Google ACE Setting Up a Cloud Solution Environment Practice Test 4 — 15 Questions

Question 1

A company has multiple Google Cloud projects and wants to track costs by department. They have already applied labels to resources with key 'department'. What is the next step to view costs grouped by department?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Go to Billing > Reports and filter by 'department' label. Costs can be viewed in the Cloud Console under Billing > Reports. You can filter by labels to see costs grouped by label values.

Answer

Run gcloud billing accounts list and parse the output

Answer

Set up a budget alert with department labels

Answer

Enable billing export to BigQuery and run a query

Question 2

You need to install the Google Cloud SDK on a Linux machine. Which command should you use to add the Cloud SDK distribution URI as a package source?

Accepted Answer

echo 'deb [signed-by=/usr/share/keyrings/cloud.google.gpg] https://packages.cloud.google.com/apt cloud-sdk main' | sudo tee -a /etc/apt/sources.list.d/google-cloud-sdk.list. The Cloud SDK installation guide for Linux uses echo to add the URI to /etc/apt/sources.list.d/google-cloud-sdk.list.

Answer

curl https://sdk.cloud.google.com | bash

Answer

gcloud init

Answer

sudo apt-get install google-cloud-sdk

Question 3

You are managing a project and need to create a custom IAM role that allows only the permissions compute.instances.list and compute.instances.get. What is the correct way to create this role using gcloud?

Accepted Answer

gcloud iam roles create viewer --project=my-project --permissions="compute.instances.list,compute.instances.get". The command 'gcloud iam roles create' is used to create custom roles. The permissions are specified with the --permissions flag.

Answer

gcloud iam service-accounts create viewer --permissions="compute.instances.list,compute.instances.get"

Answer

gcloud iam roles create viewer --organization=123456 --permissions="compute.instances.*"

Answer

gcloud iam custom-roles create viewer --project=my-project --permissions='compute.instances.list,compute.instances.get'

Question 4

A team is using Cloud Shell to manage resources. They notice that their home directory is persistent across sessions, but they want to ensure that configuration files and scripts are also available after they stop and restart Cloud Shell. What should they do?

Accepted Answer

Store files in the home directory (~). Cloud Shell's home directory persists 5 GB of data. As long as files are stored in the home directory ($HOME), they will persist across sessions.

Answer

Use gcloud config configurations and save scripts in a Cloud Storage bucket

Answer

Create a startup script that runs every time Cloud Shell starts

Answer

Store files in /tmp

Question 5

A developer wants to use gcloud CLI with application default credentials (ADC) to authenticate to Google APIs from their local machine. Which command should they run first?

Accepted Answer

gcloud auth application-default login. gcloud auth application-default login sets up ADC for the user. This stores credentials that can be used by Google client libraries.

Answer

gcloud auth login

Answer

gcloud init

Answer

gcloud config set auth/application_default true

Question 6

You need to delete a GCP project, but the deletion fails with an error. What is the most likely cause?

Accepted Answer

The project's billing account is still linked. GCP requires that billing be disabled before a project can be deleted. If billing is still active, deletion will fail.

Answer

The project has IAM policies attached

Answer

The project still has active resources such as Compute Engine instances

Answer

The project is in a folder

Question 7

You are setting up a new organization in Google Cloud. You want to restrict the regions where resources can be created to comply with data residency requirements. What should you do?

Accepted Answer

Set an organization policy with a constraint on allowed resource locations. Organization policies allow you to set constraints at the organization, folder, or project level. The 'gcp.resource-locations' constraint can restrict resource locations.

Answer

Create a service account with limited permissions

Answer

Set a budget alert that notifies when resources are created outside allowed regions

Answer

Use IAM roles to restrict which users can create resources in specific regions

Question 8

A company wants to manage multiple Google Cloud projects and enforce consistent security policies across all of them. Which TWO resources should they use? (Choose two.)

Accepted Answer

Organization policies. Organization policies are used to enforce constraints across projects. Folders allow grouping projects and applying common IAM policies.

Answer

Cloud Audit Logs

Answer

Shared VPC

Answer

Labels

Question 9

You need to view the current gcloud configuration settings, including the active account, project, and compute region. Which TWO commands can you use? (Choose two.)

Accepted Answer

gcloud config list. gcloud config list displays all configuration properties. gcloud info provides detailed information, including configuration.

Answer

gcloud config describe

Answer

gcloud projects list

Answer

gcloud auth list

Question 10

You are designing a resource hierarchy for a company with three departments: Engineering, Sales, and HR. Each department should have its own projects, and policies should be applied at the department level. Which THREE steps should you take? (Choose three.)

Accepted Answer

Create a folder for each department. Create an organization node (if not already present). Under it, create a folder for each department. Then create projects within each folder. Apply IAM policies at the folder level.

Answer

Use labels to separate departments

Answer

Apply IAM policies at the project level only

Question 11

An engineer needs to create a new GCP project using the Cloud SDK. They have already installed and initialized gcloud with a user account that has Billing Account Administrator and Project Creator roles. Which command creates the project 'my-new-project'?

Accepted Answer

gcloud projects create my-new-project. The correct command to create a project is 'gcloud projects create'. It creates a new project with the specified ID.

Answer

gcloud config set project my-new-project

Answer

gcloud alpha projects create my-new-project

Answer

gcloud init my-new-project

Question 12

An engineer is setting up Cloud Shell for the first time. They notice that their home directory persists across sessions. How much storage is allocated to the home directory in Cloud Shell?

Accepted Answer

5 GB. Cloud Shell provides 5 GB of persistent home directory storage.

Answer

10 GB

Answer

1 GB

Answer

20 GB

Question 13

A team wants to enable Compute Engine API in their project using gcloud. Which command should they run?

Accepted Answer

gcloud services enable compute.googleapis.com. The command 'gcloud services enable compute.googleapis.com' enables the Compute Engine API.

Answer

gcloud compute enable api

Answer

gcloud services list --enabled

Answer

gcloud api enable compute

Question 14

An engineer wants to ensure that no one in their organization can create VMs with public IP addresses. Which Google Cloud tool should they use to enforce this restriction?

Accepted Answer

Organization policies. Organization policies (Org Policies) allow setting constraints at the organization, folder, or project level to restrict configurations.

Answer

Labels

Answer

IAM roles

Answer

Quotas

Question 15

A developer needs to authenticate to Google Cloud from their local machine to run application code that reads from Cloud Storage. They use a service account. Which gcloud command should they use to obtain application credentials?

Accepted Answer

gcloud auth activate-service-account --key-file=KEY_FILE. The command 'gcloud auth application-default login' obtains user credentials for Application Default Credentials (ADC). For a service account, they would use 'gcloud auth activate-service-account' or set the GOOGLE_APPLICATION_CREDENTIALS environment variable.

Answer

gcloud auth login

Answer

gcloud config set account service-account@project.iam.gserviceaccount.com

Answer

gcloud auth application-default login