{"id":12993,"date":"2026-09-16T05:51:23","date_gmt":"2026-09-16T05:51:23","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12993"},"modified":"2026-09-16T05:51:23","modified_gmt":"2026-09-16T05:51:23","slug":"google-associate-cloud-engineer-practice-test-questions-and-exam-dumps-part5-q81-100","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/google-associate-cloud-engineer-practice-test-questions-and-exam-dumps-part5-q81-100\/","title":{"rendered":"Google Associate Cloud Engineer Practice Test Questions and Exam Dumps Part5 Q81-100"},"content":{"rendered":"

View Full Google Associate Cloud Engineer Exam Dumps<\/a> and Practice Test Dumps<\/b><\/p>\n

 <\/p>\n

Q81. Which Google Cloud service can be used to schedule a recurring job such as an HTTP request?<\/b><\/h3>\n

1)<\/b> Cloud Scheduler<\/span>
\n<\/span>2)<\/b> Cloud Logging<\/span>
\n<\/span>3)<\/b> Cloud Storage<\/span>
\n<\/span>4)<\/b> Cloud Spanner<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Scheduler is a fully managed service that allows administrators to schedule recurring jobs. A job can invoke an HTTP or HTTPS endpoint, publish a message to Pub\/Sub, or target supported Google Cloud services. It is useful for tasks such as triggering application endpoints, running periodic maintenance operations, and starting automated workflows. Administrators can define schedules using cron-style expressions and configure retry behavior when appropriate. Cloud Logging is used for logs, Cloud Storage provides object storage, and Cloud Spanner is a relational database. Cloud Scheduler is therefore the appropriate choice when an operation needs to run automatically according to a defined schedule.<\/span><\/p>\n

Q82. Which Google Cloud service records administrative activities performed on Google Cloud resources?<\/b><\/h3>\n

1)<\/b> Cloud CDN<\/span>
\n<\/span>2)<\/b> Cloud Audit Logs<\/span>
\n<\/span>3)<\/b> Cloud Storage<\/span>
\n<\/span>4)<\/b> Cloud Run<\/span><\/p>\n

Correct Answer: 2)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Audit Logs records activities and events that occur within Google Cloud resources. These logs can help administrators determine who performed an action, what action occurred, and which resource was affected. Audit logs are valuable for security monitoring, compliance, troubleshooting, and investigating changes to cloud environments. Different categories of audit logs capture different types of activity, including administrative operations and data access where applicable. Cloud CDN manages content delivery, Cloud Storage stores objects, and Cloud Run runs containerized applications. Cloud Audit Logs is therefore the appropriate service when an organization needs a record of administrative activity for its cloud resources.<\/span><\/p>\n

Q83. Which Google Cloud resource is required before most other resources can be created and managed?<\/b><\/h3>\n

1)<\/b> Project<\/span>
\n<\/span>2)<\/b> Zone<\/span>
\n<\/span>3)<\/b> Firewall rule<\/span>
\n<\/span>4)<\/b> DNS record<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

A Google Cloud project provides a fundamental boundary for organizing and managing resources. Many Google Cloud resources, including Compute Engine instances, Cloud Storage resources, databases, and other services, are associated with a project. Projects also provide important administrative concepts such as IAM permissions, APIs, quotas, and billing associations. A zone is a geographic deployment location, while firewall rules and DNS records are specific networking resources. Before deploying many cloud services, an administrator typically selects or creates an appropriate project and enables the required APIs. Understanding projects is essential for effective Google Cloud resource administration.<\/span><\/p>\n

Q84. What is the purpose of enabling an API in a Google Cloud project?<\/b><\/h3>\n

