Cloud Digital Leader Practice Test 15 — 15 Questions

Question 1

A traditional bank processes loan applications using manual paper-based workflows that take 2 weeks per application. The bank wants to use cloud technology to reduce this to under 24 hours. Which cloud-enabled capability primarily drives this transformation?

Accepted Answer

Cloud-based AI/ML services and workflow automation that process applications end-to-end without manual steps.. Option B is correct because cloud-based AI/ML services combined with workflow automation can process loan applications end-to-end without manual intervention, reducing processing time from 2 weeks to under 24 hours. This transformation is driven by the ability to automate document extraction, validation, and decision-making using services like Google Cloud Document AI and Workflows, which eliminate the bottleneck of manual paper-based workflows.

Answer

Lower storage costs for paper documents by digitizing them in Cloud Storage.

Answer

Moving the bank's email system to a cloud-based provider.

Answer

Using Cloud SQL instead of on-premises Oracle database.

Question 2

A CEO asks why the company should invest in a cloud migration when the existing on-premises infrastructure 'still works fine.' Which business case arguments are MOST relevant to present? (Select the best answer.)

Accepted Answer

Cloud enables faster innovation and time-to-market, reduces total cost of ownership, and provides access to advanced capabilities (AI, analytics) that improve competitive positioning.. Option B is correct because it directly addresses the CEO's strategic concerns by highlighting cloud's ability to accelerate innovation and time-to-market, reduce total cost of ownership (TCO) through pay-as-you-go pricing and elimination of hardware lifecycle costs, and provide access to advanced capabilities like AI and analytics that on-premises infrastructure cannot easily match. These arguments frame cloud migration as a competitive necessity rather than a mere technology upgrade, which is the core of the business case.

Answer

The cloud uses newer hardware and newer versions of Linux, which are technically superior.

Answer

Cloud providers have more IT staff than the company, so IT headcount can be reduced immediately.

Answer

The current infrastructure will eventually fail, so proactive migration avoids future risk.

Question 3

An organization wants to modernize its on-premises applications. The IT team identifies three types of applications: legacy apps that can only move with significant refactoring, custom-built apps that can be containerized and moved as-is, and applications that can be replaced entirely by SaaS solutions. This categorization approach is called what?

Accepted Answer

Application portfolio assessment using migration strategies (the 6 Rs framework). The scenario describes categorizing applications based on their migration path: legacy apps requiring refactoring, custom apps suitable for containerization, and apps replaceable by SaaS. This directly aligns with the '6 Rs' framework (Rehost, Replatform, Refactor, Repurchase, Retire, Retain) used in application portfolio assessment for cloud migration. Option B is correct because the 6 Rs provide a structured way to evaluate and classify each application's optimal migration strategy.

Answer

Disaster recovery planning

Answer

Capacity planning for on-premises servers

Answer

Software development lifecycle (SDLC) planning

Question 4

A company wants to ensure that sensitive data (credit card numbers, SSNs) stored in BigQuery is automatically identified and protected. They also want ongoing scanning to detect if any new data violates their data governance policies. Which Google Cloud service provides these capabilities?

Accepted Answer

Cloud Data Loss Prevention (Cloud DLP) with BigQuery inspection jobs.. Cloud DLP with BigQuery inspection jobs is the correct choice because it provides both automated identification of sensitive data (such as credit card numbers and SSNs) within BigQuery tables and ongoing scanning capabilities via scheduled inspection jobs. Cloud DLP uses built-in infoType detectors to match patterns like credit card numbers (Luhn check) and SSNs, and can trigger actions or alerts when new data violates governance policies.

Answer

Security Command Center — it scans BigQuery for sensitive data automatically.

Answer

Cloud Monitoring custom dashboards with SQL queries that search for PII patterns.

Answer

Cloud Audit Logs — they record all BigQuery queries and can identify when sensitive columns are accessed.

Question 5

A company needs to store large volumes of unstructured data (images, videos, backups, documents) with high durability and global accessibility. Which Google Cloud service is designed for object storage at any scale?

Accepted Answer

Cloud Storage. Cloud Storage is Google Cloud's fully managed, scalable object storage service designed for unstructured data such as images, videos, backups, and documents. It offers high durability (99.999999999% annual durability) and global accessibility via a unified namespace, making it the correct choice for storing large volumes of unstructured data at any scale.

