WorksheetsACE Practice Test #1
Total questions: 14
Worksheet time: 7mins
Your organization plans to migrate its financial transaction monitoring application to Google Cloud. Auditors need to view the data and run reports in BigQuery, but they are not allowed to perform transactions in the application. You are leading the migration and want the simplest solution that will require the least amount of maintenance. What should you do?
Assign roles/bigquery.dataViewer to the individual auditors.
Create a group for auditors and assign roles/viewer to them.
Create a group for auditors, and assign roles/bigquery.dataViewer to them.
Assign a custom role to each auditor that allows view-only access to BigQuery.
You are managing your company’s first Google Cloud project. Project leads, developers, and internal testers will participate in the project, which includes sensitive information. You need to ensure that only specific members of the development team have access to sensitive information. You want to assign the appropriate IAM roles that also require the least amount of maintenance. What should you do?
Assign a basic role to each user.
Create groups. Assign a basic role to each group, and then assign users to groups.
Create groups. Assign a Custom role to each group, including those who should have access to sensitive data. Assign users to groups.
Create groups. Assign an IAM Predefined role to each group as required, including those who should have access to sensitive data. Assign users to groups.
You are responsible for monitoring all changes in your Cloud Storage and Firestore instances. For each change, you need to invoke an action that will verify the compliance of the change in near real time. You want to accomplish this with minimal setup. What should you do?
Use the trigger mechanism in each datastore to invoke the security script.
Use Cloud Function events, and call the security script from the Cloud Function triggers.
Redirect your data-changing queries to an App Engine application, and call the security script from the application.
Use a Python script to get logs of the datastores, analyze them, and invoke the security script.
Your application needs to process a significant rate of transactions. The rate of transactions exceeds the processing capabilities of a single virtual machine (VM). You want to spread transactions across multiple servers in real time and in the most cost-effective manner. What should you do?
Send transactions to BigQuery. On the VMs, poll for transactions that do not have the ‘processed’ key, and mark them ‘processed’ when done.
Set up Cloud SQL with a memory cache for speed. On your multiple servers, poll for transactions that do not have the ‘processed’ key, and mark them ‘processed’ when done.
Send transactions to Pub/Sub. Process them in VMs in a managed instance group.
Record transactions in Cloud Bigtable, and poll for new transactions from the VMs.
Your team needs to directly connect your on-premises resources to several virtual machines inside a virtual private cloud (VPC). You want to provide your team with fast and secure access to the VMs with minimal maintenance and cost. What should you do?
Set up Cloud Interconnect.
Use Cloud VPN to create a bridge between the VPC and your network.
Assign a public IP address to each VM, and assign a strong password to each one.
Start a Compute Engine VM, install a software router, and create a direct tunnel to each VM.
You are implementing Cloud Storage for your organization. You need to follow your organization’s regulations. They include: 1) Archive data older than one year. 2) Delete data older than 5 years. 3) Use standard storage for all other data. You want to implement these guidelines automatically and in the simplest manner available. What should you do?
Set up Object Lifecycle management policies.
Run a script daily. Copy data that is older than one year to an archival bucket, and delete five-year-old data.
Run a script daily. Set storage class to ARCHIVE for data that is older than one year, and delete five-year-old data.
Set up default storage class for three buckets named: STANDARD, ARCHIVE, DELETED. Use a script to move the data in the appropriate bucket when its condition matches your company guidelines.
You are creating a Cloud IOT application requiring data storage of up to 10 petabytes (PB). The application must support high-speed reads and writes of small pieces of data, but your data schema is simple. You want to use the most economical solution for data storage. What should you do?
Store the data in Cloud Spanner, and add an in-memory cache for speed.
Store the data in Cloud Storage, and distribute the data through Cloud CDN for speed.
Store the data in Cloud Bigtable, and implement the business logic in the programming language of your choice.
Use BigQuery, and implement the business logic in SQL.
You have created a Kubernetes deployment on Google Kubernetes Engine (GKE) that has a backend service. You also have pods that run the frontend service. You want to ensure that there is no interruption in communication between your frontend and backend service pods if they are moved or restarted. What should you do?
Create a service that groups your pods in the backend service, and tell your frontend pods to communicate through that service.
Create a DNS entry with a fixed IP address that the frontend service can use to reach the backend service.
Assign static internal IP addresses that the frontend service can use to reach the backend pods.
Assign static external IP addresses that the frontend service can use to reach the backend pods.
You are responsible for the user-management service for your global company. The service will add, update, delete, and list addresses. Each of these operations is implemented by a Docker container microservice. The processing load can vary from low to very high. You want to deploy the service on Google Cloud for scalability and minimal administration. What should you do?
Deploy your Docker containers into Cloud Run.
Start each Docker container as a managed instance group.
Deploy your Docker containers into Google Kubernetes Engine.
Combine the four microservices into one Docker image, and deploy it to the App Engine instance.
You provide a service that you need to open to everyone in your partner network. You have a server and an IP address where the application is located. You do not want to have to change the IP address on your DNS server if your server crashes or is replaced. You also want to avoid downtime and deliver a solution for minimal cost and setup. What should you do?
Create a script that updates the IP address for the domain when the server crashes or is replaced.
Reserve a static internal IP address, and assign it using Cloud DNS.
Reserve a static external IP address, and assign it using Cloud DNS.
Use the Bring Your Own IP (BYOIP) method to use your own IP address.
Your team is building the development, test, and production environments for your project deployment in Google Cloud. You need to efficiently deploy and manage these environments and ensure that they are consistent. You want to follow Google-recommended practices. What should you do?
Create a Cloud Shell script that uses gcloud commands to deploy the environments.
Create one Terraform configuration for all environments. Parameterize the differences between environments.
For each environment, create a Terraform configuration. Use them for repeated deployment. Reconcile the templates periodically.
Use the Cloud Foundation Toolkit to create one deployment template that will work for all environments, and deploy with Terraform.
You receive an error message when you try to start a new VM: “You have exhausted the IP range in your subnet.” You want to resolve the error with the least amount of effort. What should you do?
Create a new subnet and start your VM there.
Expand the CIDR range in your subnet, and restart the VM that issued the error.
Create another subnet, and move several existing VMs into the new subnet.
Restart the VM using exponential backoff until the VM starts successfully.
You are running several related applications on Compute Engine virtual machine (VM) instances. You want to follow Google-recommended practices and expose each application through a DNS name. What should you do?
Use the Compute Engine internal DNS service to assign DNS names to your VM instances, and make the names known to your users.
Assign each VM instance an alias IP address range, and then make the internal DNS names public.
Assign Google Cloud routes to your VM instances, assign DNS names to the routes, and make the DNS names public.
Use Cloud DNS to translate your domain names into your IP addresses.
You are charged with optimizing Google Cloud resource consumption. Specifically, you need to investigate the resource consumption charges and present a summary of your findings. You want to do it in the most efficient way possible. What should you do?
Rename resources to reflect the owner and purpose. Write a Python script to analyze resource consumption.
Attach labels to resources to reflect the owner and purpose. Export Cloud Billing data into BigQuery, and analyze it with Data Studio.
Assign tags to resources to reflect the owner and purpose. Export Cloud Billing data into BigQuery, and analyze it with Data Studio.
Create a script to analyze resource usage based on the project to which the resources belong. In this script, use the IAM accounts and services accounts that control given resources.
