Cloud Digital Leader Practice Test 16 — 15 Questions

Question 1

A DevOps team wants to automatically build a Docker image from a GitHub repository and store it in a private registry whenever a new tag is pushed. Which Google Cloud services should they combine?

Accepted Answer

Cloud Build and Artifact Registry. Cloud Build can be triggered by GitHub events (like tag push) to build a container image and push it to Artifact Registry. Artifact Registry is the managed container registry. Container Registry is deprecated. Cloud Source Repositories is a Git repository, not a registry. Cloud Functions could trigger a build but is not the primary service.

Answer

Cloud Build and Container Registry

Answer

Cloud Source Repositories and Container Registry

Answer

Cloud Functions and Artifact Registry

Question 2

A company has deployed a web application on Compute Engine in us-central1-a. Users in Europe report high latency. The company wants to reduce latency by serving traffic from a location closer to European users. However, they currently use a zonal managed instance group. What is the MOST cost-effective and operationally simple approach to reduce latency for European users?

Accepted Answer

Change the managed instance group to regional, and use an HTTP(S) load balancer with the backend in europe-west1. A regional managed instance group across multiple zones in a European region (e.g., europe-west1) with a global load balancer will route users to the nearest backend, reducing latency. Recreating in a different zone in the same region doesn't help. Moving to Cloud Run might help but requires containerising the app. Using a single zone in Europe is not as resilient.

Answer

Create a new zonal instance group in europe-west1-a and use a round-robin DNS

Answer

Keep the instance group in us-central1 but enable Cloud CDN

Answer

Move the application to Cloud Run and deploy in europe-west1

Question 3

A startup expects unpredictable Compute Engine usage and wants to minimize costs without manual intervention. Which discount type automatically applies to VM instances that run for more than 25% of a month?

Accepted Answer

Sustained use discounts. Sustained use discounts are automatic and apply to Compute Engine instances that run for a significant portion of the month, with no upfront commitment.

Answer

Committed use discounts

Answer

Spot VM discounts

Answer

Preemptible VM discounts

Question 4

A financial services company must run a legacy Windows application that requires a specific version of IIS and custom Windows patches. The company wants to minimize operational overhead but needs full control over the OS. Which Google Cloud service is most appropriate?

Accepted Answer

Compute Engine. Compute Engine provides IaaS, allowing full control over the OS and application stack, including custom patches and configurations.

Answer

Google Kubernetes Engine

Answer

App Engine Flexible Environment

Answer

Cloud Run

Question 5

A DevOps engineer needs to grant a CI/CD pipeline (running on Compute Engine) permissions to deploy a Cloud Run service. The pipeline uses a service account. What is the correct approach to assign the necessary IAM role to the service account?

Accepted Answer

Grant the Cloud Run Deployer role to the Compute Engine default service account. The best practice is to attach the service account to the Compute Engine instance and grant the Cloud Run Deployer role to that service account.

Answer

Create a new service account, grant the Cloud Run Deployer role, and export a key file to the instance

Answer

Use the Cloud Run service agent with the roles/run.serviceAgent role

Answer

Grant the Cloud Run Admin role to the user account running the pipeline

Question 6

An organization wants to group related projects under a common parent for policy enforcement and cost tracking. Which GCP resource hierarchy level should be used to group several projects that belong to the same business unit?

Accepted Answer

Folder. Folders are used to group projects (and other folders) into a hierarchy for applying policies and organizing resources by department, team, or environment.

Answer

Organization node

Answer

Project

Answer

Resource

Question 7

Which of the following is a key characteristic of cloud computing as defined by NIST that allows users to automatically provision computing resources without requiring human interaction with each service provider?

Accepted Answer

On-demand self-service. On-demand self-service enables users to provision resources automatically as needed, without requiring human interaction with the provider.

