Fundamental Cloud Concepts

A company needs to store petabytes of time-series IoT sensor data and query it with single-digit millisecond latency at millions of reads per second. The data has a simple key-value structure with timestamps. Which Google Cloud database is MOST appropriate?

Which cloud computing characteristic is defined by the NIST as the ability for a consumer to provision computing capabilities automatically without requiring human interaction with each service provider?

A startup is deploying a containerised web application on Google Cloud. They want to minimise operational overhead and only pay for the resources consumed when requests are being processed. The application should automatically scale to zero when idle. Which compute service should they choose?

A financial services company must store and process sensitive customer data that is subject to GDPR and PCI DSS. They need to ensure that data is encrypted at rest and in transit, and that encryption keys are managed by a hardware security module (HSM) that is FIPS 140-2 Level 3 certified. Which Google Cloud service should they use for key management?

A global e-commerce platform runs on Compute Engine instances in multiple regions. Users report high latency when accessing the website from South America. The company wants to improve performance by delivering static content (images, CSS, JS) from the nearest edge location. Which Google Cloud service should they implement?

According to the shared responsibility model, which of the following is the customer responsible for?

A company wants to run a batch job that processes large files (up to 100 TB each) using a custom Linux executable. The job runs once a month and takes about 12 hours. They want to minimise cost. Which compute option should they choose?

An engineer needs to create a custom machine type on Compute Engine for a workload that requires exactly 6 vCPUs and 20 GB of memory. The engineer uses the gcloud command-line tool. Which command correctly creates the instance?

A company is migrating its on-premises data warehouse to Google Cloud. The data warehouse contains structured relational data (sales transactions, customer records) and is queried using standard SQL. The company wants to separate compute and storage costs and automatically scale compute resources up and down based on query load. Which Google Cloud service is most appropriate?

What is a key benefit of using a Platform as a Service (PaaS) offering like App Engine compared to Infrastructure as a Service (IaaS) like Compute Engine?

A company has deployed a web application on Compute Engine in us-central1-a. Users in Europe report high latency. The company wants to reduce latency by serving traffic from a location closer to European users. However, they currently use a zonal managed instance group. What is the MOST cost-effective and operationally simple approach to reduce latency for European users?

A company uses Cloud Storage buckets to store sensitive customer data. They must ensure that all objects are encrypted at rest using a customer-managed encryption key (CMEK) stored in Cloud KMS. They also need to prevent any object from being uploaded without encryption. How can they enforce this at the bucket level?

A company is building a real-time chat application that requires low-latency messaging across multiple regions. The application needs to store user profiles and chat history. Which TWO Google Cloud services should the company consider for storing this data?

Which TWO of the following are NIST-defined characteristics of cloud computing?

A company with a global user base wants to deploy a web application on Google Cloud that is highly available and resilient to zone failures. The application runs on Compute Engine and uses a stateful backend (e.g., a database). Which THREE design elements should they implement?

Which of the following is a key characteristic of cloud computing as defined by NIST that allows users to automatically provision computing resources without requiring human interaction with each service provider?

A startup wants to deploy a containerized web application without managing servers or clusters. They need automatic scaling, a managed runtime, and pay only for resources used. Which Google Cloud service should they choose?

A company needs to run a legacy application that requires full control over the operating system, including custom kernel modules. They want to minimize management overhead for the underlying hardware. Which cloud service model should they use?

An engineer is deploying a global application that requires low latency for users in North America, Europe, and Asia. They plan to use Compute Engine instances in multiple regions. Which Google Cloud resource is essential to distribute traffic and provide a single anycast IP address?

A company is migrating an on-premises Oracle database to Google Cloud. They want to minimize changes to the application code and need a fully managed, scalable relational database with built-in high availability. Which service is most appropriate?

Which statement best describes the shared responsibility model in Google Cloud?

An organization needs to comply with HIPAA for storing healthcare data in Google Cloud. Which of the following is a customer responsibility?

