Google Associate Cloud Engineer practice questions
209 free questions with answers and explanations.
- 51.A development team is using Cloud Build to automate their CI/CD pipeline. They need to ensure that every successful build automatically deploys the new container image to a Google Kubernetes Engine (GKE) cluster. Which Cloud Build feature should be used to trigger this deployment after a successful build step?Ensuring successful operation of a cloud solution
- 52.A company has several Google Cloud projects, each managed by a different team. They want to ensure that each project's billing is tracked separately for chargeback purposes, but all projects should draw from a single, centralized organizational billing account. How should they configure their billing setup?Setting up a cloud solution environment
- 53.A development team is using Cloud Shell to interact with their Google Cloud projects. They need to quickly switch their active project for `gcloud` commands without affecting other Cloud Shell sessions or local configurations. Which `gcloud` command should they use?Setting up a cloud solution environment
- 54.A large enterprise has a hybrid cloud environment, with critical on-premises applications needing to communicate securely and privately with services hosted in Google Cloud. They require high bandwidth and low latency, and the connection must be highly available and redundant. Which networking solution should be implemented to meet these requirements?Ensuring successful operation of a cloud solution
- 55.A large enterprise is setting up its Google Cloud environment and needs to enforce a policy that restricts all new resources, regardless of project, to be created only in the `us-central1` and `europe-west1` regions. This policy must apply to all future projects automatically and prevent users from overriding it. Which Google Cloud service should they use?Setting up a cloud solution environment
- 56.A data analytics team requires a new project in Google Cloud. They want to ensure that billing for this project is charged to a specific departmental billing account, separate from the company's main billing account. Which of the following is the correct sequence of steps to associate a newly created project with a specific, existing billing account?Setting up a cloud solution environment
- 57.A project manager needs to monitor Google Cloud spending across several projects and receive alerts when costs exceed predefined thresholds. They want to set up daily email notifications for specific budgets. Which Google Cloud service should they configure to achieve this?Setting up a cloud solution environment
- 58.A compliance officer needs to ensure that all Google Cloud Storage buckets created within the organization are uniformly configured with specific default encryption settings and lifecycle rules. They want to prevent individual project administrators from overriding these organizational standards for new buckets. How can this be enforced across the organization?Setting up a cloud solution environment
- 59.A company is onboarding new developers who need to interact with Google Cloud resources from their local machines. They are using Python for application development. The company wants to ensure that these developers can easily authenticate to GCP services without explicitly managing service account keys or user credentials in their code. Which authentication method should be recommended?Setting up a cloud solution environment
- 60.A company is setting up a new Google Cloud organization. They want to ensure that all newly created projects are automatically configured with a default set of API services enabled (e.g., Compute Engine API, Cloud Storage API, BigQuery API) to standardize their environment. How can they enforce this policy across their organization?Setting up a cloud solution environment
- 61.A security auditor needs to ensure that a Google Cloud project, which hosts critical production data, cannot be accidentally or maliciously deleted. The project should remain active indefinitely. What is the most effective and recommended way to prevent the deletion of this specific project?Setting up a cloud solution environment
- 62.A company is hosting a critical web application on Google Cloud that needs to be accessible from multiple geographic regions with minimal latency. They require a single, global IP address for the application and the ability to distribute traffic efficiently to the nearest healthy backend instance. Which load balancing option should be implemented?Ensuring successful operation of a cloud solution
- 63.A security auditor needs to verify that a Google Cloud project is correctly configured to prevent accidental deletion. They specifically want to ensure that the project itself cannot be deleted by anyone, including project owners, without first removing a specific lock. Which Google Cloud feature provides this protection?Setting up a cloud solution environment
- 64.A company wants to establish a consistent naming convention for all new Google Cloud projects within their organization (e.g., `proj-[environment]-[department]-[purpose]`). They need to prevent users from creating projects that do not adhere to this convention. Which Google Cloud service can enforce this at the organization level?Setting up a cloud solution environment
- 65.A new Cloud Engineer is setting up their local development environment for Google Cloud. They have successfully installed the Cloud SDK and authenticated their account using 'gcloud auth login'. However, when they try to list resources, they encounter 'ERROR: (gcloud.compute.instances.list) PERMISSION_DENIED: Required 'compute.instances.list' permission for 'projects/[PROJECT_ID]'. What is the most likely missing configuration step?Setting up a cloud solution environment
- 66.A small startup is setting up its first Google Cloud environment. They need to create a new billing account to pay for their services. Which of the following roles is required to create a new billing account?Setting up a cloud solution environment
- 67.A developer is building a new application that needs to store and retrieve unstructured data, such as user-uploaded images and videos. The application requires high availability and durability, and data should be globally accessible with low latency. Which Google Cloud storage option is most suitable for this use case?Ensuring successful operation of a cloud solution
