ACE practice questions 111–120

1. Question 111 · 325 in bank

   You are building a multi-player gaming application that will store game information in a database. As the popularity of the application increases, you are concerned about delivering consistent performance. You need to ensure an optimal gaming performance for global users, without increasing the management complexity. What should you do?

   • AUse Cloud SQL database with cross-region replication to store game statistics in the EU, US, and APAC regions.
   • BUse Cloud Spanner to store user data mapped to the game statistics.
   • CUse BigQuery to store game statistics with a Redis on Memorystore instance in the front to provide global consistency.
   • DStore game statistics in a Bigtable database partitioned by username.

   Show answer

   Answer: B

   Explanation

   Among the options provided, the better answer for ensuring optimal gaming performance for global users without increasing management complexity would be option B Cloud Spanner is a globally distributed, horizontally scalable database service provided by Google Cloud Platform. It offers strong consistency guarantees, high availability, and automatic scaling. It offers the necessary features to ensure optimal gaming performance, global scalability, strong consistency, and automatic scaling, making it a suitable choice for storing user data mapped to game statistics.

   Source: Adapted from community discussion — MrJkr

   References

   • Google Cloud documentation

   Next question

2. Question 112 · 325 in bank

   You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible. Which range should you use?

   • A0.0.0.0/0
   • B10.0.0.0/8
   • C172.16.0.0/12
   • D192.168.0.0/16

   Show answer

   Answer: B

   Explanation

   B is correct to calculate the range size for a network: 10.0.0.0/x for example range= 2^(32-x) then the smaller x, the larger the range 0.0.0.0/0 is not a valid network ip but is the broadcast ip

   Source: Adapted from community discussion — Khaled_Rashwan

   Next question

3. Question 113 · 325 in bank

   You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps. What should you do?

   • AInstall a RDP client on your desktop. Verify that a firewall rule for port 3389 exists.
   • BInstall a RDP client in your desktop. Set a Windows username and password in the GCP Console. Use the credentials to log in to the instance.
   • CSet a Windows password in the GCP Console. Verify that a firewall rule for port 22 exists. Click the RDP button in the GCP Console and supply the credentials to log in.
   • DSet a Windows username and password in the GCP Console. Verify that a firewall rule for port 3389 exists. Click the RDP button in the GCP Console, and supply the credentials to log in.

   Show answer

   Answer: D

   Explanation

   I would say B is correct. RDP is enabled by default when you crate a Windows instance (no need to chek on it). Just make sure you install an RDP client ( chrome ext or RDP) and set windows password.

   Source: Adapted from community discussion — vnxt

   References

   • Google Cloud documentation

   Next question

4. Question 114 · 325 in bank

   You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

   • ACloud SQL
   • BFirestore
   • CCloud Spanner
   • DBigtable

   Show answer

   Answer: C

   Explanation

   Cloud Spanner because Relational database, scale across regions for workloads that have more stringent availability requirements, Handles large amounts of data and for high transactional consistency https://cloud.google.com/blog/topics/developers-practitioners/databases-google-cloud-part-2-options-glance/

   Source: Adapted from community discussion — Husni_adam

   References

   • Google Cloud documentation

   Next question

5. Question 115 · 325 in bank

   Your company has multiple projects linked to a single billing account in Google Cloud. You need to visualize the costs with specific metrics that should be dynamically calculated based on company-specific criteria. You want to automate the process. What should you do?

   • AIn the Google Cloud console, visualize the costs related to the projects in the Reports section.
   • BIn the Google Cloud console, visualize the costs related to the projects in the Cost breakdown section.
   • CIn the Google Cloud console, use the export functionality of the Cost table. Create a Looker Studio dashboard on top of the CSV export.
   • DConfigure Cloud Billing data export to BigQuery for the billing account. Create a Looker Studio dashboard on top of the BigQuery export.

   Show answer

   Answer: D

   Explanation

   Cloud Billing export to BigQuery enables you to export detailed Google Cloud billing data (such as usage, cost estimates, and pricing data) automatically throughout the day to a BigQuery dataset that you specify. Then you can access your Cloud Billing data from BigQuery for detailed analysis, or use a tool like Looker Studio to visualize your data.

   Source: Adapted from community discussion — scanner2

   References

   • Google Cloud documentation

   Next question

6. Question 116 · 325 in bank

   You have an application that runs on Compute Engine VM instances in a custom Virtual Private Cloud (VPC). Your company’s security policies only allow the use of internal IP addresses on VM instances and do not let VM instances connect to the internet. You need to ensure that the application can access a file hosted in a Cloud Storage bucket within your project. What should you do?

   • AEnable Private Service Access on the Cloud Storage Bucket.
   • BAdd storage.googleapis.com to the list of restricted services in a VPC Service Controls perimeter and add your project to the list of protected projects.
   • CEnable Private Google Access on the subnet within the custom VPC.
   • DDeploy a Cloud NAT instance and route the traffic to the dedicated IP address of the Cloud Storage bucket.

