ACE practice questions 71–80

1. Question 71 · 325 in bank

   Your company has embraced a hybrid cloud strategy where some of the applications are deployed on Google Cloud. A Virtual Private Network (VPN) tunnel connects your Virtual Private Cloud (VPC) in Google Cloud with your company's on-premises network. Multiple applications in Google Cloud need to connect to an on-premises database server, and you want to avoid having to change the IP configuration in all of your applications when the IP of the database changes. What should you do?

   • AConfigure Cloud NAT for all subnets of your VPC to be used when egressing from the VM instances.
   • BCreate a private zone on Cloud DNS, and configure the applications with the DNS name.
   • CConfigure the IP of the database as custom metadata for each instance, and query the metadata server.
   • DQuery the Compute Engine internal DNS from the applications to retrieve the IP of the database.

   Show answer

   Answer: B

   Explanation

   B, Forwarding zones Cloud DNS forwarding zones let you configure target name servers for specific private zones. Using a forwarding zone is one way to implement outbound DNS forwarding from your VPC network. A Cloud DNS forwarding zone is a special type of Cloud DNS private zone. Instead of creating records within the zone, you specify a set of forwarding targets. Each forwarding target is an IP address of a DNS server, located in your VPC network, or in an on-premises network connected to your VPC network by Cloud VPN or Cloud Interconnect. A does not apply, that is to provide internet access to resources C, does not apply D, I don't get it so B

   Source: Adapted from community discussion — kopper2019

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 72 · 325 in bank

   You have developed a containerized web application that will serve internal colleagues during business hours. You want to ensure that no costs are incurred outside of the hours the application is used. You have just created a new Google Cloud project and want to deploy the application. What should you do?

   • ADeploy the container on Cloud Run for Anthos, and set the minimum number of instances to zero.
   • BDeploy the container on Cloud Run (fully managed), and set the minimum number of instances to zero.
   • CDeploy the container on App Engine flexible environment with autoscaling, and set the value min_instances to zero in the app.yaml.
   • DDeploy the container on App Engine flexible environment with manual scaling, and set the value instances to zero in the app.yaml.

   Show answer

   Answer: B

   Explanation

   I think that is B the correct answer, because Cloud Run can scale to 0: https://cloud.google.com/run/docs/about-instance-autoscaling And App Engine Flexible can't scale to 0, the minimum instance number is 1: https://cloud.google.com/appengine/docs/the-appengine-environments#comparing_high-level_features

   Source: Adapted from community discussion — crysk

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 73 · 325 in bank

   You have experimented with Google Cloud using your own credit card and expensed the costs to your company. Your company wants to streamline the billing process and charge the costs of your projects to their monthly invoice. What should you do?

   • AGrant the financial team the IAM role of ג€Billing Account Userג€ on the billing account linked to your credit card.
   • BSet up BigQuery billing export and grant your financial department IAM access to query the data.
   • CCreate a ticket with Google Billing Support to ask them to send the invoice to your company.
   • DChange the billing account of your projects to the billing account of your company.

   Show answer

   Answer: D

   Explanation

   Please do not overthink the question. The question does not mention anything about finance teams, so A cannot be correct. D is the only one that makes sense out of the remaining options.

   Source: Adapted from community discussion — rsuresh27

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 74 · 325 in bank

   You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset. What should you do?

   • ACreate a Service Account in your own project, and grant this Service Account access to BigQuery in your project.
   • BCreate a Service Account in your own project, and ask the partner to grant this Service Account access to BigQuery in their project.
   • CAsk the partner to create a Service Account in their project, and have them give the Service Account access to BigQuery in their project.
   • DAsk the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project.

   Show answer

   Answer: D

   Explanation

   D. Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project.

   Source: Adapted from community discussion — GCP_Student1

   Next question

5. Question 75 · 325 in bank

   Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment). What should you do?

   • ACreate a new service with the new version of the application. Split traffic between this version and the version that is currently running.
   • BCreate a new revision with the new version of the application. Split traffic between this version and the version that is currently running.
   • CCreate a new service with the new version of the application. Add an HTTP Load Balancer in front of both services.
   • DCreate a new revision with the new version of the application. Add an HTTP Load Balancer in front of both revisions.

   Show answer

   Answer: B

   Explanation

   The google doc link is incorrect. You need to specify CloudRun for Anthos https://cloud.google.com/kuberun/docs/rollouts-rollbacks-traffic-migration Anyway principles for CloudRun and CloundRun for Anthos are the same. Traffic can be split between multiple revisions. The answer is "B"

   Source: Adapted from community discussion — TAvenger

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

6. Question 76 · 325 in bank

   Your company developed a mobile game that is deployed on Google Cloud. Gamers are connecting to the game with their personal phones over the Internet. The game sends UDP packets to update the servers about the gamers' actions while they are playing in multiplayer mode. Your game backend can scale over multiple virtual machines (VMs), and you want to expose the VMs over a single IP address. What should you do?

