Google Cloud Associate Cloud Engineer Practice Questions

1100 exam-accurate questions with explanations

info

Free Sample Questions

Showing 10 of 1100 questions. Get full access to all questions, detailed explanations, and study materials.

Section 1: Setting up a cloud solution environment

A site reliability engineer is setting up project payments-core. A deployment command fails because a newly created project has not activated the service needed to create Cloud Run resources. Which option best meets the requirement?

A Enable Cloud Billing export to BigQuery for detailed analysis.

B Set the default project in the active gcloud configuration.

C Verify that the selected service and feature are available in the target region.

D Enable the required service API in the project before retrying the deployment. check_circle

lightbulb

Explanation

Google Cloud services must have their APIs enabled in the target project before their resources can be provisioned. Why the best distractor fails: Billing configuration controls cost tracking and payment relationships; it does not implement the requested runtime or security behavior.

Section 2: Planning and implementing a cloud solution

During an initial deployment in europe-west4, a production VM must survive host maintenance when possible and use the correct SSH access approach defined by the organization. What is the most appropriate action?

A Configure OS Login and grant the appropriate IAM roles.

B Create a custom machine type when predefined CPU-to-memory ratios are inefficient.

C Launch the Compute Engine instance with the required availability policy and approved SSH or OS Login configuration. check_circle

D Use a zonal Persistent Disk appropriate for the workload.

lightbulb

Explanation

VM creation includes availability and access settings that should be selected deliberately. Why the best distractor fails: The option is related, but it does not match the scenario's required service type, control boundary, or operational goal.

Section 3: Ensuring the successful operation of a cloud solution

A new workload is being prepared for a logistics provider. An administrator needs to connect securely to a Compute Engine VM for troubleshooting. Which solution should the team implement?

A Use an approved Compute Engine remote-access method, such as OS Login-backed SSH, consistent with the organization's policy. check_circle

B Use a regional Persistent Disk when cross-zone block-storage replication is required.

C Use Spot VMs only for restart-tolerant interruptible workloads.

D Use Filestore when the requirement is a managed shared NFS-style file system.

lightbulb

Explanation

Remote access should use the organization's approved Compute Engine login approach, commonly integrated with IAM through OS Login. Why the best distractor fails: The option is related, but it does not match the scenario's required service type, control boundary, or operational goal.

Section 4: Configuring access and security

The team responsible for analytics-prod has a straightforward requirement. A service account can currently administer an entire project but only needs to publish messages to one Pub/Sub topic. Which option is the best fit?

A Use Bigtable for high-throughput, low-latency wide-column access patterns.

B Use Google Cloud Managed Lustre for throughput-intensive parallel POSIX file access.

C Use Storage Transfer Service for a managed large-scale dataset transfer into Cloud Storage.

D Replace the broad role with the narrowest suitable Pub/Sub role at the appropriate scope. check_circle

lightbulb

Explanation

Least privilege requires reducing both the permission set and resource scope to what the workload needs. Why the best distractor fails: The option is related, but it does not match the scenario's required service type, control boundary, or operational goal.

Section 1: Setting up a cloud solution environment

Before the first production release, finance wants notifications when a project's forecasted spend crosses a threshold, but does not want workloads automatically stopped. What should be done first?

A Create and ingest a custom metric for the application-specific signal.

B Review Active Assist recommendations and validate them before applying changes.

C Review service quotas and request an increase for the target region.

D Create a billing budget with appropriate alert thresholds and notification channels. check_circle

lightbulb

Explanation

Billing budgets and alerts notify stakeholders about spend; they do not automatically cap or stop consumption by default. Why the best distractor fails: The option is related, but it does not match the scenario's required service type, control boundary, or operational goal.

Section 2: Planning and implementing a cloud solution

A manufacturing group is preparing project security-ops. Administrators need centrally managed SSH access to Compute Engine instances using IAM rather than manually distributing SSH keys. What should the engineer do?

A Use Local SSD only when ephemeral high-performance local storage is acceptable.

B Create an instance template and deploy an autoscaled managed instance group.

C Configure OS Login and grant the appropriate IAM roles. check_circle

D Evaluate an appropriate Hyperdisk type for the required block-storage performance profile.

lightbulb

Explanation

OS Login integrates VM SSH access with IAM and reduces unmanaged key distribution. Why the best distractor fails: The option is related, but it does not match the scenario's required service type, control boundary, or operational goal.

Section 3: Ensuring the successful operation of a cloud solution

A network engineer is setting up project shared-platform. Operations needs to view currently running Compute Engine instances in a project before a maintenance window. Which option best meets the requirement?

A Set the default project in the active gcloud configuration.

B Create separate billing accounts and link each project's billing account appropriately.

C Deploy Google Cloud Managed Service for Prometheus for Prometheus-compatible monitoring.

D List or view the Compute Engine instances in the target project and region or zone context. check_circle

lightbulb

Explanation

Compute Engine inventory should be checked directly through the console, gcloud, or API. Why the best distractor fails: The option is related, but it does not match the scenario's required service type, control boundary, or operational goal.

Section 4: Configuring access and security

During an initial deployment in europe-west4, a developer needs read access to objects in one bucket and no permissions elsewhere. What is the most appropriate action?

A Apply an organization policy constraint at the narrowest hierarchy node that covers the target resources.

B Grant an appropriate Cloud Storage read role on the specific bucket. check_circle

C Configure Workload Identity Federation for an external non-human workload.

D Use a Cloud Identity group for workforce access that changes frequently.

lightbulb

Explanation

A bucket-scoped predefined read role follows least privilege. Why the best distractor fails: The option is related, but it does not match the scenario's required service type, control boundary, or operational goal.

Section 1: Setting up a cloud solution environment

A new workload is being prepared for an e-commerce marketplace. Analysts need detailed billing data in a queryable dataset for cost reporting and chargeback. Which solution should the team implement?

A Link the project to the correct billing account.

B Review Active Assist recommendations and validate them before applying changes.

C Enable Cloud Billing export to BigQuery. check_circle

D Create and ingest a custom metric for the application-specific signal.

lightbulb

Explanation

Billing export to BigQuery provides detailed cost and usage data for analysis. Why the best distractor fails: Billing configuration controls cost tracking and payment relationships; it does not implement the requested runtime or security behavior.

Section 2: Planning and implementing a cloud solution

The team responsible for customer-api-prod has a straightforward requirement. A fault-tolerant batch workload can restart when capacity is reclaimed and the team wants lower compute cost. Which option is the best fit?

A Use a Standard GKE cluster when the team needs direct node-pool control.

B Run the batch workers on Spot VMs. check_circle

C Use a zonal Persistent Disk appropriate for the workload.

D Configure VM Manager for centralized VM operating-system management.

lightbulb

Explanation

Spot VMs are appropriate for interruptible workloads that can tolerate VM termination. Why the best distractor fails: GKE is appropriate when Kubernetes behavior is required, but it adds or assumes an orchestration model that does not fit this scenario.

Get all 1100 questions

Full access includes all questions, detailed explanations, PDF downloads, and timed mock exams.

quiz Start Free Practice download Free PDF