DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Prepare for Associate Cloud Engineer Success: Exam Questions 2025 Updated, Google Associate Cloud Engineer | SPOTO

Prepare for Google Associate Cloud Engineer certification success with our 2025 updated exam questions and comprehensive exam materials. Stay ahead of the curve with our meticulously crafted exam dumps, featuring a vast collection of online exam questions, sample questions, and exam answers that accurately mirror the latest certification exam. Immerse yourself in a realistic testing environment with our mock exams and exam simulator, designed to hone your skills in deploying applications, monitoring operations, and managing enterprise solutions on Google Cloud. Leverage our in-depth explanations and exam practice resources to identify knowledge gaps and refine your understanding of the Google Cloud Console, command-line interface, and platform-based tasks. Elevate your exam readiness with our free practice tests and premium exam preparation tools, empowering you to master Google-managed and self-managed services. Unlock Associate Cloud Engineer certification success with our unrivaled 2025 updated exam questions and study materials.

Take other online exams
Question #1
22. You are running an application on a Google Compute Engine instance. You want tocreate multiple copies of this VM to handle the burst in traffic. What should you do?
A. Create a snapshot of the compute engine instance disk and create images from this snapshot to handle the burst in traffic
B. Create a snapshot of the compute engine instance disk and create instances from this snapshot to handle the burst in traffic
C. Create a snapshot of the compute engine instance disk, create a custom image from the snapshot, create instances from this image to handle the burst in traffic
D. Create a snapshot of the compute engine instance disk, create custom images from the snapshot to handle the burst in traffic
View answer
Correct Answer: C

View The Updated Associate Cloud Engineer Exam Questions

SPOTO Provides 100% Real Associate Cloud Engineer Exam Questions for You to Pass Your Associate Cloud Engineer Exam!

