Cloud Digital Leader Practice Test 25 — 15 Questions

Question 1

A team uses Terraform to create a VPC as shown. They now need to add a Compute Engine instance in the subnet. Which of the following correctly references the subnet?

Accepted Answer

Set `subnetwork = google_compute_subnetwork.subnet.self_link`. When adding a Compute Engine instance to a subnet in Terraform, you must use the `subnetwork` argument (not `network`) and reference the subnet's `self_link` attribute. The `google_compute_subnetwork` resource's `self_link` provides the full URI required by the instance resource to attach to the correct subnet within the VPC.

Answer

Set `network = google_compute_subnetwork.subnet.self_link`

Answer

Set `subnetwork = google_compute_subnetwork.subnet.name`

Answer

Set `network = google_compute_network.vpc.name` and `subnetwork = google_compute_network.vpc.self_link`

Question 2

Match each Google Cloud serverless compute option to its characteristic.

Accepted Answer

Cloud Functions: Executes code in response to events, scaling to zero when idle.. The correct matches are: Cloud Functions for event-driven execution, Cloud Run for containerized HTTP services, and App Engine for managed web applications. Common confusions involve swapping the event-driven nature of Cloud Functions with the container-based approach of Cloud Run, or pairing App Engine with event-driven triggers instead of web app hosting.

Answer

Cloud Functions: Runs containerized applications in a managed environment.

Answer

Cloud Run: Fully managed platform that supports multiple programming languages for web apps.

Answer

App Engine: Event-driven, short-lived execution of code in response to triggers.

Question 3

A developer is building a mobile backend that receives thousands of events per second from IoT devices. The events must be processed in real time and then stored for analysis. Which set of services should they use?

Accepted Answer

Cloud Pub/Sub -> Cloud Dataflow -> BigQuery. Cloud Pub/Sub provides a scalable, fully managed message ingestion service for high-throughput event streams, Cloud Dataflow (based on Apache Beam) enables real-time stream processing with exactly-once semantics and low latency, and BigQuery offers a serverless data warehouse for fast analytical queries on the processed data. This combination handles the requirements of real-time processing and subsequent storage for analysis without operational overhead.

Answer

Cloud IoT Core -> Cloud Storage -> Dataproc

Answer

Cloud Pub/Sub -> Cloud Storage -> BigQuery

Answer

Cloud Pub/Sub -> Cloud Functions -> Cloud SQL

Question 4

An organization is planning to adopt cloud services but needs to understand which party is responsible for physical security of the data center. Under the shared responsibility model, who is responsible for physical data center security in a public cloud deployment?

Accepted Answer

The cloud provider, who is entirely responsible for all physical security of data center facilities and hardware. In the cloud shared responsibility model, physical security of data centers — including building access controls, perimeter security, surveillance, and hardware security — is always the sole responsibility of the cloud provider. Customers never have physical access to cloud provider data centers and bear no responsibility for physical security. This is one of the fundamental security benefits of using a public cloud.

Answer

The customer, because they own the data stored in the data center

Answer

A shared responsibility: the cloud provider secures the building exterior while the customer secures the server racks

Answer

A third-party security company contracted by both the customer and the cloud provider

Question 5

Drag and drop the steps to create a new Virtual Private Cloud (VPC) network with a subnet in Google Cloud into the correct order.

Accepted Answer

Navigate to VPC networks page, then click 'Create VPC Network', then enter a name for the VPC, then configure the subnet settings, then click 'Create'.. The correct order starts with navigating to the VPC networks page, then creating a new VPC, naming it, configuring the subnet, and finally creating it.

Answer

Navigate to VPC networks page, then click 'Create VPC Network', then configure the subnet settings, then enter a name for the VPC, then click 'Create'.

Answer

Click 'Create VPC Network', then navigate to VPC networks page, then enter a name, then configure subnet, then click 'Create'.

Answer

Navigate to VPC networks page, then enter a name for the VPC, then click 'Create VPC Network', then configure the subnet, then click 'Create'.

Question 6

A global e-commerce company needs to deliver content to users quickly regardless of location. Which Google Cloud service can cache content at edge locations to reduce latency?

Accepted Answer

Cloud CDN. Cloud CDN (Content Delivery Network) uses Google's globally distributed edge caches to deliver content from the nearest point of presence (PoP) to the user, significantly reducing latency. It integrates with Cloud Load Balancing and Cloud Storage to cache static and dynamic content, accelerating delivery for a global e-commerce platform.

Answer

Cloud Storage

Answer

Cloud Load Balancing

Answer

Cloud Interconnect

Question 7

A company uses Cloud Functions and notices that some functions are taking longer than expected. They want to identify which functions have the highest latency. What should they use?

Accepted Answer

Cloud Monitoring metrics. Cloud Monitoring metrics, specifically the 'execution_time' metric for Cloud Functions, provide the precise latency data needed to identify functions with the highest execution duration. Unlike logs or error reports, metrics are designed for numerical aggregation and can be used to create dashboards or alerts that rank functions by their p50, p95, or p99 latency values.

