{"id":13003,"date":"2026-09-16T05:49:58","date_gmt":"2026-09-16T05:49:58","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=13003"},"modified":"2026-09-16T05:49:58","modified_gmt":"2026-09-16T05:49:58","slug":"google-associate-cloud-engineer-practice-test-questions-and-exam-dumps-part-14-q261-280","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/google-associate-cloud-engineer-practice-test-questions-and-exam-dumps-part-14-q261-280\/","title":{"rendered":"Google Associate Cloud Engineer Practice Test Questions and Exam Dumps Part 14 Q261-280"},"content":{"rendered":"

View Full Google Associate Cloud Engineer Exam Dumps<\/a> and Practice Test Dumps<\/b><\/p>\n

 <\/p>\n

Q261. Which GKE feature automatically adjusts the number of pod replicas based on observed resource utilization?<\/b><\/h3>\n

1)<\/b> Cluster Autoscaler<\/span>
\n<\/span>2)<\/b> Horizontal Pod Autoscaler<\/span>
\n<\/span>3)<\/b> Cloud Load Balancing<\/span>
\n<\/span>4)<\/b> Managed Instance Group<\/span><\/p>\n

Correct Answer: 2)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

The GKE Horizontal Pod Autoscaler (HPA) automatically adjusts the number of pod replicas in a workload based on observed resource utilization or other supported metrics. For example, if CPU utilization increases significantly, HPA can increase the number of running pods to handle additional demand. When demand decreases, it can reduce the number of replicas. This differs from the GKE Cluster Autoscaler, which adjusts the number of nodes in the cluster rather than the number of pods. Cloud Load Balancing distributes network traffic, while managed instance groups are primarily associated with Compute Engine resources.<\/span><\/p>\n

Q262. Which GKE configuration prevents nodes from having external IP addresses while allowing workloads to communicate privately?<\/b><\/h3>\n

1)<\/b> Private cluster<\/span>
\n<\/span>2)<\/b> Public cluster<\/span>
\n<\/span>3)<\/b> Cloud CDN<\/span>
\n<\/span>4)<\/b> Cloud Scheduler<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

A GKE private cluster is designed to keep cluster nodes private by preventing them from having external IP addresses. This reduces direct exposure of nodes to the public internet and is useful for environments requiring stronger network isolation. Depending on the configuration, workloads can still access required Google Cloud services and external destinations through appropriate private networking or NAT mechanisms. A public GKE cluster can have publicly reachable node addresses, while Cloud CDN and Cloud Scheduler serve completely different purposes. Private clusters are therefore appropriate when node-level internet exposure should be minimized.<\/span><\/p>\n

Q263. Which GKE feature allows workloads to authenticate to Google Cloud services using Kubernetes identities without requiring service account key files?<\/b><\/h3>\n

1)<\/b> Workload Identity Federation for GKE<\/span>
\n<\/span>2)<\/b> Cloud NAT<\/span>
\n<\/span>3)<\/b> Cloud DNS<\/span>
\n<\/span>4)<\/b> Cloud Storage lifecycle management<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Workload Identity Federation for GKE allows Kubernetes workloads to access Google Cloud APIs using federated identities rather than relying on long-lived service account key files. This improves security by reducing the need to distribute and manage static credentials inside containers. Administrators can associate Kubernetes identities with appropriate Google Cloud identities and grant only the permissions required by the workload. Cloud NAT provides network address translation, Cloud DNS manages DNS records, and Storage lifecycle management controls object transitions and deletion. Therefore, Workload Identity Federation for GKE is the appropriate choice for secure workload authentication.<\/span><\/p>\n

Q264. Which Google Cloud service stores container images and other software packages in a managed repository?<\/b><\/h3>\n

