Cloud Digital Leader Practice Test 20 — 15 Questions

Question 1

A SRE team wants to alert when their service is consuming error budget faster than expected, rather than alerting only when the SLO threshold is crossed. Which Cloud Monitoring alerting strategy supports this approach?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

SLO burn rate alerting — alert when error budget is being consumed faster than the measurement window allows.. B is correct because SLO burn rate alerting is specifically designed to detect when error budget is being consumed faster than the measurement window allows, enabling proactive alerts before the SLO threshold is breached. This approach uses a burn rate (e.g., 2x, 10x) to trigger alerts when the error budget depletion rate exceeds a predefined multiple of the expected rate, allowing the team to respond early. It directly addresses the requirement of alerting on error budget consumption speed rather than waiting for a hard SLO violation.

Answer

Threshold alerting — alert when error rate exceeds 0.1%.

Answer

Uptime check alerting — alert when health checks fail.

Answer

Log-based alerting — alert when specific error messages appear in logs.

Question 2

An organization wants to ensure that Google Cloud services used by its employees cannot be used to exfiltrate data to a competitor's Google Cloud project. For example, they want to prevent copying data from their Cloud Storage bucket to a Storage bucket owned by a competitor. Which Google Cloud security control most directly prevents this type of insider data exfiltration?

Accepted Answer

VPC Service Controls, which create a security perimeter around Google Cloud APIs so data cannot be moved to projects outside the defined perimeter. VPC Service Controls (C) directly prevent data exfiltration by creating a security perimeter around Google Cloud APIs. This perimeter blocks any data movement to resources outside the defined perimeter, such as a competitor's Cloud Storage bucket, regardless of the user's IAM permissions. It works at the API layer, intercepting requests that attempt to copy data to an unauthorized project.

Answer

IAM permissions that restrict users from accessing competitor projects

Answer

Cloud DLP, by scanning and redacting sensitive data before it can be stored

Answer

Organization Policy constraints that prevent resource creation in competitor accounts

Question 3

A machine learning team wants to train, evaluate, deploy, and monitor ML models in a unified platform without managing infrastructure, and with built-in support for experiment tracking, model versioning, and A/B testing between model versions. Which Google Cloud product provides this end-to-end managed ML platform?

Accepted Answer

Vertex AI, Google Cloud's unified ML platform covering training, experiment tracking, model registry, deployment, and monitoring in a single managed service. Vertex AI is Google Cloud's unified ML platform that provides an end-to-end managed service for training, evaluating, deploying, and monitoring ML models without requiring infrastructure management. It includes built-in experiment tracking, a model registry for versioning, and supports A/B testing between model versions, directly matching the question's requirements.

Answer

BigQuery ML, for training and deploying ML models using SQL within BigQuery

Answer

Cloud Dataproc, for running distributed Spark ML jobs on managed Hadoop clusters

Answer

Cloud Functions, for deploying ML inference code as serverless functions

Question 4

A logistics company manually tracks shipments using spreadsheets, causing frequent errors and delays in customer notifications. After implementing a cloud-based tracking platform with real-time GPS updates, automated customer notifications, and predictive delivery estimates, customer satisfaction scores increase by 35%. What kind of transformation does this primarily represent?

Accepted Answer

Customer experience and operational transformation — digitizing manual tracking to provide real-time visibility and automated service.. The scenario describes a shift from manual, error-prone spreadsheet tracking to a cloud-based platform with real-time GPS updates, automated notifications, and predictive analytics. This directly improves both the customer experience (real-time visibility, automated alerts) and operational efficiency (reduced delays, fewer errors), which is the essence of a customer experience and operational transformation. The 35% increase in customer satisfaction scores confirms the primary focus is on enhancing service delivery and internal processes, not just IT infrastructure or cost savings.

Answer

IT infrastructure modernization — replacing on-premises servers with cloud VMs.

Answer

Cost reduction initiative — eliminating the spreadsheet software license fees.

Answer

Employee productivity transformation — helping logistics coordinators work faster using cloud apps.

Question 5

A marketing team wants to create interactive dashboards and reports for business stakeholders using data stored in BigQuery, without writing code. Which Google Cloud product is most appropriate for this self-service business intelligence requirement?

Accepted Answer

Looker Studio, Google's self-service data visualization tool with native BigQuery connectivity and a no-code interface. Looker Studio (formerly Google Data Studio) is the correct choice because it is Google Cloud's self-service business intelligence tool that provides a no-code, drag-and-drop interface for creating interactive dashboards and reports. It has native, built-in connectivity to BigQuery, allowing the marketing team to visualize data without writing any code or SQL queries.

