Google ACE Deploying and Implementing a Cloud Solution — Timed 15 Questions

Question 1

You want to create a Compute Engine instance with a default machine type of n1-standard-1, using the latest Debian 11 image, with a 50GB boot disk, in the us-central1-a zone. Which gcloud command accomplishes this?

Accepted Answer

gcloud compute instances create my-instance --machine-type=n1-standard-1 --image-family=debian-11 --image-project=debian-cloud --boot-disk-size=50GB --zone=us-central1-a. The correct command uses --machine-type, --image-family, --image-project, --boot-disk-size, and --zone. Option A includes all required flags correctly.

Answer

gcloud compute instances create my-instance --machine-type=n1-standard-1 --image-family=debian-10 --image-project=debian-cloud --boot-disk-size=50 --zone=us-central1-a

Answer

gcloud compute instances create my-instance --machine-type=n1-standard-1 --image-family=debian-11 --image-project=debian-cloud --boot-disk-size=50GB --region=us-central1-a

Answer

gcloud compute instances create my-instance --machine-type=n1-standard-1 --image-family=debian-11 --image-project=debian-cloud --root-disk-size=50GB --zone=us-central1-a

Question 2

You have a managed instance group (MIG) with instances that need to run a startup script to configure monitoring agents. You created the instance template without a startup script. Which action should you take to add the startup script?

Accepted Answer

Create a new instance template with the startup script, then update the MIG to use the new template via a rolling update.. Instance templates are immutable; you cannot modify them. You must create a new instance template with the startup script and update the MIG to use it via rolling update or by setting the template.

Answer

Use gcloud compute instances add-metadata to add the startup script to each running instance.

Answer

Delete the MIG and recreate it with a new template; you cannot change the template of an existing MIG.

Answer

Edit the existing instance template and add the startup script under 'metadata'.

Question 3

An organization needs to deploy a containerized web application on Google Kubernetes Engine (GKE) and expose it to the internet with a static IP address. The cluster is regional, with 3 nodes. Which sequence of kubectl commands achieves this?

Accepted Answer

gcloud compute addresses create web-ip --region=us-central1; kubectl create deployment web --image=web:v1; kubectl expose deployment web --type=LoadBalancer --port=80 --load-balancer-ip=web-ip. You deploy the application, then expose it with a LoadBalancer service. To get a static IP, you must reserve a global static IP address (using gcloud) and assign it via annotation --load-balancer-ip. Option D is correct.

Answer

kubectl create deployment web --image=web:v1; kubectl expose deployment web --type=LoadBalancer --port=80; then reserve a regional static IP with gcloud compute addresses create web-ip --region us-central1 and assign it via annotation.

Answer

kubectl create deployment web --image=web:v1 --replicas=3; kubectl expose deployment web --type=NodePort --port=80; then use gcloud compute addresses create web-ip --global; kubectl patch service web -p '{"spec":{"loadBalancerIP":"<IP>"}}'

Answer

gcloud compute addresses create web-ip --global; then kubectl create deployment web --image=web:v1; kubectl expose deployment web --type=LoadBalancer --port=80; then patch service to set loadBalancerIP.

Question 4

You deployed a Cloud Run service with gcloud run deploy --image gcr.io/my-project/my-image --platform managed --region us-central1 --allow-unauthenticated. Users report intermittent 503 errors. What is the most likely cause?

Accepted Answer

The service is hitting the maximum number of concurrent requests per container instance (default 80) and needs more instances.. Cloud Run services have a default maximum number of concurrent requests per container instance (default 80). If traffic exceeds that, new instances are created, but if there is a sudden spike or the container takes too long to start, requests may be dropped with 503. Increasing max instances or concurrency settings can help.

Answer

The region us-central1 does not support Cloud Run.

Answer

The container image is not compatible with the managed platform.

Answer

The --allow-unauthenticated flag causes IAM permission errors.

Question 5

You are managing a Cloud Functions deployment that processes messages from a Pub/Sub topic. You need to ensure the function can read messages from the topic and acknowledge them. Which IAM role should you assign to the function's service account?

Accepted Answer

roles/pubsub.subscriber. The Pub/Sub Subscriber role (roles/pubsub.subscriber) grants permission to pull messages and acknowledge them. The function's service account needs this role on the topic or subscription.

Answer

roles/pubsub.publisher

Answer

roles/pubsub.viewer

Answer

roles/iam.serviceAccountUser

Question 6

You need to create a Cloud Storage bucket with the default storage class for frequently accessed data in the us-west1 region. Which command creates the bucket?

Accepted Answer

gsutil mb -c standard -l us-west1 gs://my-bucket. The default storage class is Standard. Command gsutil mb -l us-west1 gs://my-bucket creates a bucket with Standard class in us-west1.

Answer

gsutil mb -s standard -l us-west1 gs://my-bucket

Answer

gsutil mb -l us-west1 gs://my-bucket

Answer

gcloud storage buckets create --storage-class=standard --location=us-west1 gs://my-bucket

Question 7

You need to deploy an application that requires a regional MySQL database with automated backups, high availability, and failover. You also need to store static assets that are publicly accessible. Which TWO Google Cloud services should you use?