A developer runs a batch job that processes data once a day. The job runs on a Compute Engine VM and takes 2 hours. To optimize costs, the developer wants to use a preemptible VM. However, the job is not checkpointing and can be restarted from scratch if interrupted. Which action should the developer take to reduce costs while ensuring the job completes?

Which Google Cloud tool allows customers to measure the gross carbon emissions associated with their Google Cloud usage?

A company wants to run a stateful application that requires persistent, high-performance block storage attached to a single Compute Engine instance. The application needs consistent low latency. Which storage solution should they use?

An organization is designing a multi-region deployment for disaster recovery. They require that the primary and secondary regions be at least 500 miles apart to comply with regulatory requirements. Which pair of Google Cloud regions would satisfy this requirement?

A company wants to use Google Cloud for a workload that requires compliance with PCI DSS. Which of the following is a Google responsibility under the shared model?

A company is migrating a legacy monolithic application to Google Cloud. The application has variable traffic and requires a relational database. They want to minimize operational overhead. Which TWO Google Cloud services should they choose? (Choose TWO.)

An architect is designing a globally distributed application that requires strong consistency and low-latency reads/writes across multiple continents. Which TWO Google Cloud database services can meet these requirements? (Choose TWO.)

A company is deploying a microservices architecture on Google Cloud and wants to ensure secure communication between services. Which THREE measures should they implement? (Choose THREE.)

A startup needs to migrate an on-premises web application to the cloud with minimal operational overhead. The application runs on a custom runtime that is difficult to containerize. The team wants to focus only on code, not infrastructure management. Which Google Cloud service is MOST appropriate?

Which characteristic of cloud computing allows a user to provision virtual machines without needing to interact with Google Cloud support or create a ticket?

An organization needs to store confidential healthcare data in Google Cloud. Which compliance certification ensures that Google Cloud infrastructure meets the required security controls for protected health information (PHI)?

A media company runs a video transcoding pipeline on Compute Engine instances that process a large batch of jobs every night. The workload is predictable and takes about 6 hours. After transcoding, the instances are idle until the next batch. How can the company optimize costs without sacrificing the ability to complete the batch within 6 hours?

A global e-commerce company wants to serve its website from Google Cloud with low latency to users worldwide. The website consists of static content (images, CSS) and dynamic content served by a backend application. Which combination of services should they use?

A developer needs to deploy a containerized microservice that scales to zero when not in use and automatically scales up on incoming traffic. The microservice uses a custom container image that listens on port 8080. Which Google Cloud compute service is BEST suited for this requirement?

A financial services company is required to keep all data within a specific geographic region for regulatory compliance. They plan to deploy a globally distributed application using Cloud Spanner. How should they configure Cloud Spanner to meet this compliance requirement?

An organization wants to use Google Cloud to analyze large-scale genomic data. The data is stored in Cloud Storage in a compressed format. They need to run a custom Python pipeline that preprocesses the data and then uses a GPU-intensive algorithm for alignment. The preprocessing is CPU-bound and takes 30 minutes per sample, while the alignment takes 1 hour per sample on a GPU. They have thousands of samples. Which compute approach is MOST cost-effective?

A company is migrating a legacy monolithic application to Google Cloud. The application currently runs on a single physical server with a custom Linux distribution. The team wants to minimize changes to the application while gaining the benefits of cloud infrastructure. Which migration strategy should they use?

A data engineer needs to run a one-time complex data transformation job on a large dataset (10 TB) stored in Cloud Storage. The job will take approximately 8 hours and is not fault-tolerant. The engineer wants the cheapest possible compute option that can reliably complete the job. What should they use?

A company has deployed a web application on Compute Engine instances behind a regional Internal HTTPS Load Balancer. The application servers need to perform TLS termination and serve traffic only from within the VPC. The security team insists that no traffic should traverse the public internet. Which type of load balancer should be used to meet these requirements?

A DevOps engineer uses Terraform to manage Google Cloud resources. They want to ensure that a specific Cloud Storage bucket is deleted before the Terraform destroys other dependent resources. The bucket holds the Terraform state file. What is the correct approach to handle this dependency in Terraform?

