Careers & certifications

Google Cloud Associate Cloud Engineer — Setup and Planning flashcards

10 of 78 cards free to study here · 3 topics · the whole deck is built into Willys

Organization, folders and projects, billing accounts and budgets, gcloud setup, choosing compute, storage and databases, VPC and firewall planning, load balancer types, IAM role kinds and service account best practice.

Learn deck · part of Google Cloud Associate Cloud Engineer · written against: Associate Cloud Engineer exam guide (current). Updated 2026-10-10.

Study the free sample

10 cards from the deck as they are. Flip, rate yourself, filter by topic; your progress stays in this browser.

The 10 sample cards as a list
  1. What are the levels of the Google Cloud resource hierarchy, from top to bottom?
    Organization, then optional nested folders, then projects, then the resources inside each project.
    Setting Up the Environment › Resource Hierarchy
  2. A company wants an Organization node so it can manage all its projects centrally. What does it need first?
    A Google Workspace or Cloud Identity account for its domain; the Organization resource is tied to that identity.
    Setting Up the Environment › Resource Hierarchy
  3. Project name, project ID and project number — which one can be changed later?
    Only the project name. The project ID (globally unique, chosen at creation) and the project number (assigned by Google) are permanent.
    Setting Up the Environment › Resource Hierarchy
  4. An IAM role granted on a folder — which resources does it apply to?
    Every project and resource beneath that folder. Allow policies are inherited down the hierarchy.
    Setting Up the Environment › Resource Hierarchy
  5. A legacy app needs a specific OS, custom kernel settings and software installed by hand. Which compute option?
    Compute Engine — IaaS virtual machines with full control of the operating system.
    Planning and Implementing › Choosing Compute
  6. A team runs many microservices in containers and needs Kubernetes features such as custom controllers and DaemonSets. Which service?
    Google Kubernetes Engine (GKE).
    Planning and Implementing › Choosing Compute
  7. A stateless containerised HTTP API should scale to zero when idle and bill only while serving. Which service, with least operations work?
    Cloud Run.
    Planning and Implementing › Choosing Compute
  8. Why should basic roles such as Editor be avoided in production?
    Basic roles (Owner, Editor, Viewer) grant thousands of permissions across services; predefined roles give least privilege for one service.
    Access and Security › IAM Roles
  9. At which levels can a custom IAM role be created?
    At the organization or project level — not at the folder level.
    Access and Security › IAM Roles
  10. A support team needs a few permissions that no predefined role combines. What is created?
    A custom role containing only those permissions. Google does not update custom roles, so you must maintain it yourself as permissions change.
    Access and Security › IAM Roles

Unlock the whole deck

You are studying a free 10-card sample. All 78 cards of Google Cloud Associate Cloud Engineer — Setup and Planning, the other 2 Google Cloud Associate Cloud Engineer decks, and spaced-repetition scheduling are built into Willys. 14-day free trial, then $14.99 a year.

In Willys, tap Exam Library at the top of your Decks (or Browse Exam Library… under the + button), find the exam on its shelf or by search, tick it and tap Add.

More Google Cloud Associate Cloud Engineer decks

← All Google Cloud Associate Cloud Engineer decks, with the study guide and topic outline.

About these cards

Review status: Second-reader reviewed, with corrections applied.

Checked against:

  • Checked against the Google Cloud Associate Cloud Engineer exam guide, setting up the environment, planning and access sections — topic outline only; no text copied.
  • Checked against Google Cloud documentation for the resource hierarchy, Cloud Billing, the Google Cloud CLI, Compute Engine, GKE, Cloud Run, App Engine, Cloud Storage, the database products, VPC, Cloud Load Balancing and IAM (reference only; no sentences reproduced).

These are independent study notes written for Willys. They are not official exam material, may contain mistakes, and are no substitute for your course, your teacher or the exam owner's own publications. Found an error? Tell us — corrections ship as a new version of the deck.

Google Cloud is a trademark of Google LLC. This product is not affiliated with, sponsored by, or endorsed by Google.

Use of these pages is covered by our Terms of Use.