ACE Sim 03 PDF
ACE Sim 03 PDF
Ask Hi,
Search Courses Db Expert CARLOS
My All
Dashboard Inbox
Courses Courses
Report
Practice Test 3
Mode Practice
1 Other 9 0 0 9 0
2 Planning and 8 0 0 8 0
con�guring a
cloud solution
3 Setting up a 4 0 0 4 0
cloud solution
environment
1 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
4 Deploying and 4 0 0 4 0
implementing a
cloud solution
5 Ensuring 3 0 0 3 0
successful
operation of a
cloud solution
6 Con�gure 2 0 0 2 0
access and
security
Question 1 Unattempted
Domain : Other
You have a system generated log files required to be later uploaded to Google Storage in
the data lake. Since the data is only accessed occasionally a few times a year by the
development team for debugging and log analysis. You are looking for a cheaper storage
option for log files than the standard class. Which of the following is suitable?
] C. BigQuery
] D. Filestore
Explanation:
2 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Google Cloud Storage Nearline is a low-cost, highly durable storage service for storing
infrequently accessed data. Nearline Storage is ideal for data you plan to read or modify
on average once a month or less.
Google Cloud Storage Coldline is a very-low-cost, highly durable storage service for data
archiving, online backup, and disaster recovery. Coldline Storage is the best choice for
data that you plan to access at most once a year, due to its slightly lower availability, 90-
day minimum storage duration, costs for data access, and higher per-operation costs.
Option B is incorrect: Scenario mentions the need to access the data several times a
year. Hence, Coldline is not a suitable option because Coldline is used to plan archive
data accessed at most once a year.
Options C and D are incorrect: Both BigQuery and Filestore’s storage rate is two times
higher than Cloud Storage Nearline.
Source(s):
https://cloud.google.com/storage/docs/storage-classes
Question 2 Unattempted
Domain : Other
A system is expected to receive over 15,000 content delivery logs every minute from
different web & mobile apps. Logs are received in JSON format. Due to logs being
generated by different apps, each developed by a different team, logs do not have a
fixed structure and may hold different attributes. Which of the following is a
recommended storage option?
] A. Cloud SQL
] B. Cloud Spanner
3 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
] C. BigTable
] D. Datastore
Explanation:
Correct Answer: C
Cloud BigTable is a petabyte-scale, fully managed NoSQL database service for large
analytical and operational workloads. It provides flexible schema options.
Options A and B are incorrect: Cloud SQL & Spanner are relational database services.
They are not recommended for JSON-format log data with a flexible schema.
Option D is incorrect: Datastore can be a potential choice since it’s a NoSQL database.
However, Datastore is not built for storing huge data volumes as required in this scenario.
Datastore is designed for web applications of small scale.
Source(s):
BigTable vs Datastore:
https://stackoverflow.com/questions/30085326/google-cloud-bigtable-vs- google-
cloud-datastore
Question 3 Unattempted
Domain : Other
A stock market company receives real-time updates from different stock prices in the
USA. The company seeks a solution that can use stock price data for real-time analysis.
The solution should allow high throughput to allow queries to run and return the required
results with minimum latency. The solution should also be scaled out for more
performance. Which of the following products is the best solution in this scenario?
] A. BigTable
4 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
] B. BigQuery
] C. Datastore
] D. Cloud Spanner
Explanation:
Correct Answer: A
Cloud BigTable is a petabyte-scale, fully managed NoSQL database service for large
analytical and operational workloads. Under a typical workload, Cloud BigTable delivers
highly predictable performance. When everything is running smoothly, a typical workload
can achieve the following performance for each node in the Cloud Bigtable cluster,
depending on which type of storage the cluster uses:
In general, a cluster's performance increases linearly as you add nodes to the cluster. For
example, if you create an SSD cluster with 10 nodes, the cluster can support up to
100,000 rows per second for a typical read-only or write-only workload, with 6 ms
latency for each read or write operation.
Option B is incorrect: BigQuery doesn’t provide the high throughput and low latency
competent to Bigtable. Moreover, you are unable to increase BigQuery’s performance,
opposed to Bigtable which you can add more nodes for linear performance return.
Option C is incorrect: Datastore is not built for storing and reading huge data volumes as
required in this scenario. Datastore is designed for web applications of small scale.
