Cloud Digital Leader Practice Exam 2 — 20 Questions

Question 1

A company needs to send messages between different microservices in a decoupled way. When one service publishes an event, multiple downstream services should receive and process it independently. Which Google Cloud service enables this publish-subscribe messaging pattern?

Accepted Answer

Cloud Pub/Sub. Cloud Pub/Sub is the correct choice because it is Google Cloud's fully managed, asynchronous messaging service designed specifically for the publish-subscribe pattern. It allows a publisher service to emit events to a topic, and multiple subscriber services can independently pull or push those messages from that topic, ensuring decoupled and reliable communication.

Answer

Cloud Tasks

Answer

Cloud Scheduler

Answer

Eventarc

Question 2

A company's web service has a Service Level Objective (SLO) of 99.9% monthly availability. In a 30-day month, how many minutes of downtime are allowed before the SLO is violated?

Accepted Answer

~43.2 minutes. The SLO of 99.9% monthly availability means the service can be unavailable for 0.1% of the total monthly time. In a 30-day month, total minutes are 30 × 24 × 60 = 43,200 minutes. 0.1% of 43,200 minutes is 43.2 minutes, so option B is correct.

Answer

~4.3 minutes

Answer

~7.2 hours

Answer

~8.6 hours

Question 3

A company's application is composed of 15 microservices. When a performance issue occurs, the team struggles to determine which service is causing latency since request traces span multiple services. Which Google Cloud service helps identify which specific service in a microservices chain is causing slowdowns?

Accepted Answer

Cloud Trace — captures distributed request traces showing end-to-end latency across all microservices.. Cloud Trace is designed specifically for distributed tracing in microservices architectures. It captures end-to-end latency data for each request as it traverses multiple services, allowing you to pinpoint which service in the chain is introducing the most delay. This directly addresses the problem of identifying the specific service causing slowdowns in a 15-service application.

Answer

Cloud Logging — search logs for error messages across all 15 services.

Answer

Cloud Monitoring dashboards — create per-service CPU utilization graphs.

Answer

Security Command Center — scan for misconfigurations causing performance issues.

Question 4

A company is concerned about which security responsibilities belong to Google versus which belong to them when using Google Cloud's managed database service (Cloud SQL). In the shared responsibility model, which security tasks does Google handle?

Accepted Answer

Google handles physical security, hardware maintenance, and OS and database software patching.. In the shared responsibility model for Google Cloud services like Cloud SQL, Google is responsible for security 'of' the cloud, which includes physical security of data centers, hardware maintenance, and patching the underlying operating system and database software. This ensures the infrastructure hosting Cloud SQL instances is secure, while the customer remains responsible for securing their data, access policies, and application-level configurations.

Answer

Google controls who can access the database and what data can be stored.

Answer

Google is responsible for backing up customer data and ensuring data recovery.

Answer

Google determines which compliance certifications the customer's application must meet.

Question 5

A SRE team wants to alert when their service is consuming error budget faster than expected, rather than alerting only when the SLO threshold is crossed. Which Cloud Monitoring alerting strategy supports this approach?

Accepted Answer

SLO burn rate alerting — alert when error budget is being consumed faster than the measurement window allows.. B is correct because SLO burn rate alerting is specifically designed to detect when error budget is being consumed faster than the measurement window allows, enabling proactive alerts before the SLO threshold is breached. This approach uses a burn rate (e.g., 2x, 10x) to trigger alerts when the error budget depletion rate exceeds a predefined multiple of the expected rate, allowing the team to respond early. It directly addresses the requirement of alerting on error budget consumption speed rather than waiting for a hard SLO violation.

Answer

Threshold alerting — alert when error rate exceeds 0.1%.

Answer

Uptime check alerting — alert when health checks fail.

Answer

Log-based alerting — alert when specific error messages appear in logs.

Question 6

Google Cloud encrypts all customer data at rest by default without any configuration required. A customer asks: 'Do we need to do anything special to encrypt our data stored in Cloud Storage?' What is the correct answer?

