Free Associate Cloud Engineer Exam Questions and Answers

Last updated: September 7, 2026

Provider

Google

Questions in our bank

1000+

Free to read

First 10, with answers

Official page

Official Exam website

Our test mode duration & pass mark

130 mins · 70%

Verified answers

Reviewed weekly

Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.

1. Question #1

   You have created a new project in Google Cloud through the gcloud command line interface (CLI) and linked a billing account. You need to create a new Compute Engine instance using the CLI. You need to perform the prerequisite steps. What should you do?

   • A. Create a Cloud Monitoring Workspace.
   • B. Create a VPC network in the project.
   • C. Enable the compute googleapis.com API.
   • D. Grant yourself the IAM role of Computer Admin.
   Reveal Answer

2. Question #2

   You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?

   • A. Create a single custom VPC with 2 subnet
   • B. Create each subnet in a different region and with a different CIDR range.
   • C. Create a single custom VPC with 2 subnet
   • D. Create each subnet in the same region and with the same CIDR range.
   Reveal Answer

3. Question #3

   You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?

   • A. Create a Cloud Bigtable cluster and use the HBase API
   • B. Deploy MongoDB Alias from the Google Cloud Marketplace
   • C. Download a MongoDB installation package and run it on Compute Engine instances
   • D. Download a MongoDB installation package, and run it on a Managed Instance Group
   Reveal Answer

4. Question #4

   You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?

   • A. Create the instance with the default Compute Engine service account Grant the service account permissions on Cloud Storage.
   • B. Create the instance with the default Compute Engine service account Add metadata to the objects on Cloud Storage that matches the metadata on the new
   • C. Create a new service account and assign this service account to the new instance Grant the service account permissions on Cloud Storage.
   • D. Create a new service account and assign this service account to the new instance Add metadata to the objects on Cloud Storage that matches the metadata on
   Reveal Answer

5. Question #5

   You have a number of applications that have bursty workloads and are heavily dependent on topics to decouple publishing systems from consuming systems. Your company would like to go serverless to enable developers to focus on writing code without worrying about infrastructure. Your solution architect has already identified Cloud Pub/Sub as a suitable alternative for decoupling systems. You have been asked to identify a suitable GCP Serverless service that is easy to use with Cloud Pub/Sub. You want the ability to scale down to zero when there is no traffic in order to minimize costs. You want to follow Google recommended practices. What should you suggest?

   • A. Cloud Run for Anthos
   • B. Cloud Run
   • C. App Engine Standard
   • D. Cloud Functions.
   Reveal Answer

6. Question #6

   You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?

   • A. In the Log Viewer, filter the logs on severity 'Error' and the name of the Service Account.
   • B. Create a sink to BigQuery to export all the log
   • C. Create a Data Studio dashboard on the exported logs.
   • D. Create a custom log-based metric for the specific error to be used in an Alerting Policy.
   Reveal Answer

7. Question #7

   You have an application that uses Cloud Spanner as a backend database. The application has a very predictable traffic pattern. You want to automatically scale up or down the number of Spanner nodes depending on traffic. What should you do?

   • A. Create a cron job that runs on a scheduled basis to review stackdriver monitoring metrics, and then resize the Spanner instance accordingly.
   • B. Create a Stackdriver alerting policy to send an alert to oncall SRE emails when Cloud Spanner CPU exceeds the threshol
   • C. SREs would scale resources up or down accordingly.
   • D. Create a Stackdriver alerting policy to send an alert to Google Cloud Support email when Cloud Spanner CPU exceeds your threshol
   Reveal Answer

8. Question #8

   You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?

   • A. Open the Cloud Spanner console to review configurations.
   • B. Open the IAM & admin console to review IAM policies for Cloud Spanner roles.
   • C. Go to the Stackdriver Monitoring console and review information for Cloud Spanner.
   • D. Go to the Stackdriver Logging console, review admin activity logs, and filter them for Cloud Spanner IAM roles.
   Reveal Answer

9. Question #9

   You need to update a deployment in Deployment Manager without any resource downtime in the deployment. Which command should you use?

   • A. gcloud deployment-manager deployments create --config
   • B. gcloud deployment-manager deployments update --config
   • C. gcloud deployment-manager resources create --config
   • D. gcloud deployment-manager resources update --config
   Reveal Answer

10. Question #10

    You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?

    • A. When creating the VM, use machine type n1-standard-96.
    • B. When creating the VM, use Intel Skylake as the CPU platform.
    • C. Create the VM using Compute Engine default setting
    • D. Use gcloud to modify the running instance to have 96 vCPUs.
    Reveal Answer