Get Associate Cloud Engineer Practice Test
Question #2
11. You deployed a mission-critical application on Google Compute Engine. Your operations team have asked you to enable measures to prevent engineers from accidentally destroying the instance. What should you do?
A. Turn on deletion protection on the compute engine instance
B. Uncheck “Delete boot disk when instance is deleted” option when provisioning the compute engine instance
C. Deploy the application on a preemptible compute engine instance
D. Enable automatic restart on the instance
View answer
Correct Answer: A
Question #3
47. Your company has multiple GCP projects in several regions, and your operations team have created numerous gcloud configurations for most common operational needs. They have asked your help to retrieve an inactive gcloud configuration and the GKE clusters that use it, using the least number of steps. What command should you execute to retrieve this information?
A. Execute gcloud config configurations describe
B. Execute gcloud config configurations activate, then gcloud config list
C. Execute kubectl config use-context, then kubectl config view
D. Execute kubectl config get-contexts
View answer
Correct Answer: B
Question #4
48. Your team uses Splunk for centralized logging and you have a number of reports and dashboards based on the logs in Splunk. You want to install Splunk forwarder on all nodes of your new Kubernetes Engine Autoscaled Cluster. The Splunk forwarder forwards the logs to a centralized Splunk Server. You want to minimize operational overhead. What is the best way to install Splunk Forwarder on all nodes in the cluster?
A. SSH to each node and run a script to install the forwarder agent
B. Include the forwarder agent in a DaemonSet deployment
C. Use Deployment Manager to orchestrate the deployment of forwarder agents on all nodes
D. Include the forwarder agent in a StatefulSet deployment
View answer
Correct Answer: A
Question #5
28. You are deploying an application on the Google Compute Engine, and you want to minimize network egress costs. The organization has a policy that requires you to block all but essential egress traffic. What should you do?
A. Enable a firewall rule at priority 100 to allow essential egress traffic
B. Enable a firewall rule at priority 100 to allow ingress and essential egress traffic
C. Enable a firewall rule at priority 100 to block all egress traffic, and another firewall rule at priority 65534 to allow essential egress traffic
D. Enable a firewall rule at priority 65534 to block all egress traffic, and another firewall rule at priority 100 to allow essential egress traffic
View answer
Correct Answer: D
Question #6
1. Your company has a massive quantity of unstructured data in text, Apache AVRO and PARQUET files in the on-premise data centre and wants to transform this data using a Dataflow job and migrate cleansed/enriched data to BigQuery. How should you make the on-premise files accessible to Cloud Dataflow?
A. Migrate the data from the on-premises data centre to Cloud Spanner by using the upload files function
B. Migrate the data from the on-premises data centre to Cloud SQL for MySQL by using the upload files function
C. Migrate the data from the on-premises data centre to Cloud Storage by using a custom script with gsutil commands
D. Migrate the data from the on-premises data centre to BigQuery by using a custom script with bq commands
View answer
Correct Answer: C
Question #7
16. The operations manager has asked you to identify the IAM users with Project Editor role on the GCP production project. What should you do?
A. Turn on IAM Audit logging and build a Cloud Monitoring dashboard to display this information
B. Extract all project-wide SSH keys
C. Execute gcloud projects get-iam-policy to retrieve this information
D. Check the permissions assigned in all Identity Aware Proxy (IAP) tunnels
View answer
Correct Answer: C
Question #8
7. You deployed your application to a default node pool on the GKE cluster and you want to configure cluster autoscaling for this GKE cluster. For your application to be profitable, you must limit the number of Kubernetes nodes to 10. You want to start small and scale up as traffic increases and scale down when the traffic goes down. What should you do?
A. Update existing GKE cluster to enable autoscaling by running the command gcloud container clusters update [CLUSTER_NAME] enable-autoscaling -min-nodes= 1 –max-nodes=10
B. Set up a stack driver alert to detect slowness in the application
C. Create a new GKE cluster by running the command gcloud container clusters create [CLUSTER_NAME] –enable-autoscaling –min-nodes= 1 -max-nodes= 10
D. Redeploy your application To enable autoscaling, add a tag to the instances in the cluster by running the command gcloud compute instances add-tags [INSTANCE] -tags=enable-autoscaling,min-nodes=1,max-nodes=1
View answer
Correct Answer: B
Question #9
24. You are migrating a complex on-premises data warehousing solution to Google Cloud. You plan to create a fleet of Google Compute Engine instances behind a Managed Instances Group (MIG) in the app-tier project, and BigQuery in the data-warehousing project. How should you configure the service accounts used by Compute Engine instances to allow them query access to BigQuery datasets?
