Google ACE Setting Up a Cloud Solution Environment Practice Test 3 — 15 Questions

Question 1

You create a new Google Cloud project using the Cloud Console. After creating the project, you need to enable the Compute Engine API. What is the correct command to do this using the Cloud Shell?

Accepted Answer

gcloud services enable compute.googleapis.com. The gcloud services enable command is used to enable APIs for a project. The correct syntax is 'gcloud services enable compute.googleapis.com'.

Answer

gcloud projects enable compute.googleapis.com

Answer

gcloud compute enable compute.googleapis.com

Answer

gcloud api enable compute

Question 2

An organization wants to separate its development and production environments using Google Cloud resource hierarchy. What is the recommended approach?

Accepted Answer

Create two folders under the organization node, one for dev and one for prod.. Using folders under the organization node to separate environments is the recommended practice. Folders provide isolation and allow for separate IAM policies and organization policies.

Answer

Create a single project and use separate VPC networks for dev and prod.

Answer

Create two separate organizations, one for dev and one for prod.

Answer

Create two projects under the same folder and use labels to differentiate dev and prod.

Question 3

You are setting up billing for a new GCP project. You want to receive an alert when the projected cost for the month exceeds 80% of your budget. You also want to be notified if the actual cost reaches 100%. Which budget alert thresholds should you set?

Accepted Answer

Set a single alert at 80% and another at 100%. Budget alerts can be set at specific percentages, but only whole numbers are allowed. Typically, you set alerts at 80% and 100%. The 80% alert is for projected cost, and 100% is for actual cost.

Answer

Set a single alert at 100% and use the 'forecast' option to get projected cost alerts

Answer

Set alerts at 50%, 80%, and 100%

Answer

Set a single alert at 80% for projected cost; GCP automatically alerts at 100%

Question 4

You want to use gcloud CLI to set the default project to 'my-project' and the default compute zone to 'us-central1-a'. Which two gcloud config commands should you run?

Accepted Answer

gcloud config set project my-project and gcloud config set compute/zone us-central1-a. The commands are 'gcloud config set project my-project' and 'gcloud config set compute/zone us-central1-a'.

Answer

gcloud config configurations set project my-project and gcloud config configurations set zone us-central1-a

Answer

gcloud config set project my-project and gcloud config set zone us-central1-a

Answer

gcloud projects set my-project and gcloud compute zones set us-central1-a

Question 5

A company has multiple Google Cloud projects and wants to track costs by department. They have already applied labels to resources with key 'department'. What is the next step to view costs grouped by department?

Accepted Answer

Go to Billing > Reports and filter by 'department' label. Costs can be viewed in the Cloud Console under Billing > Reports. You can filter by labels to see costs grouped by label values.

Answer

Run gcloud billing accounts list and parse the output

Answer

Set up a budget alert with department labels

Answer

Enable billing export to BigQuery and run a query

Question 6

You need to install the Google Cloud SDK on a Linux machine. Which command should you use to add the Cloud SDK distribution URI as a package source?

Accepted Answer

echo 'deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main' | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list. The Cloud SDK installation guide for Linux uses echo to add the URI to /etc/apt/sources.list.d/google-cloud-sdk.list.

Answer

curl https://sdk.cloud.google.com | bash

Answer

gcloud init

Answer

sudo apt-get install google-cloud-sdk

Question 7

You are managing a project and need to create a custom IAM role that allows only the permissions compute.instances.list and compute.instances.get. What is the correct way to create this role using gcloud?

Accepted Answer

gcloud iam roles create viewer --project=my-project --permissions="compute.instances.list,compute.instances.get". The command 'gcloud iam roles create' is used to create custom roles. The permissions are specified with the --permissions flag.

Answer

gcloud iam service-accounts create viewer --permissions="compute.instances.list,compute.instances.get"

Answer

gcloud iam roles create viewer --organization=123456 --permissions="compute.instances.*"

Answer

gcloud iam custom-roles create viewer --project=my-project --permissions='compute.instances.list,compute.instances.get'

Question 8

A team is using Cloud Shell to manage resources. They notice that their home directory is persistent across sessions, but they want to ensure that configuration files and scripts are also available after they stop and restart Cloud Shell. What should they do?

Accepted Answer

Store files in the home directory (~). Cloud Shell's home directory persists 5 GB of data. As long as files are stored in the home directory ($HOME), they will persist across sessions.

Answer

Use gcloud config configurations and save scripts in a Cloud Storage bucket

Answer

Create a startup script that runs every time Cloud Shell starts

Answer

Store files in /tmp

Question 9

You want to set up a budget alert for a GCP project. You need to receive a notification when the forecasted cost exceeds $1000 and when the actual cost exceeds $1000. Which budget amount should you set?

Accepted Answer

$1000. You set a budget amount of $1000. Then you can set alert thresholds at 50% (for forecasted) and 100% (for actual). However, the question asks for the budget amount, which should be $1000.

Answer

$2000

Answer

$100

Answer

$500

Question 10

A developer wants to use gcloud CLI with application default credentials (ADC) to authenticate to Google APIs from their local machine. Which command should they run first?

Accepted Answer

gcloud auth application-default login. gcloud auth application-default login sets up ADC for the user. This stores credentials that can be used by Google client libraries.

Answer

gcloud auth login

Answer

gcloud init

Answer

gcloud config set auth/application_default true

Question 11

You need to delete a GCP project, but the deletion fails with an error. What is the most likely cause?

Accepted Answer

The project's billing account is still linked. GCP requires that billing be disabled before a project can be deleted. If billing is still active, deletion will fail.

Answer

The project has IAM policies attached

Answer

The project still has active resources such as Compute Engine instances

Answer

The project is in a folder

Question 12

You are setting up a new organization in Google Cloud. You want to restrict the regions where resources can be created to comply with data residency requirements. What should you do?

Accepted Answer

Set an organization policy with a constraint on allowed resource locations. Organization policies allow you to set constraints at the organization, folder, or project level. The 'gcp.resource-locations' constraint can restrict resource locations.

Answer

Create a service account with limited permissions

Answer

Set a budget alert that notifies when resources are created outside allowed regions

Answer

Use IAM roles to restrict which users can create resources in specific regions

Question 13

A company wants to manage multiple Google Cloud projects and enforce consistent security policies across all of them. Which TWO resources should they use? (Choose two.)

Accepted Answer

Organization policies. Organization policies are used to enforce constraints across projects. Folders allow grouping projects and applying common IAM policies.

Answer

Cloud Audit Logs

Answer

Shared VPC

Answer

Labels

Question 14

You need to view the current gcloud configuration settings, including the active account, project, and compute region. Which TWO commands can you use? (Choose two.)

Accepted Answer

gcloud config list. gcloud config list displays all configuration properties. gcloud info provides detailed information, including configuration.

Answer

gcloud config describe

Answer

gcloud projects list

Answer

gcloud auth list

Question 15

You are designing a resource hierarchy for a company with three departments: Engineering, Sales, and HR. Each department should have its own projects, and policies should be applied at the department level. Which THREE steps should you take? (Choose three.)

Accepted Answer

Create a folder for each department. Create an organization node (if not already present). Under it, create a folder for each department. Then create projects within each folder. Apply IAM policies at the folder level.

Answer

Use labels to separate departments

Answer

Apply IAM policies at the project level only