Courseiva
Knowledge + Practice
CertificationsVendorsCareer RoadmapsLabs & ToolsStudy GuidesGlossaryPractice Questions
C
Courseiva

Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more.

Certification Practice Questions

CCNA practice questionsSecurity+ SY0-701 practice questionsAWS SAA-C03 practice questionsAZ-104 practice questionsAZ-900 practice questionsCLF-C02 practice questionsA+ Core 1 practice questionsGoogle Cloud ACE practice questionsCySA+ CS0-003 practice questionsNetwork+ N10-009 practice questions
View all certifications →

Product

CertificationsCertification PathsExam TopicsPractice TestsExam Dumps vs Practice TestsStudy HubComparisons

Company

AboutContactEditorial PolicyQuestion Writing PolicyTrust Center

Legal

Privacy PolicyTerms of Service

Courseiva is a free IT certification practice platform offering original exam-style practice questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics for Cisco, CompTIA, Microsoft, AWS, and other technology certifications.

© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved.

Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for.

← Setting up a cloud solution environment practice sets

Google ACE Setting up a cloud solution environment • Complete Question Bank

Google ACE Setting up a cloud solution environment — All Questions With Answers

Complete Google ACE Setting up a cloud solution environment question bank — all 0 questions with answers and detailed explanations.

98
Questions
Free
No signup
Certifications/Google ACE/Practice Test/Setting up a cloud solution environment/All Questions
Question 1easymultiple choice
Read the full Setting up a cloud solution environment explanation →

What is the correct order of the Google Cloud resource hierarchy from highest to lowest level?

Question 2easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A startup creates its first Google Cloud project. Before deploying any paid resources, what must be linked to the project?

Question 3easymultiple choice
Read the full Setting up a cloud solution environment explanation →

Which gcloud CLI command authenticates a developer's local environment with their Google account?

Question 4mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A developer attempts to create a Cloud SQL instance but receives the error: 'API [sqladmin.googleapis.com] not enabled.' What is the correct resolution?

Question 5mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

An application running on a Compute Engine VM needs to read objects from a Cloud Storage bucket in the same project. What is the recommended authentication approach?

Question 6mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A company organizes its GCP projects by business unit — Finance, Engineering, and Sales. Which resource is best suited to group these projects while applying shared IAM policies to all projects in each group?

Question 7mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A developer works across five different GCP projects daily and wants to switch their active project in the gcloud CLI without rerunning `gcloud init`. Which command should they use?

Question 8hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A security team wants to prevent every project in the organization from creating VM instances with external IP addresses — without requiring configuration in each individual project. What is the most scalable solution?

Question 9easymultiple choice
Read the full Setting up a cloud solution environment explanation →

Where in the Google Cloud Console can a user view all APIs currently enabled for their project and monitor their usage?

Question 10mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A team's Cloud Build jobs are consistently failing with 'quota exceeded' errors. Billing is active and the project has available budget. What should the team do?

Question 11mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A Cloud Identity admin needs to grant a user access to manage billing for a specific GCP project without giving them access to any other projects in the organization. Which role should be assigned at the project level?

Question 12mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

During a gcloud CLI session, a developer runs `gcloud config list` and sees the output shows `project = old-project`. They need to work in `new-project`. Which sequence of commands correctly switches projects and verifies the change?

Question 13hardmultiple choice
Read the full NAT/PAT explanation →

An organization has a policy requiring all new GCP projects to be created within specific folders and linked to approved billing accounts only. Which combination of features enforces this at scale?

Question 14easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A GCP project has three service accounts. A developer wants to list all service accounts in the project using the gcloud CLI. Which command is correct?

Question 15mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A team uses Cloud Shell for all GCP CLI operations. A developer notices that files they create in Cloud Shell's home directory persist between sessions, but files in other directories do not. What explains this behavior?

Question 16mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A GCP project uses labels extensively for cost attribution across teams. A finance team member needs to add a 'cost-center' label to an existing Compute Engine VM. Which gcloud command applies the label?

Question 17easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A project manager wants to see how much each GCP service is costing the team this month, broken down by service. Where should they look?

