ACE practice questions 21–30

1. Question 21 · 325 in bank

   An employee was terminated, but their access to Google Cloud was not removed until 2 weeks later. You need to find out if this employee accessed any sensitive customer information after their termination. What should you do?

   • AView System Event Logs in Cloud Logging. Search for the user's email as the principal.
   • BView System Event Logs in Cloud Logging. Search for the service account associated with the user.
   • CView Data Access audit logs in Cloud Logging. Search for the user's email as the principal.
   • DView the Admin Activity log in Cloud Logging. Search for the service account associated with the user.

   Show answer

   Answer: C

   Explanation

   C is the correct answer. We are trying to find out if any sensitive data was accessed. Data access logs are the only logs that show this. C is the only option that mentions data access logs.

   Source: Adapted from community discussion — rsuresh27

   References

   • Google Cloud documentation

   Next question

2. Question 22 · 325 in bank

   You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?

   • AUse permissions in your role that use the 'supported' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
   • BUse permissions in your role that use the 'supported' support level for role permissions. Set the role stage to BETA while testing the role permissions.
   • CUse permissions in your role that use the 'testing' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
   • DUse permissions in your role that use the 'testing' support level for role permissions. Set the role stage to BETA while testing the role permissions.

   Show answer

   Answer: A

   Explanation

   You need a custom role with permissions supported in prod and you want to publish the status of the role. https://cloud.google.com/iam/docs/custom-roles-permissions-support SUPPORTED The permission is fully supported in custom roles. TESTING The permission is being tested to check its compatibility with custom roles. You can include the permission in custom roles, but you might see unexpected behavior. Not recommended for production use. NOT_SUPPORTED The permission is not supported in custom roles. You can't use TESTING as it is not good for prod. And you need first version which should be ALPHA. Answer should be A.

   Source: Adapted from community discussion — raksteer

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 23 · 325 in bank

   Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the data. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?

   • AUpload the data to BigQuery using the bq command line tool.
   • BUpload the data to Cloud Storage using the gsutil command line tool.
   • CUpload the data into Cloud SQL using the import function in the console.
   • DUpload the data into Cloud Spanner using the import function in the console.

   Show answer

   Answer: B

   Explanation

   Google Cloud Storage (GCS) is the recommended service for storing unstructured data like files, images, and backups. If you have large quantities of unstructured data in different file formats that need to be processed with ETL (Extract, Transform, Load) transformations and then processed by a Dataflow job, the typical workflow is to store the raw data in Cloud Storage. Once the data is in Cloud Storage, you can easily access it and perform ETL transformations using Google

   Source: Adapted from community discussion — cooldude26

   Next question

4. Question 24 · 325 in bank

   You have a Dockerfile that you need to deploy on Kubernetes Engine. What should you do?

   • AUse kubectl app deploy <dockerfilename>.
   • BUse gcloud app deploy <dockerfilename>.
   • CCreate a docker image from the Dockerfile and upload it to Container Registry. Create a Deployment YAML file to point to that image. Use kubectl to create the deployment with that file.
   • DCreate a docker image from the Dockerfile and upload it to Cloud Storage. Create a Deployment YAML file to point to that image. Use kubectl to create the deployment with that file.

   Show answer

   Answer: C

   Explanation

   The correct answer is Option C. To deploy a Docker container on Kubernetes Engine, you should first create a Docker image from the Dockerfile and push it to Container Registry, which is a fully-managed Docker container registry that makes it easy for you to store, manage, and deploy Docker container images. Then, you can create a Deployment YAML file that specifies the image to use and other desired deployment options, and use the kubectl command-line tool to create the deployment based on the YAML file. Option A is incorrect because kubectl app deploy is not a valid command. Option B is incorrect because gcloud app deploy is used to deploy applications to App Engine, not Kubernetes Engine. Option D is incorrect because it involves storing the image in Cloud Storage rather than Container Registry. https://cloud.google.com/kubernetes-engine/docs/how-to/deploying-a-container

   Source: Adapted from community discussion — Buruguduystunstugudunstuy

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Kubernetes documentation

   Next question

5. Question 25 · 325 in bank

   You need to manage multiple Google Cloud projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple projects. What should you do?

