GOOGLE WORKSPACE DEPLOYMENT
SERVICES SPECIALIST ACTUAL EXAM
PAPER 2026 QUESTIONS WITH ANSWERS
GRADED A+
◍ Your management has asked an external auditor to review all the resources
in a specific project. The security team has enabled the Organization Policy
calledDomain Restricted Sharing on the organization node by specifying
only your Cloud Identity domain. You want the auditor to only be able to
view, but not modify, the resources in that project. What should you do.
Answer: Create a temporary account for the auditor in Cloud Identity, and
give that account the Viewer role on the project.
◍ Shared With Me.
Answer: Folder which allows you to see all the files other people have given
you access to, but not files you have created
◍ You are currently investigating an issue that requires you to access and
analyze the audit logs of several GCP projects. You need to run custom
queries against these logs for the past 60 days in the easiest way possible.
You want to follow Google-recommended best practices..
Answer: Export the audit logs from Cloud Logging and select a BigQuery
dataset as the Sink destination. Configure the table expiration to 60
days.https://cloud.google.com/bigquery/docs/managing-tables#updating_a_tables_ex
◍ Several employees at your company have been creating projects with Cloud
Platform and paying for it with their personal credit cards, which the
company reimburses. The company wants to centralize all these projects
under a single, new billing account. What should you do?.
Answer: In the GCP Console, navigate to the Resource Manage section and
, move all projects to the root Organization
https://cloud.google.com/billing/docs/onboarding-checklist#cloud-billing-accounts
◍ Your organization uses G Suite for communication and collaboration. All
users in your organization have a G Suite account. You want to grant some
G Suite users access to your Cloud Platform project. What should you do?.
Answer: Grant them the required IAM roles using their G Suite email
address.
◍ You need to create a custom VPC with a single subnet. The subnet's range
must be as large as possible. Which range should you use?.
Answer: 10.0.0.0/8
◍ Owners.
Answer: Can create, edit, and delete documents, spreadsheets, presentations,
and drawings, and invite others to edit or view the files
◍ You are training four newly hired junior cloud engineers in your company.
Part of their training is to familiarize themselves with Cloud Spanner. You
need to provide access to these four users to view and edit table information
on a Cloud Spanner instance found in the test project.What should you do?.
Answer: Using the gcloud tool, execute the gcloud iam roles describe
roles/spanner.databaseUser command on Cloud Shell. Attach the users to a
newly created Google group and add the group to the role.
◍ Your company has an internal application for managing transactional orders.
The application is used exclusively by employees in a single physical
location. The application requires strong consistency, fast queries, and
ACID guarantees for multi-table transactional updates. The first version of
the application is implemented in PostgreSQL, and you want to deploy it to
the cloud with minimal code changes. Which database is most appropriate
for this application?.
Answer: Cloud SQL
◍ You are operating a Google Kubernetes Engine (GKE) cluster for your
company where different teams can run non-production workloads. Your
, Machine Learning(ML) team needs access to Nvidia Tesla P100 GPUs to
train their models. You want to minimize effort and cost. What should you
do?.
Answer: Add a new, GPU-enabled, node pool to the GKE cluster. Ask your
ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100
nodeSelector to their pod
specification.https://cloud.google.com/kubernetes-engine/docs/how-to/gpus
◍ You need to configure optimal data storage for files stored in Cloud Storage
for minimal cost. The files are used in a mission-critical analytics pipeline
that is used continually. The users are in Boston, MA (United States). What
should you do?.
Answer: Configure regional storage for the region closest to the users.
Configure a Standard storage class. Most Voted
◍ File.
Answer: One document stored electronically.
◍ You have designed a cloud solution that uses a wide variety of Google
Cloud Platform Services. Your company agreed to use these cloud services
but asked you to provide an estimated cost of running this cloud solution.
You need to submit an estimate to properly forecast future expenses.What
should you do?.
Answer: Provide a list of GCP services of your cloud solution. Use the GCP
Pricing Calculator and input the necessary details to get an estimated
monthly cost for each GCP product.
