Google ACE Deploying and implementing a cloud solution Practice Test 5 — 15 Questions

Question 1

You are configuring a GKE Autopilot cluster. A developer reports that their pod keeps being rejected with: `Autopilot rejected pod: resource request 0.5 vCPU and 64Mi memory is below minimum`. What should the developer do?

Accepted Answer

Set resource requests to at least 250m CPU and 512Mi memory to meet Autopilot's pod minimums.. B is correct because GKE Autopilot enforces minimum resource requests per pod: at least 0.5 vCPU (500m CPU) and 512Mi memory. The developer's request of 0.5 vCPU (500m) and 64Mi memory meets the CPU minimum but fails the memory minimum, so setting requests to at least 250m CPU and 512Mi memory satisfies both thresholds. This is a fundamental constraint of Autopilot's managed infrastructure model, not a configurable limit.

Answer

Switch to GKE Standard cluster to remove resource minimums.

Answer

Add a LimitRange to the namespace to override Autopilot's minimum requirements.

Answer

Set `resources: {}` (empty) to let Autopilot choose the correct resource allocation automatically.

Question 2

Arrange the steps to deploy a containerized application to Google Kubernetes Engine (GKE) using a Deployment and expose it via a Service.

Question 3

Order the steps to attach a persistent disk to a running Compute Engine instance and format/mount it.

Question 4

Match each Compute Engine machine family to its typical workload.

Question 5

Match each BigQuery feature to its description.

Question 6

A company wants to deploy a web application on Compute Engine. They expect variable traffic and want to automatically add or remove virtual machine instances based on CPU utilization. What is the recommended approach?

Accepted Answer

Use a managed instance group with an autoscaling policy based on CPU utilization. A managed instance group (MIG) with an autoscaling policy based on CPU utilization is the recommended approach because it automatically adjusts the number of VM instances in response to real-time CPU load, ensuring the application can handle variable traffic without manual intervention. This aligns with Google Cloud's best practices for elastic scaling of stateless web applications on Compute Engine.

Answer

Use a single large instance and rely on Cloud Load Balancing

Answer

Use an unmanaged instance group and manually add or remove instances

Answer

Deploy the application on App Engine Standard environment

Question 7

A company is deploying a stateful application on Google Kubernetes Engine (GKE) that requires persistent storage. Each pod needs its own dedicated persistent disk that is not shared. Which Kubernetes resource should be used to manage the deployment?

Accepted Answer

StatefulSet with volumeClaimTemplates. Option D is correct because a StatefulSet with volumeClaimTemplates is designed for stateful applications where each pod requires its own dedicated PersistentVolume (PV) that is not shared. The volumeClaimTemplates automatically generate a unique PersistentVolumeClaim (PVC) for each pod replica, ensuring each pod gets a separate, stable persistent disk that persists across rescheduling. This matches the requirement for a stateful application on GKE where pods need dedicated, non-shared storage.

Answer

Job with PersistentVolume

Answer

DaemonSet with hostPath volumes

Answer

Deployment with PersistentVolumeClaim template

Question 8

A company is extending its on-premises network to Google Cloud using a Cloud VPN tunnel with dynamic routing (BGP). They have set up a Cloud Router in the VPN region. Which additional step is required for the Cloud Router to exchange routes with the on-premises router?

Accepted Answer

Configure a BGP session on the Cloud Router with the on-premises router's ASN and IP address. For a Cloud VPN with dynamic routing (BGP), the Cloud Router must have a BGP session configured with the on-premises router. This session requires the on-premises router's ASN and its BGP peer IP address to exchange routes. Without this explicit BGP session configuration, the Cloud Router cannot establish a peering relationship or advertise/learn routes dynamically.

Answer

Create a static route for the on-premises network on the VPC

Answer

Assign an external IP address to the Cloud Router

Answer

Enable the IP forwarding feature on the VPN gateway

Question 9

A developer wants to deploy a Cloud Function that processes images uploaded to a Cloud Storage bucket. The function should be triggered automatically when an object is created. What is the best practice for setting up this trigger?

Accepted Answer

Create a Cloud Function with a Cloud Storage trigger and specify the bucket and event type. Option B is correct because Cloud Functions natively supports Cloud Storage triggers via the `google.storage.object.finalize` event type, which fires when a new object is created in the specified bucket. This is the simplest and most reliable approach, as it eliminates the need for intermediate services and ensures low-latency, event-driven invocation directly from the storage layer.