   • AConfigure an SSL Proxy load balancer in front of the application servers.
   • BConfigure an Internal UDP load balancer in front of the application servers.
   • CConfigure an External HTTP(s) load balancer in front of the application servers.
   • DConfigure an External Network load balancer in front of the application servers.

   Show answer

   Answer: D

   Explanation

   Answer is D, cell phones are sending UDP packets and the only that can receive that type of traffic is a External Network TCP/UDP https://cloud.google.com/load-balancing/docs/network

   Source: Adapted from community discussion — kopper2019

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 77 · 325 in bank

   You are working for a hospital that stores its medical images in an on-premises data room. The hospital wants to use Cloud Storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to Cloud Storage. You need to design and implement a solution. What should you do?

   • ACreate a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub topic.
   • BDeploy a Dataflow job from the batch template, ג€Datastore to Cloud Storage.ג€ Schedule the batch job on the desired interval.
   • CCreate a script that uses the gsutil command line interface to synchronize the on-premises storage with Cloud Storage. Schedule the script as a cron job.
   • DIn the Cloud Console, go to Cloud Storage. Upload the relevant images to the appropriate bucket.

   Show answer

   Answer: C

   Explanation

   From the question the key point is "upload ANY NEW medical images to Cloud Storage". So we are not interested in old images. That's why we need some trigger that will upload images. I think option "A" with PubSub is the best

   Source: Adapted from community discussion — TAvenger

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

8. Question 78 · 325 in bank

   Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?

   • ATurn on Data Access Logs for the buckets they want to audit, and then build a query in the log viewer that filters on Cloud Storage.
   • BAssign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs.
   • CAssign the appropriate permissions, and then use Cloud Monitoring to review metrics.
   • DUse the export logs API to provide the Admin Activity Audit Logs in the format they want.

   Show answer

   Answer: A

   Explanation

   It should be A. Data access log are not enabled by default due to the fact that it incurs costs. So you need to enable it first. And then you can filter it in the log viewer

   Source: Adapted from community discussion — iri_gcp

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 79 · 325 in bank

   You are analyzing Google Cloud Platform service costs from three separate projects. You want to use this information to create service cost estimates by service type, daily and monthly, for the next six months using standard query syntax. What should you do?

   • AExport your bill to a Cloud Storage bucket, and then import into Cloud Bigtable for analysis.
   • BExport your bill to a Cloud Storage bucket, and then import into Google Sheets for analysis.
   • CExport your transactions to a local file, and perform analysis with a desktop tool.
   • DExport your bill to a BigQuery dataset, and then write time window-based SQL queries for analysis.

   Show answer

   Answer: D

   Explanation

   Solving this by first eliminating the options that don't suit us. By breaking down the question into the key requirements- 1. Analyzing Google Cloud Platform service costs from three separate projects. 2. Using standard query syntax. -> (Relational data and SQL) A. 'Cloud Storage bucket'........'Cloud Bigtable'. Not feasible, mainly because cloud BigTable is not good for Structured Data (or Relational Data on which we can run SQL queries as per the question's requirements). BigTable is better suited for Semi Structured data and NoSQL data. B. 'Cloud Storage bucket'.....'Google Sheets'. Not Feasible because there is no use of SQL in this option, which is one of the requirements. C. Local file, external tools... this is automatically eliminated because the operation we need is simple, and there has to be a GCP native solution for this. We shouldn't need to rely on going out of the cloud for such a simple thing. D. 'BigQuery'.....'SQL queries' -> This is the right answer.

   Source: Adapted from community discussion — mohdafiuddin

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

10. Question 80 · 325 in bank

    You received a JSON file that contained a private key of a Service Account in order to get access to several resources in a Google Cloud project. You downloaded and installed the Cloud SDK and want to use this private key for authentication and authorization when performing gcloud commands. What should you do?

    • AUse the command gcloud auth login and point it to the private key.
    • BUse the command gcloud auth activate-service-account and point it to the private key.
    • CPlace the private key file in the installation directory of the Cloud SDK and rename it to ג€credentials.jsonג€.
    • DPlace the private key file in your home directory and rename it to ג€GOOGLE_APPLICATION_CREDENTIALSג€.

    Show answer

    Answer: B

    Explanation

    B. Use the command gcloud auth activate-service-account and point it to the private key. Authorizing with a service account gcloud auth activate-service-account authorizes access using a service account. As with gcloud init and gcloud auth login, this command saves the service account credentials to the local system on successful completion and sets the specified account as the active account in your Cloud SDK configuration. https://cloud.google.com/sdk/docs/authorizing#authorizing_with_a_service_account

    Source: Adapted from community discussion — GCP_Student1

    References

    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

ACE practice, question 71. 325 questions available.