ACE practice questions: 10 free samples from the Google Cloud mock exam

10 questions in the style of the Google Cloud Associate Cloud Engineer exam, with their answer options. They are 10 of the 62 in the pool the mock draws from; answers and explanations come back when you sit it, and every question is marked against its domain so you can see where you stand.

Sit the full 55-question mock — free, no account

  1. 1. Someone is granted Editor at the organization level. What can they do in a project three folders down? The hierarchy

    1. AOnly read, since inherited roles are downgraded
    2. BOnly what the folder policy also allows
    3. CEverything Editor allows, because the binding is inherited all the way down
    4. DNothing, until granted on the project directly

  2. 2. You put an object in Coldline and delete it after a month. What happens? Compute and storage

    1. ANothing extra — you pay for the month you used
    2. BIt is silently moved to Standard
    3. CYou are charged for the remainder of the ninety-day minimum
    4. DThe delete is refused until ninety days pass

  3. 3. How do instances in europe-west1 and us-central1 in the same VPC reach each other privately? Networking

    1. AThrough a VPN tunnel
    2. BDirectly — the VPC is global, so they are already on the same network
    3. CThey cannot without a public address
    4. DThrough VPC peering between the two Regions

  4. 4. Two firewall rules match the same packet — one allows, one denies. Which wins? Networking

    1. AThe one with the lower priority number
    2. BThe allow, always
    3. CThe one created most recently
    4. DThe deny, always

  5. 5. A policy must apply to every current and future project belonging to one business unit. Where should it be set? Section 1 · Setting up a cloud solution environment

    1. AOn each project individually
    2. BOn the folder containing that business unit's projects
    3. COn the organization node
    4. DOn the billing account

  6. 6. Which constraint stops anyone in the organization from granting allUsers access to a Cloud Storage bucket? Section 1 · Setting up a cloud solution environment

    1. AA custom IAM role without storage permissions
    2. BUniform bucket-level access on each bucket
    3. CA VPC Service Controls perimeter
    4. DThe Domain restricted sharing organization policy constraint

  7. 7. Deleting a project immediately and irreversibly deletes its resources. Section 1 · Setting up a cloud solution environment

    1. 8. Finance wants an alert when a project is forecast to exceed its monthly allowance, and detailed cost data for analysis. What should be configured? Section 1 · Setting up a cloud solution environment

      1. ASeparate billing accounts per project
      2. BA quota on each service in the project
      3. CA budget with forecast alerts, plus billing export to BigQuery
      4. DA Cloud Monitoring alert on billing metrics

    2. 9. A budget in Google Cloud stops resources when the amount is exceeded. Section 1 · Setting up a cloud solution environment

      1. 10. A stateless HTTP service has long idle periods and unpredictable bursts, and the team wants to pay nothing while idle. Which product fits? Section 2 · Planning and configuring a cloud solution

        1. AA managed instance group on Compute Engine
        2. BCloud Run
        3. CA GKE Standard cluster
        4. DAn App Engine flexible environment service

      Check your answers

      The mock marks every answer on submit, explains it and breaks the result down by domain. It draws its questions in the published domain weights, and passes at 70% — Google does not publish a pass mark. 70% is a convention of this site, not an official figure.

      Start the ACE mock exam

      Not ready yet? The Google Cloud course covers the same domains in short lessons, each with its own questions.

      Exam facts are taken from the official page: cloud.google.com. Questions here are written for practice and are not from the real exam.