Download GOOGLE CLOUD ASSOCIATE CLOUD ENGINEER EXAM LATEST 2026 and more Exams Nursing in PDF only on Docsity!
GOOGLE CLOUD ASSOCIATE CLOUD ENGINEER
EXAM LATEST 2026 UPDATE 100 QUESTIONS AND
DETAILED VERIFIED ANSWERS FROM ACTUAL
EXAMS TEST GRADE A+
Question 1 You need to create a virtual machine with a specific operating system in Google Cloud. Which service should you use? A. Cloud Functions B. App Engine C. Compute Engine D. Cloud Run Rationale: Compute Engine allows you to create and manage virtual machines with customizable operating systems and configurations. Question 2 Which command-line tool is used to manage Google Cloud resources? A. gsutil B. kubectl C. gcloud D. bq Rationale: The gcloud CLI is the primary tool for managing Google Cloud resources, including Compute Engine, IAM, and networking. Question 3
You need to store unstructured data such as images and videos. Which service should you use? A. Cloud SQL B. BigQuery C. Cloud Storage D. Firestore Rationale: Cloud Storage is designed for storing unstructured objects like images, videos, and backups with high durability. Question 4 Which storage class is most cost-effective for data accessed less than once a year? A. Standard B. Nearline C. Coldline D. Archive Rationale: Archive storage offers the lowest cost for data that is rarely accessed, typically less than once per year. Question 5 You want to grant a user permission to view resources but not modify them. Which IAM role should you assign? A. Editor B. Owner C. Viewer D. Security Admin Rationale: The Viewer role provides read-only access to resources across a project.
Question 9 You want to manage access to Google Cloud resources. Which service should you use? A. Cloud Identity B. Identity and Access Management (IAM) C. Resource Manager D. Cloud Directory Rationale: IAM allows administrators to define who has access to specific resources and what actions they can perform. Question 10 Which command uploads a file to a Cloud Storage bucket? A. gcloud storage upload B. gsutil cp C. bq load D. kubectl apply Rationale: The gsutil cp command is used to copy files to and from Cloud Storage buckets. Question 11 What is the hierarchy of Google Cloud resources from highest to lowest? A. Project → Folder → Organization → Resource B. Organization → Folder → Project → Resource C. Folder → Organization → Project → Resource D. Resource → Project → Folder → Organization
Rationale: Google Cloud resources are organized hierarchically: Organization at the top, followed by Folders, Projects, and then individual Resources. Question 12 Which service allows you to run SQL databases in a fully managed environment? A. Bigtable B. Firestore C. Cloud SQL D. Spanner Rationale: Cloud SQL provides managed relational databases such as MySQL, PostgreSQL, and SQL Server. Question 13 Which service is designed for globally distributed, strongly consistent relational databases? A. Cloud SQL B. BigQuery C. Cloud Spanner D. Firestore Rationale: Cloud Spanner offers horizontal scalability with strong consistency and global distribution. Question 14 You need to analyze large datasets using SQL with serverless infrastructure. Which service should you use? A. Cloud SQL B. BigQuery
A. Store backups B. Provide autoscaling and load balancing for VMs C. Manage IAM roles D. Deploy containers Rationale: MIGs manage groups of identical VMs, enabling autoscaling, autohealing, and load balancing. Question 18 Which type of load balancer distributes traffic globally using a single anycast IP? A. Network Load Balancer B. Internal Load Balancer C. HTTP(S) Load Balancer D. TCP Proxy Load Balancer Rationale: The global HTTP(S) Load Balancer uses anycast IP addresses to distribute traffic worldwide. Question 19 You want to securely connect your on-premises network to Google Cloud over the public internet. Which service should you use? A. Dedicated Interconnect B. Partner Interconnect C. Cloud VPN D. VPC Peering Rationale: Cloud VPN provides encrypted tunnels between on-premises networks and Google Cloud over the public internet. Question 20
Which feature allows communication between VPC networks using internal IP addresses? A. Cloud VPN B. VPC Network Peering C. Cloud NAT D. External Load Balancing Rationale: VPC Network Peering enables private connectivity between VPC networks using internal IP addresses. Question 21 Which service provides outbound internet access for private instances without external IP addresses? A. Cloud VPN B. Cloud NAT C. VPC Peering D. Firewall Rules Rationale: Cloud NAT allows private instances to access the internet while keeping them inaccessible from external sources. Question 22 What is the default network mode for VPC subnet creation? A. Custom B. Auto C. Manual D. Hybrid Rationale: By default, Google Cloud creates an auto mode VPC network with subnets in each region.
