ACE practice questions 51–60

1. Question 51 · 325 in bank

   You have a Compute Engine instance hosting an application used between 9 AM and 6 PM on weekdays. You want to back up this instance daily for disaster recovery purposes. You want to keep the backups for 30 days. You want the Google-recommended solution with the least management overhead and the least number of services. What should you do?

   • A1. Update your instances' metadata to add the following value: snapshotג€"schedule: 0 1 * * * 2. Update your instances' metadata to add the following value: snapshotג€"retention: 30
   • B1. In the Cloud Console, go to the Compute Engine Disks page and select your instance's disk. 2. In the Snapshot Schedule section, select Create Schedule and configure the following parameters: - Schedule frequency: Daily - Start time: 1:00 AM ג€" 2:00 AM - Autodelete snapshots after: 30 days
   • C1. Create a Cloud Function that creates a snapshot of your instance's disk. 2. Create a Cloud Function that deletes snapshots that are older than 30 days. 3. Use Cloud Scheduler to trigger both Cloud Functions daily at 1:00 AM.
   • D1. Create a bash script in the instance that copies the content of the disk to Cloud Storage. 2. Create a bash script in the instance that deletes data older than 30 days in the backup Cloud Storage bucket. 3. Configure the instance's crontab to execute these scripts daily at 1:00 AM.

   Show answer

   Answer: B

   Explanation

   Correct Answer is (B): Creating scheduled snapshots for persistent disk This document describes how to create a snapshot schedule to regularly and automatically back up your zonal and regional persistent disks. Use snapshot schedules as a best practice to back up your Compute Engine workloads. After creating a snapshot schedule, you can apply it to one or more persistent disks. https://cloud.google.com/compute/docs/disks/scheduled-snapshots

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 52 · 325 in bank

   Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1`"standard`"2 nodes. You need to deploy additional pods requiring n2`"highmem`"16 nodes without any downtime. What should you do?

   • AUse gcloud container clusters upgrade. Deploy the new services.
   • BCreate a new Node Pool and specify machine type n2ג€"highmemג€"16. Deploy the new pods.
   • CCreate a new cluster with n2ג€"highmemג€"16 nodes. Redeploy the pods and delete the old cluster.
   • DCreate a new cluster with both n1ג€"standardג€"2 and n2ג€"highmemג€"16 nodes. Redeploy the pods and delete the old cluster.

   Show answer

   Answer: B

   Explanation

   B is correct answer, read below form google docs; This tutorial demonstrates how to migrate workloads running on a Google Kubernetes Engine (GKE) cluster to a new set of nodes within the same cluster without incurring downtime for your application. Such a migration can be useful if you want to migrate your workloads to nodes with a different machine type. Background A node pool is a subset of machines that all have the same configuration, including machine type (CPU and memory) authorization scopes. Node pools represent a subset of nodes within a cluster; a container cluster can contain one or more node pools. When you need to change the machine profile of your Compute Engine cluster, you can create a new node pool and then migrate your workloads over to the new node pool. To migrate your workloads without incurring downtime, you need to: Mark the existing node pool as unschedulable. Drain the workloads running on the existing node pool. Delete the existing node pool. https://cloud.google.com/kubernetes-engine/docs/tutorials/migrating-node-pool#creating_a_node_pool_with_large_machine_type

   Source: Adapted from community discussion — GCP_Student1

   References

   • Google Cloud documentation

   Next question

3. Question 53 · 325 in bank

   You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?

   • ACreate a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
   • BCreate a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
   • CCreate a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
   • DCreate two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.

   Show answer

   Answer: D

   Explanation

   Correct Answer is (D): Introduction to external data sources This page provides an overview of querying data stored outside of BigQuery. https://cloud.google.com/bigquery/external-data-sources

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 54 · 325 in bank

   You are hosting an application from Compute Engine virtual machines (VMs) in us`"central1`"a. You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost. What should you do?

   • Aג€" Create Compute Engine resources in usג€"central1ג€"b. ג€" Balance the load across both usג€"central1ג€"a and usג€"central1ג€"b.
   • Bג€" Create a Managed Instance Group and specify usג€"central1ג€"a as the zone. ג€" Configure the Health Check with a short Health Interval.
   • Cג€" Create an HTTP(S) Load Balancer. ג€" Create one or more global forwarding rules to direct traffic to your VMs.
   • Dג€" Perform regular backups of your application. ג€" Create a Cloud Monitoring Alert and be notified if your application becomes unavailable. ג€" Restore from backups when notified.

   Show answer

   Answer: A

   Explanation

   A. Create Compute Engine resources in us "central1 "b. " Balance the load across both us "central1"a and us "central1"b.

   Source: Adapted from community discussion — GCP_Student1

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 55 · 325 in bank

   A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

   • AIn the console, validate which SSH keys have been stored as project-wide keys.
   • BNavigate to Identity-Aware Proxy and check the permissions for these resources.
   • CEnable Audit Logs on the IAM & admin page for all resources, and validate the results.
   • DUse the command gcloud projects getג€"iamג€"policy to view the current role assignments.

