FreeCourse Logo
FreeCourse.io
Verified CouponsFree CoursesJobsBlog
Categories
Home/Courses/[NEW] AWS Certified AI Practitioner [2026]
[NEW] AWS Certified AI Practitioner [2026]
IT & Software100% OFF

[NEW] AWS Certified AI Practitioner [2026]

Udemy Instructor
0(2 students)
Self-paced
All Levels

About this course

AWS Certified AI Practitioner Detailed Exam Domain CoverageTo help you successfully pass the AWS Certified AI Practitioner certification, I have meticulously aligned this practice exam course with the official AWS exam guide. The questions you will encounter cover the following core domains:Fundamentals of AI and ML (20%)Understanding the differences between AI, ML, deep learning, and generative AI. Concepts of supervised, unsupervised, and reinforcement learning.

Conceptual understanding of classification, regression, and clustering algorithms. The ML lifecycle: data collection, preparation, training, evaluation, deployment, and monitoring. Practical use cases: forecasting, recommendation, anomaly detection, computer vision, and NLP.

Fundamentals of Generative AI (24%)Generative AI terminology and core concepts. Large language model (LLM) architectures and training methods. Use cases for text generation, image synthesis, and code assistance.

Prompt engineering basics and advanced techniques. Model fine-tuning and evaluation metrics for generative outputs. Applications of Foundation Models (28%)Matching foundation model capabilities to business problems.

Selecting the right AWS services (e. g. , Amazon Bedrock, Amazon SageMaker).

Evaluating performance and cost for foundation model inference. Implementing prompt techniques for various modalities. Assessing scalability and latency for production workloads.

Guidelines for Responsible AI (14%)Fairness, bias detection, and mitigation strategies. Inclusivity and the importance of diverse training data. Transparency, explainability, and interpretability in AI models.

Safety, robustness, and human oversight mechanisms. Legal, ethical, and compliance implications. Security, Compliance, and Governance for AI Solutions (14%)Securing AI workloads using IAM roles, policies, and encryption.

Implementing data lineage tracking and Model Cards. Applying privacy-enhancing techniques for data at rest and in transit. Aligning with regulatory frameworks using AWS Config, Audit Manager, and Artifact.

Establishing strict governance policies and monitoring systems. I created this practice test course specifically for professionals who want to solidify their understanding of AWS artificial intelligence services and confidently sit for the AWS Certified AI Practitioner exam. Passing an AWS certification requires more than just reading documentation; it requires applying concepts to scenario-based questions.

When studying for this exam myself, I noticed a lack of realistic, high-quality practice questions that accurately reflect the difficulty and scope of the real test. That is exactly why I built this question bank. Every single question in this course has been written from scratch to mimic the real exam format, ensuring you encounter the same types of wording, distractors, and domain weightings.

Furthermore, I have provided an in-depth explanation for every single option—both correct and incorrect—so you actually understand the "why" behind the technology, rather than just memorizing answers. Practice Questions PreviewBelow is a small sample of the types of questions you will find inside the course:Question 1: A financial institution wants to build a generative AI application to summarize lengthy compliance documents. They want to consume pre-trained foundation models via an API without managing any underlying server infrastructure.

Which AWS service is the most appropriate choice? A. Amazon SageMakerB.

Amazon EC2C. Amazon BedrockD. AWS LambdaE.

Amazon ComprehendF. Amazon TextractCorrect Answer: COverall Explanation: Amazon Bedrock is a fully managed service that offers a choice of high-performing foundation models from leading AI companies via a single API, making it the perfect choice for building generative AI applications without managing infrastructure. Option A is incorrect: While Amazon SageMaker can host foundation models (via SageMaker JumpStart), it requires you to provision, manage, and scale the underlying infrastructure (endpoints), which goes against the requirement of not managing servers.

Option B is incorrect: Amazon EC2 provides raw virtual servers. You would have to install, configure, and maintain the models and infrastructure entirely from scratch. Option C is correct: Amazon Bedrock is explicitly designed to provide serverless access to foundation models via API.

