2026 Valid Associate-Cloud-Engineer Exam Updates - 2026 Study Guide
Associate-Cloud-Engineer Certification - The Ultimate Guide [Updated 2026]
Below are the Problems in taking the Associate Cloud Engineer Exam
Google Certified Specialist is the most powerful certification that candidates can have on their resume. But for this, they will have to pass Associate Cloud Engineer questions. Associate Cloud Engineer is a challenging exam to pass this exam Candidates will have to work hard with the help of the right focus and preparation material passing this exam is an achievable goal. ITPassLeader help candidates by providing the most relevant and updated Associate Cloud Engineer exam dumps. Furthermore, We also provide the Associate Cloud Engineer practice test that will be much beneficial in the preparation. ITPassLeader aims to provide the best Associate Cloud Engineer exam dumps that are verified by the Google experts. If Candidates feel any doubt in the Associate Cloud Engineer practice test then our team is always there to help them. Associate Cloud Engineer exam dumps are the perfect way to prepare the Associate Cloud Engineer exam with good grades in the just first attempt. So, Candidates want instant success in the Associate Cloud Engineer exam with quality Associate Cloud Engineer training material then ITPassLeader is the best option for them because our management is well trained in it and we update each question of all exams on regular basis after consulting recent updates with our Google certified professionals.
NEW QUESTION # 148
Your company runs a variety of applications and workloads on Google Cloud and you are responsible for managing cloud costs. You need to identify a solution that enables you to perform detailed cost analysis You also must be able to visualize the cost data in multiple ways on the same dashboard What should you do?
- A. Enable the Cloud Billing export to BigQuery. and use Looker Studio to visualize the data
- B. Run Queries in Cloud Monitoring Create dashboards to visualize the billing metrics
- C. Use the cost breakdown report with the available filters from Cloud Billing to visualize the data
- D. Enable Cloud Monitoring metrics export to BigQuery and use Looker to visualize the data
Answer: A
NEW QUESTION # 149
You want to deploy a new containerized application into Google Cloud by using a Kubernetes manifest. You want to have full control over the Kubernetes deployment, and at the same time, you want to minimize configuring infrastructure. What should you do?
- A. Deploy the application on Cloud Run.
- B. Deploy the application on Cloud Functions.
- C. Deploy the application on GKE Standard.
- D. Deploy the application on GKE Autopilot.
Answer: C
NEW QUESTION # 150
Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?
- A. Add the users to a group, and add this group to roles/browser role.
- B. Add the users to a group, and add this group to roles/iam.roleViewer role.
- C. Add the users to roles/iam.roleViewer role.
- D. Add the users to roles/browser role.
Answer: A
Explanation:
We need to apply the GCP Best practices. roles/browser Browser Read access to browse the hierarchy for a project, including the folder, organization, and IAM policy. This role doesn't include permission to view resources in the project. https://cloud.google.com/iam/docs/understanding-roles
NEW QUESTION # 151
You have a project for your App Engine application that serves a development environment. The required testing has succeeded and you want to create a new project to serve as your production environment.
What should you do?
- A. Use gcloud to create the new project, and then deploy your application to the new project.
- B. Deploy your application again using gcloud and specify the project parameter with the new project name to create the new project.
- C. Create a Deployment Manager configuration file that copies the current App Engine deployment into a new project.
- D. Use gcloud to create the new project and to copy the deployed application to the new project.
Answer: A
Explanation:
gcloud can be used to create a new project and the gcloud app deploy can point to the new project.
NEW QUESTION # 152
Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention.
What should you do?
- A. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.
- B. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.
- C. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.
- D. Create an export to the sink that saves logs from Cloud Audit to BigQuery.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/logging/docs/audit/
NEW QUESTION # 153
You need to create a Compute Engine instance in a new project that doesn't exist yet. What should you do?
- A. Using the Cloud SDK, create a new project, enable the Compute Engine API in that project, and then create the instance specifying your new project.
- B. Enable the Compute Engine API in the Cloud Console, use the Cloud SDK to create the instance, and then use the --project flag to specify a new project.
- C. Enable the Compute Engine API in the Cloud Console. Go to the Compute Engine section of the Console to create a new instance, and look for the Create In A New Project option in the creation form.
- D. Using the Cloud SDK, create the new instance, and use the --project flag to specify the new project.
Answer yes when prompted by Cloud SDK to enable the Compute Engine API.
Answer: A
NEW QUESTION # 154
A Solutions Architect is designing a photo application on AWS. Every time a user uploads a photo to Amazon S3, the Architect must insert a new item to a DynamoDB table.
Which AWS-managed service is the BEST fit to insert the item?
