Google Cloud associate cloud engineer free practice test

This practice test provides targeted preparation for aspiring Associate Cloud Engineers on the Google Cloud platform. It covers essential skills such as identity management, setting up a cloud solution environment, configuring access and security, and Planning and configuring a cloud solution. This resource aids individuals in assessing their readiness and refining their expertise in cloud engineering practices.

Welcome to your GCP Associate cloud engineer practice test

Q1. You have a project that requires 7TB of Cloud Storage, Cloud SQL with 4 vCPUs and 15GB RAM, two N2 Compute Engine instances with 8 vCPUs and 15GB RAM each, and data transfer of 500GB egress per month for 1 year. How would you calculate the cost?

A. Use the Pricing Calculator and add each service with the respective requirements individually.

B. Use the GCP Console to create a prototype of the project and calculate the cost from the usage statistics.

C. Calculate the cost of the services using Pricing Calculator based on the total amount of data transferred.

D. Start a n1-highmem-16 instance, run it for an hour, note the cost, and then multiply it by 72.

Q2. You have been tasked with granting GCP access to a new team within your organization. The team needs to manage the Cloud Storage buckets and Google Compute Engine instances, but only within a specific project in the Google Cloud Platform. Which approach would you grant the team members the appropriate access most effectively?

A. Create a custom role in the IAM Console for the new team. Select the permissions storage.buckets.* and compute.instances.*. In the Console, add the newly created role to each of the team members.

B. Create a custom role in the IAM Console for the new team. Select the permissions storage.buckets.* and compute.instances.*. Use gcloud to add the role to the team members for the specific project.

C. Create a JSON file to define the custom role, including the title, description, and permissions (storage.buckets.* and compute.instances.*). Use gcloud to create the role based on the JSON file. In the IAM section of the Cloud Console, add the newly created role to the team members for the specific project.

D. Create a JSON file to define the custom role, including the title, description, and permissions (storage.buckets.* and compute.instances.*). Use gcloud to create the role based on the JSON file. Use gcloud to add the role to the team members for the specific project.

Q3. You've just been assigned to a GCP project that has billing export to BigQuery enabled. However, you notice that some cost data is missing from the export. Which of the following could be a reason?

A. The data is more than 90 days old.

B. The data includes costs for Google Maps Platform APIs.

C. The billing export feature was enabled after the costs were incurred.

D. The BigQuery dataset that stores the exported data is full.

Q4. What is the lowest level basic role that gives you permissions to change resource state?

A. Editor.

B. Owner.

C. Administrator.

D. Viewer.

Q5. Your organization's website is experiencing a traffic spike due to a marketing campaign. You're required to handle the increasing demand and ensure your application remains available to all users, irrespective of the traffic load. Which approach would you take to achieve this?

A. Create a zonal managed instance group (MIG) with autoscaling.

B. Create an unmanaged instance group and manually add instances when required.

C. Create a regional MIG without autoscaling.

D. Create a zonal MIG with autoscaling based on HTTP load balancing serving capacity.

Q6. You are deploying an application on Google Cloud that requires high availability and fault tolerance. The application must be deployed in at least two regions and route the user traffic to the closest region. In the case of regional failure, the traffic must be routed to the other region. How would you accomplish this?

A. Deploy the application on Compute Engine instances in two regions and set up a global HTTP(S) load balancer.

B. Deploy the application on Compute Engine instances in two regions and set up a regional Network Load Balancer in each region.

C. Deploy the application on Google Kubernetes Engine clusters in two regions and set up an Internal TCP/UDP Load Balancer.

D. Deploy the application on App Engine and set up a global SSL Proxy Load Balancer.

Q7. An application is deployed on Google Kubernetes Engine (GKE) in the us-east1 region. For high availability, you need to set up a load balancer that directs traffic to the nearest cluster in case of a zone failure. What should you do?

