Google ASSOCIATE-CLOUD-ENGINEER Online Practice
Questions and Exam Preparation
ASSOCIATE-CLOUD-ENGINEER Exam Details
Exam Code
:ASSOCIATE-CLOUD-ENGINEER
Exam Name
:Associate Cloud Engineer
Certification
:Google Certifications
Vendor
:Google
Total Questions
:427 Q&As
Last Updated
:Jun 01, 2026
Google ASSOCIATE-CLOUD-ENGINEER Online Questions &
Answers
Question 231:
You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.
You check the status of the deployed pods and notice that one of them is still in PENDING status:
You want to find out why the pod is stuck in pending status. What should you do?
A. Review details of the myapp-service Service object and check for error messages. B. Review details of the myapp-deployment Deployment object and check for error messages. C. Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages. D. View logs of the container in myapp-deployment-58ddbbb995-lp86m pod and check for warning messages.
C. Review details of myapp-deployment-58ddbbb995-lp86m Pod and check for warning messages.
Your learn wants to deploy a specific content management system (CMS) solution lo Google Cloud. You need a quick and easy way to deploy and install the solution. What should you do?
A. Search for the CMS solution in Google Cloud Marketplace. Use gcloud CLI to deploy the solution. B. Search for the CMS solution in Google Cloud Marketplace. Deploy the solution directly from Cloud Marketplace. C. Search for the CMS solution in Google Cloud Marketplace. Use Terraform and the Cloud Marketplace ID to deploy the solution with the appropriate parameters. D. Use the installation guide of the CMS provider. Perform the installation through your configuration management system.
B. Search for the CMS solution in Google Cloud Marketplace. Deploy the solution directly from Cloud Marketplace.
Explanation
Fastest and easiest way to deploy a solution straight from the marketplace
Question 233:
Your boss has asked you to set up the CFO as a user inside Google Cloud. Before walking away, she said, "And obviously you know which role to assign him." Which role was she likely talking about, and why is it obvious? (Select one role and one reason)
A. Reason: This role will ensure the CFO has full access to the project. B. Role: Billing Account Viewer C. Reason: This role will ensure the CFO has access to view the spending data; D. Role: Project Owner E. Role: Billing Account Admin F. Reason:: This role will ensure the CFO can perform any billing task that they may need.
B. Role: Billing Account Viewer C. Reason: This role will ensure the CFO has access to view the spending data;
Explanation
Question 234:
You're trying to provide temporary access to some files in a Cloud Storage bucket. You want to limit the time that the files are available to 10 minutes. With the fewest steps possible, what is the best way to generate a signed URL?
A. In the UI select the objects and click the Generate Signed URL button. B. Create a service account and JSON key. Use the gsutil signurl -t 10m command and pass in the JSON key and bucket. C. In the UI select the objects and click the "Sign With Key" button. D. Create a service account and JSON key. Use the gsutil signurl -d 10m command and pass in the JSON key and bucket.
D. Create a service account and JSON key. Use the gsutil signurl -d 10m command and pass in the JSON key and bucket.
Explanation
Question 235:
You are managing a project for the Business Intelligence (BI) department in your company. A data pipeline ingests data into BigQuery via streaming. You want the users in the BI department to be able to run the custom SQL queries against the latest data in BigQuery. What should you do?
A. Create a Data Studio dashboard that uses the related BigQuery tables as a source and give the BI team view access to the Data Studio dashboard. B. Create a Service Account for the BI team and distribute a new private key to each member of the BI team. C. Use Cloud Scheduler to schedule a batch Dataflow job to copy the data from BigQuery to the BI team's internal data warehouse. D. Assign the IAM role of BigQuery User to a Google Group that contains the members of the BI team.
D. Assign the IAM role of BigQuery User to a Google Group that contains the members of the BI team.
Explanation
When applied to a dataset, this role provides the ability to read the dataset's metadata and list tables in the dataset. When applied to a project, this role also provides the ability to run jobs, including queries, within the project. A member with this role can enumerate their own jobs, cancel their own jobs, and enumerate datasets within a project. Additionally, allows the creation of new datasets within the project; the creator is granted the BigQuery Data Owner role (roles/ bigquery.dataOwner) on these new datasets. https://cloud.google.com/bigquery/docs/access-control
Question 236:
You are managing the security configuration of your company's Google Cloud organization. The Operations team needs specific permissions on both a Google Kubernetes Engine (GKE) cluster and a Cloud SQL instance. Two predefined Identity and Access Management (IAM) roles exist that contain a subset of the permissions needed by the team. You need to configure the necessary IAM permissions for this team while following Google-recommended practices. What should you do?
A. Create a custom IAM role that combines the permissions from the two relevant predefined roles. B. Grant the team the two predefined IAM roles. C. Create a custom IAM role that includes only the required permissions from the predefined roles. D. Grant the team the IAM roles of Kubernetes Engine Admin and Cloud SQL Admin.
B. Grant the team the two predefined IAM roles.
Explanation
Granting the team the two predefined IAM roles is the best option because it ensures that the team receives the exact permissions required for both the GKE cluster and Cloud SQL instance without unnecessarily restricting permissions or adding complexity. Using predefined roles is recommended to avoid excessive permissions and ensure adherence to least privilege principles.
Question 237:
You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps. What should you do?
A. Install a RDP client on your desktop. Verify that a firewall rule for port 3389 exists. B. Install a RDP client in your desktop. Set a Windows username and password in the GCP Console. Use the credentials to log in to the instance. C. Set a Windows password in the GCP Console. Verify that a firewall rule for port 22 exists. Click the RDP button in the GCP Console and supply the credentials to log in. D. Set a Windows username and password in the GCP Console. Verify that a firewall rule for port 3389 exists. Click the RDP button in the GCP Console, and supply the credentials to log in.
B. Install a RDP client in your desktop. Set a Windows username and password in the GCP Console. Use the credentials to log in to the instance.
RDP is enabled by default when you crate a Windows instance (no need to chek on it). Just make sure you install an RDP client ( chrome ext or RDP) and set windows password.
Question 238:
Your development team has asked you to set up an external TCP load balancer with SSL offload. Which load balancer should you use?
A. HTTP(S) load balancer B. Network load balancer C. Internal load balancer D. TCP/SSL proxy load balancer
D. TCP/SSL proxy load balancer
Explanation
Question 239:
You are performing a monthly security check of your Google Cloud environment and want to know who has access to view data stored in your Google Cloud Project. What should you?
A. Enable Audit Logs for all APIs that are related to data storage. B. Review the IAM permissions for any role that allows for data access. C. Review the Identity-Aware Proxy settings for each resource. D. Create a Data Loss Prevention job.
B. Review the IAM permissions for any role that allows for data access.
Explanation
https://cloud.google.com/compute/docs/access
Question 240:
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?
A. Migrate the workload to a Compute Engine Preemptible VM. B. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes. C. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed. D. Create an Instance Template with Preemptible VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.
C. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.
Explanation
Preemptible VMs are cheaper, but they will not be available beyond 24hrs
Nowadays, the certification exams become more and more important and required by more and more
enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare
for the exam in a short time with less efforts? How to get a ideal result and how to find the
most reliable resources? Here on Vcedump.com, you will find all the answers.
Vcedump.com provide not only Google exam questions,
answers and explanations but also complete assistance on your exam preparation and certification
application. If you are confused on your ASSOCIATE-CLOUD-ENGINEER exam preparations
and Google certification application, do not hesitate to visit our
Vcedump.com to find your solutions here.