Cloud Digital Leader Practice Test 22 — 15 Questions

Question 1

A company's security architect wants to implement 'privacy by design' principles when building a new customer data platform on Google Cloud. What does privacy by design mean in this context?

Accepted Answer

Privacy by design means privacy protections (encryption, data minimization, access controls, retention policies) are architected into the system from the start, not added after deployment.. Privacy by design is a foundational principle that requires embedding privacy controls—such as encryption, data minimization, access controls, and retention policies—into the architecture of a system from the initial design phase, rather than retrofitting them after deployment. In the context of Google Cloud, this means using services like Cloud KMS for encryption, IAM for fine-grained access control, and data lifecycle policies to minimize data collection and enforce retention limits from the start. Option B correctly captures this proactive, integrated approach.

Answer

Privacy by design means the platform must refuse to collect any personal data from customers.

Answer

Privacy by design is a legal requirement that mandates using only on-premises systems for customer data.

Answer

Privacy by design means storing all data in an encrypted format and using a VPN for all access.

Question 2

A retail chain with 500 stores wants to implement dynamic pricing — adjusting prices in real-time based on demand signals, competitor pricing, inventory levels, and weather forecasts. This requires processing millions of data points and updating prices across all stores within minutes. Which cloud capabilities make this possible?

Accepted Answer

Real-time stream processing (Pub/Sub + Dataflow) combined with ML model serving (Vertex AI) to ingest signals and compute optimized prices at scale.. Option B is correct because it combines real-time stream processing (Pub/Sub for ingesting millions of data points, Dataflow for processing them with low latency) with ML model serving (Vertex AI) to compute optimized prices on the fly. This architecture enables the sub-minute price updates required for dynamic pricing across 500 stores, leveraging Google Cloud's serverless, auto-scaling capabilities.

Answer

A relational database that stores all prices with daily batch updates from a pricing spreadsheet.

Answer

A cloud-hosted ERP system that replaces the on-premises inventory management system.

Answer

A static website hosted on Cloud Storage that displays current prices.

Question 3

A company's application experiences a P1 (critical) production incident at 2 AM on a Sunday. The on-call engineer resolves the issue after 3 hours but isn't sure which team members to contact or what steps to follow during an incident. What operational practice and tooling would have helped manage this incident better?

Accepted Answer

Establish a documented incident response process with defined roles, escalation paths, and runbooks, supported by on-call rotation tooling and Cloud Monitoring alerting.. Option B is correct because a documented incident response process with defined roles, escalation paths, and runbooks ensures that the on-call engineer knows exactly whom to contact and what steps to follow during a P1 incident. Combined with on-call rotation tooling (e.g., PagerDuty, Opsgenie) and Cloud Monitoring alerting, this practice reduces mean time to acknowledge (MTTA) and mean time to resolve (MTTR) by providing clear, repeatable procedures. Without such a process, the engineer wasted time determining the response, which a runbook would have eliminated.

Answer

Increase the application's max_instances so it scales to handle the issue automatically.

Answer

Move all production deployments to Sunday nights to avoid weekday incident risk.

Answer

Disable monitoring alerts to prevent false alarms that wake engineers unnecessarily.

Question 4

A company wants to optimize Cloud Storage costs for a bucket containing 100 TB of access logs. The logs from the last 7 days are frequently analyzed; logs from 8–90 days are occasionally reviewed; logs older than 90 days are archived for compliance but rarely accessed. What is the most cost-effective storage class configuration?

Accepted Answer

Configure lifecycle rules: Standard (0-7 days) → Nearline (8-90 days) → Archive (90+ days).. Option B is correct because it aligns the storage class with the access patterns of the logs: Standard for frequently accessed recent data, Nearline for occasional access, and Archive for rarely accessed compliance data. This minimizes costs by using cheaper storage for older data while maintaining performance for active analysis. Lifecycle rules automate the transition, ensuring no manual intervention is needed.

Answer

Store all 100 TB in Standard storage for consistent access performance.

Answer

Delete all logs older than 7 days to minimize storage costs.

Answer

Store all logs in Archive storage since most are rarely accessed.

Question 5

Which term best describes when an organization uses cloud-based tools (video conferencing, cloud document collaboration, project management platforms) to enable employees to work productively from any location?

Accepted Answer

Cloud-enabled distributed work / remote work — employees collaborate productively from any location using cloud tools.. Option B is correct because the scenario explicitly describes employees using cloud-based tools (video conferencing, cloud document collaboration, project management platforms) to work productively from any location. This is the definition of cloud-enabled distributed work or remote work, where cloud infrastructure provides the connectivity, storage, and collaboration capabilities that decouple work from a fixed physical office. The key enabler is the cloud's ability to deliver real-time synchronization and access to shared resources over the internet, which is the core technical mechanism here.

Answer

Outsourcing — moving work to contractors in lower-cost locations.

