🔍

ACE — questions

Page 8 of 17 · 334 total questions.

ACE Question 141

Single page →
Topic 1 · Question 141

You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?

  • AConfigure Billing Data Export to BigQuery and visualize the data in Data Studio. (correct answer)
  • BVisit the Cost Table page to get a CSV export and visualize it using Data Studio.
  • CFill all resources in the Pricing Calculator to get an estimate of the monthly cost.
  • DUse the Reports view in the Cloud Billing Console to view the desired cost information.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure Billing Data Export to BigQuery and visualize the data in Data Studio.

Explanation

BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage.

ACE Question 142

Single page →
Topic 1 · Question 142

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

  • ACreate the instance without a public IP address. (correct answer)
  • BCreate the instance with Private Google Access enabled.
  • CCreate a deny-all egress firewall rule on the VPC network.
  • DCreate a route on the VPC to route all traffic to the instance over the VPN tunnel.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create the instance without a public IP address.

ACE Question 143

Single page →
Topic 1 · Question 143

Your team maintains the infrastructure for your organization. The current infrastructure requires changes. You need to share your proposed changes with the rest of the team. You want to follow Google's recommended best practices. What should you do?

  • AUse Deployment Manager templates to describe the proposed changes and store them in a Cloud Storage bucket.
  • BUse Deployment Manager templates to describe the proposed changes and store them in Cloud Source Repositories. (correct answer)
  • CApply the changes in a development environment, run gcloud compute instances list, and then save the output in a shared Storage bucket.
  • DApply the changes in a development environment, run gcloud compute instances list, and then save the output in Cloud Source Repositories.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Deployment Manager templates to describe the proposed changes and store them in Cloud Source Repositories.

Explanation

Deployment Manager provisions Google Cloud infrastructure as code.

ACE Question 144

Single page →
Topic 1 · Question 144

You have a Compute Engine instance hosting an application used between 9 AM and 6 PM on weekdays. You want to back up this instance daily for disaster recovery purposes. You want to keep the backups for 30 days. You want the Google-recommended solution with the least management overhead and the least number of services. What should you do?

  • A1. Update your instances' metadata to add the following value: snapshot""schedule: 0 1 * * * 2. Update your instances' metadata to add the following value: snapshot""retention: 30
  • B1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk. 2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters: - Schedule frequency: Daily - Start time: 1:00 AM "" 2:00 AM - Autodelete snapshots after: 30 days (correct answer)
  • C1. Create a Cloud Function that creates a snapshot of your instance's disk. 2. Create a Cloud Function that deletes snapshots that are older than 30 days. 3. Use Cloud Scheduler to trigger both Cloud Functions daily at 1:00 AM.
  • D1. Create a bash script in the instance that copies the content of the disk to Cloud Storage. 2. Create a bash script in the instance that deletes data older than 30 days in the backup Cloud Storage bucket. 3. Configure the instance's crontab to execute these scripts daily at 1:00 AM.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: 1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk. 2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters: - Schedule frequency: D...

Explanation

Compute Engine provides configurable virtual machines when you need full control of the OS.

ACE Question 145

Single page →
Topic 1 · Question 145

Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1`"standard`"2 nodes. You need to deploy additional pods requiring n2`"highmem`"16 nodes without any downtime. What should you do?

  • AUse gcloud container clusters upgrade. Deploy the new services.
  • BCreate a new Node Pool and specify machine type n2""highmem""16. Deploy the new pods. (correct answer)
  • CCreate a new cluster with n2""highmem""16 nodes. Redeploy the pods and delete the old cluster.
  • DCreate a new cluster with both n1""standard""2 and n2""highmem""16 nodes. Redeploy the pods and delete the old cluster.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a new Node Pool and specify machine type n2""highmem""16. Deploy the new pods.

ACE Question 146

Single page →
Topic 1 · Question 146

You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?

  • ACreate a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
  • BCreate a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
  • CCreate a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
  • DCreate two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.

Explanation

Cloud Storage provides durable, scalable object storage that is fully managed. Cloud Bigtable is a managed, low-latency NoSQL wide-column store for very high-throughput workloads. BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage.

ACE Question 147

Single page →
Topic 1 · Question 147

You are hosting an application from Compute Engine virtual machines (VMs) in us`"central1`"a. You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?