Answer

Cloud Audit Logs

Answer

Error Reporting

Answer

Cloud Logging queries

Question 8

An organization has multiple projects and wants to aggregate logs from all projects into a single bucket for long-term retention and compliance. What should they do?

Accepted Answer

Use log sinks to route logs to a Cloud Storage bucket in a central project. Log sinks in Cloud Logging can route logs from multiple source projects to a centralized Cloud Storage bucket in a separate project. This meets the requirement for long-term retention and compliance, as Cloud Storage provides durable, cost-effective archival storage with lifecycle management policies.

Answer

Use log sinks to route logs to a BigQuery dataset

Answer

Enable VPC Flow Logs

Answer

Use Cloud Logging's aggregation view

Question 9

A non-profit organization wants to reduce IT overhead so they can focus on their mission. They currently manage their own email server, file storage, and website. What cloud approach best supports this transformation?

Accepted Answer

Replacing on-premise services with Google Workspace, Cloud Storage, and App Engine. It fully eliminates IT overhead by replacing self-managed services with fully managed cloud alternatives: Google Workspace handles email and collaboration, Cloud Storage provides scalable file storage without server management, and App Engine runs the website with automatic scaling and zero infrastructure maintenance. This aligns with the goal of reducing IT overhead to focus on the mission.

Answer

Upgrading their on-premise hardware to faster servers

Answer

Creating a hybrid cloud with a VPN to their data center

Answer

Migrating their applications to virtual machines in Compute Engine

Question 10

An organization needs to run a batch process every night that analyzes terabytes of data from Cloud Storage and writes results back to BigQuery. The job is not time-sensitive and can be preempted. Which compute approach is most cost-effective?

Accepted Answer

Compute Engine with preemptible VMs. Preemptible VMs on Compute Engine offer the lowest cost for fault-tolerant batch workloads because they are up to 80% cheaper than regular VMs but can be terminated at any time. Cloud Run has a request timeout limit and is not ideal for long-running batch jobs. GKE with preemptible nodes is also cost-effective but requires Kubernetes expertise and is more complex than simply using preemptible VMs. Cloud Functions has a timeout limit.

Answer

Cloud Functions with background trigger

Answer

Google Kubernetes Engine with standard nodes

Answer

Cloud Run with manual scaling

Question 11

Drag and drop the steps to set up a Cloud CDN for a backend bucket in the correct order.

Accepted Answer

Create and prepare the bucket, then set up a load balancer, then enable Cloud CDN, then test.. First create and prepare the bucket, then set up a load balancer, enable CDN, and test.

Answer

Create and prepare the bucket, then enable Cloud CDN, then set up a load balancer, then test.

Answer

Set up a load balancer, then create and prepare the bucket, then enable Cloud CDN, then test.

Answer

Create and prepare the bucket, then set up a load balancer, then test, then enable Cloud CDN.

Question 12

A developer needs to trigger a serverless function whenever a new file is uploaded to a Cloud Storage bucket. The function will process the file and store results in Firestore. Which Google Cloud service should they use for the function?

Accepted Answer

Cloud Functions. Cloud Functions is an event-driven serverless compute service that can be triggered by Cloud Storage events.

Answer

App Engine

Answer

Compute Engine

Answer

Cloud Run

Question 13

Which TWO of the following cloud characteristics directly enable a business to innovate faster than using traditional IT?

Accepted Answer

Global infrastructure that allows launching in new regions quickly. A global infrastructure with multiple regions and edge locations allows businesses to deploy applications and services in new geographic areas rapidly, reducing time-to-market compared to building or leasing physical data centers. Option E is correct because self-service provisioning enables developers to spin up resources like virtual machines, databases, or containers in minutes via APIs or console, eliminating the weeks-long procurement and setup cycles of traditional IT, thus accelerating experimentation and iteration.

Answer

Vendor lock-in for long-term contracts

Answer

Capital expenditure model for budgeting

Answer

Customizable hardware configurations for optimal performance

Question 14

Which TWO of the following are key characteristics of cloud computing as defined by NIST? (Choose 2)

Accepted Answer

Measured service. Measured service is a key characteristic of cloud computing as defined by NIST (SP 800-145). It means that cloud systems automatically control and optimize resource usage by leveraging a metering capability at some level of abstraction appropriate to the type of service (e.g., storage, processing, bandwidth, and active user accounts). This allows both the provider and consumer to monitor, control, and report usage, providing transparency for billing and chargeback.

Answer

Virtualization

Answer

Multi-tenancy

Answer

Serverless computing

Question 15

A retail company experiences traffic spikes during holiday sales. They need to automatically scale their web application instances based on CPU utilization. Which Google Cloud service should they configure?

Accepted Answer

Managed instance group with autoscaling. Managed instance groups with autoscaling automatically add or remove VM instances based on metrics like CPU utilization, handling traffic spikes efficiently.

Answer

Cloud Load Balancing

Answer

Google Kubernetes Engine with Horizontal Pod Autoscaler

Answer

Cloud Functions