Free practice · No sign-up required
15 questions with answer explanations. Choose an answer below to begin.
Which Google Cloud service provides a fully managed environment for deploying containerized applications?
Understand serverless container execution environments
0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.
Learn by doing
Use official documentation and hands-on labs to work through topics you missed.
Terraform modules and infrastructure blueprints for advanced exploration of Google Cloud design. This is supporting engineering material, not an exam course.
Try it: Read one small VPC or service-account module. Draw the resources and permission boundaries it creates, and explain a least-privilege change without deploying an entire landing zone.
Reading the code is free. Deployment requires suitable permissions and can create billable infrastructure.
Official certification paths with exam-specific guides and preparation links for cloud roles.
Try it: Open the guide for your chosen role. For each weak domain, write one service-selection decision you cannot yet explain and find its product documentation.
Public certification information is free; training, labs, and exam registration may be paid.
Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.
Which Google Cloud service provides a fully managed environment for deploying containerized applications?
Cloud Run
Cloud Functions
Compute Engine
Cloud Storage
Correct answer
Cloud Run
Cloud Run is a fully managed service that automatically scales containerized applications. It allows you to run stateless containers without managing infrastructure.
What is the purpose of a Virtual Private Cloud (VPC) in Google Cloud?
To isolate resources in a private network
To store backup snapshots
To manage user identities
To monitor application performance
Correct answer
To isolate resources in a private network
A VPC provides a logically isolated section of the cloud for your resources. It allows you to define IP ranges and control internal and external connectivity.
Which Google Cloud tool helps you estimate the cost of using cloud resources?
Pricing Calculator
Cloud Monitoring
Cloud Logging
Cloud Shell
Correct answer
Pricing Calculator
The Pricing Calculator lets you build a cost estimate by selecting products and configuring usage details. It is useful for budgeting before deployment.
What does IAM primarily manage in Google Cloud?
Access control for users and service accounts
Network traffic routing
Data encryption keys
Application deployment pipelines
Correct answer
Access control for users and service accounts
IAM controls who (identity) has what access (role) to which resources. It is fundamental for security and governance.
Which resource is best suited for storing structured data with strong consistency and complex queries?
Cloud SQL
Cloud Storage
Memorystore
Bigtable
Correct answer
Cloud SQL
Cloud SQL provides a managed relational database service. It supports structured data with ACID transactions and standard SQL queries.
What is a common use case for Cloud Functions?
Running event-driven code in response to changes in data
Hosting a static website with global CDN
Providing persistent compute for long-running tasks
Storing large binary objects
Correct answer
Running event-driven code in response to changes in data
Cloud Functions lets you run code in response to events such as file uploads or database updates. It is serverless and scales automatically.
Which Google Cloud service provides a fully managed NoSQL database?
Cloud Firestore
Cloud SQL
BigQuery
Cloud Spanner
Correct answer
Cloud Firestore
Cloud Firestore is a flexible, scalable NoSQL database for mobile, web, and server development. It handles document storage with automatic scaling.
What is the primary benefit of using resource labels in Google Cloud?
Organizing resources for billing and management
Increasing compute performance
Encrypting data at rest
Automating code deployment
Correct answer
Organizing resources for billing and management
Labels are key-value pairs attached to resources. They help you categorize resources for cost tracking, ownership, and operational organization.
Which service allows you to run virtual machines on Google Cloud?
Compute Engine
App Engine
Cloud Functions
Cloud Run
Correct answer
Compute Engine
Compute Engine provides scalable virtual machines (VMs) on Google Cloud. You have full control over the operating system and installed software.
What is a prerequisite for enabling billing on a Google Cloud project?
A valid payment method
A registered domain name
A deployed application
An active support plan
Correct answer
A registered domain name
Billing must be enabled for most services to be used. You need to add a payment method to your Google Cloud account to enable billing.
Which Google Cloud service is best for data warehousing and analytics?
BigQuery
Cloud Storage
Cloud SQL
Memorystore
Correct answer
BigQuery
BigQuery is a serverless, highly scalable data warehouse designed for large-scale analytics. It supports SQL queries over massive datasets efficiently.
What does a service account primarily represent in Google Cloud?
