Free Google Associate-Cloud-Engineer Exam Practice Questions 2026

Stay ahead with 100% Free Google Cloud Engineer Associate Associate-Cloud-Engineer Practice Test Questions Dumps

Page: 1 / 70

Total 346 Questions | Updated On: Jul 13, 2026

Add To Cart

Question 1

You need a dynamic way of provisioning VMs on Compute Engine. The exact specifications will be in a dedicated configuration file. You want to follow Google’s recommended practices. Which method should you use?

A : Deployment Manager

B : Cloud Composer

C : Managed Instance Group

D : Unmanaged Instance Group

Answer: A

Question 2

You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?

A : Increase the size of the disk to 1 TB.

B : Increase the allocated CPU to the instance.

C : Migrate to use a Local SSD on the instance.

D : Migrate to use a Regional SSD on the instance.

Answer: C

Question 3

You are deploying a large multi-tiered application with more than 1,000 IP addresses in a Google Cloudproject that needs to be securely isolated. The application includes the:web tier with frontend servers for public trafficapplication tier with servers running core application logic that only need access from the web tier anddatabase tier with database servers that only need access from the application tierYou want to minimizecost, complexity, and administrative overhead in the network architecture. What should you do?database tier with database servers that only need access from the application tierYou want to minimizecost, complexity, and administrative overhead in the network architecture. What should you do?

A : Create a /24 Shared VPC with separate subnets for each tier. Use firewall rules that reference network tags to control traffic.

B : Create one custom mode /16 VPC with three subnets. Place each tier in its own subnet and use firewallrules that reference IP subnets to control traffic.

C : Deploy each tier into a separate custom mode VPC. Use VPC Network Peering to securely connecteach Custom mode VPC. Manage firewall rules individually in each VPC.

D : Deploy each tier in a /24 VPC by using network tags to identify instances. Implement firewall rules forfine-grained network segmentation.

Answer: B

Question 4

You have a managed instance group comprised of preemptible VM's. All of the VM's keepdeleting and recreating themselves every minute. What is a possible cause of thisbehavior?

A : Your zonal capacity is limited, causing all preemptible VM's to be shutdown torecover capacity. Try deploying your group to another zone.

B : You have hit your instance quota for the region.

C : Your managed instance group's VM's are toggled to only last 1 minute inpreemptible settings.

D : Your managed instance group's health check is repeatedly failing, either to amisconfigured health check or misconfigured firewall rules not allowing the healthcheck to access the instance

Answer: D

Question 5

Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire cloud infrastructure through code. How can you ensure that the pipeline has appropriate permissions while your system is following security best practices?

A : • Add a step for human approval to the CI/CD pipeline before the execution of the infrastructureprovisioning.• Use the human approvals IAM account for the provisioning.

B : • Attach a single service account to the compute instances.• Add minimal rights to the service account.• Allow the service account to impersonate a Cloud Identity user with elevated permissions to create, update, or delete resources.

C : • Attach a single service account to the compute instances.• Add all required Identity and Access Management (IAM) permissions to this service account to create, update, or delete resources

D : • Create multiple service accounts, one for each pipeline with the appropriate minimal Identity andAccess Management (IAM) permissions.• Use a secret manager service to store the key files of the service accounts.• Allow the CI/CD pipeline to request the appropriate secrets during the execution of the pipeline.

Answer: B

Page: 1 / 70

Total 346 Questions | Updated On: Jul 13, 2026

Add To Cart