A. Grant the compute engine service account roles/bigquery
B. Grant the compute engine service account roles/owner on data-warehousing GCP project
C. Grant the compute engine service account roles/owner on data-warehousing GCP project and roles/biqquery
D. Grant the BigQuery service account roles/owner on app-tier GCP project
View answer
Correct Answer: A
Question #10
6. You want to deploy a python application to an autoscaled managed instance group on Compute Engine. You want to use GCP deployment manager to do this. What is the fastest way to get the application onto the instances without introducing undue complexity?
A. Include a startup script to bootstrap the python application when creating an instance template by running gcloud compute instance-templates create app-template -startup-script=/scripts/install_app
B. Include a startup script to bootstrap the python application when creating an instance template by running gcloud compute instance-templates create app-template – –metadata-from-file startup-script=/scripts/install_app
C. Once the instance starts up, connect over SSH and install the application
D. Include a startup script to bootstrap the python application when creating an instance template by running gcloud compute nstance-templates create app-template – metadata-from-file startup-script-url=/scripts/install_app
View answer
Correct Answer: A
Question #11
29. You work for a startup company where every developer has a dedicated development GCP project linked to a central billing account. Your finance lead is concerned that some developers may leave some services running unnecessarily or may not understand the cost implications of turning on specific services in Google Cloud Platform. They want to be alerted when a developer spends more than 750$ per month in their GCP project. What should you do?
A. Export Billing data from each development GCP projects to a separate BigQuery dataset
B. Set up a budget for each development GCP projects
C. Export Billing data from all development GCP projects to a single BigQuery dataset
D. Set up a single budget for all development GCP projects
View answer
Correct Answer: B
Question #12
5. Your company has many Citrix services deployed in the on-premises datacenter, and they all connect to the Citrix Licensing Server on 10.10.10.10 in the same data centre. Your company wants to migrate the Citrix Licensing Server and all Citrix services to Google Cloud Platform. You want to minimize changes while ensuring the services can continue to connect to the Citrix licensing server. How should you do this in Google Cloud?
A. Use gcloud compute addresses create to reserve 10
B. Deploy the Citrix Licensing Server on a Google Compute Engine instance and set its ephemeral IP address to 10
C. Deploy the Citrix Licensing Server on a Google Compute Engine instance with an ephemeral IP address
D. Use gcloud compute addresses create to reserve 10
View answer
Correct Answer: C
Question #13
12. Your production applications are distributed across several Google Cloud Platform (GCP) projects, and your operations team want to efficiently manage all the production projects and applications using gcloud SDK on Cloud Shell. What should you recommend they do to achieve this in the fewest possible steps?
A. Create a gcloud configuration for each production project
B. Use the default gcloud configuration on cloud shell
C. Create a gcloud configuration for each production project
D. Use the default gcloud configuration on cloud shell
View answer
Correct Answer: C
Question #14
21. Your gaming backend uses Cloud Spanner to store leaderboard and player profile data. You want to scale the spanner instances based on predictable usage patterns. What should you do?
A. Configure alerts in Cloud Monitoring to alert Google Operations Support team and have them use their scripts to scale up or scale down the spanner instance as necessary
B. Configure a Cloud Scheduler job to invoke a Cloud Function that reviews the relevant Cloud Monitoring metrics and resizes the Spanner instance as necessary
C. Configure alerts in Cloud Monitoring to trigger a Cloud Function via webhook, and have the Cloud Function scale up or scale down the spanner instance as necessary
D. Configure alerts in Cloud Monitoring to alert your operations team and have them manually scale up or scale down the spanner instance as necessary
View answer
Correct Answer: C
Question #15
26. Your compliance team wants to review the audit logs and data access logs in the production GCP project. You want to follow Google recommended practices. What should you do?
A. Grant the compliance team a custom IAM role that has logging
B. Export logs to Cloud Storage and grant the compliance team a custom IAM role that has logging
C. Export logs to Cloud Storage and grant the compliance team roles/logging
D. Grant the compliance team roles/logging
View answer
Correct Answer: D
Question #16
10. Your business-critical application deployed on a compute engine instance in us-west 1-a zone suffered an outage due to GCP zone failure. You want to modify the application to be immune to zone failures while minimizing costs. What should you do?
