Google ACE Planning and Configuring a Cloud Solution Practice Test 3 — 15 Questions

Question 1

An organization has a VPC with instances in two subnets: subnet-a (10.0.1.0/24) and subnet-b (10.0.2.0/24). They want to allow HTTP traffic from any instance in subnet-a to any instance in subnet-b. What firewall rule should be created?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

An ingress rule on subnet-b allowing traffic from 10.0.1.0/24 on TCP port 80. Firewall rules are defined with direction and source/target. To allow inbound traffic to subnet-b from subnet-a, an ingress rule with source range 10.0.1.0/24 is needed.

Answer

An egress rule on subnet-b allowing traffic to 10.0.1.0/24 on TCP port 80

Answer

An ingress rule on subnet-a allowing traffic to 10.0.2.0/24 on TCP port 80

Answer

An egress rule on subnet-a allowing traffic to 10.0.2.0/24 on TCP port 80

Question 2

A company runs a batch job every night that processes data from a Cloud Storage bucket and writes results to BigQuery. The job runs on a Compute Engine VM. To minimize costs, what is the best practice for the VM?

Accepted Answer

Use a preemptible VM. Preemptible VMs are up to 80% cheaper and can be terminated at any time, which is acceptable for batch jobs that can be checkpointed or restarted from the beginning.

Answer

Use a VM with GPUs for faster processing

Answer

Use a VM with local SSD for temporary storage

Answer

Use a standard VM and commit to a 1-year commitment

Question 3

A developer is using Cloud Functions (Gen 2) which is based on Cloud Run. They need to handle events from Cloud Storage when a new object is uploaded. Which event type should they use?

Accepted Answer

google.cloud.storage.object.v1.finalized. In Cloud Functions Gen 2, the event type for Cloud Storage object finalization is 'google.cloud.storage.object.v1.finalized'.

Answer

google.cloud.storage.object.v1.metadataUpdated

Answer

google.cloud.storage.object.v1.deleted

Answer

google.cloud.storage.object.v1.archived

Question 4

A company needs to provide outbound internet access to private Compute Engine instances that do not have external IP addresses. The instances must be able to download updates from the internet. Which service should be configured?

Accepted Answer

Cloud NAT. Cloud NAT enables private instances to access the internet for outbound connections while blocking inbound connections from the internet.

Answer

VPC peering

Answer

Cloud VPN

Answer

Private Google Access

Question 5

A DevOps engineer is using the Google Cloud Pricing Calculator to estimate the monthly cost of a Compute Engine VM running 24/7 for one month. The engineer selects a machine type and adds sustained use discounts. What is the correct way to apply sustained use discounts in the calculator?

Accepted Answer

The calculator automatically applies sustained use discounts based on monthly usage. Sustained use discounts are automatically applied by Google Cloud based on the number of hours a VM runs per month. The calculator includes them automatically when you specify the monthly usage.

Answer

Manually enter a discount percentage

Answer

Select 'Sustained Use Discount' checkbox

Answer

Sustained use discounts are not applicable to Compute Engine

Question 6

A company runs a global web application with a Cloud SQL (MySQL) database in the us-east1 region. To improve read performance for users in Europe, they want to offload read traffic to a replica in europe-west1. The replica must be kept in sync with the primary within seconds. Which Cloud SQL configuration should be used?

Accepted Answer

Create a cross-region read replica in europe-west1. Cross-region replication using a Cloud SQL read replica is the correct approach. External replicas are for on-premises or other clouds; failover replicas are for high availability within the same region; multi-region is not a Cloud SQL option (it's for Cloud Storage or Spanner).

Answer

Enable automatic failover to a replica in europe-west1

Answer

Configure Cloud SQL for multi-region deployment

Answer

Create an external replica in europe-west1

Question 7

A company wants to migrate an on-premises PostgreSQL database to Google Cloud. They need a managed database service with high availability and automatic failover. The application uses many stored procedures and extensions specific to PostgreSQL. Which service should they choose?

Accepted Answer

Cloud SQL for PostgreSQL. Cloud SQL for PostgreSQL supports many PostgreSQL extensions and stored procedures. Cloud Spanner is not PostgreSQL-compatible; Firestore is NoSQL; Bare Metal Solution is for on-premises-like deployments, not managed.