Question 18mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A new engineer joins the team and needs access to GCP. The company uses Google Workspace for identity management. The GCP admin needs to add the engineer and grant them access to one project. What is the correct order of steps?

Question 19mediummultiple choice
Read the full NAT/PAT explanation →

A developer frequently switches between three GCP projects and accounts throughout the day. They want to avoid rerunning `gcloud init` each time. Which gcloud feature lets them save and switch between pre-configured project/account/region combinations?

Question 20mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A security team needs an inventory of all Compute Engine VM instances across all projects in their GCP organization, including instance names, zones, and status, without logging into each project individually. Which service provides this?

Question 21hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A team runs a critical production project and wants to prevent anyone — including project owners and organization admins — from accidentally deleting it. Which mechanism provides this protection?

Question 22mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

Instead of granting IAM roles to 50 individual developer email addresses, a team wants to manage access by team membership. When a developer joins or leaves, access updates automatically. What is the recommended approach?

Question 23hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A Cloud Build pipeline needs to deploy to Cloud Run but the pipeline's service account has only minimal permissions. Rather than granting it Cloud Run Admin, the team wants it to temporarily act as a more privileged deployment service account. Which technique enables this?

Question 24easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A project was accidentally deleted. A GCP administrator realizes the mistake 3 days later. What is the maximum time window in which the project can be restored?

Question 25mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A FinOps team wants to analyze daily GCP spending trends, allocate costs by team using labels, and create custom dashboards. Which configuration exports billing data for this analysis?

Question 26mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

An infrastructure team uses Terraform to manage GCP resources including API enablement. Which Terraform resource enables a GCP API for a project, equivalent to `gcloud services enable`?

Question 27mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A platform team needs to categorize GCP resources for policy enforcement (e.g., applying IAM conditions only to resources tagged 'environment:production'). Labels exist but don't support IAM conditions. What feature provides policy-tag-based enforcement?

Question 28easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A developer wants to verify which IAM roles they currently have on a specific GCP project before requesting additional access. Which gcloud command lists the IAM policy for a project?

Question 29easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A developer's gcloud command fails with 'PROJECT_ID is not set'. They need to confirm the currently active configuration — project, account, and default region. Which command shows this?

Question 30mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A startup's GCP project has a project ID of 'my-startup-prod' and a project number of '123456789012'. An API call requires the project number, not the project ID. How can the project number be retrieved quickly?

Question 31hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A security auditor needs to check whether a specific user (user@company.com) currently has sufficient permissions to delete a Cloud SQL instance in project 'prod-db'. Without making any changes, which tool simulates this check?

Question 32mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A team is migrating from Google Container Registry (gcr.io) to Artifact Registry. Existing automation scripts use `gcr.io/my-project/myimage`. To avoid updating all scripts immediately, which Artifact Registry feature allows gcr.io-addressed pulls to work with Artifact Registry backends?

Question 33mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A platform admin creates a new GCP project for a team. The team lead's email is teamlead@company.com. The admin needs the team lead to be able to create resources in the project but not manage IAM policies or billing. Which role is most appropriate?

Question 34easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A team needs to create a Compute Engine VM but the `gcloud compute instances create` command is failing with 'insufficient permissions'. The team lead says the service account has the Compute Engine Default role. What is the minimal IAM role that allows creating VM instances?

Question 35mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A developer accidentally exposed their gcloud application default credentials (ADC) file. They need to immediately revoke these credentials. Which command revokes the active application default credentials?

Question 36hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A GCP organization has 150 projects. A new security policy requires all projects to enable the Security Command Center API. What is the most efficient way to enable this API across all projects without manually visiting each project?

Question 37mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A team's CI/CD pipeline authenticates to GCP using Application Default Credentials (ADC). The pipeline runs on a GCE VM with a service account attached. Which credential source does the ADC use when running on a GCE VM?

Question 38mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A GCP project administrator needs to share read-only access to all resources in the project with an external auditor who has a Gmail account (auditor@gmail.com). What should the admin do?

