🔍

ACE — questions

Page 14 of 17 · 334 total questions.

Topic 1 · Question 261

You are in charge of provisioning access for all Google Cloud users in your organization. Your company recently acquired a startup company that has their own Google Cloud organization. You need to ensure that your Site Reliability Engineers (SREs) have the same project permissions in the startup company's organization as in your own organization. What should you do?

  • AIn the Google Cloud console for your organization, select Create role from selection, and choose destination as the startup company's organization.
  • BIn the Google Cloud console for the startup company, select Create role from selection and choose source as the startup company's Google Cloud organization.
  • CUse the gcloud iam roles copy command, and provide the Organization ID of the startup company's Google Cloud Organization as the destination. (correct answer)
  • DUse the gcloud iam roles copy command, and provide the project IDs of all projects in the startup company's organization as the destination.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use the gcloud iam roles copy command, and provide the Organization ID of the startup company's Google Cloud Organization as the destination.

Explanation

Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Topic 1 · Question 262

You need to extract text from audio files by using the Speech-to-Text API. The audio files are pushed to a Cloud Storage bucket. You need to implement a fully managed, serverless compute solution that requires authentication and aligns with Google-recommended practices. You want to automate the call to the API by submitting each file to the API as the audio file arrives in the bucket. What should you do?

  • ACreate an App Engine standard environment triggered by Cloud Storage bucket events to submit the file URI to the Google Speech-to-TextAPI.
  • BRun a Kubernetes job to scan the bucket regularly for incoming files, and call the Speech-to-Text API for each unprocessed file.
  • CRun a Python script by using a Linux cron job in Compute Engine to scan the bucket regularly for incoming files, and call the Speech-to-Text API for each unprocessed file.
  • DCreate a Cloud Function triggered by Cloud Storage bucket events to submit the file URI to the Google Speech-to-Text API. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a Cloud Function triggered by Cloud Storage bucket events to submit the file URI to the Google Speech-to-Text API.

Explanation

Cloud Storage provides durable, scalable object storage that is fully managed. Speech-to-Text converts audio into text via an API.

Topic 1 · Question 263

Your customer wants you to create a secure website with autoscaling based on the compute instance CPU load. You want to enhance performance by storing static content in Cloud Storage. Which resources are needed to distribute the user traffic?

  • AAn external HTTP(S) load balancer with a managed SSL certificate to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend. (correct answer)
  • BAn external network load balancer pointing to the backend instances to distribute the load evenly. The web servers will forward the request to the Cloud Storage as needed.
  • CAn internal HTTP(S) load balancer together with Identity-Aware Proxy to allow only HTTPS traffic.
  • DAn external HTTP(S) load balancer to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend. Install the HTTPS certificates on the instance.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: An external HTTP(S) load balancer with a managed SSL certificate to distribute the load and a URL map to target the requests for the static content to the Cloud Storage backend.

Explanation

Cloud Storage provides durable, scalable object storage that is fully managed. The external HTTP(S) Load Balancer distributes global web traffic with a single anycast IP. A load balancer distributes traffic across healthy backends in multiple zones for availability and scale.

Topic 1 · Question 264

The core business of your company is to rent out construction equipment at large scale. All the equipment that is being rented out has been equipped with multiple sensors that send event information every few seconds. These signals can vary from engine status, distance traveled, fuel level, and more. Customers are billed based on the consumption monitored by these sensors. You expect high throughput – up to thousands of events per hour per device – and need to retrieve consistent data based on the time of the event. Storing and retrieving individual signals should be atomic. What should you do?

  • ACreate files in Cloud Storage as data comes in.
  • BCreate a file in Filestore per device, and append new data to that file.
  • CIngest the data into Cloud SQL. Use multiple read replicas to match the throughput.
  • DIngest the data into Bigtable. Create a row key based on the event timestamp. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Ingest the data into Bigtable. Create a row key based on the event timestamp.

Explanation

Cloud Bigtable is a managed, low-latency NoSQL wide-column store for very high-throughput workloads.

Topic 1 · Question 265

You just installed the Google Cloud CLI on your new corporate laptop. You need to list the existing instances of your company on Google Cloud. What must you do before you run the gcloud compute instances list command? (Choose two.)

