Google ACE Setting Up a Cloud Solution Environment Practice Test 5 — 15 Questions

Question 1

An organization has multiple GCP projects and wants to centralize billing analysis across all projects. They need to export detailed billing data (e.g., cost per SKU per project) to a BigQuery dataset. Which billing export option should they configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Export detailed billing data to BigQuery. The standard usage cost export to BigQuery provides detailed billing data for analysis.

Answer

Export to CSV to Cloud Storage

Answer

Export to Cloud Billing report

Answer

Export to a Pub/Sub topic

Question 2

A company wants to set up a budget alert at 50% and 90% of their projected monthly spending. Which service should they use?

Accepted Answer

Cloud Billing budgets. Cloud Billing budgets allow setting budget amounts and alerts at specified thresholds.

Answer

Cost breakdown reports

Answer

Cloud Scheduler

Answer

Cloud Monitoring alerts

Question 3

What is the basic role that grants full control over all resources in a GCP project?

Accepted Answer

Owner. The Owner role (roles/owner) grants full access, including the ability to manage roles and billing.

Answer

Editor

Answer

Viewer

Answer

Admin

Question 4

An engineer needs to give a data analyst access to run BigQuery queries but prevent them from viewing or modifying data in Cloud Storage. The analyst should be able to create new datasets. Which IAM role should the engineer assign at the project level?

Accepted Answer

roles/bigquery.dataEditor. The role roles/bigquery.dataEditor allows creating datasets and querying data, but does not grant any Cloud Storage permissions.

Answer

roles/storage.objectViewer

Answer

roles/bigquery.dataOwner

Answer

roles/bigquery.user

Question 5

A company wants to manage multiple GCP projects with different configurations (e.g., different regions and accounts) on the same workstation. Which gcloud feature should they use to switch between these configurations?

Accepted Answer

Configuration profiles. Configuration profiles allow setting different sets of properties (project, region, account) and switching between them with 'gcloud config configurations activate'.

Answer

Environment variables

Answer

gcloud init each time

Answer

Multiple gcloud installations

Question 6

An engineer is setting up a new GCP project for a containerized application. They need to enable the required APIs. Which TWO APIs must be enabled to deploy and manage a Kubernetes cluster and build container images?

Accepted Answer

cloudbuild.googleapis.com. Kubernetes Engine API and Cloud Build API are needed for cluster management and building images.

Answer

compute.googleapis.com

Answer

bigquery.googleapis.com

Answer

cloudfunctions.googleapis.com

Question 7

A startup wants to control costs across multiple GCP projects. They want to track spending by department and set budget alerts. Which THREE actions should they take?

Accepted Answer

Assign labels to resources indicating department. Using labels, budgets, and billing export enables tracking and alerts.

Answer

Use Cloud Monitoring to track costs

Answer

Create separate billing accounts for each department

Question 8

An administrator needs to create a custom IAM role that allows listing projects and viewing billing accounts. Which TWO permissions should be included?

Accepted Answer

billing.accounts.list. resourcemanager.projects.list and billing.accounts.list allow these actions.

Answer

billing.accounts.create

Answer

resourcemanager.projects.create

Answer

resourcemanager.projects.delete

Question 9

An organization has multiple Google Cloud projects and wants to enforce a policy that all Compute Engine instances must use a specific set of approved machine types. Which tool should be used to implement this constraint?

Accepted Answer

Organization policies. Organization policies are used to enforce constraints across projects, folders, or the entire organization. The constraint 'compute.constraints.allowMachineTypes' can be set to restrict machine types. IAM roles control access, not resource configuration. Cloud Scheduler is for cron jobs. VPC Service Controls is for data exfiltration prevention.

Answer

IAM custom roles

Answer

VPC Service Controls

Answer

Cloud Scheduler

Question 10

Which gcloud command is used to set the default project for a configuration profile?

Accepted Answer

gcloud config set project. The command 'gcloud config set project [PROJECT_ID]' sets the default project in the current active configuration. The other commands are for other purposes.

Answer

gcloud init

Answer

gcloud projects set

Answer

gcloud projects list

Question 11

An engineer needs to enable the Compute Engine API for a project using the gcloud command line. Which command should they run?

Accepted Answer

gcloud services enable compute.googleapis.com. The command 'gcloud services enable compute.googleapis.com' enables the Compute Engine API for the current project. The other options either list services or are incorrect.

Answer

gcloud compute instances enable-api

Answer

gcloud services list --enabled

Answer

gcloud api enable compute

Question 12

An organization wants to enforce that all projects under a specific folder have a set of constraints, such as disabling default network creation and requiring shielded VMs. What is the most efficient way to achieve this?

Accepted Answer

Apply organization policies at the folder level.. Organization policies can be applied at the folder level, inheriting to all projects within that folder. This is more efficient than applying per project. Using Cloud Shell is irrelevant. IAM cannot enforce such constraints. Service accounts are for authentication.

Answer

Use Cloud Shell to run scripts in each project.

Answer

Create IAM roles to restrict default network creation.

Answer

Use a service account to enforce policies.

Question 13

Which of the following is true about Cloud Shell?

Accepted Answer

Cloud Shell has 5 GB of persistent home directory storage.. Cloud Shell provides a temporary virtual machine with 5 GB of persistent home directory storage, and the gcloud, kubectl, and terraform tools are pre-installed. The home directory persists across sessions, but the VM is ephemeral (after 20 minutes of inactivity the VM is terminated, but home directory persists).

Answer

Cloud Shell requires installation of gcloud and kubectl manually.

Answer

Cloud Shell only supports the gcloud CLI, not kubectl.

Answer

Cloud Shell provides a persistent VM that can run for hours.

Question 14

An engineer wants to authenticate to Google Cloud using their own user credentials and also set up application default credentials for a local development environment. Which sequence of gcloud auth commands should they use?

Accepted Answer

gcloud auth login then gcloud auth application-default login. First, use 'gcloud auth login' to authenticate the gcloud CLI with user credentials. Then, use 'gcloud auth application-default login' to set up application default credentials for local development. The other options are incorrect or reversed.

Answer

gcloud auth application-default login then gcloud auth login

Answer

gcloud init then gcloud auth login

Answer

gcloud auth configure-docker then gcloud auth login

Question 15

A multinational corporation requires that all GCP resources across multiple projects are tagged with a key-value pair 'environment: production' and 'environment: development'. They want to enforce that any resource created without the appropriate label is automatically denied. How can this be achieved?

Accepted Answer

Use an organization policy constraint to require labels.. Organization policy constraints like 'compute.googleapis.com/requireLabels' can enforce that certain labels must be present on resources. IAM conditions can restrict access based on labels, but they don't automatically deny creation of unlabeled resources. Cloud Asset Inventory is for monitoring, not enforcement. Custom roles cannot enforce labeling.

Answer

Use Cloud Asset Inventory to monitor and alert on missing labels.

Answer

Use IAM conditions to check labels at resource creation.

Answer

Create a custom IAM role that denies creation without labels.