Google Cloud Platform Certified – Associate Cloud Engineer

You want to allow users in your domain to create and manage GCP projects, but restrict billing account usage. What should you do?

Your organization mandates all network traffic must go through an inspection layer. How can you enforce this on GCP?

You want to reduce cold start times for a Cloud Run service with unpredictable traffic. What should you configure?

Your team needs to share GCS buckets with an external vendor. You want to avoid managing IAM for each external user. What should you do?

You are seeing increased costs in BigQuery. You want to monitor and control this. What should you do?

You want to enforce that only approved VM images are used in your GCP project. What should you do?

Your app runs in multiple zones within a region. You want to balance traffic and maintain session affinity. What should you use?

You want to detect unexpected VM restarts. What should you use?

You accidentally deleted a VPC network. How can you minimize disruption to production services?

You want to ensure all objects uploaded to a GCS bucket are encrypted with your organization’s customer-managed keys. What should you do?

Your VM app needs credentials to access GCS securely. Which approach follows least privilege and avoids key rotation issues?

You’ve enabled VPC Flow Logs in a project, but you’re seeing no entries in Logging. What is the most likely reason?

You’re setting up a CI/CD pipeline. You want to ensure builds only run after code review approval. What’s the best way to implement this in Cloud Build?

A VM instance cannot access external services despite being in a VPC with internet access. What’s the most likely issue?

You need to automate the deployment of a serverless app that listens to Pub/Sub messages and writes data to BigQuery. What is the best approach?

Your team uses multiple GCP projects. You want to centralize network management while maintaining project-level billing and resource independence. What should you do?

Your company runs a Java application on GCE. It frequently crashes under heavy load. You want to identify the root cause and resolve it. Which approach is best?

You want to automate the creation of resources across multiple environments (dev, staging, prod) with configuration stored in Git. What is the most efficient solution?

You are deploying a multi-tier application with a web frontend and a backend API. You want to restrict access to the API to only frontend VMs in the same project. What should you use?

Your development team accidentally terminated a VM instance hosting critical logs. Deletion protection was not enabled. The disk was not encrypted using CMEK. What is the most effective way to recover the logs?

You need to inspect all resources used in a GCP project, including IAM roles and service usage. What’s the best tool?

You need to deploy a web app and want to use a PaaS offering that automatically scales, supports multiple languages, and needs no infrastructure management. What should you use?

Your VM is failing due to insufficient permissions to write logs. What’s the likely cause?

Your company wants to encrypt data stored in BigQuery with customer-managed keys (CMEK). What do you do?

You are migrating a MySQL database to Cloud SQL with minimum downtime. What should you use?

You are using Cloud Functions and need it to trigger on new file uploads to a bucket. What do you use?

You are setting up a new VPC and want full control over IP range and subnet placement. What should you choose?

You want to restrict API access on GCP only to your internal team members. What should you configure?

A colleague accidentally deleted a Cloud Storage bucket. You want to recover the data. What should you do?

You want to deploy your app using Cloud Deployment Manager. Which file format should you use for the configuration?

Your developer needs to test an application on a GKE cluster with minimal cost and resources. What is the best option?

Your team is using multiple service accounts for automation. You want to audit which service account accessed a specific GCP resource. What should you use?

You are deploying a new application to Cloud Run. It needs access to a Cloud SQL database. What’s the most secure and simple way to provide this access?

A colleague deleted a Compute Engine instance accidentally. You want to prevent this in the future. What should you do?

You want to enable billing export for detailed cost analysis using BigQuery. What should you do?

You are asked to ensure your VM instance in Compute Engine always gets the same public IP address after restarts. What should you do?

Your company has implemented a CI/CD pipeline using Cloud Build. You want to ensure only approved images are deployed to production. What should you do?

Your application stores data in Cloud Storage. You want to restrict access to a specific bucket so only your app can access it, while denying public access. What should you do?

You created a custom role in your project and want to assign it to a group of developers. What is the most efficient way to assign this role?

You are deploying a critical application on Google Kubernetes Engine (GKE). You want to ensure that the application is distributed across multiple zones for high availability. What should you do?

Your application requires a managed database with support for PostgreSQL. What should you use?

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?

You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?

Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?

Your company uses Cloud Storage to store application backup files for disaster recovery purposes. You want to follow Google's recommended practices. Which storage option should you use?

You are using multiple configurations for gcloud. You want to review the configured Kubernetes Engine cluster of an inactive configuration using the fewest possible steps. What should you do?

You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re-creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?

You want to select and configure a cost-effective solution for relational data on Google Cloud Platform. You are working with a small set of operational data in one geographic location. You need to support point-in-time recovery. What should you do?

You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible. Which range should you use?