  • ARun gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI. (correct answer)
  • BCreate a Google Cloud service account, and download the service account key. Place the key file in a folder on your machine where gcloud CLI can find it.
  • CDownload your Cloud Identity user account key. Place the key file in a folder on your machine where gcloud CLI can find it.
  • DRun gcloud config set compute/zone $my_zone to set the default zone for gcloud CLI.
  • ERun gcloud config set project $my_project to set the default project for gcloud CLI.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Run gcloud auth login, enter your login credentials in the dialog window, and paste the received login token to gcloud CLI.

Topic 1 · Question 266

You are planning to migrate your on-premises data to Google Cloud. The data includes: • 200 TB of video files in SAN storage • Data warehouse data stored on Amazon Redshift • 20 GB of PNG files stored on an S3 bucket You need to load the video files into a Cloud Storage bucket, transfer the data warehouse data into BigQuery, and load the PNG files into a second Cloud Storage bucket. You want to follow Google-recommended practices and avoid writing any code for the migration. What should you do?

  • AUse gcloud storage for the video files, Dataflow for the data warehouse data, and Storage Transfer Service for the PNG files.
  • BUse Transfer Appliance for the videos, BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files. (correct answer)
  • CUse Storage Transfer Service for the video files, BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files.
  • DUse Cloud Data Fusion for the video files, Dataflow for the data warehouse data, and Storage Transfer Service for the PNG files.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Transfer Appliance for the videos, BigQuery Data Transfer Service for the data warehouse data, and Storage Transfer Service for the PNG files.

Explanation

Storage Transfer Service moves large datasets into Cloud Storage online with minimal effort. Transfer Appliance physically ships large datasets to Google Cloud when bandwidth is limited. BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage.

Topic 1 · Question 267

You want to deploy a new containerized application into Google Cloud by using a Kubernetes manifest. You want to have full control over the Kubernetes deployment, and at the same time, you want to minimize configuring infrastructure. What should you do?

  • ADeploy the application on GKE Autopilot. (correct answer)
  • BDeploy the application on Cloud Run.
  • CDeploy the application on GKE Standard.
  • DDeploy the application on Cloud Functions.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Deploy the application on GKE Autopilot.

Explanation

GKE Autopilot runs Kubernetes with Google managing nodes, reducing operational overhead. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads.

Topic 1 · Question 268

Your team is building a website that handles votes from a large user population. The incoming votes will arrive at various rates. You want to optimize the storage and processing of the votes. What should you do?

  • ASave the incoming votes to Firestore. Use Cloud Scheduler to trigger a Cloud Functions instance to periodically process the votes.
  • BUse a dedicated instance to process the incoming votes. Send the votes directly to this instance.
  • CSave the incoming votes to a JSON file on Cloud Storage. Process the votes in a batch at the end of the day.
  • DSave the incoming votes to Pub/Sub. Use the Pub/Sub topic to trigger a Cloud Functions instance to process the votes. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Save the incoming votes to Pub/Sub. Use the Pub/Sub topic to trigger a Cloud Functions instance to process the votes.

Explanation

Cloud Functions runs event-driven code without managing servers and scales automatically. Pub/Sub is a serverless, global messaging service that decouples services and ingests high-volume event streams.

Topic 1 · Question 269

You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company’s security policies, your application must connect to your database through an encrypted and authenticated connection that requires minimal management and integrates with Identity and Access Management (IAM). What should you do?

  • ADeploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure a database user and password.
  • BDeploy a Cloud SQL database with the SSL mode set to encrypted only, configure SSL/TLS client certificates, and configure IAM database authentication.
  • CDeploy a Cloud SQL database and configure IAM database authentication. Access the database through the Cloud SQL Auth Proxy. (correct answer)
  • DDeploy a Cloud SQL database and configure a database user and password. Access the database through the Cloud SQL Auth Proxy.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Deploy a Cloud SQL database and configure IAM database authentication. Access the database through the Cloud SQL Auth Proxy.

Explanation

Cloud SQL is a managed relational database (MySQL/PostgreSQL/SQL Server) that handles patching, backups, and failover. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Topic 1 · Question 270

You have two Google Cloud projects: project-a with VPC vpc-a (10.0.0.0/16) and project-b with VPC vpc-b (10.8.0.0/16). Your frontend application resides in vpc-a and the backend API services are deployed in vpc-b. You need to efficiently and cost-effectively enable communication between these Google Cloud projects. You also want to follow Google-recommended practices. What should you do?