Option D is incorrect: AWS Lambda is a serverless compute service. While it can trigger API calls, it is not an AI service that hosts foundation models. Option E is incorrect: Amazon Comprehend is an NLP service used for finding insights and relationships in text (like sentiment analysis), not a generative AI service for document summarization using foundation models.

Option F is incorrect: Amazon Textract is an ML service used to extract text, handwriting, and data from scanned documents, not a generative AI summarization tool. Question 2: You are evaluating an ML model deployed in production to ensure it aligns with responsible AI guidelines. You notice the model's predictions disproportionately favor a specific demographic.

Which concept of responsible AI does this issue primarily violate, and what should be used to document the model's intended use and characteristics? A. Transparency; implement Amazon CloudWatch logs.

B. Privacy; implement AWS KMS encryption. C.

Fairness; implement Model Cards. D. Robustness; implement Multi-AZ deployments.

E. Explainability; implement AWS Config rules. F.

Security; implement IAM resource policies. Correct Answer: COverall Explanation: Responsible AI dictates that models should treat all users fairly. When a model favors one demographic over another, it exhibits bias, which violates the principle of fairness.

AWS recommends using Model Cards (like Amazon SageMaker Model Cards) to document a model's intended use, risk ratings, and training characteristics. Option A is incorrect: Transparency is important, but favoring a demographic is a bias issue, not strictly a logging/transparency issue. CloudWatch logs system metrics, not model intent.

Option B is incorrect: Privacy and KMS encryption protect data from unauthorized access, but they do not solve demographic bias in predictions. Option C is correct: The scenario describes a fairness and bias issue. Model Cards are the AWS standard for documenting model governance, limitations, and fairness metrics.

Option D is incorrect: Robustness in AI often refers to handling edge cases or adversarial inputs. Multi-AZ is for high availability of infrastructure, not model fairness. Option E is incorrect: Explainability is the ability to understand how a model makes a decision.

While helpful, the core violation here is fairness. AWS Config tracks resource configuration changes, not AI explainability. Option F is incorrect: Security and IAM protect against unauthorized access, which is unrelated to demographic bias in the algorithm's outputs.

Question 3: According to AWS security, compliance, and governance best practices, how should an organization ensure that only authorized applications can invoke generative AI models while keeping the prompt data strictly private? A. Assign AdministratorAccess to all applications to ensure seamless integration.

B. Send prompt data over the public internet to third-party endpoints. C.

Use IAM roles with least privilege and ensure data is encrypted at rest and in transit. D. Disable AWS CloudTrail to prevent prompt data from being logged or audited.

E. Store all prompt data in an unencrypted Amazon S3 bucket for faster retrieval. F.

Hardcode long-term IAM user credentials directly into the application's source code. Correct Answer: COverall Explanation: Security in AWS AI workloads relies on the principle of least privilege using IAM, combined with strong encryption protocols for data both at rest and in transit. Option A is incorrect: Providing broad AdministratorAccess violates the principle of least privilege and introduces massive security risks.

Option B is incorrect: Sending private prompt data over the public internet without proper VPC endpoints (like AWS PrivateLink) compromises data privacy. Option C is correct: IAM roles grant specific, temporary permissions (least privilege), and encryption protects the privacy of the prompts. Option D is incorrect: AWS CloudTrail should be enabled for governance and auditing purposes.

Disabling it reduces visibility and violates compliance frameworks. Option E is incorrect: Storing sensitive data in unencrypted S3 buckets directly violates privacy and compliance guidelines. Option F is incorrect: Hardcoding credentials is a severe security anti-pattern.

IAM roles and temporary credentials should always be used for applications. Welcome to the Mock Exam Practice Tests Academy to help you prepare for your AWS Certified AI Practitioner. You can retake the exams as many times as you wantThis is a huge original question bankYou get support from me if you have questionsEach question has a detailed explanationMobile-compatible with the Udemy appI hope that by now you're convinced!

And there are a lot more questions inside the course.

Skills you'll gain

IT CertificationsEnglish

Available Coupons

Loading...

Course Information

Level: All Levels

Suitable for learners at this level

Duration: Self-paced

Total course content

Instructor: Udemy Instructor

Expert course creator

This course includes:

  • 📹Video lectures
  • 📄Downloadable resources
  • 📱Mobile & desktop access
  • 🎓Certificate of completion
  • ♾️Lifetime access
$0$93.99

Save $93.99 today!

