Free Google Cloud Associate Cloud Engineer standard exam Practice Questions

Sample Practice Questions

Try these 10 sample questions from the Google Cloud Associate Cloud Engineer standard exam practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1A company wants to group several Google Cloud projects by department and apply inherited access controls to each department. Which resource should it use between the organization and projects?

   1. A. A folder resource
   2. B. A billing account
   3. C. A service account
   4. D. An API service

   Answer: A

   Explanation: "Folder resources are an optional grouping mechanism between organization resources and project resources." A folder groups department projects and serves as an inheritance point for their access controls.

   Reference: About resource hierarchy — The resource hierarchy; The folder resource

2. 2A workload requires administrators to manage its own Linux VM instances and operating system. Which compute product fits that control model?

   1. A. Compute Engine
   2. B. Cloud Run
   3. C. GKE Autopilot
   4. D. Cloud Functions

   Answer: A

   Explanation: "Compute Engine is an infrastructure as a service (IaaS) product that offers self-managed virtual machine (VM) instances and bare metal instances." This meets the explicit VM and OS management need.

   Reference: Compute Engine overview — Compute Engine overview

3. 3Which gcloud command opens an SSH connection to a named Compute Engine Linux VM?

   1. A. gcloud compute ssh
   2. B. gcloud compute images list
   3. C. gcloud run deploy
   4. D. gcloud container clusters get-credentials

   Answer: A

   Explanation: The Compute Engine guide says, "Connect to a VM using SSH by running the gcloud compute ssh command." That command opens the VM connection.

   Reference: Connect to Linux VMs — Connect to VMs; gcloud

4. 4In an IAM allow policy, what grants a principal permissions on a Google Cloud resource?

   1. A. Grant the principal a role on the resource.
   2. B. Grant individual permissions directly to the principal.
   3. C. Add the principal to the resource's DNS zone.
   4. D. Add the resource to the principal's metric scope.

   Answer: A

   Explanation: An allow policy grants access through a role: "To give the principal permission to access the resource, you grant them a role on the resource. You grant these roles using an allow policy."

   Reference: IAM overview — IAM overview, principals, roles, resources

5. 5An administrator needs to restrict where newly created resources can be located across an organization. Which control addresses that configuration requirement?

   1. A. An IAM role grant
   2. B. An organization policy constraint
   3. C. A project display name
   4. D. A billing budget alert

   Answer: B

   Explanation: "Organization Policy focuses on what, and lets the administrator set restrictions on specific resources to determine how they can be configured." Restricting resource locations is a configuration restriction, while an IAM role grant controls who can act.

   Reference: Organization Policy overview — Differences from Identity and Access Management; How organization policy works

6. 6A team wants to deploy a containerized HTTP application without creating a cluster or managing infrastructure. Which product fits?

   1. A. Compute Engine
   2. B. Cloud Run
   3. C. GKE Standard
   4. D. Managed instance groups

   Answer: B

   Explanation: "You don't have to create a cluster or manage infrastructure to be productive with Cloud Run." A Cloud Run service runs the containerized HTTP endpoint while removing cluster management.

   Reference: What is Cloud Run — What is Cloud Run

7. 7After creating a standard disk snapshot, which restoration action does the snapshot documentation describe?

   1. A. Create a new disk containing captured data
   2. B. Create a new billing account
   3. C. Change the source VM's subnet
   4. D. Create a Pub/Sub subscription

   Answer: A

   Explanation: "After you create a snapshot, you can use it to create a new disk that contains the captured data." The new disk is the restore target.

   Reference: About archive and standard disk snapshots — About archive and standard disk snapshots

8. 8In Google Cloud IAM, what does an IAM role represent?

   1. A. A collection of permissions.
   2. B. A list of resource locations.
   3. C. A single authenticated identity.
   4. D. A network access boundary.

   Answer: A

   Explanation: A role is defined as "Roles are collections of permissions."

   Reference: IAM overview — IAM overview, permissions and roles

9. 9Which IAM role does Google's service usage guide identify for an administrator who needs to enable and disable services in a project?

   1. A. Service Usage Viewer
   2. B. Service Usage Admin
   3. C. Quota Administrator
   4. D. Project Billing Manager

   Answer: B

   Explanation: The guide specifies the "Service Usage Admin (roles/serviceusage.serviceUsageAdmin) IAM role on your project." This is the role identified for enabling and disabling services.

   Reference: Enabling and disabling services — Required roles

10. 10Which execution pattern identifies a Cloud Run job?

    1. A. Respond to requests through a stable HTTP endpoint.
    2. B. Run scheduled or manual tasks to completion.
    3. C. Handle continuous background work from a queue.
    4. D. Run a long-lived workload in a singleton runtime.

    Answer: B

    Explanation: The Cloud Run resource table says a job "Executes parallelizable tasks that are executed manually, or on a schedule, and run to completion." This is the finite scheduled or manual pattern, unlike a service, worker pool, or long-lived instance.

    Reference: What is Cloud Run — Services, jobs, worker pools, and instances