Question 39mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

Your organization has a parent folder structure: Root Org → Division A → Team 1 → projects. You need to apply a constraint that prevents all projects in Team 1 from disabling Cloud Audit Logs, but you want Division A to be able to override this constraint for its other teams. At which resource level should you apply the `gcp.disableCloudLogging` org policy?

Question 40easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A developer runs `gcloud projects list` and receives the error: `ERROR: (gcloud.projects.list) PERMISSION_DENIED: The caller does not have permission`. The developer has the Viewer role on several projects. What is the most likely cause?

Question 41hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

You are designing an environment where a CI/CD pipeline running in GitHub Actions needs to deploy Cloud Run services without storing any long-lived service account keys. Your organization's security policy prohibits downloading SA keys. Which approach meets these requirements?

Question 42mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

You need to enforce that all new Cloud Storage buckets in your organization use Uniform Bucket-Level Access (UBLA) and are created in one of three approved regions: `us-central1`, `us-east1`, or `europe-west1`. What is the most efficient way to enforce both constraints?

Question 43mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A developer needs to use Application Default Credentials (ADC) in a local development environment to call the Cloud Translation API. They have already run `gcloud auth login`. What additional step is required to make ADC work correctly?

Question 44hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

Your security team requires that all service accounts in your GCP organization older than 90 days that have not been used must be automatically disabled. They want a fully managed, serverless solution with no persistent infrastructure. Which architecture best meets these requirements?

Question 45easymultiple choice
Read the full Setting up a cloud solution environment explanation →

Which gcloud command lists all available roles that can be granted on a GCP project, including both predefined and custom roles?

Question 46mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A team is creating a new GCP project for a sensitive workload. They need to ensure the project is linked to the correct billing account, placed in the correct folder, and has specific APIs enabled — all reproducibly. They want to automate this via Infrastructure as Code. Which approach is most appropriate?

Question 47hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A team runs `gcloud organizations list` and sees no output even though they know their company has a GCP organization. What is the most likely cause, and how should they resolve it?

Question 48mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

You need to allow a third-party auditing company to view all resources and IAM policies across your GCP organization without being able to modify anything. Which role should you grant, and at which level?

Question 49mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

Your company uses Google Workspace for email. You need to set up GCP for a new team that includes contractors who use non-Google email addresses. Which identity solution allows contractors to authenticate to GCP without a Google Workspace license?

Question 50hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

You need to set an organization policy that prevents any project from creating Cloud SQL instances with a public IP address. The constraint you need is `sql.restrictPublicIp`. What type of constraint is this, and how do you enable it?

Question 51mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A project has the following IAM bindings: User A has `roles/editor` at the project level, and a folder-level policy denies `roles/editor` to User A. Which effective permission does User A have on the project?

Question 52easymultiple choice
Read the full Setting up a cloud solution environment explanation →

You want to receive email notifications when your GCP project's billing reaches 50%, 80%, and 100% of a monthly budget. Which GCP feature should you configure?

Question 53hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

Your organization policy at the root level sets `gcp.resourceLocations` to allow only `us-central1` and `us-east1`. A business unit needs to deploy resources in `europe-west1` for GDPR compliance. How can you grant this exception without affecting other business units?

Question 54mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

You need to tag all Compute Engine VMs in your organization with a `cost-center` tag for billing allocation reports. The tag values must be controlled centrally — only predefined values should be allowed. Which GCP feature enables this?

Question 55easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A project is being decommissioned. You need to delete it but want to ensure there is a 30-day window during which the deletion can be cancelled if needed. What happens when you delete a GCP project?

Question 56mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

You have a GCP organization with hundreds of projects. You need to find all projects that have the `compute.googleapis.com` API enabled. Which approach provides the most efficient way to query this across all projects?

Question 57hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

You need to configure a GCP organization so that when new projects are created, a specific set of default IAM bindings is automatically applied (e.g., the security team's group gets Security Reviewer on every new project). Which approach achieves this without requiring manual post-creation steps?

Question 58mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

Your team needs to manage Google Kubernetes Engine clusters across multiple projects. Rather than granting `roles/container.admin` on each project individually, you want a centralized approach. What is the most maintainable solution?