  • ACreate an OpenVPN connection between vpc-a and vpc-b.
  • BCreate VPC Network Peering between vpc-a and vpc-b. (correct answer)
  • CConfigure a Cloud Router in vpc-a and another Cloud Router in vpc-b.
  • DConfigure a Cloud Interconnect connection between vpc-a and vpc-b.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create VPC Network Peering between vpc-a and vpc-b.

Explanation

A VPC provides a global, software-defined private network for your Google Cloud resources. This option delivers the requirement at the lowest cost.

Topic 1 · Question 271

Your company is running a critical workload on a single Compute Engine VM instance. Your company's disaster recovery policies require you to back up the entire instance’s disk data every day. The backups must be retained for 7 days. You must configure a backup solution that complies with your company’s security policies and requires minimal setup and configuration. What should you do?

  • AConfigure the instance to use persistent disk asynchronous replication.
  • BConfigure daily scheduled persistent disk snapshots with a retention period of 7 days. (correct answer)
  • CConfigure Cloud Scheduler to trigger a Cloud Function each day that creates a new machine image and deletes machine images that are older than 7 days.
  • DConfigure a bash script using gsutil to run daily through a cron job. Copy the disk’s files to a Cloud Storage bucket with archive storage class and an object lifecycle rule to delete the objects after 7 days.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure daily scheduled persistent disk snapshots with a retention period of 7 days.

Explanation

Persistent Disk provides durable block storage attached to Compute Engine VMs. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 · Question 272

Your company requires that Google Cloud products are created with a specific configuration to comply with your company’s security policies. You need to implement a mechanism that will allow software engineers at your company to deploy and update Google Cloud products in a preconfigured and approved manner. What should you do?

  • ACreate Java packages that utilize the Google Cloud Client Libraries for Java to configure Google Cloud products. Store and share the packages in a source code repository.
  • BCreate bash scripts that utilize the Google Cloud CLI to configure Google Cloud products. Store and share the bash scripts in a source code repository.
  • CUse the Google Cloud APIs by using curl to configure Google Cloud products. Store and share the curl commands in a source code repository.
  • DCreate Terraform modules that utilize the Google Cloud Terraform Provider to configure Google Cloud products. Store and share the modules in a source code repository. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create Terraform modules that utilize the Google Cloud Terraform Provider to configure Google Cloud products. Store and share the modules in a source code repository.

Explanation

Terraform provisions Google Cloud infrastructure as code repeatably.

Topic 1 · Question 273

You are a Google Cloud organization administrator. You need to configure organization policies and log sinks on Google Cloud projects that cannot be removed by project users to comply with your company's security policies. The security policies are different for each company department. Each company department has a user with the Project Owner role assigned to their projects. What should you do?

  • AUse a standard naming convention for projects that includes the department name. Configure organization policies on the organization and log sinks on the projects.
  • BUse a standard naming convention for projects that includes the department name. Configure both organization policies and log sinks on the projects.
  • COrganize projects under folders for each department. Configure both organization policies and log sinks on the folders. (correct answer)
  • DOrganize projects under folders for each department. Configure organization policies on the organization and log sinks on the folders.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Organize projects under folders for each department. Configure both organization policies and log sinks on the folders.

Topic 1 · Question 274

You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?

  • AUse SSL proxy load balancing for the MIG and an A record in your DNS private zone with the load balancer's IP address.
  • BUse SSL proxy load balancing for the MIG and a CNAME record in your DNS public zone with the load balancer’s IP address.
  • CUse HTTP(S) load balancing for the MIG and a CNAME record in your DNS private zone with the load balancer’s IP address.
  • DUse HTTP(S) load balancing for the MIG and an A record in your DNS public zone with the load balancer’s IP address. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use HTTP(S) load balancing for the MIG and an A record in your DNS public zone with the load balancer’s IP address.

Explanation

A load balancer distributes traffic across healthy backends in multiple zones for availability and scale. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

Topic 1 · Question 275

You have several hundred microservice applications running in a Google Kubernetes Engine (GKE) cluster. Each microservice is a deployment with resource limits configured for each container in the deployment. You've observed that the resource limits for memory and CPU are not appropriately set for many of the microservices. You want to ensure that each microservice has right sized limits for memory and CPU. What should you do?

