Free Google Associate-Cloud-Engineer Exam Questions

Become Google Certified with updated Associate-Cloud-Engineer exam questions and correct answers

Page: 1 / 70

Total 346 Questions | Updated On: Jan 28, 2026

Add To Cart

Question 1

You are building a data lake on Google Cloud for your Internet of Things (loT) application. The loT application has millions of sensors that are constantly streaming structured and unstructured data to your backend in the cloud. You want to build a highly available and resilient architecture based on Googlerecommended practices. What should you do?

A : Stream data to Pub/Sub, and use Dataflow to send data to Cloud Storage

B : Stream data to Pub/Sub. and use Storage Transfer Service to send data to BigQuery.

C : Stream data to Dataflow, and use Storage Transfer Service to send data to BigQuery.

D : Stream data to Dataflow, and use Dataprep by Trifacta to send data to Bigtable.

Answer: A

Question 2

You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?

A : 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic.2. Call your application on Cloud Run from the Cloud Function for every message.

B : 1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run.2. Create a Cloud Pub /Sub subscription for that topic.3. Make your application pull messages from that subscription.

C : 1. Create a service account.2. Give the Cloud Run Invoker role to that service account for your Cloud Run application.3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint.

D : 1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal.2. Create a Cloud Pub/Sub subscription for that topic.3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application.

Answer: C

Question 3

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

A : Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.

B : Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.

C : Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.

D : Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: D

Question 4

Your company is running a critical workload on a single Compute Engine VM instance. Your company's disaster recovery policies require you to backup the entire instance's disk data every day. The backups must be retained for 7 days. You must configure a backup solution that complies with your company's security policies and requires minimal setup and configuration. What should you do?

A : Configure the instance to use persistent disk asynchronous replication.

B : Configure daily scheduled persistent disk snapshots with a retention period of 7 days.

C : Configure Cloud Scheduler to trigger a Cloud Function each day that creates a new machine image and deletes machine images that are older than 7 days.

D : Configure a bash script using gsutil to run daily through a cron job. Copy the disk's files to a Cloud Storage bucket with archive storage class and an object lifecycle rule to delete the objects after 7 days.

Answer: B

Question 5

You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

A : Create a health check on port 443 and use that when creating the Managed Instance Group.

B : Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.

C : In the Instance Template, add the label ‘health-check’.

D : In the Instance Template, add a startup script that sends a heartbeat to the metadata server.

Answer: A

Page: 1 / 70

Total 346 Questions | Updated On: Jan 28, 2026

Add To Cart