  • A"" Create Compute Engine resources in us""central1""b. "" Balance the load across both us""central1""a and us""central1""b. (correct answer)
  • B"" Create a Managed Instance Group and specify us""central1""a as the zone. "" Configure the Health Check with a short Health Interval.
  • C"" Create an HTTP(S) Load Balancer. "" Create one or more global forwarding rules to direct traffic to your VMs.
  • D"" Perform regular backups of your application. "" Create a Cloud Monitoring Alert and be notified if your application becomes unavailable. "" Restore from backups when notified.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: "" Create Compute Engine resources in us""central1""b. "" Balance the load across both us""central1""a and us""central1""b.

Explanation

Compute Engine provides configurable virtual machines when you need full control of the OS. This option delivers the requirement at the lowest cost.

ACE Question 148

Single page →
Topic 1 · Question 148

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

  • AIn the console, validate which SSH keys have been stored as project-wide keys.
  • BNavigate to Identity-Aware Proxy and check the permissions for these resources.
  • CEnable Audit Logs on the IAM & admin page for all resources, and validate the results.
  • DUse the command gcloud projects get""iam""policy to view the current role assignments. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use the command gcloud projects get""iam""policy to view the current role assignments.

Explanation

Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

ACE Question 149

Single page →
Topic 1 · Question 149

You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?

  • ACreate a new subnet in the same region as the subnet being used.
  • BAdd an alias IP range to the subnet used by the GKE clusters.
  • CCreate a new VPC, and set up VPC peering with the existing VPC.
  • DExpand the CIDR range of the relevant subnet for the cluster. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Expand the CIDR range of the relevant subnet for the cluster.

ACE Question 150

Single page →
Topic 1 · Question 150

You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?

  • ARun a test using simulated maintenance events. If the test is successful, use preemptible N1 Standard VMs when running future jobs. (correct answer)
  • BRun a test using simulated maintenance events. If the test is successful, use N1 Standard VMs when running future jobs.
  • CRun a test using a managed instance group. If the test is successful, use N1 Standard VMs in the managed instance group when running future jobs.
  • DRun a test using N1 standard VMs instead of N2. If the test is successful, use N1 Standard VMs when running future jobs.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Run a test using simulated maintenance events. If the test is successful, use preemptible N1 Standard VMs when running future jobs.

Explanation

Preemptible/Spot VMs use spare capacity at a large discount for fault-tolerant, interruptible work. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

ACE Question 151

Single page →
Topic 1 · Question 151

You are working with a user to set up an application in a new VPC behind a firewall. The user is concerned about data egress. You want to configure the fewest open egress ports. What should you do?

  • ASet up a low-priority (65534) rule that blocks all egress and a high-priority rule (1000) that allows only the appropriate ports. (correct answer)
  • BSet up a high-priority (1000) rule that pairs both ingress and egress ports.
  • CSet up a high-priority (1000) rule that blocks all egress and a low-priority (65534) rule that allows only the appropriate ports.
  • DSet up a high-priority (1000) rule to allow the appropriate ports.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Set up a low-priority (65534) rule that blocks all egress and a high-priority rule (1000) that allows only the appropriate ports.

ACE Question 152

Single page →
Topic 1 · Question 152

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

  • AEnable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
  • BTag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
  • CSet up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
  • DAsk the operations partner to generate SSH key pairs, and add the public keys to the VM instances. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

ACE Question 153

Single page →
Topic 1 · Question 153

You have created a code snippet that should be triggered whenever a new file is uploaded to a Cloud Storage bucket. You want to deploy this code snippet. What should you do?

  • AUse App Engine and configure Cloud Scheduler to trigger the application using Pub/Sub.
  • BUse Cloud Functions and configure the bucket as a trigger resource. (correct answer)
  • CUse Google Kubernetes Engine and configure a CronJob to trigger the application using Pub/Sub.
  • DUse Dataflow as a batch job, and configure the bucket as a data source.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Cloud Functions and configure the bucket as a trigger resource.

Explanation

Cloud Functions runs event-driven code without managing servers and scales automatically.

ACE Question 154

Single page →
Topic 1 · Question 154

You have been asked to set up Object Lifecycle Management for objects stored in storage buckets. The objects are written once and accessed frequently for 30 days. After 30 days, the objects are not read again unless there is a special need. The objects should be kept for three years, and you need to minimize cost. What should you do?

