Google ACE Deploying and implementing a cloud solution Practice Test 6 — 15 Questions

Question 1

A company is deploying a global web application using an external HTTPS load balancer with Cloud CDN. Which THREE steps are required for proper configuration? (Choose three.)

Accepted Answer

Enable Cloud CDN on the backend bucket. A is correct because Cloud CDN must be explicitly enabled on the backend bucket (or backend service) to cache content at Google's edge points of presence. Without this step, the load balancer will forward requests directly to the origin without leveraging CDN caching, defeating the purpose of a global web application.

Answer

Enable Identity-Aware Proxy (IAP)

Answer

Use an external TCP load balancer

Question 2

A developer is deploying an HTTP-triggered Cloud Function for a production application. Which TWO configuration options should be applied to ensure security and control costs? (Choose two.)

Accepted Answer

Set a maximum instances limit. Setting a maximum instances limit (option B) is correct because it prevents uncontrolled scaling of Cloud Functions, which could lead to excessive costs due to high concurrency. By capping the number of concurrent function instances, you ensure that even under heavy load, the function does not scale beyond a predefined budget, directly controlling cost in a production environment.

Answer

Allow unauthenticated invocations

Answer

Set minimum instances to 0

Answer

Configure a custom domain for the function

Question 3

A company is deploying a microservices application on Google Kubernetes Engine (GKE). They want to expose their services to the internet using a single external IP address and route traffic based on the request path. Which resource should they use?

Accepted Answer

An Ingress resource. An Ingress resource is the correct choice because it provides HTTP(S) layer 7 routing, allowing you to expose multiple services behind a single external IP address and route traffic based on request paths (e.g., /api to one service, /web to another). This meets the requirement of using one external IP and path-based routing, which a Service alone cannot achieve.

Answer

A Service of type NodePort

Answer

A Service of type LoadBalancer for each microservice

Answer

A Network Endpoint Group (NEG)

Question 4

An organization needs to deploy a batch job that runs every hour on Compute Engine. The job requires a VM with 16 vCPUs and 64 GB of memory. The job takes approximately 20 minutes to complete. The team wants to minimize costs while ensuring the job completes reliably. Which deployment strategy should they use?

Accepted Answer

Use spot VMs with a restart policy configured in the instance template. Option A (sustained-use discount) is for always-on VMs, not suitable for hourly jobs. Option B (preemptible VMs) are cheaper but can be terminated, risking job failure. Option D (committed use discounts) require 1- or 3-year commitments, which is overkill. Option C (spot VMs with a restart policy) is correct: Spot VMs are similar to preemptible but more affordable, and configuring a restart policy ensures the job resumes if interrupted.

Answer

Use committed use discounts for the VM

Answer

Create an always-on VM and use sustained-use discounts

Answer

Use preemptible VMs and accept the risk of termination

Question 5

A developer wants to deploy a containerized web application that can scale to zero when not in use, and only pay for request processing time. Which compute service should they choose?

Accepted Answer

Cloud Run. Cloud Run is the correct choice because it is a managed compute platform that runs containerized applications in a serverless environment, automatically scaling to zero when there are no requests and charging only for the resources used during request processing (billed in 100-millisecond increments). This matches the requirement for a containerized web app that scales to zero and has pay-per-use pricing.

Answer

App Engine Flexible Environment

Answer

Cloud Functions

Answer

Google Kubernetes Engine (GKE)

Question 6

A company is migrating a legacy monolithic application to Google Cloud. The application runs on a single VM and contains both the web server and backend processes. The team wants to separate concerns and deploy the web tier on Cloud Run and the backend on Compute Engine. They need to allow the Cloud Run service to initiate HTTPS connections to the backend VM. What is the most secure way to accomplish this?

Accepted Answer

Use Serverless VPC Access to connect Cloud Run to the VPC, and keep the VM internal. Option D is correct because Serverless VPC Access creates a direct, private connection between Cloud Run and your VPC, allowing the Cloud Run service to reach the backend VM using its internal IP address. This avoids exposing the VM to the public internet, which is the most secure approach for initiating HTTPS connections between the two tiers.

Answer

Assign a public IP to the backend VM and configure firewall rules to allow HTTPS from any source

Answer

Set up a VPN tunnel between Cloud Run and the VPC

Answer

Use Cloud NAT to provide outbound internet access to Cloud Run

Question 7

An organization is deploying a stateful application on Google Kubernetes Engine (GKE). The application requires persistent storage with high read/write performance and must be available across multiple zones for disaster recovery. Which storage solution should they use?

Accepted Answer

Regional persistent disk. Regional persistent disks provide synchronous replication across two zones in the same region, ensuring data availability during a zonal failure. They offer high read/write performance suitable for stateful applications and can be attached to GKE pods via PersistentVolumeClaims, meeting the requirement for multi-zone disaster recovery.

Answer

Cloud Filestore

Answer

Local SSD

Answer

Zonal persistent disk

Question 8

A data analytics team needs to run a Spark job on a schedule. They want to minimize operational overhead and only pay for resources used during job execution. Which service should they use?

Accepted Answer

Use Dataproc workflow templates with scheduled execution. Option B is correct because Dataproc workflow templates allow you to define a Spark job as a workflow and schedule its execution using Cloud Scheduler or a cron-like mechanism. This minimizes operational overhead by automatically provisioning a cluster, running the job, and tearing down the cluster when finished, ensuring you only pay for resources used during execution.

Answer

Create a Dataproc cluster and keep it running for ad-hoc jobs

Answer

Provision Compute Engine instances with Spark installed and start/stop them manually

Answer

Use BigQuery for all analytics

Question 9

A company is deploying a multi-region application on Google Kubernetes Engine (GKE) with clusters in us-central1 and europe-west1. They want to route user traffic to the closest healthy cluster using a global load balancer with SSL termination. Which load balancing service should they use?

