Google Associate Cloud Engineer

• #221

  Your company needs to deploy a web application that can automatically scale based on traffic. The application consists of a frontend and backend. Which Google Cloud service combination would be most appropriate?

  • AApp Engine Standard Environment for both frontend and backend
  • BCompute Engine with managed instance groups and Cloud Load Balancing
  • CCloud Run for frontend and Cloud Functions for backend
  • DGoogle Kubernetes Engine with Horizontal Pod Autoscaler
  Show answer
• #222

  Your organization needs to ensure that certain VM instances can only be created in specific regions due to data residency requirements. How should you enforce this?

  • AUse Organization Policy constraints
  • BConfigure IAM roles with regional restrictions
  • CUse VPC firewall rules
  • DSet up custom machine types
  Show answer
• #223

  Your application needs to process images uploaded by users. The processing is CPU-intensive and can take several minutes. Which architecture should you implement?

  • ASynchronous processing in the web application
  • BCloud Functions triggered by Cloud Storage events
  • CCloud Tasks with worker instances processing the queue
  • DApp Engine background threads
  Show answer
• #224

  CloudNative startup has 5 microservices that need different APIs enabled. Service A needs Compute Engine API, Service B needs BigQuery API, Service C needs both plus Cloud Storage API. They want to follow the principle of least privilege and minimize API attack surface. How should they manage API enablement?

  • AEnable all APIs at organization level for consistency
  • BCreate separate projects for each service with only required APIs enabled
  • CSingle project with all APIs enabled but restricted by service accounts
  • DUse API keys to control which services can access which APIs
  Show answer
• #225

  DataAnalytics company processes customer data and needs to export billing data to BigQuery for cost analysis, set up alerts when monthly spend exceeds $10,000, and automatically pause non-critical workloads when budget reaches 90% of limit. What billing configuration should they implement?

  • ABilling export to BigQuery + Budget alerts + Cloud Functions for workload management
  • BBilling API integration + Cloud Monitoring alerts + Manual intervention procedures
  • CCost optimization recommendations + Committed use discounts + Resource quotas
  • DBilling dashboard monitoring + Email notifications + Scheduled instance shutdowns
  Show answer
• #226

  You need to implement a deployment strategy that allows you to test new versions with a small percentage of users before full rollout. Which approach should you use?

  • ABlue-green deployment
  • BRolling update
  • CCanary deployment
  • DRecreate deployment
  Show answer
• #227

  You need to implement a disaster recovery solution that can recover your application in a different region within 2 hours. Which approach should you use?

  • ARegular backups to Cloud Storage
  • BContinuous replication to standby region
  • CWeekly snapshots of all resources
  • DMulti-regional active-active deployment
  Show answer
• #228

  MediaStreaming company serves video content globally. They need to minimize latency for viewers, handle traffic spikes during popular releases, and optimize bandwidth costs. Content is accessed frequently when new, then demand drops significantly. What content delivery strategy should they implement?

  • AGlobal load balancer with Cloud Storage and CDN with cache control headers
  • BMulti-regional Cloud Storage with lifecycle policies and Cloud CDN
  • CRegional load balancers with local storage and manual content distribution
  • DCloud Storage with global distribution and intelligent tiering
  Show answer
• #229

  You need to implement cost controls to prevent unexpected charges in your Google Cloud project. Which approach should you use?

  • ASet up billing alerts only
  • BUse budget alerts with Cloud Functions for automated actions
  • CMonitor usage with Cloud Monitoring
  • DSet organization policy constraints
  Show answer
• #230

  Your web application experiences traffic spikes during specific hours. You want to automatically scale the number of instances based on incoming requests. Which metric should you use for autoscaling?

  • ACPU utilization
  • BMemory usage
  • CHTTP request rate
  • DDisk I/O
  Show answer
• #231

  Your application running on App Engine needs to access a Cloud SQL instance. How should you configure the connection?

  • AUse the Cloud SQL instance's public IP address
  • BUse the Cloud SQL Proxy
  • CConfigure VPC peering between App Engine and Cloud SQL
  • DUse private IP with VPC connector
  Show answer
• #232

  EcommerceGiant expects their Black Friday traffic to increase API calls by 1000x. They use 15 different Google Cloud APIs across their microservices. Currently, they're hitting quota limits during traffic spikes, causing service failures. What proactive approach should they take?

  • AContact Google Support for automatic quota increases during events
  • BRequest quota increases for all APIs based on projected usage and implement monitoring
  • CImplement request queuing and retry logic in applications
  • DCache API responses to reduce quota consumption
  Show answer
• #233

  TechStartup runs a Kubernetes-based microservices application on GKE. They need to implement secure cluster access that enforces user identity, integrates with Google Cloud IAM, and limits access based on user roles and groups. Additionally, they want to audit all administrative actions performed on the cluster. What is the best approach to meet these requirements?

  • AUse Kubernetes RBAC with static user certificates and audit logs enabled
  • BEnable GKE Workload Identity with OAuth tokens and configure Kubernetes RBAC mapped to Google Cloud IAM roles
  • CUse Google Cloud IAM for authentication via GKE’s integrated OAuth, enable Kubernetes RBAC for authorization, and activate Cloud Audit Logs for GKE control plane activities
  • DManage access using SSH to nodes and apply firewall rules to restrict IP addresses
  Show answer
• #234

  Your application generates large amounts of time-series data that needs to be analyzed. The data has a specific retention period of 2 years. Which storage solution should you use?

  • ABigtable
  • BBigQuery with table expiration
  • CCloud SQL with automated backups
  • DFirestore with TTL
  Show answer
• #235

  You need to provide secure access to a private GKE cluster for your development team. What is the recommended approach?

  • AEnable public endpoint and use firewall rules
  • BUse authorized networks to limit access by IP
  • CSet up a bastion host in the same VPC
  • DUse Identity-Aware Proxy (IAP) with kubectl
  Show answer
• #236

  You need to ensure that your GKE pods can only pull images from your organization's Container Registry. How should you configure this?

  • AUse Binary Authorization
  • BConfigure Pod Security Policies
  • CSet up Private Google Access
  • DUse Workload Identity
  Show answer
• #237

  Your application generates 1GB of log data per day that needs to be stored for compliance reasons for 7 years. The logs are rarely accessed after 90 days. What storage strategy should you implement?

  • ACloud Storage Standard with lifecycle policy to Archive after 90 days
  • BCloud Storage Nearline for all data
  • CCloud Logging with long retention period
  • DBigQuery for log storage and analysis
  Show answer
• #238

  DevCorp has development, staging, and production environments. Developers need full access to dev, limited access to staging, and read-only access to production logs. They want to prevent accidental resource creation in production and ensure staging mirrors production configuration. What is the best access control strategy?

  • ASeparate projects for each environment with custom IAM roles and Organization Policies
  • BSingle project with resource labels and conditional IAM bindings
  • CEnvironment-specific service accounts with role inheritance
  • DVPC-based isolation with firewall rules for access control
  Show answer
• #239

  You need to implement a data pipeline that processes streaming data, performs transformations, and stores results in multiple destinations. Which service should you use?

  • ACloud Composer
  • BCloud Dataflow
  • CCloud Functions
  • DCloud Scheduler
  Show answer
• #240

  Your company needs to ensure that all VM instances in a specific subnet cannot access the internet directly but can still receive updates from Google's update servers. How should you configure this?

  • ACreate a firewall rule blocking all outbound traffic
  • BUse Private Google Access and remove external IP addresses from VMs
  • CConfigure Cloud NAT for outbound internet access
  • DUse VPC peering to route traffic through another network
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account