Google Associate Cloud Engineer (ACE)

Question 1

The audit log files for your company must be kept for three years because it is a financial institution. There are several Google Cloud projects in your company. It would help if you practiced a cost-efficient log file retention strategy. What ought you to do?

Make a Cloud Audit export to the sink that stores logs to a Coldline Storage bucket Create a sink export that stores Cloud Audit logs to BigQuery Write a Cloud Dataflow pipeline to store the logs in Cloud SQL and export these logs to Cloud Pub/Sub Create a custom script that copies the logs from the Stackdriver logs to BigQuery using the logging API

Correct Answer:

Create a sink export that stores Cloud Audit logs to BigQuery

Question 2

For a latency-sensitive website, you wish to use GCP to run a single HTTP reverse proxy with caching. The CPU use for this specific reverse proxy is minimal. A 30-GB in-memory cache is desired, and an extra 2 GB of memory is required for the remaining processes. Cost savings are what you seek. How should this reverse proxy be used?

Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory Create a Cloud Memorystore for Redis instance with 32-GB capacity Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes

Correct Answer:

Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory

Question 3

In your own data center, bare-metal servers are hosting an application. Cloud storage must be accessible to the application. Security regulations, however, forbid the servers hosting the application from having available IP addresses or internet access. It would help if you stuck to Google's advice to grant the application access to cloud storage. What ought you to do?

1. Use nslookup to get the IP address for storage.googleapis.com 2. Negotiate with the security team to allow the servers to have a public IP address. 3. Only permit egress traffic from those servers to storage.googleapis.com's IP addresses 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud 2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance 3. Configure your servers to use that instance as a proxy to access Cloud Storage 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in Google Cloud 2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel 3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine 2. Create an internal load balancer (ILB) that uses storage.googleapis.com as a backend 3. Configure your new instances to use this ILB as a proxy

Correct Answer:

1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine 2. Create an internal load balancer (ILB) that uses storage.googleapis.com as a backend 3. Configure your new instances to use this ILB as a proxy

Question 4

You wish to set up a Cloud Run application that handles Cloud Pub/Sub topic message processing. You want to adhere to Google's suggestions. What ought you to do?

1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run 2. Create a Cloud Pub/Sub subscription for that topic 3. Make your application pull messages from that subscription 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic 2. Call your application on Cloud Run from the Cloud Function for every message 1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal 2. Create a Cloud Pub/Sub subscription for that topic 3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application 1. Create a service account 2. Give the Cloud Run Invoker role to that service account for your Cloud Run application 3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint

Correct Answer:

1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal 2. Create a Cloud Pub/Sub subscription for that topic 3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application

Question 5

A container image-packaged program has to be deployed in a new project. Not many requests are made daily to the application, which exposes an HTTP endpoint. You want to reduce spending. What ought you to do?

Deploy the container on Cloud Run on GKE Deploy the container on Cloud Run Deploy the container on GKE with cluster autoscaling and horizontal pod autoscaling enabled Deploy the container on App Engine Flexible

Correct Answer:

Deploy the container on Cloud Run on GKE

Question 1

Exam overview

About this Exam

Prepare with the Google Associate Cloud Engineer (ACE) practice quiz. This question bank includes 49 questions covering cloud, google, data, application, and ought. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

Google Associate Cloud Engineer (ACE)

This practice set contains 49 questions from the matching question bank and focuses on cloud, google, data, application, and ought. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.

No fixed duration is currently configured for this quiz.

Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.

Yes. You can retake the practice test again as you continue studying during your available access period.

After your access is confirmed, you can continue into the complete practice exam from this quiz flow.

Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.

Keep studying

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

Correct Answer:

About this Exam

Additional Information

Google Associate Cloud Engineer (ACE)

Frequently Asked Questions

Related Questions

10th Brigade Engineer Battalion (10BEB) Board Practice Exam

2nd Class Power Engineering (2A1) Practice Exam

2nd Class Power Engineering 2A3 Practice Exam

2nd Class Power Engineering (2B1) Practice Exam

2nd Class Power Engineering 2B2 Practice Exam

2nd Class Power Engineering 2B3 Practice Exam