Google ACE Setting Up a Cloud Solution Environment Practice Test 3 — 15 Questions

Question 1

An administrator wants to set up a budget alert that triggers at 50%, 90%, and 100% of the monthly spending limit. What is the correct way to configure this?

Accepted Answer

Create one budget with three threshold rules: 50%, 90%, 100%. Budget alerts can have multiple threshold rules with different percentages. You can create a single budget with three threshold rules.

Answer

Create a budget with a single threshold of 100% and rely on Cloud Monitoring

Answer

Use Cloud Billing reports to manually track

Answer

Create three separate budgets, each with a single threshold

Question 2

An engineer is setting up Cloud Identity for a new domain. What is a prerequisite for creating a Cloud Identity account?

Accepted Answer

Domain verification. Cloud Identity requires domain verification to prove ownership. This is done via DNS TXT record or other methods.

Answer

A G Suite account

Answer

A billing account

Answer

An existing Google Cloud project

Question 3

A company wants to grant a contractor read-only access to all Compute Engine instances in a specific project, but no other resources. Which IAM role should be assigned?

Accepted Answer

roles/compute.viewer. roles/compute.viewer is the correct choice because it grants read-only access to all Compute Engine resources, including instances, disks, and snapshots, within the project. It does not include permissions for other services like Cloud Storage or IAM, aligning with the principle of least privilege. This role is predefined by Google Cloud and is specifically designed for viewing Compute Engine resources without modification rights.

Answer

roles/compute.instanceAdmin.v1

Answer

roles/viewer

Answer

roles/iam.securityReviewer

Question 4

A company wants to set up a new GCP project and ensure that only approved APIs can be used. Which two steps should they take? (Choose TWO)

Accepted Answer

Use an organization policy to restrict the set of allowed APIs. To restrict API usage, you can disable unapproved APIs and use organization policies to enforce restrictions.

Answer

Create a custom role with permissions to enable APIs

Answer

Set a budget to limit API usage costs

Answer

Assign the Owner role to the project

Question 5

An engineer needs to choose a location for a new GCP project's resources to maximize availability and minimize latency for users in Europe and Asia. Which three actions should they take? (Choose THREE)

Accepted Answer

Use a global load balancer to distribute traffic. Option A is correct because a global external Application Load Balancer (or global external proxy Network Load Balancer) uses Google's global anycast edge network to route users to the closest healthy backend, reducing latency and improving availability across Europe and Asia. Option C is correct because deploying resources in multiple regions such as europe-west1 and asia-east1 places compute and data physically near European and Asian users, and multi-region deployment protects against regional failures. Option E is correct because Cloud CDN caches content at Google edge points of presence (over 100+ locations), serving cached responses from the nearest edge to further cut latency for static and cacheable content. Option B is not appropriate because setting the default region to us-central1 would place resources in North America, far from the target European and Asian users, increasing latency. Option D is not appropriate because a single zone in europe-west1 creates a single point of failure and does not serve Asian users with low latency, contradicting the availability and latency goals.

Answer

Set the project default region to us-central1

Answer

Use a single zone in europe-west1 for simplicity

Question 6

A new engineer wants to set up their local environment to interact with Google Cloud. Which command initializes the gcloud CLI and configures the project, region, and zone?

Accepted Answer

gcloud init. The `gcloud init` command is the interactive setup wizard that authenticates the user, lets them select or create a Cloud project, and sets default compute region and zone in one flow. It writes these values into the active gcloud configuration so subsequent commands use them automatically. This is the canonical first-run command for a new engineer's workstation.

Answer

gcloud auth login

Answer

gcloud auth application-default login

Answer

gcloud config set project my-project

Question 7

Your organization has multiple Google Cloud projects. You want to separate development and production environments. Which resource hierarchy structure is recommended?

Accepted Answer

Use folders under the organization node to separate dev and prod projects.. Using folders under the organization node to separate dev and prod projects is the recommended approach because it aligns with Google Cloud's resource hierarchy, allowing centralized policy management and inheritance. Folders enable logical separation of environments while maintaining a single organization, which simplifies billing and IAM. This structure supports least privilege and environment isolation.

Answer

Create two separate organizations.

Answer

Use labels on projects to differentiate environments.

Answer

Use a single project with separate VPC networks.

Question 8

You want to enable the Kubernetes Engine API for your project using the command line. Which gcloud command should you use?

Accepted Answer

gcloud services enable container.googleapis.com. The `gcloud services enable container.googleapis.com` command enables the Kubernetes Engine API for the active project. Service enablement is done through the Service Usage API, and `gcloud services enable` is the correct CLI wrapper. Creating a cluster or setting a project does not enable the API.

