Free Google Associate-Cloud-Engineer Exam Questions

Become Google Certified with updated Associate-Cloud-Engineer exam questions and correct answers

Page: 1 / 66

Total 329 Questions | Updated On: Sep 09, 2025

Add To Cart

Question 1

An external member of your team needs list access to compute images and disks in one of your projects. You want to follow Google-recommended practices when you grant the required permissions to this user. What should you do?

A : Create a custom role, and add all the required compute.disks.list and compute, images.list permissions as includedPermissions. Grant the custom role to the user at the project level.

B : Create a custom role based on the Compute Image User role Add the compute.disks, list to theincludedPermissions field Grant the custom role to the user at the project level

C : Grant the Compute Storage Admin role at the project level.

D : Create a custom role based on the Compute Storage Admin role. Exclude unnecessary permissions from the custom role. Grant the custom role to the user at the project level.

Answer: B

Question 2

You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?

A : Increase the size of the disk to 1 TB.

B : Increase the allocated CPU to the instance.

C : Migrate to use a Local SSD on the instance.

D : Migrate to use a Regional SSD on the instance.

Answer: C

Question 3

You are a Google Cloud organization administrator. You need to configure organization policies and log sinks on Google Cloud projects that cannot be removed by project users to comply with your company's security policies. The security policies are different for each company department Each company department has a user with the Project Owner role assigned to their projects. What should you do?

A : Organize projects under folders for each department. Configure both organization policies and log sinks on the folders

B : Organize projects under folders for each department. Configure organization policies on the organization and log sinks on the folders.

C : Use a standard naming convention for projects that includes the department name. Configure organization policies on the organization and log sinks on the projects.

D : Use a standard naming convention for projects that includes the department name. Configure both organization policies and log sinks on the projects.

Answer: A

Question 4

(You have an application running inside a Compute Engine instance. You want to provide the application with secure access to a BigQuery dataset. You must ensure that credentials are only valid for a short period of time, and your application will only have access to the intended BigQuery dataset. You want to follow Google-recommended practices and minimize your operational costs. What should you do?)

A : Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the project.

B : Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the dataset.

C : Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the dataset.

D : Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the project.

Answer: C

Question 5

After a recent security incident, your startup company wants better insight into what is happening in the Google Cloud environment. You need to monitor unexpected firewall changes and instance creation. Your company prefers simple solutions. What should you do?

A : Use Cloud Logging filters to create log-based metrics for firewall and instance actions. Monitor the changes and set up reasonable alerts.

B : Install Kibana on a compute Instance. Create a log sink to forward Cloud Audit Logs filtered for firewalls and compute instances to Pub/Sub. Target the Pub/Sub topic to push messages to the Kibana instance. Analyze the logs on Kibana in real time.

C : Turn on Google Cloud firewall rules logging, and set up alerts for any insert, update, or delete events.

D : Create a log sink to forward Cloud Audit Logs filtered for firewalls and compute instances to Cloud Storage. Use BigQuery to periodically analyze log events in the storage bucket.

Answer: A

Page: 1 / 66

Total 329 Questions | Updated On: Sep 09, 2025

Add To Cart