1)<\/b> Artifact Registry<\/span>
\n<\/span>2)<\/b> Cloud Logging<\/span>
\n<\/span>3)<\/b> Cloud Scheduler<\/span>
\n<\/span>4)<\/b> Cloud Router<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Artifact Registry is a managed repository service for storing and managing software artifacts such as container images and language-specific packages. It integrates with Google Cloud services and CI\/CD workflows, allowing applications and deployment systems to retrieve artifacts securely. For example, a container image built by Cloud Build can be stored in Artifact Registry and later deployed to Cloud Run or GKE. Cloud Logging collects logs, Cloud Scheduler executes scheduled jobs, and Cloud Router provides dynamic network routing. Artifact Registry is therefore the appropriate service when an organization needs a centralized repository for application artifacts.<\/span><\/p>\n

Q265. Which Artifact Registry feature can automatically remove old or unwanted package versions according to configured rules?<\/b><\/h3>\n

1)<\/b> Cleanup policies<\/span>
\n<\/span>2)<\/b> Firewall policies<\/span>
\n<\/span>3)<\/b> IAM Conditions<\/span>
\n<\/span>4)<\/b> Cloud Router advertisements<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Artifact Registry cleanup policies allow administrators to automatically remove artifacts that meet defined conditions, such as older versions or artifacts that are no longer needed. This helps control repository growth and reduce unnecessary storage usage. Cleanup policies can be designed around artifact age, version characteristics, or other supported criteria. They are different from IAM Conditions, which control access, and firewall policies, which regulate network traffic. Cloud Router advertisements concern dynamic routing. Therefore, cleanup policies are the appropriate Artifact Registry feature for maintaining repositories and removing unnecessary artifacts automatically.<\/span><\/p>\n

Q266. Which Cloud Run feature provides a unique revision for each deployed version of a service?<\/b><\/h3>\n

1)<\/b> Cloud Run revisions<\/span>
\n<\/span>2)<\/b> VPC firewall rules<\/span>
\n<\/span>3)<\/b> BigQuery partitions<\/span>
\n<\/span>4)<\/b> Cloud DNS zones<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Run creates a new revision when a new version of a service is deployed with a changed container image, configuration, or other deployment characteristics. Each revision represents an immutable version of the service configuration and container. Administrators can use revisions for controlled deployments, rollbacks, testing, and traffic splitting. This makes it possible to maintain multiple versions and direct different amounts of traffic to them. VPC firewall rules control network traffic, BigQuery partitions organize analytical data, and Cloud DNS manages DNS records. Therefore, Cloud Run revisions are central to versioned serverless deployments.<\/span><\/p>\n

Q267. Which Cloud Run configuration is commonly used when only authenticated users should invoke a service?<\/b><\/h3>\n

1)<\/b> IAM-based authentication<\/span>
\n<\/span>2)<\/b> Public anonymous access<\/span>
\n<\/span>3)<\/b> Cloud Storage lifecycle rules<\/span>
\n<\/span>4)<\/b> BigQuery clustering<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Run can use IAM-based authentication to restrict who is allowed to invoke a service. Instead of permitting unauthenticated requests, administrators can require callers to have the appropriate IAM permission, typically through an applicable IAM role. This is useful for internal APIs, private applications, and services that should only be accessed by authorized users or workloads. Public anonymous access would make the service accessible without authentication. Cloud Storage lifecycle rules and BigQuery clustering serve unrelated purposes. IAM-based authentication therefore provides a suitable access-control mechanism for protecting Cloud Run services.<\/span><\/p>\n

Q268. Which Cloud Run setting controls how many requests a single container instance can process concurrently?<\/b><\/h3>\n

1)<\/b> Concurrency<\/span>
\n<\/span>2)<\/b> Region<\/span>
\n<\/span>3)<\/b> Revision name<\/span>
\n<\/span>4)<\/b> DNS TTL<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Run concurrency controls the maximum number of requests that a single container instance can handle at the same time. Adjusting concurrency can affect application performance, resource utilization, and the number of instances Cloud Run needs to run. Applications that are CPU-intensive or not designed for multiple simultaneous requests may benefit from a lower concurrency setting. Applications capable of efficiently handling multiple requests may use higher concurrency to improve resource utilization. Region, revision name, and DNS TTL do not determine request concurrency. Therefore, concurrency is the appropriate Cloud Run setting for this requirement.<\/span><\/p>\n

