Free Google Associate-Cloud-Engineer Exam Questions

Become Google Certified with updated Associate-Cloud-Engineer exam questions and correct answers

Page: 1 / 70

Total 346 Questions | Updated On: May 12, 2026

Add To Cart

Question 1

You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?

A : Increase the size of the disk to 1 TB.

B : Increase the allocated CPU to the instance.

C : Migrate to use a Local SSD on the instance.

D : Migrate to use a Regional SSD on the instance.

Answer: C

Question 2

You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers’ Pods. What should you do?

A : Use Binary Authorization and whitelist only the container images used by your customers’ Pods.

B : Use the Container Analysis API to detect vulnerabilities in the containers used by your customers’ Pods.

C : Create a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customers’ Pods.

D : Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google. com/gke-os-distribution: cos_containerd to the specification of your customers’ Pods.

Answer: C

Question 3

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

A : Use gcloud iam roles copy and specify the production project as the destination project.

B : Use gcloud iam roles copy and specify your organization as the destination organization.

C : In the Google Cloud Platform Console, use the ‘create role from role’ functionality.

D : In the Google Cloud Platform Console, use the ‘create role’ functionality and select all applicable permissions.

Answer: A

Question 4

You have several hundred microservice applications running in a Google Kubernetes Engine (GKE) cluster. Each microservice is a deployment with resource limits configured for each container in the deployment. You've observed that the resource limits for memory and CPU are not appropriately set for many of the microservices. You want to ensure that each microservice has right sized limits for memory and CPU. What should you do?

A : Modify the cluster's node pool machine type and choose a machine type with more memory and CPU.

B : Configure a Horizontal Pod Autoscaler for each microservice.

C : Configure GKE cluster autoscaling.

D : Configure a Vertical Pod Autoscaler for each microservice.

Answer: C

Question 5

Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?

A : Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.

B : Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.

C : Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.

D : Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.

Answer: D

Page: 1 / 70

Total 346 Questions | Updated On: May 12, 2026

Add To Cart