gcp interview questions Intermediate Practice Exam: Medium Difficulty 2025

You are setting up a new Google Cloud environment for a team that has separate dev and prod workloads. The security team requires a single billing account, clear cost separation, and the ability to apply different IAM policies and quotas to dev vs prod. What should you do?

Your company uses an on-premises IdP and wants employees to authenticate to Google Cloud using their corporate identities. You also want to minimize long-lived keys and make it easy to offboard users. What is the best approach?

A web application runs on Compute Engine and needs a highly available, private connection to a managed Cloud SQL instance. You want to avoid exposing the database to the public internet and keep latency low. What should you configure?

You need to deploy a stateless API that must scale quickly based on request volume. The API should minimize operational overhead and support gradual traffic migration between versions. Which Google Cloud solution best fits?

A team is deploying a three-tier application to Compute Engine. The web tier must be internet-facing, while the application and database tiers must not have external IPs. The web tier should be able to reach the app tier, and the app tier should be able to reach the database tier. What should you do?

You are deploying a new version of a Compute Engine application behind an HTTP(S) Load Balancer. You need to perform a controlled rollout where 10% of traffic goes to the new version while you monitor errors, then increase traffic if metrics look good. What is the best approach?

Your company stores objects in Cloud Storage and wants to automatically delete files older than 30 days in a specific bucket prefix. The solution should be managed and not require running servers. What should you use?

A production service on Compute Engine is experiencing intermittent latency spikes. You need to identify whether the issue correlates with CPU utilization, disk I/O, or network throughput, and you want to set up proactive alerting. What should you do?

You need to perform maintenance on a Compute Engine VM hosting a critical application. You want to minimize downtime and preserve the boot disk while upgrading the machine type. What is the best sequence of actions?

A CI/CD pipeline running outside Google Cloud needs to deploy to Cloud Run and access Artifact Registry without storing long-lived service account keys. You want to follow Google-recommended best practices. What should you do?