Q269. Which Cloud Build capability automatically starts a build when changes are pushed to a connected source repository?<\/b><\/h3>\n

1)<\/b> Build trigger<\/span>
\n<\/span>2)<\/b> Persistent Disk snapshot<\/span>
\n<\/span>3)<\/b> Cloud NAT<\/span>
\n<\/span>4)<\/b> VPC Peering<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Build triggers can automatically start build processes when specified events occur in a connected source-code repository. For example, a trigger can start a build when developers push changes to a particular branch. This supports continuous integration by automating application builds and related validation tasks. Triggers can be configured with repository events and build configuration files to control what happens during execution. Persistent Disk snapshots protect VM disk data, Cloud NAT provides outbound connectivity, and VPC Peering connects VPC networks. Therefore, Cloud Build triggers are the appropriate mechanism for automatically starting builds from source-code changes.<\/span><\/p>\n

Q270. Which service is best suited for securely storing application passwords, API keys, and other sensitive credentials?<\/b><\/h3>\n

1)<\/b> Secret Manager<\/span>
\n<\/span>2)<\/b> Cloud Storage<\/span>
\n<\/span>3)<\/b> Cloud DNS<\/span>
\n<\/span>4)<\/b> Cloud Scheduler<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Secret Manager is designed to securely store sensitive information such as passwords, API keys, certificates, and other application secrets. It provides centralized secret storage, versioning, access control through IAM, and auditing capabilities. Applications can retrieve secrets at runtime instead of embedding credentials directly into source code or configuration files. This reduces the risk of accidentally exposing sensitive information. Cloud Storage is designed for object data, Cloud DNS manages DNS information, and Cloud Scheduler runs scheduled jobs. Therefore, Secret Manager is the appropriate Google Cloud service for centralized management of application credentials.<\/span><\/p>\n

Q271. Which Google Cloud service provides centralized collection and analysis of application and infrastructure logs?<\/b><\/h3>\n

1)<\/b> Cloud Logging<\/span>
\n<\/span>2)<\/b> Cloud SQL<\/span>
\n<\/span>3)<\/b> Cloud NAT<\/span>
\n<\/span>4)<\/b> Cloud KMS<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Logging provides centralized collection, storage, search, and analysis capabilities for logs generated by Google Cloud resources and supported applications. Administrators can use Logs Explorer to investigate events, troubleshoot failures, and understand system behavior. Log sinks can also route selected logs to supported destinations for retention or analysis. Cloud SQL provides managed databases, Cloud NAT provides network address translation, and Cloud KMS manages cryptographic keys. Cloud Logging is therefore the appropriate service when an administrator needs centralized visibility into application, infrastructure, and service logs.<\/span><\/p>\n

Q272. Which Cloud Logging component determines where selected log entries are routed for storage or analysis?<\/b><\/h3>\n

1)<\/b> Log sink<\/span>
\n<\/span>2)<\/b> Instance template<\/span>
\n<\/span>3)<\/b> Cloud Router<\/span>
\n<\/span>4)<\/b> Service account<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

A Cloud Logging log sink defines a routing configuration that sends selected log entries to a supported destination. Administrators can use sinks to route logs to locations such as Cloud Storage, BigQuery, or Pub\/Sub, depending on the required architecture and use case. A sink includes a filter that determines which logs should be exported. This allows organizations to retain, analyze, or process selected logs outside the default logging environment. Instance templates define VM configurations, Cloud Router handles dynamic routing, and service accounts provide identities. Therefore, a log sink is the correct choice.<\/span><\/p>\n

Q273. Which Google Cloud tool provides a web-based environment with command-line utilities already configured for managing resources?<\/b><\/h3>\n