◍ You are using Deployment Manager to create a Google Kubernetes Engine
cluster. Using the same Deployment Manager deployment, you also want to
create aDaemonSet in the kube-system namespace of the cluster. You want
a solution that uses the fewest possible services. What should you do?.
Answer: Add the cluster's API as a new Type Provider in Deployment
Manager, and use the new type to create the
DaemonSet.https://cloud.google.com/deployment-manager/docs/configuration/type-p
◍ You deployed an LDAP server on Compute Engine that is reachable via
, TLS through port 636 using UD
P. You want to make sure it is reachable by clients over that port. What
should you do?.
Answer: Add a network tag of your choice to the instance. Create a firewall
rule to allow ingress on UDP port 636 for that network tag.
◍ You have a project for your App Engine application that serves a
development environment. The required testing has succeeded and you want
to create a new project to serve as your production environment. What
should you do?.
Answer: Use gcloud to create the new project, and then deploy your
application to the new project.
◍ You are asked to get a list of all the enabled APIs for all of the GCP Projects
on your company's GCP account as preparation for the upcoming audit. You
have been instructed to use the gcloud command-line tool to complete this
task.What should you do?.
Answer: Use the gcloud projects list command to get the Project ID. Invoke
the gcloud services list --project {ProjectID} command to get the list of
enabled GCP APIs for each project.
◍ You are migrating a production-critical on-premises application that
requires 96 vCPUs to perform its task. You want to make sure the
application runs in a similar environment on GC
P. What should you do?.
Answer: You are migrating a production-critical on-premises application
that requires 96 vCPUs to perform its task. You want to make sure the
application runs in a similar environment on GCP. What should you
do?https://cloud.google.com/compute/docs/machine-types
◍ You are deploying an application to App Engine. You want the number of
instances to scale based on request rate. You need at least 3 unoccupied
instances at all times. Which scaling type should you use?.
Answer: Automatic Scaling with min_idle_instances set to 3.
◍ You need to create a new billing account and then link it with an existing
SERVICES SPECIALIST ACTUAL EXAM
PAPER 2026 QUESTIONS WITH ANSWERS
GRADED A+
◍ Your management has asked an external auditor to review all the resources
in a specific project. The security team has enabled the Organization Policy
calledDomain Restricted Sharing on the organization node by specifying
only your Cloud Identity domain. You want the auditor to only be able to
view, but not modify, the resources in that project. What should you do.
Answer: Create a temporary account for the auditor in Cloud Identity, and
give that account the Viewer role on the project.
◍ Shared With Me.
Answer: Folder which allows you to see all the files other people have given
you access to, but not files you have created
◍ You are currently investigating an issue that requires you to access and
analyze the audit logs of several GCP projects. You need to run custom
queries against these logs for the past 60 days in the easiest way possible.
You want to follow Google-recommended best practices..
Answer: Export the audit logs from Cloud Logging and select a BigQuery
dataset as the Sink destination. Configure the table expiration to 60
days.https://cloud.google.com/bigquery/docs/managing-tables#updating_a_tables_ex
◍ Several employees at your company have been creating projects with Cloud
Platform and paying for it with their personal credit cards, which the
company reimburses. The company wants to centralize all these projects
under a single, new billing account. What should you do?.
Answer: In the GCP Console, navigate to the Resource Manage section and
, move all projects to the root Organization
https://cloud.google.com/billing/docs/onboarding-checklist#cloud-billing-accounts
◍ Your organization uses G Suite for communication and collaboration. All
users in your organization have a G Suite account. You want to grant some
G Suite users access to your Cloud Platform project. What should you do?.
Answer: Grant them the required IAM roles using their G Suite email
address.
◍ You need to create a custom VPC with a single subnet. The subnet's range
must be as large as possible. Which range should you use?.
Answer: 10.0.0.0/8
◍ Owners.
Answer: Can create, edit, and delete documents, spreadsheets, presentations,
and drawings, and invite others to edit or view the files
◍ You are training four newly hired junior cloud engineers in your company.