Accepted Answer

No, Google Cloud encrypts all data at rest automatically using AES-256 — no configuration is needed.. Option B is correct because Google Cloud automatically encrypts all customer data at rest using AES-256 encryption, with no configuration required. This default encryption applies to all Cloud Storage buckets, regardless of storage class or region, and the encryption keys are managed by Google Cloud unless the customer chooses to use Customer-Managed Encryption Keys (CMEK) or Customer-Supplied Encryption Keys (CSEK).

Answer

Yes, customers must enable encryption in the Cloud Storage bucket settings for each bucket.

Answer

Only data in premium storage tiers is encrypted; Standard storage requires manual encryption.

Answer

Customers must purchase the Security Command Center Premium tier to enable data encryption.

Question 7

When data is transmitted between a user's browser and a Google Cloud-hosted web application over HTTPS, which security protection does this provide?

Accepted Answer

It encrypts data in transit between the user's browser and the server, preventing eavesdropping and tampering.. HTTPS (HTTP over TLS) encrypts the communication channel between the user's browser and the web server using Transport Layer Security (TLS). This ensures that any data transmitted, such as login credentials or API requests, is protected from eavesdropping and tampering while in transit. It does not protect data at rest or control access to cloud management interfaces.

Answer

It prevents unauthorized users from accessing the Google Cloud Console.

Answer

It encrypts data stored in the server's database.

Answer

It authenticates the user and verifies their permissions to use the application.

Question 8

A digital media company hosts video content globally. They want to reduce origin server load and deliver content faster to viewers worldwide. Their current architecture routes all viewer requests directly to the origin servers in `us-central1`, causing high latency for viewers in Asia and Europe. Which Google Cloud networking capability addresses this?

Accepted Answer

Enable Cloud CDN to cache video content at Google's global edge PoPs, serving viewers from the nearest location.. Cloud CDN uses Google's global edge Points of Presence (PoPs) to cache video content closer to viewers, reducing latency and offloading origin servers. When a viewer requests content, Cloud CDN serves it from the nearest edge cache if available, avoiding a direct trip to the origin in us-central1. This directly addresses the high latency for viewers in Asia and Europe without requiring server replication or bandwidth increases.

Answer

Deploy identical origin servers in every Google Cloud region globally.

Answer

Use Cloud VPN to route viewer traffic through a direct tunnel to the origin servers.

Answer

Increase the origin servers' network bandwidth to handle more simultaneous viewer connections.

Question 9

A security architect wants to implement a 'never trust, always verify' security approach where no user or service is assumed to be trustworthy based on network location alone. Every access request must be authenticated and authorized regardless of whether it comes from inside or outside the corporate network. Which security model describes this approach?

Accepted Answer

Zero Trust security model. The Zero Trust security model (Option B) is correct because it explicitly enforces the 'never trust, always verify' principle, requiring authentication and authorization for every access request regardless of network location. In Google Cloud, this aligns with BeyondCorp, which uses identity-aware proxy (IAP) and context-aware access to verify each request based on user identity, device posture, and other attributes, rather than trusting based on IP address or network perimeter.

Answer

Perimeter security model

Answer

Defense in depth model

Answer

Principle of least privilege

Question 10

A company is evaluating Google Cloud and wants to know: what is Access Transparency, and how does it benefit customers with stringent governance requirements?

Accepted Answer

Access Transparency logs when Google Cloud personnel access customer content, providing an audit trail for governance.. Access Transparency logs are a Google Cloud feature that provides customers with near real-time logs whenever Google personnel access their data. This creates a detailed audit trail, which is essential for customers with stringent governance or compliance requirements, as it allows them to monitor and verify that access is only for authorized purposes.

Answer

Access Transparency shows customers which Google Cloud services are available in their region.

Answer

Access Transparency is a feature that makes all customer data visible to Google for quality improvement.

Answer

Access Transparency provides customers with real-time dashboards of their application's security vulnerabilities.

Question 11

What is DevOps, and how does cloud adoption reinforce DevOps practices?

