Cloud Digital Leader Practice Test 20 — 15 Questions

Question 1

A company uses folders to separate environments (dev, test, prod) and teams (eng, data, security). An engineer needs to apply a policy that disables the use of 'g1-small' machine types only in the 'dev' folder under the 'eng' folder. The organization node has no existing constraints. What is the most specific way to apply this policy?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Apply the policy at the 'dev' folder.. Organization policies can be applied at the folder level. To be specific to 'dev' under 'eng', apply the policy to the 'dev' folder. Applying at a higher level would affect other subfolders.

Answer

Apply the policy at the organization node.

Answer

Apply the policy at each project individually.

Answer

Apply the policy at the 'eng' folder.

Question 2

A company runs a critical application on Compute Engine. They need a backup and disaster recovery strategy that includes automated backups and the ability to restore in a different region. Which TWO services should they use together? (Select 2)

Accepted Answer

Persistent Disk snapshots. Persistent Disk snapshots can be used for automated backups. Cloud Storage can store these snapshots in a different region for DR. Cloud SQL is not relevant if the application runs on Compute Engine. Cloud Run is a compute service, not backup. Dataflow is processing.

Answer

Cloud Run

Answer

Dataflow

Answer

Cloud SQL

Question 3

A retailer experiences traffic spikes during holiday sales. They want to ensure their website can handle the load without performance degradation. Which cloud characteristic is most relevant?

Accepted Answer

Scalability. Scalability (specifically vertical and horizontal scaling) allows the system to handle increased load by adding resources.

Answer

Reliability

Answer

Security

Answer

Cost optimisation

Question 4

A company wants to receive a 15-minute response time for Priority 1 production issues and have a dedicated Technical Account Manager. Which support plan should they purchase?

Accepted Answer

Premium. The Premium support plan offers a 15-minute response time for P1 issues and includes a Technical Account Manager (TAM).

Answer

Enhanced

Answer

Basic

Answer

Standard

Question 5

A company wants to migrate its on-premises Oracle database to Google Cloud. They need PostgreSQL compatibility with high performance for transaction processing and built-in support for AI-driven optimisations. Which database service should they choose?

Accepted Answer

AlloyDB. AlloyDB is a PostgreSQL-compatible database with 4x faster transaction processing than standard PostgreSQL and AI-powered features for performance optimization.

Answer

Cloud Spanner

Answer

Bigtable

Answer

Cloud SQL for PostgreSQL

Question 6

Which tool would you use to estimate the monthly cost of running a set of Compute Engine virtual machines before deploying them?

Accepted Answer

Google Cloud Pricing Calculator. The Google Cloud Pricing Calculator allows you to estimate costs for various services before deployment.

Answer

Cost Management dashboard

Answer

Active Assist

Answer

Billing export

Question 7

A developer wants to build a CI/CD pipeline that automatically builds a Docker container from a GitHub repository, stores the image securely, and deploys it to Cloud Run. Which THREE services should they integrate? (Select 3)

Accepted Answer

Cloud Build. Cloud Build builds the Docker image, Artifact Registry stores the image, and Cloud Run deploys it. Cloud Storage is for object storage, not container images. Cloud Build triggers can be used with GitHub, but the question asks for services that are part of the pipeline; Cloud Source Repositories is a code repository, not required if using GitHub.

Answer

Cloud Storage

Answer

Cloud Source Repositories

Question 8

Which Google Cloud tool allows customers to measure the gross carbon emissions associated with their Google Cloud usage?

Accepted Answer

Carbon Footprint dashboard in the Google Cloud Console. The Cloud Carbon Footprint tool provides visibility into the gross carbon emissions associated with a customer's Google Cloud usage.