   Show answer

   Answer: D

   Explanation

   Correct Answer is (D): A simple approach would be to use the command flags available when listing all the IAM policy for a given project. For instance, the following command: `gcloud projects get-iam-policy $PROJECT_ID --flatten="bindings[].members" --format="table(bindings.members)" --filter="bindings.role:roles/owner"` outputs all the users and service accounts associated with the role ‘roles/owner’ in the project in question. https://groups.google.com/g/google-cloud-dev/c/Z6sZs7TvygQ?pli=1

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation

   Next question

6. Question 56 · 325 in bank

   You are running multiple VPC-native Google Kubernetes Engine clusters in the same subnet. The IPs available for the nodes are exhausted, and you want to ensure that the clusters can grow in nodes when needed. What should you do?

   • ACreate a new subnet in the same region as the subnet being used.
   • BAdd an alias IP range to the subnet used by the GKE clusters.
   • CCreate a new VPC, and set up VPC peering with the existing VPC.
   • DExpand the CIDR range of the relevant subnet for the cluster.

   Show answer

   Answer: D

   Explanation

   Correct Answer is (D): gcloud compute networks subnets expand-ip-range NAME gcloud compute networks subnets expand-ip-range - expand the IP range of a Compute Engine subnetwork https://cloud.google.com/sdk/gcloud/reference/compute/networks/subnets/expand-ip-range

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 57 · 325 in bank

   You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?

   • AArrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
   • BUse the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.
   • CUse the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.
   • DRun a select count (*) to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.

   Show answer

   Answer: B

   Explanation

   Correct Answers is (B): On-demand pricing Under on-demand pricing, BigQuery charges for queries by using one metric: the number of bytes processed (also referred to as bytes read). You are charged for the number of bytes processed whether the data is stored in BigQuery or in an external data source such as Cloud Storage, Drive, or Cloud Bigtable. On-demand pricing is based solely on usage. https://cloud.google.com/bigquery/pricing#on_demand_pricing

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

8. Question 58 · 325 in bank

   You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?

   • ARun a test using simulated maintenance events. If the test is successful, use preemptible N1 Standard VMs when running future jobs.
   • BRun a test using simulated maintenance events. If the test is successful, use N1 Standard VMs when running future jobs.
   • CRun a test using a managed instance group. If the test is successful, use N1 Standard VMs in the managed instance group when running future jobs.
   • DRun a test using N1 standard VMs instead of N2. If the test is successful, use N1 Standard VMs when running future jobs.

   Show answer

   Answer: A

   Explanation

   Correct Answer is (A): Creating and starting a preemptible VM instance This page explains how to create and use a preemptible virtual machine (VM) instance. A preemptible instance is an instance you can create and run at a much lower price than normal instances. However, Compute Engine might terminate (preempt) these instances if it requires access to those resources for other tasks. Preemptible instances will always terminate after 24 hours. To learn more about preemptible instances, read the preemptible instances documentation. Preemptible instances are recommended only for fault-tolerant applications that can withstand instance preemptions. Make sure your application can handle preemptions before you decide to create a preemptible instance. To understand the risks and value of preemptible instances, read the preemptible instances documentation. https://cloud.google.com/compute/docs/instances/create-start-preemptible-instance

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation

   Next question

9. Question 59 · 325 in bank

   You are working with a user to set up an application in a new VPC behind a firewall. The user is concerned about data egress. You want to configure the fewest open egress ports. What should you do?

   • ASet up a low-priority (65534) rule that blocks all egress and a high-priority rule (1000) that allows only the appropriate ports.
   • BSet up a high-priority (1000) rule that pairs both ingress and egress ports.
   • CSet up a high-priority (1000) rule that blocks all egress and a low-priority (65534) rule that allows only the appropriate ports.
   • DSet up a high-priority (1000) rule to allow the appropriate ports.

   Show answer

   Answer: A

   Explanation

   Correct Answer is (A): Implied rules Every VPC network has two implied firewall rules. These rules exist, but are not shown in the Cloud Console: Implied allow egress rule. An egress rule whose action is allow, destination is 0.0.0.0/0, and priority is the lowest possible (65535) lets any instance send traffic to any destination, except for traffic blocked by Google Cloud. A higher priority firewall rule may restrict outbound access. Internet access is allowed if no other firewall rules deny outbound traffic and if the instance has an external IP address or uses a Cloud NAT instance. For more information, see Internet access requirements. Implied deny ingress rule. An ingress rule whose action is deny, source is 0.0.0.0/0, and priority is the lowest possible (65535) protects all instances by blocking incoming connections to them. A higher priority rule might allow incoming access. The default network includes some additional rules that override this one, allowing certain types of incoming connections. https://cloud.google.com/vpc/docs/firewalls#default_firewall_rules

   Source: Adapted from community discussion — ESP_SAP

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

10. Question 60 · 325 in bank

    Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

    • AEnable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
    • BTag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
    • CSet up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
    • DAsk the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

    Show answer

    Answer: A

    References

    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

ACE practice, question 51. 325 questions available.