Accepted Answer

DevOps is a culture of collaboration between development and operations teams, reinforced by cloud's managed CI/CD, infrastructure-as-code, and on-demand environments.. DevOps is a cultural and technical movement that emphasizes collaboration, automation, and integration between software development (Dev) and IT operations (Ops) teams. Cloud adoption reinforces DevOps by providing managed CI/CD services (e.g., AWS CodePipeline, Azure DevOps), infrastructure-as-code tools (e.g., Terraform, AWS CloudFormation), and on-demand environments that enable rapid provisioning, testing, and deployment. This synergy reduces manual overhead and accelerates the software delivery lifecycle.

Answer

DevOps is a specific programming language designed for cloud applications.

Answer

DevOps means developers take over all IT operations responsibilities, eliminating operations teams.

Answer

DevOps is only applicable to software startups — traditional enterprises use ITIL for operations.

Question 12

A development team builds a mobile app using Firebase. They need a real-time database that syncs data across all connected clients instantly (e.g., a collaborative to-do app where all users see updates in real-time). Which Firebase/Google Cloud service provides this?

Accepted Answer

Cloud Firestore or Firebase Realtime Database for real-time data sync across all connected clients.. Cloud Firestore and Firebase Realtime Database are the only Firebase/Google Cloud services that provide real-time data synchronization across all connected clients. They use persistent WebSocket connections or HTTP long-polling to push updates instantly to every subscribed client, making them ideal for collaborative apps like a shared to-do list.

Answer

Cloud SQL with read replicas to distribute updates to clients.

Answer

BigQuery streaming inserts for real-time data delivery to mobile clients.

Answer

Cloud Pub/Sub subscriptions on the mobile clients.

Question 13

A company wants its internal applications to be accessible via a custom domain name (e.g., `app.company.com`) that routes to their Google Cloud load balancer. Which Google Cloud service manages DNS records for this?

Accepted Answer

Cloud DNS. Cloud DNS is the correct service because it is Google Cloud's managed DNS service that translates human-readable domain names (like app.company.com) into IP addresses. It allows you to create and manage DNS records (such as A, CNAME, or ALIAS records) that point your custom domain to the IP address or hostname of your Google Cloud load balancer, enabling traffic routing to your internal applications.

Answer

Cloud CDN — it manages domain names for cached content.

Answer

Cloud Load Balancing — it automatically assigns domain names.

Answer

Cloud Armor — it routes traffic based on domain names.

Question 14

A company wants to optimize their Google Cloud spending. They have baseline compute workloads that run continuously 24/7 for at least one year. Which pricing option provides the greatest savings for these stable, long-running workloads?

Accepted Answer

Committed Use Discounts (CUDs) — 1-year or 3-year commitment for up to 55% savings.. Committed Use Discounts (CUDs) are ideal for stable, long-running workloads because they offer significant savings (up to 55% for 1-year or 3-year commitments) in exchange for a predictable resource usage commitment. Since the workloads run continuously 24/7 for at least one year, a 1-year CUD directly matches this usage pattern and provides the greatest savings among the listed options for such non-preemptible, always-on VMs.

Answer

Spot VMs — up to 91% savings over on-demand pricing.

Answer

On-demand pricing — pay per minute with no commitment.

Answer

Sustained Use Discounts — automatically applied to all running VMs.

Question 15

A company wants to use Google Cloud's Generative AI capabilities to build an internal assistant that can answer questions about company policies using documents stored in Google Drive. Which Google Cloud product provides pre-built infrastructure for building this type of AI application?

Accepted Answer

Vertex AI Agent Builder with Gemini and document-grounded search (RAG).. Vertex AI Agent Builder with Gemini and document-grounded search (RAG) is correct because it provides pre-built infrastructure for building a generative AI assistant that retrieves information from enterprise documents. It combines Gemini's large language model with Retrieval-Augmented Generation (RAG) to ground answers in company policy documents stored in Google Drive, without requiring custom model training or manual infrastructure setup.

Answer

BigQuery ML — train a custom language model on company policy documents.

Answer

Cloud Natural Language API — it reads and summarizes documents automatically.

Answer

Cloud Translation API — it translates policy documents into the user's language.

Question 16

What is horizontal scaling, and how does it differ from vertical scaling?