   Show answer

   Answer: C

   Explanation

   Cloud Storage is not a supported service for Private Service Access. Hence, A cannot be the answer. https://cloud.google.com/vpc/docs/private-services-access#private-services-supported-services VM instances that only have internal IP addresses (no external IP addresses) can use Private Google Access. They can reach the external IP addresses of Google APIs and services. If you disable Private Google Access, the VM instances can no longer reach Google APIs and services; they can only send traffic within the VPC network. https://cloud.google.com/vpc/docs/private-google-access

   Source: Adapted from community discussion — scanner2

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 117 · 325 in bank

   Your company completed the acquisition of a startup and is now merging the IT systems of both companies. The startup had a production Google Cloud project in their organization. You need to move this project into your organization and ensure that the project is billed to your organization. You want to accomplish this task with minimal effort. What should you do?

   • AUse the projects.move method to move the project to your organization. Update the billing account of the project to that of your organization.
   • BEnsure that you have an Organization Administrator Identity and Access Management (IAM) role assigned to you in both organizations. Navigate to the Resource Manager in the startup’s Google Cloud organization, and drag the project to your company's organization.
   • CCreate a Private Catalog for the Google Cloud Marketplace, and upload the resources of the startup's production project to the Catalog. Share the Catalog with your organization, and deploy the resources in your company’s project.
   • DCreate an infrastructure-as-code template for all resources in the project by using Terraform, and deploy that template to a new project in your organization. Delete the project from the startup’s Google Cloud organization.

   Show answer

   Answer: A

   Explanation

   Option A is correct as it suggests using the "projects.move" method provided by Google Cloud to move the project from the startup's organization to your organization. This method allows you to transfer the ownership and control of a project to another organization. By moving the project, you can ensure that it is under your organization's management. While the other options contain elements that may be relevant in certain scenarios, they do not directly address the requirement of moving the project and ensuring billing to your organization.

   Source: Adapted from community discussion — MrJkr

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

8. Question 118 · 325 in bank

   All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States (US). What should you do?

   • ACreate a folder to contain all the dev projects. Create an organization policy to limit resources in US locations.
   • BCreate an organization to contain all the dev projects. Create an Identity and Access Management (IAM) policy to limit the resources in US regions.
   • CCreate an Identity and Access Management (IAM) policy to restrict the resources locations in the US. Apply the policy to all dev projects.
   • DCreate an Identity and Access Management (IAM) policy to restrict the resources locations in all dev projects. Apply the policy to all dev roles.

   Show answer

   Answer: A

   Explanation

   Restricting resources creation in specific locations can be achieved by Organization policy. The Organization Policy Service gives you centralized and programmatic control over your organization's cloud resources. You can use "Google Cloud Platform - Resource Location Restriction" Organization policy constraint for the solution asked in the question. https://cloud.google.com/resource-manager/docs/organization-policy/overview https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints

   Source: Adapted from community discussion — scanner2

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 119 · 325 in bank

   You are configuring Cloud DNS. You want to create DNS records to point home.mydomain.com, mydomain.com, and www.mydomain.com to the IP address of your Google Cloud load balancer. What should you do?

   • ACreate one CNAME record to point mydomain.com to the load balancer, and create two A records to point WWW and HOME to mydomain.com respectively.
   • BCreate one CNAME record to point mydomain.com to the load balancer, and create two AAAA records to point WWW and HOME to mydomain.com respectively.
   • CCreate one A record to point mydomain.com to the load balancer, and create two CNAME records to point WWW and HOME to mydomain.com respectively.
   • DCreate one A record to point mydomain.com to the load balancer, and create two NS records to point WWW and HOME to mydomain.com respectively.

   Show answer

   Answer: C

   Explanation

   Record name | Type | Value mydomain.com | A | load balancer IP www.mydomain.com | CNAME | mydomain.com home.mydomain.com | CNAME | mydomain.com https://cloud.google.com/dns/docs/records-overview#supported_dns_record_types

   Source: Adapted from community discussion — scanner2

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

10. Question 120 · 325 in bank

    You have two subnets (subnet-a and subnet-b) in the default VPC. Your database servers are running in subnet-a. Your application servers and web servers are running in subnet-b. You want to configure a firewall rule that only allows database traffic from the application servers to the database servers. What should you do?

    • A• Create service accounts sa-app and sa-db. • Associate service account sa-app with the application servers and the service account sa-db with the database servers. • Create an ingress firewall rule to allow network traffic from source service account sa-app to target service account sa-db.
    • B• Create network tags app-server and db-server. • Add the app-server tag to the application servers and the db-server tag to the database servers. • Create an egress firewall rule to allow network traffic from source network tag app-server to target network tag db-server.
    • C• Create a service account sa-app and a network tag db-server. • Associate the service account sa-app with the application servers and the network tag db-server with the database servers. • Create an ingress firewall rule to allow network traffic from source VPC IP addresses and target the subnet-a IP addresses.
    • D• Create a network tag app-server and service account sa-db. • Add the tag to the application servers and associate the service account with the database servers. • Create an egress firewall rule to allow network traffic from source network tag app-server to target service account sa-db.

    Show answer

    Answer: A

    Explanation

    Both service accounts and network tags can be used for creating a Cloud Firewall rule. The prime word is "to allow network traffic from app server to database server" which is achievable by inbound/ingress rule and not egress rule. https://cloud.google.com/firewall/docs/firewalls#rule_assignment

    Source: Adapted from community discussion — scanner2

    References

    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

ACE practice, question 111. 325 questions available.