An automated identity for applications to interact with Google Cloud APIs
A human user signing in with a password
A temporary credential for SSH access
A network endpoint for load balancing
Correct answer
An automated identity for applications to interact with Google Cloud APIs
Service accounts are used by applications and compute engines to authenticate and call Google APIs. They are not tied to a person.
Which feature helps you control network access to your Google Cloud resources?
Firewall rules
IAM roles
Cloud Logging
Cloud Monitoring
Correct answer
Firewall rules
Firewall rules define allowed or denied traffic to instances based on protocols, ports, and source/destination IP ranges. They are essential for network security.
What is a common method to improve application availability in Google Cloud?
Deploying resources across multiple zones
Using a single static IP address
Storing all data in one region
Disabling automatic backups
Correct answer
Deploying resources across multiple zones
High availability is often achieved by distributing resources across multiple zones within a region. This protects against zone-level failures.
Which Google Cloud service provides automated monitoring and diagnostics for applications?
Cloud Logging
Cloud Monitoring
Cloud Trace
Cloud Debug
Correct answer
Cloud Monitoring
Cloud Monitoring provides automated monitoring, dashboards, and diagnostics for applications and services running on Google Cloud.
Recall the answer before opening each card.
Cloud Run. It automatically scales stateless containers, charging only for request time, not idle capacity. Ideal for HTTP-driven containerized apps.
To isolate resources in a private network. VPCs let you define IP ranges, subnets, and control internal/external connectivity for your cloud resources.
Pricing Calculator. It allows you to select products, configure usage, and generate a monthly cost estimate for budgeting and comparison.
Access control for users and service accounts. IAM defines who (identity) has what access (role) to which resources, enabling least privilege security.
Cloud SQL. It is a managed relational database (MySQL, PostgreSQL, SQL Server) supporting ACID transactions and standard SQL queries.
Running event-driven code in response to data changes, such as file uploads to Cloud Storage or updates in Firestore. It is serverless and auto-scales.
Cloud Firestore. It is a flexible, scalable document database for mobile, web, and server development, with automatic scaling and real-time capabilities.
Organizing resources for billing and management. Labels are key-value pairs that help categorize resources for cost tracking, ownership, and operations.
Compute Engine. It provides scalable VMs with full control over the OS and installed software, billed per second.
A registered payment method (e.g., credit card). Billing must be active for most Google Cloud services to be provisioned.
BigQuery. It is a serverless, highly scalable data warehouse that executes SQL queries on massive datasets efficiently.
An automated identity for applications to interact with Google Cloud APIs. It is used by VMs, Cloud Functions, and other services to authenticate without user credentials.
Firewall rules. They define allowed or denied traffic to instances based on protocols, ports, and source/destination IP ranges.
Deploying resources across multiple zones. This protects against zone-level failures, ensuring higher availability and resilience.
Cloud Monitoring. It offers dashboards, alerts, and diagnostics for applications and services running on Google Cloud.
Cloud Run runs containerized APIs that scale based on request load; Cloud Functions executes small code snippets in response to events. Cloud Run supports any runtime; Cloud Functions is limited to supported languages.
IAM provides fine-grained, platform-wide access control across all Google Cloud services, supporting roles for users, groups, and service accounts. It is more scalable and auditable than resource-level ACLs.
Labels allow you to group resources by project, environment, or cost center. Billing reports can then show costs per label, enabling chargeback and budget tracking.
Cloud SQL is managed, handling backups, replication, patching, and scaling. This reduces operational overhead and ensures high availability with minimal effort.
Define ingress firewall rules to deny traffic by default and allow only specific IP ranges and ports (e.g., port 80 for HTTP). Also, use service accounts to limit API access.
Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.
Card 1 of 20
1 reviewed this session
Connect the concepts
Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.
This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.
The practice bank tests your understanding of Google Cloud's compute options. Cloud Run is a fully managed container platform ideal for stateless, auto-scaling containerized applications. Cloud Functions provides serverless execution in response to events, such as file uploads or database changes. Compute Engine offers virtual machines with full control over OS and software. The key decision factor is the level of management required: serverless (Cloud Run, Cloud Functions) abstracts infrastructure, while Compute Engine gives granular control. Choose Cloud Run for containerized workloads without cluster management, Cloud Functions for event-driven code, and Compute Engine for custom environments or legacy applications.
