ACE practice questions 31–40

1. Question 31 · 325 in bank

   You have designed a solution on Google Cloud that uses multiple Google Cloud products. Your company has asked you to estimate the costs of the solution. You need to provide estimates for the monthly total cost. What should you do?

   • AFor each Google Cloud product in the solution, review the pricing details on the products pricing page. Use the pricing calculator to total the monthly costs for each Google Cloud product.
   • BFor each Google Cloud product in the solution, review the pricing details on the products pricing page. Create a Google Sheet that summarizes the expected monthly costs for each product.
   • CProvision the solution on Google Cloud. Leave the solution provisioned for 1 week. Navigate to the Billing Report page in the Cloud Console. Multiply the 1 week cost to determine the monthly costs.
   • DProvision the solution on Google Cloud. Leave the solution provisioned for 1 week. Use Cloud Monitoring to determine the provisioned and used resource amounts. Multiply the 1 week cost to determine the monthly costs.

   Show answer

   Answer: A

   Explanation

   Correct is A. It is the main purpose of Pricing calculator. You have to check pricing details on products pages to understand what charges apply and how to size it. B. It works bur it is more complicated than A. C. It works but you need to wait one week and you pay for this. Moreoever, you won't be in production so somes charges may lack like net egress charges D. No, because Cloud Monitoring can't be used for billing purpose

   Source: Adapted from community discussion — jcloud965

   References

   • Google Cloud documentation

   Next question

2. Question 32 · 325 in bank

   You have an application that receives SSL-encrypted TCP traffic on port 443. Clients for this application are located all over the world. You want to minimize latency for the clients. Which load balancing option should you use?

   • AHTTPS Load Balancer
   • BNetwork Load Balancer
   • CSSL Proxy Load Balancer
   • DInternal TCP/UDP Load Balancer. Add a firewall rule allowing ingress traffic from 0.0.0.0/0 on the target instances.

   Show answer

   Answer: C

   Explanation

   SSL Proxy Load Balancing support for the following ports: 25, 43, 110, 143, 195, 443, 465, 587, 700, 993, 995, 1883, 3389, 5222, 5432, 5671, 5672, 5900, 5901, 6379, 8085, 8099, 9092, 9200, and 9300. When you use Google- managed SSL certificates with SSL Proxy Load Balancing, the frontend port for traffic must be 443 to enable the Google-managed SSL certificates to be provisioned and renewed.

   Source: Adapted from community discussion — Bituz

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 33 · 325 in bank

   You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?

   • AIncrease the size of the disk to 1 TB.
   • BIncrease the allocated CPU to the instance.
   • CMigrate to use a Local SSD on the instance.
   • DMigrate to use a Regional SSD on the instance.

   Show answer

   Answer: C

   Explanation

   Correct Answer is (C): Performance Standard persistent disks are efficient and economical for handling sequential read/write operations, but they aren't optimized to handle high rates of random input/output operations per second (IOPS). If your apps require high rates of random IOPS, use SSD persistent disks. SSD persistent disks are designed for single-digit millisecond latencies. Observed latency is application specific. https://cloud.google.com/compute/docs/disks#performance

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 34 · 325 in bank

   Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

   • AModify the existing subnet range to 172.16.20.0/24.
   • BCreate a new Secondary IP Range in the VPC and configure the VMs to use that range.
   • CCreate a new VPC network for the VMs. Enable VPC Peering between the VMs' VPC network and the Dataproc cluster VPC network.
   • DCreate a new VPC network for the VMs with a subnet of 172.32.0.0/16. Enable VPC network Peering between the Dataproc VPC network and the VMs VPC network. Configure a custom Route exchange.

   Show answer

   Answer: A

   Explanation

   Correction. Correct Answers is (A): gcloud compute networks subnets expand-ip-range NAME gcloud compute networks subnets expand-ip-range - expand the IP range of a Compute Engine subnetwork

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation

   Next question

5. Question 35 · 325 in bank

   Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?

   • ADownload and deploy the Jenkins Java WAR to App Engine Standard.
   • BCreate a new Compute Engine instance and install Jenkins through the command line interface.
   • CCreate a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.
   • DUse GCP Marketplace to launch the Jenkins solution.

   Show answer

   Answer: D

   Explanation

   The correct answer is Option D. By using GCP Marketplace to launch the Jenkins solution, you can quickly deploy a Jenkins server with minimal steps. Option A involves deploying the Jenkins Java WAR to App Engine Standard, which requires more steps and may not be suitable for your requirements. Option B involves creating a new Compute Engine instance and manually installing Jenkins, which also requires more steps. Option C involves creating a Kubernetes cluster and creating a deployment with the Jenkins Docker image, which again involves more steps and may not be the most efficient solution.

   Source: Adapted from community discussion — Buruguduystunstugudunstuy

   Next question

6. Question 36 · 325 in bank

   You manage an App Engine Service that aggregates and visualizes data from BigQuery. The application is deployed with the default App Engine Service account. The data that needs to be visualized resides in a different project managed by another team. You do not have access to this project, but you want your application to be able to read data from the BigQuery dataset. What should you do?

