🔍

ACE — questions

Page 15 of 17 · 334 total questions.

ACE Question 281

Single page →
Topic 1 · Question 281

You need to deploy a third-party software application onto a single Compute Engine VM instance. The application requires the highest speed read and write disk access for the internal database. You need to ensure the instance will recover on failure. What should you do?

  • ACreate an instance template. Set the disk type to be an SSD Persistent Disk. Launch the instance template as part of a stateful managed instance group.
  • BCreate an instance template. Set the disk type to be an SSD Persistent Disk. Launch the instance template as part of a stateless managed instance group.
  • CCreate an instance template. Set the disk type to be Hyperdisk Extreme. Launch the instance template as part of a stateful managed instance group. (correct answer)
  • DCreate an instance template. Set the disk type to be Hyperdisk Extreme. Launch the instance template as part of a stateless managed instance group.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an instance template. Set the disk type to be Hyperdisk Extreme. Launch the instance template as part of a stateful managed instance group.

Explanation

A managed instance group provides autoscaling, autohealing, and rolling updates for VMs. Hyperdisk provides high-performance, configurable block storage for demanding workloads.

ACE Question 282

Single page →
Topic 1 · Question 282

You have a VM instance running in a VPC with single-stack subnets. You need to ensure that the VM instance has a fixed IP address so that other services hosted in the same VPC can communicate with the VM. You want to follow Google-recommended practices while minimizing cost. What should you do?

  • APromote the existing IP address of the VM to become a static external IP address.
  • BPromote the existing IP address of the VM to become a static internal IP address. (correct answer)
  • CReserve a new static external IPv6 address and assign the new IP address to the VM.
  • DReserve a new static external IP address and assign the new IP address to the VM.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Promote the existing IP address of the VM to become a static internal IP address.

ACE Question 283

Single page →
Topic 1 · Question 283

Your preview application, deployed on a single-zone Google Kubernetes Engine (GKE) cluster in us-central1, has gained popularity. You are now ready to make the application generally available. You need to deploy the application to production while ensuring high availability and resilience. You also want to follow Google-recommended practices. What should you do?

  • AUse the gcloud container clusters create command with the options --enable-multi-networking and --enable-autoscaling to create an autoscaling zonal cluster and deploy the application to it.
  • BUse the gcloud container clusters create-auto command to create an autopilot cluster and deploy the application to it. (correct answer)
  • CUse the gcloud container clusters update command with the option --region us-central1 to update the cluster and deploy the application to it.
  • DUse the gcloud container clusters update command with the option --node-locations us-central1-a,us-central1-b to update the cluster and deploy the application to the nodes.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use the gcloud container clusters create-auto command to create an autopilot cluster and deploy the application to it. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

ACE Question 284

Single page →
Topic 1 · Question 284

You are developing an application that will be deployed on Google Cloud. The application will use a service account to retrieve data from BigQuery. Before you deploy your application, you want to test the permissions of this service account from your local machine to ensure there will be no authentication issues. You want to ensure that you use the most secure method while following Google-recommended practices. What should you do?

  • AGenerate a service account key, and configure the gcloud CLI to use this key. Issue a relevant BigQuery request through the gdoud CLI to test the access.
  • BGrant the service account the BigQuery Administrator IAM role to ensure the service account has all required access.
  • CConfigure the gcloud CLI to use service account impersonation. Issue a relevant BigQuery request through the gcloud CLI to test the access. (correct answer)
  • DConfigure the gcloud CLI with Application Default Credentials using your user account. Issue a relevant BigQuery request through the gcloud CLI to test the access.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Configure the gcloud CLI to use service account impersonation. Issue a relevant BigQuery request through the gcloud CLI to test the access.

Explanation

BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage. A service account provides an identity for workloads to access Google Cloud APIs securely.

ACE Question 285

Single page →
Topic 1 · Question 285

Your organization is migrating to Google Cloud. You want only users with company-issued Google accounts to access your Google Cloud environment. You must ensure that users of the same department can only access resources within their own department. You want to minimize operational costs while following Google-recommended practices. What should you do?