Accepted Answer

Horizontal scaling adds more instances to distribute load; vertical scaling increases the size of existing instances.. Horizontal scaling (scale-out) adds more instances (e.g., additional virtual machines or containers) to distribute the workload across multiple nodes, improving fault tolerance and capacity. Vertical scaling (scale-up) increases the resources (CPU, RAM, storage) of an existing instance, often hitting hardware limits and requiring downtime. Option B correctly captures this distinction.

Answer

Horizontal scaling adds CPU/memory to existing servers; vertical scaling adds more servers.

Answer

Horizontal scaling is for databases only; vertical scaling is for web servers.

Answer

Horizontal scaling requires application downtime; vertical scaling is always online.

Question 17

A company uses Google Cloud and wants to understand their monthly cloud spend before the invoice arrives, track spending trends, and identify the top cost drivers across all services. Which built-in Google Cloud tool provides this visibility?

Accepted Answer

Cloud Billing reports and cost breakdown in the Billing console.. Cloud Billing reports and cost breakdown in the Billing console provide built-in, out-of-the-box visibility into monthly spend before the invoice arrives, spending trends, and top cost drivers across all services. This tool aggregates billing data from all projects and services, allowing you to filter by time range, project, service, or SKU, and view cost trends and breakdowns without additional configuration.

Answer

Cloud Monitoring dashboards with cost metrics.

Answer

Cloud Asset Inventory — it lists all resources and their costs.

Answer

Google Cloud pricing calculator — it shows estimated costs.

Question 18

A company stores customer data in Google Cloud and wants to ensure data confidentiality in the event that hardware is decommissioned and returned by Google. How does Google protect customer data when storage hardware reaches end of life?

Accepted Answer

Google uses approved data erasure and physical destruction processes (shredding, degaussing) for decommissioned storage media before hardware leaves its facilities.. Option B is correct because Google Cloud follows strict data destruction policies for decommissioned storage media. Before any hardware leaves Google's facilities, it undergoes approved data erasure (e.g., NIST SP 800-88 compliant wiping) followed by physical destruction (e.g., shredding, degaussing) to ensure customer data cannot be recovered. This process guarantees data confidentiality even if the hardware is returned or recycled.

Answer

Google transfers customer data to new hardware first, then ships the old hardware to the customer for self-destruction.

Answer

Customer data on decommissioned hardware is automatically encrypted, making it safe to discard without wiping.

Answer

Customers must pay a data destruction fee to ensure their data is wiped from decommissioned hardware.

Question 19

A platform business (like a marketplace) hosts both buyers and sellers. As more sellers join, the marketplace becomes more valuable to buyers (more choice), and vice versa. Cloud infrastructure that can scale to handle millions of users is essential for this model. What economic concept describes why the platform becomes more valuable as it grows?

Accepted Answer

Network effects — the platform becomes more valuable to each participant as the total number of participants grows.. The correct answer is B because network effects describe how the value of a platform increases for all participants as the user base grows. In a cloud-hosted marketplace, each new seller adds inventory that attracts more buyers, and each new buyer creates demand that attracts more sellers, creating a positive feedback loop. Cloud infrastructure is essential here because it must elastically scale to support this exponential growth in transactions and data without performance degradation.

Answer

Economies of scale — lower per-unit costs as production volume increases.

Answer

Monopoly pricing power — larger platforms can charge higher prices.

Answer

Marginal cost reduction — digital goods can be replicated at near-zero marginal cost.

Question 20

A company runs workloads across Google Cloud and on-premises environments. They want a single management plane to deploy and manage containerized applications consistently across both environments using the same tooling and policies. Which Google Cloud product provides this unified hybrid/multi-cloud management?

Accepted Answer

Anthos — Google's hybrid and multi-cloud application management platform.. Anthos is Google Cloud's hybrid and multi-cloud application management platform that provides a single control plane for deploying and managing containerized applications consistently across on-premises and cloud environments. It uses GKE on-prem and Anthos Config Management to enforce uniform policies, service mesh, and CI/CD pipelines, enabling the unified management described in the scenario.

Answer

Cloud Interconnect — it connects on-premises to Google Cloud.

Answer

Google Distributed Cloud — runs Google Cloud services inside the customer's data center.

Answer

Cloud Deployment Manager — deploys resources via infrastructure-as-code templates.