A. Create a Network Load Balancer and target all GKE clusters in the region.

B. Create an HTTP(S) Load Balancer and configure it to target the GKE clusters.

C. Create a TCP Proxy Load Balancer and target all GKE clusters in the region.

D. Use an Internal TCP/UDP Load Balancer and configure it to target the GKE clusters.

Q8. A solar company has a GCP project with various resources. You've been tasked with delegating administrative roles for Compute Engine and Cloud Storage to different team members. Steve needs to manage Compute Engine resources, and Susan needs to manage Cloud Storage resources. How should you assign roles?

A. Assign Steve the Project Editor role and Susan the Project Viewer role.

B. Assign Steve the Compute Admin role and Susan the Cloud Storage Admin role.

C. Assign Steve the Compute Developer role and Susan the Storage Admin role.

D. Assign Steve the Compute Admin role and Susan the Project Viewer role.

Q9. A media company is hosting a web application on Google Cloud that is serving users worldwide. The application is generating dynamic and static content. You are asked to improve the performance of the web application for users in various geographic locations. Which configuration should you choose?

A. Enable Cloud CDN on a global HTTP(S) load balancer, set cache mode to "Cache static content", and enable the "Cache-Control" directive on the server.

B. Enable Cloud CDN on a regional Network Load Balancer, set cache mode to "Cache everything", and enable the "Cache-Control" directive on the server.

C. Enable Cloud CDN on a global HTTP(S) load balancer, set cache mode to "Cache everything", and disable the "Cache-Control" directive on the server.

D. Enable Cloud CDN on a global HTTP(S) load balancer, set cache mode to "Cache everything", and disable the "Cache-Control" directive on the server.

Q10. You need to add new groups of employees in your organization's production environment. You need to consider Google’s recommendation of using least privilege. What should you do?

A. Grant predefined and custom roles that provide necessary permissions and grant basic roles only where needed.

B. Grant the least restrictive basic roles to most services and grant predefined and custom roles only when necessary.

C. Grant custom roles to individual users and implement basic roles at the resource level.

D. Grant the most restrictive basic role to most services, grant predefined or custom roles as necessary.

Q11. Mary is a new member of a team in your company who has been put in charge of monitoring VM instances in the organization. Mary will need the required permissions to perform this role. How should you grant her those permissions?

A. Assign Mary compute.instances.get permissions on all of the projects she needs to monitor

B. Add Mary to a Google Group in your organization. Bind that group to roles/compute.viewer.

C. Assign the “viewer” policy to Mary.

D. Assign Mary a roles/compute.viewer role.

Q12. How are resource hierarchies organized in Google Cloud?

A. Resource, Folder, Organization, Project

B. Organization, Folder, Project, Resource

C.Project, Organization, Folder, Resource

D. Organization, Project, Resource, Folder

Q13. You are the associate cloud engineer for a rapidly growing tech start-up. The company has an existing Google Cloud Virtual Private Cloud (VPC) network with regional subnets in the US and Europe. Due to your company's recent expansion into the middle east, you are tasked with creating an additional regional subnet in the Doha region for new resources in that geographical area. The creation of the new subnet should allow for at least 400 instances now and support scaling up to 1000 instances in the future. The subnet should not use significantly more addresses than needed. Which of the following steps will correctly expand the VPC to the Doha region?

A. In your local Cloud Shell, run gcloud compute networks subnets create subnet-doha --network default --range 10.0.0.0/22 --region me-central1. Validate the subnet creation by using gcloud compute networks subnets list.

B. Using Cloud Run, run the command gcloud compute networks subnets create subnet-doha --network default --range 10.0.0.0/23 --region me-central1 .Validate the subnet creation by using gcloud compute networks subnets -l.

C. In the VPC, run gcloud compute networks subnets create subnet-doha --network default --range 10.0.0.0/21 --region me-central1 . Validate the subnet creation by using gcloud compute networks subnets list.

D. In the VPC, gcloud compute networks subnets create subnet-doha --network default --range 10.0.0.0/20 --region me-central1. Validate the subnet creation by using gcloud compute networks subnets list.

Q14. Explain the purpose of Terraform commands Which command creates infrastructure resources?