  • AAssign users to the relevant Google Groups, and provide access to cloud resources through Identity and Access Management (IAM) roles. Periodically identify and remove non-company issued Google accounts.
  • BAssign users to the relevant Google Groups, and provide access to cloud resources through Identity and Access Management (IAM) roles. Use organization policies to block non-company issued emails. (correct answer)
  • CCreate a folder for each department in Resource Manager. Grant the users of each department the Folder Admin role on the folder of their department.
  • DCreate a folder for each department in Resource Manager. Grant all company users the Folder Admin role on the organization level.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Assign users to the relevant Google Groups, and provide access to cloud resources through Identity and Access Management (IAM) roles. Use organization policies to block non-company issued emails.

Explanation

Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

ACE Question 286

Single page →
Topic 1 · Question 286

You are deploying an application to Cloud Run. Your application requires the use of an API that runs on Google Kubernetes Engine (GKE). You need to ensure that your Cloud Run service can privately reach the API on GKE, and you want to follow Google-recommended practices. What should you do?

  • ADeploy an ingress resource on the GKE cluster to expose the API to the internet. Use Cloud Armor to filter for IP addresses that can connect to the API. On the Cloud Run service, configure the application to fetch its public IP address and update the Cloud Armor policy on startup to allow this IP address to call the API on ports 80 and 443.
  • BCreate an ingress firewall rule on the VPC to allow connections from 0.0.0.0/0 on ports 80 and 443.
  • CCreate an egress firewall rule on the VPC to allow connections to 0.0.0.0/ on ports 80 and 443.
  • DDeploy an internal Application Load Balancer to expose the API on GKE to the VPC. Configure Cloud DNS with the IP address of the internal Application Load Balancer. Deploy a Serverless VPC Access connector to allow the Cloud Run service to call the API through the FQDN on Cloud DNS. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Deploy an internal Application Load Balancer to expose the API on GKE to the VPC. Configure Cloud DNS with the IP address of the internal Application Load Balancer. Deploy a Serverless VPC Access connector to allow th...

Explanation

Cloud Run runs stateless containers serverlessly and scales to zero, minimizing operational overhead. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. A load balancer distributes traffic across healthy backends in multiple zones for availability and scale.

ACE Question 287

Single page →
Topic 1 · Question 287

Your company uses a multi-cloud strategy that includes Google Cloud. You want to centralize application logs in a third-party software-as-a-service (SaaS) tool from all environments. You need to integrate logs originating from Cloud Logging, and you want to ensure the export occurs with the least amount of delay possible. What should you do?

  • ACreate a Cloud Logging sink and configure BigQuery as the destination. Configure the SaaS tool to query BigQuery to retrieve the logs.
  • BCreate a Cloud Logging sink and configure Pub/Sub as the destination. Configure the SaaS tool to subscribe to the Pub/Sub topic to retrieve the logs. (correct answer)
  • CCreate a Cloud Logging sink and configure Cloud Storage as the destination. Configure the SaaS tool to read the Cloud Storage bucket to retrieve the logs.
  • DUse a Cloud Scheduler cron job to trigger a Cloud Function that queries Cloud Logging and sends the logs to the SaaS tool.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a Cloud Logging sink and configure Pub/Sub as the destination. Configure the SaaS tool to subscribe to the Pub/Sub topic to retrieve the logs.

Explanation

Pub/Sub is a serverless, global messaging service that decouples services and ingests high-volume event streams. Cloud Logging centralizes, stores, and analyzes logs across services.

ACE Question 288

Single page →
Topic 1 · Question 288

You are planning to migrate a database and a backend application to a Standard Google Kubernetes Engine (GKE) cluster. You need to prevent data loss and make sure there are enough nodes available for your backend application based on the demands of your workloads. You want to follow Google-recommended practices and minimize the amount of manual work required. What should you do?

