Free Google Associate-Cloud-Engineer Exam Questions

Become Google Certified with updated Associate-Cloud-Engineer exam questions and correct answers

Page: 1 / 70

Total 346 Questions | Updated On: Feb 19, 2026

Add To Cart

Question 1

Your preview application, deployed on a single-zone Google Kubernetes Engine (GKE) cluster in us-centrall, has gained popularity. You are now ready to make the application generally available. You need to deploy the application to production while ensuring high availability and resilience. You also want to follow Googlerecommended practices. What should you do?

A : Use the gcloud container clusters create command with the options--enable-multi-networking and-- enable- autoscaling to create an autoscaling zonal cluster and deploy the application to it.

B : Use the gcloud container clusters create-auto command to create an autopilot cluster and deploy the application to it.

C : Use the gcloud container clusters update command with the option—region us-centrall to update the cluster and deploy the application to it.

D : Use the gcloud container clusters update command with the option—node-locations us-centrall-a,uscentrall-b to update the cluster and deploy the application to the nodes.

Answer: B

Question 2

Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire cloud infrastructure through code. How can you ensure that the pipeline has appropriate permissions while your system is following security best practices?

A : • Add a step for human approval to the CI/CD pipeline before the execution of the infrastructureprovisioning.• Use the human approvals IAM account for the provisioning.

B : • Attach a single service account to the compute instances.• Add minimal rights to the service account.• Allow the service account to impersonate a Cloud Identity user with elevated permissions to create, update, or delete resources.

C : • Attach a single service account to the compute instances.• Add all required Identity and Access Management (IAM) permissions to this service account to create, update, or delete resources

D : • Create multiple service accounts, one for each pipeline with the appropriate minimal Identity andAccess Management (IAM) permissions.• Use a secret manager service to store the key files of the service accounts.• Allow the CI/CD pipeline to request the appropriate secrets during the execution of the pipeline.

Answer: B

Question 3

You have created a new project in Google Cloud through the gcloud command line interface (CLI) and linked a billing account. You need to create a new Compute Engine instance using the CLI. You need to perform the prerequisite steps. What should you do?

A : Create a Cloud Monitoring Workspace.

B : Create a VPC network in the project.

C : Enable the compute googleapis.com API.

D : Grant yourself the IAM role of Compute Admin.

Answer: D

Question 4

You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment. What should you do?

A : gcloud to create the new project, and then deploy your application to the new project.

B : gcloud to create the new project and to copy the deployed application to the new project.

C : eate a Deployment Manager configuration file that copies the current App Engine deployment into a new project.

D : ploy your application again using gcloud and specify the project parameter with the new project name to create the new project.

Answer: C

Question 5

You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?

A : able the Cloud Pub/Sub API in the API Library on the GCP Console.

B : ly on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.

C : Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.

D : ant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.

Answer: A

Page: 1 / 70

Total 346 Questions | Updated On: Feb 19, 2026

Add To Cart