2 packs: 15% off with code BUY2. 3 or more: 20% off with code BUY3.

Google Associate Cloud Engineer Exam Practice Questions, practice question pack
GOOGLE · Associate Cloud Engineer

Google Associate Cloud Engineer Exam Practice Questions

99% pass rateUpdated 1 Nov 2026375 questions2 PDFs by email
4.89 reviews
(9 customer reviews)

US$39

Every question with the correct answer and why the other options are wrong.

Download the free sample

Card, Apple Pay, Google Pay or PayPal. Your PDF is prepared and emailed to you after checkout, usually within a few hours.

99% pass rate. Pass or your money back.Fail the exam after using this pack and we refund it, or swap it for any other pack. How the guarantee works
Appreciate the effort that went into this. Passed!
Andre OcampoAssociate Cloud Engineer
Category:
TRY BEFORE YOU BUY

Three of the 375 questions in this pack

Question 1

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to followGoogle-recommended practices. What should you do?

  1. Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.
  2. Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.
  3. Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
  4. Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
Show answer and explanation

Correct answer: C. Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.

Google-recommended practices prioritize using IAM roles over access scopes. Creating a service account and assigning it the storage.objectCreator IAM role on the specific bucket follows the principle of least privilege and is the recommended approach. This role grants write permissions without unnecessary admin capabilities.

Why the other options are wrong

  • A. Access scopes are a legacy mechanism; IAM roles are the modern, recommended approach.
  • B. cloud-platform is too broad and violates the principle of least privilege.
  • D. storage.objectAdmin grants excessive permissions beyond what is needed for writing data.

Question 2

You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?

  1. Using the GCP Console, filter the Activity log to view the information.
  2. Using the GCP Console, filter the Stackdriver log to view the information.
  3. View the bucket in the Storage section of the GCP Console.
  4. Create a trace in Stackdriver to view the information.
Show answer and explanation

Correct answer: B. Using the GCP Console, filter the Stackdriver log to view the information.

Data access logs in Google Cloud are found in Stackdriver (Cloud Logging). Filtering Stackdriver logs provides visibility into which files were accessed and metadata changes. Activity logs primarily show resource management operations, while Stackdriver logs capture the detailed data access patterns required for this audit.

Why the other options are wrong

  • A. Activity logs focus on resource management operations, not detailed data access activities.
  • C. The Storage console does not provide user activity tracking or file access verification.
  • D. Traces are for application performance monitoring, not for auditing user activities on buckets.

Question 3

You are the project owner of a GCP project and want to delegate control to colleagues to manage buckets and files in Cloud Storage. You want to follow Google-recommended practices. Which IAM roles should you grant your colleagues?

  1. Project Editor
  2. Storage Admin
  3. Storage Object Admin
  4. Storage Object Creator
Show answer and explanation

Correct answer: B. Storage Admin

Storage Admin is the appropriate role for colleagues who need to manage both buckets and files in Cloud Storage. This role grants comprehensive permissions over storage resources while maintaining reasonable security boundaries, making it the Google-recommended choice for delegating Cloud Storage management.

Why the other options are wrong

  • A. Project Editor grants excessive permissions across all project resources, violating least privilege.
  • C. Storage Object Admin only manages objects, not buckets themselves.
  • D. Storage Object Creator can only create objects, not manage existing ones or buckets.

See all 94 free questions Get the full pack, US$39

REVIEWS

9 reviews for Google Associate Cloud Engineer Exam Practice Questions

  1. Andre Ocampo –

    Thanks!

    Appreciate the effort that went into this. Passed!

  2. Nicolas Schneider –

    Did the job

    Passed ace first go. The questions lined up nicely with the actual exam.

  3. Aurora Kariuki –

    Thank you

    Passed ACE first time thanks to this. Genuinely appreciated.

  4. Schroeder –

    Really appreciate it

    Passed ACE on the retake. Thank you, I should have started here.

  5. Jonas –

    Thanks, passed first time

    Grateful I found this before sitting ACE. It genuinely helped.

  6. Hiro Navarro –

    Recommended

    Retook ACE and passed. Adding this to my prep the second time made the difference.

  7. Kweku Laurent –

    Close to the real exam

    Accurate and up to date for ACE. Recommended for anyone preparing.

  8. Thandi Popov –

    Thank you - clear, accurate, and it got me through ACE.

  9. Denver Avery –

    I’ve seen other resources fall short but these Associate-Cloud-Engineer dumps delivered exactly what i needed. Thanks Cert Stash.

Only logged in customers who have purchased this product may leave a review.

How much of the Google Associate Cloud Engineer bank is free?

375 questions in the bank

Each step includes the one before, so buying only adds new questions.

  • You are here10questionsFree sampleThree on this page, all ten as a PDF.Download the sample
  • 9425% of the bankPractice pageFree on the site, every answer explained.Go to the practice page
  • 13837% of the bankHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
  • 375100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
ABOUT THIS PACK

What’s in the Google Associate Cloud Engineer pack

  • 375 questions mapped to the ACE exam objectives
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Delivered by email shortly after checkout
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

An ACE attempt costs US$125. This pack is US$39, paid once.

What makes the ACE hard

Google's associate exam is more hands-on than AWS's or Azure's equivalents, and that is exactly what catches people out. It assumes the candidate has actually typed the commands.

Expect questions where the four answers are four gcloud command variations differing by one flag, IAM questions that require choosing between basic, predefined and custom roles at the right level of the resource hierarchy, and the classic compute-selection scenarios: Compute Engine versus GKE versus Cloud Run versus Cloud Functions, where every option runs the workload but only one matches the constraints in the question.

It is two hours, 50 to 60 questions, and widely considered harder than a typical associate exam. This pack will have 375 practice questions mapped to the ACE exam objectives, covering the same gcloud syntax, IAM and service-selection patterns Google keeps reusing.

About the exam

The Associate Cloud Engineer certifies deploying applications, monitoring operations, and managing enterprise solutions on Google Cloud using both the console and the command line. There are no prerequisites; Google recommends six or more months of hands-on Google Cloud experience. It is valid for three years.

Read the Google Associate Cloud Engineer study guide

Questions before you buy

How quickly do I receive it?

Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

What is your pass rate?

99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.

Related products