   • AAsk the other team to grant your default App Engine Service account the role of BigQuery Job User.
   • BAsk the other team to grant your default App Engine Service account the role of BigQuery Data Viewer.
   • CIn Cloud IAM of your project, ensure that the default App Engine service account has the role of BigQuery Data Viewer.
   • DIn Cloud IAM of your project, grant a newly created service account from the other team the role of BigQuery Job User in your project.

   Show answer

   Answer: B

   Explanation

   Correct Answer is (B): Sorry, I copied/pasted the the wrong statement. This is the proper explanation regarding to Big Query Data Viewer Role. The resource that you need to get access is in the other project. roles/bigquery.dataViewer BigQuery Data Viewer When applied to a table or view, this role provides permissions to: Read data and metadata from the table or view. This role cannot be applied to individual models or routines. When applied to a dataset, this role provides permissions to: Read the dataset's metadata and list tables in the dataset. Read data and metadata from the dataset's tables. When applied at the project or organization level, this role can also enumerate all datasets in the project. Additional roles, however, are necessary to allow the running of jobs.

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation

   Next question

7. Question 37 · 325 in bank

   You need to create a copy of a custom Compute Engine virtual machine (VM) to facilitate an expected increase in application traffic due to a business acquisition. What should you do?

   • ACreate a Compute Engine snapshot of your base VM. Create your images from that snapshot.
   • BCreate a Compute Engine snapshot of your base VM. Create your instances from that snapshot.
   • CCreate a custom Compute Engine image from a snapshot. Create your images from that image.
   • DCreate a custom Compute Engine image from a snapshot. Create your instances from that image.

   Show answer

   Answer: D

   Explanation

   Correct Answer is (D): Preparing your instance for an image You can create an image from a disk even while it is attached to a running VM instance. However, your image will be more reliable if you put the instance in a state that is easier for the image to capture. Use one of the following processes to prepare your boot disk for the image: Stop the instance so that it can shut down and stop writing any data to the persistent disk. If you can't stop your instance before you create the image, minimize the amount of writes to the disk and sync your file system. Pause apps or operating system processes that write data to that persistent disk. Run an app flush to disk if necessary. For example, MySQL has a FLUSH statement. Other apps might have similar processes. Stop your apps from writing to your persistent disk. Run sudo sync. After you prepare the instance, create the image. https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#prepare_instance_for_image

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

8. Question 38 · 325 in bank

   You have deployed an application on a single Compute Engine instance. The application writes logs to disk. Users start reporting errors with the application. You want to diagnose the problem. What should you do?

   • ANavigate to Cloud Logging and view the application logs.
   • BConnect to the instance's serial console and read the application logs.
   • CConfigure a Health Check on the instance and set a Low Healthy Threshold value.
   • DInstall and configure the Cloud Logging Agent and view the logs from Cloud Logging.

   Show answer

   Answer: D

   Explanation

   Correct Answer is (D): In its default configuration, the Logging agent streams logs from common third-party applications and system software to Logging; review the list of default logs. You can configure the agent to stream additional logs; go to Configuring the Logging agent for details on agent configuration and operation. It is a best practice to run the Logging agent on all your VM instances. The agent runs under both Linux and Windows. To install the Logging agent, go to Installing the agent. https://cloud.google.com/logging/docs/agent

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 39 · 325 in bank

   An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

   • AMove both projects under the same folder.
   • BGrant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
   • CCreate a Shared VPC network between both projects. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
   • DMake corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name. Share the folder with the IoT team.

   Show answer

   Answer: B

   Explanation

   Correct Answer is (B): Predefined roles The following table describes Identity and Access Management (IAM) roles that are associated with Cloud Storage and lists the permissions that are contained in each role. Unless otherwise noted, these roles can be applied either to entire projects or specific buckets. Storage Object Creator (roles/storage.objectCreator) Allows users to create objects. Does not give permission to view, delete, or overwrite objects. https://cloud.google.com/storage/docs/access-control/iam-roles#standard-roles

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation

   Next question

10. Question 40 · 325 in bank

    You built an application on your development laptop that uses Google Cloud services. Your application uses Application Default Credentials for authentication and works fine on your development laptop. You want to migrate this application to a Compute Engine virtual machine (VM) and set up authentication using Google- recommended practices and minimal changes. What should you do?

    • AAssign appropriate access for Google services to the service account used by the Compute Engine VM.
    • BCreate a service account with appropriate access for Google services, and configure the application to use this account.
    • CStore credentials for service accounts with appropriate access for Google services in a config file, and deploy this config file with your application.
    • DStore credentials for your user account with appropriate access for Google services in a config file, and deploy this config file with your application.

    Show answer

    Answer: A

    Explanation

    Correct Answer is (B): Best practices In general, Google recommends that each instance that needs to call a Google API should run as a service account with the minimum permissions necessary for that instance to do its job. In practice, this means you should configure service accounts for your instances with the following process: Create a new service account rather than using the Compute Engine default service account. Grant IAM roles to that service account for only the resources that it needs. Configure the instance to run as that service account. Grant the instance the https://www.googleapis.com/auth/cloud-platform scope to allow full access to all Google Cloud APIs, so that the IAM permissions of the instance are completely determined by the IAM roles of the service account. Avoid granting more access than necessary and regularly check your service account permissions to make sure they are up-to-date. https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances#best_practices

    Source: Adapted from community discussion — ESP_SAP

    References

    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

ACE practice, question 31. 325 questions available.