Answer

Persistent Disk

Answer

Cloud Filestore

Answer

Cloud Spanner

Question 6

A global fintech company needs a database that can handle financial transactions across 50+ countries with consistent, ACID-compliant operations, SQL queries, and automatic global replication with no downtime for maintenance. Which Google Cloud database service meets all these requirements?

Accepted Answer

Cloud Spanner. Cloud Spanner is the only Google Cloud database that provides ACID-compliant transactions, full SQL support, and automatic synchronous global replication with no downtime for maintenance. It is designed for horizontally scalable, globally distributed applications that require strong consistency across regions, making it the ideal choice for a fintech company operating in 50+ countries.

Answer

Cloud SQL (PostgreSQL)

Answer

Cloud Bigtable

Answer

Firestore

Question 7

A company has deployed a critical application on Google Cloud and wants to understand what happens to their workloads during a Google Cloud data center maintenance event (e.g., host system upgrades). What Google Compute Engine feature handles this automatically for most VMs?

Accepted Answer

Live migration transparently moves VMs to healthy hosts during maintenance with no VM downtime.. Google Compute Engine uses Live Migration to automatically move running VMs from a host undergoing maintenance (e.g., host system upgrades) to a healthy host without interrupting the VM. This process preserves the VM's memory, network connections, and disk state, resulting in zero VM downtime. It is enabled by default for most VM instances, except those with GPUs or certain machine types that explicitly opt out.

Answer

VMs are terminated and restarted automatically on new hardware, causing a few minutes of downtime.

Answer

VMs are snapshotted, the snapshot is restored on new hardware, and the VM is restarted.

Answer

Customers must subscribe to Google Cloud support to receive advance notice and schedule their own maintenance windows.

Question 8

A team needs to process and analyze streaming data in real-time as it arrives from IoT sensors. The pipeline must apply transformations, filter events, and write results to BigQuery. Which Google Cloud service is designed for this stream processing use case?

Accepted Answer

Cloud Dataflow. Cloud Dataflow is the correct choice because it is a fully managed, serverless service designed specifically for stream and batch data processing. It uses Apache Beam as its programming model, enabling you to apply transformations, filter events, and write results to BigQuery in real-time, exactly matching the described pipeline requirements.

Answer

Cloud Dataproc

Answer

Cloud Composer

Answer

BigQuery Streaming Insert

Question 9

A company wants to use pre-trained Google AI models to add vision capabilities to their application — specifically to detect objects in images and extract text from scanned documents — without training their own models. Which Google Cloud APIs provide these capabilities?

Accepted Answer

Cloud Vision API for object detection and OCR; Cloud Document AI for structured document extraction.. Option A is correct because Cloud Vision API provides pre-trained models for object detection and OCR (Optical Character Recognition) to extract text from images, while Cloud Document AI specializes in extracting structured data (e.g., fields, tables) from scanned documents. Both services require no custom training, aligning with the company's requirement to use pre-trained Google AI models.

Answer

BigQuery ML for both use cases — it trains vision models on image data stored in BigQuery.

Answer

Vertex AI AutoML Vision — train a custom model on your own images.

Answer

Cloud Natural Language API for text extraction from images.

Question 10

A company's on-premises IT team spends 70% of their time on routine maintenance tasks: patching servers, replacing failed hardware, and upgrading storage. After migrating to Google Cloud managed services, which operational outcome should they expect?

Accepted Answer

The IT team can redirect time from maintenance to higher-value activities like innovation and feature development.. By migrating to Google Cloud managed services like Compute Engine with sole-tenant nodes or fully managed services such as Cloud SQL and Google Kubernetes Engine, the cloud provider handles routine maintenance tasks (patching, hardware replacement, storage upgrades). This frees the IT team from approximately 70% of their previous workload, allowing them to focus on higher-value activities like application innovation, feature development, and optimizing cloud architecture. Option B correctly identifies this shift from operational overhead to strategic work.

Answer

The IT team will need to hire more staff to manage additional cloud infrastructure.

Answer

The IT team will still perform the same tasks but remotely via the Cloud Console.

Answer

The IT team will be fully automated out of their roles by Google's AI.

Question 11

A regulated financial services firm must ensure that its data never leaves a specific geographic region (EU) for compliance with GDPR data residency requirements. Which Google Cloud features help enforce this requirement?