  • ARun your database as a StatefulSet. Configure cluster autoscaling to handle changes in the demands of your workloads. (correct answer)
  • BRun your database as a single Pod. Run the resize command when you notice changes in the demands of your workloads.
  • CRun your database as a DaemonSet. Run the resize command when you notice changes in the demands of your workloads.
  • DRun your database as a Deployment. Configure cluster autoscaling to handle changes in the demands of your workloads.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Run your database as a StatefulSet. Configure cluster autoscaling to handle changes in the demands of your workloads.

ACE Question 289

Single page →
Topic 1 · Question 289

You are the Organization Administrator for your company's Google Cloud resources. Your company has strict compliance rules that require you to be notified about any modifications to files and documents hosted on Cloud Storage. In a recent incident, one of your team members was able to modify files and you did not receive any notifications, causing other production jobs to fail. You must ensure that you receive notifications for all changes to files and documents in Cloud Storage while minimizing management overhead. What should you do?

  • AView Cloud Audit logs for all Cloud Storage files in Logs Explorer. Filter by Admin Activity logs.
  • BEnable Cloud Storage object versioning on your bucket. Configure Pub/Sub notifications for your Cloud Storage buckets.
  • CEnable versioning on the Cloud Storage bucket. Set up a custom script that scans versions of Cloud Storage objects being modified and alert the admin by using the script.
  • DConfigure Object change notifications on the Cloud Storage buckets. Send the events to Pub/Sub. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure Object change notifications on the Cloud Storage buckets. Send the events to Pub/Sub.

Explanation

Cloud Storage provides durable, scalable object storage that is fully managed. Pub/Sub is a serverless, global messaging service that decouples services and ingests high-volume event streams.

ACE Question 290

Single page →
Topic 1 · Question 290

Your company would like to store invoices and other financial documents in Google Cloud. You need to identify a Google-managed solution to store this information for your company. You must ensure that the documents are kept for a duration of three years. Your company’s analysts need frequent access to invoices from the past six months. After six months, invoices should be archived for audit purposes only. You want to minimize costs and follow Google-recommended practices. What should you do?

  • AUse Cloud Storage with Object Lifecycle Management to change the object storage class to Coldline after six months. (correct answer)
  • BUse Cloud Storage with Object Lifecycle Management to change the object storage class to Standard after six months.
  • CStore your documents on Filestore, and move the documents to Cloud Storage with object storage class set to Coldline after six months.
  • DStore your documents on Filestore, and move the documents to Cloud Storage with object storage class set to Standard after six months.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use Cloud Storage with Object Lifecycle Management to change the object storage class to Coldline after six months.

Explanation

Cloud Storage provides durable, scalable object storage that is fully managed. This option delivers the requirement at the lowest cost.

ACE Question 291

Single page →
Topic 1 · Question 291

You are planning to migrate your containerized workloads to Google Kubernetes Engine (GKE). You need to determine which GKE option to use. Your solution must have high availability, minimal downtime, and the ability to promptly apply security updates to your nodes. You also want to pay only for the compute resources that your workloads use without managing nodes. You want to follow Google-recommended practices and minimize operational costs. What should you do?

  • AConfigure a Standard regional GKE duster.
  • BConfigure a Standard zonal GKE duster.
  • CConfigure a Standard multi-zonal GKE cluster.
  • DConfigure an Autopilot GKE cluster. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure an Autopilot GKE cluster.

Explanation

Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads.

ACE Question 292

Single page →
Topic 1 · Question 292

Your company stores data from multiple sources that have different data storage requirements. These data include: 1. Customer data that is structured and read with complex queries 2. Historical log data that is large in volume and accessed infrequently 3. Real-time sensor data with high-velocity writes, which needs to be available for analysis but can tolerate some data loss You need to design the most cost-effective storage solution that fulfills all data storage requirements. What should you do?

  • AUse Firestore for customer data, Cloud Storage (Nearline) for historical logs, and Bigtable for sensor data.
  • BUse Cloud SQL for customer data. Cloud Storage (Coldline) for historical logs, and BigQuery for sensor data.
  • CUse Cloud SQL for customer data. Cloud Storage (Archive) for historical logs, and Bigtable for sensor data. (correct answer)
  • DUse Spanner for all data.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Cloud SQL for customer data. Cloud Storage (Archive) for historical logs, and Bigtable for sensor data.

