Sample Questions and Answers
1. What is the primary role of a Google Associate Cloud Engineer?
A) Designing network infrastructure
B) Managing cloud resources and deploying applications on Google Cloud
C) Writing complex machine learning models
D) Creating detailed financial reports
Answer: B
Explanation: The Associate Cloud Engineer is responsible for managing cloud resources, deploying applications, and maintaining Google Cloud environments, not designing networks or financial analysis.
2. Which Google Cloud service is best suited for hosting containerized applications?
A) Compute Engine
B) Cloud Functions
C) Google Kubernetes Engine (GKE)
D) App Engine Standard Environment
Answer: C
Explanation: GKE is designed specifically to orchestrate and manage containerized applications using Kubernetes.
3. Which tool can be used to interact with Google Cloud resources via command line?
A) Cloud Console
B) Cloud Shell
C) gcloud CLI
D) Google Cloud SDK
Answer: C
Explanation: gcloud CLI is the command-line tool to manage Google Cloud resources. Cloud SDK includes gcloud CLI; Cloud Shell is an online terminal with gcloud pre-installed.
4. How can you control who has access to a Google Cloud Storage bucket?
A) Using IAM roles and policies
B) By setting firewall rules
C) Assigning SSL certificates
D) Using VPC peering
Answer: A
Explanation: IAM (Identity and Access Management) roles and policies are used to grant or restrict access to Google Cloud resources, including Storage buckets.
5. Which Google Cloud service provides a fully managed serverless environment to run your code?
A) Compute Engine
B) Cloud Run
C) Cloud Functions
D) App Engine
Answer: C
Explanation: Cloud Functions is a serverless execution environment to run event-driven code without managing servers.
6. What is the purpose of a VPC network in Google Cloud?
A) To store files securely
B) To connect and isolate cloud resources
C) To host databases
D) To monitor cloud activity
Answer: B
Explanation: A Virtual Private Cloud (VPC) network provides an isolated network environment where resources communicate securely.
7. Which command lists all active Compute Engine instances in a project?
A) gcloud compute instances list
B) gcloud projects list
C) gcloud container clusters list
D) gcloud compute zones list
Answer: A
Explanation: The command gcloud compute instances list displays all active VM instances.
8. What is the default service account used when you create a new VM instance in Google Compute Engine?
A) App Engine default service account
B) Compute Engine default service account
C) User-defined service account
D) Cloud Functions service account
Answer: B
Explanation: By default, Compute Engine VMs use the Compute Engine default service account unless a different one is specified.
9. What type of storage is Cloud Storage?
A) Block storage
B) Object storage
C) File storage
D) Database storage
Answer: B
Explanation: Cloud Storage is an object storage service designed to store and retrieve unstructured data.
10. Which Google Cloud service should you use for relational databases?
A) Cloud Bigtable
B) Cloud SQL
C) Firestore
D) Cloud Spanner
Answer: B
Explanation: Cloud SQL is a fully managed relational database service for MySQL, PostgreSQL, and SQL Server.
11. How does App Engine Standard Environment differ from the Flexible Environment?
A) Standard supports custom runtimes; Flexible does not
B) Flexible uses VMs and allows custom runtimes; Standard supports only predefined runtimes
C) Standard is for containerized apps only
D) Flexible does not support autoscaling
Answer: B
Explanation: Flexible Environment runs apps in VMs and supports custom runtimes; Standard supports only specific runtimes and uses sandboxing.
12. What IAM role would you assign to someone who only needs to deploy applications to App Engine?
A) Editor
B) App Engine Deployer
C) Owner
D) Viewer
Answer: B
Explanation: The App Engine Deployer role grants permissions to deploy apps without full edit rights.
13. What does Cloud IAM use to grant granular access control?
A) Roles
B) Policies
C) Service Accounts
D) All of the above
Answer: D
Explanation: IAM uses roles, policies, and service accounts collectively to manage and grant permissions.
14. You want to analyze logs for your Cloud Functions. Which Google Cloud service should you use?
A) Cloud Monitoring
B) Cloud Logging
C) Cloud Trace
D) Cloud Debugger
Answer: B
Explanation: Cloud Logging collects and stores logs from Cloud Functions and other services.
15. Which of the following storage classes is best for infrequently accessed data?
A) Standard
B) Nearline
C) Multi-Regional
D) Regional
Answer: B
Explanation: Nearline storage is optimized for data accessed less than once a month.