A company wants to deploy a multi-tier web application on Google Cloud that requires high availability across zones. The application consists of a stateless web frontend and a stateful database backend. Which TWO actions should the company take to meet the high availability requirement? (Select two.)

An organization needs to collect and analyze real-time clickstream data from millions of users. The data is ingested via HTTP POST requests. The solution must be serverless, scale automatically, and allow for real-time analytics with sub-second latency. Which THREE Google Cloud services should be combined to achieve this? (Select three.)

A company runs a critical application on Compute Engine that must always be available, even if an entire zone fails. The application stores state in a Cloud Spanner instance. The operations team wants to test disaster recovery procedures without affecting production. Which TWO actions should they take? (Select two.)

A startup wants to run a containerized web application on Google Cloud without managing the underlying servers or Kubernetes clusters. They expect traffic to vary significantly, and they want to only pay for the resources consumed during request processing. Which Google Cloud compute option should they choose?

A company wants to ensure that their customer data stored in BigQuery is encrypted at rest using customer-managed encryption keys (CMEK). Which Google Cloud service should they use to manage these keys?

A financial institution is deploying a sensitive workload on Compute Engine and needs to meet PCI DSS compliance. The security team wants to ensure that the virtual machines run on dedicated, single-tenant hardware and that no other customer's VMs share the same host. Which Compute Engine feature should they enable?

A data analytics team needs to process streaming data from thousands of IoT devices in real time. They want to ingest the data, process it (e.g., windowed aggregations), and then load it into BigQuery for analysis. Which Google Cloud service should they use for the stream processing step?

A development team is building a microservices-based application and wants to use a service mesh to secure and observe inter-service communication. They are using Google Kubernetes Engine (GKE). Which Google Cloud service should they integrate with GKE to provide service mesh capabilities?

A company is using Cloud SQL for MySQL and notices that read queries are becoming slow as the application scales. They want to offload read traffic from the primary instance to improve performance. Which Cloud SQL feature should they enable?

A multinational corporation needs to deploy a global web application that serves users from multiple continents. They want to minimize latency for end users by serving content from the nearest location. Which combination of Google Cloud services should they use?

A data scientist wants to train a machine learning model using a managed service that supports custom TensorFlow code and provides GPU/TPU hardware acceleration. They prefer not to manage the underlying infrastructure. Which Google Cloud service should they use?

A security administrator needs to grant a developer the minimum permissions to create and delete Cloud Storage buckets in a specific project, but NOT allow them to modify the contents of those buckets (e.g., upload or delete objects). Which IAM role should they assign?

A company is migrating an on-premises Oracle database to Cloud Spanner. They need to move 10 TB of data with minimal downtime. Which migration strategy should they use?

An organization wants to enforce that all Compute Engine VMs in a project are created with a specific set of tags (e.g., 'env=prod') and with a specific service account. Which Google Cloud policy tool should they use?

A DevOps engineer notices that a Cloud Function is timing out after 9 minutes. The function performs a long-running data transformation. They need to increase the timeout. What is the maximum timeout they can set for a Cloud Function (1st gen)?

A company is building a data lake on Google Cloud. They need to store both structured and unstructured data, and process it using batch and streaming jobs. Which TWO Google Cloud services should they use? (Choose 2)

An e-commerce platform uses Compute Engine to serve its website. During a flash sale, traffic spikes and some instances become unhealthy. The team wants to automatically replace unhealthy instances and maintain a minimum number of running instances. Which TWO features should they configure? (Choose 2)

A company wants to comply with GDPR and needs to ensure that personal data stored in Cloud Storage is encrypted at rest using customer-managed keys (CMEK). They also want to control access at the bucket level using IAM conditions. Which THREE steps should they take? (Choose 3)

A developer wants a fully managed environment to deploy containerized applications without managing the underlying infrastructure. They need auto-scaling, load balancing, and a serverless experience. Which Google Cloud service should they choose?

