Be able to create a project via gcloud projects create, link it to a billing account, and place it correctly in the resource hierarchy. The most important thing: understand that IAM and organization policies inherit from organization to folders to projects, so apply controls at the highest level that covers all target resources.
Start practicing
Setting Up a Cloud Solution Environment — choose a session length
Free · No account required
Domain overview
This domain covers establishing your Google Cloud foundation: creating and organizing projects, linking billing accounts, and structuring resources with the resource hierarchy (organization, folders, projects). Questions test practical setup tasks like gcloud project creation, applying organization policies and IAM at the right hierarchy level, and understanding project lifecycle and deletion constraints.
Exam objectives
Creating projects with gcloud projects create and associating a billing account
Designing resource hierarchy with organizations, folders, and projects for separation
Applying organization policies to constrain resources across projects
Using IAM roles and policies inherited down the resource hierarchy
Assuming folders are required; small orgs can separate environments with just projects under the organization node.
Forgetting that organization policies and IAM inherit downward, so setting them at the wrong level changes scope.
Trying to delete a project that has a lien, is linked to billing, or lacks the resourcemanager.projects.delete permission.
Click any question to see the full explanation and answer options, or start a focused practice session above.
A new engineer needs to set up the gcloud CLI on their local machine and authenticate with a user account. Which command should they run after installing the SDK?
2A startup wants to create a new GCP project for development. They've already created a billing account. Which command can they use to create the project?
3An organization wants to enforce a policy that disables the creation of VMs with external IPs across all projects. Which resource hierarchy level should the policy be attached to for maximum coverage?
4An engineer needs to enable the Compute Engine API for a project using the CLI. Which command should they run?
5A team is using gcloud configurations to manage multiple projects. They want to create a new configuration for a production project. How can they achieve this?
6An organization needs to separate development, staging, and production environments using the GCP resource hierarchy. Which approach is most effective?
7A Cloud Shell user wants to persist Terraform state files across sessions. What is the best approach?
8An administrator wants to set up a budget alert that triggers at 50%, 90%, and 100% of the monthly spending limit. What is the correct way to configure this?
9An engineer is setting up Cloud Identity for a new domain. What is a prerequisite for creating a Cloud Identity account?
10A company wants to grant a contractor read-only access to all Compute Engine instances in a specific project, but no other resources. Which IAM role should be assigned?
11A company wants to set up a new GCP project and ensure that only approved APIs can be used. Which two steps should they take? (Choose TWO)
12An engineer needs to choose a location for a new GCP project's resources to maximize availability and minimize latency for users in Europe and Asia. Which three actions should they take? (Choose THREE)
13A new engineer wants to set up their local environment to interact with Google Cloud. Which command initializes the gcloud CLI and configures the project, region, and zone?
14Your organization has multiple Google Cloud projects. You want to separate development and production environments. Which resource hierarchy structure is recommended?
15You want to enable the Kubernetes Engine API for your project using the command line. Which gcloud command should you use?
16Your organization wants to enforce that all Compute Engine instances are created only in us-central1 and europe-west1. You need to implement this constraint across all projects in the organization. What should you do?
17Your company wants to track costs per department. Each department has its own project. You need to set up a budget alert in the billing account for each project. What is the most efficient approach?
18You are using Cloud Shell and need to access a file you created two weeks ago. What is the persistence behavior of Cloud Shell home directories?
19You need to list all projects in your organization using the gcloud CLI. Which command is correct?
20You want to switch between multiple GCP projects frequently using the gcloud CLI. What is the recommended approach?
21Your company has a production project and a development project. You want to ensure that no one can delete the production project accidentally. Which TWO actions should you take? (Choose 2)
22You are setting up a new GCP project for a microservices application. You need to select which APIs to enable. Which THREE APIs are likely required? (Choose 3)
23You create a new Google Cloud project using the Cloud Console. After creating the project, you need to enable the Compute Engine API. What is the correct command to do this using the Cloud Shell?
24An organization wants to separate its development and production environments using Google Cloud resource hierarchy. What is the recommended approach?
25A company has multiple Google Cloud projects and wants to track costs by department. They have already applied labels to resources with key 'department'. What is the next step to view costs grouped by department?
26You need to install the Google Cloud SDK on a Linux machine. Which command should you use to add the Cloud SDK distribution URI as a package source?
27You are managing a project and need to create a custom IAM role that allows only the permissions compute.instances.list and compute.instances.get. What is the correct way to create this role using gcloud?
28A team is using Cloud Shell to manage resources. They notice that their home directory is persistent across sessions, but they want to ensure that configuration files and scripts are also available after they stop and restart Cloud Shell. What should they do?
29A developer wants to use gcloud CLI with application default credentials (ADC) to authenticate to Google APIs from their local machine. Which command should they run first?
30You need to delete a GCP project, but the deletion fails with an error. What is the most likely cause?
31You are setting up a new organization in Google Cloud. You want to restrict the regions where resources can be created to comply with data residency requirements. What should you do?
32A company wants to manage multiple Google Cloud projects and enforce consistent security policies across all of them. Which TWO resources should they use? (Choose two.)