A. Direct the traffic through a Global HTTP(s) Load Balancer to shield your application from GCP zone failures
B. Provision another compute engine instance in us-west1-b and balance the traffic across both zones
C. Ensure you have hourly snapshots of the disk in Google Cloud Storage
D. Replace the single instance with a Managed Instance Group (MIG) and autoscaling enabled
View answer
Correct Answer: B
Question #17
2. You want to run an application in Google Compute Engine in the app-tier GCP project and have it export data from Cloud Bigtable to daily-us-customer-export Cloud Storage bucket in the data-warehousing project. You plan to run a Cloud Dataflow job in the data-arehousing project to pick up data from this bucket for further processing. How should you design the IAM access to enable the compute engine instance push objects to daily-us-customer-export Cloud Storage bucket in the data-warehousing project?
A. Update the access control on daily-us-customer-export Cloud Storage bucket to make it public
B. Ensure both the projects are in the same GCP folder in the resource hierarchy
C. Grant the service account used by the compute engine in app-tier GCP project roles/storage
D. Grant the service account used by the compute engine in app-tier GCP project roles/storage
View answer
Correct Answer: C
Question #18
23. You migrated a mission-critical application from the on-premises data centre to Google Kubernetes Engine (GKE) which uses e2-standard-2 machine types. You want to deploy additional pods on c2-standard-16 machine types. How can you do this without causing application downtime?
A. Run gcloud container clusters upgrade to move to c2-standard– 16 machine types
B. Create a new GKE cluster with node pool instances of type c2-standard- – 16
C. Create a new GKE cluster with two node pools – one with e2-standard-2 machine types and other with c2-standard-16 machine types
D. Update the existing cluster to add a new node pool with c2-standard-16 machine types and deploy the pods
View answer
Correct Answer: C
Question #19
25. You deployed the Finance teams’ Payroll application to Google Compute Engine, and this application is used by staff during regular business hours. The operations team want to backup the VMs daily outside the business hours and delete images older than 50 days to save costs. They need an automated solution with the least operational overhead and the least number of GCP services. What should they do?
A. Navigate to the Compute Engine Disk section of your VM instance in the GCP console and enable a snapshot schedule for automated creation of daily snapshots
B. Add a metadata tag on the Google Compute Engine instance to enable snapshot creation
C. Use Cloud Scheduler to trigger a Cloud Function that creates snapshots of the disk daily
D. Use AppEngine Cron service to trigger a custom script that creates snapshots of the disk daily
View answer
Correct Answer: A
Question #20
49. You work for a leading retail platform that enables its retailers to sell their items to over 200 million users worldwide. You persist all analytics data captured during user navigation to BigQuery. A business analyst wants to run a query to identify products that were popular with buyers in the recent thanksgiving sale. The analyst understands the query needs to iterate through billions of rows to fetch the required information but is not sure of the costs involved in the on-demand pricing model, and h
A. Run the query using bq with the –dry_run flag to estimate the number of bytes read by the query
B. Run the query using bq with the –dry_run flag to estimate the number of bytes returned by the query
C. Execute the query using bq to estimate the number of rows returned by the query
D. Switch to BigQuery flat-rate pricing
View answer
Correct Answer: D
Question #21
19. You plan to deploy an application to Google Compute Engine instance, and it relies on making connections to a Cloud SQL database for retrieving information about book publications. To minimize costs, you are developing this application on your local workstation, and you want it to connect to a Cloud SQL instance. Your colleague suggested setting up Application Default Credentials on your workstation to make the transition to Google Cloud easier. You are now ready to move the application to Google Comput
A. Grant the necessary IAM roles to a service account, download the JSON key file and package it with your application
B. Grant the necessary IAM roles to the service account used by Google Compute Engine instance
C. Grant the necessary IAM roles to a service account and configure the application running on Google Compute Engine instance to use this service account
D. Grant the necessary IAM roles to a service account, store its credentials in a config file and package it with your application
View answer
Correct Answer: B
Question #22
50. Your company hosts a number of applications in Google Cloud and requires that log messages from all applications be archived for 10 years to comply with local regulatory requirements. Which approach should you use?
A. Grant the security team access to the logs in each Project
