Google Associate Cloud Engineer Questions
and Correct Answers (Verified Answers) Plus
Rationales 2026 Q&A | Instant Download Pdf
1. A company wants to create a new Google Cloud project to isolate
resources for a development team. Which resource must exist
before creating the project?
A. Cloud Storage bucket
B. VPC network
C. Billing account (or organization/folder with appropriate
permissions)
D. Compute Engine instance
Rationale: Every Google Cloud project must either be linked to a billing
account (for billable services) or created within an organization/folder
where the user has sufficient IAM permissions. Projects are the
foundational resource hierarchy component under organizations and
folders.
2. Which Google Cloud service provides scalable virtual machines?
,A. Cloud Run
B. App Engine
C. Compute Engine
D. Cloud Functions
Rationale: Compute Engine provides Infrastructure as a Service (IaaS)
virtual machines that give administrators full control over operating
systems, networking, storage, and software installation.
3. Which command lists all Compute Engine VM instances in the
current project?
A. gcloud compute list
B. gcloud vm list
C. gcloud compute instances list
D. gcloud instances show
Rationale: The command "gcloud compute instances list" displays all
VM instances within the active project and default configuration.
4. Which Google Cloud service allows you to run stateless containers
without managing servers?
,A. Compute Engine
B. Kubernetes Engine
C. Cloud Run
D. App Engine Flexible
Rationale: Cloud Run is a fully managed serverless platform for
deploying stateless containers that automatically scale based on
incoming traffic.
5. Which IAM role follows the principle of least privilege?
A. Owner
B. Editor
C. Custom role with only required permissions
D. Project Creator
Rationale: The principle of least privilege requires granting users only
the permissions necessary to perform their job. Custom roles often
best achieve this by limiting unnecessary access.
6. What is the primary purpose of a VPC network?
A. Store objects
B. Manage identities
, C. Provide private networking for cloud resources
D. Encrypt data
Rationale: Virtual Private Cloud (VPC) networks enable secure
communication between cloud resources while providing IP
addressing, routing, firewall rules, and subnet management.
7. Which storage class is best for data accessed multiple times each
month?
A. Coldline
B. Archive
C. Nearline
D. Standard
Rationale: Standard Storage is optimized for frequently accessed data
with the lowest access latency and no retrieval fees.
8. Which service manages Kubernetes clusters?
A. Cloud Run
B. Anthos Config Management
C. Google Kubernetes Engine (GKE)
D. App Engine
and Correct Answers (Verified Answers) Plus
Rationales 2026 Q&A | Instant Download Pdf
1. A company wants to create a new Google Cloud project to isolate
resources for a development team. Which resource must exist
before creating the project?
A. Cloud Storage bucket
B. VPC network
C. Billing account (or organization/folder with appropriate
permissions)
D. Compute Engine instance
Rationale: Every Google Cloud project must either be linked to a billing
account (for billable services) or created within an organization/folder
where the user has sufficient IAM permissions. Projects are the
foundational resource hierarchy component under organizations and
folders.
2. Which Google Cloud service provides scalable virtual machines?
,A. Cloud Run
B. App Engine
C. Compute Engine
D. Cloud Functions
Rationale: Compute Engine provides Infrastructure as a Service (IaaS)
virtual machines that give administrators full control over operating
systems, networking, storage, and software installation.
3. Which command lists all Compute Engine VM instances in the
current project?
A. gcloud compute list
B. gcloud vm list
C. gcloud compute instances list
D. gcloud instances show
Rationale: The command "gcloud compute instances list" displays all
VM instances within the active project and default configuration.
4. Which Google Cloud service allows you to run stateless containers
without managing servers?
,A. Compute Engine
B. Kubernetes Engine
C. Cloud Run
D. App Engine Flexible
Rationale: Cloud Run is a fully managed serverless platform for
deploying stateless containers that automatically scale based on
incoming traffic.
5. Which IAM role follows the principle of least privilege?
A. Owner
B. Editor
C. Custom role with only required permissions
D. Project Creator
Rationale: The principle of least privilege requires granting users only
the permissions necessary to perform their job. Custom roles often
best achieve this by limiting unnecessary access.
6. What is the primary purpose of a VPC network?
A. Store objects
B. Manage identities
, C. Provide private networking for cloud resources
D. Encrypt data
Rationale: Virtual Private Cloud (VPC) networks enable secure
communication between cloud resources while providing IP
addressing, routing, firewall rules, and subnet management.
7. Which storage class is best for data accessed multiple times each
month?
A. Coldline
B. Archive
C. Nearline
D. Standard
Rationale: Standard Storage is optimized for frequently accessed data
with the lowest access latency and no retrieval fees.
8. Which service manages Kubernetes clusters?
A. Cloud Run
B. Anthos Config Management
C. Google Kubernetes Engine (GKE)
D. App Engine