Answer

Digital transformation — the company is changing its business model.

Answer

Automation — replacing human work with AI and robotics.

Question 6

A developer wants to run a small piece of code that resizes images whenever a new image is uploaded to Cloud Storage. The code runs for less than a second and should only be triggered by the upload event. No always-on server is needed. Which Google Cloud service is ideal?

Accepted Answer

Cloud Functions triggered by Cloud Storage object creation events.. Cloud Functions is the ideal serverless compute service for event-driven, short-lived tasks like image resizing triggered by Cloud Storage uploads. It automatically scales to zero when idle, charges only for execution time (sub-second in this case), and natively binds to Cloud Storage object creation events via the `google.storage.object.finalize` trigger, eliminating the need for any always-on infrastructure.

Answer

A Compute Engine VM that runs continuously, checking for new uploads every minute.

Answer

Cloud Run with a permanent container that listens for uploads.

Answer

BigQuery scheduled query that processes new uploads daily.

Question 7

A company wants to ensure that their confidential data stored in BigQuery cannot be shared outside the company's Google Cloud organization. Which Google Cloud security capability prevents data from being shared with external Google accounts (outside the organization)?

Accepted Answer

The 'Domain Restricted Sharing' organization policy constraint, which prevents IAM policies from granting access to users outside specified trusted domains. Option B is correct because the 'Domain Restricted Sharing' organization policy constraint (constraints/iam.allowedPolicyMemberDomains) explicitly prevents IAM policies from granting access to principals outside of specified trusted domains. This directly blocks sharing BigQuery data with external Google accounts by enforcing that all IAM members belong to the allowed domains, such as the company's own Google Workspace domain.

Answer

Enabling BigQuery data encryption with CMEK to prevent external parties from decrypting shared data

Answer

BigQuery row-level security policies that restrict rows based on user email domain

Answer

Disabling external IP addresses on all Google Cloud resources to prevent data from leaving the organization's network

Question 8

A regional grocery chain wants to compete with national chains that have larger marketing budgets. A consultant argues that cloud adoption can help level the playing field. Which cloud advantage most directly supports this argument?

Accepted Answer

Pay-per-use cloud services give the regional chain access to the same advanced analytics, personalization, and demand forecasting capabilities as national chains without requiring equivalent capital investment. Option C is correct because pay-per-use cloud services enable the regional chain to leverage advanced analytics, personalization, and demand forecasting tools that are typically available only to large enterprises with significant capital budgets. This directly addresses the core challenge of competing with national chains by providing access to sophisticated data-driven marketing capabilities without the upfront investment in infrastructure and software licenses.

Answer

The regional chain can use cloud object storage to store marketing images, matching the storage capacity of national chains

Answer

Cloud providers offer free unlimited compute to smaller businesses to help them compete

Answer

The regional chain can hire fewer IT staff because cloud providers manage all aspects of their business operations

Question 9

A traditional newspaper company is seeing declining print subscriptions and wants to transform its business model. Which cloud capability most directly enables the company to reach new digital audiences and create personalized content experiences at scale?

Accepted Answer

Using cloud analytics and content delivery networks to personalize articles for each reader and distribute content globally in real time. Option B is correct because cloud analytics and content delivery networks (CDNs) directly enable the newspaper to analyze reader behavior and preferences at scale, then deliver personalized content globally with low latency. This combination allows the company to reach new digital audiences and create tailored experiences that drive engagement and subscription growth, which is the core of transforming a print business to a digital-first model.

Answer

Replacing all physical printing equipment with equivalent virtual machines in the cloud

Answer

Storing archived newspaper editions in cloud object storage to reduce on-premises storage costs

Answer

Training existing journalists to use cloud-based email and word processing tools

Question 10

A consumer goods company uses cloud-based demand sensing — analyzing real-time sales signals, social media trends, and weather data to adjust production runs dynamically. This has reduced stockouts by 35% and overstock waste by 28%. Which aspect of digital transformation does this most directly exemplify?

Accepted Answer

Operational transformation through real-time data integration and machine learning that enables continuous, signal-driven production decisions. Option B is correct because the scenario describes a shift from static, forecast-based production to dynamic, signal-driven decisions using real-time data integration (sales signals, social media, weather) and machine learning. This directly exemplifies operational transformation, a core pillar of digital transformation where cloud-based analytics and AI enable continuous optimization of core business processes like manufacturing.

Answer

Cost reduction through infrastructure consolidation and server decommissioning

Answer

Business continuity improvement through data backup and disaster recovery in the cloud

Answer

Employee productivity improvement through providing staff with cloud-based collaboration tools

Question 11

A company's finance team wants to understand why their cloud bills vary significantly month to month, unlike their fixed on-premises IT costs. Which fundamental cloud pricing characteristic explains this variability?