B. 1
C. 1
D. 1
View answer
Correct Answer: B
Question #23
27. You want to migrate a legacy application from your on-premises data centre to Google Cloud Platform. The application serves SSL encrypted traffic from worldwide clients on TCP port 443. What GCP Loadbalancing service should you use to minimize latency for all clients?
A. External HTTP(S) Load Balancer
B. Internal TCP/UDP Load Balancer
C. Network TCP/UDP Load Balancer
D. SSL Proxy Load Balancer
View answer
Correct Answer: D
Question #24
8. Your company plans to store sensitive PII data in a cloud storage bucket. Your compliance department has asked you to ensure the objects in this bucket are encrypted by customer-managed encryption keys. What should you do?
A. In the bucket advanced settings, select Customer-supplied key and then select a Cloud KMS encryption key
B. In the bucket advanced settings, select Customer-managed key and then select a Cloud KMS encryption key
C. Recreate the bucket to use a Customer-managed key
D. In the bucket advanced settings, select Google-managed key and then select a Cloud KMS encryption key
View answer
Correct Answer: B
Question #25
20. You run a batch job every month in your on-premises data centre that downloads clickstream logs from Google Cloud Storage bucket, enriches the data and stores them in Cloud BigTable. The job runs for 32 hours on average, can be restarted if interrupted, and must complete. You want to migrate this batch job onto a cost-efficient GCP compute service. How should you deploy it?
A. Deploy the batch job in a GKE Cluster with preemptible VM node pool
B. Deploy the batch job on a fleet of Google Cloud Compute Engine preemptible VM in a Managed Instances Group (MIG) with autoscaling
C. Deploy the batch job on a Google Cloud Compute Engine Preemptible VM
D. Deploy the batch job on a Google Cloud Compute Engine non-preemptible VM
View answer
Correct Answer: A
Question #26
18. You manage an overnight batch job that uses 20 VMs to transfer customer information from a CRM system to BigQuery dataset. The job can tolerate some VMs going down. The current high cost of the VMs make the overnight job not viable, and you want to reduce the costs. What should you do?
A. Use preemptible compute engine instances to reduce cost
B. Use a fleet of f1-micro instances behind a Managed Instances Group (MIG) with autoscaling
C. Use tiny f1-micro instances to reduce cost
D. Use a fleet of f1-micro instances behind a Managed Instances Group (MIG) with autoscaling and minimum nodes set to 1
View answer
Correct Answer: A
Question #27
13. You want to optimize the storage costs for long term archival of logs. Logs are accessed frequently in the first 30 days and only retrieved after that if there is any special requirement in the annual audit. The auditors may need to look into log entries of the previous three years. What should you do?
A. Store the logs in Nearline Storage Class and set up a lifecycle policy to transition the files older than 30 days to Archive Storage Class
B. Store the logs in Standard Storage Class and set up a lifecycle policy to transition the files older than 30 days to Archive Storage Class
C. Store the logs in Standard Storage Class and set up lifecycle policies to transition the files older than 30 days to Coldline Storage Class, and files older than 1 year to Archive Storage Class
D. Store the logs in Nearline Storage Class and set up lifecycle policies to transition the files older than 30 days to Coldline Storage Class, and files older than 1 year to Archive Storage Class
View answer
Correct Answer: B
Question #28
14. Your company runs most of its compute workloads in Google Compute Engine in the europe-west1-b zone. Your operations team use Cloud Shell to manage these instances. They want to know if it is possible to designate a default compute zone and not supply the zone parameter when running each command in the CLI. What should you do?
A. In GCP Console set europe-west1-! zone in the default location in Compute Engine Settings
B. Run gcloud config to set europe-west1-b as the default zone
C. Update the gcloud configuration file ~/config
D. Add a metadata entry in the Compute Engine Settings page with key: compute/zone and value: europe-west1-b
View answer
Correct Answer: A
Question #29
17. Your company’s compute workloads are split between the on-premises data centre and Google Cloud Platform. The on-premises data centre is connected to Google Cloud network by Cloud VPN. You have a requirement to provision a new non-publicly-reachable compute engine instance on a c2-standard-8 machine type in australia-southeast1- zone. What should you do?
A. Configure a route to route all traffic to the public IP of compute engine instance through the VPN tunnel
B. Provision the instance without a public IP address
C. Provision the instance in a subnet that has Google Private Access enabled
D. Provision the instance in a subnetwork that has all egress traffic disabled
View answer
Correct Answer: B

View The Updated GOOGLE Exam Questions

SPOTO Provides 100% Real GOOGLE Exam Questions for You to Pass Your GOOGLE Exam!

Get GOOGLE Practice Test

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.