Enroll Now - Free

Redirects to Udemy • Limited free enrollments

Share this course

https://freecourse.io/courses/new-aws-certified-ai-practitioner

You May Also Like

Explore more courses similar to this one

[NEW] Associate Google Workspace Administrator Certification
IT & Software
0% OFF

[NEW] Associate Google Workspace Administrator Certification

Udemy Instructor

Associate Google Workspace Administrator Certification Detailed Exam Domain CoverageThis practice test course is strictly mapped to the official Google exam guide to ensure you are studying exactly what you need to know:User and Organizational Management (30%): Creating and managing users, groups, and organizational units, configuring user attributes and profile settings, bulk user import and data migration, managing licenses and service access.Security and Access Controls (25%): Implementing 2-step verification and SSO, configuring password policies and recovery options, setting up access permissions for apps and data, managing OAuth and API access controls.Device Management and Mobile (20%): Enrolling and managing Chrome devices, configuring mobile device management (MDM) policies, applying security settings for BYOD and corporate devices, monitoring device compliance and remote wipe actions.Reporting, Auditing and Admin Console (25%): Generating usage and activity reports, setting up audit logs and alerts, utilizing the Admin console dashboard and shortcuts, delegating admin roles and permissions.I built this practice test suite to help you pass the Associate Google Workspace Administrator Certification exam on your first attempt. Earning this certification proves your ability to configure, secure, and manage a Google Workspace environment, but the actual exam can be tricky. It tests your ability to apply concepts to real-world administrative scenarios, not just your memorization of the Admin console menu.When I was preparing for my own IT certifications, I realized that taking practice tests with deep, plain-English explanations was the absolute best way to study. You learn faster when you understand exactly why a specific setting or policy is the right choice, and just as importantly, why the other options will fail. That is exactly what I have created for you here. These questions mimic the difficulty, format, and scenario-based style of the real exam.To give you a clear idea of what to expect inside the course, here are three sample questions from the test bank:Sample Practice Questions Preview:Question 1: User and Organizational Management A company needs to move 500 existing users to a newly created Organizational Unit (OU) so they can apply strict Google Drive sharing policies. What is the most efficient way for you to complete this task?Question 2: Security and Access Controls You need to enforce 2-Step Verification (2SV) for all employees in your organization to improve security. However, you want to ensure that users are not locked out of their accounts immediately before they have a chance to configure their second steps. How should you configure this in the Admin console?Question 3: Device Management and Mobile An employee reports that they have lost their corporate-owned smartphone, which contains highly sensitive offline company files. As the Administrator, what is the best action to take from the Admin console to ensure the corporate data is permanently removed from that specific hardware?Welcome to the Mock Exam Practice Tests Academy to help you prepare for your Associate Google Workspace Administrator Certification.You can retake the exams as many times as you wantThis is a huge original question bankYou get support from instructors if you have questionsEach question has a detailed explanationMobile-compatible with the Udemy appI hope that by now you're convinced! And there are a lot more questions inside the course.

0.0•7•Self-paced
FREE$90.99
Enroll
[NEW] AWS Certified Advanced Networking – Specialty
IT & Software
0% OFF

