ACE practice questions 81–90

1. Question 81 · 325 in bank

   You are working with a Cloud SQL MySQL database at your company. You need to retain a month-end copy of the database for three years for audit purposes. What should you do?

   • ASet up an export job for the first of the month. Write the export file to an Archive class Cloud Storage bucket.
   • BSave the automatic first-of-the-month backup for three years. Store the backup file in an Archive class Cloud Storage bucket.
   • CSet up an on-demand backup for the first of the month. Write the backup to an Archive class Cloud Storage bucket.
   • DConvert the automatic first-of-the-month backup to an export file. Write the export file to a Coldline class Cloud Storage bucket.

   Show answer

   Answer: A

   Explanation

   https://cloud.google.com/sql/docs/mysql/backup-recovery/backups not B: Automatic backups are made EVERY SINGLE DAY. You can set only the number of backups up to 365. Also you cannot choose your Archival storage as destination not C: You cannot setup "on-demand" backup. User would have to make backups manually every month. Also you cannot choose your Archival storage as destination not D: You cannot conver backup to export file. Also Coldline class is less cost-effective than Archival class. The only option left is "A" You can set up your job with any date/time schedule. You can export file to any storage with any storage class.

   Source: Adapted from community discussion — TAvenger

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 82 · 325 in bank

   You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?

   • AIn the Log Viewer, filter the logs on severity 'Error' and the name of the Service Account.
   • BCreate a sink to BigQuery to export all the logs. Create a Data Studio dashboard on the exported logs.
   • CCreate a custom log-based metric for the specific error to be used in an Alerting Policy.
   • DGrant Project Owner access to the Service Account.

   Show answer

   Answer: C

   Explanation

   based on the "You are able to solve the problem but want to be notified if the problem recurs." , we definitely need to create an alerting policy. So Answer should be C. https://cloud.google.com/logging/docs/logs-based-metrics/charts-and-alerts

   Source: Adapted from community discussion — NARWAL

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 83 · 325 in bank

   You are developing a financial trading application that will be used globally. Data is stored and queried using a relational structure, and clients from all over the world should get the exact identical state of the data. The application will be deployed in multiple regions to provide the lowest latency to end users. You need to select a storage option for the application data while minimizing latency. What should you do?

   • AUse Cloud Bigtable for data storage.
   • BUse Cloud SQL for data storage.
   • CUse Cloud Spanner for data storage.
   • DUse Firestore for data storage.

   Show answer

   Answer: C

   Explanation

   C, Cloud Spanner, keywords are globally, relational structure and lastly "clients from all over the world should get the exact identical state of the data" which implies strong consistency is needed.

   Source: Adapted from community discussion — JieHeng

   Next question

4. Question 84 · 325 in bank

   You are about to deploy a new Enterprise Resource Planning (ERP) system on Google Cloud. The application holds the full database in-memory for fast data access, and you need to configure the most appropriate resources on Google Cloud for this application. What should you do?

   • AProvision preemptible Compute Engine instances.
   • BProvision Compute Engine instances with GPUs attached.
   • CProvision Compute Engine instances with local SSDs attached.
   • DProvision Compute Engine instances with M1 machine type.

   Show answer

   Answer: D

   Explanation

   C. Provision Compute Engine instances with local SSDs attached. The best option for an ERP system that holds the full database in-memory for fast data access is to provision Compute Engine instances with local SSDs attached. Local SSDs offer high input/output operations per second (IOPS) and low latency, which can significantly improve the performance of in-memory databases. Preemptible Compute Engine instances are designed for short-lived and fault-tolerant workloads and are not recommended for a critical system like an ERP. GPUs are typically used for specialized compute-intensive workloads like machine learning and deep learning. M1 machine type is a general-purpose machine type and may not provide enough performance for an in-memory database.

   Source: Adapted from community discussion — Bobbybash

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 85 · 325 in bank

   You have developed an application that consists of multiple microservices, with each microservice packaged in its own Docker container image. You want to deploy the entire application on Google Kubernetes Engine so that each microservice can be scaled individually. What should you do?

   • ACreate and deploy a Custom Resource Definition per microservice.
   • BCreate and deploy a Docker Compose File.
   • CCreate and deploy a Job per microservice.
   • DCreate and deploy a Deployment per microservice.

   Show answer

   Answer: D

   Explanation

   I was a little unsure about this question, here's how I understand why D is the best answer A. Custom Resource Definition... we have docker containers already, which is an established kind of resource for Kubernetes. We don't need to create a whole new type of resource, so this is wrong. B. Docker Compose is a wholly different tool from Kubernetes. C. A Kubernetes job describes a specific "task" which involves a bunch of pods and things. It makes no sense to have one job per microservice, a "Job" would be a bunch of different microservices executing together. D. is the leftover, correct answer. You can add scaling to each Deployment, an important aspect of the question.