Option D is incorrect: Cloud Spanner does not guarantee the same performance and low
latency as BigTable.
Source(s):
5 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
https://cloud.google.com/bigtable/docs/performance
Question 4 Unattempted
Domain : Other
You have an on-premise MySQL database that you have been asked to move to Google
Cloud. Users should run SQL queries to fetch data from the database. Your solution
should be cost-effective and allow increasing read capacities in the future. Which of the
following Google Cloud product is the best for this scenario?
] A. Cloud Storage
] B. Cloud Spanner
] C. Cloud SQL
] D. Cloud Datastore
Explanation:
Correct Answer: C
Cloud SQL is a fully managed database service that makes it easy to set up, maintain,
manage, and administer your relational PostgreSQL, MySQL, and SQL Server databases
in the cloud.
Option A is incorrect: Google Storage is blob storage. It does not work as an RDMS.
Option B is incorrect: Cloud Spanner is a very sophisticated and expensive approach for
this scenario. Cloud SQL is enough to cover the requirements.
Source(s):
6 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Cloud SQL:
https://cloud.google.com/sql/
Question 5 Unattempted
Domain : Other
You need to allow traffic from specific virtual machines in 'subnet-a' network access to
machines in 'subnet-b' without giving the entirety of subnet-a access. How can you
accomplish this?
Relocate the subnet-a machines to a different subnet and give the new
] B.
subnet the needed access.
Create a rule to deny all traffic to the entire subnet, then create a second
] C.
rule with higher priority giving access to tagged VM's in subnet-a.
You can only grant firewall access to an entire subnet and not individual
] D.
VM's inside.
Explanation:
Correct Answer A
A (Correct answer) - Create a firewall rule to allow traffic from resources with specific
network tags, then assign the machines in subnet-a the same tags.
Network tags allow more granular access based on individually tagged instances -
Instances by target tags: The firewall rule is applicable only to VMs if they have a
matching network tag.
B - Relocate the subnet-a machines to a different subnet and give the new subnet the
needed access.
This would give the entire subnet access which is against the requirements: allow traffic
7 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
C - Create a rule to deny all traffic to the entire subnet, then create a second rule with
higher priority giving access to tagged VM's in subnet-a.
Creating overlapping rules with higher priority might technically work, but since traffic
defaults to denied if no rule is in place, this is unnecessary. Assigning rules and instances
by tags is the best answer.
D - You can only grant firewall access to an entire subnet and not individual VM's inside.
Question 6 Unattempted
Domain : Other
You are managing the GCP Account of a client, the client raises a request to attach 9
local SSDs and launch a VM instance in us-east1 Region, as a Cloud Architect what would
be your response to the above request?
] A. You can always attach maximum of ten local SSD devices to a VM instance
Launch the instance first and add the local SSD drives later for optimal
] C.
performance.
] D. Request changes to quota from the Quotas page in the GCP Console
Explanation:
Answer: B
8 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Option B is the CORRECT because, Each local SSD is 375 GB in size, but you can attach
up to eight local SSD devices for 3 TB of total local SSD storage space per instance. If a
resource is not available, you won’t be able to create new resources of that type, even if
you still have remaining quota in your region or project.
Option A is INCORRECT because you can only attach up to 8 local SSD devices to a VM
instance also if the resource isn’t available you can’t create the resource.
Option C is INCORRECT because you can attach the local SSD devices to an Instance
while launching a VM instance.
Option D is INCORRECT because you can only attach up to 8 local SSD devices to a VM
instance that is the limit.
https://cloud.google.com/compute/quotas
Question 7 Unattempted
Domain : Other
You have a Kubernetes cluster with 1 node-pool. The cluster receives a lot of traffic and
needs to grow. You decide to add a node. What should you do?
] B. Use "kubectl container clusters resize" with the desired number of nodes.
Edit the managed instance group of the cluster and increase the number of
] C.
VMs by 1.
] D. Edit the managed instance group of the cluster and enable autoscaling.
Explanation:
Correct answer A
9 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Feedback
A is correct because this resizes the cluster to the desired number of nodes.
C is not correct because you should not manually manage the MIG behind a cluster.