[NEW] AWS Certified Advanced Networking – Specialty

Udemy Instructor

Detailed Exam Domain CoverageBefore diving into the course details, here is the exact breakdown of the AWS Certified Advanced Networking – Specialty (ANS-C01) exam domains covered in these practice tests:Domain 1: Network Design (30%)Design patterns for content distribution networks (e.g., Amazon CloudFront).Design global traffic management and edge networking solutions.Design DNS solutions for public, private, and hybrid requirements.Design hybrid and multi‑account DNS architectures.Design high‑availability and load‑balancing patterns.Domain 2: Network Implementation (26%)Implement core AWS networking services following best practices.Select and configure appropriate network interfaces (ENI, ENA, EFA).Deploy VPC subnet optimization and routing architectures.Configure load balancers and traffic distribution mechanisms.Implement secure network configurations using native AWS services.Domain 3: Network Management and Operation (20%)Operate and maintain hybrid and cloud‑based network architectures.Automate networking tasks with AWS tools and infrastructure‑as‑code.Monitor, log, and troubleshoot network performance and connectivity.Optimize network throughput and bandwidth utilization.Perform capacity planning and fault‑tolerance assessments.Domain 4: Network Security, Compliance, and Governance (24%)Implement security controls for network traffic (security groups, NACLs).Apply compliance frameworks and governance policies to network design.Use AWS services for network segmentation, isolation, and encryption.Audit and monitor network activity for security and compliance.Design resilient architectures that meet regulatory requirements.Course DescriptionPassing the AWS Certified Advanced Networking – Specialty (ANS-C01) exam requires more than memorizing documentation. It demands deep, practical intuition for routing, hybrid connectivity, and enterprise-scale security. I built this comprehensive question bank to give you a realistic, challenging environment to test your knowledge before sitting for the actual exam.Finding high-quality, up-to-date study material for the ANS-C01 is notoriously difficult. Many resources either barely scratch the surface or fail to replicate the complex, multi-layered scenario questions AWS uses. I have carefully authored these practice tests to mirror the real exam's difficulty, terminology, and domain weighting. Every single question comes with a highly detailed breakdown of why the correct answer works and exactly why the distractors are flawed. This turns the practice test itself into a powerful, standalone study guide.Whether you are configuring Transit Gateways, optimizing Direct Connect connections, or implementing highly available hybrid DNS architectures, these practice exams will expose your blind spots and solidify your cloud networking expertise.Practice Questions PreviewHere is a sample of the types of scenario-based questions you will find inside the course:Question 1: Hybrid DNS Architecture A company is connecting its on-premises data center to an AWS VPC via AWS Direct Connect. The VPC has a Route 53 private hosted zone (aws. internal. company. com). The on-premises network uses custom DNS servers for its domain (onprem. company. com). You need to ensure that resources in the VPC can resolve on-premises records, and on-premises servers can resolve the AWS private hosted zone records. Which architecture meets these requirements with the lowest operational overhead? (Select TWO)A. Create a Route 53 Resolver outbound endpoint in the VPC. Configure a Route 53 forwarding rule for onprem. company. com and associate it with the VPC, pointing to the on-premises DNS server IP addresses.B. Deploy a fleet of EC2 instances running BIND in the VPC to act as DNS forwarders between the on-premises environment and AWS.C. Configure the on-premises DNS servers to forward queries for aws. internal. company. com to the default VPC DNS resolver at the VPC IPv4 network range plus two (VPC CIDR + 2).D. Create a Route 53 Resolver inbound endpoint in the VPC. Configure the on-premises DNS servers to forward queries for aws. internal. company. com to the IP addresses of the inbound endpoint.E. Set up a DHCP options set in the VPC configured with the on-premises DNS server IP addresses and assign it to the VPC to handle all DNS resolution natively.F. Create a Route 53 public hosted zone mirroring the private hosted zone and secure it using AWS WAF and IAM resource policies.Correct Answers: A, DExplanations:Option A is CORRECT: An outbound endpoint allows DNS queries from the VPC to be forwarded to your on-premises DNS resolvers via a forwarding rule. This is the native, managed way to resolve on-premises domains from AWS.Option B is INCORRECT: While running custom EC2 DNS instances is possible, it introduces high operational overhead (patching, scaling, managing high availability) compared to using the fully managed Route 53 Resolver endpoints.Option C is INCORRECT: On-premises resources cannot query the default VPC DNS resolver (VPC CIDR + 2) directly over Direct Connect or VPN. The traffic must be routed to an inbound endpoint.Option D is CORRECT: An inbound endpoint provides IP addresses within your VPC that on-premises DNS servers can forward queries to. This allows on-premises resources to resolve records in Route 53 private hosted zones.Option E is INCORRECT: Setting the DHCP options set to point to on-premises DNS servers would break the resolution of AWS-specific internal domain names and endpoints unless the on-premises servers were configured to forward those specific queries back to AWS, creating a complex loop.Option F is INCORRECT: Creating a public hosted zone exposes internal architecture to the internet, which is a massive security risk and