  • AConfigure a Vertical Pod Autoscaler for each microservice. (correct answer)
  • BModify the cluster's node pool machine type and choose a machine type with more memory and CPU.
  • CConfigure a Horizontal Pod Autoscaler for each microservice.
  • DConfigure GKE cluster autoscaling.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure a Vertical Pod Autoscaler for each microservice.

Topic 1 · Question 276 · Select all that apply

Your company uses BigQuery to store and analyze data. Upon submitting your query in BigQuery, the query fails with a quotaExceeded error. You need to diagnose the issue causing the error. What should you do? (Choose two.)

  • AUse BigQuery BI Engine to analyze the issue.
  • BUse the INFORMATION_SCHEMA views to analyze the underlying issue. (correct answer)
  • CConfigure Cloud Trace to analyze the issue.
  • DSearch errors in Cloud Audit Logs to analyze the issue. (correct answer)
  • EView errors in Cloud Monitoring to analyze the issue.
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: Use the INFORMATION_SCHEMA views to analyze the underlying issue. Option D: Search errors in Cloud Audit Logs to analyze the issue.

Explanation

Cloud Audit Logs record administrative and data-access activity for auditing and governance.

Topic 1 · Question 277

Your team has developed a stateless application which requires it to be run directly on virtual machines. The application is expected to receive a fluctuating amount of traffic and needs to scale automatically. You need to deploy the application. What should you do?

  • ADeploy the application on a managed instance group and configure autoscaling. (correct answer)
  • BDeploy the application on a Kubernetes Engine cluster and configure node pool autoscaling.
  • CDeploy the application on Cloud Functions and configure the maximum number instances.
  • DDeploy the application on Cloud Run and configure autoscaling.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Deploy the application on a managed instance group and configure autoscaling.

Explanation

A managed instance group provides autoscaling, autohealing, and rolling updates for VMs.

Topic 1 · Question 278

Your web application is hosted on Cloud Run and needs to query a Cloud SQL database. Every morning during a traffic spike, you notice API quota errors in Cloud SQL logs. The project has already reached the maximum API quota. You want to make a configuration change to mitigate the issue. What should you do?

  • AModify the minimum number of Cloud Run instances. (correct answer)
  • BUse traffic splitting.
  • CModify the maximum number of Cloud Run instances.
  • DSet a minimum concurrent requests environment variable for the application.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Modify the minimum number of Cloud Run instances.

Explanation

Cloud Run runs stateless containers serverlessly and scales to zero, minimizing operational overhead. This option decouples the components so they scale independently and absorb load spikes.

Topic 1 · Question 279

You need to deploy a single stateless web application with a web interface and multiple endpoints. For security reasons, the web application must be reachable from an internal IP address from your company's private VPC and on-premises network. You also need to update the web application multiple times per day with minimal effort and want to manage a minimal amount of cloud infrastructure. What should you do?

  • ADeploy the web application on Google Kubernetes Engine standard edition with an internal ingress.
  • BDeploy the web application on Cloud Run with Private Google Access configured.
  • CDeploy the web application on Cloud Run with Private Service Connect configured. (correct answer)
  • DDeploy the web application to GKE Autopilot with Private Google Access configured.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Deploy the web application on Cloud Run with Private Service Connect configured.

Explanation

Cloud Run runs stateless containers serverlessly and scales to zero, minimizing operational overhead. Private Service Connect exposes and consumes services privately within VPCs without internet exposure.

Topic 1 · Question 280

You use Cloud Logging to capture application logs. You now need to use SQL to analyze the application logs in Cloud Logging, and you want to follow Google-recommended practices. What should you do?

  • ADevelop SQL queries by using Gemini for Google Cloud.
  • BEnable Log Analytics for the log bucket and create a linked dataset in BigQuery. (correct answer)
  • CCreate a schema for the storage bucket and run SQL queries for the data in the bucket.
  • DExport logs to a storage bucket and create an external view in BigQuery.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable Log Analytics for the log bucket and create a linked dataset in BigQuery.

Explanation

BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage.

Showing questions 261280 of 334 · Page 14 of 17