ACE — questions

Page 2 of 17 · 334 total questions.

ACE Question 21

Single page →

Topic 1 · Question 21

You have one GCP account running in your default region and zone and another account running in a non-default region and zone. You want to start a new Compute Engine instance in these two Google Cloud Platform accounts using the command line interface. What should you do?

ACreate two configurations using gcloud config configurations create [NAME]. Run gcloud config configurations activate [NAME] to switch between accounts when running the commands to start the Compute Engine instances. (correct answer)
BCreate two configurations using gcloud config configurations create [NAME]. Run gcloud configurations list to start the Compute Engine instances.
CActivate two configurations using gcloud configurations activate [NAME]. Run gcloud config list to start the Compute Engine instances.
DActivate two configurations using gcloud configurations activate [NAME]. Run gcloud configurations list to start the Compute Engine instances.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Create two configurations using gcloud config configurations create [NAME]. Run gcloud config configurations activate [NAME] to switch between accounts when running the commands to start the Compute Engine instances.

Explanation

Compute Engine provides configurable virtual machines when you need full control of the OS.

ACE Question 22

Single page →

Topic 1 · Question 22

You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?

AUse granular logging statements within a Deployment Manager template authored in Python.
BMonitor activity of the Deployment Manager execution on the Stackdriver Logging page of the GCP Console.
CExecute the Deployment Manager template against a separate project with the same configuration, and monitor for failures.
DExecute the Deployment Manager template using the ""-preview option in the same project, and observe the state of interdependent resources. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Execute the Deployment Manager template using the ""-preview option in the same project, and observe the state of interdependent resources.

Explanation

Deployment Manager provisions Google Cloud infrastructure as code.

ACE Question 23

Single page →

Topic 1 · Question 23

You are building a pipeline to process time-series data. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?

ACloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
BFirebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
CCloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
DCloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery

Explanation

Cloud Bigtable is a managed, low-latency NoSQL wide-column store for very high-throughput workloads. BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage. Dataflow runs serverless Apache Beam pipelines for stream and batch data processing with autoscaling.

ACE Question 24

Single page →

Topic 1 · Question 24

You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment. What should you do?

AUse gcloud to create the new project, and then deploy your application to the new project. (correct answer)
BUse gcloud to create the new project and to copy the deployed application to the new project.
CCreate a Deployment Manager configuration file that copies the current App Engine deployment into a new project.
DDeploy your application again using gcloud and specify the project parameter with the new project name to create the new project.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Use gcloud to create the new project, and then deploy your application to the new project.

ACE Question 25

Single page →

Topic 1 · Question 25

You need to configure IAM access audit logging in BigQuery for external auditors. You want to follow Google-recommended practices. What should you do?

AAdd the auditors group to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles. (correct answer)
BAdd the auditors group to two new custom IAM roles.
CAdd the auditor user accounts to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.
DAdd the auditor user accounts to two new custom IAM roles.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Add the auditors group to the 'logging.viewer' and 'bigQuery.dataViewer' predefined IAM roles.

Explanation

BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

ACE Question 26

Single page →

Topic 1 · Question 26

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

ACreate a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.
BCreate a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.
CCreate a service account and add it to the IAM role 'storage.objectCreator' for that bucket. (correct answer)
DCreate a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.

Explanation

A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

ACE Question 27

Single page →

Topic 1 · Question 27

You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?

AUsing the GCP Console, filter the Activity log to view the information.
BUsing the GCP Console, filter the Stackdriver log to view the information. (correct answer)
CView the bucket in the Storage section of the GCP Console.
DCreate a trace in Stackdriver to view the information.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Using the GCP Console, filter the Stackdriver log to view the information.

Explanation

Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

ACE Question 28

Single page →

Topic 1 · Question 28

You are the project owner of a GCP project and want to delegate control to colleagues to manage buckets and files in Cloud Storage. You want to follow Google- recommended practices. Which IAM roles should you grant your colleagues?

AProject Editor
BStorage Admin (correct answer)
CStorage Object Admin
DStorage Object Creator

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Storage Admin.

ACE Question 29

Single page →

Topic 1 · Question 29

You have an object in a Cloud Storage bucket that you want to share with an external company. The object contains sensitive data. You want access to the content to be removed after four hours. The external company does not have a Google account to which you can grant specific user-based access privileges. You want to use the most secure method that requires the fewest steps. What should you do?

ACreate a signed URL with a four-hour expiration and share the URL with the company. (correct answer)
BSet object access to 'public' and use object lifecycle management to remove the object after four hours.
CConfigure the storage bucket as a static website and furnish the object's URL to the company. Delete the object from the storage bucket after four hours.
DCreate a new Cloud Storage bucket specifically for the external company to access. Copy the object to that bucket. Delete the bucket after four hours have passed.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Create a signed URL with a four-hour expiration and share the URL with the company.

ACE Question 30

Single page →

Topic 1 · Question 30

You are creating a Google Kubernetes Engine (GKE) cluster with a cluster autoscaler feature enabled. You need to make sure that each node of the cluster will run a monitoring pod that sends container metrics to a third-party monitoring solution. What should you do?

