ACE sample questions with answers
The other 176 questions are in the practice tool, with answers revealed as you go.
Start 20 questionsSetting up a cloud solution environment
- A consulting firm is mapping its Google Cloud structure and wants to identify the top-most container that every folder and project sits beneath. Which element is that?
- A compliance analyst at a payments firm needs one printable list of every role granted to every principal on the project ledger-prod. Which command returns that full set of project-level bindings?
- A developer wants to add an optional component to the local gcloud installation, keep the installed components current, and remove any she no longer uses. Which command group handles this?
Planning and implementing a cloud solution
- A batch rendering job can safely restart if interrupted. What is the main financial reason to run its worker VMs as Spot VMs instead of standard VMs?
- An engineer stops a VM to save compute cost but keeps its boot disk attached. What happens to the disk contents?
- A payments platform must keep one consistent ledger across three continents, scale writes horizontally, and still use SQL. Which product should the architect choose instead of Cloud SQL?
- A web app needs sub-millisecond reads for session tokens and cached query results. Which managed service supplies that in-memory store?
Ensuring successful operation
- A regional fleet of web servers runs in a managed instance group. The team has published a revised instance template and wants the running servers moved to it gradually, with a cap on how many instances can be unavailable at any moment. What should they do?
- A team wants a recovery point for a persistent boot disk before applying an operating system patch, and it wants to create a new disk from that point later if needed. Which Compute Engine resource fits?
- A retailer wants a fully managed service that reads a continuous stream of clickstream events, applies windowed aggregations, and writes the results to BigQuery. Which service fits?
- A ride-hailing backend must notify a billing service and a fraud service whenever a trip ends, without either service slowing down the trip flow. Which option fits best?
- A global retailer wants worldwide shoppers to reach its storefront through one IP address, with each request going to the nearest healthy region's backends, and without DNS-based geographic routing. Which Google Cloud feature provides this?
- A checkout service occasionally takes several seconds to respond. The team wants to see how one request's time is split across the frontend, a payment call, and a database call. Which tool shows that breakdown?
- A platform engineer opens a Deployment Manager configuration file for review. Which format does the configuration itself use?
- A small team wants to run a short piece of code whenever a file is uploaded to a Cloud Storage bucket, without provisioning or managing servers or containers. Which service is designed for this?
Configuring access and security
- A security reviewer at a fintech company is reading a project's IAM page and sees the basic roles Editor and Viewer assigned to several accounts. How do these basic roles differ from the granular roles offered for individual services?
- Which identity type lets a workload authenticate to Google Cloud APIs without any human-held password, with Google handling the authentication behind it?
- A finance lead wants a delivery team to link its projects to an existing billing account, but the team must not change the payment method or the account's settings. Which role should be granted on the billing account?
- Which IAM permission allows a user to power on a VM instance that is currently stopped?
- A security reviewer flags a production web tier for running as the project's default compute identity. What is the core concern with this setup?
- A company must reduce the risk from long-lived credentials used by its build system to deploy to Google Cloud. Which practice is the best choice?
- How long does Cloud Logging keep Admin Activity audit entries that land in the default _Required bucket?
- An investigator reviews a suspicious deletion of a Cloud Storage bucket and wants to know what a single administrative audit entry should reveal. Which details are typically present?
- A healthcare startup asks whether it must enable anything before data written to Cloud Storage is encrypted at rest. What is true?