Google Associate Cloud Engineer Practice Test

Answer choices

1. A. A4X Max bare metal instances, offering up to 144 vCPUs and 960 GB of memory, within the documented operational, security, ownership, and validation requirements.
2. B. Tau T2A machines, optimized for compelling price-performance with up to 48 vCPUs and 4 GB of memory per vCPU, for the stated implementation and support requirements.
3. C. H3 instances, offering 88 vCPUs and 352 GB of DDR5 memory, built on the Intel Sapphire Rapids platform, within the stated policy framework.
4. D. Stateful applications, which rely on local caching of data for task dependencies, as the selected response to the described condition.

Wrong-answer review

• A. A4X Max bare metal instances, offering up to 144 vCPUs and 960 GB of memory, within the documented operational, security, ownership, and validation requirements.: A4X Max instances offer high performance but are not specifically optimized for HPC workloads like molecular dynamics simulations, making them a less ideal choice.
• B. Tau T2A machines, optimized for compelling price-performance with up to 48 vCPUs and 4 GB of memory per vCPU, for the stated implementation and support requirements.: Tau T2A machines prioritize price-performance, but lack the CPU power and memory capacity required for intensive molecular dynamics simulations.
• D. Stateful applications, which rely on local caching of data for task dependencies, as the selected response to the described condition.: Stateful applications are not instance types; they describe application architecture and are irrelevant to selecting a compute instance.

Answer choices

1. A. Manually creating credentials in the service account, for this task.
2. B. Using the default service account provided by Cloud Run, for this requirement.
3. C. Assigning a service account at deployment or execution, under the documented operational and governance requirements.
4. D. Configuring a service account during the service’s initial creation, for the required outcome.

Answer choices

1. A. Z3, under the documented operational and governance requirements.
2. B. Prompt Gemini in the Google Cloud console.
3. C. M4N, within the documented scope, ownership, and validation boundaries.
4. D. AI Hypercomputer, under the stated technical, operational, and governance constraints.

Answer choices

1. A. The instance's activity is automatically logged, providing comprehensive audit trails, for this scenario.
2. B. The instance has the potential to inadvertently modify any resource within the project, for the required business outcome.
3. C. The instance’s access is inherently limited to the resources it requires, for the stated security, delivery, and accountability requirements.
4. D. The instance benefits from enhanced flexibility due to the Editor role, for the specified implementation requirement.

Answer choices

1. A. Schedule automated backups of all project configurations to a secure archive location, for the stated . setting up a cloud solution environment (~20%) requirement.
2. B. Open Cloud Billing reports and filter or group the report by project and service to compare cost trends, in the described situation.
3. C. Enable Cloud Monitoring alerts for any resource exceeding a predefined cost threshold, as the selected approach for the stated technical and business outcome.
4. D. Implement a centralized identity and access management (IAM) policy for all Google Cloud resources, under the proposed approach.

Answer choices

1. A. Storage Object Viewer on a Cloud Storage bucket, within the defined security and accountability boundaries.
2. B. Storage Admin on a Cloud Storage bucket, as the primary implementation for the described business requirement.
3. C. An appropriate Cloud Logging read role, such as Logging Viewer, on the log bucket.
4. D. Logging Writer, which grants write rather than read access, under the organization’s defined implementation and exception-management process.

Answer choices

1. A. All three tiers can communicate freely with one another, under the described . deploying and implementing a cloud solution (~25%) criteria, as described.
2. B. Web-to-app and app-to-database communication are allowed; other cross-tier communication is denied, under the proposed approach.
3. C. Only web-to-database communication is allowed, under the described . deploying and implementing a cloud solution (~25%) criteria, within this context.
4. D. No tier can communicate with any other tier, including the required web-to-app and app-to-database paths, for the affected environment.

Answer choices

1. A. Prioritize developing a new MVP with over-engineered features, under this approach.
2. B. Focus on identifying exceptional use cases for immediate migration, as the organization’s selected response.
3. C. Begin with Cloud SQL managed instances to reduce database administration overhead, for consideration.
4. D. Implement incremental improvements to existing on-premises systems, for the required operational result and control objective.

Answer choices

1. A. Continuously monitor the user's activity for any signs of abuse, for the required business outcome.
2. B. Grant the user broader access to the service account to facilitate their tasks, within cross-functional operational-accountability boundaries.
3. C. Immediately revoke the impersonation permission and investigate the necessity of the request, in the described situation.
4. D. Accept the practice as a standard method for granting privileged access, under the organization’s defined implementation and exception-management process.

Answer choices

1. A. Managing user access permissions across all Google Cloud services, as selected.
2. B. Providing a centralized dashboard for monitoring Google Cloud activity, within this context.
3. C. Automatically generating project resource IDs and numbers, within the documented operational, security, ownership, and validation requirements.
4. D. Accruing and calculating costs for your usage of Google Cloud resources, for the affected environment.