Google ASSOCIATE-CLOUD-ENGINEER Exam
Associate Cloud Engineer (Page 5 )

Updated On: 25-Jan-2026

You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs.
What should you do?

  1. In the Log Viewer, filter the logs on severity 'Error' and the name of the Service Account.
  2. Create a sink to BigQuery to export all the logs. Create a Data Studio dashboard on the exported logs.
  3. Create a custom log-based metric for the specific error to be used in an Alerting Policy.
  4. Grant Project Owner access to the Service Account.

Answer(s): C



You created a cluster.YAML file containing resources:
name: cluster type: container.v1.cluster properties:
zone: europe-west1-b cluster:
description: My GCP ACE cluster initialNodeCount: 2
You want to use Cloud Deployment Manager to create this cluster in GKE. What should you do?

  1. gcloud deployment-manager deployments create my-gcp-ace-cluster --config cluster.yaml
  2. gcloud deployment-manager deployments create my-gcp-ace-cluster --type container.v1.cluster -- config cluster.yaml
  3. gcloud deployment-manager deployments apply my-gcp-ace-cluster --type container.v1.cluster --
    config cluster.yaml
  4. gcloud deployment-manager deployments apply my-gcp-ace-cluster --config cluster.yaml

Answer(s): D

Explanation:

gcloud deployment-manager deployments create creates deployments based on the configuration file. (Infrastructure as code). All the configuration related to the artifacts is in the configuration file. This command correctly creates a cluster based on the provided cluster.yaml configuration file.

Ref: https://cloud.google.com/sdk/gcloud/reference/deployment-manager/deployments/create



Your company developed a mobile game that is deployed on Google Cloud. Gamers are connecting to the game with their personal phones over the Internet. The game sends UDP packets to update the servers about the gamers' actions while they are playing in multiplayer mode. Your game backend can scale over multiple virtual machines (VMs), and you want to expose the VMs over a single IP address.
What should you do?

  1. Configure an SSL Proxy load balancer in front of the application servers.
  2. Configure an Internal UDP load balancer in front of the application servers.
  3. Configure an External HTTP(s) load balancer in front of the application servers.
  4. Configure an External Network load balancer in front of the application servers.

Answer(s): D

Explanation:

cell phones are sending UDP packets and the only that can receive that type of traffic is a External Network TCP/UDP https://cloud.google.com/load-balancing/docs/network https://cloud.google.com/load-balancing/docs/choosing-load-balancer#lb-decision-tree



You created a Kubernetes deployment by running kubectl run nginx image=nginx labels=app=prod. Your Kubernetes cluster is also used by a number of other deployments. How can you find the identifier of the pods for this nginx deployment?

  1. kubectl get deployments ­output=pods
  2. gcloud get pods ­selector="app=prod"
  3. kubectl get pods -I "app=prod"
  4. gcloud list gke-deployments -filter={pod }

Answer(s): C

Explanation:

This command correctly lists pods that have the label app=prod.
When creating the deployment, we used the label app=prod so listing pods that have this label retrieve the pods belonging to nginx deployments. You can list pods by using Kubernetes CLI kubectl get pods.

Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container-images/ Ref: https://kubernetes.io/docs/tasks/access-application-cluster/list-all-running-container- images/#list-containers-filtering-by-pod-label



You have a number of applications that have bursty workloads and are heavily dependent on topics to decouple publishing systems from consuming systems. Your company would like to go serverless to enable developers to focus on writing code without worrying about infrastructure. Your solution architect has already identified Cloud Pub/Sub as a suitable alternative for decoupling systems. You have been asked to identify a suitable GCP Serverless service that is easy to use with Cloud Pub/Sub. You want the ability to scale down to zero when there is no traffic in order to minimize costs. You want to follow Google recommended practices.
What should you suggest?

  1. Cloud Run for Anthos
  2. Cloud Run
  3. App Engine Standard
  4. Cloud Functions.

Answer(s): D

Explanation:

Cloud Functions is Google Cloud's event-driven serverless compute platform that lets you run your code locally or in the cloud without having to provision servers. Cloud Functions scales up or down, so you pay only for compute resources you use. Cloud Functions have excellent integration with Cloud Pub/Sub, lets you scale down to zero and is recommended by Google as the ideal serverless platform to use when dependent on Cloud Pub/Sub.
"If you're building a simple API (a small set of functions to be accessed via HTTP or Cloud Pub/Sub),

we recommend using Cloud Functions."
Ref: https://cloud.google.com/serverless-options



Viewing page 5 of 63
Viewing questions 21 - 25 out of 343 questions



Post your Comments and Discuss Google ASSOCIATE-CLOUD-ENGINEER exam prep with other Community members:

Join the ASSOCIATE-CLOUD-ENGINEER Discussion