does not solve the private hybrid routing requirement.Question 2: Edge Networking & Traffic Distribution You are designing a global media streaming application. The static web assets are stored in an S3 bucket in us-east-1, and the dynamic API backend runs on EC2 instances behind an Application Load Balancer (ALB) in eu-west-1. You need to ensure the lowest possible latency for global users, encrypt all traffic in transit, and protect the application from DDoS attacks. Which single solution provides the most optimized traffic distribution?A. Deploy an AWS Global Accelerator. Add the S3 bucket and ALB as endpoints. Use AWS Shield Advanced on the Global Accelerator.B. Create an Amazon CloudFront distribution. Configure the S3 bucket as one origin and the ALB as another origin. Use Cache Behaviors to route path-based traffic. Enable AWS WAF on the distribution.C. Set up Route 53 with Latency-based routing policies pointing directly to the S3 bucket for static assets and the ALB for dynamic traffic.D. Create a Transit Gateway spanning us-east-1 and eu-west-1. Route all user traffic through a central VPC inspection point before sending it to S3 or the ALB.E. Use an Internet Gateway with AWS Direct Connect Gateway to route user traffic globally over the AWS backbone directly to the ALB and S3 bucket.F. Deploy a Network Load Balancer in front of both the S3 bucket and the ALB, and use Route 53 Geolocation routing to distribute the traffic.Correct Answer: BExplanations:Option A is INCORRECT: Global Accelerator does not support Amazon S3 buckets as direct endpoints. It is designed for TCP/UDP traffic routing to ALBs, NLBs, EC2 instances, or Elastic IPs.Option B is CORRECT: Amazon CloudFront is the ideal service for edge networking and global content delivery. It supports multiple origins (S3 for static, ALB for dynamic), reduces latency via edge caching, and integrates seamlessly with AWS WAF and Shield for DDoS protection.Option C is INCORRECT: Route 53 alone does not cache content at the edge, nor does it inherently protect against DDoS attacks like CloudFront does. Latency routing just points the user to a DNS record; the traffic still travels over the public internet to the origin.Option D is INCORRECT: Transit Gateway is used to connect VPCs and on-premises networks. It is not an edge networking or global traffic distribution service for internet-facing end users.Option E is INCORRECT: Direct Connect Gateway is for connecting on-premises data centers to multiple VPCs globally. It does not route public internet traffic from standard web users.Option F is INCORRECT: Network Load Balancers operate at Layer 4 and cannot route HTTP/HTTPS path-based requests to distinguish between an S3 bucket and an API backend. Furthermore, S3 cannot be an NLB target.Question 3: Network Security and Segmentation Your company operates an isolated three-tier web application within a single VPC. You have identified anomalous traffic originating from a specific EC2 instance in the private application tier attempting to communicate with known malicious IP addresses on the internet via the NAT Gateway. You must block this outbound traffic immediately while allowing normal application traffic to continue. What is the most effective way to accomplish this?A. Add a deny rule to the Security Group attached to the compromised EC2 instance to block outbound traffic to the malicious IP addresses.B. Add an outbound DENY rule to the Network ACL associated with the application tier subnet blocking the malicious IP addresses.C. Terminate the NAT Gateway immediately to sever internet access for all private subnets.D. Modify the VPC Route Table associated with the private subnet to send traffic destined for the malicious IPs to a blackhole endpoint.E. Attach an IAM Role with a restrictive policy to the EC2 instance explicitly denying network access to the malicious IP range.F. Create a Route 53 private hosted zone that overrides the DNS resolution of the malicious IPs to 127.0.0.1.Correct Answer: BExplanations:Option A is INCORRECT: Security Groups are stateful and default to allowing all outbound traffic, but more importantly, AWS Security Groups do not support explicitly writing "DENY" rules. They only support ALLOW rules.Option B is CORRECT: Network Access Control Lists (NACLs) are stateless and operate at the subnet level. Crucially, NACLs support explicit DENY rules. Placing an outbound deny rule for the specific malicious IPs will immediately block the traffic from leaving the subnet.Option C is INCORRECT: Terminating the NAT Gateway would cause an immediate, catastrophic outage for all outbound internet traffic across all private subnets, taking down normal application functionality.Option D is INCORRECT: While you can route traffic to a blackhole, Route Tables map CIDR blocks, not individual IPs easily on the fly without heavy operational overhead. Furthermore, route tables are generally used for routing intent, whereas NACLs are the security boundary for explicitly denying traffic.Option E is INCORRECT: IAM roles control permissions to AWS APIs (like s3:GetObject or ec2:RunInstances). They do not control or filter raw TCP/IP network traffic leaving an instance.Option F is INCORRECT: Malicious software often uses hardcoded IP addresses rather than domain names. DNS overriding would only work if the anomalous traffic was relying on domain name resolution.Welcome to the Mock Exam Practice Tests Academy to help you prepare for your AWS Certified Advanced Networking – Specialty course.You can retake the exams as many times as you wantThis is a huge original question bankYou get support from me if you have questionsEach question has a detailed explanationMobile-compatible with the Udemy appI hope that by now you're convinced! And there are a lot more questions inside the course.