Answer

Measured service

Answer

Resource pooling

Answer

Broad network access

Question 8

A company is evaluating total cost of ownership (TCO) for moving its on-premises data center to Google Cloud. Which of the following costs should they include in the cloud TCO assessment?

Accepted Answer

Compute and storage usage fees. Cloud costs include compute, storage, network egress, and managed service fees. On-premises costs like hardware, power, and cooling are avoided, so they are not part of cloud TCO.

Answer

Data center facility rent and power

Answer

Hardware purchase and maintenance costs

Answer

Employee salaries for data center staff

Question 9

A startup wants to reduce capital expenditure on hardware and scale its application globally with minimal latency. Which cloud deployment model should they choose?

Accepted Answer

Public cloud. Public cloud (Google Cloud) provides pay-as-you-go pricing, global infrastructure, and eliminates upfront hardware costs, making it ideal for startups wanting to scale globally.

Answer

Multi-cloud

Answer

Hybrid cloud

Answer

Private cloud

Question 10

A company wants to migrate its on-premises PostgreSQL database to Google Cloud with minimal application changes. They need high availability and want to leverage AI-powered optimizations for performance. Which service should they choose?

Accepted Answer

AlloyDB. AlloyDB is a fully managed PostgreSQL-compatible database optimized for demanding workloads, with high availability and AI-powered performance features. Cloud SQL for PostgreSQL also supports HA but lacks the AI optimizations. Cloud Spanner is not PostgreSQL-compatible. Bigtable is NoSQL.

Answer

Bigtable

Answer

Cloud SQL for PostgreSQL

Answer

Cloud Spanner

Question 11

An engineer needs to distribute incoming HTTP traffic across multiple backend VM instances in different regions, with automatic failover and SSL termination. Which load balancing product should they use?

Accepted Answer

Cloud Load Balancing. Cloud Load Balancing (External HTTP(S) Load Balancer) provides global, multi-region load balancing with SSL termination and health checks.

Answer

Cloud CDN

Answer

Cloud NAT

Answer

Cloud Armor

Question 12

An organisation must store archival data that is accessed less than once a year. They need the lowest storage cost and can tolerate a retrieval time of several hours. Which Cloud Storage class should they use?

Accepted Answer

Archive. Archive storage is the cheapest storage class, designed for data accessed less than once a year with retrieval times in hours.

Answer

Coldline

Answer

Nearline

Answer

Standard

Question 13

A company needs to reduce costs on Compute Engine instances that run batch jobs for varying durations. They can tolerate interruptions and do not require a specific uptime guarantee. Which TWO instance types or purchasing options should they consider? (Choose 2)

Accepted Answer

Spot VMs. Preemptible VMs can be terminated at any time but are significantly cheaper, suitable for fault-tolerant batch jobs. Spot VMs are similar to preemptible but with no maximum runtime and often lower price. Both are ideal for batch workloads that can handle interruptions.

Answer

Sole-tenant nodes

Answer

Committed use discounts

Answer

Sustained use discounts

Question 14

A startup wants to secure access to its internal web applications without using a VPN. They need to enforce access based on user identity and device security posture. Which Google Cloud service should they use?

Accepted Answer

Identity-Aware Proxy (IAP). BeyondCorp Enterprise is Google's zero-trust solution that replaces VPNs by using identity and context (device, location) to grant access. Identity-Aware Proxy (IAP) is a component of BeyondCorp that enforces access at the application layer.

Answer

Cloud VPN

Answer

VPC Service Controls

Answer

Cloud Armor

Question 15

An organization wants to tag resources with environment (dev/staging/prod) and cost center (e.g., 'marketing', 'engineering') for cost allocation and filtering in billing reports. Which feature should they use?

Accepted Answer

Labels. Labels are key-value pairs that can be attached to resources and are used for billing cost allocation, filtering in cost reports, and resource grouping. Tags are for organization policy enforcement and network firewall rules.

Answer

Organization policy tags

Answer

Folders

Answer

Network tags