Free Google Associate-Cloud-Engineer Exam Questions

Become Google Certified with updated Associate-Cloud-Engineer exam questions and correct answers

Page: 1 / 73

Total 363 Questions | Updated On: Aug 15, 2026

Add To Cart

Question 1

You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers’ Pods. What should you do?

A : Use Binary Authorization and whitelist only the container images used by your customers’ Pods.

B : Use the Container Analysis API to detect vulnerabilities in the containers used by your customers’ Pods.

C : Create a GKE node pool with a sandbox type configured to gvisor. Add the parameter runtimeClassName: gvisor to the specification of your customers’ Pods.

D : Use the cos_containerd image for your GKE nodes. Add a nodeSelector with the value cloud.google. com/gke-os-distribution: cos_containerd to the specification of your customers’ Pods.

Answer: C

Question 2

You have one GCP account running in your default region and zone and another account running in a nondefault region and zone. You want to start a new Compute Engine instance in these two Google Cloud Platform accounts using the command line interface. What should you do?

A : Create two configurations using gcloud config configurations create [NAME]. Run gcloud config configurations activate [NAME] to switch between accounts when running the commands to start the Compute Engine instances.

B : Create two configurations using gcloud config configurations create [NAME]. Run gcloud configurations list to start the Compute Engine instances.

C : Activate two configurations using gcloud configurations activate [NAME]. Run gcloud config list to start the Compute Engine instances.

D : Activate two configurations using gcloud configurations activate [NAME]. Run gcloud configurations list to start the Compute Engine instances.

Answer: A

Question 3

You are writing a shell script that includes a few gcloud CLI commands to access some Google Cloudresources. You want to test the script in your local development environment with a service account in themost secure way. What should you do?

A : Download the service account key file and save it in a secure location. Set theGOOGLE_APPLICATION_CREDENTIALS environment variable to the key file.

B : Enable service account impersonation, and use the gcloud config set auth/impersonate_service_accountcommand to use it by default.

C : Generate an ID token for the service account. Use the token with the gcloud CLI commands.

D : Download the service account key file, and use it to generate an access token. Use the token with thegcloud CLI commands.

Answer: B

Question 4

You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection. You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?

A : Use the GCP Console to transfer the file instead of gsutil.

B : Enable parallel composite uploads using gsutil on the file transfer.

C : Decrease the TCP window size on the machine initiating the transfer.

D : Change the storage class of the bucket from Nearline to Multi-Regional.

Answer: B

Question 5

Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment). What should you do?

A : Create a new service with the new version of the application. Split traffic between this version and the version that is currently running.

B : Create a new revision with the new version of the application. Split traffic between this version and the version that is currently running.

C : Create a new service with the new version of the application. Add an HTTP Load Balancer in front of both services.

D : Create a new revision with the new version of the application. Add an HTTP Load Balancer in front of both revisions.

Answer: B

Page: 1 / 73

Total 363 Questions | Updated On: Aug 15, 2026

Add To Cart