This section covers data storage services. Cloud SQL is a managed relational database (MySQL, PostgreSQL, SQL Server) offering strong consistency and complex queries, suitable for structured data with ACID transactions. Cloud Firestore is a NoSQL document database for flexible, scalable storage, ideal for mobile and web apps. BigQuery is a serverless data warehouse for large-scale analytics, handling SQL queries on massive datasets efficiently. The choice depends on data structure: relational for SQL, NoSQL for high scalability with flexible schema, and data warehouse for analytical workloads. The practice bank emphasizes selecting the right service for the scenario.
The practice bank covers core networking and security concepts. A Virtual Private Cloud (VPC) logically isolates your cloud resources, allowing you to define IP ranges and connectivity. Firewall rules control traffic to instances based on protocols, ports, and IPs. IAM manages access control by granting roles to users or service accounts, ensuring least privilege. Service accounts are automated identities for applications to call APIs. Labels organize resources for billing and management, though not strictly security. Understanding these components is essential for designing secure, well-architected solutions on Google Cloud.
This section focuses on operational tools. Cloud Monitoring provides automated monitoring, dashboards, and diagnostics for applications and infrastructure. The Pricing Calculator helps estimate costs before deployment, aiding budgeting. Enabling billing on a project requires adding a payment method. High availability is achieved by deploying resources across multiple zones in a region, protecting against zone failures. Labels facilitate cost allocation and management. The practice bank reinforces the importance of proactive cost estimation, monitoring, and design for resilience. These skills are vital for ongoing cloud operations and governance.
Study workflow
For each major service (Cloud Run, Compute Engine, Cloud Functions, Cloud SQL, Cloud Firestore, BigQuery), create a one-page summary including use cases, advantages, and limitations. Practice explaining when to choose one over another. This builds the pattern-matching skill tested in the practice set.
Study predefined roles (e.g., Viewer, Editor, Owner) and how to create custom roles. Understand service account use cases: granting API access to VMs or Cloud Functions. Use the practice bank's IAM question to reinforce the concept of identity-based access control.
Create a VPC with subnets, set firewall rules to allow HTTP/HTTPS traffic, and verify connectivity. Use the Pricing Calculator to estimate a small deployment. These exercises mirror the decisions in the practice set, like configuring network access and planning costs.
Use the practice set questions as scenarios. For each, identify key words: 'fully managed containers' -> Cloud Run, 'event-driven' -> Cloud Functions, 'structured data with complex queries' -> Cloud SQL. Create your own scenarios and test your ability to map requirements to the correct service.
Review how to deploy a Compute Engine instance across two zones and set up a load balancer. Configure Cloud Monitoring to track CPU usage and set up an alert. This reinforces the multi-zone deployment and monitoring concepts from the practice set.
FAQ
Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.
Cloud Run runs containerized applications without managing infrastructure, auto-scaling, and billing only for request time. Compute Engine provides virtual machines with full control over OS and software, charged per second of uptime. Choose Cloud Run for stateless HTTP-driven apps; use Compute Engine for custom environments or persistent workloads.
Use Cloud SQL for structured data requiring complex queries, ACID transactions, and relational integrity (e.g., order management). Use Cloud Firestore for flexible, schema-less data needing real-time sync and massive scalability, typical in mobile or web apps (e.g., user profiles, chat). The key factor is data structure and consistency needs.
A service account is an identity for applications or compute instances to authenticate to Google Cloud APIs. Unlike user accounts, they are not tied to a person. For example, a Compute Engine VM can use a service account to access Cloud Storage without storing keys. IAM roles are assigned to service accounts to grant permissions.
Firewall rules are applied at the VPC network level. Each rule specifies a direction (ingress/egress), target instances (by tags or service accounts), source/destination IP ranges, protocols, and ports. If no rule matches, traffic is denied. You can allow or deny traffic, and rules are stateful for connections initiated from instances.
Use the Google Cloud Pricing Calculator. Select the services you plan to use, configure details like region, machine type, storage size, and expected usage, then get a monthly estimate. This tool is essential for budgeting and comparing configurations before deploying actual resources.
Browse another free bank or use the study strategy guide to turn your misses into spaced review.