   • A1. Create a configuration for each project you need to manage. 2. Activate the appropriate configuration when you work with each of your assigned Google Cloud projects.
   • B1. Create a configuration for each project you need to manage. 2. Use gcloud init to update the configuration values when you need to work with a non-default project
   • C1. Use the default configuration for one project you need to manage. 2. Activate the appropriate configuration when you work with each of your assigned Google Cloud projects.
   • D1. Use the default configuration for one project you need to manage. 2. Use gcloud init to update the configuration values when you need to work with a non-default project.

   Show answer

   Answer: A

   Explanation

   A Cloud SDK comes with a default configuration. To create multiple configurations, use gcloud config configurations create, and gcloud config configurations activate to switch between them. https://cloud.google.com/sdk/gcloud/reference/config/set

   Source: Adapted from community discussion — SSunny

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

6. Question 26 · 325 in bank

   Your managed instance group raised an alert stating that new instance creation has failed to create new instances. You need to maintain the number of running instances specified by the template to be able to process expected application traffic. What should you do?

   • ACreate an instance template that contains valid syntax which will be used by the instance group. Delete any persistent disks with the same name as instance names.
   • BCreate an instance template that contains valid syntax that will be used by the instance group. Verify that the instance name and persistent disk name values are not the same in the template.
   • CVerify that the instance template being used by the instance group contains valid syntax. Delete any persistent disks with the same name as instance names. Set the disks.autoDelete property to true in the instance template.
   • DDelete the current instance template and replace it with a new instance template. Verify that the instance name and persistent disk name values are not the same in the template. Set the disks.autoDelete property to true in the instance template.

   Show answer

   Answer: A

   Explanation

   Really tricky question. Ideal scenario would be 1. create new template, while creating ensure that in the new template disks.autoDelete=true, 3. delete existing persistent disks, 4. make rolling update ... In order to switch to new template we need "Rolling update". Unfortunately, it is not mentioned. With current options C - not correct, we cannot update existing template D - not correct, we cannot delete existing template when it is in use (just checked in GCP) (We need rolling update) B - will not solve our problem without Rolling update A - This is the only option (I know that it can be temporary) that will work without Rolling update according to https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-migs

   Source: Adapted from community discussion — TAvenger

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 27 · 325 in bank

   Your company is moving from an on-premises environment to Google Cloud. You have multiple development teams that use Cassandra environments as backend databases. They all need a development environment that is isolated from other Cassandra instances. You want to move to Google Cloud quickly and with minimal support effort. What should you do?

   • A1. Build an instruction guide to install Cassandra on Google Cloud. 2. Make the instruction guide accessible to your developers.
   • B1. Advise your developers to go to Cloud Marketplace. 2. Ask the developers to launch a Cassandra image for their development work.
   • C1. Build a Cassandra Compute Engine instance and take a snapshot of it. 2. Use the snapshot to create instances for your developers.
   • D1. Build a Cassandra Compute Engine instance and take a snapshot of it. 2. Upload the snapshot to Cloud Storage and make it accessible to your developers. 3. Build instructions to create a Compute Engine instance from the snapshot so that developers can do it themselves.

   Show answer

   Answer: B

   Explanation

   B - You can deploy Cassandra as a Service, called Astra, on the Google Cloud Marketplace. Not only do you get a unified bill for all GCP services, your Developers can now create Cassandra clusters on Google Cloud in minutes and build applications with Cassandra as a database as a service without the operational overhead of managing Cassandra

   Source: Adapted from community discussion — sudav

   References

   • cloud.google.com documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

8. Question 28 · 325 in bank

   You have a Compute Engine instance hosting a production application. You want to receive an email if the instance consumes more than 90% of its CPU resources for more than 15 minutes. You want to use Google services. What should you do?