33You need to view the current gcloud configuration settings, including the active account, project, and compute region. Which TWO commands can you use? (Choose two.)
34An engineer needs to create a new GCP project using the Cloud SDK. They have already installed and initialized gcloud with a user account that has Billing Account Administrator and Project Creator roles. Which command creates the project 'my-new-project'?
35An engineer is setting up Cloud Shell for the first time. They notice that their home directory persists across sessions. How much storage is allocated to the home directory in Cloud Shell?
36A team wants to enable Compute Engine API in their project using gcloud. Which command should they run?
37An engineer wants to ensure that no one in their organization can create VMs with public IP addresses. Which Google Cloud tool should they use to enforce this restriction?
38An organization has multiple GCP projects and wants to centralize billing analysis across all projects. They need to export detailed billing data (e.g., cost per SKU per project) to a BigQuery dataset. Which billing export option should they configure?
39A company wants to set up a budget alert at 50% and 90% of their projected monthly spending. Which service should they use?
40What is the basic role that grants full control over all resources in a GCP project?
41An engineer needs to give a data analyst access to run BigQuery queries but prevent them from viewing or modifying data in Cloud Storage. The analyst should be able to create new datasets. Which IAM role should the engineer assign at the project level?
42A company wants to manage multiple GCP projects with different configurations (e.g., different regions and accounts) on the same workstation. Which gcloud feature should they use to switch between these configurations?
43An engineer is setting up a new GCP project for a containerized application. They need to enable the required APIs. Which TWO APIs must be enabled to deploy and manage a Kubernetes cluster and build container images?
44A startup wants to control costs across multiple GCP projects. They want to track spending by department and set budget alerts. Which THREE actions should they take?
45An administrator needs to create a custom IAM role that allows listing projects and viewing billing accounts. Which TWO permissions should be included?
46An organization has multiple Google Cloud projects and wants to enforce a policy that all Compute Engine instances must use a specific set of approved machine types. Which tool should be used to implement this constraint?
47Which gcloud command is used to set the default project for a configuration profile?
48An engineer needs to enable the Compute Engine API for a project using the gcloud command line. Which command should they run?
49A company wants to track costs by department and project. They have multiple GCP projects used by different teams. Which feature should they use to categorize costs?
50An organization wants to enforce that all projects under a specific folder have a set of constraints, such as disabling default network creation and requiring shielded VMs. What is the most efficient way to achieve this?
51Which of the following is true about Cloud Shell?
52An engineer wants to authenticate to Google Cloud using their own user credentials and also set up application default credentials for a local development environment. Which sequence of gcloud auth commands should they use?
53What is the purpose of the gcloud init command?
54A company wants to organize their GCP resources into a hierarchy to separate development, staging, and production environments. Which THREE resources can be used to create this separation?
55An engineer needs to enable the Cloud Build API and the Kubernetes Engine API for a project. Which TWO commands should they run?
56A new engineer needs to enable the Compute Engine API for a project using the gcloud command-line tool. Which command should they run?
57An organization wants to manage GCP resources for multiple teams using a hierarchy of folders and projects. They need to apply a uniform policy that restricts the regions where VM instances can be created across all projects in a folder. Which approach should they use?
58A developer wants to authenticate to GCP from their local machine using their own user account to run gcloud commands that interact with a project. They have already installed the Cloud SDK. Which command should they use to authenticate with their Google account?
59After creating a new GCP project, an engineer attempts to delete it using `gcloud projects delete PROJECT_ID` but receives an error. What is the most likely cause?
60A company wants to track and forecast GCP spending across different departments. They have already set up labels on resources to indicate the department. Which additional step should they take to analyze costs by department in BigQuery?
61A developer is using Cloud Shell and wants to ensure that their gcloud configuration persists after the Cloud Shell session ends. They have set the compute and access settings using `gcloud config set`. What should they do to keep these settings for future sessions?
62A DevOps engineer wants to set up budget alerts for a GCP project so that the finance team is notified when costs reach 50% and 90% of the budget. Which two configurations are required? (Choose TWO.)
63A developer wants to use Cloud Shell for managing GCP resources. Which three statements about Cloud Shell are true? (Choose THREE.)
64An engineer needs to create a new project and set up the environment. They are using the gcloud command-line tool. Which two commands are required to create a project and link it to a billing account? (Choose TWO.)
65A Cloud Architect needs to understand the GCP resource hierarchy to set up proper access control. Which three resources are part of the GCP resource hierarchy? (Choose THREE.)
66You are a new associate cloud engineer at a company that uses Google Cloud. You have been asked to set up a new project for a development team. Your manager wants you to ensure that the project is created under the correct organization node and that the team can immediately start using Compute Engine. You have been granted the Project Creator role at the organization level. What should you do first?
Be able to create a project via gcloud projects create, link it to a billing account, and place it correctly in the resource hierarchy. The most important thing: understand that IAM and organization policies inherit from organization to folders to projects, so apply controls at the highest level that covers all target resources.
The Courseiva ACE question bank contains 66 questions in the Setting Up a Cloud Solution Environment domain, covering the 20% of the exam attributed to this domain in the official Google Cloud blueprint. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Setting Up a Cloud Solution Environment domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included