0.0•130•Self-paced
FREE$83.99
Enroll
[NEW] Associate Cloud Engineer [2026]
IT & Software
0% OFF

[NEW] Associate Cloud Engineer [2026]

Udemy Instructor

Associate Cloud Engineer Detailed Exam Domain CoverageTo ensure you are fully prepared, these practice exams are balanced according to the official Google Cloud blueprint:Setting Up Cloud Environment (18%): Projects, Billing accounts, IAM, APIs, and Cloud SDK installation and configuration.Planning & Configuring Solutions (20%): Compute resources, Data solutions, Network resources, and the Pricing Calculator.Deploying & Implementing (27%): Compute Engine, Google Kubernetes Engine (GKE), App Engine, Cloud Functions, and Data solutions.Ensuring Successful Operations (20%): Cloud Monitoring, Cloud Logging, Diagnostics, and Resource management.Configuring Access & Security (15%): IAM, Service accounts, VPC security, Audit logs, and Encryption keys.Course DescriptionPassing the Google Cloud Associate Cloud Engineer (ACE) certification requires more than just reading documentation. It demands a practical understanding of how to apply GCP services to real-world scenarios. I created this comprehensive set of practice tests to mirror the actual exam's format, difficulty, and domain weighting.My goal is to help you test your knowledge, identify any weak spots, and walk into your exam completely confident. Every single question in this bank includes a detailed explanation. I don't just tell you which answer is right; I break down exactly why the correct option is the best choice and why the other options fall short. This method ensures you actually understand the underlying cloud concepts rather than just memorizing answers.Whether you are configuring IAM roles, deploying containerized applications to GKE, or debugging access issues with Cloud Logging, these questions reflect the daily tasks of a real Cloud Engineer. Use these tests to gauge your readiness and close your knowledge gaps.Sample Practice QuestionsHere is a preview of the types of questions and detailed explanations you will find inside the course:Question 1: You need to deploy a highly scalable web application that runs in Docker containers. The traffic is highly unpredictable, and you want to minimize the operational overhead of managing underlying servers. Which Google Cloud service should you choose?Correct Answer: COverall Explanation: The scenario requires running containerized applications with minimal infrastructure management (serverless) and automatic scaling for unpredictable traffic. Cloud Run is the purpose-built service for this exact use case.Option A: Compute Engine – Incorrect. Compute Engine is IaaS. You would have to manually configure instances, manage the OS, and set up managed instance groups for scaling, which maximizes operational overhead rather than minimizing it.Option B: Google Kubernetes Engine (Standard) – Incorrect. While GKE runs containers and scales well, the Standard tier requires you to manage the underlying node pools, which introduces significant operational overhead.Option C: Cloud Run – Correct. Cloud Run is a fully managed, serverless compute platform that abstracts away all infrastructure management and scales Docker containers automatically based on incoming requests.Option D: App Engine Flexible – Incorrect. App Engine Flex can run containers, but it is slower to scale from zero compared to Cloud Run and typically involves more configuration overhead for containerized workloads.Option E: Cloud Functions – Incorrect. Cloud Functions are meant for single-purpose, event-driven functions (code snippets), not for hosting entire Docker containerized web applications.Option F: Bare Metal Solution – Incorrect. Bare Metal is used for lift-and-shift of specialized workloads (like Oracle databases) that cannot run in virtualized environments. It offers zero automatic scaling.Question 2: You are setting up a new Google Cloud project for your team. A new compliance auditor needs to review the setup. They must be able to see all resources and configurations across the entire project, but they must be strictly blocked from creating, modifying, or deleting any resources. Which IAM role provides the most appropriate level of access?Correct Answer: BOverall Explanation: Following the principle of least privilege, an