- 68.A development team needs to deploy a new application to Google Cloud. They have created a new project, but when attempting to deploy resources, they receive an error indicating that the project is not associated with a billing account. Which `gcloud` command should they use to link their project to an existing billing account, assuming they have the necessary permissions?Setting up a cloud solution environment
- 69.A financial services company requires strict control over who can create new Google Cloud projects. They want to delegate project creation rights to a specific team without granting them broader administrative privileges. Which IAM role is the LEAST permissive role that allows a user to create new projects within an organization?Setting up a cloud solution environment
- 70.A developer needs to manage resources and deploy applications to Google Cloud using the command line. They have just installed the Cloud SDK on their local machine. What is the immediate next step to enable interaction with their Google Cloud projects?Setting up a cloud solution environment
- 71.A company is migrating various applications to Google Cloud and wants to ensure that all new projects automatically inherit a specific set of IAM policies and resource location constraints. They also need to delegate project creation permissions to individual teams while maintaining central control over these inherited policies. How should they structure their Google Cloud environment?Setting up a cloud solution environment
- 72.A company wants to ensure that their critical application running on Compute Engine instances remains highly available by automatically restarting instances that become unresponsive. They need to monitor the application's health and trigger remedial actions without manual intervention. Which feature should be configured on their Managed Instance Group (MIG)?Ensuring successful operation of a cloud solution
- 73.A multi-national corporation uses Google Cloud across several regions. They have a strict compliance requirement that mandates all data for projects related to their European operations must reside exclusively within the `europe-west1` region. How can this be enforced for all new resources created within specific projects designated for European operations?Setting up a cloud solution environment
- 74.A company has multiple Google Cloud projects, each with its own dedicated billing account. They want to set up an alert that notifies an administrator whenever the monthly spend for any single project exceeds $500. Which combination of Google Cloud services would be most effective for creating this type of budget alert?Setting up a cloud solution environment
- 75.A new Google Cloud project has been created, and the development team needs to deploy resources within it. However, when they attempt to create a Cloud Storage bucket, they receive a `403 Permission denied` error, even though they have the 'Storage Admin' role. Upon investigation, it's discovered that the project is not linked to an active billing account. What is the most likely reason for the `Permission denied` error in this scenario?Setting up a cloud solution environment
- 76.A finance application running on Compute Engine instances needs to store sensitive customer data, which requires strong encryption at rest. The company's security policy also mandates that encryption keys must be managed by the customer and stored in a FIPS 140-2 Level 3 validated hardware security module (HSM). Which Google Cloud encryption option should be utilized?Ensuring successful operation of a cloud solution
- 77.A team of developers frequently switches between multiple Google Cloud projects for different environments (development, staging, production) from their local Cloud SDK installation. They want to avoid repeatedly specifying the project ID with every command. Which 'gcloud config' command should they use to set a temporary default project for their current terminal session?Setting up a cloud solution environment
- 78.A data analytics team needs to store petabytes of historical sensor data for long-term archival and occasional batch processing. The data is rarely accessed but must be highly durable and available when needed. Cost optimization for storage is a primary concern. Which Cloud Storage class should be recommended?Ensuring successful operation of a cloud solution
- 79.A solutions architect is designing a multi-project environment in Google Cloud. They need to ensure that all projects within a specific department (represented by a folder) inherit certain IAM policies and organizational constraints, such as disabling external IP addresses on VMs. Which level of the resource hierarchy should be used to apply these policies effectively?Setting up a cloud solution environment
- 80.A new Cloud Engineer is setting up their local development environment and has installed the Google Cloud SDK. They attempt to run a `gcloud` command, but it fails with an authentication error. They realize they haven't authenticated their `gcloud` CLI. Which command should they use to authenticate their local `gcloud` environment with their Google Cloud account?Setting up a cloud solution environment
- 81.A data engineering team is building a pipeline that processes real-time sensor data from IoT devices. The data needs to be ingested, transformed, and then stored in a data warehouse for analytics. The solution must handle high-throughput, low-latency data streams and scale automatically without manual intervention. Which Google Cloud service combination should be used for the ingestion and transformation steps?Ensuring successful operation of a cloud solution
- 82.A developer is using Cloud Shell to interact with their Google Cloud projects. They frequently switch between a 'development' project and a 'staging' project. To avoid typing `—project [PROJECT_ID]` with every command, they want to quickly switch between these two projects as their default. Which `gcloud` command, combined with a specific configuration feature, would best achieve this?Setting up a cloud solution environment
- 83.A company requires that all new Google Cloud projects created within their organization must have a specific set of labels applied (e.g., `environment:production`, `cost-center:finance`). This is crucial for consistent cost allocation and resource management. How can this be enforced and automated?Setting up a cloud solution environment