Accepted Answer

Select EU regions for all resources and apply the `gcp.resourceLocations` org policy to restrict resource creation to EU regions only.. Option A is correct because the `gcp.resourceLocations` organization policy constraint explicitly restricts the physical location where Google Cloud resources can be created. By setting this policy to allow only EU regions, the organization ensures that no compute, storage, or database resources can be provisioned outside the EU, directly enforcing GDPR data residency requirements. This policy is evaluated at resource creation time and applies to all projects under the organization, providing a hard enforcement boundary.

Answer

Enable Cloud Armor on all load balancers to block non-EU traffic.

Answer

Use HTTPS for all connections to ensure data is encrypted when it leaves the EU.

Answer

Enable Google Workspace's regional storage settings to restrict where emails are stored.

Question 12

A company's application experiences traffic spikes every weekday morning when employees log in at 9 AM. The team wants their infrastructure to automatically handle these spikes without manual intervention and without over-provisioning resources all day. Which Google Cloud capability addresses this?

Accepted Answer

Configure autoscaling on the application's infrastructure to automatically scale up for load and scale down during off-peak hours.. Option B is correct because Google Cloud's managed instance groups (MIGs) with autoscaling can automatically adjust the number of VM instances based on load metrics (e.g., CPU utilization, requests per second). This handles the 9 AM traffic spike without manual intervention and avoids over-provisioning during off-peak hours by scaling down when demand decreases.

Answer

Purchase reserved capacity for peak load and configure it to be active only on weekdays.

Answer

Deploy additional VMs manually each weekday morning and terminate them at night.

Answer

Use Cloud Monitoring to send an email alert when CPU exceeds 80% so the team can manually scale.

Question 13

A company runs a mission-critical application that must be available 24/7. They want to ensure that if a Google Cloud region becomes unavailable (e.g., due to a natural disaster), the application automatically continues to serve users from another region. Which architecture pattern achieves this?

Accepted Answer

Deploy the application in multiple regions with a Global Load Balancer for automated failover.. Option B is correct because deploying the application in multiple regions behind a Global Load Balancer (GLB) enables automated failover. The GLB uses health checks to detect regional failures and routes traffic only to healthy backends, ensuring continuous availability even if an entire region goes down. This aligns with the requirement for a multi-region active-passive or active-active architecture for disaster recovery.

Answer

Deploy in a single region with a Managed Instance Group using 3 availability zones.

Answer

Enable Cloud Armor on the load balancer to protect against regional failures.

Answer

Use Cloud Storage multi-region buckets for application data.

Question 14

A healthcare company needs to store patient data in Google Cloud and must comply with HIPAA (Health Insurance Portability and Accountability Act). Which statement correctly describes how Google Cloud helps them achieve HIPAA compliance?

Accepted Answer

Google offers HIPAA-eligible services and signs a Business Associate Agreement (BAA), but customers must implement their own technical safeguards and access controls.. Option B is correct because Google Cloud provides HIPAA-eligible services and offers a Business Associate Agreement (BAA) to covered entities, but compliance is a shared responsibility. Customers must configure their own technical safeguards, such as access controls, audit logging, and encryption key management, to meet HIPAA requirements. Google Cloud does not automatically make an application compliant; the customer must implement the necessary controls.

Answer

Storing data in Google Cloud automatically makes an application HIPAA-compliant.

Answer

HIPAA compliance is impossible on public cloud; healthcare data must stay on-premises.

Answer

Google Cloud's automatic data encryption fully satisfies all HIPAA technical safeguard requirements.

Question 15

A company currently spends $200,000 annually on data center costs (hardware, power, cooling, staff). After migrating to Google Cloud, their cloud bill is $120,000 annually, but they also save $50,000 in data center costs they no longer pay. What is their net annual savings from the migration?

Accepted Answer

$80,000 annual savings ($200,000 previous cost minus $120,000 cloud cost). Option B is correct because the net annual savings are calculated as the difference between the previous total cost ($200,000) and the new total cost after migration. The new total cost is the cloud bill ($120,000) plus any remaining data center costs. Since the company saves $50,000 in data center costs they no longer pay, the remaining data center costs are $200,000 - $50,000 = $150,000. However, the question states they 'save $50,000 in data center costs they no longer pay,' meaning those costs are eliminated entirely, so the new total cost is just the cloud bill of $120,000. Thus, savings = $200,000 - $120,000 = $80,000.

Answer

$30,000 (cloud cost increase of $120K minus the $50K DC savings)

Answer

$50,000 (only the data center cost savings count)

Answer

$120,000 (the entire cloud bill is savings)