Cloud Digital Leader Practice Test 1 — 25 Questions

Question 1

A DevOps team wants to adopt GitOps practices for managing their Google Cloud infrastructure. Which combination of tools and practices defines a GitOps approach to cloud infrastructure management?

Accepted Answer

Storing all infrastructure as code (Terraform or Config Connector) in a Git repository, using pull requests for all changes, and automated CI/CD pipelines that apply changes and detect drift from the declared state. Option B is correct because GitOps is defined by using a Git repository as the single source of truth for declarative infrastructure, with pull requests driving changes and automated CI/CD pipelines reconciling the actual state with the declared state. This approach enforces version control, auditability, and drift detection, which are core to managing Google Cloud infrastructure at scale with tools like Terraform or Config Connector.

Answer

Manually applying Terraform changes from engineers' local machines and documenting changes in a shared wiki

Answer

Using the Google Cloud Console to make infrastructure changes and exporting the configuration to Git after each change

Answer

GitOps only applies to application code deployment, not to cloud infrastructure management

Question 2

A startup is building an application that sends daily promotional push notifications to millions of mobile users on both iOS and Android devices. Which Google Cloud or Google service most directly provides the infrastructure for sending these mobile push notifications?

Accepted Answer

Firebase Cloud Messaging (FCM), which delivers push notifications to iOS and Android devices through Google's mobile notification infrastructure. Firebase Cloud Messaging (FCM) is Google's dedicated, scalable infrastructure for delivering push notifications to both iOS and Android devices. It handles device registration, message routing, and platform-specific delivery through Apple Push Notification service (APNs) for iOS and Google's own push service for Android, making it the most direct and appropriate service for this use case.

Answer

Cloud Pub/Sub, which delivers messages to subscribed mobile application instances

Answer

Cloud Storage, by writing notification content to buckets that mobile applications poll for new messages

Answer

Cloud Run, by exposing an API that mobile applications call to retrieve their pending notifications

Question 3

A digital media company hosts video content globally. They want to reduce origin server load and deliver content faster to viewers worldwide. Their current architecture routes all viewer requests directly to the origin servers in `us-central1`, causing high latency for viewers in Asia and Europe. Which Google Cloud networking capability addresses this?

Accepted Answer

Enable Cloud CDN to cache video content at Google's global edge PoPs, serving viewers from the nearest location.. Cloud CDN uses Google's global edge Points of Presence (PoPs) to cache video content closer to viewers, reducing latency and offloading origin servers. When a viewer requests content, Cloud CDN serves it from the nearest edge cache if available, avoiding a direct trip to the origin in us-central1. This directly addresses the high latency for viewers in Asia and Europe without requiring server replication or bandwidth increases.

Answer

Deploy identical origin servers in every Google Cloud region globally.

Answer

Use Cloud VPN to route viewer traffic through a direct tunnel to the origin servers.

Answer

Increase the origin servers' network bandwidth to handle more simultaneous viewer connections.

Question 4

A development team uses Cloud Build to automatically build, test, and create container images whenever code is pushed to their repository. The resulting Docker images need to be stored securely and made available to their GKE deployment pipelines. Which Google Cloud service stores and manages these container images?

Accepted Answer

Artifact Registry. Artifact Registry is the correct service because it is a fully managed, private container registry designed to store, manage, and secure Docker images and other artifacts. It integrates natively with Cloud Build for pushing images and with GKE for pulling them, supporting vulnerability scanning and IAM-based access control.

Answer

Cloud Storage bucket with a `containers/` folder.

Answer

Cloud SQL — storing build artifacts in a relational database.

Answer

Cloud Source Repositories — the code repository stores both source code and container images.

Question 5

A startup wants to launch a new product globally within 2 weeks. If it relied on traditional on-premises infrastructure, provisioning servers would take 6–8 weeks. By using the public cloud, the startup can launch on time. Which cloud benefit does this scenario illustrate?

