime rolling updates, maxSurge=1 allows a new instance to be created before an old one is removed, while maxUnavailable=0 guarantees the desired capacity is never reduced during the update. This combination satisfies both requirements.

Answer

Create a MIG without health check; set rolling update with maxSurge=1 and maxUnavailable=0.

Answer

Create a MIG with a health check for autohealing; set rolling update with maxSurge=0 and maxUnavailable=1.

Answer

Create a MIG without health check; set rolling update with maxSurge=0 and maxUnavailable=1.

Question 6

A developer wants to deploy a containerized application on Cloud Run from a source code repository, without building a container image manually. The application is written in Node.js and includes a Dockerfile. Which command should the developer use to deploy directly from source?

Accepted Answer

gcloud run deploy my-service --source . --region=us-central1 --platform managed. The `gcloud run deploy` command with the `--source .` flag instructs Cloud Run to build the container image automatically using Cloud Build (via Buildpacks or the provided Dockerfile) and then deploy it. This is the only option that deploys directly from source to Cloud Run without requiring a pre-built image. The `--platform managed` flag confirms a fully managed Cloud Run service.

Answer

gcloud run deploy --image=gcr.io/my-project/my-image --region=us-central1

Answer

gcloud app deploy --source .

Answer

gcloud functions deploy my-function --runtime nodejs14 --trigger-http --source .

Question 7

An engineer needs to create a Cloud SQL MySQL instance with 4 vCPUs, 15 GB of RAM, and a root password. The instance should be in the us-east1 region. Which command should the engineer run?

Accepted Answer

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-custom-4-15360 --region=us-east1 --root-password=myPassword. The correct command must specify a custom machine type matching 4 vCPUs and 15 GB RAM, which is `db-custom-4-15360` (the format is db-custom--). It must also include the root password and target the us-east1 region (not a zone). Option D is the only command that includes all required parameters: MYSQL_8_0, the correct custom tier, the region, and the root password.

Answer

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-custom-4-15360 --region=us-east1

Answer

gcloud sql instances create my-instance --database-version=MYSQL_5_7 --tier=db-n1-standard-4 --region=us-east1-a --root-password=myPassword

Answer

gcloud sql instances create my-instance --database-version=MYSQL_8_0 --tier=db-custom-2-7680 --region=us-east1 --root-password=myPassword

Question 8

An engineer wants to deploy a Python function that processes messages from a Pub/Sub topic. The function should be triggered whenever a message is published to the topic. Which command should the engineer use to deploy the function?

Accepted Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-point main --region=us-central1. The correct command uses --trigger-topic my-topic to bind the function to a Pub/Sub topic, and --entry-point main (singular) to name the function entry point. This deploys a background function that Cloud Functions invokes whenever a message is published to the topic. The runtime and region flags are also correctly specified.

Answer

gcloud functions deploy my-function --runtime python39 --trigger-http --entry-point main --region=us-central1

Answer

gcloud functions deploy my-function --runtime python39 --trigger-topic my-topic --entry-points main --region=us-central1

Answer

gcloud functions deploy my-function --runtime python39 --trigger-bucket my-bucket --entry-point main --region=us-central1

Question 9

An engineer is configuring a GKE cluster and wants to enable Horizontal Pod Autoscaling (HPA) for a deployment named 'web-frontend'. The deployment currently has 3 replicas. The engineer wants to automatically scale the number of pods based on CPU utilization, targeting 50% average CPU utilization. Which command should the engineer run?

Accepted Answer

kubectl autoscale deployment web-frontend --cpu-percent=50 --min=3 --max=10. The correct command is 'kubectl autoscale deployment web-frontend --cpu-percent=50 --min=3 --max=10', which creates an HPA targeting 50% average CPU utilization with a minimum of 3 and maximum of 10 replicas. The 'kubectl autoscale' subcommand is the standard imperative way to create an HPA for a deployment. The flags --cpu-percent, --min, and --max are the correct parameters for this command.

Answer

gcloud container clusters autoscale web-frontend --target-cpu-utilization=0.5 --min-nodes=3 --max-nodes=10

Answer

kubectl autoscale deployment web-frontend --max-cpu=50 --min=3 --max=10

Answer

kubectl autoscale deployment web-frontend --cpu=50 --min=3 --max=10

Question 10

A developer needs to SSH into a Compute Engine instance that has OS Login enabled. The developer's Google account is already granted the roles/compute.osLogin role. Which command should the developer use to connect?

Accepted Answer

gcloud compute ssh instance-name --zone=us-central1-a. With OS Login enabled and the roles/compute.osLogin role granted, the developer should connect using gcloud compute ssh, which automatically handles OS Login authentication and key management. The gcloud compute ssh command integrates with OS Login to generate short-lived SSH certificates and manage the developer's Google identity, so no manual key file is needed. Specifying the zone ensures the command targets the correct instance.

