Practice set
Google Associate Cloud Engineer questions
Question 1easymultiple choice
Full question →What is the correct order of the Google Cloud resource hierarchy from highest to lowest level?
Question 2easymultiple choice
Full question →A compliance archive stores legal documents accessed at most once per quarter. Which Cloud Storage class minimizes storage cost while meeting that access pattern?
Question 3easymultiple choice
Full question →Which gcloud command creates a Compute Engine VM named 'web-01' using the e2-medium machine type in zone us-central1-a?
Question 4easymultiple choice
Full question →A team wants to receive an email alert when the average CPU utilization of VMs in a managed instance group exceeds 80% for more than 5 minutes. What should they create in Cloud Monitoring?
Question 5easymultiple choice
Full question →A junior developer needs read-only access to all GCP resources in a project. Which IAM role grants the minimum permissions required?
Question 6easymultiple choice
Full question →A startup creates its first Google Cloud project. Before deploying any paid resources, what must be linked to the project?
Question 7mediummultiple choice
Full question →A team needs to run a containerized HTTP API that scales to zero when idle and requires zero cluster or server management. Which GCP compute platform is the best fit?
Question 8easymultiple choice
Full question →A developer has a Kubernetes Deployment manifest in a file named 'api-deployment.yaml'. Which command creates the Deployment if it doesn't exist, or updates it if it does?
Question 9easymultiple choice
Full question →A team wants logs from their Python application running on a Compute Engine VM to appear in Cloud Logging. What must be installed on the VM?
Question 10mediummultiple choice
Full question →A security review identifies that service account JSON key files are stored on multiple developer laptops, posing a data exfiltration risk. What is the recommended remediation?
Question 11easymultiple choice
Full question →Which gcloud CLI command authenticates a developer's local environment with their Google account?
Question 12easymultiple choice
Full question →A batch data processing job runs nightly for 4 hours and can tolerate interruption because it saves progress checkpoints every 15 minutes. Which VM option offers the greatest cost reduction?
Question 13mediummultiple choice
Full question →A team wants to deploy a container image at 'gcr.io/myproject/api:v2' as a Cloud Run service named 'api-service' in us-east1, accessible without authentication. Which command is correct?
Question 14mediummultiple choice
Full question →A security analyst needs to retrieve all Cloud Logging entries with severity ERROR or higher across all resource types in the current project. Which log query correctly filters these entries?
Question 15mediummultiple choice
Full question →A team wants to allow inbound HTTPS traffic (TCP port 443) from the internet to instances tagged 'web-server', while blocking all other inbound traffic. What firewall configuration achieves this?
Question 16mediummultiple choice
Full question →A developer attempts to create a Cloud SQL instance but receives the error: 'API [sqladmin.googleapis.com] not enabled.' What is the correct resolution?
Question 17mediummultiple choice
Full question →A mobile app needs a managed database to store user profiles with flexible nested structures that evolve frequently — new fields are added without schema migrations. Which GCP database service is most appropriate?
Question 18mediummultiple choice
Full question →A team needs a GKE cluster named 'prod-cluster' in the us-central1 region with cluster autoscaling enabled, scaling between 3 and 10 nodes. Which command achieves this?
Question 19mediummultiple choice
Full question →A managed instance group (MIG) is running 4 VMs with a CPU autoscaling target of 60%. A traffic spike drives average CPU to 90%. How does the autoscaler respond?
Question 20hardmultiple choice
Full question →An enterprise stores sensitive customer data in Cloud Storage. Regulatory requirements mandate that the company controls its own encryption keys — Google must not be able to decrypt data unilaterally. Which encryption configuration satisfies this?
Question 21mediummultiple choice
Full question →An application running on a Compute Engine VM needs to read objects from a Cloud Storage bucket in the same project. What is the recommended authentication approach?
Question 22mediummultiple choice
Full question →A global web application needs HTTPS traffic routed to backend services in multiple regions, directing each user to the nearest healthy endpoint. Which load balancer type should be used?
Question 23easymultiple choice
Full question →Which command creates a Cloud Storage bucket named 'my-archive-bucket' in the US multi-region using the modern gcloud CLI?
Question 24easymultiple choice
Full question →