   Source: Adapted from community discussion — obeythefist

   Next question

6. Question 86 · 325 in bank

   You will have several applications running on different Compute Engine instances in the same project. You want to specify at a more granular level the service account each instance uses when calling Google Cloud APIs. What should you do?

   • AWhen creating the instances, specify a Service Account for each instance.
   • BWhen creating the instances, assign the name of each Service Account as instance metadata.
   • CAfter starting the instances, use gcloud compute instances update to specify a Service Account for each instance.
   • DAfter starting the instances, use gcloud compute instances update to assign the name of the relevant Service Account as instance metadata.

   Show answer

   Answer: A

   Explanation

   A, when you create an instance using the gcloud command-line tool or the Google Cloud Console, you can specify which service account the instance uses when calling Google Cloud APIs - https://cloud.google.com/compute/docs/access/service-accounts#associating_a_service_account_to_an_instance

   Source: Adapted from community discussion — JieHeng

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 87 · 325 in bank

   You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?

   • ACreate a Cloud Bigtable cluster, and use the HBase API.
   • BDeploy MongoDB Atlas from the Google Cloud Marketplace.
   • CDownload a MongoDB installation package, and run it on Compute Engine instances.
   • DDownload a MongoDB installation package, and run it on a Managed Instance Group.

   Show answer

   Answer: B

   References

   • cloud.google.com documentation
   • Google Cloud documentation

   Next question

8. Question 88 · 325 in bank

   You are managing a project for the Business Intelligence (BI) department in your company. A data pipeline ingests data into BigQuery via streaming. You want the users in the BI department to be able to run the custom SQL queries against the latest data in BigQuery. What should you do?

   • ACreate a Data Studio dashboard that uses the related BigQuery tables as a source and give the BI team view access to the Data Studio dashboard.
   • BCreate a Service Account for the BI team and distribute a new private key to each member of the BI team.
   • CUse Cloud Scheduler to schedule a batch Dataflow job to copy the data from BigQuery to the BI team's internal data warehouse.
   • DAssign the IAM role of BigQuery User to a Google Group that contains the members of the BI team.

   Show answer

   Answer: D

   Explanation

   D is correct roles/bigquery.user When applied to a dataset, this role provides the ability to read the dataset's metadata and list tables in the dataset. When applied to a project, this role also provides the ability to run jobs, including queries, within the project. A member with this role can enumerate their own jobs, cancel their own jobs, and enumerate datasets within a project. Additionally, allows the creation of new datasets within the project; the creator is granted the BigQuery Data Owner role (roles/bigquery.dataOwner) on these new datasets.

   Source: Adapted from community discussion — ApaMokus

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 89 · 325 in bank

   Your company is moving its entire workload to Compute Engine. Some servers should be accessible through the Internet, and other servers should only be accessible over the internal network. All servers need to be able to talk to each other over specific ports and protocols. The current on-premises network relies on a demilitarized zone (DMZ) for the public servers and a Local Area Network (LAN) for the private servers. You need to design the networking infrastructure on Google Cloud to match these requirements. What should you do?

   • A1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.
   • B1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.
   • C1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.
   • D1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.

   Show answer

   Answer: A

   Explanation

   A is the Right answer. You can discard B and C because they lack the need of creating Network Peering to communicate the DMZ VPC with the LAN VPC (LAN VPC is not exposed to public so they need to communicate via private addresses which cannot be achieved with 2 VPCs without Network Peering). Plus, you can discard B, as you don't need to enable the egress traffic, you always need to enable the ingress traffic as this is never enabled by default.

   Source: Adapted from community discussion — yvinisiupacuando

   References

   • Google Cloud documentation

   Next question

10. Question 90 · 325 in bank

    You need to set up a policy so that videos stored in a specific Cloud Storage Regional bucket are moved to Coldline after 90 days, and then deleted after one year from their creation. How should you set up the policy?

    • AUse Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 275 days (365 ג€" 90)
    • BUse Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 365 days.
    • CUse gsutil rewrite and set the Delete action to 275 days (365-90).
    • DUse gsutil rewrite and set the Delete action to 365 days.

    Show answer

    Answer: B

    Explanation

    Correct is B. You only re-calculate expiry date when objects are re-written using re-write option to another storage class in which case creation date is rest. But in this case objects is moveed to Coldline class after 90 days and then we want to delete the object after 365 days.

    Source: Adapted from community discussion — cloudenthu01

    References

    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

ACE practice, question 81. 325 questions available.