Question 59mediumdrag order
Read the full Setting up a cloud solution environment explanation →

Arrange the steps to create a Compute Engine instance with a custom service account in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 60mediumdrag order
Read the full Setting up a cloud solution environment explanation →

Order the steps to configure a Cloud Load Balancer (HTTP/S) in front of a Compute Engine instance group.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 61mediummatching
Read the full Setting up a cloud solution environment explanation →

Match each Google Cloud service to its primary purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Object storage for unstructured data

Serverless data warehouse for analytics

Asynchronous messaging service

Event-driven serverless compute

Managed relational database service

Question 62mediummatching
Read the full Setting up a cloud solution environment explanation →

Match each Google Cloud deployment tool to its purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Infrastructure-as-code using YAML

Multi-cloud infrastructure provisioning

CI/CD pipeline for building and testing

Command-line tool for managing GCP resources

Web-based UI for managing GCP

Question 63easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A developer wants to use Cloud Shell to create a Compute Engine VM but receives an error 'API not enabled'. What should the developer do first?

Question 64mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A company wants to allow a junior admin to view project resources and create/modify Cloud Storage buckets but not delete them. Which IAM role should be assigned?

Question 65hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A service account needs to be able to create snapshots of disks in a specific project and store them in a different project. What is the correct IAM policy configuration?

Question 66easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A user wants to use gcloud to create a Cloud Storage bucket but receives a permission denied error. What is the most likely cause?

Question 67mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

An organization needs to set up a new Google Cloud project with restricted access to only approved IP ranges for SSH into VMs. Which Google Cloud service should be used?

Question 68hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A service account from project A needs to read a BigQuery dataset in project B. The service account is granted roles/bigquery.dataViewer at the project B level. Yet the access is denied. What additional step is needed?

Question 69easymulti select
Read the full Setting up a cloud solution environment explanation →

Which two actions are required to allow a user to create a Cloud Storage bucket using gcloud?

Question 70mediummulti select
Review the full subnetting walkthrough →

Which three steps are part of the initial setup for a new Google Cloud project with multiple subnets in a VPC?

Question 71hardmulti select
Read the full Setting up a cloud solution environment explanation →

A developer needs to allow a CI/CD system to deploy applications to Cloud Run. The CI/CD system uses a service account. Which two roles should be granted to that service account?

Question 72mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

Refer to the exhibit. A user runs `gcloud compute instances list` in Cloud Shell and gets the output 'Listed 0 items.' The user expects to see the VM they just created via the Console. What is the most likely cause?

Exhibit

Output of `gcloud compute instances list` in Cloud Shell:
Listed 0 items.
The user expects to see a VM they just created via the Console.
Question 73hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

Refer to the exhibit. An administrator wants to grant a service account read-only access to all Compute Engine instances in a project, but only those with label 'environment=production'. Which IAM policy configuration should be used?

Exhibit

IAM policy JSON:
{
  "bindings": [
    {
      "role": "roles/compute.viewer",
      "members": [
        "serviceAccount:sa@project.iam.gserviceaccount.com"
      ],
      "condition": {
        "title": "production_label",
        "expression": "resource.labels.environment == 'production'"
      }
    }
  ]
}
Question 74easymultiple choice
Read the full Setting up a cloud solution environment explanation →

Refer to the exhibit. A developer tries to create a new project using the command `gcloud projects create my-project --name="My Project"` and receives the error 'Project ID my-project already exists.' What should the developer do?

Exhibit

Error from gcloud:
$ gcloud projects create my-project --name="My Project"
ERROR: (gcloud.projects.create) Project ID 'my-project' already exists.
Question 75easymultiple choice
Read the full Setting up a cloud solution environment explanation →

Which service should be used to manage billing budgets and alerts?

Question 76mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A company wants to ensure that all IAM users in a project must use two-factor authentication. Which Google Cloud service should be used?

Question 77hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A developer is creating a script that uses the Google Cloud SDK to automate resource creation. The script will be run from a CI/CD pipeline. What is the best way to authenticate?