D is not correct because you should not manually manage the MIG behind a cluster.
Question 8 Unattempted
Domain : Other
Using the principle of least privilege, your colleague Bob needs to be able to create new
instances on Compute Engine in project 'Project A'. How should you give him access
without giving more permissions than is necessary?
] C. Create a shared VPC that Bob can access Compute resources from.
Explanation:
Correct answer A
A (Correct answer) - Give Bob Compute Engine Instance Admin Role for Project A - The
Compute Engine Instance Admin role only gives access to create/edit compute engine
resources such as instances, disks, and snapshots.
B - Give Bob Compute Engine Admin Role for Project A - The Compute Engine Admin
role also gives admin access to network resources as well, which is too much.
10 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
C - Create a shared VPC that Bob can access Compute resources from – shared VPC is
not for granting user role. For example, even if you create shared VPC between “Project
A” and “Project B”, to meet the requirement, you still need to grant Bob Compute Engine
Instance Admin Role for Project A.
D - Give Bob Project Editor IAM role for Project A – that’ll be too much for create new
instances on Compute Engine in project 'Project A'
Question 9 Unattempted
Domain : Other
You have an application server running on Compute Engine in the europe-west1-d zone.
You need to ensure high availability and replicate the server to the europe-west2-c zone
using the fewest steps possible. What should you
Create a snapshot from the disk. Create a disk from the snapshot in the
] A.
europe-west2-c zone. Create a new VM with that disk.
Create a snapshot from the disk. Create a disk from the snapshot in the
] B. europe-west1-d zone and then move the disk to europe-west2-c. Create a
new VM with that disk.
Use "gcloud" to copy the disk to the europe-west2-c zone. Create a new VM
] C.
with that disk.
Explanation:
Correct answer A
A is correct because this makes sure the VM gets replicated in the new zone.
C is not correct because this will generate an error, because gcloud cannot copy disks.
11 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Question 10 Unattempted
You are working for a fast growing startup which has user base in US and Europe. Until
now the company had all servers in Oregon region and has now decided to launch a
replica of the entire infrastructure in EU region as well.
You started migration process with the least used server by creating snapshot of its disk
and moving it to London region. Once the snapshot was copied you launched a fresh VM
using the snapshot but discovered that few of the files were corrupted. What can be the
reason?
As the region was changed all the files were not decrypted by properly
] C.
which has resulted in data corruption.
Explanation:
Answer B
Option C is incorrect: As the encryption was done using Google managed key, it is the
responsibility of Google to decrypt and re-encrypt the files.
Link:
12 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
https://cloud.google.com/compute/docs/disks/create-snapshots
Question 11 Unattempted
Being a Senior Cloud Engineer of the company, you are asked to launch a managed
MySQL DB using custom VPC with network range of 172.17.0.0/16 on Google Cloud
keeping security at utmost priority allowing team members to access it only over private
channel.
You completed the setup with all the requirements, but developers are unable to access
DB over the private network via application hosted on VM. What can be the reason?
Explanation:
Answer B
Option B is correct: The IP range 172.17.0.0/16 is reserved for docker bridge network. Any
Cloud SQL instances created with an IP in that range will be unreachable. Connections
from any IP within that range to Cloud SQL instances using private IP will fail.
Option A is incorrect: As the range is reserved by Google even whitelisting it will not be
of any help.
Option C is incorrect: You do not need proxy in this case because you are trying to
access DB on the same network.
13 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Link:
https://cloud.google.com/sql/docs/mysql/configure-private-ip
Question 12 Unattempted
A new client has approached your company with a requirement that they want to host a
serverless on Google Cloud, but before that want you to give them price estimate of
running serverless application using Cloud Function. Which all parameters will you
consider while calculating price using Google Pricing Calculator?
Explanation:
Answer C
Option C is correct: You will need four parameters to give your client an estimate of
running Cloud Functions. These are: Type, Bandwidth, Execution Time and Invocations
per month.
Option A, B and D are incorrect because they are not complete set of parameters
required to calculate estimate of running Cloud Functions on Google Cloud.
Link:
https://cloud.google.com/functions/pricing
14 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Question 13 Unattempted
Your managers want you to suggest a low-cost storage option that could be used to
share read-only data across multiple instances with high performance and no edge
caching. Which storage option would you suggest?