Accepted Answer

Cloud SQL (MySQL). Cloud SQL with MySQL provides managed MySQL with high availability (regional) and automated backups. Cloud Storage can host static assets publicly.

Answer

Bigtable

Answer

Cloud Filestore

Answer

Cloud Spanner

Question 8

You are using Terraform to manage a GKE cluster. After running 'terraform apply', the cluster is created. Later, you manually delete the cluster via the Cloud Console. What should you do next to align your Terraform state with the actual infrastructure?

Accepted Answer

Run 'terraform state rm google_container_cluster.my_cluster' to remove the cluster from state, then decide whether to recreate.. If a resource is deleted outside Terraform, 'terraform apply' will try to recreate it from the existing state. To update state to reflect the deletion, you must run 'terraform state rm' to remove the resource from state, then optionally apply to recreate if desired.

Answer

Run 'terraform refresh' to automatically update the state.

Answer

Run 'terraform apply' again to recreate the cluster.

Answer

Run 'terraform destroy' to destroy all resources.

Question 9

You need to allow SSH access to a Compute Engine instance. Which method is the recommended way to manage SSH keys for multiple users?

Accepted Answer

Enable OS Login and assign IAM roles to users.. OS Login is the recommended method for managing SSH access to Compute Engine instances, as it links SSH keys to user accounts and integrates with IAM.

Answer

Add SSH keys to the instance metadata.

Answer

Use gcloud compute ssh with the --ssh-key-file flag.

Answer

Create a custom image with preconfigured SSH keys.

Question 10

You are deploying a high-traffic web application on GKE. You need to automatically scale the number of pods based on CPU utilization. Which THREE steps are required to set up Horizontal Pod Autoscaling (HPA)?

Accepted Answer

Install the metrics-server in the cluster.. To use HPA, you need a deployment (or other scalable resource), you need to apply the HPA resource (e.g., via kubectl autoscale), and you must have metrics-server installed to provide metrics. Creating a service is optional.

Answer

Enable Stackdriver Monitoring for the cluster.

Answer

Expose the Deployment as a Service of type LoadBalancer.

Question 11

You need to deploy a Cloud Function that is triggered by HTTP requests. You want to pass configuration parameters to the function at deployment time. Which approach should you use?

Accepted Answer

Use the --set-env-vars flag with gcloud functions deploy.. You can set environment variables via --set-env-vars when deploying. Option B is correct.

Answer

Store parameters in a Cloud Storage bucket and read them at runtime.

Answer

Edit the function code to hardcode the parameters.

Answer

Include the parameters in the HTTP request body.

Question 12

You are using gsutil to upload files to a Cloud Storage bucket. You need to set the storage class of the objects to Nearline. Which TWO methods can you use?

Accepted Answer

Set the bucket's default storage class to Nearline using gsutil defstorageclass set nearline gs://my-bucket.. You can set the storage class when uploading with -s flag, or change it later with rewrite. Option A sets the default class on the bucket, which applies to newly uploaded objects. Option D with -s flag also works.

Answer

Use gsutil cp -s nearline file.txt gs://my-bucket.

Answer

Use gsutil mv -s nearline file.txt gs://my-bucket.

Answer

Upload with --storage-class nearline flag on gsutil cp.

Question 13

You are managing a Cloud SQL for PostgreSQL instance. You need to import a SQL dump file stored in a Cloud Storage bucket. The file is 10GB. Which command should you use?

Accepted Answer

gcloud sql import sql my-instance gs://bucket/file.sql --database=db. gcloud sql import sql is the correct command for importing SQL dumps to Cloud SQL. Option D is correct.

Answer

Use psql command from a Compute Engine instance to connect and import the file.

Answer

gcloud sql instances import my-instance gs://bucket/file.sql --database=db

Answer

gcloud sql import csv my-instance gs://bucket/file.sql --database=db

Question 14

You created a Cloud Run service from source code using gcloud run deploy --source . --region us-central1 --platform managed. Where can you view the build logs and runtime logs?

Accepted Answer

In Cloud Logging (Logs Explorer) under the Cloud Run resource.. Cloud Run logs are sent to Cloud Logging. You can view them in the Logs Explorer.

Answer

In Cloud Build history page.

Answer

In the Cloud Run service details page under 'Logs' tab.

Answer

In Cloud Monitoring dashboards.

Question 15

You need to create a Cloud Storage bucket with a retention policy that prevents object deletion for 30 days. Which TWO steps are necessary?

Accepted Answer

Lock the retention policy using gsutil retention lock gs://my-bucket.. You must set a retention policy on the bucket using gsutil retention set, and then lock the retention policy to make it permanent (otherwise it can be removed). Option B and D are correct.

Answer

Enable Object Versioning on the bucket.

Answer

Set the bucket's default event-based hold.

Answer

Set an IAM policy to prevent deletion.