Google ACE Configuring Access and Security Practice Question
Which command creates a Google-managed SSL certificate for the domain 'example.com'?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
gcloud compute ssl-certificates create my-cert --domains example.com
Google-managed certificates are created with 'gcloud compute ssl-certificates create' with the '--domains' flag. The other commands are for different purposes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
gcloud compute ssl-certificates create my-cert --domains example.com
Why this is correct
This command correctly creates a Google-managed SSL certificate for the domain 'example.com'. The --domains flag tells the Cloud API to request a managed certificate, which Google will automatically obtain and renew without requiring you to upload a private key. Note that for a global external load balancer, you should also include --global, but the essential syntax for a managed certificate is exactly this.
- ✗
gcloud compute addresses create my-cert --global
Why it's wrong here
This command is incorrect because it reserves a global static external IP address, not an SSL certificate. The --global flag places the address in the global pool for use with global load balancers, but this operation has nothing to do with TLS/HTTPS. Using the name 'my-cert' is just a label; it does not create any certificate resource.
- ✗
gcloud compute ssl-policies create my-policy
Why it's wrong here
This command creates an SSL policy, which is a separate resource that defines a constrained set of TLS versions and cipher suites for a load balancer. It does not create or manage certificates; a policy is applied to a Target HTTPS Proxy after the proxy's certificate has already been created. Without a certificate, the policy has nothing to enforce.
- ✗
gcloud compute target-https-proxies create my-proxy --ssl-certificates my-cert
Why it's wrong here
This command creates a Target HTTPS Proxy and attaches an existing SSL certificate resource to it. The proxy is a load-balancing component that terminates HTTPS traffic, but it does not generate the certificate; the --ssl-certificates flag merely references a previously created cert. If you run this before creating the certificate, it will fail with a resource-not-found error.
Go deeper
Related to this question
About these practice questions
Courseiva writes every ACE question from scratch — 769 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This ACE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ACE exam.