Answer

Use a Pub/Sub topic and a push subscription to invoke the Cloud Function

Answer

Use a Compute Engine instance to watch the bucket and call the function

Answer

Set up a Cloud Scheduler job to periodically scan the bucket and invoke the function

Question 10

A company runs an App Engine Standard application with multiple versions. They want to gradually roll out new features by sending a small percentage of traffic to a new version. How should they implement this?

Accepted Answer

Use App Engine's traffic splitting feature to assign a percentage of traffic to the new version. App Engine Standard provides built-in traffic splitting, allowing you to assign a percentage of incoming requests to different versions of the same service. This is the simplest and most direct way to gradually roll out a new feature by sending a small percentage of traffic to the new version without needing external load balancers or additional services.

Answer

Deploy the new version and delete the old version

Answer

Use Cloud Load Balancing to distribute traffic between versions

Answer

Create a new service for the new version and use a custom domain

Question 11

A data engineering team is deploying a streaming Dataflow pipeline that reads from Pub/Sub and writes to BigQuery. They need to ensure that each event is processed exactly once, even in the event of failures. Which Dataflow feature should they use?

Accepted Answer

Rely on Dataflow's exactly-once processing guarantees. Dataflow's streaming engine provides built-in exactly-once processing guarantees for sources like Pub/Sub and sinks like BigQuery. This is achieved through a combination of checkpointing, deterministic replay, and idempotent writes, ensuring that each record is processed exactly once even during worker failures or pipeline updates. No additional configuration or external deduplication is required.

Answer

Enable at-least-once delivery on the Pub/Sub subscription

Answer

Set the Dataflow pipeline to use the 'exactly_once' parameter in the pipeline options

Answer

Use Cloud Functions to deduplicate messages before sending to Dataflow

Question 12

A company wants to expose a web application running on Compute Engine instances behind a managed instance group. They need a single IP address that distributes incoming HTTP traffic across instances. Which type of load balancer should they use?

Accepted Answer

External HTTP(S) Load Balancer. Option D is correct because the External HTTP(S) Load Balancer is a regional or global, proxy-based Layer 7 load balancer that provides a single external IP address for distributing incoming HTTP traffic across Compute Engine instances in a managed instance group. It supports HTTP and HTTPS protocols, health checks, and autoscaling, making it ideal for web applications.

Answer

Internal TCP/UDP Load Balancer

Answer

External TCP/UDP Network Load Balancer

Answer

SSL Proxy Load Balancer

Question 13

A company is running a Cloud SQL for MySQL instance that experiences high read traffic. They want to offload read queries to reduce load on the primary instance. Which action should they take?

Accepted Answer

Create one or more read replicas and direct read queries to them. Creating one or more read replicas allows you to offload read queries from the primary Cloud SQL for MySQL instance. Read replicas are asynchronous replicas that can serve read traffic, reducing load on the primary and improving overall read throughput. This is the correct approach for scaling read-heavy workloads without modifying the primary instance.

Answer

Enable automatic storage increase on the primary instance

Answer

Increase the machine type of the primary instance

Answer

Change the instance to use private IP only

Question 14

A company manages a production GKE cluster with node auto-upgrade enabled. They want to ensure that during a node upgrade, the workloads are rescheduled gracefully without downtime. What Kubernetes resource should be configured on their Deployments?

Accepted Answer

PodDisruptionBudget. PodDisruptionBudget (PDB) allows you to specify the minimum available or maximum unavailable pods during voluntary disruptions like node upgrades. Without a PDB, a node upgrade could evict all pods at once, causing downtime. ResourceQuota and HorizontalPodAutoscaler do not control disruption.

Answer

HorizontalPodAutoscaler

Answer

ResourceQuota

Answer

Node affinity rules

Question 15

A team is deploying a stateful application on GKE that requires each pod to have its own persistent disk. Which TWO Kubernetes resources are essential for this deployment? (Choose two.)

Accepted Answer

StatefulSet. A StatefulSet is essential because it provides stable, unique network identifiers and ordered, graceful deployment and scaling for stateful applications, ensuring each pod maintains its identity and persistent storage binding across rescheduling. A PersistentVolumeClaim (PVC) is required to request and bind a persistent disk to each pod, enabling the pod to retain its data independently of other pods in the set.

Answer

Deployment

Answer

ConfigMap

Answer

Ingress