Cloud Digital Leader Practice Test 13 — 15 Questions

Question 1

Match each Google Cloud migration term to its description.

Question 2

A non-technical manager asks what a 'virtual machine' is and how it differs from the physical servers the company used to run in its own data center. Which explanation is most accurate and accessible?

Accepted Answer

A virtual machine is a complete software-defined computer that runs on shared physical hardware, providing the same capabilities as a dedicated server but created and managed through software in minutes. Option B is correct because a virtual machine (VM) is a software-based emulation of a physical computer that runs on shared physical hardware via a hypervisor. It provides the same capabilities as a dedicated server (CPU, memory, storage, networking) but can be provisioned, cloned, and managed in minutes through software, which is the core difference from traditional on-premises physical servers that require manual setup and are tied to specific hardware.

Answer

A virtual machine is a web-based application that runs in a browser and replaces traditional desktop software

Answer

A virtual machine is a physical server located in the cloud provider's data center that is reserved exclusively for one customer

Answer

A virtual machine is a type of database that stores data virtually rather than on physical disk

Question 3

A company's finance director asks: 'If we move to cloud, do we need to buy fewer servers?' An IT architect responds that the answer depends on whether the company is adopting IaaS, PaaS, or SaaS. How does the service model affect hardware ownership?

Accepted Answer

In all three models, the cloud provider owns and manages the physical hardware, eliminating the need for customer-owned servers for those workloads — with IaaS requiring the most customer management (VMs) and SaaS requiring the least (just use the application). Option B is correct because in IaaS, PaaS, and SaaS, the cloud provider owns and manages the physical hardware in their data centers. The customer's hardware ownership decreases as the service model abstracts more layers: IaaS provides virtual machines (VMs) that the customer manages, PaaS provides a managed platform (runtime, middleware) without customer control over the underlying OS or hardware, and SaaS delivers a fully managed application where the customer only uses the software. Thus, moving to any of these models reduces or eliminates the need for customer-owned servers for those specific workloads.

Answer

All three models (IaaS, PaaS, SaaS) require the same amount of customer-owned hardware since cloud supplements rather than replaces on-premises systems

Answer

Only SaaS eliminates the need for customer servers; IaaS and PaaS still require on-premises hardware for hybrid connectivity

Answer

The service model doesn't affect hardware ownership — hardware purchase decisions are independent of whether the company uses cloud services

Question 4

An organization's security team reviews their Google Cloud environment and finds that several Cloud Storage buckets have `allAuthenticatedUsers` bindings, and multiple service accounts have the Owner role. Which Google Cloud tool automatically identifies these types of high-risk IAM configurations?

Accepted Answer

Security Command Center (SCC) with IAM Recommender and Security Health Analytics.. Security Command Center (SCC) with Security Health Analytics and IAM Recommender is the correct tool because it automatically scans for high-risk IAM configurations, such as `allAuthenticatedUsers` bindings on Cloud Storage buckets and service accounts with the Owner role. Security Health Analytics detects misconfigurations against CIS benchmarks and Google Cloud best practices, while IAM Recommender provides actionable recommendations to reduce excessive permissions. This combination proactively identifies and helps remediate these specific security risks without requiring manual log review or billing analysis.

Answer

Cloud Audit Logs — reviewing all recent IAM changes.

Answer

Cloud Billing reports — they flag expensive configurations that indicate security issues.

Answer

Cloud Monitoring — it alerts when IAM policies are modified.

Question 5

Drag and drop the steps to configure a load balancer for an HTTP application on Compute Engine into the correct order.

Question 6

Drag and drop the steps to set up a Cloud Storage bucket with uniform bucket-level access into the correct order.

Question 7

Drag and drop the steps to deploy a containerized application to Google Kubernetes Engine (GKE) into the correct order.

Question 8

Drag and drop the steps to enable and use Cloud Audit Logs for a project into the correct order.

Question 9

Drag and drop the steps to set up a Cloud SQL for MySQL instance with a private IP address into the correct order.

Question 10

Drag and drop the steps to migrate an on-premises MySQL database to Cloud SQL using Database Migration Service into the correct order.

Question 11

Drag and drop the steps to set up a Cloud CDN for a backend bucket in the correct order.

Question 12

Drag and drop the steps to recover a Compute Engine VM from a snapshot in the correct order.

Question 13

Drag and drop the steps to set up a Cloud NAT for private Compute Engine instances to access the internet in the correct order.

Question 14

A fashion retailer wants to use cloud to better understand customer preferences and launch trend-responsive product lines faster. Which capability most directly enables the retailer to sense market trends earlier and respond faster than competitors?

Accepted Answer

Real-time analytics on social media, search trends, and purchase signals to detect emerging preferences earlier, combined with cloud-integrated supply chain APIs for faster product launches. Option A is correct because it directly addresses the retailer's goal of sensing market trends earlier and responding faster. Real-time analytics on social media, search trends, and purchase signals enable early detection of emerging preferences, while cloud-integrated supply chain APIs allow for rapid product launches by automating and accelerating the procurement and production processes. This combination of sensing and response capabilities is the most direct enabler of competitive advantage in trend-responsive retail.

Answer

Moving the ERP system to a cloud-hosted VM to reduce infrastructure management overhead

Answer

Training the design team on cloud-based graphic design software for faster product visualization

Answer

Storing all historical sales data in cloud object storage for cheaper archival

Question 15

A company's security team wants to control which resources on the internet can communicate with their virtual machines in Google Cloud. Which fundamental cloud networking concept provides this control?

Accepted Answer

VPC firewall rules that control inbound and outbound network traffic to VMs based on IP ranges, protocols, and ports. Option A is correct because VPC firewall rules are the fundamental cloud networking construct that controls network traffic to and from virtual machine instances in Google Cloud. These rules operate at the network layer, filtering traffic based on source/destination IP ranges, protocols (e.g., TCP, UDP, ICMP), and port numbers, thereby governing which internet resources can communicate with the VMs.

Answer

Cloud IAM policies that grant or deny permissions for external systems to access VM resources

Answer

Cloud Storage bucket policies that restrict access to VM storage volumes

Answer

DNS records that determine which internet addresses can resolve the VM's hostname