Google ACE Planning and configuring a cloud solution Practice Test 5 — 15 Questions

Question 1

Order the steps to set up a Cloud Storage bucket with uniform bucket-level access and make objects publicly readable.

Question 2

Arrange the steps to set up a Cloud Function triggered by a Cloud Storage bucket event.

Question 3

Match each IAM role to its typical access level.

Question 4

Match each Google Kubernetes Engine (GKE) concept to its definition.

Question 5

A company needs to store 50 TB of access logs that are rarely accessed (once a year) and must be retained for 7 years. Which storage option is the most cost-effective?

Accepted Answer

Archive Storage. Archive Storage is the most cost-effective option for data that is accessed less than once a year and must be retained for 7 years. It offers the lowest storage cost among Google Cloud storage classes, specifically designed for long-term, infrequently accessed data with a 365-day minimum storage duration and a higher retrieval cost, which is acceptable given the rare access pattern.

Answer

Nearline Storage

Answer

Regional persistent disk

Answer

Coldline Storage

Question 6

A Compute Engine instance cannot connect to a Cloud SQL (MySQL) instance using the private IP address. Both are in the same Google Cloud VPC network. What is the most likely cause?

Accepted Answer

The VPC network is not peered with the Cloud SQL service.. When a Compute Engine instance cannot connect to a Cloud SQL instance using a private IP address within the same VPC network, the most likely cause is that the VPC network is not peered with the Cloud SQL service. Cloud SQL uses a separate, Google-managed VPC for its instances, and private connectivity requires a VPC peering connection between the customer's VPC and the Cloud SQL service's VPC. Without this peering, the private IP address of the Cloud SQL instance is not routable from the Compute Engine instance, even if both are in the same VPC network.

Answer

The Cloud SQL instance is not in the same region.

Answer

The Compute Engine instance lacks an external IP address.

Answer

The firewall rule does not allow ingress on port 3306.

Question 7

A company wants to deploy a globally distributed, multi-tier application with strict low-latency communication between the web and database tiers. The database must be fully managed and able to survive a regional outage with automatic failover. Which combination is most appropriate?

Accepted Answer

Cloud Run (multi-region) and Cloud Spanner (multi-region). Cloud Run (multi-region) provides a serverless compute layer that can automatically route traffic across regions for low-latency access, while Cloud Spanner (multi-region) offers a fully managed, globally distributed relational database with synchronous replication and automatic failover, ensuring strong consistency and regional outage survival without manual intervention. This combination meets the strict low-latency communication and automatic failover requirements for a multi-tier application.

Answer

Cloud Run (multi-region) and Cloud SQL (cross-region replica with manual failover)

Answer

Compute Engine regional managed instance group and Cloud SQL (regional with automatic failover)

Answer

App Engine (standard) and Cloud Datastore (multi-region)

Question 8

A company uses preemptible VMs for batch processing. Which TWO best practices should be implemented to improve resilience and manageability? (Choose 2)

Accepted Answer

Use instance metadata to pass configuration parameters.. Option B is correct because instance metadata is a key-value store that can be used to pass configuration parameters to preemptible VMs at boot time. Since preemptible VMs can be terminated at any time, using metadata ensures that new instances can be recreated with the same configuration without manual intervention. This improves manageability by centralizing configuration and resilience by enabling automated re-provisioning.

Answer

Use persistent disks to store application state.

Answer

Use Cloud Functions to monitor instance termination.

Answer

Use persistent disk snapshots for backup.

Question 9

A company is setting up a CI/CD pipeline using Cloud Build to build container images and deploy to Cloud Run. Which THREE components are required for a fully automated pipeline? (Choose 3)

Accepted Answer

IAM roles for Cloud Build. Cloud Build needs a trigger (e.g., on git push), a container registry to store images, and appropriate IAM roles for Cloud Build to deploy. Cloud Source Repositories and Cloud Run are optional; GitHub and other deployment targets are possible.

Answer

Cloud Run

Answer

Cloud Source Repositories

Question 10

A company is migrating an on-premises MySQL database to Cloud SQL. Which TWO steps are necessary for setting up ongoing replication from on-premises to Cloud SQL? (Choose 2)

Accepted Answer

Enable binary logging on the on-premises MySQL server.. Option C is correct because MySQL's native replication relies on binary logs (binlogs) to capture all changes on the primary server. Enabling binary logging on the on-premises MySQL server is essential to generate the change stream that Cloud SQL will read and apply for ongoing replication.