1)<\/b> Cloud Shell<\/span>
\n<\/span>2)<\/b> Cloud CDN<\/span>
\n<\/span>3)<\/b> Cloud SQL<\/span>
\n<\/span>4)<\/b> Cloud Armor<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Cloud Shell provides a browser-accessible command-line environment for managing Google Cloud resources. It includes commonly used tools such as the Google Cloud CLI and provides a temporary shell environment that can be accessed from the Google Cloud Console. This is convenient when administrators need to run commands without installing and configuring the Cloud SDK locally. Cloud SQL manages relational databases, Cloud CDN provides content caching, and Cloud Armor provides application protection. Therefore, Cloud Shell is the most appropriate choice when a user needs an immediately available command-line environment for Google Cloud administration.<\/span><\/p>\n

Q274. Which command-line tool is primarily used to manage Google Cloud resources from a terminal?<\/b><\/h3>\n

1)<\/b> gcloud<\/span>
\n<\/span>2)<\/b> kubectl<\/span> only<\/span>
\n<\/span>3)<\/b> npm<\/span>
\n<\/span>4)<\/b> git<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

The <\/span>gcloud<\/span> command-line tool is the primary Google Cloud CLI used to manage many Google Cloud resources and services from a terminal. Administrators can use it to create, update, inspect, and delete supported resources, configure projects, authenticate, and perform many other cloud-management operations. <\/span>kubectl<\/span> is specifically focused on Kubernetes resource management, while <\/span>git<\/span> manages source-code repositories and <\/span>npm<\/span> manages Node.js packages. Therefore, <\/span>gcloud<\/span> is the appropriate command-line tool when the task involves general administration of Google Cloud resources.<\/span><\/p>\n

Q275. Which Compute Engine option provides temporary virtual machines at a lower cost but allows Google Cloud to reclaim them when capacity is needed?<\/b><\/h3>\n

1)<\/b> Spot VMs<\/span>
\n<\/span>2)<\/b> Sole-tenant nodes<\/span>
\n<\/span>3)<\/b> Standard persistent disks<\/span>
\n<\/span>4)<\/b> Static external IP addresses<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Spot VMs are Compute Engine virtual machines intended for workloads that can tolerate interruption. They can provide significant cost savings compared with regular VM instances, but Google Cloud can reclaim their capacity when needed. They are therefore appropriate for fault-tolerant batch processing, distributed workloads, testing, and other applications that can restart or continue elsewhere. Sole-tenant nodes address physical isolation requirements, persistent disks provide storage, and static external IP addresses provide stable network addressing. Spot VMs should not be selected for workloads that require uninterrupted availability unless the application architecture can tolerate potential interruptions.<\/span><\/p>\n

Q276. Which Compute Engine feature provides physical isolation by placing VM instances on dedicated hardware for a customer?<\/b><\/h3>\n

1)<\/b> Sole-tenant nodes<\/span>
\n<\/span>2)<\/b> Cloud CDN<\/span>
\n<\/span>3)<\/b> Cloud Scheduler<\/span>
\n<\/span>4)<\/b> BigQuery clustering<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Sole-tenant nodes provide dedicated physical infrastructure for a customer’s Compute Engine VM instances. They are useful when workloads have requirements involving physical isolation, licensing, compliance, or other constraints related to dedicated hardware. Instead of sharing physical hosts with unrelated customers, instances can run on hardware reserved for the organization. This is different from Spot VMs, which focus on discounted and interruptible compute capacity. Cloud CDN, Cloud Scheduler, and BigQuery clustering serve networking, automation, and analytics purposes respectively. Therefore, sole-tenant nodes are appropriate when dedicated physical infrastructure is required.<\/span><\/p>\n

Q277. Which Compute Engine feature allows administrators to apply a script automatically when a VM starts?<\/b><\/h3>\n

1)<\/b> Startup script<\/span>
\n<\/span>2)<\/b> Cloud Armor policy<\/span>
\n<\/span>3)<\/b> BigQuery view<\/span>
\n<\/span>4)<\/b> Cloud DNS zone<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

