1. Home
  2. Google
  3. ASSOCIATE-CLOUD-ENGINEER

Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

ASSOCIATE-CLOUD-ENGINEER Exam Details

  • Exam Code
    :ASSOCIATE-CLOUD-ENGINEER
  • Exam Name
    :Associate Cloud Engineer
  • Certification
    :Google Certifications
  • Vendor
    :Google
  • Total Questions
    :427 Q&As
  • Last Updated
    :May 24, 2026

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

  • Question 161:

    You're deploying an application to a Compute Engine instance, and it's going to need to make calls to read from Cloud Storage and Bigtable. You want to make sure you're following the principle of least privilege. What's the easiest way to ensure the code can authenticate to the required Google Cloud APIs?

    A. Create a new user account with the required roles. Store the credentials in Cloud Key Management Service and download them to the instance in code.
    B. Use the default Compute Engine service account and set its scopes. Let the code find the default service account using "Application Default Credentials".
    C. Create a new service account and key with the required limited permissions. Set the instance to use the new service account. Edit the code to use the service account key.
    D. Register the application with the Binary Registration Service and apply the required roles.

  • Question 162:

    Your company has multiple projects linked to a single billing account in Google Cloud. You need to visualize the costs with specific metrics that should be dynamically calculated based on company-specific criteria. You want to automate the process. What should you do?

    A. In the Google Cloud console, visualize the costs related to the projects in the Reports section.
    B. In the Google Cloud console, visualize the costs related to the projects in the Cost breakdown section.
    C. In the Google Cloud console, use the export functionality of the Cost table. Create a Looker Studiodashboard on top of the CSV export.
    D. Configure Cloud Billing data export to BigOuery for the billing account. Create a Looker Studio dashboard on top of the BigOuery export.

  • Question 163:

    Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?

    A. Add the group for the finance team to roles/billing user role.
    B. Add the group for the finance team to roles/billing admin role.
    C. Add the group for the finance team to roles/billing viewer role.
    D. Add the group for the finance team to roles/billing project/Manager role.

  • Question 164:

    Your company's accounting department needs to run an overnight batch workload every day. You must implement a solution that minimizes the cost to run this workload and automatically retries the batch if an execution fails. What should you do?

    A. Develop an application that runs the batch workload, and deploy the application as a Google Kubernetes Engine (GKE) CronJob.
    B. Develop a web application that listens for incoming requests, and deploy the application as a Cloud Run service. Use Cloud Scheduler to call the HTTP endpoint.
    C. Develop an application that runs the batch workload, and deploy the application as a Cloud Run job. Use Cloud Scheduler to trigger the job.
    D. Develop a web application that listens for incoming requests, and deploy the application as a Google Kubernetes Engine (GKE) Deployment. Use Cloud Scheduler to call the HTTP endpoint.

  • Question 165:

    A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?

    A. In the console, validate which SSH keys have been stored as project-wide keys.
    B. Navigate to Identity-Aware Proxy and check the permissions for these resources.
    C. Enable Audit Logs on the IAM and admin page for all resources, and validate the results.
    D. Use the command gcloud projects get-iam-policy to view the current role assignments.

  • Question 166:

    You have a managed instance group composed of preemptible VMs. All of the VMs keep deleting and recreating themselves every minute. What is a possible cause of this behavior?

    A. Your zonal capacity is limited, causing all preemptible VMs to be shutdown torecover capacity. Try deploying your group to another zone.
    B. You have hit your instance quota for the region.
    C. Your managed instance group's VMs are toggled to only last 1 minute inpreemptible settings.
    D. Your managed instance group's health check is repeatedly failing, either to amisconfigured health check or misconfigured firewall rules not allowing the healthcheck to access the instance

  • Question 167:

    You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?

    A. Reserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.
    B. Reserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.
    C. Use the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.
    D. Start the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.

  • Question 168:

    A company wants to build an application that stores images in a Cloud Storage bucket and wants to generate thumbnails as well as resize the images. They want to use a google managed service that can scale up and scale down to zero automatically with minimal effort. You have been asked to recommend a service. Which GCP service would you suggest?

    A. Google Compute Engine
    B. Google App Engine
    C. Cloud Functions
    D. Google Kubernetes Engine

  • Question 169:

    Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?

    A. Create an Instance Template with Spot VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.
    B. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.
    C. Migrate the workload to a Google Kubernetes Engine cluster with Spot nodes.
    D. Migrate the workload to a Compute Engine Spot VM.

  • Question 170:

    You need to create a new development Kubernetes cluster with 4 nodes. The cluster will be named linux- academy-dev-cluster. Which of the following truncated commands will create a cluster?

    A. gcloud container clusters create linux-academy-dev- cluster --num-nodes 4
    B. kubectl clusters create linux-academy-dev-cluster 4
    C. kubectl clusters create linux-academy-dev-cluster --num-nodes 4
    D. gcloud container clusters create linux-academy-dev-cluster 4

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Google exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your ASSOCIATE-CLOUD-ENGINEER exam preparations and Google certification application, do not hesitate to visit our Vcedump.com to find your solutions here.