Google Updated Associate-Cloud-Engineer Exam Questions and Answers by dilan

The correct answer is B because programmatic budget notifications are intended for event-driven budget alert automation. Cloud Billing can publish budget threshold messages to Pub/Sub, and a Cloud Run function can be triggered by those messages to post to Slack. This gives near real-time notification without running persistent infrastructure. BigQuery billing export is valuable for analysis, but scheduled queries or DAGs are not near real time and add maintenance overhead. A Compute Engine managed instance group requires servers to run and manage, which is unnecessary for a simple notification workflow. Pub/Sub plus Cloud Run function is serverless, event-driven, easier to support, and directly aligned with Google Cloud’s cost-control automation pattern.

Pub/Sub is a scalable and reliable messaging service that can handle large volumes of data from different sources at different rates. It allows you to decouple the producers and consumers of the data, and provides a durable and persistent storage for the messages until they are delivered. Cloud Functions is a serverless platform that can execute code in response to events, such as messages published to a Pub/Sub topic. It can scale automatically based on the load, and you only pay for the resources you use. By using Pub/Sub and Cloud Functions, you can optimize the storage and processing of the votes, as you can handle the variable rates of incoming votes, process them in real time or near real time, and avoid managing servers or VMs. References:

Pub/Sub documentation

Cloud Functions documentation

Choosing a messaging service for Google Cloud

Creating and starting a preemptible VM instance This page explains how to create and use a preemptible virtual machine (VM) instance. A preemptible instance is an instance you can create and run at a much lower price than normal instances. However, Compute Engine might terminate (preempt) these instances if it requires access to those resources for other tasks. Preemptible instances will always terminate after 24 hours. To learn more about preemptible instances, read the preemptible instances documentation. Preemptible instances are recommended only for fault-tolerant applications that can withstand instance preemptions. Make sure your application can handle preemptions before you decide to create a preemptible instance. To understand the risks and value of preemptible instances, read the preemptible instances documentation.https://cloud.google.com/compute/docs/instances/create-start-preemptible-instance

The correct answer is D because Google-recommended IAM administration favors group-based access rather than assigning roles directly to individual users. Cloud Identity groups make onboarding and offboarding simpler: when a person joins or leaves a team, administrators update group membership instead of editing IAM bindings across hundreds of resources. Security groups are specifically intended for access-control use cases and are better suited for IAM policies than ordinary discussion-only groups. Service accounts should represent workloads, not teams of human users. Granting humans permission to impersonate shared service accounts weakens accountability, and allowing users to generate service account keys is even worse because it introduces long-lived credentials. Security-labeled Cloud Identity groups provide scalable, auditable access management.