Answer

Cloud Spanner

Answer

Bare Metal Solution

Answer

Firestore

Question 8

A team is using BigQuery for analytics. They have a constant query workload and want to reduce costs by switching from on-demand pricing to a flat-rate reservation. They have purchased a BigQuery flat-rate reservation. What additional step is required to use the reservation?

Accepted Answer

Assign the reservation to the desired projects using an assignment. The reservation must be assigned to a project, folder, or organization via a reservation assignment. Without assignment, the reservation is not used, and queries continue to be billed on-demand.

Answer

Enable flat-rate billing in the BigQuery settings

Answer

No additional steps; flat-rate is automatically applied to all queries

Answer

Create a new dataset and move all tables into it

Question 9

A company wants to run a stateful application that requires persistent storage on individual VMs. The VMs are not part of a managed instance group. Which Google Cloud storage option is best for this use case?

Accepted Answer

Persistent Disk. Persistent disks are durable block storage that can be attached to a single VM and persist independently of the VM lifecycle. Cloud Storage is object storage; Filestore is file storage; local SSDs are ephemeral and lose data on VM stop/termination.

Answer

Local SSD

Answer

Cloud Storage

Answer

Filestore

Question 10

A company needs to connect their on-premises data center to Google Cloud via a dedicated, high-bandwidth connection with low latency. They anticipate consistent high traffic. Which connectivity option should they use?

Accepted Answer

Dedicated Interconnect. Dedicated Interconnect provides direct physical connections between on-premises and Google Cloud, offering high bandwidth and low latency. Cloud VPN is over the internet; Carrier Peering is for enterprise customers; VPC peering is for connecting VPCs within Google Cloud.

Answer

Carrier Peering

Answer

Cloud VPN

Answer

VPC peering

Question 11

A company wants to run a containerized application on Google Cloud with minimal operational overhead. The application is stateless and can tolerate cold starts. Which three compute services should they consider? (Choose three.)

Accepted Answer

GKE Autopilot. Cloud Run, Cloud Functions, and GKE Autopilot are all serverless or fully managed container platforms with minimal operational overhead. Compute Engine and GKE Standard require node management.

Answer

Compute Engine

Answer

GKE Standard

Question 12

An engineer is tasked with creating a new VPC network for a production environment. The company requires the VPC to support multiple regions and allow custom IP address ranges for each subnet. Which VPC network mode should the engineer use?

Accepted Answer

Custom mode VPC. Custom mode VPC allows full control over subnets, including custom IP ranges per region. Auto mode creates subnets in each region with predefined IP ranges, which may not meet production requirements. Shared VPC is for sharing across projects, not for a single project's network.

Answer

Shared VPC

Answer

Auto mode VPC

Answer

Legacy mode VPC

Question 13

An organization needs to run a batch analytics job daily that processes 500 GB of data stored in Cloud Storage. The job runs for 2 hours each day and can tolerate occasional failures. The team wants to minimize compute costs. Which compute option is most cost-effective?

Accepted Answer

Compute Engine with preemptible VMs. Preemptible VMs cost about 60-80% less than regular VMs and are suitable for fault-tolerant, short-lived batch jobs. Committed use discounts require a 1-year commitment and are not suitable if the job runs only 2 hours per day. Sustained use discounts apply automatically but preemptible VMs are cheaper. Standard VMs are more expensive.

Answer

Compute Engine with sole-tenant nodes

Answer

Compute Engine with standard VMs and sustained use discount

Answer

Compute Engine with committed use discount for 1 year

Question 14

A developer needs to create a Cloud Storage bucket that stores data for only 30 days and then automatically deletes it. Which feature should be used to achieve this?

Accepted Answer

Object lifecycle management. Object lifecycle management rules can automatically delete objects after a specified age. Bucket lock is for retention compliance, not deletion. Versioning keeps multiple versions. Requester pays shifts costs.

Answer

Object versioning

Answer

Requester pays

Answer

Bucket lock

Question 15

A company has a private VPC with instances that have only internal IP addresses. These instances need to download updates from the internet. Which Google Cloud service should they use to provide outbound internet connectivity?

Accepted Answer

Cloud NAT. Cloud NAT allows private instances to access the internet outbound while preventing inbound connections. Cloud VPN is for hybrid connectivity. Public IP addresses would expose the instances. IAP is for SSH/RDP access.

Answer

Cloud VPN

Answer

Assign public IP addresses to the instances

Answer

Identity-Aware Proxy (IAP)