Free Google Associate-Cloud-Engineer Exam Questions

Become Google Certified with updated Associate-Cloud-Engineer exam questions and correct answers

Page: 1 / 70

Total 346 Questions | Updated On: Feb 19, 2026

Add To Cart

Question 1

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

A : Use gcloud iam roles copy and specify the production project as the destination project.

B : Use gcloud iam roles copy and specify your organization as the destination organization.

C : In the Google Cloud Platform Console, use the ‘create role from role’ functionality.

D : In the Google Cloud Platform Console, use the ‘create role’ functionality and select all applicable permissions.

Answer: A

Question 2

(Your company uses a multi-cloud strategy that includes Google Cloud. You want to centralize application logs in a third-party software-as-a-service (SaaS) tool from all environments. You need to integrate logs originating from Cloud Logging, and you want to ensure the export occurs with the least amount of delay possible. What should you do?)

A : Use a Cloud Scheduler cron job to trigger a Cloud Function that queries Cloud Logging and sends the logs to the SaaS tool.

B : Create a Cloud Logging sink and configure Pub/Sub as the destination. Configure the SaaS tool to subscribe to the Pub/Sub topic to retrieve the logs.

C : Create a Cloud Logging sink and configure Cloud Storage as the destination. Configure the SaaS tool to read the Cloud Storage bucket to retrieve the logs.

D : Create a Cloud Logging sink and configure BigQuery as the destination. Configure the SaaS tool to query BigQuery to retrieve the logs

Answer: B

Question 3

You need a dynamic way of provisioning VMs on Compute Engine. The exact specifications will be in a dedicated configuration file. You want to follow Google’s recommended practices. Which method should you use?

A : Deployment Manager

B : Cloud Composer

C : Managed Instance Group

D : Unmanaged Instance Group

Answer: A

Question 4

An external member of your team needs list access to compute images and disks in one of your projects. You want to follow Google-recommended practices when you grant the required permissions to this user. What should you do?

A : Create a custom role, and add all the required compute.disks.list and compute, images.list permissions as includedPermissions. Grant the custom role to the user at the project level.

B : Create a custom role based on the Compute Image User role Add the compute.disks, list to theincludedPermissions field Grant the custom role to the user at the project level

C : Grant the Compute Storage Admin role at the project level.

D : Create a custom role based on the Compute Storage Admin role. Exclude unnecessary permissions from the custom role. Grant the custom role to the user at the project level.

Answer: B

Question 5

You are using multiple configurations for gcloud. You want to review the configured Kubernetes Engine cluster of an inactive configuration using the fewest possible steps. What should you do?

A : Use gcloud config configurations describe to review the output.

B : Use gcloud config configurations activate and gcloud config list to review the output.

C : Use kubectl config get-contexts to review the output.

D : Use kubectl config use-context and kubectl config view to review the output.

Answer: D

Page: 1 / 70

Total 346 Questions | Updated On: Feb 19, 2026

Add To Cart