Accepted Answer

Speed and agility — cloud resources are provisioned in minutes, enabling faster time-to-market.. Option B is correct because the scenario directly highlights how public cloud resources can be provisioned in minutes via APIs and automation, compared to the 6–8 weeks required for on-premises hardware procurement and setup. This speed and agility enable the startup to meet the 2-week launch deadline, demonstrating a core cloud benefit of rapid time-to-market.

Answer

Economies of scale — the cloud provider has more purchasing power than the startup.

Answer

Geographic reach — the cloud provider has data centers in more regions.

Answer

Reliability — cloud providers have better uptime SLAs than on-premises servers.

Question 6

A company stores its data in Google Cloud. The security team asks: can Google employees access our customer data without our knowledge or consent? What does Google's commitment ensure?

Accepted Answer

Google commits that customer data is not accessed without authorization, with access logged via Access Transparency and governed by contractual data processing commitments.. Option B is correct because Google Cloud's Access Transparency feature logs all data access attempts by Google personnel, and contractual data processing commitments under the Cloud Data Processing Addendum (CDPA) prohibit unauthorized access. This ensures that customer data is not accessed without explicit authorization, and any access is logged and auditable, aligning with the security team's concern about knowledge and consent.

Answer

Google employees have unrestricted access to all customer data as part of the infrastructure service agreement.

Answer

Google uses customer data to train its global AI models to improve services.

Answer

Customer data stored in Google Cloud is automatically accessible by government agencies on request.

Question 7

A global fintech company needs a database that can handle financial transactions across 50+ countries with consistent, ACID-compliant operations, SQL queries, and automatic global replication with no downtime for maintenance. Which Google Cloud database service meets all these requirements?

Accepted Answer

Cloud Spanner. Cloud Spanner is the only Google Cloud database that provides ACID-compliant transactions, full SQL support, and automatic synchronous global replication with no downtime for maintenance. It is designed for horizontally scalable, globally distributed applications that require strong consistency across regions, making it the ideal choice for a fintech company operating in 50+ countries.

Answer

Cloud SQL (PostgreSQL)

Answer

Cloud Bigtable

Answer

Firestore

Question 8

A company runs a customer-facing web application with a published SLA of 99.95% monthly availability. In the past month, the application experienced two outages: a 12-minute outage and a 7-minute outage. Did the company meet its SLA?

Accepted Answer

Yes — 99.95% availability in a 30-day month allows approximately 21.6 minutes of downtime; total outage of 19 minutes is within the budget, meaning the SLA was met. Option B is correct because the SLA of 99.95% monthly availability permits a maximum downtime of approximately 21.6 minutes in a 30-day month (total minutes in month × (1 - 0.9995) = 43,200 × 0.0005 = 21.6 minutes). The combined outage of 19 minutes (12 + 7) is within this budget, so the SLA was met. This calculation assumes a 30-day month; if the month had 31 days, the allowable downtime would be about 22.3 minutes, still exceeding 19 minutes.

Answer

No — the company missed the SLA because any outage automatically constitutes an SLA breach

Answer

The answer cannot be determined without knowing the cause of the outages

Answer

No — two separate outages in one month always constitute an SLA breach regardless of duration

Question 9

A hospital runs a patient records system that must remain on-premises due to strict regulatory data residency requirements. However, they also want to use cloud-based AI for diagnostic imaging analysis. Which cloud deployment model best describes their architecture?

Accepted Answer

Hybrid cloud — combining on-premises infrastructure with public cloud services.. The hospital must keep patient records on-premises to comply with data residency regulations, but wants to leverage cloud-based AI for diagnostic imaging. A hybrid cloud model combines on-premises infrastructure (for sensitive data) with public cloud services (for AI processing), allowing data to remain resident while compute-intensive tasks are offloaded. This matches the scenario exactly, as hybrid cloud enables workload distribution across private and public environments.

Answer

Public cloud — all workloads run in a provider's infrastructure.

Answer

Private cloud — all workloads run in the hospital's own infrastructure.

Answer

Multi-cloud — using multiple public cloud providers simultaneously.

