ACE practice questions 251–260

1. Question 251 · 325 in bank

   You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?

   • ADeploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.
   • BDeploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.
   • CDeploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.
   • DDeploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.

   Show answer

   Answer: D

   Explanation

   Splitting the question to the key requirements 1. new version of an application hosted in an App Engine environment. 2. test the new version with 1% of users App engine supports versioning and traffic splitting so no need to involve anything else (source - https://cloud.google.com/appengine#all-features) A. ....'Google Kubernetes Engine'.... - No need to involve GKE. Not the right option B. ....'Compute Engine instance'.... - No need to involve Compute Engine. C. ....'Separate app in App Engine'....- No need to deploy as a separate app. versioning is supported already. Not the right option. D. This is the right answer.

   Source: Adapted from community discussion — mohdafiuddin

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 252 · 325 in bank

   You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes. Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?

   • AFill in local SSD. Fill in persistent disk storage and snapshot storage.
   • BFill in local SSD. Add estimated cost for cluster management.
   • CSelect Add GPUs. Fill in persistent disk storage and snapshot storage.
   • DSelect Add GPUs. Add estimated cost for cluster management.

   Show answer

   Answer: A

   Explanation

   This one is Tricky, local SSD is require for High IOPS - https://cloud.google.com/compute/docs/disks/local-ssd , but it say using disk snapshots. A is correct.

   Source: Adapted from community discussion — dan80

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 253 · 325 in bank

   You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?

   • ACreate a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.
   • BCreate a Kubernetes Service of type ClusterIP for your application. Configure the public DNS name of your application using the IP of this Service.
   • CCreate a Kubernetes Service of type NodePort to expose the application on port 443 of each node of the Kubernetes cluster. Configure the public DNS name of your application with the IP of every node of the cluster to achieve load-balancing.
   • DCreate a HAProxy pod in the cluster to load-balance the traffic to all the pods of the application. Forward the public traffic to HAProxy with an iptable rule. Configure the DNS name of your application using the public IP of the node HAProxy is running on.

   Show answer

   Answer: A

   Explanation

   HAProxy is HTTP only, doesnt support HTTPS, so you can reject option D https://www.haproxy.org/#desc Cluster IP - is an internal IP, you cannot expose public externally. reject option B out of option A and C C, port 443 is https but public DNS is not going to give you a load balancing A is the right choice, kubernets ingress exposes HTTPS https://kubernetes.io/docs/concepts/services-networking/ingress/ and cloud load balancer is the right choice which will help to expose the app to public

   Source: Adapted from community discussion — arsav

   References

   • Kubernetes documentation
   • Google Cloud documentation
   • Kubernetes documentation
   • Google Cloud documentation

   Next question

4. Question 254 · 325 in bank

   You need to enable traffic between multiple groups of Compute Engine instances that are currently running two different GCP projects. Each group of Compute Engine instances is running in its own VPC. What should you do?

   • AVerify that both projects are in a GCP Organization. Create a new VPC and add all instances.
   • BVerify that both projects are in a GCP Organization. Share the VPC from one project and request that the Compute Engine instances in the other project use this shared VPC.
   • CVerify that you are the Project Administrator of both projects. Create two new VPCs and add all instances.
   • DVerify that you are the Project Administrator of both projects. Create a new VPC and add all instances.

   Show answer

   Answer: B

   Explanation

   Shared VPC allows an organization to connect resources from multiple projects to a common Virtual Private Cloud (VPC) network, so that they can communicate with each other securely and efficiently using internal IPs from that network. When you use Shared VPC, you designate a project as a host project and attach one or more other service projects to it. The VPC networks in the host project are called Shared VPC networks. Eligible resources from service projects can use subnets in the Shared VPC network

   Source: Adapted from community discussion — AzureDP900

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 255 · 325 in bank

   You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?

   • AReserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.
   • BReserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.
   • CUse the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.
   • DStart the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.