  • ASet up a policy that uses Nearline storage for 30 days and then moves to Archive storage for three years.
  • BSet up a policy that uses Standard storage for 30 days and then moves to Archive storage for three years. (correct answer)
  • CSet up a policy that uses Nearline storage for 30 days, then moves the Coldline for one year, and then moves to Archive storage for two years.
  • DSet up a policy that uses Standard storage for 30 days, then moves to Coldline for one year, and then moves to Archive storage for two years.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Set up a policy that uses Standard storage for 30 days and then moves to Archive storage for three years. This option delivers the requirement at the lowest cost.

ACE Question 155

Single page →
Topic 1 · Question 155

You are storing sensitive information in a Cloud Storage bucket. For legal reasons, you need to be able to record all requests that read any of the stored data. You want to make sure you comply with these requirements. What should you do?

  • AEnable the Identity Aware Proxy API on the project.
  • BScan the bucket using the Data Loss Prevention API.
  • CAllow only a single Service Account access to read the data.
  • DEnable Data Access audit logs for the Cloud Storage API. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Enable Data Access audit logs for the Cloud Storage API.

Explanation

Cloud Storage provides durable, scalable object storage that is fully managed.

ACE Question 156

Single page →
Topic 1 · Question 156

You are the team lead of a group of 10 developers. You provided each developer with an individual Google Cloud Project that they can use as their personal sandbox to experiment with different Google Cloud solutions. You want to be notified if any of the developers are spending above $500 per month on their sandbox environment. What should you do?

  • ACreate a single budget for all projects and configure budget alerts on this budget.
  • BCreate a separate billing account per sandbox project and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per billing account.
  • CCreate a budget per project and configure budget alerts on all of these budgets. (correct answer)
  • DCreate a single billing account for all sandbox projects and enable BigQuery billing exports. Create a Data Studio dashboard to plot the spending per project.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a budget per project and configure budget alerts on all of these budgets.

ACE Question 157

Single page →
Topic 1 · Question 157

You are deploying a production application on Compute Engine. You want to prevent anyone from accidentally destroying the instance by clicking the wrong button. What should you do?

  • ADisable the flag "Delete boot disk when instance is deleted."
  • BEnable delete protection on the instance. (correct answer)
  • CDisable Automatic restart on the instance.
  • DEnable Preemptibility on the instance.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable delete protection on the instance.

ACE Question 158

Single page →
Topic 1 · Question 158

Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the production services in order to perform their job. You want to prevent Google Cloud product changes from broadening their permissions in the future. You want to follow Google-recommended practices. What should you do?

  • AGrant all members of the DevOps team the role of Project Editor on the organization level.
  • BGrant all members of the DevOps team the role of Project Editor on the production project.
  • CCreate a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project. (correct answer)
  • DCreate a custom role that combines the required permissions. Grant the DevOps team the custom role on the organization level.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project.

ACE Question 159

Single page →
Topic 1 · Question 159 · Select all that apply

You are building an application that processes data files uploaded from thousands of suppliers. Your primary goals for the application are data security and the expiration of aged data. You need to design the application to: * Restrict access so that suppliers can access only their own data. * Give suppliers write access to data only for 30 minutes. * Delete data that is over 45 days old. You have a very short development cycle, and you need to make sure that the application requires minimal maintenance. Which two strategies should you use? (Choose two.)

  • ABuild a lifecycle policy to delete Cloud Storage objects after 45 days. (correct answer)
  • BUse signed URLs to allow suppliers limited time access to store their objects. (correct answer)
  • CSet up an SFTP server for your application, and create a separate user for each supplier.
  • DBuild a Cloud function that triggers a timer of 45 days to delete objects that have expired.
  • EDevelop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than 45 days.
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: Build a lifecycle policy to delete Cloud Storage objects after 45 days. Option B: Use signed URLs to allow suppliers limited time access to store their objects.

Explanation

Cloud Storage provides durable, scalable object storage that is fully managed.

ACE Question 160

Single page →
Topic 1 · Question 160

Your company wants to standardize the creation and management of multiple Google Cloud resources using Infrastructure as Code. You want to minimize the amount of repetitive code needed to manage the environment. What should you do?

  • ADevelop templates for the environment using Cloud Deployment Manager. (correct answer)
  • BUse curl in a terminal to send a REST request to the relevant Google API for each individual resource.
  • CUse the Cloud Console interface to provision and manage all related resources.
  • DCreate a bash script that contains all requirement steps as gcloud commands.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Develop templates for the environment using Cloud Deployment Manager.

Explanation

Cloud Deploy manages continuous delivery to GKE and other runtimes with promotion and rollback. Deployment Manager provisions Google Cloud infrastructure as code.

Showing questions 141–160 of 334 · Page 8 of 17