Answer

Google Cloud's Sustainability API

Answer

Cloud Monitoring

Answer

Cloud Audit Logs

Question 9

A data scientist needs to build a custom machine learning model using TensorFlow on Google Cloud. The training data is stored in Cloud Storage and is hundreds of gigabytes. The data scientist wants to use a managed service that handles hyperparameter tuning and distributed training without managing infrastructure. Which TWO services can be used together to achieve this? (Choose 2)

Accepted Answer

Vertex AI Training. Vertex AI Training is a managed service for training ML models, supporting distributed training and hyperparameter tuning. Vertex AI Workbench is a Jupyter-based notebook environment for prototyping. Cloud Functions is for event-driven code, not ML training. Cloud Run is for containers. BigQuery ML allows building models using SQL but is limited to simple models.

Answer

BigQuery ML

Answer

Cloud Functions

Answer

Cloud Run

Question 10

A multinational corporation must store and process data subject to GDPR. They need to ensure that personal data of EU residents remains within the EU. Which Google Cloud feature should they use?

Accepted Answer

Organization policies with location restrictions. Data residency constraints in Google Cloud allow organizations to specify where data is stored by using organization policies and choosing specific regions. This ensures data does not leave the EU.

Answer

Cloud Audit Logs

Answer

Cloud KMS

Answer

VPC Service Controls

Question 11

A data engineering team needs to process streaming data from IoT devices, perform real-time transformations, and load the results into BigQuery for analysis. Which TWO Google Cloud services should they use?

Accepted Answer

Pub/Sub. Pub/Sub is the messaging service for ingesting streaming data. Dataflow can read from Pub/Sub, perform transformations, and write to BigQuery. Cloud Functions is for small event-driven functions, not streaming pipelines. Dataproc is for batch Hadoop/Spark jobs. Cloud Scheduler is for cron jobs.

Answer

Cloud Scheduler

Answer

Dataproc

Answer

Cloud Functions

Question 12

A company has a multi-regional deployment of a web application on Compute Engine. They want to improve latency for users worldwide and reduce load on the origin servers. They also need to protect against SQL injection and cross-site scripting attacks. Which TWO Google Cloud services should they implement?

Accepted Answer

Cloud Armor. Cloud CDN caches content at edge locations to improve latency and reduce origin load. Cloud Armor provides WAF capabilities to protect against application attacks like SQL injection and XSS. Cloud Load Balancing distributes traffic but doesn't cache. Cloud DNS is for DNS resolution. Cloud NAT is for outbound internet.

Answer

Cloud DNS

Answer

Cloud NAT

Answer

Cloud Load Balancing

Question 13

A retail company wants to reduce latency for customers in Europe and Asia by hosting their application closer to users. They also need high availability in case of a regional outage. Which TWO actions should they take?

Accepted Answer

Deploy the application in multiple regions. Deploying in multiple regions reduces latency for users in different geographies and provides disaster recovery. Replicating data across zones within a single region does not protect against regional failures.

Answer

Use a single region with multiple zones

Answer

Enable Cloud CDN on the application

Answer

Increase machine size in a single zone

Question 14

A company is deploying a global web application and needs to serve users with low latency, protect against DDoS attacks, and scale automatically. Which two Google Cloud services should they combine? (Choose exactly 2.)

Accepted Answer

Cloud Armor. Cloud Load Balancing distributes traffic globally and scales automatically. Cloud Armor provides DDoS protection and WAF. Cloud CDN caches content but does not provide DDoS protection. Cloud DNS resolves domain names. Cloud NAT is for outbound connectivity.

Answer

Cloud CDN

Answer

Cloud NAT

Answer

Cloud DNS

Question 15

A company is migrating its on-premises PostgreSQL database to Google Cloud. They need a managed service that is fully compatible with PostgreSQL, offers high availability, and provides automated backups. Which TWO Google Cloud services should they consider?

Accepted Answer

Cloud SQL. Cloud SQL offers managed PostgreSQL with automated backups and high availability (regional failover replicas). AlloyDB is PostgreSQL-compatible and provides 4x faster transaction processing than standard PostgreSQL, with built-in high availability. Both are appropriate. Filestore is file storage, Memorystore is a cache, and Bigtable is NoSQL.

Answer

Memorystore

Answer

Filestore

Answer

Cloud Bigtable