Question 1easymultiple choice
Read the full NAT/PAT explanation →Google ACE Planning and configuring a cloud solution • Complete Question Bank
Complete Google ACE Planning and configuring a cloud solution question bank — all 0 questions with answers and detailed explanations.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag a concept onto its matching description — or click a concept then click the description.
Read-only access to resources
Read and modify resources
Full access including IAM management
Read access to browse the hierarchy
Read access to IAM policies
Drag a concept onto its matching description — or click a concept then click the description.
Smallest deployable unit, one or more containers
Exposes a set of pods as a network service
Declarative update for pods and ReplicaSets
A worker machine in a Kubernetes cluster
Set of nodes managed by the control plane
Refer to the exhibit.
{
"bindings": [
{
"role": "roles/compute.admin",
"members": ["user:admin@example.com"],
"condition": {
"title": "limit_to_disk_actions",
"expression": "resource.name.startsWith(\"projects/my-project/zones/us-central1-a/disks/disk-\")"
}
}
]
}Refer to the exhibit.
$ gcloud compute instances describe my-vm --zone=us-central1-a
...
networkInterfaces:
- network: https://www.googleapis.com/compute/v1/projects/my-project/global/networks/default
subnetwork: https://www.googleapis.com/compute/v1/projects/my-project/regions/us-central1/subnetworks/default
accessConfigs:
- name: external-nat
type: ONE_TO_ONE_NAT
natIP: 34.71.192.55
tags:
items:
- web-server
serviceAccounts:
- email: 123456789-compute@developer.gserviceaccount.com
scopes:
- https://www.googleapis.com/auth/cloud-platform
Firewall rules:
- name: allow-http-from-internet
direction: INGRESS
priority: 1000
sourceRanges:
- 0.0.0.0/0
allowed:
- IPProtocol: tcp
ports:
- '80'
targetTags:
- web-server
- name: deny-all-ingress
direction: INGRESS
priority: 2000
sourceRanges:
- 0.0.0.0/0
denied:
- IPProtocol: allRefer to the exhibit.
$ gsutil ls -L gs://my-bucket/logs/
...
Objects:
gs://my-bucket/logs/2023-01-01.log:
Storage class: ARCHIVE
Content-Type: text/plain
gs://my-bucket/logs/2023-01-02.log:
Storage class: ARCHIVE
Content-Type: text/plain
Total: 2 objects, 250 MB{
"bindings": [
{
"role": "roles/compute.instanceAdmin.v1",
"members": [
"user:admin@example.com",
"serviceAccount:my-sa@project.iam.gserviceaccount.com"
]
},
{
"role": "roles/iam.serviceAccountUser",
"members": [
"user:admin@example.com"
]
}
]
}$ gcloud compute health-checks describe http-health-check healthCheckType: HTTP timeoutSec: 5 unhealthyThreshold: 2 healthyThreshold: 2 checkIntervalSec: 5 port: 80 requestPath: /healthz