ADeploy the monitoring pod in a StatefulSet object.
BDeploy the monitoring pod in a DaemonSet object. (correct answer)
CReference the monitoring pod in a Deployment object.
DReference the monitoring pod in a cluster initializer at the GKE cluster creation time.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Deploy the monitoring pod in a DaemonSet object.

ACE Question 31

Single page →

Topic 1 · Question 31

You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?

AEnable the Cloud Pub/Sub API in the API Library on the GCP Console. (correct answer)
BRely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
CUse Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
DGrant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/ Sub.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Enable the Cloud Pub/Sub API in the API Library on the GCP Console.

Explanation

Pub/Sub is a serverless, global messaging service that decouples services and ingests high-volume event streams.

ACE Question 32

Single page →

Topic 1 · Question 32

You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate reporting under the same Stackdriver Monitoring dashboard. What should you do?

AUse Shared VPC to connect all projects, and link Stackdriver to one of the projects.
BFor each project, create a Stackdriver account. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all other projects.
CConfigure a single Stackdriver account, and link all projects to the same account. (correct answer)
DConfigure a single Stackdriver account for one of the projects. In Stackdriver, create a Group and add the other project names as criteria for that Group.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Configure a single Stackdriver account, and link all projects to the same account.

Explanation

Cloud Operations (formerly Stackdriver) provides monitoring, logging, and tracing for reliability.

ACE Question 33

Single page →

Topic 1 · Question 33

You are deploying an application to a Compute Engine VM in a managed instance group. The application must be running at all times, but only a single instance of the VM should run per GCP project. How should you configure the instance group?

ASet autoscaling to On, set the minimum number of instances to 1, and then set the maximum number of instances to 1. (correct answer)
BSet autoscaling to Off, set the minimum number of instances to 1, and then set the maximum number of instances to 1.
CSet autoscaling to On, set the minimum number of instances to 1, and then set the maximum number of instances to 2.
DSet autoscaling to Off, set the minimum number of instances to 1, and then set the maximum number of instances to 2.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Set autoscaling to On, set the minimum number of instances to 1, and then set the maximum number of instances to 1.

ACE Question 34

Single page →

Topic 1 · Question 34

You want to verify the IAM users and roles assigned within a GCP project named my-project. What should you do?

ARun gcloud iam roles list. Review the output section.
BRun gcloud iam service-accounts list. Review the output section.
CNavigate to the project and then to the IAM section in the GCP Console. Review the members and roles. (correct answer)
DNavigate to the project and then to the Roles section in the GCP Console. Review the roles and status.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles.

Explanation

Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

ACE Question 35

Single page →

Topic 1 · Question 35

You need to create a new billing account and then link it with an existing Google Cloud Platform project. What should you do?

AVerify that you are Project Billing Manager for the GCP project. Update the existing project to link it to the existing billing account.
BVerify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project. (correct answer)
CVerify that you are Billing Administrator for the billing account. Create a new project and link the new project to the existing billing account.
DVerify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing account.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project.

ACE Question 36

Single page →

Topic 1 · Question 36

You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm. What should you do?

ADownload the private key from the service account, and add it to each VMs custom metadata.
BDownload the private key from the service account, and add the private key to each VM's SSH keys.
CGrant the service account the IAM Role of Compute Storage Admin in the project called proj-vm. (correct answer)
DWhen creating the VMs, set the service account's API scope for Compute Engine to read/write.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.

Explanation

A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

ACE Question 37

Single page →

Topic 1 · Question 37

You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us- central region. Now you want the application to be served from the asia-northeast1 region. What should you do?

AChange the default region property setting in the existing GCP project to asia-northeast1.
BChange the region property setting in the existing App Engine application from us-central to asia-northeast1.
CCreate a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
DCreate a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Create a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application.

Explanation

App Engine is a fully managed platform that runs and autoscales web apps with little operational effort.

ACE Question 38

Single page →

Topic 1 · Question 38

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

ARun gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
BRun gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role. (correct answer)
CRun gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to the role.
DRun gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to a new group. Add the group to the role.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.

Explanation

Cloud Spanner is a horizontally scalable, strongly consistent relational database with global reach. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

ACE Question 39

Single page →

Topic 1 · Question 39

You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

AEnable the Node Auto-Repair feature for your GKE cluster.
BEnable the Node Auto-Upgrades feature for your GKE cluster. (correct answer)
CSelect the latest available cluster version for your GKE cluster.
DSelect "Container-Optimized OS (cos)" as a node image for your GKE cluster.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Enable the Node Auto-Upgrades feature for your GKE cluster.

Explanation

Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads.

ACE Question 40

Single page →

Topic 1 · Question 40

You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?

AConfigure an HTTP(S) load balancer. (correct answer)
BConfigure an internal TCP load balancer.
CConfigure an external SSL proxy load balancer.
DConfigure an external TCP proxy load balancer.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Configure an HTTP(S) load balancer.

Explanation

A load balancer distributes traffic across healthy backends in multiple zones for availability and scale.

Showing questions 21–40 of 334 · Page 2 of 17