auditor who only needs to look at resources without making changes should be granted a primitive role restricted entirely to read-only actions at the project level.Option A: roles/editor – Incorrect. The Editor role allows a user to view, create, modify, and delete resources. This violates the requirement to block modifications.Option B: roles/viewer – Correct. The Viewer role is a basic role that provides read-only access to almost all resources in a project, perfectly fitting the auditor's requirement.Option C: roles/browser – Incorrect. The Browser role only provides read access to the project hierarchy (like project name and ID). It does not allow the user to view the actual resources inside the project.Option D: roles/owner – Incorrect. The Owner role grants full administrative access, including the ability to delete the project and modify IAM permissions. This is highly insecure for an auditor.Option E: roles/iam.securityReviewer – Incorrect. This role allows a user to view IAM policies and organization policies, but it does not grant view access to the actual computing or data resources in the project.Option F: Custom role with specific write permissions – Incorrect. The scenario strictly forbids modifying resources, making any role with write permissions invalid.Question 3: Your organization generates daily video logs. These files are accessed frequently during the first 30 days for analysis. After 30 days, they are rarely accessed but must be retained for 5 years for legal compliance. You want to implement a solution that minimizes storage costs automatically. How should you configure this?Correct Answer: BOverall Explanation: The data has a clear lifecycle: "hot" (frequent access) for 30 days, then "cold" (rare access) for years. Cloud Storage is ideal for unstructured video files, and Object Lifecycle Management automates the cost-saving transition between storage classes.Option A: Cloud SQL with automatic backups – Incorrect. Cloud SQL is a relational database meant for structured data. It is highly inefficient and expensive for storing large, unstructured video files.Option B: Cloud Storage Standard class with Object Lifecycle Management to transition to Archive after 30 days – Correct. Standard storage is cost-effective for frequent access. Transitioning objects automatically to the Archive class after 30 days provides the lowest possible long-term storage cost for the 5-year retention period.Option C: Persistent Disk attached to Compute Engine – Incorrect. Persistent disks are block storage meant for VM filesystems. They are expensive, do not automatically transition storage classes, and are not designed for long-term archival of files.Option D: Cloud Storage Nearline class with Object Lifecycle Management to transition to Standard after 30 days – Incorrect. This is the reverse of what is needed. Nearline is for infrequent access, and transitioning it to Standard after 30 days would increase costs.Option E: Filestore with snapshot policies – Incorrect. Filestore provides managed NFS for high-performance workloads. It is significantly more expensive than Cloud Storage and lacks automated archiving tiers for compliance data.Option F: Bigtable with TTL (Time to Live) rules – Incorrect. Bigtable is a NoSQL wide-column database for high-throughput, low-latency workloads. It is not designed for storing large video blobs, and a TTL rule would delete the data, violating the 5-year retention requirement.Welcome to the Mock Exam Practice Tests Academy to help you prepare for your Google Cloud Associate Cloud Engineer Course.You can retake the exams as many times as you wantThis is a huge original question bankYou get support from instructors if you have questionsEach question has a detailed explanationMobile-compatible with the Udemy appI hope that by now you're convinced! And there are a lot more questions inside the course.

0.0•4•Self-paced
FREE$81.99
Enroll
FreeCourse LogoFreeCourse

Freecourse.io brings you high-quality online courses with free certificates to help you upskill, boost your career, and achieve your goals anytime, anywhere.

Resources

  • Courses
  • Jobs
  • Categories
  • Features

Company

  • About
  • Blog
  • Contact

Legal

  • Privacy
  • Terms
  • Cookies
  • Licenses

© 2026 FreeCourse. All rights reserved.