Google Cloud Associate Cloud Engineer — Deploying and Operating flashcards
10 of 79 cards free to study here · 3 topics · the whole deck is built into Willys
Instance templates, MIGs and autoscaling, GKE and kubectl, Cloud Run, Cloud Storage lifecycle and signed URLs, data loading, peering, Shared VPC, VPN, DNS and Cloud NAT, Terraform, snapshots and images, monitoring, logging and IAM troubleshooting.
Learn deck · part of Google Cloud Associate Cloud Engineer · written against: Associate Cloud Engineer exam guide (current). Updated 2026-10-10.
Study the free sample
10 cards from the deck as they are. Flip, rate yourself, filter by topic; your progress stays in this browser.
Tap the card or press Space to flip
The 10 sample cards as a list
-
A managed instance group needs a new machine type. Can its instance template be edited?No — instance templates are immutable. Create a new template and roll it out to the group with an update.Planning and Implementing › Compute Engine Deployment
-
Which kind of instance group supports autoscaling, autohealing and rolling updates?A managed instance group (MIG); unmanaged groups just collect existing, possibly different VMs for load balancing.Planning and Implementing › Compute Engine Deployment
-
A MIG should recreate any VM whose application stops responding, not just VMs that crash. What is configured?Autohealing with an application health check; instances that fail it are recreated.Planning and Implementing › Compute Engine Deployment
-
Zonal versus regional managed instance group: which survives a zone outage?A regional MIG, which spreads instances across several zones in the region.Planning and Implementing › Compute Engine Deployment
-
Are Persistent Disk snapshots full copies every time?No. After the first, snapshots are incremental, storing only changed blocks, yet any snapshot can restore the whole disk.Operations › Snapshots and Images
-
Which command takes a snapshot of a zonal Persistent Disk?Operations › Snapshots and Images
gcloud compute disks snapshot my-disk --zone=us-central1-a -
Disks should be snapshotted every night and old snapshots deleted automatically. What is attached to the disks?A snapshot schedule (a resource policy) with a frequency and retention period.Operations › Snapshots and Images
-
A user says they cannot read a bucket. Which tool explains whether a principal has a permission on a resource, and why?The Policy Troubleshooter, which checks allow and deny policies along the hierarchy for that principal and permission.Access and Security › IAM Audit and Troubleshooting
-
Security asks which principals have access to a particular BigQuery dataset across the organization. Which tool?Policy Analyzer (in Cloud Asset Inventory), which answers who-can-access-what questions.Access and Security › IAM Audit and Troubleshooting
-
Which feature suggests removing permissions that principals have not used, to move toward least privilege?IAM role recommendations from the IAM Recommender, based on observed permission use.Access and Security › IAM Audit and Troubleshooting
Unlock the whole deck
You are studying a free 10-card sample. All 79 cards of Google Cloud Associate Cloud Engineer — Deploying and Operating, the other 2 Google Cloud Associate Cloud Engineer decks, and spaced-repetition scheduling are built into Willys. 14-day free trial, then $14.99 a year.
In Willys, tap Exam Library at the top of your Decks (or Browse Exam Library… under the + button), find the exam on its shelf or by search, tick it and tap Add.
More Google Cloud Associate Cloud Engineer decks
← All Google Cloud Associate Cloud Engineer decks, with the study guide and topic outline.
About these cards
Review status: Second-reader reviewed, with corrections applied.
Checked against:
- Checked against the Google Cloud Associate Cloud Engineer exam guide, planning and implementing, operations and access sections — topic outline only; no text copied.
- Checked against Google Cloud documentation for Compute Engine instance groups, GKE, kubectl, Cloud Run, Cloud Storage, Storage Transfer Service, VPC, Cloud VPN, Cloud Interconnect, Cloud DNS, Cloud NAT, Infrastructure Manager, Cloud Monitoring, Cloud Logging and IAM tools (reference only; no sentences reproduced).
These are independent study notes written for Willys. They are not official exam material, may contain mistakes, and are no substitute for your course, your teacher or the exam owner's own publications. Found an error? Tell us — corrections ship as a new version of the deck.
Google Cloud is a trademark of Google LLC. This product is not affiliated with, sponsored by, or endorsed by Google.
Use of these pages is covered by our Terms of Use.