Google Associate Cloud Engineer Exam Practice Questions, practice question pack
GOOGLE · Associate Cloud Engineer

Google Associate Cloud Engineer Exam Practice Questions

375 questionsPDF by emailUpdated September 2026

US$39

Try 10 questions free

Card, Apple Pay or Google Pay. Your PDF is sent by email as soon as you check out.

Pass or your money backFail the exam after using this pack and we refund it. How the guarantee works
Category:
TRY BEFORE YOU BUY

Three of the 375 questions in this pack

Question 1

Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine.

Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance.

What should you do?

  1. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key in the metadata of each instance.
  2. Ask each member of the team to generate a new SSH key pair and to send you their public key. Use a configuration management tool to deploy those keys on each instance.
  3. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the "compute.osAdminLogin" role to the Google group corresponding to this team.
  4. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance.
Show answer and explanation

Correct answer: C. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the "compute.osAdminLogin" role to the Google group corresponding to this team.

key pair and to add the public key to their Google account. Grant the "compute.osAdminLogin" role to the Google group corresponding to this team. Option C provides the best combination of security and auditability. When team members add their public keys to their Google accounts and are granted the compute.osAdminLogin role, Google Cloud's OS Login feature automatically manages SSH key deployment across instances and maintains audit logs showing which user accessed which instance. This satisfies the security team's requirement to determine who accessed a given instance while being operationally efficient since OS Login handles credential deployment automatically.

Why the other options are wrong

  • A. Sharing a single private key across multiple team members prevents audit logging from identifying which specific person accessed an instance, violating security requirements.
  • B. While configuration management tools can deploy keys, this approach requires manual setup and maintenance without the built-in audit trail that OS Login provides.
  • D. Project-wide SSH keys cannot be tied to individual users, making it impossible to audit who accessed a specific instance.

Question 2

You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible.

Which range should you use?

  1. 0.0.0.0/0
  2. 10.0.0.0/8
  3. 172.16.0.0/12
  4. 192.168.0.0/16
Show answer and explanation

Correct answer: B. 10.0.0.0/8

The 10.0.0.0/8 range is the largest usable private IP range specified in RFC 1918, providing 16,777,216 addresses. While 0.0.0.0/0 is technically larger, it represents all IP addresses globally and cannot be used for a subnet. The 172.16.0.0/12 range provides 1,048,576 addresses, and 192.168.0.0/16 provides 65,536 addresses, both substantially smaller than the /8 range.

Why the other options are wrong

  • A. 0.0.0.0/0 represents the entire IP address space and is not valid for configuring a custom VPC subnet.
  • C. 172.16.0.0/12 provides only 1,048,576 addresses, significantly smaller than the /8 range.
  • D. 192.168.0.0/16 provides only 65,536 addresses, making it the smallest of the valid options.

Question 3

You want to select and configure a cost-effective solution for relational data on Google Cloud Platform. You are working with a small set of operational data in one geographic location. You need to support point-in-time recovery.

What should you do?

  1. Select Cloud SQL (MySQL). Verify that the enable binary logging option is selected.
  2. Select Cloud SQL (MySQL). Select the create failover replicas option.
  3. Select Cloud Spanner. Set up your instance with 2 nodes.
  4. Select Cloud Spanner. Set up your instance as multi-regional.
Show answer and explanation

Correct answer: A. Select Cloud SQL (MySQL). Verify that the enable binary logging option is selected.

binary logging option is selected. For a small set of operational data in a single geographic location with point-in-time recovery requirements, Cloud SQL with MySQL and binary logging enabled is the most cost-effective solution. Binary logging enables Cloud SQL's automated backup and point- in-time recovery capabilities without the expense of additional failover replicas or Cloud Spanner, which is designed for distributed, high-scale scenarios and carries substantially higher costs.

Why the other options are wrong

  • B. Creating failover replicas adds significant cost without being necessary for point-in- time recovery, which is achieved through binary logging alone.
  • C. Cloud Spanner is a global, distributed database designed for large-scale applications and is far more expensive than Cloud SQL for small operational datasets.
  • D. Multi-regional Cloud Spanner is unnecessary for data in a single geographic location and represents wasted expense.

See all 10 free questions Get the full pack, US$39

375 practice questions for Google Associate Cloud Engineer (ACE), with full explanations.

Every question comes with the correct answer, the reasoning behind it, and a short note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.

  • 375 questions mapped to the ACE exam objectives
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Instant delivery by email the moment you check out
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

An ACE attempt costs US$125. This pack is US$39, paid once.

Try 10 questions free before you buy.

Last updated September 2026 · 375 questions

What makes the ACE hard

Google’s associate exam is more hands-on than AWS’s or Azure’s equivalents, and that is exactly what catches people out. It assumes the candidate has actually typed the commands.

Expect questions where the four answers are four gcloud command variations differing by one flag, IAM questions that require choosing between basic, predefined and custom roles at the right level of the resource hierarchy, and the classic compute-selection scenarios: Compute Engine versus GKE versus Cloud Run versus Cloud Functions, where every option runs the workload but only one matches the constraints in the question.

It is two hours, 50 to 60 questions, and widely considered harder than a typical associate exam. This pack will have 375 practice questions mapped to the ACE exam objectives, covering the same gcloud syntax, IAM and service-selection patterns Google keeps reusing.

About the exam

The Associate Cloud Engineer certifies deploying applications, monitoring operations, and managing enterprise solutions on Google Cloud using both the console and the command line. There are no prerequisites; Google recommends six or more months of hands-on Google Cloud experience. It is valid for three years.

Exam sections

  • Set up a cloud solution environment
  • Plan and implement a cloud solution
  • Ensure the successful operation of a cloud solution
  • Configure access and security

Google does not publish percentage weightings for these sections. 50 to 60 questions, 2 hours, multiple choice and multiple select, US$125 per attempt, available in English, Japanese, Spanish and Portuguese, online proctored or Pearson VUE test centre, valid 3 years.

Reviews

There are no reviews yet.

Only logged in customers who have purchased this product may leave a review.

Questions before you buy

What do I get when I buy the Google Associate Cloud Engineer pack?

375 practice questions as a PDF, each with the correct answer, a full explanation and a note on why the other options are wrong, plus a separate questions-only PDF for timed practice.

How quickly do I receive it?

Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.

Is there a free sample?

Yes. Ten questions from this pack, with answers and explanations, are free on this page and as a PDF, so you can judge the quality before you pay.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.

Related products