Free Google Cloud Associate Cloud Engineer practice questions

Question 01

You want to reserve and later assign an existing ephemeral external IP so it becomes static without changing the address on a running VM. Which action accomplishes this?

Question 02

A subnet's primary range 10.0.0.0/24 is exhausted. You need more addresses without recreating it. What is possible?

Question 03

An organization needs 5 Gbps of private connectivity to Google Cloud but has no presence in a Google colocation facility, so it will connect through a supported service provider. Which option should it choose?

Question 04

You want to run a Python web app quickly with automatic scaling (including to zero), no server management, and you accept running only supported runtimes in a sandbox. Which App Engine environment fits?

Question 05

An admin wants org-wide restrictions (e.g., disable service account key creation) that all projects must obey regardless of project-level IAM. Which mechanism is appropriate?

Question 06

You want to check real-time CPU/memory usage of pods in the current namespace of a GKE cluster. Which command shows this?

Question 07

A service account is compromised and you want to immediately stop it from authenticating, but you may need to restore it later after investigation. Which command should you run first?

Question 08

Which command creates a bucket in Cloud Storage using the legacy tool that gcloud storage is replacing?

Question 09

Which member type is appropriate to grant a role to an application workload running on Compute Engine so it can call Google APIs?

Question 10

An application needs a custom runtime with system libraries not available in the App Engine Standard sandbox, but the team still wants App Engine's managed platform and can accept at least one instance always running. Which environment should they choose?

Question 11

You want a hands-off GKE cluster where Google manages nodes and you pay per-Pod resource requests. Which command creates it?

Question 12

A team needs to view logs but not modify anything, across the whole project. Which is the most appropriate least-privilege role?