Cloud Digital Leader Practice Test 16 — 15 Questions

Question 1

Google operates its data centers using 100% renewable energy and has committed to running all operations on carbon-free energy 24/7 by 2030. How does this sustainability posture benefit a company that migrates its workloads to Google Cloud?

Accepted Answer

The company's Scope 2 carbon emissions decrease because Google's infrastructure runs on renewable energy and operates more efficiently than typical enterprise data centers.. Option B is correct because when a company migrates workloads to Google Cloud, it inherits Google's carbon-free energy procurement for its infrastructure. This directly reduces the company's Scope 2 emissions (indirect emissions from purchased electricity) since Google's data centers are powered by 100% renewable energy and operate with industry-leading efficiency (e.g., average PUE of 1.10). The company does not need to purchase separate offsets or add-ons to realize this benefit.

Answer

Companies must purchase separate carbon offset credits to claim sustainability benefits from using Google Cloud.

Answer

Only companies that purchase the Google Cloud Carbon Footprint add-on receive sustainability benefits.

Answer

Sustainability benefits are only available in specific geographic regions where Google has solar farms.

Question 2

An organization uses Google Cloud Identity and Access Management (IAM). A new employee is a data engineer who needs to read BigQuery datasets and run queries but should NOT be able to create new datasets, delete tables, or modify IAM policies. Which IAM role should be assigned?

Accepted Answer

`roles/bigquery.dataViewer` (with `roles/bigquery.jobUser` if needed to run queries). Option B is correct because the `roles/bigquery.dataViewer` role grants read access to BigQuery datasets and their contents, while `roles/bigquery.jobUser` allows the user to run query jobs. Together, they satisfy the requirement to read datasets and run queries without permitting dataset creation, table deletion, or IAM policy modification.

Answer

`roles/bigquery.admin`

Answer

`roles/viewer` (project-level Viewer)

Answer

`roles/bigquery.dataEditor`

Question 3

What does 'serverless computing' mean, and what does a developer NOT have to manage when using serverless services?

Accepted Answer

Serverless means developers don't provision or manage servers, OS, or scaling — they only write and deploy code.. Serverless computing is a cloud execution model where the cloud provider dynamically manages the allocation and provisioning of servers. The developer writes and deploys code (functions) without needing to provision, configure, or scale underlying servers, operating systems, or runtime environments. Option B correctly captures this: developers only write and deploy code, while the provider handles infrastructure management.

Answer

Serverless means no code is needed — the cloud provider writes the application logic automatically.

Answer

Serverless computing only works for batch jobs that run overnight.

Answer

Serverless is a type of on-premises architecture where servers are hidden from developers.

Question 4

A small startup can now access the same world-class AI, machine learning, and global infrastructure that previously only Fortune 500 companies with billion-dollar IT budgets could afford. Which cloud characteristic enables this competitive equalization?

Accepted Answer

Cloud's pay-per-use model and managed services give any organization access to enterprise-grade capabilities without large upfront capital investment.. Option B is correct because the cloud's pay-per-use model eliminates the need for large upfront capital expenditures, while managed services (e.g., AWS RDS, Azure SQL Database, Google Cloud AI Platform) abstract away the operational complexity of maintaining enterprise-grade infrastructure. This allows a small startup to leverage the same AI/ML models, GPU clusters, and global network backbones that Fortune 500 companies use, paying only for what they consume rather than provisioning for peak capacity.

Answer

Cloud providers charge smaller companies lower rates than enterprises.

Answer

Cloud providers assign dedicated infrastructure to small companies so they always have priority access.

Answer

Government regulations require cloud providers to offer equal service levels to all customers.

Question 5

A company runs many containerized microservices that need orchestration — automatic scheduling, scaling, self-healing, and rolling updates. They want a managed service so they don't maintain the control plane themselves. Which Google Cloud service is purpose-built for this?

Accepted Answer

Google Kubernetes Engine (GKE). Google Kubernetes Engine (GKE) is a managed Kubernetes service that provides automatic orchestration, scaling, self-healing, and rolling updates for containerized microservices. It fully manages the Kubernetes control plane, including the API server, etcd, and scheduler, so the customer does not have to maintain them. This makes GKE the purpose-built solution for the described requirements.

Answer

Cloud Run

Answer

Cloud Composer

Answer

Compute Engine with managed instance groups

Question 6

A company wants to send transactional emails (receipts, password resets) and marketing emails at scale from their application. Which approach is recommended when using Google Cloud?

