Free sample, no account needed

    GCP - Associate Cloud Engineer Practice Questions & Free Practice Exam

    5 free GCP - Associate Cloud Engineer practice questions below, with instant explanations. The full simulator contains hundreds of exam-style questions across every topic.

    1Question 1

    When a Boolean Organization Policy constraint is enforced at the Organization node, every Folder beneath it inherits the constraint by default. An auditor wants to confirm the override semantics. Which Folder behavior is NOT permitted by the inheritance model?

    2Question 2

    Which operation is NOT supported on an existing custom-mode VPC subnet?

    3Question 3

    Instance templates must always boot from the most recent non-deprecated image in a managed lineage. Which template field meets this goal?

    4Question 4

    Granting `roles/storage.objectViewer` to `allAuthenticatedUsers` on a Cloud Storage bucket allows which set of principals to read the objects?

    5Question 5

    Loader Deployments using Workload Identity for GKE work in the `dev` cluster but fail in `prod` with `not authorized to impersonate`. The Kubernetes ServiceAccount annotation matches the production Google service account's email. The Google account holds the right resource roles on production buckets. The federation binding on the Google service account references the member `serviceAccount:data-stage-3142.svc.id.goog[bronze/loader-ksa]`. Cluster-level Workload Identity is enabled in both clusters. Which single change fixes the prod failure?

    Create a free account and keep going

    Free members study the full GCP - Associate Cloud Engineer theory course and get a much larger slice of the question bank, with progress tracking that remembers exactly where they stopped.

    Full theory course

    Every chapter, free

    More practice questions

    Beyond this sample

    Progress & explanations

    Picks up where you left