100% Free Associate-Cloud-Engineer Practice Exam Questions and Answers

Stay Ahead with Latest Associate-Cloud-Engineer Google Cloud Certified Practice Test Questions 2026

Page: 1 / 73

Total 363 Questions | Updated On: Sep 22, 2026

Add To Cart

Question 1

You have an application that reads data from a Pub/Sub topic. During local development, you authenticated using your personal credentials to test the application. You now want to deploy the application to Vertex AI and have created a new service account to be used as the application ' s identity. You need to ensure that the deployed application can still access the Pub/Sub topic. What should you do?

A : Extract your access token by using the gcloud auth print-access-token command, and store it with the application.

B : Grant the relevant IAM roles to the service account used as your agent identity.

C : Create a secret in Secret Manager to store your personal credentials, and configure the application ' s authentication code to use this secret.

D : Generate a JSON private key for the service account, and upload the key as Vertex AI metadata.

Answer: B

Question 2

(You have an application running inside a Compute Engine instance. You want to provide the application with secure access to a BigQuery dataset. You must ensure that credentials are only valid for a short period of time, and your application will only have access to the intended BigQuery dataset. You want to follow Google-recommended practices and minimize your operational costs. What should you do?)

A : Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the project.

B : Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the dataset.

C : Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the dataset.

D : Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the project.

Answer: C

Question 3

You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in thissubnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?

A : 1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

B : 1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.

C : 1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

D : 1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.

Answer: C

Question 4

You have developed an application that consists of multiple microservices, with each microservice packaged in its own Docker container image. You want to deploy the entire application on Google Kubernetes Engine so that each microservice can be scaled individually. What should you do?

A : Create and deploy a Custom Resource Definition per microservice.

B : Create and deploy a Docker Compose File.

C : Create and deploy a Job per microservice.

D : Create and deploy a Deployment per microservice.

Answer: A

Question 5

You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection. You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?

A : Use the GCP Console to transfer the file instead of gsutil.

B : Enable parallel composite uploads using gsutil on the file transfer.

C : Decrease the TCP window size on the machine initiating the transfer.

D : Change the storage class of the bucket from Nearline to Multi-Regional.

Answer: B

Page: 1 / 73

Total 363 Questions | Updated On: Sep 22, 2026

Add To Cart