Accepted Answer

Integrate a third-party email delivery service (e.g., SendGrid, Mailgun) with the GCP application.. Option B is correct because Google Cloud does not provide a native transactional email service, so integrating a dedicated third-party email delivery service like SendGrid or Mailgun is the recommended approach. These services handle deliverability, reputation management, and compliance with email standards (e.g., SPF, DKIM, DMARC), which are critical for high-volume transactional and marketing emails. Using GCP's native services like Cloud Functions or App Engine to send emails directly would rely on SMTP relays that often have strict sending limits and poor deliverability.

Answer

Use Gmail to manually send all transactional emails.

Answer

Use BigQuery to store and send emails directly to customers.

Answer

Deploy an SMTP server on Compute Engine and send emails directly from GCP IP addresses.

Question 7

Which term describes the practice of building and delivering software in small, frequent iterations — releasing updates continuously rather than in large, infrequent releases — enabled by cloud automation and DevOps culture?

Accepted Answer

Continuous integration and continuous delivery (CI/CD) — frequent, automated software releases.. Option B is correct because CI/CD is the practice of automating the build, test, and deployment pipeline to deliver small, frequent updates continuously. This is directly enabled by cloud automation (e.g., AWS CodePipeline, Azure DevOps) and DevOps culture, which break away from large, infrequent releases. The question's description of 'small, frequent iterations' and 'releasing updates continuously' is the textbook definition of CI/CD.

Answer

Waterfall development — a linear, sequential approach to software delivery.

Answer

Technical debt management — paying off historical codebase problems before release.

Answer

Change advisory board (CAB) process — committees approving each software release.

Question 8

A traditional software company sells perpetual licenses for on-premises software. They want to transition to a cloud-based SaaS model. Beyond infrastructure savings, which business model transformation does this shift enable?

Accepted Answer

The company gains predictable recurring revenue, continuous delivery of updates, and deeper ongoing customer relationships through the subscription model.. Option B is correct because transitioning from a perpetual on-premises license model to a cloud-based SaaS model fundamentally shifts the revenue structure from one-time payments to predictable, recurring subscription revenue. This model also enables continuous delivery of updates and patches without requiring customer action, and fosters deeper ongoing customer relationships through usage analytics, support, and feature adoption tracking. The cloud infrastructure allows the vendor to manage, update, and scale the software centrally, which is the core business model transformation beyond just infrastructure savings.

Answer

The company can eliminate all software development costs by using Google's pre-built APIs.

Answer

The company no longer needs sales and marketing because SaaS products sell themselves.

Answer

Customers automatically upgrade to new versions without any vendor effort.

Question 9

A company's security policy requires all employees to verify their identity using more than just a password when accessing Google Cloud resources. What security feature enforces this requirement?

Accepted Answer

Multi-factor authentication (MFA) / Two-step verification (2SV).. Multi-factor authentication (MFA) / Two-step verification (2SV) is the correct answer because it explicitly requires users to provide two or more verification factors (e.g., something you know, something you have, something you are) to access Google Cloud resources. This directly enforces the policy of verifying identity beyond just a password, as MFA/2SV adds an additional layer of security by requiring a second factor such as a time-based one-time password (TOTP) from an authenticator app, a hardware security key (e.g., FIDO2), or a push notification. Google Cloud Identity Platform supports this via security key enforcement and 2SV policies, ensuring that password compromise alone is insufficient for access.

Answer

Password complexity requirements — enforcing long, complex passwords.

Answer

IP allowlisting — only allowing access from office IP addresses.

Answer

Session timeout — automatically logging out users after 30 minutes of inactivity.

Question 10

An organization's leadership wants to foster a 'fail fast' culture to accelerate innovation. A cloud environment directly supports this culture by enabling which specific capability that on-premises infrastructure could not economically provide?

Accepted Answer

Cloud's on-demand provisioning allows teams to spin up and tear down experiment environments in minutes, making the cost of a failed experiment near-zero.. Option B is correct because cloud's on-demand provisioning enables rapid creation and teardown of isolated environments via APIs (e.g., AWS CloudFormation, Azure Resource Manager), reducing the cost and time of failed experiments to near-zero. This directly supports a 'fail fast' culture by removing the capital expense and provisioning delays inherent in on-premises infrastructure, where hardware procurement and setup can take weeks.

