Google ACE Ensuring Successful Operation of a Cloud Solution Practice Test 5 — 15 Questions

Question 1

An engineer needs to create an alerting policy in Cloud Monitoring that sends a notification when the 99th percentile latency of a service exceeds 500 ms for 5 minutes. Which metric type should they use?

Accepted Answer

Metric threshold. A metric threshold alert uses a numeric metric and triggers when the value crosses a threshold. Log-based alerts are for when a specific log entry appears. Uptime checks monitor availability, not latency percentiles.

Answer

Log-based metric

Answer

Uptime check

Answer

Cloud Audit Logs

Question 2

A DevOps team wants to be notified in Slack when a specific error log appears in Cloud Logging. They set up a log-based alert with a notification channel to a Slack webhook. However, notifications are not arriving. What is the most likely cause?

Accepted Answer

The notification channel is not configured to use a Pub/Sub topic. Slack webhooks require a Pub/Sub topic as an intermediary for Cloud Monitoring notifications. Direct Slack integration via webhook is not supported; you must use a Pub/Sub topic with a push subscription to Slack.

Answer

The log-based alert is not using a valid metric threshold

Answer

The log query is case-sensitive and mismatched

Answer

The Slack webhook URL is outdated

Question 3

An engineer needs to monitor the external HTTP availability of a web application hosted on Compute Engine. Which Cloud Monitoring feature should they use?

Accepted Answer

Uptime check. Uptime checks are designed to verify that a resource is accessible and measure response latency from various locations. They can check HTTP/HTTPS/TCP endpoints.

Answer

Dashboard

Answer

Metric Explorer

Answer

Log-based alert

Question 4

A company wants to export all Cloud Logging logs to BigQuery for long-term analysis. They create a log sink with a BigQuery dataset as the destination. After a few days, they notice that some logs are missing in BigQuery. What is the most likely reason?

Accepted Answer

The sink's inclusion filter is too restrictive. Log sinks have a buffer period of up to a few minutes, but they guarantee delivery. However, if the sink's filter excludes certain logs (e.g., by resource type or severity), those logs are not exported. Missing logs usually indicate a filter misconfiguration.

Answer

Logs older than 30 days cannot be exported

Answer

The sink's destination is a table, not a dataset

Answer

BigQuery dataset is in a different region

Question 5

An engineer needs to update a Kubernetes Deployment's container image to version v2. They run 'kubectl set image deployment/my-app my-container=gcr.io/my-project/my-image:v2'. After a few minutes, they check the rollout status and see a failure. They want to revert to the previous image. Which command should they use?

Accepted Answer

kubectl rollout undo deployment/my-app. 'kubectl rollout undo' reverts the Deployment to the previous revision. 'kubectl rollout status' shows status but does not revert. 'kubectl set image' with v1 would manually set the old image, but 'undo' is the standard rollback command.

Answer

kubectl rollout status deployment/my-app

Answer

kubectl delete deployment/my-app --cascade=false

Answer

kubectl set image deployment/my-app my-container=gcr.io/my-project/my-image:v1

Question 6

A Cloud Run service needs to be updated to increase CPU and memory limits. Which command should the engineer use?

Accepted Answer

gcloud run services update. 'gcloud run services update' allows updating service configuration including CPU and memory. 'gcloud run revisions update' does not exist; revisions are immutable. 'gcloud run deploy' is used for initial deployment or updating to a new revision, but 'update' is the correct command for modifying an existing service's configuration.

Answer

gcloud functions deploy

Answer

gcloud run deploy

Answer

gcloud run revisions update

Question 7

A company wants to split traffic between two revisions of a Cloud Run service: 90% to revision 'green' and 10% to revision 'blue'. Which command should they use?

Accepted Answer

gcloud run services update-traffic. 'gcloud run services update-traffic' is the correct command to manage traffic splitting between revisions. 'gcloud run revisions list' only lists revisions. 'gcloud run services update' does not handle traffic directly. 'gcloud run deploy' with --no-traffic is for initial deployment.

Answer

gcloud run revisions list

Answer

gcloud run services update

Answer

gcloud run deploy

Question 8

A GKE cluster is running a critical workload. An engineer needs to perform maintenance on a node without disrupting the pods. They plan to use 'kubectl drain'. Which additional flags are typically required to safely drain a node?

