Google Associate Cloud Engineer Exam dumps PDF

QUESTION: 36

You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm.
What should you do?

Download the private key from the service account, and add it to each VMs custom metadata.
Download the private key from the service account, and add the private key to each VM's SSH keys.
Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
When creating the VMs, set the service account's API scope for Compute Engine to read/write.

Answer(s): C

Explanation:

https://gtseres.medium.com/using-service-accounts-across-projects-in-gcp-cf9473fef8f0

You create the service account in proj-sa and take note of the service account email, then you go to proj-vm in IAM > ADD and add the service account's email as new member and give it the Compute Storage Admin role.

https://cloud.google.com/compute/docs/access/iam#compute.storageAdmin

Reveal Solution Next Question

QUESTION: 37

You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region.
What should you do?

Change the default region property setting in the existing GCP project to asia-northeast1.
Change the region property setting in the existing App Engine application from us-central to asia- northeast1.
Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
Create a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application.

Answer(s): D

Explanation:

https://cloud.google.com/appengine/docs/flexible/managing-projects-apps- billing#:~:text=Each%20Cloud%20project%20can%20contain%20only%20a%20single%20App%20Eng ine%20application%2C%20and%20once%20created%20you%20cannot%20change%20the%20locatio n%20of%20your%20App%20Engine%20application.

Two App engine can't be running on the same project: you can check this easy diagram for more info:
https://cloud.google.com/appengine/docs/standard/an-overview-of-app- engine#components_of_an_application
And you can't change location after setting it for your app Engine. https://cloud.google.com/appengine/docs/standard/locations

App Engine is regional and you cannot change an apps region after you set it. Therefore, the only way to have an app run in another region is by creating a new project and targeting the app engine to run in the required region (asia-northeast1 in our case).

Ref: https://cloud.google.com/appengine/docs/locations

Reveal Solution Next Question

QUESTION: 38

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance.
What should you do?

Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.
Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to the role.
Run gcloud iam roles describe roles/spanner.viewer --project my-project. Add the users to a new group. Add the group to the role.

Answer(s): B

Explanation:

https://cloud.google.com/spanner/docs/iam#spanner.databaseUser Using the gcloud tool, execute the gcloud iam roles describe roles/spanner.databaseUser command on Cloud Shell. Attach the users to a newly created Google group and add the group to the role.

Reveal Solution Next Question

QUESTION: 39

You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes.
What should you do?

Enable the Node Auto-Repair feature for your GKE cluster.
Enable the Node Auto-Upgrades feature for your GKE cluster.
Select the latest available cluster version for your GKE cluster.
Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.

Answer(s): B

Explanation:

Creating or upgrading a cluster by specifying the version as latest does not provide automatic upgrades. Enable node auto-upgrades to ensure that the nodes in your cluster are up-to-date with the latest stable version.

https://cloud.google.com/kubernetes-engine/versioning-and-upgrades

Node auto-upgrades help you keep the nodes in your cluster up to date with the cluster master version when your master is updated on your behalf.
When you create a new cluster or node pool with Google Cloud Console or the gcloud command, node auto-upgrade is enabled by default. Ref: https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-upgrades

Reveal Solution Next Question

QUESTION: 40

You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices.
What should you do?

Configure an HTTP(S) load balancer.
Configure an internal TCP load balancer.
Configure an external SSL proxy load balancer.
Configure an external TCP proxy load balancer.

Answer(s): A

Reference:

https://cloud.google.com/load-balancing/docs/https/ According to this guide for setting up an HTTP (S) load balancer in GCP: The client SSL session terminates at the load balancer. Sessions between the load balancer and the instance can either be HTTPS (recommended) or HTTP.
https://cloud.google.com/load-balancing/docs/ssl

Reveal Solution Next Question

Google Google Associate Cloud Engineer Exam (page: 8) Google Associate Cloud Engineer Updated on: 24-Mar-2026

QUESTION: 36

Explanation:

QUESTION: 37

Explanation:

QUESTION: 38

Explanation:

QUESTION: 39

Explanation:

QUESTION: 40

Reference:

Google Google Associate Cloud Engineer Exam (page: 8)
Google Associate Cloud Engineer
Updated on: 24-Mar-2026