Accepted Answer

Consumption-based pricing means cloud costs scale directly with actual usage, unlike fixed on-premises costs. Option B is correct because cloud computing operates on a consumption-based (pay-as-you-go) pricing model, where costs are directly tied to the amount of resources consumed (e.g., compute hours, storage GB, data transfer). Unlike fixed on-premises IT costs, which are incurred regardless of actual usage (e.g., hardware depreciation, facility leases), cloud bills fluctuate as usage scales up or down. This fundamental characteristic explains the month-to-month variability observed by the finance team.

Answer

Cloud providers change their prices frequently, causing unpredictable costs

Answer

Cloud providers apply hidden fees that vary randomly each month

Answer

Cloud costs are fixed like on-premises costs; the variability must be caused by billing errors

Question 12

An operations team has been asked to estimate the annual cost impact of a proposed new cloud architecture. The architecture would replace 50 on-demand n2-standard-4 VMs (running 24/7) with an autoscaling group that averages 10 VMs under normal load but scales to 50 during peak hours (approximately 8 hours per day). Which analytical approach best estimates the cost impact?

Accepted Answer

Model the actual usage pattern: calculate cost for (16 normal hours × 10 VMs) + (8 peak hours × 50 VMs) per day, compare to fixed cost of 50 VMs × 24 hours, and use Google Cloud Pricing Calculator to price the VM type. Option B is correct because it accurately models the variable usage pattern of the autoscaling group: 16 hours at 10 VMs plus 8 peak hours at 50 VMs per day. This approach then compares the daily cost to the fixed 50 VMs × 24 hours baseline, using the Google Cloud Pricing Calculator to price the n2-standard-4 instance type. This reflects the pay-per-use billing model of Google Compute Engine, where autoscaling does not change per-VM pricing but reduces total cost by running fewer instances during off-peak hours.

Answer

Assume the autoscaling group always runs at average load (10 VMs) and multiply by the annual hours to get the new cost

Answer

Request a custom quote from Google Cloud sales since pricing for autoscaling groups is negotiated individually

Answer

The cost will be identical since autoscaling groups use the same VM type as the fixed fleet

Question 13

An organization's digital transformation initiative is failing to deliver expected outcomes despite significant cloud technology investment. A review reveals that business units operate in silos, processes remain unchanged, and employees resist new ways of working. Which factor is most likely the root cause of the failure?

Accepted Answer

Insufficient change management, cultural resistance, and siloed operations are preventing the organization from realizing technology benefits. Option C is correct because the failure stems from organizational and cultural factors—siloed operations, unchanged processes, and employee resistance—which are classic symptoms of inadequate change management. Cloud technology alone cannot drive transformation; it must be paired with process reengineering and cultural adoption. The GCDL framework emphasizes that digital transformation is as much about people and processes as it is about technology.

Answer

The organization chose the wrong cloud provider for its technical workloads

Answer

The cloud services selected are not technically advanced enough to deliver transformation outcomes

Answer

The organization is spending too much on cloud services, leaving insufficient budget for transformation

Question 14

A company architect is explaining cloud network connectivity options to executives. She distinguishes between using the public internet to connect to cloud services versus using a dedicated private connection. What is the primary advantage of a dedicated private connection over the public internet for enterprise workloads?

Accepted Answer

Dedicated private connections provide consistent, predictable bandwidth and lower latency by bypassing public internet congestion and variable routing. A dedicated private connection, such as AWS Direct Connect or Azure ExpressRoute, provides consistent, predictable bandwidth and lower latency because it bypasses the public internet's variable routing and congestion. This is critical for enterprise workloads that require stable performance for real-time applications, large data transfers, or hybrid cloud architectures. The public internet introduces jitter, packet loss, and unpredictable latency due to shared infrastructure and best-effort routing.

Answer

Dedicated connections are always free, while public internet connections incur data transfer charges

Answer

Dedicated connections provide stronger encryption because the public internet uses no encryption

Answer

Public internet connections have higher bandwidth limits than dedicated connections

Question 15

A developer wants to run her application code without managing any servers, operating systems, or runtime environments. She wants to focus entirely on writing business logic. Which cloud service model best fits this requirement?

Accepted Answer

Serverless / Functions as a Service (FaaS), where the developer writes and deploys code functions and the provider manages all underlying infrastructure automatically. Serverless/FaaS (Option C) is the correct choice because it abstracts away all server, OS, and runtime management, allowing the developer to deploy individual functions that execute in response to events. The cloud provider automatically scales and manages the underlying infrastructure, so the developer writes only business logic without provisioning or patching anything.

Answer

Infrastructure as a Service (IaaS), where the developer provisions virtual machines and installs the runtime

Answer

Platform as a Service (PaaS), where the developer deploys code to a managed platform that handles the OS and runtime

Answer

Software as a Service (SaaS), where the developer uses a fully managed application built by the cloud provider