Cloud Engineer Practice Exam: Test Your Knowledge 2025

Your organization is migrating to Google Cloud and needs to establish a hierarchical structure for managing resources across multiple departments. Each department requires isolated billing and administrative control. What is the recommended resource hierarchy approach?

You need to grant a developer the ability to deploy applications to Google Kubernetes Engine (GKE) but not create or delete clusters. Which predefined IAM role should you assign?

Your application running on Compute Engine needs to access Cloud Storage buckets. What is the most secure way to authenticate the application?

You need to create a VPC network that will host resources across multiple regions. Which VPC configuration should you use?

Your team needs to deploy a stateless web application that can automatically scale based on HTTP traffic. The application is containerized. Which Google Cloud service is the most appropriate choice?

Your company requires all VM instances to use custom machine images with pre-installed security software. You need to ensure new instances in multiple projects use these images. What is the most efficient approach?

You are designing a solution for a data analytics application that needs to process large files uploaded to Cloud Storage. The processing takes 30-45 minutes per file and should start automatically when files are uploaded. What is the most cost-effective architecture?

Your application deployed on GKE is experiencing performance issues. You need to monitor CPU and memory usage for individual containers. Which Google Cloud service should you use?

You need to deploy a managed MySQL database that requires high availability with automatic failover and read replicas. The database must be accessible from your on-premises network. Which configuration should you implement?

Your development team needs temporary access to production resources for troubleshooting. You want to grant elevated privileges that automatically expire after 2 hours. What is the best approach?

You are deploying a multi-tier application with web servers, application servers, and database servers on Compute Engine. You need to ensure that database servers can only be accessed by application servers. What is the most secure network configuration?

Your application logs need to be retained for 7 years for compliance purposes, but they are rarely accessed after 90 days. You currently store logs in Cloud Storage Standard class. How can you reduce storage costs while maintaining compliance?

You need to deploy a containerized application to GKE that requires GPU acceleration. The workload is batch-oriented and runs during specific hours. What configuration optimizes cost and performance?

Your company has multiple GCP projects, and you need to implement centralized logging where logs from all projects are stored in a single project for analysis. What is the recommended approach?

You are migrating a legacy application to Compute Engine. The application stores session state locally on the instance. You need to ensure minimal disruption if an instance fails. What architecture should you implement?

Your organization uses Shared VPC to allow multiple service projects to use networking resources from a host project. A team in a service project reports they cannot create VM instances. What is the most likely cause and solution?

You are designing a disaster recovery solution for a critical application running in a single region. The RTO is 1 hour and RPO is 15 minutes. The application uses Compute Engine VMs and Cloud SQL. What is the most appropriate DR architecture?

Your application on GKE needs to access Google Cloud APIs. The security team requires that no service account keys be stored in the cluster. How should you configure authentication?

You need to implement a solution where data analysts can query large datasets in BigQuery, but sensitive personally identifiable information (PII) columns must be masked for all users except the compliance team. What is the most efficient approach?

Your company has an on-premises Active Directory that must remain the source of truth for user authentication. Applications migrating to Google Cloud need to authenticate users against this Active Directory. The connection must be secure and highly available. What solution should you implement?