Answer

ssh -i ~/.ssh/google_key user@instance-ip

Answer

gcloud compute instances get-serial-port-output instance-name --zone=us-central1-a

Answer

gcloud compute connect-to-serial-port instance-name --zone=us-central1-a

Question 11

An engineer is using gsutil to upload a large number of files to a Cloud Storage bucket. The upload is proceeding very slowly. Which two actions could improve the upload performance? (Choose two.)

Accepted Answer

Use the gsutil -m option to enable parallel multi-threading.. Option A is correct because gsutil -m enables parallel multi-threaded/multi-processing transfers, which lets many files upload concurrently and dramatically improves throughput when uploading a large number of files. Option D is correct because enabling parallel composite uploads (by setting the threshold below the file size, e.g., gsutil -o GSUtil:parallel_composite_upload_threshold=150M) splits large files into chunks uploaded in parallel and then composed server-side, speeding up large-file uploads. Option B is incorrect because Boto:num_retries only controls how many times failed requests are retried; it does not increase throughput and can even slow things down. Option C is incorrect because storage class affects pricing, availability, and access characteristics, not upload speed. Option E is incorrect because ACLs govern access permissions and have no effect on write performance.

Answer

Increase the number of retries using gsutil -o Boto:num_retries=10.

Answer

Change the storage class of the bucket to Standard.

Answer

Set a custom ACL on the bucket to allow faster writes.

Question 12

A developer wants to deploy a containerized application to Cloud Run that should be publicly accessible over the internet. The container image is stored in Container Registry. Which gcloud command should they use?

Accepted Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --region us-central1 --platform managed --allow-unauthenticated. The correct gcloud command uses --platform managed, which is the required value for Cloud Run (fully managed). The --allow-unauthenticated flag makes the service publicly accessible. Option B includes both correct flags. Option A uses --platform cloud-run, which is invalid; the accepted values are managed or gke. Option C uses --platform gke, which would deploy to a GKE cluster, not Cloud Run. Option D omits --allow-unauthenticated, so the service would require authentication, not public.

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --region us-central1 --platform cloud-run --allow-unauthenticated

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --region us-central1 --platform gke --allow-unauthenticated

Answer

gcloud run deploy my-service --image gcr.io/my-project/my-image --region us-central1 --platform managed

Question 13

A team is using Terraform to manage Google Cloud resources. They want to store the Terraform state file in a Cloud Storage bucket with versioning enabled. Which backend configuration should they use?

Accepted Answer

terraform {
  backend "gcs" {
    bucket = "my-terraform-state-bucket"
    prefix = "terraform/state"
  }
}. The correct backend block for Google Cloud Storage in Terraform is backend "gcs", and the bucket argument must be the bare bucket name (e.g., "my-terraform-state-bucket") without the gs:// scheme prefix. Terraform's GCS backend automatically uses the Google Cloud Storage API and supports object versioning natively when enabled on the bucket. This configuration stores the state file at gs://my-terraform-state-bucket/terraform/state/default.tfstate.

Answer

terraform {
  backend "cloud" {
    bucket = "my-terraform-state-bucket"
    prefix = "terraform/state"
  }
}

Answer

terraform {
  backend "gcs" {
    bucket = "gs://my-terraform-state-bucket"
    prefix = "terraform/state"
  }
}

Answer

terraform {
  backend "remote" {
    hostname = "app.terraform.io"
    organization = "my-org"
    workspaces { name = "my-workspace" }
  }
}

Question 14

A company wants to run a stateful application on Compute Engine with persistent storage that can be attached to another instance in case of failure. Which storage option should they use?

Accepted Answer

Persistent Disk. Persistent Disk is the correct choice because it provides durable, block storage that can be attached to Compute Engine instances and detached and reattached to another instance in case of failure. This makes it suitable for stateful applications requiring persistent storage that can survive instance failures.

Answer

Filestore

Answer

Cloud Storage bucket

Answer

Local SSD

Question 15

An organization needs to import a SQL dump file from a Cloud Storage bucket into an existing Cloud SQL for PostgreSQL instance. Which command should they use?

Accepted Answer

gcloud sql import sql my-instance gs://bucket/dump.sql --database=mydb. The correct command is 'gcloud sql import sql my-instance gs://bucket/dump.sql --database=mydb', which imports a SQL dump file from a Cloud Storage bucket into an existing Cloud SQL instance and specifies the target database. The 'gcloud sql import sql' subcommand is designed for importing SQL dump files, and the --database flag is required when the dump does not specify the database. This matches the requirement to import into an existing PostgreSQL instance.

Answer

gcloud sql export sql my-instance gs://bucket/dump.sql

Answer

gcloud sql instances import my-instance gs://bucket/dump.sql

Answer

gcloud sql import csv my-instance gs://bucket/dump.sql --database=mydb