Google Associate Cloud Engineer (ACE) ACTUAL
PRACTICE EXAM 2026/2027 | Verified Questions
and Answers | Hands-On, gcloud & Console Focus |
Exam Pass Target - A+ Graded
Section 1: Setting up a Cloud Solution Environment (Questions 1-10)
Q1: You need to create a new Google Cloud project named "production-app" with project ID
"prod-app-2024" using the gcloud CLI. Which command accomplishes this?
A. gcloud projects create "production-app" --id="prod-app-2024" B. gcloud projects create prod-
app-2024 --name="production-app" [CORRECT] C. gcloud projects new prod-app-2024 --
title="production-app" D. gcloud resource-manager projects create "production-app"
Correct Answer: B
Q2: Your organization needs to enforce the principle of least privilege for a new service account
that will only read objects from Cloud Storage buckets. Which IAM role should you assign?
A. roles/storage.objectAdmin B. roles/storage.objectViewer [CORRECT] C. roles/storage.admin
D. roles/viewer
Correct Answer: B
Q3: You need to authenticate the gcloud CLI with your Google account on a new workstation.
Which command initiates the login process?
A. gcloud auth login [CORRECT] B. gcloud login C. gcloud config set account D. gcloud init --
auth
Correct Answer: A
Q4: Your company wants to separate billing for different departments. You have an existing
billing account and need to link a new project to it. Which Cloud Console navigation path is
correct?
, A. Navigation menu > Billing > Manage billing accounts > Link project B. Navigation menu >
Billing > My projects > Change billing [CORRECT] C. Navigation menu > IAM & Admin >
Billing > Attach project D. Navigation menu > Project settings > Billing account > Create new
Correct Answer: B
Q5: You need to enable the Compute Engine API for your project using gcloud. Which
command is correct?
A. gcloud services enable compute.googleapis.com [CORRECT] B. gcloud compute enable-api
C. gcloud api enable compute D. gcloud services activate compute-engine
Correct Answer: A
Q6: You are configuring the default region and zone for your gcloud CLI to us-west1 and us-
west1-b respectively. Which command sets both values?
A. gcloud config set compute/region us-west1 && gcloud config set compute/zone us-west1-b
[CORRECT] B. gcloud config set region us-west1 --zone us-west1-b C. gcloud compute config
set region=us-west1,zone=us-west1-b D. gcloud set-defaults --region us-west1 --zone us-west1-b
Correct Answer: A
Q7: Your organization uses a resource hierarchy with folders. You need to move a project from
the "Development" folder to the "Production" folder. Which gcloud command structure is
correct?
A. gcloud projects move PROJECT_ID --organization=ORG_ID B. gcloud resource-manager
folders move PROJECT_ID --destination-folder=FOLDER_ID C. gcloud projects move
PROJECT_ID --folder=DESTINATION_FOLDER_ID [CORRECT] D. gcloud alpha projects
migrate PROJECT_ID --to-folder=FOLDER_ID
Correct Answer: C
Q8: You need to create a custom IAM role that allows only viewing Compute Engine instances
and disks, but not creating or deleting them. Which permission set is most appropriate?
A. compute.instances.*, compute.disks.* B. compute.instances.get, compute.instances.list,
compute.disks.get, compute.disks.list [CORRECT] C. compute.*.get, compute.*.list D.
compute.viewer (built-in role)
PRACTICE EXAM 2026/2027 | Verified Questions
and Answers | Hands-On, gcloud & Console Focus |
Exam Pass Target - A+ Graded
Section 1: Setting up a Cloud Solution Environment (Questions 1-10)
Q1: You need to create a new Google Cloud project named "production-app" with project ID
"prod-app-2024" using the gcloud CLI. Which command accomplishes this?
A. gcloud projects create "production-app" --id="prod-app-2024" B. gcloud projects create prod-
app-2024 --name="production-app" [CORRECT] C. gcloud projects new prod-app-2024 --
title="production-app" D. gcloud resource-manager projects create "production-app"
Correct Answer: B
Q2: Your organization needs to enforce the principle of least privilege for a new service account
that will only read objects from Cloud Storage buckets. Which IAM role should you assign?
A. roles/storage.objectAdmin B. roles/storage.objectViewer [CORRECT] C. roles/storage.admin
D. roles/viewer
Correct Answer: B
Q3: You need to authenticate the gcloud CLI with your Google account on a new workstation.
Which command initiates the login process?
A. gcloud auth login [CORRECT] B. gcloud login C. gcloud config set account D. gcloud init --
auth
Correct Answer: A
Q4: Your company wants to separate billing for different departments. You have an existing
billing account and need to link a new project to it. Which Cloud Console navigation path is
correct?
, A. Navigation menu > Billing > Manage billing accounts > Link project B. Navigation menu >
Billing > My projects > Change billing [CORRECT] C. Navigation menu > IAM & Admin >
Billing > Attach project D. Navigation menu > Project settings > Billing account > Create new
Correct Answer: B
Q5: You need to enable the Compute Engine API for your project using gcloud. Which
command is correct?
A. gcloud services enable compute.googleapis.com [CORRECT] B. gcloud compute enable-api
C. gcloud api enable compute D. gcloud services activate compute-engine
Correct Answer: A
Q6: You are configuring the default region and zone for your gcloud CLI to us-west1 and us-
west1-b respectively. Which command sets both values?
A. gcloud config set compute/region us-west1 && gcloud config set compute/zone us-west1-b
[CORRECT] B. gcloud config set region us-west1 --zone us-west1-b C. gcloud compute config
set region=us-west1,zone=us-west1-b D. gcloud set-defaults --region us-west1 --zone us-west1-b
Correct Answer: A
Q7: Your organization uses a resource hierarchy with folders. You need to move a project from
the "Development" folder to the "Production" folder. Which gcloud command structure is
correct?
A. gcloud projects move PROJECT_ID --organization=ORG_ID B. gcloud resource-manager
folders move PROJECT_ID --destination-folder=FOLDER_ID C. gcloud projects move
PROJECT_ID --folder=DESTINATION_FOLDER_ID [CORRECT] D. gcloud alpha projects
migrate PROJECT_ID --to-folder=FOLDER_ID
Correct Answer: C
Q8: You need to create a custom IAM role that allows only viewing Compute Engine instances
and disks, but not creating or deleting them. Which permission set is most appropriate?
A. compute.instances.*, compute.disks.* B. compute.instances.get, compute.instances.list,
compute.disks.get, compute.disks.list [CORRECT] C. compute.*.get, compute.*.list D.
compute.viewer (built-in role)
