Free Google Associate-Cloud-Engineer Exam Questions

Become Google Certified with updated Associate-Cloud-Engineer exam questions and correct answers

Page: 1 / 70

Total 346 Questions | Updated On: Feb 09, 2026

Add To Cart

Question 1

You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

A : Create a Cloud Memorystore for Redis instance with 32-GB capacity.

B : Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.

C : Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.

D : Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.

Answer: A

Question 2

You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers’ Pods. What should you do?

A : Use Binary Authorization and whitelist only the container images used by your customers’ Pods.

B : Use the Container Analysis API to detect vulnerabilities in the containers used by your customers’ Pods.

C : Create a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customers’ Pods.

D : Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google. com/gke-os-distribution: cos_containerd to the specification of your customers’ Pods.

Answer: C

Question 3

You are deploying a large multi-tiered application with more than 1,000 IP addresses in a Google Cloudproject that needs to be securely isolated. The application includes the:web tier with frontend servers for public trafficapplication tier with servers running core application logic that only need access from the web tier anddatabase tier with database servers that only need access from the application tierYou want to minimizecost, complexity, and administrative overhead in the network architecture. What should you do?database tier with database servers that only need access from the application tierYou want to minimizecost, complexity, and administrative overhead in the network architecture. What should you do?

A : Create a /24 Shared VPC with separate subnets for each tier. Use firewall rules that reference network tags to control traffic.

B : Create one custom mode /16 VPC with three subnets. Place each tier in its own subnet and use firewallrules that reference IP subnets to control traffic.

C : Deploy each tier into a separate custom mode VPC. Use VPC Network Peering to securely connecteach Custom mode VPC. Manage firewall rules individually in each VPC.

D : Deploy each tier in a /24 VPC by using network tags to identify instances. Implement firewall rules forfine-grained network segmentation.

Answer: B

Question 4

Your application is running on Google Cloud in a managed instance group (MIG). You see errors in Cloud Logging for one VM that one of the processes is not responsive. You want to replace this VM in the MIG quickly. What should you do?

A : Select the MIG from the Compute Engine console and, in the menu, select Replace VMs.

B : Use the gcloud compute instance-groups managed recreate-instances command to recreate theVM.

C : Use the gcloud compute instances update command with a REFRESH action for the VM.

D : Update and apply the instance template of the MIG.

Answer: A

Question 5

An external member of your team needs list access to compute images and disks in one of your projects. You want to follow Google-recommended practices when you grant the required permissions to this user. What should you do?

A : Create a custom role, and add all the required compute.disks.list and compute, images.list permissions as includedPermissions. Grant the custom role to the user at the project level.

B : Create a custom role based on the Compute Image User role Add the compute.disks, list to theincludedPermissions field Grant the custom role to the user at the project level

C : Grant the Compute Storage Admin role at the project level.

D : Create a custom role based on the Compute Storage Admin role. Exclude unnecessary permissions from the custom role. Grant the custom role to the user at the project level.

Answer: B

Page: 1 / 70

Total 346 Questions | Updated On: Feb 09, 2026

Add To Cart