Free Google Associate-Cloud-Engineer Exam Questions

Become Google Certified with updated Associate-Cloud-Engineer exam questions and correct answers

Page: 1 / 70

Total 346 Questions | Updated On: Jan 06, 2026

Add To Cart

Question 1

Your company's accounting department needs to run an overnight batch workload every day. You mustimplement a solution that minimizes the cost to run this workload and automatically retries the batch if anexecution fails. What should you do?

A : Develop an application that runs the batch workload, and deploy the application as a GoogleKubernetes Engine (GKE) CronJob.

B : Develop a web application that listens for incoming requests and deploy the application as a GoogleKubernetes Engine (GKE) Deployment. Use Cloud Scheduler to call the HTTP endpoint.

C : Develop an application that runs the batch workload, and deploy the application as a Cloud Run Job.Use Cloud Scheduler to trigger the Job.

D : Develop a web application that listens for incoming requests and deploy the application as a Cloud Runservice. Use Cloud Scheduler to call the HTTP endpoint.

Answer: C

Question 2

(You have an application running inside a Compute Engine instance. You want to provide the application with secure access to a BigQuery dataset. You must ensure that credentials are only valid for a short period of time, and your application will only have access to the intended BigQuery dataset. You want to follow Google-recommended practices and minimize your operational costs. What should you do?)

A : Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the project.

B : Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the dataset.

C : Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the dataset.

D : Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the project.

Answer: C

Question 3

You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?

A : Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.

B : Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.

C : Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.

D : Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.

Answer: D

Question 4

You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers’ Pods. What should you do?

A : Use Binary Authorization and whitelist only the container images used by your customers’ Pods.

B : Use the Container Analysis API to detect vulnerabilities in the containers used by your customers’ Pods.

C : Create a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customers’ Pods.

D : Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google. com/gke-os-distribution: cos_containerd to the specification of your customers’ Pods.

Answer: C

Question 5

Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?

A : the users to roles/browser role.

B : the users to roles/iam.roleViewer role.

C : the users to a group, and add this group to roles/browser role.

D : the users to a group, and add this group to roles/iam.roleViewer role.

Answer: C

Page: 1 / 70

Total 346 Questions | Updated On: Jan 06, 2026

Add To Cart