LATEST GOOGLE CLOUD ASSOCIATE
CLOUD ENGINEER EXAM BANK |
COMPLETE EXAM BANK WITH CORRECT
ANSWERS AND RATIONALES. A+ GRADED
1. Which Google Cloud service provides a fully
managed, serverless data warehouse for running
analytical queries on large datasets?
A) Cloud SQL
B) BigQuery
C) Cloud Spanner
D) Cloud Bigtable
Correct answer: B
Rationale: BigQuery is a serverless, highly scalable
data warehouse for analytical queries. Cloud SQL is a
relational database. Cloud Spanner is a globally
distributed relational database. Cloud Bigtable is a
NoSQL wide-column database.
2. A company needs to run a containerized
application on Google Cloud without managing the
underlying infrastructure. Which service should be
used?
,A) Google Kubernetes Engine (GKE) Autopilot
B) Compute Engine with container-optimized OS
C) App Engine (Flexible)
D) Cloud Run
Correct answer: A (or D depending on requirements)
Rationale: GKE Autopilot is a serverless Kubernetes
platform (managed nodes). Cloud Run is serverless
for stateless containers.
3. An administrator needs to create a Cloud Storage
bucket that can be accessed from anywhere on the
internet (publicly readable). Which access control
option should be used?
A) Uniform bucket-level access with `allUsers` as
`Storage Object Viewer`
B) Fine-grained ACLs with `allUsers` having READ
permission
C) Signed URLs
D) Cloud IAM with `roles/storage.objectViewer` for
`allAuthenticatedUsers`
Correct answer: A
Rationale: Uniform bucket-level access with a role
binding for `allUsers` (anyone on the internet) grants
,public read access. `allAuthenticatedUsers` requires
a Google account.
4. Which Google Cloud IAM role allows a user to view
but not modify resources in a project?
A) roles/viewer
B) roles/reader
C) roles/browser
D) roles/iam.securityReviewer
Correct answer: A
Rationale: `roles/viewer` provides read-only access
to all resources in a project. `roles/browser` only
allows viewing the project hierarchy (not resources).
5. A company wants to connect its on-premises
network to Google Cloud using a private, dedicated,
high-bandwidth connection. Which service should be
used?
A) Cloud VPN
B) Cloud Interconnect (Dedicated or Partner)
C) Cloud NAT
D) Cloud Load Balancing
Correct answer: B
, Rationale: Cloud Interconnect provides a dedicated
private connection (Direct Peering or Carrier
Peering) to Google Cloud. Cloud VPN uses the public
internet.
6. An administrator needs to grant a developer the
ability to create and manage Cloud Storage buckets
but not delete them. What is the best approach?
A) Assign the predefined role
`roles/storage.objectAdmin` (allows deletion)
B) Create a custom IAM role with
`storage.buckets.create` and `storage.buckets.get`
but not `storage.buckets.delete`
C) Assign the role `roles/storage.admin` and add a
deny policy
D) Use a Cloud IAM condition to prevent deletion
Correct answer: B
Rationale: Custom roles allow fine-grained
permissions. `storage.buckets.delete` permission is
required for deletion; omitting it prevents deletion.
7. Which Google Cloud service is a fully managed,
serverless, and event-driven compute platform that
runs code in response to events (e.g., Cloud Storage
uploads)?
CLOUD ENGINEER EXAM BANK |
COMPLETE EXAM BANK WITH CORRECT
ANSWERS AND RATIONALES. A+ GRADED
1. Which Google Cloud service provides a fully
managed, serverless data warehouse for running
analytical queries on large datasets?
A) Cloud SQL
B) BigQuery
C) Cloud Spanner
D) Cloud Bigtable
Correct answer: B
Rationale: BigQuery is a serverless, highly scalable
data warehouse for analytical queries. Cloud SQL is a
relational database. Cloud Spanner is a globally
distributed relational database. Cloud Bigtable is a
NoSQL wide-column database.
2. A company needs to run a containerized
application on Google Cloud without managing the
underlying infrastructure. Which service should be
used?
,A) Google Kubernetes Engine (GKE) Autopilot
B) Compute Engine with container-optimized OS
C) App Engine (Flexible)
D) Cloud Run
Correct answer: A (or D depending on requirements)
Rationale: GKE Autopilot is a serverless Kubernetes
platform (managed nodes). Cloud Run is serverless
for stateless containers.
3. An administrator needs to create a Cloud Storage
bucket that can be accessed from anywhere on the
internet (publicly readable). Which access control
option should be used?
A) Uniform bucket-level access with `allUsers` as
`Storage Object Viewer`
B) Fine-grained ACLs with `allUsers` having READ
permission
C) Signed URLs
D) Cloud IAM with `roles/storage.objectViewer` for
`allAuthenticatedUsers`
Correct answer: A
Rationale: Uniform bucket-level access with a role
binding for `allUsers` (anyone on the internet) grants
,public read access. `allAuthenticatedUsers` requires
a Google account.
4. Which Google Cloud IAM role allows a user to view
but not modify resources in a project?
A) roles/viewer
B) roles/reader
C) roles/browser
D) roles/iam.securityReviewer
Correct answer: A
Rationale: `roles/viewer` provides read-only access
to all resources in a project. `roles/browser` only
allows viewing the project hierarchy (not resources).
5. A company wants to connect its on-premises
network to Google Cloud using a private, dedicated,
high-bandwidth connection. Which service should be
used?
A) Cloud VPN
B) Cloud Interconnect (Dedicated or Partner)
C) Cloud NAT
D) Cloud Load Balancing
Correct answer: B
, Rationale: Cloud Interconnect provides a dedicated
private connection (Direct Peering or Carrier
Peering) to Google Cloud. Cloud VPN uses the public
internet.
6. An administrator needs to grant a developer the
ability to create and manage Cloud Storage buckets
but not delete them. What is the best approach?
A) Assign the predefined role
`roles/storage.objectAdmin` (allows deletion)
B) Create a custom IAM role with
`storage.buckets.create` and `storage.buckets.get`
but not `storage.buckets.delete`
C) Assign the role `roles/storage.admin` and add a
deny policy
D) Use a Cloud IAM condition to prevent deletion
Correct answer: B
Rationale: Custom roles allow fine-grained
permissions. `storage.buckets.delete` permission is
required for deletion; omitting it prevents deletion.
7. Which Google Cloud service is a fully managed,
serverless, and event-driven compute platform that
runs code in response to events (e.g., Cloud Storage
uploads)?