Answer

Set up a Dataflow pipeline to stream changes.

Answer

Use pg_dump to export the database.

Answer

Establish a Cloud VPN connection between on-premises and Google Cloud.

Question 11

What action does the condition in the IAM policy restrict the user from performing?

Accepted Answer

Performing any compute.admin action on disks in us-central1-a with names starting with 'disk-'. The condition `resource.name.startsWith('disk-')` combined with the `compute.disks.delete` action and the zone constraint `us-central1-a` restricts the user to deleting only disks whose names begin with 'disk-' in that specific zone. Option C correctly identifies this as the allowed action, meaning the policy restricts the user from performing any `compute.admin` action on disks in `us-central1-a` with names starting with 'disk-' — but the question asks what action the condition restricts the user from performing, so the inverse is true: the user is restricted from performing any `compute.admin` action on disks that do not match the condition (i.e., disks not starting with 'disk-' or in other zones). However, the answer choices frame it as the condition restricting the user from performing the action described in C, which is the exact action the policy allows, making C the correct answer because the policy's condition explicitly permits that action, and the question's phrasing is a trap.

Answer

Deleting disks that do not start with 'disk-'

Answer

Performing any action on compute instances

Answer

Creating disks in any zone other than us-central1-a

Question 12

Based on the exhibit, which type of traffic will successfully reach the instance?

Accepted Answer

HTTP traffic from the internet (port 80). Option C is correct because the exhibit shows a security group rule allowing inbound HTTP traffic (port 80) from 0.0.0.0/0, which permits any source on the internet to reach the instance on that port. Security groups in Google Cloud are stateful, so the corresponding outbound return traffic is automatically allowed. No other rule permits HTTPS or all traffic, and the implicit deny-all rule blocks anything not explicitly allowed.

Answer

HTTPS traffic (port 443) from the internet

Answer

All inbound traffic

Answer

No traffic; the deny-all rule takes effect

Question 13

The company wants to change the storage class of these log files to Nearline to reduce costs while still retaining the ability to access them without restoration fees. Which command should be used?

Accepted Answer

gsutil rewrite -s NEARLINE gs://my-bucket/logs/*.log. Option B is correct because the `gsutil rewrite` command is specifically designed to change the storage class of existing objects without incurring restoration fees. It rewrites the object metadata to the new storage class (Nearline) while keeping the object in place, and the operation does not require retrieving the object from cold storage, so no restoration charges apply.

Answer

gsutil cp -s NEARLINE gs://my-bucket/logs/*.log

Answer

gsutil setmeta -s NEARLINE gs://my-bucket/logs/*.log

Answer

gsutil mv -s NEARLINE gs://my-bucket/logs/*.log

Question 14

A startup wants to host a static website (HTML, CSS, JS) globally with minimal latency and high availability. They expect low traffic initially but want to scale seamlessly. Which solution is most cost-effective and simple?

Accepted Answer

Cloud Storage bucket with Cloud CDN enabled. A Cloud Storage bucket with Cloud CDN enabled is the most cost-effective and simple solution for hosting a static website globally with minimal latency. Cloud Storage natively serves static content (HTML, CSS, JS) without provisioning servers, and Cloud CDN caches content at edge locations worldwide, reducing latency. It scales seamlessly from zero traffic to high demand without manual intervention, and costs are based only on storage and egress, making it ideal for low-traffic startups.

Answer

Compute Engine with nginx

Answer

App Engine standard environment

Answer

Cloud Functions with HTTP triggers

Question 15

A company has a VPC with several Compute Engine instances that only have internal IPs. These instances need to download updates from the internet. What is the recommended method to provide internet access without assigning external IPs to each instance?

Accepted Answer

Configure Cloud NAT in the same region and subnet.. Cloud NAT (Network Address Translation) allows instances with only internal IPs to initiate outbound connections to the internet, while preventing inbound connections from the internet. It translates the internal IPs to a shared external IP address, enabling secure internet access without assigning external IPs to each instance. This is the recommended method for providing internet access to private instances in Google Cloud.

Answer

Use VPC Network Peering with a public network.

Answer

Set up a Cloud VPN gateway to route traffic to on-premises.

Answer

Place the instances behind an external HTTP(S) load balancer.