A Compute Engine startup script is executed when a VM instance starts and can be used to automate initialization tasks. For example, a startup script can install software, configure services, create directories, or prepare an application environment. Startup scripts can be supplied through supported VM metadata mechanisms and are useful for automating repeatable instance configuration. Cloud Armor policies protect applications, BigQuery views provide query-based access to data, and Cloud DNS zones manage DNS records. Therefore, a startup script is the correct Compute Engine feature when initialization commands need to run automatically at VM startup.<\/span><\/p>\n

Q278. Which Compute Engine resource allows administrators to define a reusable VM configuration for creating multiple similar instances?<\/b><\/h3>\n

1)<\/b> Instance template<\/span>
\n<\/span>2)<\/b> Cloud NAT gateway<\/span>
\n<\/span>3)<\/b> BigQuery dataset<\/span>
\n<\/span>4)<\/b> Cloud DNS private zone<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

An instance template defines reusable configuration information for Compute Engine VM instances. It can specify settings such as machine type, boot disk image, service account, network configuration, labels, and other supported properties. Instance templates are commonly used with managed instance groups so that multiple instances can be created consistently. This improves automation and reduces configuration differences between machines. Cloud NAT provides outbound connectivity, BigQuery datasets organize analytical resources, and Cloud DNS private zones manage internal DNS. Therefore, an instance template is the appropriate resource when administrators need a standardized VM configuration for repeated deployments.<\/span><\/p>\n

Q279. Which Compute Engine feature automatically replaces an unhealthy VM in a managed instance group?<\/b><\/h3>\n

1)<\/b> Autohealing<\/span>
\n<\/span>2)<\/b> Cloud CDN<\/span>
\n<\/span>3)<\/b> Object Versioning<\/span>
\n<\/span>4)<\/b> Cloud KMS<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Managed instance group autohealing can detect unhealthy VM instances using health checks and recreate them when they fail the configured health criteria. This helps maintain the desired number of healthy instances and improves application availability. Autohealing is different from autoscaling: autoscaling changes the number of instances according to workload demand, while autohealing focuses on replacing unhealthy instances. Cloud CDN caches content, Object Versioning manages Cloud Storage object versions, and Cloud KMS manages encryption keys. Therefore, autohealing is the correct feature when unhealthy instances need to be automatically replaced.<\/span><\/p>\n

Q280. Which Google Cloud service can provide recommendations for improving resource utilization, cost, and performance?<\/b><\/h3>\n

1)<\/b> Recommender<\/span>
\n<\/span>2)<\/b> Cloud DNS<\/span>
\n<\/span>3)<\/b> Cloud VPN<\/span>
\n<\/span>4)<\/b> Cloud Storage<\/span><\/p>\n

Correct Answer: 1)<\/b><\/p>\n

Explanation:<\/b><\/p>\n

Google Cloud Recommender provides recommendations and insights that can help administrators optimize cloud resources. Depending on the supported recommender type, suggestions may address areas such as cost optimization, resource utilization, security, reliability, or performance. These recommendations can help organizations identify resources that may be oversized, underused, or configured in ways that could be improved. Cloud DNS handles domain name resolution, Cloud VPN provides encrypted network connectivity, and Cloud Storage provides object storage. Therefore, Recommender is the appropriate service when administrators want actionable insights for improving Google Cloud resource management.<\/span><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

View Full Google Associate Cloud Engineer Exam Dumps and Practice Test Dumps   Q261. Which GKE feature automatically adjusts the number of pod replicas based on observed resource utilization? 1) Cluster Autoscaler 2) Horizontal Pod Autoscaler 3) Cloud Load Balancing 4) Managed Instance Group Correct Answer: 2) Explanation: The GKE Horizontal Pod Autoscaler (HPA) automatically […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/13003"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=13003"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/13003\/revisions"}],"predecessor-version":[{"id":13015,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/13003\/revisions\/13015"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=13003"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=13003"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=13003"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}