ACE sample questions

Question 1

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

Accepted Answer

Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.

Answer

Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add theg roup to the role.

Answer

Run gcloud iam roles describe roles/spanner.viewer -project my-project. Add the users to the role.

Answer

Run gcloud iam roles describe roles/spanner.viewer -project my-project. Add the users to a new group. Add the group to the role.

Question 2

Your company uses a large number of Google Cloud services centralized in a single project. All teams have specific projects for testing and development. The DevOps team needs access to all of the production services in order to perform their job. You want to prevent Google Cloud product changes from broadening their permissions in the future. You want to follow Google-recommended practices. What should you do?

Accepted Answer

Grant all members of the DevOps team the role of Project Editor on the production project.

Answer

Grant all members of the DevOps team the role of Project Editor on the organization level.

Answer

Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project.

Answer

Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the organization level.

Question 3

Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?

Accepted Answer

Add the group for the finance team to roles/billing viewer role.

Answer

Add the group for the finance team to roles/bi I ling user role.

Answer

Add the group for the finance team to roles/bi 11 ing admin role.

Answer

Add the group for the finance team to roles/billing project/Manager role.

Question 4

You need to set a budget alert for use of Compute Engineer services on one of the three Google Cloud Platform projects that you manage. All three projects are linked to a single billing account.
What should you do?

Accepted Answer

Verify that you are the project billing administrator. Select the associated billing account and create a budget and a custom alert.

Answer

Verify that you are the project billing administrator. Select the associated billing account and create a budget and alert for the appropriate project.

Answer

Verify that you are the project administrator. Select the associated billing account and create a budget for the appropriate project.

Answer

Verify that you are project administrator. Select the associated billing account and create a budget and a custom alert.

Question 5

You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?

Accepted Answer

Recreate all the nodes of the GKE cluster to enable GPUs on all of them.

Answer

Ask your ML team to add the “accelerator: gpu” annotation to their pod specification.

Answer

Create your own Kubernetes cluster on top of Compute Engine with nodes that have GPUs. Dedicate this cluster to your ML team.

Answer

Add a new, GPU-enabled, node pool to the GKE cluster. Ask your ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100 nodeSelector to their pod specification.

Question 6

You’ve deployed a microservice called myappl to a Google Kubernetes Engine cluster using the YAML file specified below:

You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

Accepted Answer

Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.

Answer

store the database password inside the Docker image of the container, not in the YAML file.

Answer

store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.

Answer

store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.

Question 7

You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?

Accepted Answer

Use the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.

Answer

Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.

Answer

Use the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.

Answer

Run a select count (*) to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.

Question 8

You are running an application on multiple virtual machines within a managed instance group and have autoscaling enabled. The autoscaling policy is configured so that additional instances are added to the group if the CPU utilization of instances goes above 80%. VMs are added until the instance group reaches its maximum limit of five VMs or until CPU utilization of instances lowers to 80%. The initial delay for HTTP health checks against the instances is set to 30 seconds. The virtual machine instances take around three minutes to become available for users. You observe that when the instance group autoscales, it adds more instances then necessary to support the levels of end-user traffic. You want to properly maintain instance group sizes when autoscaling. What should you do?

Accepted Answer

Increase the initial delay of the HTTP health check to 200 seconds.

Answer

Set the maximum number of instances to 1.

Answer

Decrease the maximum number of instances to 3.

Answer

Use a TCP health check instead of an HTTP health check.

Question 9

Your company is moving from an on-premises environment to Google Cloud. You have multiple development teams that use Cassandra environments as backend databases. They all need a development environment that is isolated from other Cassandra instances. You want to move to Google Cloud quickly and with minimal support effort. What should you do?

Accepted Answer

1. Build a Cassandra Compute Engine instance and take a snapshot of it.
2. Upload the snapshot to Cloud Storage and make it accessible to your developers.
3. Build instructions to create a Compute Engine instance from the snapshot so that developers can do it themselves.

Answer

1. Build an instruction guide to install Cassandra on Google Cloud.
2. Make the instruction guide accessible to your developers.

Answer

1. Advise your developers to go to Cloud Marketplace.
2. Ask the developers to launch a Cassandra image for their development work.

Answer

1 Build a Cassandra Compute Engine instance and take a snapshot of it.
2. Use the snapshot to create instances for your developers.

Question 10

You create a Deployment with 2 replicas in a Google Kubernetes Engine cluster that has a single preemptible node pool. After a few minutes, you use kubectl to examine the status of your Pod and observe that one of them is still in Pending status:

What is the most likely cause?

Accepted Answer

Too many Pods are already running in the cluster, and there are not enough resources left to schedule the pending Pod.

Answer

The pending Pod's resource requests are too large to fit on a single node of the cluster.

Answer

The node pool is configured with a service account that does not have permission to pull the container image used by the pending Pod.

Answer

The pending Pod was originally scheduled on a node that has been preempted between the creation of the Deployment and your verification of the Pods’ status. It is currently being rescheduled on a new node.

Free ACE sample questions

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?

You need to set a budget alert for use of Compute Engineer services on one of the three Google Cloud Platform projects that you manage. All three projects are linked to a single billing account. What should you do?

You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?

You’ve deployed a microservice called myappl to a Google Kubernetes Engine cluster using the YAML file specified below: You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?

You create a Deployment with 2 replicas in a Google Kubernetes Engine cluster that has a single preemptible node pool. After a few minutes, you use kubectl to examine the status of your Pod and observe that one of them is still in Pending status: What is the most likely cause?

10 more free samples are waiting