An organization wants to reduce latency for users in Europe. They plan to deploy their application in a Google Cloud region located in Europe. Which region should they choose?

A financial services company must run a legacy Windows application that requires a specific version of IIS and custom Windows patches. The company wants to minimize operational overhead but needs full control over the OS. Which Google Cloud service is most appropriate?

A data analytics team processes large datasets using Apache Spark. They want a fully managed service that allows them to run Spark jobs without provisioning clusters. Which Google Cloud service should they use?

A company wants to ensure its application remains available even if an entire data center fails. They plan to deploy the application across multiple zones within a single region. Which Google Cloud feature enables this?

A startup uses Google Workspace for email and collaboration. They want to add a custom domain to their Gmail accounts. Which service model does Google Workspace represent?

An e-commerce company experiences unpredictable traffic spikes. They need to ensure their web application automatically scales out during high demand and scales in when demand drops, paying only for resources used. Which cloud benefit best describes this?

A company stores sensitive healthcare data in Google Cloud and must comply with HIPAA. They are using Cloud Storage and BigQuery. Which of the following is the customer responsible for under the shared responsibility model?

A global gaming company needs to serve low-latency content to players worldwide. They want to cache static assets (images, videos) at edge locations closest to users. Which Google Cloud product should they use?

A company wants to run a batch job that processes data every night. They need to provision a VM for this task but want to minimize costs. The job can tolerate interruptions and can be resumed. Which Compute Engine VM option should they use?

Which of the following is a characteristic of the cloud according to the NIST definition?

A multinational corporation must store and process data subject to GDPR. They need to ensure that personal data of EU residents remains within the EU. Which Google Cloud feature should they use?

A company is designing a disaster recovery strategy for a critical application. They need to ensure that if an entire Google Cloud region becomes unavailable, the application can still serve traffic from another region with minimal data loss. Which TWO strategies should they implement? (Choose 2.)

A data engineer needs to process a large dataset stored in Cloud Storage using Apache Spark. They want to minimize cluster management overhead. Which TWO Google Cloud services can be used together to achieve this? (Choose 2.)

An organization is migrating a sensitive application to Google Cloud and must comply with SOC 2 requirements. Which THREE actions should they take to meet their security responsibilities under the shared responsibility model? (Choose 3.)

A startup wants to deploy a web application with minimal operational overhead. They want to focus only on writing code and not managing servers, containers, or runtimes. Which Google Cloud service is designed for this purpose?

An e-commerce company is experiencing traffic spikes during flash sales. They need their application to automatically scale up and down based on CPU utilization, without manual intervention. Their application runs on a managed platform. Which feature should they enable?

A financial services firm must store customer transaction logs for 7 years to comply with regulatory requirements. The data must be immutable after writing, and access should be restricted to authorized auditors only. Which storage solution and configuration should they use?

A company is migrating a legacy monolithic application to Google Cloud. They want to break it into microservices without managing underlying servers or container orchestration. Which TWO Google Cloud services allow them to deploy containerized applications serverlessly?

A retail company wants to reduce latency for customers in Europe and Asia by hosting their application closer to users. They also need high availability in case of a regional outage. Which TWO actions should they take?

A healthcare organization must store patient health records (PHI) in the cloud and comply with HIPAA. They need to ensure data is encrypted at rest by default, maintain access logs, and restrict access to authorized personnel. Which THREE Google Cloud features or services should they use?

A company wants to minimize its carbon footprint in the cloud. They are evaluating Google Cloud sustainability features. Which THREE practices help reduce environmental impact?

A company is designing a disaster recovery (DR) strategy. Their primary site is in the us-central1 region. They need to minimize data loss (low RPO) and restore quickly (low RTO) for a critical database. Which TWO approaches should they consider?

An organization needs to allow a third-party auditor to review their Google Cloud resource configurations for compliance (read-only access). The auditor should not be able to modify resources or view data. Which THREE IAM roles or techniques should they use?