ACE · domain
Setting Up a Cloud Solution Environment
This domain covers establishing your Google Cloud foundation: creating and organizing projects, linking billing accounts, and structuring resources with the resource hierarchy (organization, folders, projects). Questions test practical setup tasks like gcloud project creation, applying organization policies and IAM at the right hierarchy level, and understanding project lifecycle and deletion constraints.
Focused practice
Practice Setting Up a Cloud Solution Environment questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Setting Up a Cloud Solution Environment
Be able to create a project via gcloud projects create, link it to a billing account, and place it correctly in the resource hierarchy. The most important thing: understand that IAM and organization policies inherit from organization to folders to projects, so apply controls at the highest level that covers all target resources.
Creating projects with gcloud projects create and associating a billing account
Designing resource hierarchy with organizations, folders, and projects for separation
Applying organization policies to constrain resources across projects
Using IAM roles and policies inherited down the resource hierarchy
Watch out for
Common Setting Up a Cloud Solution Environment exam traps
- ▸Assuming folders are required; small orgs can separate environments with just projects under the organization node.
- ▸Forgetting that organization policies and IAM inherit downward, so setting them at the wrong level changes scope.
- ▸Trying to delete a project that has a lien, is linked to billing, or lacks the resourcemanager.projects.delete permission.
Question index
All Setting Up a Cloud Solution Environment questions (66)
Click any question to see the full explanation, or start a practice session above.
A company wants to manage multiple GCP projects with different configurations (e.g., different regions and accounts) on the same workstation. Which gcloud feature should they use to switch between these configurations?
Medium2What is the basic role that grants full control over all resources in a GCP project?
Easy3An organization needs to separate development, staging, and production environments using the GCP resource hierarchy. Which approach is most effective?
Medium4An organization has multiple Google Cloud projects and wants to enforce a policy that all Compute Engine instances must use a specific set of approved machine types. Which tool should be used to implement this constraint?
Hard5An engineer needs to create a new GCP project using the Cloud SDK. They have already installed and initialized gcloud with a user account that has Billing Account Administrator and Project Creator roles. Which command creates the project 'my-new-project'?
Easy6An organization wants to manage GCP resources for multiple teams using a hierarchy of folders and projects. They need to apply a uniform policy that restricts the regions where VM instances can be created across all projects in a folder. Which approach should they use?
Medium7You need to list all projects in your organization using the gcloud CLI. Which command is correct?
Medium8A developer wants to use Cloud Shell for managing GCP resources. Which three statements about Cloud Shell are true? (Choose THREE.)
Medium9A developer wants to authenticate to GCP from their local machine using their own user account to run gcloud commands that interact with a project. They have already installed the Cloud SDK. Which command should they use to authenticate with their Google account?
Medium10You are setting up a new GCP project for a microservices application. You need to select which APIs to enable. Which THREE APIs are likely required? (Choose 3)
Medium11A company wants to set up a budget alert at 50% and 90% of their projected monthly spending. Which service should they use?
Medium12A new engineer needs to set up the gcloud CLI on their local machine and authenticate with a user account. Which command should they run after installing the SDK?
Easy13You are using Cloud Shell and need to access a file you created two weeks ago. What is the persistence behavior of Cloud Shell home directories?
Easy14A company has multiple Google Cloud projects and wants to track costs by department. They have already applied labels to resources with key 'department'. What is the next step to view costs grouped by department?
Medium15You are a new associate cloud engineer at a company that uses Google Cloud. You have been asked to set up a new project for a development team. Your manager wants you to ensure that the project is created under the correct organization node and that the team can immediately start using Compute Engine. You have been granted the Project Creator role at the organization level. What should you do first?
Medium16Your organization wants to enforce that all Compute Engine instances are created only in us-central1 and europe-west1. You need to implement this constraint across all projects in the organization. What should you do?
Hard17A startup wants to control costs across multiple GCP projects. They want to track spending by department and set budget alerts. Which THREE actions should they take?
Hard18A company wants to grant a contractor read-only access to all Compute Engine instances in a specific project, but no other resources. Which IAM role should be assigned?
Hard19A new engineer wants to set up their local environment to interact with Google Cloud. Which command initializes the gcloud CLI and configures the project, region, and zone?
Easy20After creating a new GCP project, an engineer attempts to delete it using `gcloud projects delete PROJECT_ID` but receives an error. What is the most likely cause?
Hard21You need to delete a GCP project, but the deletion fails with an error. What is the most likely cause?
Medium22You need to install the Google Cloud SDK on a Linux machine. Which command should you use to add the Cloud SDK distribution URI as a package source?
Easy23An engineer needs to enable the Compute Engine API for a project using the gcloud command line. Which command should they run?
Medium24An engineer needs to enable the Cloud Build API and the Kubernetes Engine API for a project. Which TWO commands should they run?
Medium25An engineer needs to enable the Compute Engine API for a project using the CLI. Which command should they run?
Medium26Your organization has multiple Google Cloud projects. You want to separate development and production environments. Which resource hierarchy structure is recommended?
Easy27An administrator needs to create a custom IAM role that allows listing projects and viewing billing accounts. Which TWO permissions should be included?
Medium28An administrator wants to set up a budget alert that triggers at 50%, 90%, and 100% of the monthly spending limit. What is the correct way to configure this?
Medium29An engineer needs to choose a location for a new GCP project's resources to maximize availability and minimize latency for users in Europe and Asia. Which three actions should they take? (Choose THREE)
Hard30An organization wants to separate its development and production environments using Google Cloud resource hierarchy. What is the recommended approach?