1)<\/b> To activate access to a Google Cloud service’s API<\/span>
\n<\/span>2)<\/b> To automatically create a VM<\/span>
\n<\/span>3)<\/b> To delete unused resources<\/span>
\n<\/span>4)<\/b> To assign every user the Owner role<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Google Cloud APIs provide programmatic interfaces for interacting with cloud services. Before many services can be used through their APIs, the corresponding API must be enabled in the project. For example, an administrator may need to enable the Compute Engine API before creating Compute Engine resources through supported management interfaces. Enabling an API does not automatically create resources or grant users unlimited permissions. IAM permissions are still required to perform operations. API enablement is therefore an important project configuration step when deploying and managing Google Cloud services.<\/span><\/p>\n

Q85. Which command can be used to create a Compute Engine VM with the Google Cloud CLI?<\/b><\/h3>\n

1)<\/b> gcloud compute instances create<\/span>
\n<\/span>2)<\/b> gcloud storage bucket remove<\/span>
\n<\/span>3)<\/b> gcloud dns server start<\/span>
\n<\/span>4)<\/b> gcloud iam vm deploy<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

The <\/span>gcloud compute instances create<\/span> command is used with the Google Cloud CLI to create Compute Engine virtual machine instances. Administrators can provide options such as machine type, zone, boot disk image, network configuration, and other instance settings. Using the CLI is particularly useful for automation, repeatable deployments, and scripting administrative tasks. The other commands shown are not valid commands for creating Compute Engine instances. Associate Cloud Engineer candidates should become familiar with common <\/span>gcloud<\/span> command structures because many cloud administration tasks can be performed through the command line.<\/span><\/p>\n

Q86. Which Compute Engine feature allows an administrator to create a backup copy of a VM’s persistent disk?<\/b><\/h3>\n

1)<\/b> Snapshot<\/span>
\n<\/span>2)<\/b> Firewall rule<\/span>
\n<\/span>3)<\/b> Instance group<\/span>
\n<\/span>4)<\/b> DNS zone<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

A Compute Engine persistent disk snapshot creates a point-in-time backup of the disk’s data. Snapshots are commonly used for backup, disaster recovery, and creating new persistent disks from existing data. They can be scheduled or created manually depending on operational requirements. Because snapshots capture disk contents rather than simply the VM’s running state, administrators should select an appropriate backup strategy for the application. Firewall rules control network traffic, instance groups manage collections of VMs, and DNS zones manage DNS records. A snapshot is therefore the appropriate Compute Engine feature when the requirement is to preserve persistent disk data for recovery.<\/span><\/p>\n

Q87. Which Compute Engine option is most appropriate when a workload requires a VM to remain on dedicated physical hardware for compliance or licensing reasons?<\/b><\/h3>\n

1)<\/b> Sole-tenant node<\/span>
\n<\/span>2)<\/b> Cloud Storage bucket<\/span>
\n<\/span>3)<\/b> Cloud NAT<\/span>
\n<\/span>4)<\/b> Pub\/Sub topic<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Sole-tenant nodes provide dedicated physical infrastructure for Compute Engine VM instances. They are useful when organizations have requirements related to physical server isolation, licensing, compliance, or workload placement. Instead of sharing the underlying physical host with unrelated customers, workloads assigned to sole-tenant nodes run on dedicated hardware. This capability can be important for certain enterprise workloads with specific regulatory or licensing constraints. Cloud Storage provides object storage, Cloud NAT handles outbound network translation, and Pub\/Sub provides messaging. Therefore, a sole-tenant node is the appropriate choice when dedicated physical host placement is a requirement.<\/span><\/p>\n

Q88. Which Compute Engine resource can automatically replace an unhealthy VM in a managed instance group?<\/b><\/h3>\n

1)<\/b> Autohealing<\/span>
\n<\/span>2)<\/b> Cloud DNS<\/span>
\n<\/span>3)<\/b> Cloud Storage lifecycle<\/span>
\n<\/span>4)<\/b> Cloud Scheduler<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Managed instance group autohealing uses health checks to determine whether instances are responding correctly. When an instance is considered unhealthy according to the configured health check, the managed instance group can recreate the instance using its instance template. This helps maintain application availability and ensures that failed instances are automatically replaced rather than requiring manual intervention. Autohealing is different from autoscaling, which changes the number of instances according to demand. Cloud DNS manages DNS, Cloud Storage lifecycle rules automate object operations, and Cloud Scheduler runs scheduled jobs. Autohealing is therefore the appropriate feature for automatically recovering unhealthy managed instances.<\/span><\/p>\n