- A. Amazon EC2 instances
- B. Lambda@Edge
- C. AWS Lambda
- D. Amazon API Gateway
Answer: C
Explanation:
Explanation/Reference:
Reference https://aws.amazon.com/blogs/machine-learning/build-your-own-face-recognition-service-using- amazon-rekognition/
NEW QUESTION # 155
You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:
You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?
- A. Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
- B. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.
- C. Store the database password inside the Docker image of the container, not in the YAML file.
- D. Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
Answer: D
Explanation:
https://cloud.google.com/config-connector/docs/how-to/secrets#gcloud
NEW QUESTION # 156
You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?
- A. Create 2 custom VPCs, each with a single subnet. Create each subnet in the same region and with the same CIDR range.
- B. Create 2 custom VPCs, each with a single subnet. Create each subnet is a different region and with a different CIDR range.
- C. Create a single custom VPC with 2 subnets. Create each subnet in a different region and with a different CIDR range.
- D. Create a single custom VPC with 2 subnets. Create each subnet in the same region and with the same CIDR range.
Answer: C
Explanation:
Explanation
When we create subnets in the same VPC with different CIDR ranges, they can communicate automatically within VPC. Resources within a VPC network can communicate with one another by using internal (private) IPv4 addresses, subject to applicable network firewall rules Ref: https://cloud.google.com/vpc/docs/vpc
NEW QUESTION # 157
Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?
- A. Generate a new SSH key pair. Give the private key to each member of your team.
Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance. - B. Ask each member of the team to generate a new SSH key pair and to send you their public key.
Use a configuration management tool to deploy those keys on each instance. - C. Generate a new SSH key pair. Give the private key to each member of your team.
Configure the public key in the metadata of each instance. - D. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account.
Grant the "compute.osAdminLogin" role to the Google group corresponding to this team.
Answer: A
NEW QUESTION # 158
You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?
- A. Create a new VPC network with subnetworks in all desired regions
- B. Configure your Cloud Spanner instance to be multi-regional
- C. Grant yourself the IAM role of Cloud Spanner Admin
- D. Enable the Cloud Spanner API
Answer: B
Explanation:
https://cloud.google.com/spanner/docs/getting-started/set-up
NEW QUESTION # 159
You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?
- A. Use gcloud iam roles copy and specify the production project as the destination project.
- B. In the Google Cloud Platform Console, use the `create role' functionality and select all applicable permissions.
- C. In the Google Cloud Platform Console, use the `create role from role' functionality.
- D. Use gcloud iam roles copy and specify your organization as the destination organization.
Answer: D
NEW QUESTION # 160
You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible. What should you do?
- A. Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
- B. Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
- C. Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.
- D. Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
Answer: C
Explanation:
Explanation
"The Cloud Spanner to Cloud Storage Text template is a batch pipeline that reads in data from a Cloud Spanner table, optionally transforms the data via a JavaScript User Defined Function (UDF) that you provide, and writes it to Cloud Storage as CSV text files."
https://cloud.google.com/dataflow/docs/guides/templates/provided-batch#cloudspannertogcstext
"The Dataflow connector for Cloud Spanner lets you read data from and write data to Cloud Spanner in a Dataflow pipeline"
https://cloud.google.com/spanner/docs/dataflow-connector
https://cloud.google.com/bigquery/external-data-sources
NEW QUESTION # 161
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?
- A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- C. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- D. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.
Answer: B
NEW QUESTION # 162
Your developers have some application metrics that they're tracking. They'd like to be able to create alerts based on these metrics. What steps need to happen in order to alert based on these metrics?
- A. Create a custom monitoring metric in code, edit the application code to set the metric value when needed, create an alert in Stackdriver based on the new metric.
- B. Add the Stackdriver monitoring and logging agent to the instances running the code.
- C. Create a custom monitoring metric in code, in the UI create a matching logging metric, and create an alert in Stackdriver based on the new metric.
- D. In the UI create a new logging metric with the required filters, edit the application code to set the metric value when needed, and create an alert in Stackdriver based on the new metric.
Answer: A
NEW QUESTION # 163
You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?
- A. Manual Scaling with 3 instances.
- B. Automatic Scaling with min_idle_instances set to 3.
- C. Basic Scaling with max_instances set to 3.
- D. Basic Scaling with min_instances set to 3.
Answer: B
Explanation:
App Engine supports the following scaling types, which controls how and when instances are created:
Automatic
Basic
Manual
You specify the scaling type in your app's app.yaml.