] A. Cloud Storage
] B. Persistent Disk
] C. Cloud Filestore
] D. Firebase
Explanation:
Answer B
B is correct: Persistent disks are used to share read-only data across multiple instance
with high performance and no edge caching.
A is incorrect: Cloud Storage is reliable object storage with global edge-caching service
C is incorrect: Cloud Filestore is fully managed file storage service with high cost
Link:
https://cloud.google.com/products/storage/
15 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Question 14 Unattempted
Your teammate launched 3 instances using gcloud compute instances create command
with all the required flags. After few mins, you checked the console and found 0
instances in the GCE virtual machine section. How would you identify the project against
which the command executed?
] C. gcloud debug
Explanation:
Answer D
D is correct: This command would list the properties for the currently active
configurations.
B in incorrect: The following command will list all the projects that are created in a
particular GCP account
A,C are incorrect: The following commands doesn’t support the desired result.
Link:
https://cloud.google.com/sdk/gcloud/reference/config/list
Question 15 Unattempted
16 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
As a cloud engineer, you have been asked to upgrade the free trial of your account and
rename it to a production-inventory-system. You are getting permission denied error
while making the changes. Which of the following permission will solve the problem?
] A. billing.accounts.update
] B. Billing.account.upgrade
] C. billing.account.update
] D. billing.accounts.upgrade
Explanation:
Answer A
Link:
https://cloud.google.com/billing/docs/how-to/custom-roles
Question 16 Unattempted
Your client wants to migrate an application to Google Cloud which has 15 TB of relational
data. The database is growing rapidly by 10 GB everyday. In addition, to support the
traffic, at least 10 read replicas are required. Which of the following service would you
meet the requirements?
] A. Cloud Storage
17 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
] B. BigQuery
] C. Cloud Spanner
] D. Cloud Bigtable
Explanation:
Answer C
A is incorrect: Cloud Storage is reliable object storage with global edge-caching service
Link:
https://cloud.google.com/spanner
Question 17 Unattempted
Your client wants to develop a new cost effective web application that runs on serverless
platform using Cloud Function, Cloud Storage, Pub/Sub and Cloud CDN. The expected
data would be 20 GB. Which of the following database would be the most suitable
schemaless option to support the serverless functionality?
] A. Cloud BigTable
] B. BigQuery
18 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
] C. Cloud Spanner
] D. Cloud Firestore
Explanation:
Answer D
Link:
https://cloud.google.com/firestore
Question 18 Unattempted
] B. You have not specified the correct mount point in your pod.yaml file
19 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Explanation:
Answer A
Link:
https://cloud.google.com/kubernetes-engine/docs/how-to/persistent-volumes
/readonlymany-disks
Question 19 Unattempted
20 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Explanation:
Answer D
Link:
https://cloud.google.com/kubernetes-engine/docs/how-to/scaling-apps
Question 20 Unattempted
Your client has a web application that is currently using a single GCE to read the
messages from a pub/sub topic, process them and store them in Cloud Bigtable by its
unique order id. When a user uploads an order to Cloud Storage, it triggers a Cloud
Function that inserts a message to pub/sub topic. The traffic is expected to increase next
21 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
week and as a cloud engineer, you are expected to resolve any possible auto scaling
problem.
Which service is most likely to scale when the traffic is increased?
] A. Cloud Storage
] B. Cloud Bigtable
] C. GCE
] D. Pub/Sub
Explanation:
Answer C
B. GCE is not a managed service and hence auto scaling is set up manually by using
Managed Instance Group while architecting the infrastructure.
A, B and D are incorrect: These are the managed services and hence auto scaling is
managed by GCP
Link:
https://cloud.google.com/compute/docs/autoscaler
Question 21 Unattempted
22 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Explanation:
Answer B
B is correct: SSD Persistent Disk supports upto 15000-60000 IOPS per instance
Link:
https://cloud.google.com/compute/docs/disks
Question 22 Unattempted
John & co has deployed an application using Google App Engine standard environment.
You have been asked to update the cron schedules and default cookie expiration time,
which of the following predefined role has access to update default cookie expiration but
no access to update cron schedules?