A. terraform init

B.terraform apply

C.terraform fmt

D. terraform plan

Q15 An e-commerce store decides to migrate their supply chain application to Google Cloud. You need to configure specific operating system dependencies. What should you do?

A.Implement an application using code on App Engine.

B. Implement an application using virtual machines on Compute Engine.

C. Implement an application using containers on Cloud Run.

D.Implement an application using containers on Google Kubernetes Engine.

Q16. A Business needs to analyze whether they met quarterly sales projections. Analysts assigned to run this query are familiar with SQL. What data solution should they implement?

A. Cloud SQL

B. BigQuery

C. Cloud Firestore

D. Cloud Spanner

Q17. An e-commerce store decides to pilot a cloud application for their point of sale system in their flagship store. You want to focus on code and develop your solution quickly, and you want your code to be portable. How do you proceed?

A. SSH into a Compute Engine VM and execute your code.

B.Implement a deployment manifest and run kubectl apply on it in Google Kubernetes Engine.

C. Package your code to a container image and post it to Cloud Run.

D.Code your solution in Cloud Functions.

Q18. An application running on a highly-customized version of Ubuntu needs to be migrated to Google Cloud. You need to do this in the least amount of time with minimal code changes. How should you proceed?

A.Create Compute Engine Virtual Machines and migrate the app to that infrastructure

B.Implement a Kubernetes cluster and create pods to enable your app.

C.Deploy the existing application to App Engine.

D. Deploy your application in a container image to Cloud Run.

Q19. Which gsutil command can you use to download text files from a bucket?

A. gsutil cp gs://my-bucket/*.files

B. gsutil dn gs://my-bucket/*.txt

C. gsutil copy gs://my-bucket/*.txt

D. gsutil cp gs://my-bucket/*.txt

Q20.You would like to obtain the current IAM Policy for a project called my-project test. What would be the correct syntax?

A. gcloud set-iam-policy project my-project-test

B. gcloud projects get-iam-policy my-project-test

C. gcloud projects get-iam-policy --my-project-test

D. gcloud get-iam-policy my-project-test

Q21. A cloud engineer is hired to review your project's Cloud Storage bucket data. They should be able to read and download the data but not modify or delete any objects. What is the appropriate role to assign, and how should you manage the access?

A. Assign the cloud engineer the Storage Object Viewer role on the bucket, and revoke the role after the contract ends.

B. Assign the cloud engineer the Storage Object Admin role on the bucket, and set a policy to restrict write actions.

C. Create a service account with the Storage Object Viewer role and provide the cloud engineer with the service account key.

D. Assign the cloud engineer the Storage Object Creator role and use Cloud IAM conditions to deny delete operations.

Q22. An e-commerce store supply chain application frequently analyzes large amounts of data to inform business processes and operational dashboards. What storage class would make sense for this use case?

A. Archive

B. Nearline

C. Coldline

D. Standard

Q23. What action does the terraform apply command perform?

A. Downloads the latest version of the terraform provider.

B. Shows a preview of resources that will be created.

C.Verifies syntax of terraform config file.

D.Sets up resources requested in the terraform config file.

Q24. A solar company asks you to implement Cloud SQL as a database backend to their supply chain application. You want to configure automatic failover in case of a zone outage. You decide to use the gcloud sql instances create command set to accomplish this. Which gcloud command line argument is required to configure the stated failover capability as you create the required instances?

A. --replica-type

B.--availability-type

C.--master-instance-name

D.--secondary-zone

Q25. The development team for the supply chain project is ready to start building their new cloud app using a small Kubernetes cluster for the pilot. The cluster should only be available to team members and does not need to be highly available. The developers also need the ability to change the cluster architecture as they deploy new capabilities. How would you implement this?

A. Implement an autopilot cluster in us-central1-a with a default pool and an Ubuntu image.

B.Implement a private standard regional cluster in us-central1 with a default pool and container-optimized image type.

C. Implement an autopilot cluster in us-central1 with an Ubuntu image type.

D. Implement a private standard zonal cluster in us-central1-a with a default pool and an Ubuntu image.