Rationale: Transfer Appliance is designed for securely moving large volumes of data to Google Cloud using physical hardware. Question 26 Which service provides centralized logging for Google Cloud resources? A. Cloud Trace B. Cloud Logging C. Cloud Monitoring D. Error Reporting Rationale: Cloud Logging collects, stores, and analyzes log data from Google Cloud services. Question 27 Which service allows you to monitor metrics and create alerting policies? A. Cloud Logging B. Cloud Monitoring C. Cloud Trace D. Cloud Profiler Rationale: Cloud Monitoring provides visibility into system performance and supports alerting. Question 28 You need to define infrastructure using declarative configuration files. Which tool should you use? A. Deployment Manager B. Terraform
C. gcloud CLI D. Cloud Shell Rationale: Terraform is widely used for infrastructure as code and is recommended by Google Cloud for resource provisioning. Question 29 Which service provides a managed Apache Hadoop and Spark environment? A. Dataflow B. Dataproc C. BigQuery D. Composer Rationale: Dataproc is a managed service for running Hadoop and Spark workloads. Question 30 Which service is used for building and managing data pipelines with Apache Beam? A. Dataproc B. Dataflow C. BigQuery D. Pub/Sub Rationale: Dataflow is a fully managed service for stream and batch processing using Apache Beam. Question 31 Which service enables asynchronous messaging between applications?
A. Autoscaling B. Autohealing C. Snapshots D. Live Migration Rationale: Autohealing in Managed Instance Groups recreates unhealthy instances based on health checks. Question 35 Which disk type offers the highest performance for Compute Engine? A. Standard Persistent Disk B. Balanced Persistent Disk C. SSD Persistent Disk D. Archive Disk Rationale: SSD Persistent Disks provide the highest IOPS and throughput for demanding workloads. Question 36 Which command lists all Compute Engine instances? A. gcloud compute instances get B. gcloud compute instances list C. gcloud instances show D. gcloud compute list instances Rationale: This command displays all VM instances within the configured project. Question 37 Which service provides a fully managed environment for deploying web applications using standard runtimes?
A. App Engine Standard B. Compute Engine C. GKE D. Cloud Run Rationale: App Engine Standard offers a serverless platform with built-in scaling for web applications. Question 38 Which security feature protects data stored in Google Cloud by default? A. Customer-managed encryption B. Google-managed encryption at rest C. TLS D. IAM roles Rationale: Google Cloud automatically encrypts all data at rest using Google- managed keys. Question 39 Which service allows you to manage secrets such as API keys and passwords? A. Cloud KMS B. Secret Manager C. IAM D. Cloud Storage Rationale: Secret Manager securely stores and manages sensitive information. Question 40 Which service is used to manage encryption keys?
Which service allows versioned storage of objects? A. BigQuery B. Cloud Storage Object Versioning C. Filestore D. Firestore Rationale: Object Versioning keeps previous versions of objects to protect against accidental deletion or overwrites. Question 44 Which database service is best for petabyte-scale, low-latency NoSQL workloads? A. Firestore B. Bigtable C. Cloud SQL D. Spanner Rationale: Bigtable is optimized for large-scale analytical and operational workloads requiring low latency. Question 45 Which feature ensures that Compute Engine VMs can be stopped and restarted without losing data? A. Snapshots only B. Persistent Disks C. Local SSD D. Instance Templates Rationale: Persistent Disks retain data independently of the VM lifecycle. Question 46
Which IAM principle recommends granting only the permissions required to perform a task? A. Separation of Duties B. Principle of Least Privilege C. Defense in Depth D. Zero Trust Rationale: The Principle of Least Privilege minimizes security risks by limiting access rights. Question 47 Which command initializes the gcloud CLI and sets default configurations? A. gcloud start B. gcloud init C. gcloud configure D. gcloud setup Rationale: The gcloud init command authenticates the user and sets default configurations. Question 48 Which service provides shared file storage for Compute Engine and GKE? A. Cloud Storage B. Filestore C. Persistent Disk D. Bigtable Rationale: Filestore offers managed NFS-based file storage accessible by multiple instances.
C. Firewall Rule D. Load Balancer Rationale: VPC firewall rules control inbound and outbound traffic to VM instances. Allowing TCP port 80 enables HTTP access. Question 52 Which service allows you to migrate virtual machines from on-premises environments to Google Cloud? A. Cloud Transfer Service B. Migrate to Virtual Machines C. Dataproc D. Deployment Manager Rationale: Migrate to Virtual Machines (formerly Velostrata) enables lift-and-shift migration of on-premises VMs to Compute Engine. Question 53 You want to assign permissions to a service account used by an application. What is the recommended approach? A. Assign basic roles such as Owner B. Assign predefined or custom IAM roles following least privilege C. Share user credentials with the application D. Grant permissions at the organization level Rationale: Assigning predefined or custom roles ensures secure and minimal access according to the principle of least privilege. Question 54 Which command creates a new Cloud Storage bucket using the gcloud CLI?
A. gcloud buckets create B. gcloud storage buckets create C. gsutil makebucket D. gcloud storage create bucket Rationale: The gcloud storage buckets create command is the modern CLI method for creating Cloud Storage buckets. Question 55 Which storage option provides block storage for Compute Engine instances? A. Filestore B. Cloud Storage C. Persistent Disk D. Bigtable Rationale: Persistent Disks provide durable block storage that can be attached to Compute Engine VMs. Question 56 You need to ensure that a VM instance always retains the same internal IP address. What should you do? A. Enable Cloud NAT B. Reserve a static internal IP address and assign it to the VM C. Use an instance template D. Enable Private Google Access Rationale: Reserving a static internal IP ensures the VM retains the same IP address across restarts. Question 57