Part of their training is to familiarize themselves with Cloud Spanner. You
need to provide access to these four users to view and edit table information
on a Cloud Spanner instance found in the test project.What should you do?.
Answer: Using the gcloud tool, execute the gcloud iam roles describe
roles/spanner.databaseUser command on Cloud Shell. Attach the users to a
newly created Google group and add the group to the role.
◍ Your company has an internal application for managing transactional orders.
The application is used exclusively by employees in a single physical
location. The application requires strong consistency, fast queries, and
ACID guarantees for multi-table transactional updates. The first version of
the application is implemented in PostgreSQL, and you want to deploy it to
the cloud with minimal code changes. Which database is most appropriate
for this application?.
Answer: Cloud SQL
◍ You are operating a Google Kubernetes Engine (GKE) cluster for your
company where different teams can run non-production workloads. Your
, Machine Learning(ML) team needs access to Nvidia Tesla P100 GPUs to
train their models. You want to minimize effort and cost. What should you
do?.
Answer: Add a new, GPU-enabled, node pool to the GKE cluster. Ask your
ML team to add the cloud.google.com/gke -accelerator: nvidia-tesla-p100
nodeSelector to their pod
specification.https://cloud.google.com/kubernetes-engine/docs/how-to/gpus
◍ You need to configure optimal data storage for files stored in Cloud Storage
for minimal cost. The files are used in a mission-critical analytics pipeline
that is used continually. The users are in Boston, MA (United States). What
should you do?.
Answer: Configure regional storage for the region closest to the users.
Configure a Standard storage class. Most Voted
◍ File.
Answer: One document stored electronically.
◍ You have designed a cloud solution that uses a wide variety of Google
Cloud Platform Services. Your company agreed to use these cloud services
but asked you to provide an estimated cost of running this cloud solution.
You need to submit an estimate to properly forecast future expenses.What
should you do?.
Answer: Provide a list of GCP services of your cloud solution. Use the GCP
Pricing Calculator and input the necessary details to get an estimated
monthly cost for each GCP product.
◍ You are using Deployment Manager to create a Google Kubernetes Engine
cluster. Using the same Deployment Manager deployment, you also want to
create aDaemonSet in the kube-system namespace of the cluster. You want
a solution that uses the fewest possible services. What should you do?.
Answer: Add the cluster's API as a new Type Provider in Deployment
Manager, and use the new type to create the
DaemonSet.https://cloud.google.com/deployment-manager/docs/configuration/type-p
◍ You deployed an LDAP server on Compute Engine that is reachable via
, TLS through port 636 using UD
P. You want to make sure it is reachable by clients over that port. What
should you do?.
Answer: Add a network tag of your choice to the instance. Create a firewall
rule to allow ingress on UDP port 636 for that network tag.
◍ You have a project for your App Engine application that serves a
development environment. The required testing has succeeded and you want
to create a new project to serve as your production environment. What
should you do?.
Answer: Use gcloud to create the new project, and then deploy your
application to the new project.
◍ You are asked to get a list of all the enabled APIs for all of the GCP Projects
on your company's GCP account as preparation for the upcoming audit. You
have been instructed to use the gcloud command-line tool to complete this
task.What should you do?.
Answer: Use the gcloud projects list command to get the Project ID. Invoke
the gcloud services list --project {ProjectID} command to get the list of
enabled GCP APIs for each project.
◍ You are migrating a production-critical on-premises application that
requires 96 vCPUs to perform its task. You want to make sure the
application runs in a similar environment on GC
P. What should you do?.
Answer: You are migrating a production-critical on-premises application
that requires 96 vCPUs to perform its task. You want to make sure the
application runs in a similar environment on GCP. What should you
do?https://cloud.google.com/compute/docs/machine-types
◍ You are deploying an application to App Engine. You want the number of
instances to scale based on request rate. You need at least 3 unoccupied
instances at all times. Which scaling type should you use?.
Answer: Automatic Scaling with min_idle_instances set to 3.
◍ You need to create a new billing account and then link it with an existing
