ACE practice questions: 10 free samples from the Google Cloud mock exam

10 questions in the style of the Google Cloud Associate Cloud Engineer exam, with their answer options. They are 10 of the 62 in the pool the mock draws from; answers and explanations come back when you sit it, and every question is marked against its domain so you can see where you stand.

Sit the full 55-question mock — free, no account

  1. 1. Someone is granted Editor at the organization level. What can they do in a project three folders down? The hierarchy

    1. ANothing, until granted on the project directly
    2. BOnly what the folder policy also allows
    3. COnly read, since inherited roles are downgraded
    4. DEverything Editor allows, because the binding is inherited all the way down

  2. 2. What is wrong with downloading a service account key as JSON and shipping it with the app? Identity

    1. AIt cannot be used by Compute Engine
    2. BIt expires after 24 hours
    3. CIt is a long-lived credential that can leak and does not rotate on its own
    4. DIt only works from outside Google Cloud

  3. 3. Which should be the default choice for granting access to one service? Identity

    1. AA predefined role for that service
    2. BThe Editor basic role
    3. CA custom role built from scratch
    4. DOwner, then narrowed later

  4. 4. How do instances in europe-west1 and us-central1 in the same VPC reach each other privately? Networking

    1. AThrough VPC peering between the two Regions
    2. BThrough a VPN tunnel
    3. CDirectly — the VPC is global, so they are already on the same network
    4. DThey cannot without a public address

  5. 5. What is the practical use of the Architecture Framework? Cost and guidance

    1. AA pricing model
    2. BA checklist of questions that surfaces risks before they become incidents
    3. CA tool that rewrites the infrastructure automatically
    4. DA certification for the architecture

  6. 6. A policy must apply to every current and future project belonging to one business unit. Where should it be set? Section 1 · Setting up a cloud solution environment

    1. AOn the billing account
    2. BOn the organization node
    3. COn the folder containing that business unit's projects
    4. DOn each project individually

  7. 7. Which constraint stops anyone in the organization from granting allUsers access to a Cloud Storage bucket? Section 1 · Setting up a cloud solution environment

    1. AUniform bucket-level access on each bucket
    2. BA custom IAM role without storage permissions
    3. CThe Domain restricted sharing organization policy constraint
    4. DA VPC Service Controls perimeter

  8. 8. Deleting a project immediately and irreversibly deletes its resources. Section 1 · Setting up a cloud solution environment

    1. 9. Finance wants an alert when a project is forecast to exceed its monthly allowance, and detailed cost data for analysis. What should be configured? Section 1 · Setting up a cloud solution environment

      1. AA quota on each service in the project
      2. BA Cloud Monitoring alert on billing metrics
      3. CA budget with forecast alerts, plus billing export to BigQuery
      4. DSeparate billing accounts per project

    2. 10. A budget in Google Cloud stops resources when the amount is exceeded. Section 1 · Setting up a cloud solution environment

      Check your answers

      The mock marks every answer on submit, explains it and breaks the result down by domain. It draws its questions in the published domain weights, and passes at 70% — Google does not publish a pass mark. 70% is a convention of this site, not an official figure.

      Start the ACE mock exam

      Not ready yet? The Google Cloud course covers the same domains in short lessons, each with its own questions.

      Exam facts are taken from the official page: cloud.google.com. Questions here are written for practice and are not from the real exam.