Cloud Engineer Associate Cloud Engineer v1.0 2

Question 1

Your team needs to grant a developer read-only access to all Cloud Storage buckets in a project without affecting other resources. Which IAM role should you assign at the project level?

Accepted Answer

roles/storage.objectViewer

Answer

roles/storage.objectViewer grants read access to objects in all buckets within the project without broader project-level permissions.

Question 2

A GKE cluster needs to pull private container images from Artifact Registry in the same project. What is the recommended approach?

Accepted Answer

Grant the node pool's service account roles/artifactregistry.reader

Answer

Assigning roles/artifactregistry.reader to the node pool's service account follows least-privilege and is the GCP-recommended method.

Question 3

You want to deploy a containerized batch job that runs to completion and does not need to serve HTTP traffic. Which Google Cloud service is most appropriate?

Accepted Answer

Cloud Run Jobs

Answer

Cloud Run Jobs are designed for containerized workloads that run to completion rather than serving ongoing requests.

Question 4

A Cloud SQL instance is running out of storage. Which setting should you enable to avoid downtime from a full disk?

Accepted Answer

Automatic storage increase

Answer

Enabling automatic storage increase allows Cloud SQL to expand disk capacity automatically when it reaches a threshold.

Question 5

Which gcloud command lists all VM instances across every zone in a project?

Accepted Answer

gcloud compute instances list

Answer

gcloud compute instances list without zone flags returns instances from all zones in the current project by default.

Cloud Engineer Practice Test

Cloud Engineer Practice Test

Cloud Engineer Associate Cloud Engineer v1.0 2