Question 10

Which term describes the model where the cloud provider is responsible for the security of the cloud infrastructure, while the customer is responsible for security within their own cloud environment (data, applications, access management)?

Accepted Answer

Shared responsibility model. The shared responsibility model defines the division of security responsibilities between the cloud provider and the customer. Google secures the physical infrastructure, hardware, hypervisor, and core services. The customer secures what they put in the cloud: data classification, access control, application security, network configuration, and compliance. The boundary between provider and customer responsibility varies by service model (IaaS vs. PaaS vs. SaaS).

Answer

Zero trust security model

Answer

Defense in depth strategy

Answer

Identity federation model

Question 11

A business intelligence team wants to create interactive dashboards and reports from their BigQuery data without writing code. They need to share reports with stakeholders who don't have GCP accounts. Which Google Cloud tool is most appropriate?

Accepted Answer

Looker Studio (formerly Data Studio). Looker Studio (formerly Data Studio) is the correct choice because it is a no-code, drag-and-drop business intelligence tool that connects directly to BigQuery, enabling the creation of interactive dashboards and reports. It also supports sharing reports via public links or embedded views, allowing stakeholders without GCP accounts to access them without needing IAM permissions.

Answer

Vertex AI Workbench

Answer

Cloud Dataprep by Trifacta

Answer

BigQuery Studio

Question 12

A media company currently licenses proprietary software for video editing that costs $50,000 per seat annually. They are considering a cloud-based SaaS alternative at $5,000 per seat annually. Beyond the licensing cost, which additional financial benefits should they consider when calculating total cost of ownership (TCO)?

Accepted Answer

Eliminated hardware costs, reduced IT maintenance staff, no upgrade cycles, and freed facilities costs — all lowering the true on-premises TCO that should be compared against the SaaS subscription.. Option B is correct because the total cost of ownership (TCO) for on-premises software includes not just the licensing fee but also hardware acquisition, IT staff for maintenance, periodic upgrade costs, and physical facility expenses. By moving to a SaaS model, the company eliminates these variable costs, making the $5,000 per seat subscription a more accurate comparison against the fully-loaded on-premises TCO, which often exceeds the $50,000 license alone.

Answer

Only the licensing cost difference ($45,000 per seat) matters for the financial comparison.

Answer

The SaaS option has an internet dependency risk that may cost more than the savings.

Answer

The vendor's market capitalization, since larger companies are more financially stable.

Question 13

According to the NIST definition of cloud computing, which characteristic allows users to unilaterally provision computing resources such as server time and network storage without requiring human interaction with the service provider?

Accepted Answer

On-demand self-service. NIST's five essential characteristics of cloud computing are: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. 'On-demand self-service' specifically describes the ability for users to provision capabilities automatically without provider interaction — using a web console or API to spin up VMs, databases, or storage instantly, without calling a salesperson or waiting for manual provisioning.

Answer

Broad network access

Answer

Resource pooling

Answer

Measured service

Question 14

A company uses two different public cloud providers (AWS for their North American operations and Google Cloud for their European operations) to meet data residency requirements and avoid vendor lock-in. Which deployment model does this represent?

Accepted Answer

Multi-cloud. This scenario describes using two distinct public cloud providers (AWS and Google Cloud) to meet data residency and avoid vendor lock-in, which is the definition of a multi-cloud deployment model. Multi-cloud involves using multiple public cloud services from different vendors, as opposed to combining public and private infrastructure (hybrid cloud) or simply deploying across multiple regions within a single provider.

Answer

Hybrid cloud

Answer

Multi-region

Answer

Distributed cloud

Question 15

A retail company wants to build a recommendation engine that suggests products to customers based on their browsing history. The team has ML expertise but wants to use Google's pre-built ML infrastructure to train and deploy models at scale without managing compute resources. Which Google Cloud service should they use?

Accepted Answer

Vertex AI. Vertex AI is the correct choice because it provides a fully managed, unified ML platform that handles the entire ML workflow—from data preparation and training to deployment and monitoring—without requiring the team to manage underlying compute infrastructure. It integrates with Google Cloud's pre-built ML infrastructure, including distributed training, AutoML, and custom model serving, making it ideal for building and scaling a recommendation engine.