Q89. What is the purpose of a health check used with a managed instance group?<\/b><\/h3>\n

1)<\/b> To determine whether an application instance is responding properly<\/span>
\n<\/span>2)<\/b> To increase VM disk capacity<\/span>
\n<\/span>3)<\/b> To create a new project<\/span>
\n<\/span>4)<\/b> To configure IAM roles<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

A health check evaluates whether a backend instance or application is responding according to configured criteria. Managed instance groups can use health checks as part of their autohealing configuration to identify instances that are not functioning correctly. When an instance fails the required health check, the group can take corrective action, such as recreating the instance. Health checks are also commonly associated with load balancing to determine which backends are capable of receiving traffic. They do not increase disk capacity, create projects, or configure IAM roles. Their primary purpose is to assess the operational health of a service or instance.<\/span><\/p>\n

Q90. Which load-balancing behavior helps prevent traffic from being sent to an unhealthy backend?<\/b><\/h3>\n

1)<\/b> Health checking<\/span>
\n<\/span>2)<\/b> Object versioning<\/span>
\n<\/span>3)<\/b> IAM inheritance<\/span>
\n<\/span>4)<\/b> Snapshot scheduling<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Load balancers can use health checks to determine whether backend resources are available to receive traffic. If a backend fails its configured health check, the load-balancing system can stop directing new traffic to that unhealthy backend, depending on the load-balancing configuration. This improves application reliability by directing requests toward healthy resources. Object versioning protects Cloud Storage object versions, IAM inheritance manages permissions through the resource hierarchy, and snapshot scheduling supports backup operations. Health checking is therefore an important component of highly available load-balanced applications because it helps ensure that traffic is directed toward functioning backend resources.<\/span><\/p>\n

Q91. Which Google Cloud networking resource defines a range of internal IP addresses within a VPC network?<\/b><\/h3>\n

1)<\/b> Subnet<\/span>
\n<\/span>2)<\/b> Cloud Scheduler job<\/span>
\n<\/span>3)<\/b> Service account<\/span>
\n<\/span>4)<\/b> Storage bucket<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

A subnet defines an IP address range within a Google Cloud VPC network. Resources such as Compute Engine instances receive internal IP addresses from the subnet’s configured range. Subnets are associated with regions, while a VPC network itself can span multiple regions. Administrators can create multiple subnets to organize workloads and allocate appropriate address ranges. Service accounts provide identities for workloads, Cloud Scheduler manages scheduled operations, and storage buckets contain objects. Understanding the relationship between VPC networks and subnets is important when designing Google Cloud networking because IP addressing and regional resource placement depend heavily on subnet configuration.<\/span><\/p>\n

Q92. Which type of VPC firewall rule controls traffic based on attributes such as source, destination, protocol, and port?<\/b><\/h3>\n

1)<\/b> Network firewall rule<\/span>
\n<\/span>2)<\/b> Storage lifecycle rule<\/span>
\n<\/span>3)<\/b> IAM policy<\/span>
\n<\/span>4)<\/b> DNS policy<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

VPC firewall rules control network traffic to and from resources within a Google Cloud VPC network. Depending on the rule configuration, traffic can be allowed or denied based on factors such as source ranges, destination ranges, protocols, and ports. Firewall rules can be applied to selected VM instances using supported targeting mechanisms such as network tags or service accounts. IAM policies control resource permissions rather than network packets, while storage lifecycle rules manage object operations and DNS policies address name-resolution behavior. Firewall rules are therefore a fundamental security mechanism for controlling network communication within Google Cloud environments.<\/span><\/p>\n