16. What is a common use case for Pub/Sub in Google Cloud?
A) Hosting web applications
B) Sending real-time messages between services
C) Storing unstructured data
D) Managing user authentication
Answer: B
Explanation: Pub/Sub is a messaging service designed for real-time, asynchronous communication between systems.
17. Which Google Cloud product allows you to deploy containerized applications without managing servers?
A) Cloud Functions
B) Cloud Run
C) Kubernetes Engine
D) Compute Engine
Answer: B
Explanation: Cloud Run is fully managed and runs containers serverlessly.
18. How do you restrict access to a Cloud Storage bucket to only specific IP addresses?
A) Using IAM roles
B) Adding a bucket policy with IP address restrictions
C) Using firewall rules
D) Setting service account permissions
Answer: B
Explanation: Bucket policies allow you to set conditions, such as restricting access by IP addresses.
19. What is the main purpose of labels in Google Cloud?
A) To organize and filter resources
B) To encrypt data
C) To control access
D) To monitor usage
Answer: A
Explanation: Labels help categorize and filter resources for billing or management.
20. Which storage option offers strong consistency for globally distributed databases?
A) Cloud Spanner
B) Cloud Bigtable
C) Firestore in Datastore mode
D) Cloud SQL
Answer: A
Explanation: Cloud Spanner provides global, strongly consistent relational databases.
21. What is the default quota limit for the number of projects per Google Cloud account?
A) 5
B) 10
C) 15
D) 30
Answer: C
Explanation: The default limit is 15 projects per Google Cloud account, adjustable via support.
22. Which Google Cloud service helps monitor the health and performance of your applications?
A) Cloud Logging
B) Cloud Monitoring
C) Cloud Trace
D) Cloud Debugger
Answer: B
Explanation: Cloud Monitoring provides dashboards and alerts for app health and performance.
23. You want to migrate a large on-premises dataset to Google Cloud Storage with minimal downtime. Which tool is best?
A) gsutil cp
B) Transfer Appliance
C) Cloud Storage Browser
D) BigQuery Data Transfer Service
Answer: B
Explanation: Transfer Appliance is a hardware device to move large datasets efficiently.
24. Which Google Cloud feature enables you to encrypt data at rest automatically?
A) Customer-managed encryption keys (CMEK)
B) Default encryption by Google
C) Customer-supplied encryption keys (CSEK)
D) Firewall rules
Answer: B
Explanation: By default, Google encrypts data at rest using their managed keys.
25. How can you grant a service account permission to access other Google Cloud resources?
A) Attach roles to the service account
B) Add the service account to a firewall rule
C) Share the service account password
D) Assign billing permissions
Answer: A
Explanation: Assigning IAM roles to a service account controls its access.
26. Which Google Cloud service provides managed relational database support for MySQL, PostgreSQL, and SQL Server?
A) Cloud Bigtable
B) Cloud SQL
C) Firestore
D) Cloud Spanner
Answer: B
Explanation: Cloud SQL supports managed relational databases for MySQL, PostgreSQL, and SQL Server.
27. What is the purpose of a service account key?
A) To authenticate users accessing the Google Cloud Console
B) To authenticate applications or services programmatically
C) To encrypt data at rest
D) To manage firewall rules
Answer: B
Explanation: Service account keys allow applications to authenticate with Google Cloud APIs.
28. Which of the following Google Cloud services would you use to run batch jobs without provisioning servers?
A) Cloud Run
B) Cloud Functions
C) Cloud Batch
D) App Engine
Answer: C
Explanation: Cloud Batch manages and executes batch computing jobs without
server management.
29. Which Google Cloud IAM role provides full administrative access to all resources in a project?
A) Viewer
B) Editor
C) Owner
D) Security Admin
Answer: C
Explanation: The Owner role has full control over all resources, including billing and permissions.
30. When deploying an app on App Engine Standard, which file specifies the runtime environment?
A) app.yaml
B) main.py
C) Dockerfile
D) runtime.json
Answer: A
Explanation: The app.yaml file configures the runtime and scaling options for App Engine Standard apps.
31. Which Google Cloud tool allows you to manage infrastructure as code?
A) Cloud Deployment Manager
B) Cloud Console
C) Cloud Shell
D) Stackdriver
Answer: A
Explanation: Cloud Deployment Manager lets you define and deploy cloud resources using configuration files (in YAML or JSON).
Reviews
There are no reviews yet.