Answer

Cloud Dataflow, Google Cloud's stream and batch data processing service

Answer

BigQuery itself, where the marketing team writes SQL queries to generate reports

Answer

Vertex AI, Google Cloud's unified machine learning platform

Question 6

A traditional software company sells perpetual licenses for on-premises software. They want to transition to a cloud-based SaaS model. Beyond infrastructure savings, which business model transformation does this shift enable?

Accepted Answer

The company gains predictable recurring revenue, continuous delivery of updates, and deeper ongoing customer relationships through the subscription model.. Transitioning from a perpetual on-premises license model to a cloud-based SaaS model fundamentally shifts the revenue structure from one-time payments to predictable, recurring subscription revenue. This model also enables continuous delivery of updates and patches without requiring customer action, and fosters deeper ongoing customer relationships through usage analytics, support, and feature adoption tracking. The cloud infrastructure allows the vendor to manage, update, and scale the software centrally, which is the core business model transformation beyond just infrastructure savings.

Answer

The company can eliminate all software development costs by using Google's pre-built APIs.

Answer

The company no longer needs sales and marketing because SaaS products sell themselves.

Answer

Customers automatically upgrade to new versions without any vendor effort.

Question 7

A startup needs to build a mobile application backend. They need user authentication, a real-time database that syncs to mobile clients automatically, and serverless functions for business logic — all managed with minimal backend engineering. Which Google Cloud platform provides this integrated mobile/web backend solution?

Accepted Answer

Firebase, which provides integrated authentication, auto-syncing Firestore database, serverless functions, and hosting — designed for mobile and web backends with minimal engineering overhead. Firebase is the correct answer because it is a Google Cloud platform specifically designed to provide an integrated mobile/web backend with minimal engineering overhead. It bundles user authentication, a real-time NoSQL database (Firestore) that automatically syncs data to clients, and serverless Cloud Functions for business logic, all managed without requiring backend infrastructure provisioning.

Answer

Google Kubernetes Engine (GKE), for containerized backend microservices

Answer

BigQuery, for storing and analyzing mobile application user data

Answer

Cloud Spanner, for globally consistent transactional data storage in the mobile backend

Question 8

A company's web application faces DDoS attacks and SQL injection attempts from the internet. They need a service that sits in front of their load balancer to block malicious traffic before it reaches their application servers. Which Google Cloud service provides this protection?

Accepted Answer

Cloud Armor. Cloud Armor is Google Cloud's web application firewall (WAF) and DDoS mitigation service that operates at the edge of Google's network, in front of the load balancer. It can filter incoming traffic based on Layer 7 rules (e.g., SQL injection patterns, cross-site scripting) and Layer 3/4 conditions (e.g., IP reputation, rate limiting), blocking malicious requests before they reach the load balancer or application servers. This makes it the correct choice for protecting against both DDoS attacks and SQL injection attempts at the network perimeter.

Answer

Cloud Firewall (VPC firewall rules)

Answer

Cloud VPN

Answer

Cloud Identity-Aware Proxy (IAP)

Question 9

A developer wants to run a small piece of code that resizes images whenever a new image is uploaded to Cloud Storage. The code runs for less than a second and should only be triggered by the upload event. No always-on server is needed. Which Google Cloud service is ideal?

Accepted Answer

Cloud Functions triggered by Cloud Storage object creation events.. Cloud Functions is the ideal serverless compute service for event-driven, short-lived tasks like image resizing triggered by Cloud Storage uploads. It automatically scales to zero when idle, charges only for execution time (sub-second in this case), and natively binds to Cloud Storage object creation events via the `google.storage.object.finalize` trigger, eliminating the need for any always-on infrastructure.

Answer

A Compute Engine VM that runs continuously, checking for new uploads every minute.

Answer

Cloud Run with a permanent container that listens for uploads.

Answer

BigQuery scheduled query that processes new uploads daily.

Question 10

A traditional bank is considering adopting open banking — exposing its financial data and transaction capabilities as APIs to third-party developers (with customer consent). This enables FinTech startups to build new financial products on top of the bank's infrastructure. What cloud capability is most essential to safely and scalably implement open banking?

Accepted Answer

A managed API platform (like Apigee) that provides authentication, rate limiting, developer portal, and usage monitoring for third-party API consumers.. Open banking requires secure, scalable, and controlled exposure of APIs to third-party developers. A managed API platform like Apigee provides essential capabilities such as OAuth 2.0 authentication, rate limiting, developer portal, and usage monitoring, which are critical for ensuring safe and scalable API consumption. Without these controls, the bank cannot enforce security policies, manage access, or monitor usage effectively.

