Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Google
  5. Google Associate Cloud Engineer

Google Google Associate Cloud Engineer Exam
Associate Cloud Engineer (Page 9 )

Updated On: 1-Feb-2026
Page 9 of 69
PDF with 336 Questions

You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm.
What should you do?

  1. Download the private key from the service account, and add it to each VMs custom metadata.
  2. Download the private key from the service account, and add the private key to each VM's SSH keys.
  3. Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
  4. When creating the VMs, set the service account's API scope for Compute Engine to read/write.

Answer(s): C


Reference:

https://cloud.google.com/iam/docs/impersonating-service-accounts#impersonate-sa-level



You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region.
What should you do?

  1. Change the default region property setting in the existing GCP project to asia-northeast1.
  2. Change the region property setting in the existing App Engine application from us-central to asia-northeast1.
  3. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
  4. Create a new GCP project and create an App Engine application inside this new project. Specify asia- northeast1 as the region to serve your application.

Answer(s): D


Reference:

https://cloud.google.com/appengine/docs/standard/locations



You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance.
What should you do?

  1. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
  2. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group.
    Add the group to the role.
  3. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to the role.
  4. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to a new group. Add the group to the role.

Answer(s): B



You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes.
What should you do?

  1. Enable the Node Auto-Repair feature for your GKE cluster.
  2. Enable the Node Auto-Upgrades feature for your GKE cluster.
  3. Select the latest available cluster version for your GKE cluster.
  4. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.

Answer(s): B


Reference:

https://cloud.google.com/kubernetes-engine/versioning



You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices.
What should you do?

  1. Configure an HTTP(S) load balancer.
  2. Configure an internal TCP load balancer.
  3. Configure an external SSL proxy load balancer.
  4. Configure an external TCP proxy load balancer.

Answer(s): A


Reference:

https://cloud.google.com/load-balancing/docs/https/



Viewing page 9 of 69
Viewing questions 41 - 45 out of 336 questions



Post your Comments and Discuss Google Google Associate Cloud Engineer exam prep with other Community members:

Join the Google Associate Cloud Engineer Discussion