Accepted Answer

--ignore-daemonsets --delete-emptydir-data. The '--ignore-daemonsets' flag tells kubectl to ignore DaemonSet-managed pods (they will be rescheduled). The '--delete-emptydir-data' flag allows draining nodes with pods using emptyDir volumes (data is ephemeral). Both are commonly required for safe draining.

Answer

--dry-run --now

Answer

--force --grace-period=0

Answer

--all-namespaces --selector

Question 9

An engineer needs to enable autoscaling on an existing node pool in a GKE cluster. Which command should they use?

Accepted Answer

gcloud container node-pools update --enable-autoscaling. 'gcloud container node-pools update' with '--enable-autoscaling' enables autoscaling. 'gcloud container clusters update' updates cluster-level settings, not node pools. 'kubectl autoscale' is for workloads, not node pools. 'gcloud compute instance-groups' is not used for GKE node pools.

Answer

gcloud compute instance-groups set-autoscaling

Answer

kubectl autoscale node-pool

Answer

gcloud container clusters update

Question 10

A developer needs to query BigQuery using the bq command-line tool with standard SQL. Which flag should they include?

Accepted Answer

--use_legacy_sql=false. The '--use_legacy_sql=false' flag enables standard SQL. By default, bq uses legacy SQL. '--format' controls output format, not SQL dialect. '--project_id' specifies project. '--sync' is not a valid bq flag.

Answer

--format

Answer

--project_id

Answer

--sync

Question 11

An engineer needs to attach an existing persistent disk to a Compute Engine instance. They have created the disk using 'gcloud compute disks create'. Which command should they use to attach it?

Accepted Answer

gcloud compute instances attach-disk. 'gcloud compute instances attach-disk' attaches a disk to an instance. 'gcloud compute disks attach' does not exist. 'gcloud compute instances add-disk' is not a valid command. 'gcloud compute disks resize' resizes the disk.

Answer

gcloud compute disks resize

Answer

gcloud compute instances add-disk

Answer

gcloud compute disks attach

Question 12

An application is experiencing intermittent high latency. Using Cloud Trace, an engineer identifies that the bottleneck is a Pub/Sub subscription with a large backlog. Which action would MOST directly help reduce the backlog?

Accepted Answer

Increase the number of subscribers. Increasing the number of subscribers (e.g., scaling out the subscriber application) will increase the processing rate and reduce backlog. Increasing the retention duration keeps messages longer, not reducing backlog. The ack deadline and message size are not the primary causes of backlog.

Answer

Increase the ack deadline

Answer

Increase the maximum message size

Answer

Increase the message retention duration

Question 13

An engineer needs to create a Cloud Monitoring dashboard that displays CPU utilization for all Compute Engine instances in a project. Which TWO steps are required? (Choose 2)

Accepted Answer

Add the chart to a dashboard. First, use Metric Explorer to create a chart with the CPU utilization metric. Then, add that chart to a dashboard. Dashboards can have charts from Metric Explorer. You do not need to create an alert or export logs.

Answer

Create an uptime check

Answer

Create a log-based metric

Answer

Set up a notification channel

Question 14

A company wants to automate the response to specific log entries by triggering a Cloud Function. Which THREE components are required? (Choose 3)

Accepted Answer

Cloud Function (Pub/Sub trigger). Log entries must be routed to a Pub/Sub topic via a log sink. The Cloud Function subscribes to that topic (triggered by Pub/Sub). The log sink is the exporter, Pub/Sub is the intermediary, and Cloud Function is the action. A notification channel is for alerts, not triggers. BigQuery is not needed.

Answer

BigQuery dataset

Answer

Cloud Monitoring notification channel

Question 15

An engineer is troubleshooting a Compute Engine instance that is unreachable via SSH. They suspect a firewall rule is blocking traffic. Which TWO actions should they take to diagnose the issue? (Choose 2)

Accepted Answer

View Cloud Logging for firewall rule logs. In Cloud Logging, you can view firewall logs (if VPC flow logs are enabled, but firewall rules logging can be enabled per rule). Checking VPC firewall rules in the Cloud Console allows you to verify the rules. Cloud Trace is for latency, Cloud Monitoring for metrics, and gcloud compute ssh is for connecting, not diagnosing firewall rules.

Answer

Create a Cloud Monitoring alert for packet loss

Answer

Run gcloud compute ssh --dry-run

Answer

Use Cloud Trace to analyze network latency