UUS Practice Tests⌕ Search
IT Certifications

Google Cloud Cloud Engineer Certification Exam Practice Test

Google Cloud Cloud Engineer practice focuses on deploying and operating cloud resources, managing access, and connecting applications and data services. The available questions use scenarios involving Compute Engine, Google Kubernetes Engine, Cloud Storage, messaging, scheduling, database selection, resource-change history, and network connectivity. They emphasize choosing configurations that meet operational needs while limiting unnecessary administrative overhead.

Exam overview

Exam providerGoogle Cloud
Exam codeNot listed
CategoryIT Certifications

About the Google Cloud Cloud Engineer Certification Exam

Cloud engineering work involves selecting managed services and deciding which infrastructure components a team must configure and maintain. Scenarios may require distinguishing Kubernetes management options, protecting virtual machines from accidental deletion, or choosing a relational database for transactional workloads. Identity and access decisions include granting time-limited project access and using attached service accounts so workloads can access storage without embedded keys. Other practical tasks include selecting messaging for asynchronous processing, scheduling recurring HTTP-triggered work, reviewing resource changes, enforcing container-image deployment policies, and connecting a data center to cloud resources. For each situation, identify the requirement first—such as reduced node management, controlled deployment, audit visibility, or private connectivity—then match it to the service or configuration that addresses it.

Sample Practice Questions

Review a selection from this exam's published US Practice Tests practice bank.

Question 1

A team wants a managed Kubernetes control plane and worker nodes, and it wants to choose how much responsibility it retains for managing the nodes. Which Google Cloud service should it use?

  1. AGoogle Kubernetes Engine
  2. BCloud Run
  3. CCompute Engine instance templates
  4. DCloud Functions
Show answerCorrect answer: A

Google Kubernetes Engine is Google Cloud’s managed Kubernetes service. It provides cluster management options, including different levels of node-management responsibility; the other choices are not managed Kubernetes services.

Question 2

An organization wants to prevent accidental deletion of a Compute Engine VM while preserving the ability for authorized administrators to delete it after explicitly changing its protection setting. What should be enabled?

  1. ADeletion protection on the VM
  2. BA startup script that restarts the VM
  3. CA snapshot schedule only
  4. DA firewall rule that denies ingress
Show answerCorrect answer: A

Compute Engine deletion protection blocks deletion of a protected VM until deletion protection is disabled. It is a safeguard against accidental deletion, not a replacement for backups or IAM controls.

Question 3

A data processing job must read messages from a managed messaging system and acknowledge each message after processing. Which Google Cloud service provides this messaging capability?

  1. APub/Sub
  2. BCloud DNS
  3. CArtifact Registry
  4. DCloud Monitoring
Show answerCorrect answer: A

Pub/Sub is a managed messaging service that lets publishers send messages to topics and subscribers receive and acknowledge them, supporting asynchronous processing.

Question 4

An organization wants to review configuration changes made to Google Cloud resources over time, including changes made through the console or API. Which capability should it use?

  1. ACloud Audit Logs
  2. BCloud Profiler
  3. CCloud Trace
  4. DCloud Scheduler
Show answerCorrect answer: A

Cloud Audit Logs record administrative and other access activity in Google Cloud, helping organizations investigate who performed actions and when.

Question 5

A team needs to run a short script every night at a set time and have it invoke an HTTP endpoint. Which service is designed to schedule that task?

  1. ACloud Scheduler
  2. BCloud Armor
  3. CCloud CDN
  4. DCloud Interconnect
Show answerCorrect answer: A

Cloud Scheduler is a managed cron-style service that can trigger scheduled jobs, including HTTP requests to application endpoints.

Question 6

A company wants to give a contractor access to one Google Cloud project for a limited period and then remove that access. What is the appropriate way to manage the contractor’s access?

  1. ACreate a service account key and send it to the contractor
  2. BAdd the contractor’s identity to the project with an appropriate IAM role, then remove the binding when access ends
  3. CMake the project publicly accessible and share its project ID
  4. DGrant the contractor the Owner role on the organization
Show answerCorrect answer: B

IAM bindings associate an identity with a role on a resource. Granting only the needed role at the project scope and removing the binding when access ends follows least-privilege and supports individual access management.

Question 7

An application needs to store and retrieve small structured records using SQL, with transactions and a managed relational database that can scale globally. Which service is designed for this use case?

  1. ACloud Spanner
  2. BCloud Storage
  3. CMemorystore
  4. DBigQuery
Show answerCorrect answer: A

Cloud Spanner is a managed relational database service that supports SQL, transactions, and horizontal scaling across regions. The question distinguishes it from general object storage, in-memory caching, and analytics warehousing.

How to use this practice test

The free practice session draws up to 20 random questions from the 50-question bank. Work through each scenario by identifying its operational requirement before choosing a service or access control. Results appear after the session, helping you review choices across the available question set.

Preparation tips

  • Compare Google Kubernetes Engine operating options by the control retained over node configuration and maintenance.
  • Practice least-privilege access decisions, including temporary project roles and VM access to Cloud Storage through an attached service account rather than a stored key.
  • For infrastructure scenarios, distinguish VM deletion protection, resource-change auditing, and container-image deployment enforcement by the specific risk each addresses.
  • Map workload needs to services: asynchronous message delivery, scheduled HTTP invocation, transactional relational data, and dedicated data-center connectivity.
  • When reviewing each practice result, explain why the selected service fits the stated requirement and why nearby alternatives do not.
Official sourceOfficial exam page ↗