   Show answer

   Answer: A

   Explanation

   A IP 10.0.3.21 is internal by default, and to ensure that it will be static non-changing it should be selected as static internal ip address.

   Source: Adapted from community discussion — Khaled_Rashwan

   References

   • Google Cloud documentation

   Next question

6. Question 256 · 325 in bank

   You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items. How should you configure the auditor's permissions?

   • ACreate a custom role with view-only project permissions. Add the user's account to the custom role.
   • BCreate a custom role with view-only service permissions. Add the user's account to the custom role.
   • CSelect the built-in IAM project Viewer role. Add the user's account to this role.
   • DSelect the built-in IAM service Viewer role. Add the user's account to this role.

   Show answer

   Answer: C

   Explanation

   C is correct roles/Viewer role provides access to all resources under the projects but do not alter the state of these resources

   Source: Adapted from community discussion — cloudenthu01

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 257 · 325 in bank

   You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?

   • AAsk your ML team to add the ג€accelerator: gpuג€ annotation to their pod specification.
   • BRecreate all the nodes of the GKE cluster to enable GPUs on all of them.
   • CCreate your own Kubernetes cluster on top of Compute Engine with nodes that have GPUs. Dedicate this cluster to your ML team.
   • DAdd a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.

   Show answer

   Answer: D

   Explanation

   D. Add a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.

   Source: Adapted from community discussion — glam

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

8. Question 258 · 325 in bank

   Your VMs are running in a subnet that has a subnet mask of 255.255.255.240. The current subnet has no more free IP addresses and you require an additional 10 IP addresses for new VMs. The existing and new VMs should all be able to reach each other without additional routes. What should you do?

   • AUse gcloud to expand the IP range of the current subnet.
   • BDelete the subnet, and recreate it using a wider range of IP addresses.
   • CCreate a new project. Use Shared VPC to share the current network with the new project.
   • DCreate a new subnet with the same starting IP but a wider range to overwrite the current subnet.

   Show answer

   Answer: A

   Explanation

   A is correct: The primary IP range for the subnet can be expanded, but not replaced or shrunk, after the subnet has been created

   Source: Adapted from community discussion — Ciumela

   References

   • Google Cloud documentation

   Next question

9. Question 259 · 325 in bank

   Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?

   • AEnable Cloud Identity in the GCP Console for your domain.
   • BGrant them the required IAM roles using their G Suite email address.
   • CCreate a CSV sheet with all users' email addresses. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.
   • DIn the G Suite console, add the users to a special group called cloud-console-users@yourdomain.com. Rely on the default behavior of the Cloud Platform to grant users access if they are members of this group.

   Show answer

   Answer: B

   Explanation

   B is correct: To actively adopt the Organization resource, the G Suite or Cloud Identity super admins need to assign the Organization Administrator Cloud IAM role to a user or group

   Source: Adapted from community discussion — Ciumela

   Next question

10. Question 260 · 325 in bank

    You have a Google Cloud Platform account with access to both production and development projects. You need to create an automated process to list all compute instances in development and production projects on a daily basis. What should you do?

    • ACreate two configurations using gcloud config. Write a script that sets configurations as active, individually. For each configuration, use gcloud compute instances list to get a list of compute resources.
    • BCreate two configurations using gsutil config. Write a script that sets configurations as active, individually. For each configuration, use gsutil compute instances list to get a list of compute resources.
    • CGo to Cloud Shell and export this information to Cloud Storage on a daily basis.
    • DGo to GCP Console and export this information to Cloud SQL on a daily basis.

    Show answer

    Answer: A

    Explanation

    Correct Answer is (A): gcloud compute instances list - list Google Compute Engine instances gcloud compute instances list displays all Google Compute Engine instances in a project. By default, instances from all zones are listed. The results can be narrowed down using a filter: --filter="zone:( ZONE … )". https://cloud.google.com/sdk/gcloud/reference/compute/instances/list

    Source: Adapted from community discussion — ESP_SAP

    References

    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

ACE practice, question 251. 325 questions available.