Easy31A DevOps engineer wants to set up budget alerts for a GCP project so that the finance team is notified when costs reach 50% and 90% of the budget. Which two configurations are required? (Choose TWO.)
Medium32Which gcloud command is used to set the default project for a configuration profile?
Easy33An organization wants to enforce a policy that disables the creation of VMs with external IPs across all projects. Which resource hierarchy level should the policy be attached to for maximum coverage?
Medium34Your company has a production project and a development project. You want to ensure that no one can delete the production project accidentally. Which TWO actions should you take? (Choose 2)
Medium35An engineer is setting up a new GCP project for a containerized application. They need to enable the required APIs. Which TWO APIs must be enabled to deploy and manage a Kubernetes cluster and build container images?
Medium36You need to view the current gcloud configuration settings, including the active account, project, and compute region. Which TWO commands can you use? (Choose two.)
Medium37Which of the following is true about Cloud Shell?
Easy38A company wants to track and forecast GCP spending across different departments. They have already set up labels on resources to indicate the department. Which additional step should they take to analyze costs by department in BigQuery?
Medium39You are managing a project and need to create a custom IAM role that allows only the permissions compute.instances.list and compute.instances.get. What is the correct way to create this role using gcloud?
Medium40An engineer is setting up Cloud Shell for the first time. They notice that their home directory persists across sessions. How much storage is allocated to the home directory in Cloud Shell?
Medium41An engineer wants to authenticate to Google Cloud using their own user credentials and also set up application default credentials for a local development environment. Which sequence of gcloud auth commands should they use?
Medium42A team is using gcloud configurations to manage multiple projects. They want to create a new configuration for a production project. How can they achieve this?
Hard43A developer wants to use gcloud CLI with application default credentials (ADC) to authenticate to Google APIs from their local machine. Which command should they run first?
Easy44A team is using Cloud Shell to manage resources. They notice that their home directory is persistent across sessions, but they want to ensure that configuration files and scripts are also available after they stop and restart Cloud Shell. What should they do?
Hard45An organization has multiple GCP projects and wants to centralize billing analysis across all projects. They need to export detailed billing data (e.g., cost per SKU per project) to a BigQuery dataset. Which billing export option should they configure?
Hard46An engineer needs to create a new project and set up the environment. They are using the gcloud command-line tool. Which two commands are required to create a project and link it to a billing account? (Choose TWO.)
Hard47A company wants to manage multiple Google Cloud projects and enforce consistent security policies across all of them. Which TWO resources should they use? (Choose two.)
Medium48Your company wants to track costs per department. Each department has its own project. You need to set up a budget alert in the billing account for each project. What is the most efficient approach?
Hard49An organization wants to enforce that all projects under a specific folder have a set of constraints, such as disabling default network creation and requiring shielded VMs. What is the most efficient way to achieve this?
Hard50A startup wants to create a new GCP project for development. They've already created a billing account. Which command can they use to create the project?
Easy51You create a new Google Cloud project using the Cloud Console. After creating the project, you need to enable the Compute Engine API. What is the correct command to do this using the Cloud Shell?
Medium52A developer is using Cloud Shell and wants to ensure that their gcloud configuration persists after the Cloud Shell session ends. They have set the compute and access settings using `gcloud config set`. What should they do to keep these settings for future sessions?
Hard53You are setting up a new organization in Google Cloud. You want to restrict the regions where resources can be created to comply with data residency requirements. What should you do?
Hard54What is the purpose of the gcloud init command?
Easy55You want to switch between multiple GCP projects frequently using the gcloud CLI. What is the recommended approach?
Easy56A team wants to enable Compute Engine API in their project using gcloud. Which command should they run?
Medium57You want to enable the Kubernetes Engine API for your project using the command line. Which gcloud command should you use?
Medium58A company wants to track costs by department and project. They have multiple GCP projects used by different teams. Which feature should they use to categorize costs?
Medium59An engineer needs to give a data analyst access to run BigQuery queries but prevent them from viewing or modifying data in Cloud Storage. The analyst should be able to create new datasets. Which IAM role should the engineer assign at the project level?
Hard60A Cloud Architect needs to understand the GCP resource hierarchy to set up proper access control. Which three resources are part of the GCP resource hierarchy? (Choose THREE.)
Easy61A company wants to set up a new GCP project and ensure that only approved APIs can be used. Which two steps should they take? (Choose TWO)
Medium62A company wants to organize their GCP resources into a hierarchy to separate development, staging, and production environments. Which THREE resources can be used to create this separation?
Hard63A Cloud Shell user wants to persist Terraform state files across sessions. What is the best approach?
Easy64An engineer is setting up Cloud Identity for a new domain. What is a prerequisite for creating a Cloud Identity account?
Medium65An engineer wants to ensure that no one in their organization can create VMs with public IP addresses. Which Google Cloud tool should they use to enforce this restriction?
Medium66A new engineer needs to enable the Compute Engine API for a project using the gcloud command-line tool. Which command should they run?
EasyOther domains
All ACE exam domains
Frequently asked questions
- What does the Setting Up a Cloud Solution Environment domain cover on the ACE exam?
- Be able to create a project via gcloud projects create, link it to a billing account, and place it correctly in the resource hierarchy. The most important thing: understand that IAM and organization policies inherit from organization to folders to projects, so apply controls at the highest level that covers all target resources.
- How many questions are in this domain?
- This page lists all 66 Setting Up a Cloud Solution Environment questions in the ACE question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Setting Up a Cloud Solution Environment questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.