Automatic scaling
Automatic scaling creates instances based on request rate, response latencies, and other application metrics. You can specify thresholds for each of these metrics, as well as a minimum number instances to keep running at all times.
https://cloud.google.com/appengine/docs/standard/python/how-instances-are-managed
NEW QUESTION # 164
You are about to deploy a new Enterprise Resource Planning (ERP) system on Google Cloud. The application holds the full database in-memory for fast data access, and you need to configure the most appropriate resources on Google Cloud for this application. What should you do?
- A. Provision preemptible Compute Engine instances.
- B. Provision Compute Engine instances with GPUs attached.
- C. Provision Compute Engine instances with local SSDs attached.
- D. Provision Compute Engine instances with M1 machine type.
Answer: D
Explanation:
Explanation
M1 machine series Medium in-memory databases such as SAP HANA Tasks that require intensive use of memory with higher memory-to-vCPU ratios than the general-purpose high-memory machine types.
In-memory databases and in-memory analytics, business warehousing (BW) workloads, genomics analysis, SQL analysis services. Microsoft SQL Server and similar databases.
https://cloud.google.com/compute/docs/machine-types
https://cloud.google.com/compute/docs/machine-types#:~:text=databases%20such%20as-,SAP%20HANA,-In%
https://www.sap.com/india/products/hana.html#:~:text=is%20SAP%20HANA-,in%2Dmemory,-database%3F
NEW QUESTION # 165
Your company is running a three-tier web application on virtual machines that use a MySQL database. You need to create an estimated total cost of cloud infrastructure to run this application on Google Cloud instances and Cloud SQL. What should you do?
- A. Create a Google spreadsheet with multiple Google Cloud resource combinations. On a separate sheet, import the current Google Cloud prices and use these prices for the calculations within formulas.
- B. Use the Google Cloud Pricing Calculator to determine the cost of every Google Cloud resource you expect to use. Use similar size instances for the web server, and use your current on-premises machines as a comparison for Cloud SQL.
- C. Use the Google Cloud Pricing Calculator and select the Cloud Operations template to define your web application with as much detail as possible.
- D. Implement a similar architecture on Google Cloud, and run a reasonable load test on a smaller scale.
Check the billing information, and calculate the estimated costs based on the real load your system usually handles.
Answer: C
NEW QUESTION # 166
You are working for a hospital that stores Its medical images in an on-premises data room. The hospital wants to use Cloud Storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to Cloud Storage. You need to design and implement a solution. What should you do?
- A. Create a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub lope
- B. Create a script that uses the gsutil command line interface to synchronize the on- premises storage with Cloud Storage Schedule the script as a cron job
- C. In the Cloud Console, go to Cloud Storage Upload the relevant images to the appropriate bucket
- D. Deploy a Dataflow job from the batch template "Datastore lo Cloud Storage" Schedule the batch job on the desired interval
Answer: D
NEW QUESTION # 167
Your team maintains the infrastructure for your organization. The current infrastructure requires changes. You need to share your proposed changes with the rest of the team. You want to follow Google's recommended best practices. What should you do?
- A. Use Deployment Manager templates to describe the proposed changes and store them in Cloud Source Repositories.
- B. Apply the change in a development environment, run gcloud compute instances list, and then save the output in a shared Storage bucket.
- C. Apply the change in a development environment, run gcloud compute instances list, and then save the output in Cloud Source Repositories.
- D. Use Deployment Manager templates to describe the proposed changes and store them in a Cloud Storage bucket.
Answer: A
Explanation:
Explanation
Showing Deployment Manager templates to your team will allow you to define the changes you want to implement in your cloud infrastructure. You can use Cloud Source Repositories to store Deployment Manager templates and collaborate with your team. Cloud Source Repositories are fully-featured, scalable, and private Git repositories you can use to store, manage and track changes to your code.
https://cloud.google.com/source-repositories/docs/features
NEW QUESTION # 168
......
Google Associate-Cloud-Engineer Certification Exam is a popular certification that validates your expertise in designing, deploying, and managing applications on Google Cloud Platform (GCP). Google Associate Cloud Engineer Exam certification is designed to test your proficiency in various GCP services, including compute, storage, networking, security, and application development. Associate-Cloud-Engineer exam is intended for individuals who have experience working with GCP and want to become certified professionals.
Google Associate-Cloud-Engineer exam is a valuable certification for individuals who want to demonstrate their skills and knowledge in managing and deploying applications and services on Google Cloud Platform. It provides a solid foundation for candidates who are looking to pursue a career in cloud computing or for those who want to expand their skills and knowledge in this field.
Associate-Cloud-Engineer Practice Exam and Study Guides - Verified By ITPassLeader: https://troytec.itpassleader.com/Google/Associate-Cloud-Engineer-dumps-pass-exam.html