Google ACE Setting Up a Cloud Solution Environment — 10 Questions

Question 1

A new engineer needs to set up the gcloud CLI on their local machine and authenticate with a user account. Which command should they run after installing the SDK?

Accepted Answer

gcloud init. The 'gcloud init' command initializes the SDK, sets properties, and runs auth login. Alternatively, 'gcloud auth login' only authenticates without setting project/defaults.

Answer

gcloud auth application-default login

Answer

gcloud config set account

Answer

gcloud auth login

Question 2

A startup wants to create a new GCP project for development. They've already created a billing account. Which command can they use to create the project?

Accepted Answer

gcloud projects create PROJECT_ID. The 'gcloud projects create' command creates a new project. The billing association is separate, but the project can be created without billing immediately.

Answer

gcloud config set project PROJECT_ID

Answer

gcloud alpha projects create

Answer

gcloud resource-manager projects create

Question 3

An organization wants to enforce a policy that disables the creation of VMs with external IPs across all projects. Which resource hierarchy level should the policy be attached to for maximum coverage?

Accepted Answer

Organization. Organization policies can be applied at the organization level to affect all projects and folders underneath. This ensures the policy covers all resources.

Answer

Project

Answer

Resource (VM)

Answer

Folder

Question 4

A company wants to track costs for each department by using labels on resources. What is the next step after labeling resources to view costs per label?

Accepted Answer

View billing reports filtered by label. Labels are key-value pairs attached to resources. To view cost breakdown, you can use billing reports or export to BigQuery and query by label.

Answer

Export billing to Cloud Storage and analyze

Answer

Create a billing account budget

Answer

Use the Cost Table in Cloud Console

Question 5

An engineer needs to enable the Compute Engine API for a project using the CLI. Which command should they run?

Accepted Answer

gcloud services enable compute.googleapis.com. The 'gcloud services enable' command enables APIs in a project. The service name for Compute Engine is compute.googleapis.com.

Answer

gcloud compute enable

Answer

gcloud services enable compute

Answer

gcloud api enable compute.googleapis.com

Question 6

A team is using gcloud configurations to manage multiple projects. They want to create a new configuration for a production project. How can they achieve this?

Accepted Answer

Run 'gcloud config configurations create prod' then 'gcloud config set project prod-project'. Manage configurations with 'gcloud config configurations create' and then set properties. Switching is done with 'gcloud config configurations activate'.

Answer

Run 'gcloud init' and select 'Create a new configuration'

Answer

Run 'gcloud config set project prod-project' with a flag to create new config

Answer

Edit the gcloud config file manually

Question 7

A junior engineer accidentally deleted a project. Later, they realize they need to restore it. What must be true for project deletion to be reversible?

Accepted Answer

The billing account must have been disabled before deletion. Deleted projects are retained for 30 days and can be recovered if the billing account is not disabled. However, deletion requires billing to be disabled first as a safety measure.

Answer

The user must have the Owner role at the organization level

Answer

The project must be within the first 7 days of creation

Answer

The project must not have any active resources

Question 8

An organization needs to separate development, staging, and production environments using the GCP resource hierarchy. Which approach is most effective?

Accepted Answer

Create folders for dev, staging, and prod under the organization, then place projects in each folder. Using folders under the organization node allows isolating environments, and organization policies can be applied at the folder level for governance.

Answer

Use labels on projects to denote environment, but keep all in one folder

Answer

Create separate projects for each environment without folders

Answer

Create a single project and use separate VPC networks per environment

Question 9

A Cloud Shell user wants to persist Terraform state files across sessions. What is the best approach?

Accepted Answer

Store them in the home directory ($HOME). Cloud Shell provides a persistent 5GB home directory. Storing state files there ensures they persist across sessions.

Answer

Store them in /tmp

Answer

Store them in a Cloud Storage bucket and mount via gcsfuse

Answer

Store them on the instance's local SSD

Question 10

An administrator wants to set up a budget alert that triggers at 50%, 90%, and 100% of the monthly spending limit. What is the correct way to configure this?

Accepted Answer

Create one budget with three threshold rules: 50%, 90%, 100%. Budget alerts can have multiple threshold rules with different percentages. You can create a single budget with three threshold rules.

Answer

Create a budget with a single threshold of 100% and rely on Cloud Monitoring

Answer

Use Cloud Billing reports to manually track

Answer

Create three separate budgets, each with a single threshold