Q93. What happens when a VPC firewall rule allows TCP traffic on a specific port to a VM?<\/b><\/h3>\n

1)<\/b> Matching traffic can reach the VM if other required network conditions are satisfied<\/span>
\n<\/span>2)<\/b> The VM automatically receives a public IP address<\/span>
\n<\/span>3)<\/b> The VM is automatically assigned an IAM Owner role<\/span>
\n<\/span>4)<\/b> The VM’s disk is encrypted automatically<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

When a VPC firewall rule allows TCP traffic on a particular port, traffic matching the rule can be permitted to reach the targeted VM, assuming the routing and other relevant network conditions allow connectivity. A firewall rule does not automatically assign an external IP address, change IAM permissions, or alter disk encryption settings. For example, allowing TCP port 443 can permit HTTPS traffic to a web server when the VM and load-balancing configuration are otherwise correct. Administrators should carefully restrict firewall rules to required sources, destinations, protocols, and ports to follow security best practices.<\/span><\/p>\n

Q94. Which Google Cloud service provides DNS name resolution for applications and resources?<\/b><\/h3>\n

1)<\/b> Cloud DNS<\/span>
\n<\/span>2)<\/b> Cloud Monitoring<\/span>
\n<\/span>3)<\/b> Cloud Build<\/span>
\n<\/span>4)<\/b> Cloud Run<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud DNS is a managed DNS service that allows organizations to host DNS zones and manage records for domain names. It can provide reliable name resolution for applications and services while reducing the need to operate traditional DNS servers. Administrators can create records such as A, AAAA, CNAME, and other supported DNS record types according to their requirements. Cloud Monitoring focuses on metrics and alerts, Cloud Build supports application build automation, and Cloud Run executes containerized workloads. When the primary requirement is managing DNS zones and resolving domain names, Cloud DNS is the appropriate Google Cloud service.<\/span><\/p>\n

Q95. Which Google Cloud service can build container images from source code as part of a CI\/CD workflow?<\/b><\/h3>\n

1)<\/b> Cloud Build<\/span>
\n<\/span>2)<\/b> Cloud DNS<\/span>
\n<\/span>3)<\/b> Cloud VPN<\/span>
\n<\/span>4)<\/b> Cloud Storage Transfer Service<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Build is a managed service that can execute build steps defined in configuration files. It is commonly used to compile source code, run tests, build container images, and push artifacts to supported repositories as part of a CI\/CD workflow. Cloud Build can integrate with source repositories and other Google Cloud services to automate application delivery. Cloud DNS provides DNS management, Cloud VPN provides network connectivity, and Storage Transfer Service focuses on transferring data. Cloud Build is therefore a strong choice when an organization needs an automated process for transforming source code into deployable application artifacts.<\/span><\/p>\n

Q96. Which service is designed to transfer large amounts of online data into Google Cloud Storage?<\/b><\/h3>\n

1)<\/b> Storage Transfer Service<\/span>
\n<\/span>2)<\/b> Cloud Scheduler<\/span>
\n<\/span>3)<\/b> Cloud Monitoring<\/span>
\n<\/span>4)<\/b> Cloud DNS<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Storage Transfer Service is designed to transfer data between supported storage systems and Google Cloud Storage. It is useful when organizations need to migrate or regularly transfer large amounts of online data without manually downloading and uploading files. Administrators can configure transfer jobs and schedules according to their requirements. For very large datasets where network transfer is impractical, Google Cloud also provides offline transfer options such as Transfer Appliance. Cloud Scheduler manages scheduled jobs, Cloud Monitoring handles observability, and Cloud DNS manages DNS. Storage Transfer Service is therefore appropriate for managed online data migration and transfer workflows.<\/span><\/p>\n

Q97. Which option is most appropriate for transferring a very large dataset when network transfer would take too long?<\/b><\/h3>\n