Question 78easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A company is deploying a GKE cluster in a new VPC. The cluster nodes need to communicate with a Cloud SQL instance that has a private IP address. The company wants to minimize data transfer costs and avoid using public IPs. What is the most cost-effective configuration?

Question 79mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A company is migrating a legacy on-premises application to Google Cloud. The application stores structured transactional data in a relational database. The database currently handles 2,000 transactions per second (TPS) and is expected to grow to 10,000 TPS over the next year. The database size is 500 GB. The application requires strong consistency and the ability to run complex JOIN queries. Which Google Cloud database service should the company choose?

Question 80hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A DevOps engineer created a Compute Engine instance with a startup script that installs Apache and configures a website. The startup script runs a command that requires a service account with roles/storage.objectViewer to download assets from Cloud Storage. The instance is created with the default compute service account. The startup script fails. Upon inspection, the engineer finds that the service account cannot download the assets. What is the most likely cause?

Question 81easymultiple choice
Review the full subnetting walkthrough →

A company has a set of Compute Engine instances in a VPC that need outbound internet access for updates, but they do not have public IP addresses. The instances are running in a subnet with Private Google Access enabled. Which service should the company use to provide internet access?

Question 82mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A company is deploying a global web application that serves users from multiple continents. The application runs on Compute Engine instances in us-central1 and europe-west1. The company wants to provide the lowest latency access to users and support automatic failover if an entire region becomes unavailable. Which load balancing solution should they use?

Question 83hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A company runs a batch processing workload on Compute Engine that completes in 30 minutes. The workload is CPU-intensive and runs once daily. The company wants to minimize costs while maintaining performance. Which of the following is the most cost-effective compute option?

Question 84easymultiple choice
Read the full Setting up a cloud solution environment explanation →

An organization with multiple Google Cloud projects wants to centralize network administration by having a single VPC network that hosts shared services and allows project teams to create their own resources in separate projects that can connect to the shared VPC. Which Google Cloud feature should they use?

Question 85mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A company is deploying a public-facing web application on Compute Engine behind a global HTTP(S) Load Balancer. The company wants to protect the application from common web attacks, such as SQL injection and cross-site scripting (XSS). Which Google Cloud security service should they enable?

Question 86hardmultiple choice
Open the full BGP breakdown →

A company has two on-premises data centers connected via a redundant network. They want to extend their Google Cloud VPC to on-premises using Cloud VPN with dynamic routing (BGP). They need to ensure traffic from on-premises to Google Cloud can fail over to the secondary tunnel if the primary tunnel fails. The VPC has a single region. What should they configure?

Question 87easymulti select
Read the full Setting up a cloud solution environment explanation →

A new developer is setting up their first Google Cloud project. They need to perform initial project configuration. Which TWO actions are necessary before they can create any resources? (Choose TWO.)

Question 88mediummulti select
Read the full Setting up a cloud solution environment explanation →

A company wants to deploy a highly available application across two Google Cloud regions for disaster recovery. The application consists of Compute Engine backend instances and a Cloud SQL database. Which THREE components are required to set up this multi-region architecture? (Choose THREE.)

Question 89hardmulti select
Read the full Setting up a cloud solution environment explanation →

A company is planning a hybrid cloud setup connecting their on-premises network to Google Cloud. They have a single data center with limited bandwidth. They need low latency and high reliability for their application traffic. Which TWO services should they consider? (Choose TWO.)

Question 90hardmultiple choice
Open the full BGP breakdown →

A company has 50+ Compute Engine instances running a stateful application in the us-central1 region. The instances are part of a managed instance group behind an internal load balancer. The application stores data on zonal persistent disks. The company wants to migrate the entire application stack to the europe-west1 region to reduce latency for European users. They have a Cloud VPN tunnel between their on-premises data center and us-central1. They want to extend connectivity to europe-west1 with minimal downtime. The current on-premises router uses BGP to advertise a specific CIDR block (10.0.0.0/8) to Google Cloud. The VPC is in custom mode with subnets in us-central1 and europe-west1 already created. The Cloud VPN gateway in us-central1 is attached to a Cloud Router with a BGP session to the on-premises router. Which course of action should the company take to achieve the migration with minimal downtime?