Accepted Answer

External HTTPS Load Balancer with a global backend service (using NEGs). D is correct because the External HTTPS Load Balancer with a global backend service using Network Endpoint Groups (NEGs) provides global anycast IP, SSL termination, and traffic routing to the closest healthy GKE cluster via Google's global network. This meets the requirement for multi-region GKE clusters with automatic failover and low latency.

Answer

Internal Load Balancer

Answer

SSL Proxy Load Balancer

Answer

External TCP/UDP Network Load Balancer

Question 10

A startup is building a web application using Cloud Run. They want to deploy multiple independent services that can communicate with each other internally, but each service should be deployed and scaled independently. Which deployment strategy should they use?

Accepted Answer

Create multiple Cloud Run services and use internal endpoints for communication. Cloud Run natively supports deploying multiple independent services, each with its own URL and scaling configuration. Internal communication between these services can be achieved using Cloud Run's built-in internal endpoints (e.g., using the `run.app` domain with internal traffic routing), which avoids exposing services to the public internet. This approach allows each service to scale independently based on its own request load, meeting the startup's requirement for independent deployment and scaling.

Answer

Deploy the application to App Engine Standard Environment

Answer

Use a single GKE cluster with multiple deployments and services

Answer

Deploy a single Cloud Run service with multiple containers

Question 11

A company wants to deploy a new version of their application with zero downtime. They are using a managed instance group (MIG) behind a load balancer. Which deployment method should they use?

Accepted Answer

Perform a rolling update using a new instance template, with a health check. Option D is correct because a rolling update using a new instance template allows the managed instance group (MIG) to gradually replace instances with the new version while health checks ensure each new instance is healthy before proceeding. This maintains the desired capacity and avoids downtime, as the load balancer automatically directs traffic only to healthy instances throughout the process.

Answer

Create a new MIG, then update the load balancer's backend service

Answer

Delete the current MIG and create a new one with the updated template

Answer

Update the instance template and restart all instances

Question 12

Which TWO actions should a Cloud Engineer take to deploy a containerized application on Cloud Run with a custom domain and SSL certificate automatically provisioned? (Choose two.)

Accepted Answer

Enable automatic SSL certificate provisioning. Option A is correct because Cloud Run's managed SSL feature automatically provisions and renews a Google-managed SSL certificate for the custom domain when you map it to the service. This eliminates the need for manual certificate management and is the simplest way to achieve HTTPS with a custom domain.

Answer

Create a self-managed SSL certificate in Cloud Load Balancing

Answer

Configure Serverless VPC Access to handle DNS

Answer

Create an external HTTPS load balancer in front of Cloud Run

Question 13

Which TWO configurations are required to deploy a stateful workload on a regional managed instance group in Compute Engine? (Choose two.)

Accepted Answer

Define a stateful configuration that includes persistent disk. Option A is correct because a stateful workload requires persistent data that survives instance restarts or failures. A stateful configuration in a regional managed instance group (MIG) must include a persistent disk definition to ensure that the disk is preserved and reattached to the new instance when the instance is recreated, maintaining state across instance lifecycle events.

Answer

Assign static internal IPs to each instance

Answer

Attach a GPU to the instance template

Answer

Enable autoscaling

Question 14

Which THREE steps are part of deploying a containerized application to Google Kubernetes Engine (GKE) using a CI/CD pipeline? (Choose three.)

Accepted Answer

Apply a Deployment manifest to the cluster. A typical CI/CD pipeline for GKE includes: building a container image, pushing it to Container Registry, and applying a Kubernetes manifest to deploy. Option B (create a Compute Engine instance) is not part of GKE deployment; Option C (create an instance template) is for MIGs. Option E (set up Cloud NAT) is for outbound networking, not deployment. So A, D, and F are correct.

Answer

Configure Cloud NAT for the cluster

Answer

Create a Compute Engine instance for the pipeline

Answer

Create an instance template for the node pool

Question 15

A company runs a multi-tier web application on Compute Engine: a frontend instance group (us-east1) and a backend instance group (us-east1) that stores data on persistent disks. They recently experienced a zone failure in us-east1-b, causing all instances in that zone to go down. The application was unavailable for 2 hours. The team is now required to design a solution that provides high availability across multiple zones within the us-east1 region and minimizes data loss. The frontend is stateless, but the backend holds critical state data on persistent disks. The team considers: (A) Migrate backend to use regional persistent disks and distribute backend instances across zones using a regional MIG. (B) Use a zonal MIG in us-east1-b with snapshots to another zone. (C) Move the entire application to a single zone in us-central1 with more resources. (D) Use Cloud SQL for backend data and keep Compute Engine instances in a single zone. Which option best meets the requirements?

Accepted Answer

Use regional persistent disks for backend data and deploy a regional managed instance group for backend instances across us-east1-a and us-east1-b. Option D is correct because it uses regional persistent disks (which replicate data synchronously across two zones in the same region) combined with a regional managed instance group (MIG) that distributes backend instances across us-east1-a and us-east1-b. This architecture ensures that if one zone fails, the backend instances in the other zone can immediately attach the same regional persistent disk, minimizing data loss and providing high availability without requiring manual snapshot recovery.

Answer

Replace backend Compute Engine instances with Cloud SQL for data storage and keep frontend as is

Answer

Move all instances to a single zone in us-central1 with larger machine types

Answer

Keep the backend in a zonal MIG in us-east1-b but take hourly snapshots of persistent disks to a different zone