Start learning →

GCP Associate Cloud Engineer Cloudcomputing — practice by topic

Browse 6 questions across 3 Cloudcomputing topics. Choose what you want to revise, then open a question to check its answer and worked solution.

Start learning GCP Associate Cloud Engineer with Quill →

Cloudcomputing topics

Gcpsetup (3)Gcpresources (2)Gcpsecurity (1)

Try a Cloudcomputing question

What is the smallest unit at which most Google Cloud resources (Compute Engine VMs, Cloud Storage buckets, BigQuery datasets) are created and billed?Read the answer and worked solution →Which Google Cloud Identity and Access Management (IAM) concept defines a SET of permissions that can be granted to a principal?Read the answer and worked solution →Which Google Cloud principal type is meant to authenticate workloads (e.g. a Compute Engine VM calling Cloud Storage) rather than humans?Read the answer and worked solution →Which Google Cloud compute service provides standard virtual machine instances that you provision, configure, and manage yourself?Read the answer and worked solution →

Worked practice questions

What is the smallest unit at which most Google Cloud resources (Compute Engine VMs, Cloud Storage buckets, BigQuery datasets) are created and billed?

  1. A Region
  2. An Organization node
  3. A Project
  4. A Billing Account
Show answer and solution

Correct answer: C. A Project

Almost every Google Cloud resource lives inside a Project. Organizations contain folders and projects Billing Accounts pay for projects Regions describe geography. The Project is the unit of resource ownership, IAM, quota, and billing.

Open this question →

Which Google Cloud Identity and Access Management (IAM) concept defines a SET of permissions that can be granted to a principal?

  1. A Project
  2. A Network endpoint
  3. A Persistent Disk
  4. A Role (predefined, basic, or custom)
Show answer and solution

Correct answer: D. A Role (predefined, basic, or custom)

An IAM role bundles permissions (e.g. `compute.instances.start`). You bind a role to a principal (user, group, service account) at a scope to grant access. Projects, network endpoints, and disks are resources — not permission sets.

Open this question →

Which Google Cloud principal type is meant to authenticate workloads (e.g. a Compute Engine VM calling Cloud Storage) rather than humans?

  1. A Cloud NAT gateway
  2. An Organization policy
  3. A Folder
  4. A Service Account
Show answer and solution

Correct answer: D. A Service Account

Service Accounts are non-human identities used by VMs, functions, and workloads to authenticate to Google Cloud APIs. Organization policies are governance rules, folders are hierarchy containers, Cloud NAT is networking — none represent workload identity.

Open this question →

How to practise

  1. Choose a Cloudcomputing question and try to work out your answer.
  2. Open the question to check the correct answer and read its worked solution.
  3. Continue in the app for bite-sized lessons, explanations and review with Quill. You can start without creating an account.