   • A1. Create a consumer Gmail account. 2. Write a script that monitors the CPU usage. 3. When the CPU usage exceeds the threshold, have that script send an email using the Gmail account and smtp.gmail.com on port 25 as SMTP server.
   • B1. Create a Cloud Monitoring Workspace and associate your Google Cloud Platform (GCP) project with it. 2. Create a Cloud Monitoring Alerting Policy that uses the threshold as a trigger condition. 3. Configure your email address in the notification channel.
   • C1. Create a Cloud Monitoring Workspace and associate your GCP project with it. 2. Write a script that monitors the CPU usage and sends it as a custom metric to Cloud Monitoring. 3. Create an uptime check for the instance in Cloud Monitoring.
   • D1. In Cloud Logging, create a logs-based metric to extract the CPU usage by using this regular expression: CPU Usage: ([0-9] {1,3})% 2. In Cloud Monitoring, create an Alerting Policy based on this metric. 3. Configure your email address in the notification channel.

   Show answer

   Answer: B

   Explanation

   B By setting up a Cloud Monitoring Alerting Policy and configuring the notification channel to an email address, you can receive email alerts when the CPU usage exceeds the threshold that you set. This can be done by using Google Cloud's built-in monitoring and alerting features, which can be more reliable and easier to manage than setting up a custom script or using external email services.

   Source: Adapted from community discussion — Bobbybash

   Next question

9. Question 29 · 325 in bank

   You have an application that uses Cloud Spanner as a backend database. The application has a very predictable traffic pattern. You want to automatically scale up or down the number of Spanner nodes depending on traffic. What should you do?

   • ACreate a cron job that runs on a scheduled basis to review Cloud Monitoring metrics, and then resize the Spanner instance accordingly.
   • BCreate a Cloud Monitoring alerting policy to send an alert to oncall SRE emails when Cloud Spanner CPU exceeds the threshold. SREs would scale resources up or down accordingly.
   • CCreate a Cloud Monitoring alerting policy to send an alert to Google Cloud Support email when Cloud Spanner CPU exceeds your threshold. Google support would scale resources up or down accordingly.
   • DCreate a Cloud Monitoring alerting policy to send an alert to webhook when Cloud Spanner CPU is over or under your threshold. Create a Cloud Function that listens to HTTP and resizes Spanner resources accordingly.

   Show answer

   Answer: D

   Explanation

   D. Create a Cloud Monitoring alerting policy to send an alert to webhook when Cloud Spanner CPU is over or under your threshold. Create a Cloud Function that listens to HTTP and resizes Spanner resources accordingly.

   Source: Adapted from community discussion — GCP_Student1

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

10. Question 30 · 325 in bank

    Your company publishes large files on an Apache web server that runs on a Compute Engine instance. The Apache web server is not the only application running in the project. You want to receive an email when the egress network costs for the server exceed 100 dollars for the current month as measured by Google Cloud. What should you do?

    • ASet up a budget alert on the project with an amount of 100 dollars, a threshold of 100%, and notification type of ג€email.ג€
    • BSet up a budget alert on the billing account with an amount of 100 dollars, a threshold of 100%, and notification type of ג€email.ג€
    • CExport the billing data to BigQuery. Create a Cloud Function that uses BigQuery to sum the egress network costs of the exported billing data for the Apache web server for the current month and sends an email if it is over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.
    • DUse the Cloud Logging Agent to export the Apache web server logs to Cloud Logging. Create a Cloud Function that uses BigQuery to parse the HTTP response log data in Cloud Logging for the current month and sends an email if the size of all HTTP responses, multiplied by current Google Cloud egress prices, totals over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.

    Show answer

    Answer: C

    Explanation

    C. Export the billing data to BigQuery. Create a Cloud Function that uses BigQuery to sum the egress network costs of the exported billing data for the Apache web server for the current month and sends an email if it is over 100 dollars. Schedule the Cloud Function using Cloud Scheduler to run hourly.

    Source: Adapted from community discussion — GCP_Student1

    References

    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

ACE practice, question 21. 325 questions available.