1)<\/b> Transfer Appliance<\/span>
\n<\/span>2)<\/b> Cloud DNS<\/span>
\n<\/span>3)<\/b> Cloud Functions<\/span>
\n<\/span>4)<\/b> Cloud Monitoring<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Transfer Appliance is a physical device that can be used to move large amounts of data to Google Cloud when transferring the data over a network would be impractical or take too long. An organization can load data onto the appliance and then send it to Google for ingestion into Google Cloud. This approach can be useful for large-scale migrations involving many terabytes or more, depending on the specific requirements. Cloud DNS, Cloud Functions, and Cloud Monitoring do not provide an equivalent offline data transfer capability. Transfer Appliance is therefore appropriate when physical data transfer is more practical than network-based migration.<\/span><\/p>\n

Q98. Which Google Cloud service can provide a private connection between Google Cloud and another VPC network using internal IP addresses?<\/b><\/h3>\n

1)<\/b> VPC Network Peering<\/span>
\n<\/span>2)<\/b> Cloud Scheduler<\/span>
\n<\/span>3)<\/b> Cloud Storage<\/span>
\n<\/span>4)<\/b> Cloud Logging<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

VPC Network Peering connects two VPC networks so that resources in the participating networks can communicate using internal IP addresses. This can provide private connectivity between workloads that reside in separate VPC networks while maintaining separate network administration. Peering does not merge the networks into a single administrative unit and does not automatically provide access to every resource. Cloud Scheduler manages scheduled operations, Cloud Storage provides object storage, and Cloud Logging handles logs. VPC Network Peering is therefore useful when separate VPC environments need private network connectivity without relying on public IP addresses.<\/span><\/p>\n

Q99. Which Google Cloud feature allows resources in different projects to use a centrally managed VPC network?<\/b><\/h3>\n

1)<\/b> Shared VPC<\/span>
\n<\/span>2)<\/b> Cloud CDN<\/span>
\n<\/span>3)<\/b> Cloud Scheduler<\/span>
\n<\/span>4)<\/b> Cloud Storage<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Shared VPC allows an organization to configure a VPC network in a host project and make selected subnets available to resources in service projects. This architecture provides centralized control over networking while allowing application teams to maintain separate projects for their workloads. Network administrators can manage shared network resources such as subnets, routes, and firewall rules, while service project teams deploy eligible resources into the shared environment. Cloud CDN provides content delivery, Cloud Scheduler manages scheduled jobs, and Cloud Storage stores objects. Shared VPC is particularly useful for organizations that need centralized networking across multiple Google Cloud projects.<\/span><\/p>\n

Q100. Which Google Cloud capability helps administrators understand who changed a resource configuration and when?<\/b><\/h3>\n

1)<\/b> Cloud Audit Logs<\/span>
\n<\/span>2)<\/b> Cloud Storage<\/span>
\n<\/span>3)<\/b> Cloud Run<\/span>
\n<\/span>4)<\/b> Cloud NAT<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Audit Logs provides records of activities performed on Google Cloud resources and can help administrators investigate configuration changes. Audit information can include details about the principal performing an action, the operation that occurred, and the affected resource, depending on the type of audit log. This makes audit logs valuable for security investigations, compliance requirements, operational troubleshooting, and accountability. Cloud Storage is used for object storage, Cloud Run runs containerized applications, and Cloud NAT provides outbound network address translation. When administrators need to determine who performed an administrative action and investigate changes to cloud resources, Cloud Audit Logs is an appropriate solution.<\/span><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

View Full Google Associate Cloud Engineer Exam Dumps and Practice Test Dumps   Q81. Which Google Cloud service can be used to schedule a recurring job such as an HTTP request? 1) Cloud Scheduler 2) Cloud Logging 3) Cloud Storage 4) Cloud Spanner Correct Answer: 1) Explanation: Cloud Scheduler is a fully managed service that […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12993"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12993"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12993\/revisions"}],"predecessor-version":[{"id":13024,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12993\/revisions\/13024"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12993"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12993"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12993"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}