Explanation

Cloud Storage provides durable, scalable object storage that is fully managed. Cloud SQL is a managed relational database (MySQL/PostgreSQL/SQL Server) that handles patching, backups, and failover. Cloud Bigtable is a managed, low-latency NoSQL wide-column store for very high-throughput workloads. This option delivers the requirement at the lowest cost.

ACE Question 293

Single page →
Topic 1 · Question 293

You work for a financial services company that operates as a stock market broker. Your company is planning to migrate to Google Cloud. You need to plan the network design in Google Cloud. Your design must: • Minimize the latency between all production systems. • Minimize costs related to your development environment. What should you do?

  • ACreate a VPC in the Standard Tier and one in the Premium Tier. Deploy production workloads in the Standard Tier and development workloads in the Premium Tier.
  • BCreate a VPC in the Standard Tier and one in the Premium Tier. Deploy development workloads in the Standard Tier and production workloads in the Premium Tier. (correct answer)
  • CCreate a VPC in the Premium Tier, and deploy both production and development workloads on this VPC.
  • DCreate a VPC in the Standard Tier, and deploy both production and development workloads on this VPC.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a VPC in the Standard Tier and one in the Premium Tier. Deploy development workloads in the Standard Tier and production workloads in the Premium Tier.

Explanation

A VPC provides a global, software-defined private network for your Google Cloud resources. This option delivers the requirement at the lowest cost.

ACE Question 294

Single page →
Topic 1 · Question 294

You are managing a fleet of Compute Engine Linux instances in a Google Cloud project. Your company's engineering team requires SSH access to all instances to perform routine maintenance tasks. You need to manage the SSH access for the engineering team, and you want to minimize operational overhead when engineers join or leave the team. What should you do?

  • ACreate a single SSH key pair to be shared by all engineering team members. Add the public SSH key to project metadata.
  • BCreate an SSH key pair for each engineer on the team, and add the public SSH key to the metadata of the relevant instances.
  • CCreate a Google Group for all engineering team members, and grant them the Compute Viewer IAM role. Manage group membership when engineers join or leave the team.
  • DCreate a Google Group for all engineering team members, and set up OS Login for this group on the project. Manage group membership when engineers join or leave the team. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a Google Group for all engineering team members, and set up OS Login for this group on the project. Manage group membership when engineers join or leave the team.

ACE Question 295

Single page →
Topic 1 · Question 295

Your company was recently impacted by a service disruption that caused multiple Dataflow jobs to get stuck, resulting in significant downtime in downstream applications and revenue loss. You were able to resolve the issue by identifying and fixing an error you found in the code. You need to design a solution with minimal management effort to identify when jobs are stuck in the future to ensure that this issue does not occur again. What should you do?

  • AUpdate the Dataflow job configurations to send messages to a Pub/Sub topic when there are delays. Configure a backup Dataflow job to process jobs that are delayed. Use Cloud Tasks to trigger an alert when messages are pushed to the Pub/Sub topic.
  • BSet up Cloud Monitoring alerts on the data freshness metric for the Dataflow jobs to receive a notification when a certain threshold is reached. (correct answer)
  • CSet up Error Reporting to identify stack traces that indicate slowdowns in Dataflow jobs. Set up alerts based on these log entries.
  • DUse the Personalized Service Health dashboard to identify issues with Dataflow jobs across regions.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Set up Cloud Monitoring alerts on the data freshness metric for the Dataflow jobs to receive a notification when a certain threshold is reached.

Explanation

Dataflow runs serverless Apache Beam pipelines for stream and batch data processing with autoscaling. Cloud Monitoring collects metrics, dashboards, and alerts to observe system health.

