GCP - Associate Cloud Engineer Practice Questions & Free Practice Exam
5 free GCP - Associate Cloud Engineer practice questions below, with instant explanations. The full simulator contains hundreds of exam-style questions across every topic.
When a Boolean Organization Policy constraint is enforced at the Organization node, every Folder beneath it inherits the constraint by default. An auditor wants to confirm the override semantics. Which Folder behavior is NOT permitted by the inheritance model?
Question 2
Which operation is NOT supported on an existing custom-mode VPC subnet?
Question 3
Instance templates must always boot from the most recent non-deprecated image in a managed lineage. Which template field meets this goal?
Question 4
Granting `roles/storage.objectViewer` to `allAuthenticatedUsers` on a Cloud Storage bucket allows which set of principals to read the objects?
Question 5
Loader Deployments using Workload Identity for GKE work in the `dev` cluster but fail in `prod` with `not authorized to impersonate`. The Kubernetes ServiceAccount annotation matches the production Google service account's email. The Google account holds the right resource roles on production buckets. The federation binding on the Google service account references the member `serviceAccount:data-stage-3142.svc.id.goog[bronze/loader-ksa]`. Cluster-level Workload Identity is enabled in both clusters. Which single change fixes the prod failure?
Ready for the full GCP - Associate Cloud Engineer exam simulator?
Unlock the complete question bank, weighted mock exams, saved-question flashcards, and the Shark AI tutor - all inside your MyCertStack account.