23 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Explanation:
Answer B
B is correct: As per google docs, App Engine Admin has access to update default cookie
expiration but no access to update cron schedules
A, C & D are incorrect: None of the other predefined roles have permission to perform
either of the operations
Link:
https://cloud.google.com/appengine/docs/standard/python/roles
Question 23 Unattempted
You company has uploaded some business critical documents to Cloud Storage and
your project manager wants you to restrict access to the objects by using ACLs. Which of
the following permission would allow you to update the object ACLs?
] A. storage.objects.update
] B. storage.objects.setIamPolicy
] C. storage.objects.create
] D. storage.objects.getIamPolicy
Explanation:
Answer B
24 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Link:
https://cloud.google.com/storage/docs/access-control/iam-permissions
Question 24 Unattempted
Which of the following role provide granular access for a specific service and is managed
by GCP?
] A. Custom
] B. Predefined
] C. Admin
] D. Primitive
Explanation:
Answer B
B is correct: Predefined roles are managed roles and provide service specific access.
A is incorrect: Provide granular access for a specific service but managed by users
25 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Link:
https://cloud.google.com/iam/docs/understanding-roles
Question 25 Unattempted
When working on billing dashboard, which of the following option would lead you to cost
details for a specific invoice month?
] A. Report
] B. Cost Breakdown
] C. Cost Table
] D. Billing Export
26 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Explanation:
Answer C
C is correct: The cost table gives a detailed tabular view of monthly costs for a given
invoice.
A is incorrect: Lets you view your costs at a glance to discover and analyze trends.
D is incorrect: Billing exports is used for monitoring, analyzing and optimizing costs.
Link:
https://cloud.google.com/billing/docs/how-to/cost-table
Question 26 Unattempted
Your client wants to serve content using Cloud Storage that allow similar performance
advantage as regions, but also wants higher availability that comes with being geo-
redundant. You plan to use dual region to meet his requirement. Choose the regions that
does not fall under dual region compatibility. (Select 2)
A. nam4
B. us
C. eur4
D. eu
Explanation:
Answer B and D
27 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
B and D correct: us and eu are supported under multi-region and not in dual region
A and C are incorrect: The following 2 regions are currently supported in dual region.
Link:
https://cloud.google.com/storage/docs/locations
Question 27 Unattempted
How many instance-hours are supported by an App Engine as free daily usage quota
when scaling an instance using Automatic Scaling type?
] A. 28
] B. 8
] C. 35
] D. 10
Explanation:
Answer A
A is correct: As per google documentation, automatic scaling has a free daily usage
quota of 28 instance hours
Link:
28 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
https://cloud.google.com/appengine/docs/standard/python/how-instances-are-
managed
Question 28 Unattempted
You created a VPC with a CIDR block of 10.40.0.0/16 with 2 subnets of CIDR range
10.40.1.0/24 and 10.40.2.0/24. What would be the default routes within this virtual private
connection having the broadest CIDR range?
] A. 10.40.0.0/0
] B. 10.40.3.0/24
] C. 0.0.0.0/0
] D. 0.0.0.0/16
Explanation:
Answer C
Link:
https://cloud.google.com/vpc/docs/routes
Question 29 Unattempted
29 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
There are 5 VPC networks in your staging project created for 5 different applications.
Each network has its own CIDR range and firewall rules. You are asked to list the firewall
rules of network 3 to perform an update. Select the appropriate response.
Explanation:
Answer A
A is correct: The firewall-rules are defined under VPC but when using gcloud, they can
only be accessed by calling compute api and this the following command lists the
firewall-rules for the given network.
Link:
https://cloud.google.com/vpc/docs/using-firewalls
Question 30 Unattempted
Your application servers are deployed in private subnet and you connect to an
application instance using a bastion host, you connect to the bastion host using Console
Shell and then ssh to the respective application instance. Unfortunately, Cloud Shell is
taking a lot of time to respond and you manager wants you to ssh to the instance to fix an
application specific configuration. What command would you use to SSH into the server
30 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
Explanation:
Answer B
Link:
https://cloud.google.com/compute/docs/instances/connecting-to-instance
Finish Review
31 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...
PM Certi�cation Blog
32 of 32 10/7/19, 1:08 PM