Google Cloud Certified Associate Cloud Engineer (ACE) practice questions

Domain coverage 5 domains

• Setting up a Cloud Solution Environment (~17%)
• Planning and Configuring a Cloud Solution (~18%)
• Deploying and Implementing a Cloud Solution (~25%)
• Ensuring Successful Cloud Solution Operation (~22%)
• Configuring Access and Security (~18%)

Sample questions 9 of 84 shown

1. Q1 Setting up a cloud solution environment

   Your team is building a website that handles votes from a large user population. The incoming votes will arrive at various rates. You want to optimize the storage and processing of the votes. What should you do?

   1. Save the incoming votes to Firestore. Use Cloud Scheduler to trigger a Cloud Functions instance to periodically process the votes.
   2. Use a dedicated instance to process the incoming votes. Send the votes directly to this instance.
   3. Save the incoming votes to a JSON file on Cloud Storage. Process the votes in a batch at the end of the day.
   4. Save the incoming votes to Pub/Sub. Use the Pub/Sub topic to trigger a Cloud Functions instance to process the votes.

   D. Cloud Pub/Sub decouples vote ingestion from processing - votes arrive via Pub/Sub subscriptions, then the application processes asynchronously. Cloud Functions (A) has concurrency limits for rapid incoming votes. Cloud SQL (B) isn't designed for pub-sub messaging. Cloud Tasks (C) distributes tasks but Pub/Sub is the standard for high-volume event ingestion.
2. Q2 Setting up a cloud solution environment

   Your company uses BigQuery to store and analyze data. Upon submitting your query in BigQuery, the query fails with a quotaExceeded error. You need to diagnose the issue causing the error. What should you do? (Choose two.)

   1. Use BigQuery BI Engine to analyze the issue.
   2. Use the INFORMATION_SCHEMA views to analyze the underlying issue.
   3. Configure Cloud Trace to analyze the issue.
   4. Search errors in Cloud Audit Logs to analyze the issue.

   BD. BigQuery reservations (B) provide dedicated slot capacity preventing quotaExceeded errors. Reservations allocate fixed compute resources. Cloud Scheduling (D-context: partition clustering) isn't relevant - B's correct. Option B ensures dedicated slots, and (D option) is about the primary solution. The question asks the best approach to avoid quota errors - BigQuery Reservations allocate dedicated slots.
3. Q3 Setting up a cloud solution environment

   You are the Organization Administrator for your company's Google Cloud resources. Your company has strict compliance rules that require you to be notified about any modifications to files and documents hosted on Cloud Storage. In a recent incident, one of your team members was able to modify files and you did not receive any notifications, causing other production jobs to fail. You must ensure that you receive notifications for all changes to files and documents in Cloud Storage while minimizing management overhead. What should you do?

   1. View Cloud Audit logs for all Cloud Storage files in Logs Explorer. Filter by Admin Activity logs.
   2. Enable Cloud Storage object versioning on your bucket. Configure Pub/Sub notifications for your Cloud Storage buckets.
   3. Enable versioning on the Cloud Storage bucket. Set up a custom script that scans versions of Cloud Storage objects being modified and alert the admin by using the script.
   4. Configure Object change notifications on the Cloud Storage buckets. Send the events to Pub/Sub.

   B. Organization policies with constraints (e.g., resource locations, service disablement) enforce compliance rules across all projects in the org. IAM Deny roles (A) block specific permissions but don't enforce compliance policies. Cloud Audit Logs (C) record activity. VPC Service Controls (D) prevent data exfiltration.
4. Q4 Setting up a cloud solution environment

   Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?

   1. Add your SREs to roles/iam.roleAdmin role.
   2. Add your SREs to roles/accessapproval.approver role.
   3. Add your SREs to a group and then add this group to roles/iam.roleAdmin.role.
   4. Add your SREs to a group and then add this group to roles/accessapproval.approver role.

   D. Granting IAM roles/iam.securityReviewer on the organization level to the SRE group gives them read-only security access across all projects without individual project permissions. Custom roles (A/B) require per-project creation. Organization viewer (C) is too broad for security auditing.
5. Q5 Setting up a cloud solution environment

   Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?

   1. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.
   2. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.
   3. Create a custom role by removing delete permissions, and add users to that role only.
   4. Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.

   D. BigQuery dataviewer role grants read-only query access without delete permissions. BigQuery admin (A) includes delete. BigQuery user (B) can query but also create datasets. BigQuery jobUser (C) only submits jobs.
6. Q6 Setting up a cloud solution environment

   You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?

   1. Export Cloud Datastore data using gcloud datastore export.
   2. Create a Cloud Datastore index using gcloud datastore indexes create.
   3. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.
   4. Install the cloud-datastore-emulator component using the gcloud components install command.

   C. gcloud components update updates the Cloud SDK to the latest version. gcloud components install (A) installs specific components. gcloud version (B) shows version. gcloud components list (D) lists components.
7. Q7 Setting up a cloud solution environment

   Your company set up a complex organizational structure on Google Cloud. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members, and you want to follow Google-recommended practices. What should you do?

   1. Add the users to roles/browser role.
   2. Add the users to roles/iam.roleViewer role.
   3. Add the users to a group, and add this group to roles/browser.
   4. Add the users to a group, and add this group to roles/iam.roleViewer role.

   C. Cloud Asset Inventory discovers and inventories all projects, folders, and resources across the organization. Cloud Resource Manager (A) manages projects individually. Deployment Manager (B) deploys resources. Cloud Monitoring (D) tracks metrics.
8. Q8 Setting up a cloud solution environment

   Your organization has a dedicated person who creates and manages all service accounts for Google Cloud projects. You need to assign this person the minimum role for projects. What should you do?

   1. Add the user to roles/iam.roleAdmin role.
   2. Add the user to roles/iam.securityAdmin role.
   3. Add the user to roles/iam.serviceAccountUser role.
   4. Add the user to roles/iam.serviceAccountAdmin role.

   D. Granting roles/iam.serviceAccountUser on the service accounts allows the dedicated person to create and manage them. Service Account Admin (A) includes creation but not user. Service Account Key Admin (B) manages keys. Service Account Token Creator (C) creates tokens.
9. Q9 Setting up a cloud solution environment

   Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

   1. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
   2. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
   3. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
   4. Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.

   A. Google Cloud Directory Sync (GCDS) synchronizes Active Directory with Cloud Identity, using AD as the identity source. SAML federation (B) enables SSO. IAM policies (C) control access. Cloud Identity-Aware Proxy (D) secures apps.

Answer all 84 questions with instant feedback →

Reader reviews 153 ratings

• I recommend this to everyone preparing for ACE. The lifetime access is great — I keep coming back for reference.

  ★★★★★★ Robert C.

• Between the ACE practice questions and some hands-on labs, I felt fully prepared walking into the exam center.

  ★★★★★★ Caleb B.

• I used this for three months on and off for ACE. The progress tracker helped me stay consistent.

  ★★★★★★ Hannah K.

• Straightforward and effective. No fluff in the ACE practice set, just relevant questions with solid answer keys.

  ★★★★★★ Owen P.

• My colleague recommended this for ACE and I’m glad I listened. Passed on my first go after two weeks of solid study.

  ★★★★★ Logan T.

• The progress tracking feature for ACE really motivated me. Seeing my improvement over time was incredibly satisfying.

  ★★★★★★ Daniel H.

Frequently asked questions

Free study resources

Community-verified analysis of 25 questions from real test-taker discussions — 10 deep analyses and 0 FAQs.

More Google exams