Answer

BigQuery ML

Answer

Cloud AI Platform Notebooks (now Vertex AI Workbench)

Answer

Cloud Dataflow

Question 16

A company needs to send messages between different microservices in a decoupled way. When one service publishes an event, multiple downstream services should receive and process it independently. Which Google Cloud service enables this publish-subscribe messaging pattern?

Accepted Answer

Cloud Pub/Sub. Cloud Pub/Sub is the correct choice because it is Google Cloud's fully managed, asynchronous messaging service designed specifically for the publish-subscribe pattern. It allows a publisher service to emit events to a topic, and multiple subscriber services can independently pull or push those messages from that topic, ensuring decoupled and reliable communication.

Answer

Cloud Tasks

Answer

Cloud Scheduler

Answer

Eventarc

Question 17

A company's web service has a Service Level Objective (SLO) of 99.9% monthly availability. In a 30-day month, how many minutes of downtime are allowed before the SLO is violated?

Accepted Answer

~43.2 minutes. The SLO of 99.9% monthly availability means the service can be unavailable for 0.1% of the total monthly time. In a 30-day month, total minutes are 30 × 24 × 60 = 43,200 minutes. 0.1% of 43,200 minutes is 43.2 minutes, so option B is correct.

Answer

~4.3 minutes

Answer

~7.2 hours

Answer

~8.6 hours

Question 18

A company's application is composed of 15 microservices. When a performance issue occurs, the team struggles to determine which service is causing latency since request traces span multiple services. Which Google Cloud service helps identify which specific service in a microservices chain is causing slowdowns?

Accepted Answer

Cloud Trace — captures distributed request traces showing end-to-end latency across all microservices.. Cloud Trace is designed specifically for distributed tracing in microservices architectures. It captures end-to-end latency data for each request as it traverses multiple services, allowing you to pinpoint which service in the chain is introducing the most delay. This directly addresses the problem of identifying the specific service causing slowdowns in a 15-service application.

Answer

Cloud Logging — search logs for error messages across all 15 services.

Answer

Cloud Monitoring dashboards — create per-service CPU utilization graphs.

Answer

Security Command Center — scan for misconfigurations causing performance issues.

Question 19

A company is concerned about which security responsibilities belong to Google versus which belong to them when using Google Cloud's managed database service (Cloud SQL). In the shared responsibility model, which security tasks does Google handle?

Accepted Answer

Google handles physical security, hardware maintenance, and OS and database software patching.. In the shared responsibility model for Google Cloud services like Cloud SQL, Google is responsible for security 'of' the cloud, which includes physical security of data centers, hardware maintenance, and patching the underlying operating system and database software. This ensures the infrastructure hosting Cloud SQL instances is secure, while the customer remains responsible for securing their data, access policies, and application-level configurations.

Answer

Google controls who can access the database and what data can be stored.

Answer

Google is responsible for backing up customer data and ensuring data recovery.

Answer

Google determines which compliance certifications the customer's application must meet.

Question 20

A SRE team wants to alert when their service is consuming error budget faster than expected, rather than alerting only when the SLO threshold is crossed. Which Cloud Monitoring alerting strategy supports this approach?

Accepted Answer

SLO burn rate alerting — alert when error budget is being consumed faster than the measurement window allows.. B is correct because SLO burn rate alerting is specifically designed to detect when error budget is being consumed faster than the measurement window allows, enabling proactive alerts before the SLO threshold is breached. This approach uses a burn rate (e.g., 2x, 10x) to trigger alerts when the error budget depletion rate exceeds a predefined multiple of the expected rate, allowing the team to respond early. It directly addresses the requirement of alerting on error budget consumption speed rather than waiting for a hard SLO violation.

Answer

Threshold alerting — alert when error rate exceeds 0.1%.

Answer

Uptime check alerting — alert when health checks fail.

Answer

Log-based alerting — alert when specific error messages appear in logs.