Answer

Cloud provides better project management tools for tracking experiments.

Answer

Cloud providers guarantee that experiments will succeed because Google engineers review them.

Answer

Cloud includes built-in A/B testing frameworks for all applications.

Question 11

A company uses Google Cloud and has a compliance requirement to store certain data only within the European Union and ensure it cannot be accessed from outside the EU, even by Google operations personnel. Which Google Cloud offering specifically addresses this level of data sovereignty?

Accepted Answer

Sovereign Controls offerings (e.g., T-Systems Sovereign Cloud) or Assured Workloads with data residency and personnel access controls.. Option B is correct because Sovereign Controls offerings (such as T-Systems Sovereign Cloud) and Assured Workloads with data residency and personnel access controls are specifically designed to meet strict data sovereignty requirements. These solutions ensure that data remains within the EU and that Google operations personnel cannot access it, addressing both geographic storage and access restrictions mandated by compliance frameworks like GDPR.

Answer

Selecting EU regions for all resources in the Cloud Console.

Answer

VPC Service Controls — they prevent data from leaving the VPC boundary.

Answer

Cloud Armor — it blocks requests originating from outside the EU.

Question 12

An organization is considering cloud adoption. Their CTO argues that 'the cloud is just someone else's computers — why should we trust it?' Which is the strongest counterargument for cloud trust and reliability?

Accepted Answer

Google Cloud operates at a scale enabling reliability (multiple 9s SLAs, redundant infrastructure, third-party audits) that most organizations cannot achieve with their own data centers.. Option B is correct because it directly addresses the CTO's concern by highlighting that major cloud providers like Google Cloud operate at a scale that enables reliability metrics (e.g., 99.99% uptime SLAs) and infrastructure redundancy (e.g., multi-region deployments, automatic failover) that most on-premises data centers cannot match. This is supported by third-party audits (e.g., SOC 2, ISO 27001) that validate security and operational practices, making the cloud not just 'someone else's computers' but a professionally managed, highly resilient environment.

Answer

Cloud providers can be fully trusted because governments require them to guarantee zero downtime.

Answer

Google employees are more trustworthy than the company's own IT staff.

Answer

The CTO's concern is valid — companies should never move sensitive data to the cloud.

Question 13

What compliance certification verifies that an organization's Information Security Management System (ISMS) meets internationally recognized standards for managing information security risks?

Accepted Answer

ISO/IEC 27001. ISO/IEC 27001 is the international standard that specifies the requirements for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). It provides a systematic approach to managing sensitive company information, ensuring it remains secure through risk management processes. This certification is recognized globally and is the primary standard for ISMS compliance.

Answer

SOC 2 Type II

Answer

PCI DSS

Answer

FedRAMP

Question 14

A company's web application faces DDoS attacks and SQL injection attempts from the internet. They need a service that sits in front of their load balancer to block malicious traffic before it reaches their application servers. Which Google Cloud service provides this protection?

Accepted Answer

Cloud Armor. Cloud Armor is Google Cloud's web application firewall (WAF) and DDoS mitigation service that operates at the edge of Google's network, in front of the load balancer. It can filter incoming traffic based on Layer 7 rules (e.g., SQL injection patterns, cross-site scripting) and Layer 3/4 conditions (e.g., IP reputation, rate limiting), blocking malicious requests before they reach the load balancer or application servers. This makes it the correct choice for protecting against both DDoS attacks and SQL injection attempts at the network perimeter.

Answer

Cloud Firewall (VPC firewall rules)

Answer

Cloud VPN

Answer

Cloud Identity-Aware Proxy (IAP)

Question 15

A company wants to know: if Google Cloud experiences a data breach that exposes customer data, what are Google's notification obligations under standard Cloud service terms?

Accepted Answer

Google will notify affected customers of personal data breaches without undue delay per its Data Processing Addendum, enabling customers to meet their own regulatory notification obligations.. Option B is correct because Google Cloud's standard Data Processing Addendum (DPA) contractually obligates Google to notify affected customers of personal data breaches without undue delay after confirmation. This enables customers to fulfill their own regulatory notification requirements under laws like GDPR or CCPA, as the customer remains the data controller responsible for end-user notifications.

Answer

Google has no obligation to notify customers of data breaches — customers must discover breaches themselves.

Answer

Google will notify all media outlets immediately upon breach detection to maximize transparency.

Answer

Breach notification is only available to customers with Premium support tier.