ACE Question 296

Single page →
Topic 1 · Question 296

Your company is modernizing its applications and refactoring them to containerized microservices. You need to deploy the infrastructure on Google Cloud so that teams can deploy their applications. The applications cannot be exposed publicly. You want to minimize management and operational overhead. What should you do?

  • AProvision a Google Kubernetes Engine (GKE) Autopilot cluster. (correct answer)
  • BProvision a fleet of Compute Engine instances and install Kubernetes.
  • CProvision a Standard regional Google Kubernetes Engine (GKE) cluster.
  • DProvision a Standard zonal Google Kubernetes Engine (GKE) cluster.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Provision a Google Kubernetes Engine (GKE) Autopilot cluster.

Explanation

Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. Google Kubernetes Engine runs managed Kubernetes for containerized workloads.

ACE Question 297

Single page →
Topic 1 · Question 297

You have an application running inside a Compute Engine instance. You want to provide the application with secure access to a BigQuery dataset. You must ensure that credentials are only valid for a short period of time, and your application will only have access to the intended BigQuery dataset. You want to follow Google-recommended practices and minimize your operational costs. What should you do?

  • AAttach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the project.
  • BAttach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the dataset. (correct answer)
  • CAttach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the dataset.
  • DAttach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the project.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the dataset.

Explanation

BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

ACE Question 298

Single page →
Topic 1 · Question 298

You have an application that is currently processing transactions by using a group of managed VM instances. You need to migrate the application so that it is serverless and scalable. You want to implement an asynchronous transaction processing system, while minimizing management overhead. What should you do?

  • AInstall Kafka on VM instances to acknowledge incoming transactions. Use Cloud Run to process transactions.
  • BUse Pub/Sub to acknowledge incoming transactions. Use VM instances to process transactions.
  • CUse Pub/Sub to acknowledge incoming transactions. Use Cloud Run to process transactions. (correct answer)
  • DInstall Kafka on VM instances to acknowledge incoming transactions. Use VM instances to process transactions.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use Pub/Sub to acknowledge incoming transactions. Use Cloud Run to process transactions.

Explanation

Cloud Run runs stateless containers serverlessly and scales to zero, minimizing operational overhead. Pub/Sub is a serverless, global messaging service that decouples services and ingests high-volume event streams. This option decouples the components so they scale independently and absorb load spikes.

ACE Question 299

Single page →
Topic 1 · Question 299

Your company has many legacy third-party applications that rely on a shared NFS server for file sharing between these workloads. You want to modernize the NFS server by using a Google Cloud managed service. You need to select the solution that requires the least amount of change to the application. What should you do?

  • ACreate a Compute Engine instance and configure an NFS server on the instance. Point all NFS mounts to the Compute Engine instance.
  • BDeploy a Filestore instance. Replace all NFS mounts with a Filestore mount. (correct answer)
  • CConfigure Firestore. Configure all applications to use Firestore instead of the NFS server.
  • DCreate a Cloud Storage bucket. Configure all applications to use Cloud Storage client libraries instead of the NFS server.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Deploy a Filestore instance. Replace all NFS mounts with a Filestore mount.

Explanation

Filestore provides fully managed NFS file storage that multiple VMs can mount concurrently.

ACE Question 300

Single page →
Topic 1 · Question 300

Your company is seeking a scalable solution to retain and explore application logs hosted on Compute Engine. You must be able to analyze your logs with SQL queries, and you want to be able to create charts to identify patterns and trends in your logs over time. You want to follow Google-recommended practices and minimize your operational costs. What should you do?

  • AUse a custom script to push your application logs to BigQuery for exploration.
  • BIngest your application logs to Cloud Logging by using Ops Agent, and explore your logs in Logs Explorer.
  • CIngest your application logs to Cloud Logging by using Ops Agent, and explore your logs with Log Analytics. (correct answer)
  • DUse a custom script to push your application logs to Cloud SQL for exploration.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Ingest your application logs to Cloud Logging by using Ops Agent, and explore your logs with Log Analytics.

Explanation

Cloud Logging centralizes, stores, and analyzes logs across services.

Showing questions 281–300 of 334 · Page 15 of 17