Answer

A large data warehouse (BigQuery) to store all transaction data for developer access.

Answer

A dedicated cloud region in each country where the bank operates to minimize latency for API consumers.

Answer

A blockchain infrastructure to create an immutable record of all API transactions.

Question 11

A company is evaluating whether to use a content delivery network (CDN) for its e-commerce website. Which scenario would most benefit from CDN implementation?

Accepted Answer

An e-commerce site with global customers that serves high-resolution product images and videos, where page load speed directly affects conversion rates. A CDN caches static content like high-resolution images and videos at edge servers geographically closer to users, reducing latency and improving page load speed. For an e-commerce site with global customers, faster load times directly boost conversion rates, making CDN implementation highly beneficial.

Answer

A small business whose customers are all located within 10 kilometers of the company's single data center

Answer

A real-time financial trading application that requires unique, uncacheable price data delivered to a single city's traders

Answer

An internal HR system used exclusively by employees in the company's headquarters

Question 12

A retail company wants to build a recommendation engine that suggests products to customers based on their browsing history. The team has ML expertise but wants to use Google's pre-built ML infrastructure to train and deploy models at scale without managing compute resources. Which Google Cloud service should they use?

Accepted Answer

Vertex AI. Vertex AI is the correct choice because it provides a fully managed, unified ML platform that handles the entire ML workflow—from data preparation and training to deployment and monitoring—without requiring the team to manage underlying compute infrastructure. It integrates with Google Cloud's pre-built ML infrastructure, including distributed training, AutoML, and custom model serving, making it ideal for building and scaling a recommendation engine.

Answer

BigQuery ML

Answer

Cloud AI Platform Notebooks (now Vertex AI Workbench)

Answer

Cloud Dataflow

Question 13

A company wants to set up automated checks that continuously verify their website's homepage, login page, and API endpoints are accessible from multiple global locations. If any endpoint becomes unreachable for more than 2 minutes, the on-call engineer should be alerted. Which Cloud Monitoring feature provides this?

Accepted Answer

Cloud Monitoring uptime checks that probe endpoints from global locations with alerting on failure.. Cloud Monitoring uptime checks are specifically designed to probe HTTP, HTTPS, or TCP endpoints from multiple global locations at configurable intervals (e.g., every 1 minute). They can trigger alerting policies when a check fails for a specified duration (e.g., 2 minutes), directly matching the requirement for continuous, multi-location endpoint accessibility verification with alerting on sustained failure.

Answer

Cloud Logging log-based alerts that detect 5xx errors in application logs.

Answer

Cloud Trace that records response times for each user request.

Answer

Custom scripts on Compute Engine VMs that ping endpoints every minute.

Question 14

A company hosts a web application that receives requests from users globally. To handle failures, they run three identical copies of their application behind a load balancer. When one copy fails, the load balancer automatically stops sending traffic to it. What load balancing feature enables this?

Accepted Answer

Health checks — the load balancer probes backend instances and removes unhealthy ones from the serving pool.. Health checks are the load balancing feature that proactively monitors the status of backend instances by sending periodic probes (e.g., HTTP GET requests, TCP SYN packets) to a configured endpoint. If a health check fails (e.g., non-2xx response, timeout, or connection refused), the load balancer automatically marks that instance as unhealthy and stops routing new traffic to it, ensuring high availability and fault tolerance.

Answer

Round-robin distribution — traffic cycles evenly across all instances regardless of health.

Answer

SSL termination — decrypting HTTPS traffic before forwarding to backends.

Answer

Session affinity — routing the same user to the same backend instance.

Question 15

A company's application is called 'stateless' because it doesn't store any user session data in the application server's memory. Each request contains all necessary information. Why is statelessness important for cloud scalability?

Accepted Answer

Stateless applications can be scaled horizontally without session loss because any instance can handle any request — enabling easy addition/removal of instances.. Statelessness is critical for cloud scalability because it enables horizontal scaling: any instance can process any request without needing to recall previous interactions. Since no session data is stored locally, new instances can be added or removed dynamically without risk of session loss, allowing the application to handle fluctuating loads efficiently. This aligns with the cloud's elasticity model, where resources are provisioned on demand.

Answer

Stateless applications use less storage because they don't store any data.

Answer

Stateless applications are more secure because they don't remember who the user is.

Answer

Stateless applications eliminate the need for databases since no data is stored.