- 84.An e-commerce company is experiencing inconsistent application performance during peak sales events, leading to customer dissatisfaction. Their application runs on a Managed Instance Group (MIG) in Compute Engine. The team suspects that the instances are sometimes overwhelmed before new instances can be provisioned. They want to proactively scale up their application based on anticipated traffic patterns rather than reactively. Which scaling policy should they implement?Ensuring successful operation of a cloud solution
- 85.A company is implementing a new policy to restrict the geographic locations where resources can be created. They want to ensure that all new virtual machines and storage buckets are only deployed in the 'us-central1' or 'us-east1' regions, and specifically prevent deployment in any Asian regions. Which Google Cloud service and configuration would best enforce this policy organization-wide?Setting up a cloud solution environment
- 86.A company wants to ensure strict security for its Google Cloud projects. They require that only specific, pre-approved service accounts can be used to deploy resources in production projects. No individual user accounts should have direct deployment permissions in production. How can this be achieved using IAM?Setting up a cloud solution environment
- 87.A small startup is beginning to use Google Cloud. They need to create a new project to host their development environment. Which of the following is the most appropriate initial step for creating a new project after logging into the Google Cloud Console?Setting up a cloud solution environment
- 88.A large enterprise is migrating a complex application to Google Cloud. The application requires access to various Google Cloud services (e.g., Cloud Storage, BigQuery, Compute Engine) across multiple projects. Security best practices dictate that credentials should not be stored directly within the application code or configuration files. How should the application be configured to authenticate to Google Cloud services when deployed on a Compute Engine instance?Setting up a cloud solution environment
- 89.A company is onboarding new developers who need to interact with Google Cloud resources from their local machines using Python client libraries. They want to ensure that these developers can authenticate securely without storing long-lived credentials directly on their machines. Which authentication method should be recommended?Setting up a cloud solution environment
- 90.A company is migrating a legacy application to Google Cloud. The application uses a monolithic architecture and requires significant compute resources, including GPUs for specific workloads. The team needs full control over the operating system and software stack. They also anticipate needing to scale these resources up and down manually based on project phases. Which Google Cloud compute service is the most appropriate choice?Ensuring successful operation of a cloud solution
- 91.A security team needs to restrict inbound SSH access to all Compute Engine instances in a specific VPC network to only their internal administrative subnet (10.0.1.0/24). All other inbound SSH traffic must be denied. Which network resource should be configured?Ensuring successful operation of a cloud solution
- 92.A financial services company needs to ensure that all Google Cloud projects created within their organization are automatically linked to a specific billing account for cost tracking and compliance. Which Identity and Access Management (IAM) role should be granted at the organization level to a designated service account to enable this automation?Setting up a cloud solution environment
- 93.A company is migrating its on-premises applications to Google Cloud. They have a strict security policy requiring all network traffic to be logged and audited. They need to configure their Google Cloud projects to ensure that all administrative activities and data access events are captured. Which service should they enable and configure?Setting up a cloud solution environment
- 94.A security auditor needs to verify that a Google Cloud project is correctly configured to prevent accidental deletion of critical resources. They specifically want to ensure that the project itself cannot be deleted by unauthorized users or accidental actions. Which feature should be enabled at the project level?Setting up a cloud solution environment
- 95.A company is setting up a new Google Cloud organization and needs to ensure that all projects created within it are automatically associated with a specific billing account. Where should the billing account be linked to achieve this organization-wide default behavior?Setting up a cloud solution environment
- 96.A global e-commerce company needs to ensure that their web application, hosted on Compute Engine, can withstand a regional outage without significant downtime. They want to use a DNS-based failover mechanism to automatically redirect traffic to a healthy region in case of an issue. Which Google Cloud service should they use for this purpose?Planning and configuring a cloud solution
- 97.A company is setting up a new Google Cloud project and needs to ensure that all resources deployed within the project can communicate with each other using private IP addresses by default, without traversing the public internet. They also want to isolate network traffic between different environments (e.g., development, staging, production) within the same project. Which networking construct should they use?Planning and configuring a cloud solution
- 98.A global company needs to ensure that their web application, hosted on Compute Engine, can withstand regional outages. They want to distribute their application instances across multiple regions and automatically failover to a healthy region if one becomes unavailable. Which network resource should they use to achieve high availability across regions?Planning and configuring a cloud solution
- 99.A company is migrating its on-premises applications to Google Cloud. They need to establish a secure and private connection between their on-premises data center and their Google Cloud VPC. The connection must offer high throughput and low latency, and the company is willing to deploy physical network infrastructure. Which Google Cloud networking product should they utilize?Planning and configuring a cloud solution
- 100.A media company needs to store terabytes of video assets that are frequently accessed for editing and streaming. They require high performance and low latency for read and write operations. Which Cloud Storage class is most appropriate for this use case?Planning and configuring a cloud solution