Question 91easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A startup wants to set up a Google Cloud environment with minimal administrative overhead. They have a small team of developers and need to manage permissions. Which approach should they use for organizing their cloud resources?

Question 92mediummulti select
Read the full Setting up a cloud solution environment explanation →

A company is setting up a new Google Cloud environment. They need to ensure that they can manage billing across multiple projects and have a hierarchical resource structure. Which TWO statements are correct about the Google Cloud resource hierarchy?

Question 93hardmultiple choice
Read the full Setting up a cloud solution environment explanation →

A company has just created a Google Cloud organization with multiple folders for different departments. The security team has set up organization policies, including a constraint that disables the creation of external IP addresses for VMs. However, the development team is unable to launch a VM instance because the 'External IP addresses' option is greyed out. They need to create a VM with an external IP for a temporary testing environment. The development team has the Project Owner role on their project. What should the company do to allow the development team to create VMs with external IPs while maintaining security?

Question 94mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A company is migrating to Google Cloud and wants to set up a new cloud environment. They need to create a project structure that supports multiple environments (development, staging, production) with appropriate access controls. The security team requires that all project creation be approved and that projects are automatically placed in the correct folder based on environment. They also want to enforce that all projects have a specific set of labels. What should they do to achieve this?

Question 95easymultiple choice
Read the full Setting up a cloud solution environment explanation →

A small team is setting up a new Google Cloud project for a web application. They need to ensure that they can manage costs and receive alerts when spending exceeds a threshold. What is the simplest way to achieve this?

Question 96easymulti select
Read the full Setting up a cloud solution environment explanation →

A developer needs to set up a Google Cloud environment for a new project. Which TWO actions are required to enable billing and APIs for the project?

Question 97mediummultiple choice
Read the full Setting up a cloud solution environment explanation →

A new developer tries to create a project using gcloud projects create but receives the error shown in the exhibit. Which action should the administrator take to resolve the issue?

Exhibit

Refer to the exhibit.

ERROR: (gcloud.projects.create) User [user@example.com] does not have permission to create projects (or the project already exists). To create a project, you must have the resourcemanager.projects.create permission on the resource.
Question 98hardmultiple choice
Read the full NAT/PAT explanation →

A company is setting up a multi-project environment in Google Cloud with centralized billing. They need to separate development, staging, and production projects. They require that all projects have a specific set of APIs enabled (Compute Engine, Cloud Storage, Cloud SQL) and that only certain users can create projects. Additionally, the security team mandates that service accounts in one project cannot access resources in another project unless explicitly allowed. Which combination of steps should the administrator take to meet these requirements?

Practice tests

Scored 10-question sessions with instant feedback and explanations.

Google ACE Practice Test 1 — 10 Questions→Google ACE Practice Test 2 — 10 Questions→Google ACE Practice Test 3 — 10 Questions→Google ACE Practice Test 4 — 10 Questions→Google ACE Practice Test 5 — 10 Questions→Google ACE Practice Exam 1 — 20 Questions→Google ACE Practice Exam 2 — 20 Questions→Google ACE Practice Exam 3 — 20 Questions→Google ACE Practice Exam 4 — 20 Questions→Free Google ACE Practice Test 1 — 30 Questions→Free Google ACE Practice Test 2 — 30 Questions→Free Google ACE Practice Test 3 — 30 Questions→Google ACE Practice Questions 1 — 50 Questions→Google ACE Practice Questions 2 — 50 Questions→Google ACE Exam Simulation 1 — 100 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Setting up a cloud solution environmentPlanning and configuring a cloud solutionDeploying and implementing a cloud solutionEnsuring successful operation of a cloud solutionConfiguring access and security

Practice by scenario

Filter questions by type — troubleshooting, exhibit, drag-and-drop, PBQ, ACLs, OSPF, and more.

Browse scenarios→

Continue studying

All Setting up a cloud solution environment setsAll Setting up a cloud solution environment questionsGoogle ACE Practice Hub