Answer

gcloud container clusters create my-cluster

Answer

gcloud config set project my-project

Answer

gcloud auth login

Question 9

Your organization wants to enforce that all Compute Engine instances are created only in us-central1 and europe-west1. You need to implement this constraint across all projects in the organization. What should you do?

Accepted Answer

Apply an organization policy with constraint gcp.resourceLocations to allow only us-central1 and europe-west1.. The correct approach is to apply an organization policy with the constraint gcp.resourceLocations (also known as Location Restriction) at the organization level, specifying allowed locations us-central1 and europe-west1. This constraint is enforced by the Organization Policy Service and prevents the creation of Compute Engine instances (and other resources) outside the allowed regions, regardless of IAM permissions. It provides centralized, preventive control across all projects in the organization.

Answer

Use VPC Service Controls to restrict access to Compute Engine API from other regions.

Answer

Use labels to tag instances and run a script to delete non-compliant ones.

Answer

Create an IAM policy denying the compute.instances.create permission in all other regions.

Question 10

Your company wants to track costs per department. Each department has its own project. You need to set up a budget alert in the billing account for each project. What is the most efficient approach?

Accepted Answer

Create one budget per project by selecting the project in the 'Scoped to' field.. In GCP, a Cloud Billing budget can be scoped to a specific project using the 'Scoped to' field, allowing you to create one budget per project directly from the billing account without needing to enable billing separately or export data. This is the most efficient native approach because budgets support project-level scoping out of the box. It avoids the overhead of BigQuery export and custom monitoring setup.

Answer

Use Billing Export to BigQuery and create custom alerts using Cloud Monitoring.

Answer

Create a budget for each project by manually enabling billing for each project.

Answer

Create a single budget for the entire billing account and rely on labels.

Question 11

You are using Cloud Shell and need to access a file you created two weeks ago. What is the persistence behavior of Cloud Shell home directories?

Accepted Answer

Cloud Shell home directories persist across sessions, with 5 GB of storage.. Cloud Shell home directories are persistent across sessions and provide 5 GB of storage per user. This means files created in the home directory remain available even after the session ends, as long as the user's Cloud Shell environment is not deleted. The 5 GB limit is a key characteristic of Cloud Shell's persistent storage.

Answer

Cloud Shell home directories are stored in Cloud Storage and are always available.

Answer

Cloud Shell home directories persist for 30 days after last use.

Answer

Cloud Shell home directories are temporary and are deleted after each session.

Question 12

You need to list all projects in your organization using the gcloud CLI. Which command is correct?

Accepted Answer

gcloud projects list. The correct command to list all projects in an organization is gcloud projects list. This command queries the Cloud Resource Manager API and returns projects the user has access to, optionally filtered by organization or folder. It is the standard way to enumerate projects via the gcloud CLI.

Answer

gcloud compute projects list

Answer

gcloud config list

Answer

gcloud resource-manager projects list

Question 13

You want to switch between multiple GCP projects frequently using the gcloud CLI. What is the recommended approach?

Accepted Answer

Create multiple configuration profiles and activate them as needed.. gcloud supports named configuration profiles, each holding its own project, account, region, and zone settings. Creating multiple configurations and activating the relevant one with 'gcloud config configurations activate <name>' lets you switch contexts instantly without re-authenticating or re-initializing. This is the officially recommended approach for developers who work across many projects.

Answer

Open separate terminal windows for each project.

Answer

Run gcloud init every time you switch projects.

Answer

Use gcloud config set project each time you switch.

Question 14

Your company has a production project and a development project. You want to ensure that no one can delete the production project accidentally. Which TWO actions should you take? (Choose 2)

Accepted Answer

Apply an organization policy constraint that blocks project deletion.. To prevent accidental deletion, you can set a deletion protection policy at the project level. Additionally, using an organization policy constraint 'constraints/resourcemanager.projectDelete' at the folder or organization level can block deletion. Labels don't prevent deletion. Removing the Owner role from all users would break management. Budget alerts don't prevent deletion.

Answer

Set a budget alert at 100% of projected spend.

Answer

Remove the Owner role from all users and grant only Editor.

Answer

Add a label to the project indicating it is production.

Question 15

You are setting up a new GCP project for a microservices application. You need to select which APIs to enable. Which THREE APIs are likely required? (Choose 3)

Accepted Answer

cloudbuild.googleapis.com. For a microservices application on Kubernetes, you need the Kubernetes Engine API (container.googleapis.com), and often the Cloud Build API (cloudbuild.googleapis.com) for CI/CD and Compute Engine API (compute.googleapis.com) as a dependency for GKE. Cloud Storage API is not necessarily required unless using Cloud Storage. BigQuery is for analytics.

Answer

storage.googleapis.com

Answer

bigquery.googleapis.com