Practice Test GeeksCloud Engineer Practice Test
← All Cloud Engineer Flashcard Decks

Cloud Engineer: Google Associate Flashcards

7 cards from real Cloud Engineer practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Cloud Engineer: Google Associate flashcards as text

  1. A Cloud Run service needs to access a secret stored in Secret Manager at runtime. Which approach follows Google's security best practices?

    Answer: Mount the secret as an environment variable or volume using Secret Manager integration

    Cloud Run's native Secret Manager integration mounts secrets as environment variables or volumes, keeping them out of the container image.

  2. You are designing a multi-region Cloud Spanner database to minimize latency for users in the US and Europe. Which instance configuration should you choose?

    Answer: A multi-region configuration that spans US and European regions

    A multi-region Spanner configuration automatically replicates data across US and European regions, providing low latency for both user populations.

  3. Which command correctly authenticates the gcloud CLI using Application Default Credentials for local development?

    Answer: gcloud auth application-default login

    gcloud auth application-default login stores credentials that client libraries use automatically for ADC-based authentication in local development.

  4. You want to prevent VM instances in a project from having external IP addresses. Which Organization Policy constraint enforces this?

    Answer: constraints/compute.vmExternalIpAccess

    The constraints/compute.vmExternalIpAccess policy restricts or denies the assignment of external IP addresses to Compute Engine VMs.

  5. A Pub/Sub subscription has a large backlog of unprocessed messages. What happens to messages that are not acknowledged within the subscription's acknowledgement deadline?

    Answer: They are redelivered to the subscriber

    If a message is not acknowledged within the deadline, Pub/Sub redelivers it to ensure at-least-once delivery semantics.

  6. You need a fully managed data warehouse on GCP to run analytical SQL queries on petabyte-scale datasets. Which service should you use?

    Answer: BigQuery

    BigQuery is Google's serverless, fully managed data warehouse designed for fast analytical SQL queries on petabyte-scale datasets.

  7. A GKE workload needs to call a Google Cloud API. What is the recommended way to grant the workload access without using a service account key file?

    Answer: Use Workload Identity to link a Kubernetes service account to a Google service account

    Workload Identity binds a Kubernetes service account to a Google service account, allowing pods to obtain short-lived credentials without key files.