Cloud Digital Leader Practice Test 4 — 25 Questions

Question 1

A company has deployed a critical application on Google Cloud and wants to understand what happens to their workloads during a Google Cloud data center maintenance event (e.g., host system upgrades). What Google Compute Engine feature handles this automatically for most VMs?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Live migration transparently moves VMs to healthy hosts during maintenance with no VM downtime.. Google Compute Engine uses Live Migration to automatically move running VMs from a host undergoing maintenance (e.g., host system upgrades) to a healthy host without interrupting the VM. This process preserves the VM's memory, network connections, and disk state, resulting in zero VM downtime. It is enabled by default for most VM instances, except those with GPUs or certain machine types that explicitly opt out.

Answer

VMs are terminated and restarted automatically on new hardware, causing a few minutes of downtime.

Answer

VMs are snapshotted, the snapshot is restored on new hardware, and the VM is restarted.

Answer

Customers must subscribe to Google Cloud support to receive advance notice and schedule their own maintenance windows.

Question 2

A development team uses Cloud Build to automatically build, test, and create container images whenever code is pushed to their repository. The resulting Docker images need to be stored securely and made available to their GKE deployment pipelines. Which Google Cloud service stores and manages these container images?

Accepted Answer

Artifact Registry. Artifact Registry is the correct service because it is a fully managed, private container registry designed to store, manage, and secure Docker images and other artifacts. It integrates natively with Cloud Build for pushing images and with GKE for pulling them, supporting vulnerability scanning and IAM-based access control.

Answer

Cloud Storage bucket with a `containers/` folder.

Answer

Cloud SQL — storing build artifacts in a relational database.

Answer

Cloud Source Repositories — the code repository stores both source code and container images.

Question 3

What is the difference between RTO (Recovery Time Objective) and RPO (Recovery Point Objective) in disaster recovery planning?

Accepted Answer

RTO is the maximum acceptable downtime duration; RPO is the maximum acceptable data loss measured in time.. RTO (Recovery Time Objective) defines the maximum acceptable duration of downtime after a disaster, while RPO (Recovery Point Objective) defines the maximum acceptable amount of data loss measured in time (e.g., the age of the last backup). These are key metrics in disaster recovery planning that directly influence the choice of backup frequency, replication strategy, and failover architecture in cloud environments like GCDL.

Answer

RTO is the time to back up data; RPO is the time to restore it.

Answer

RTO and RPO are both measured in bytes — the maximum data that can be lost during recovery.

Answer

RTO is the number of replicas required; RPO is the geographic distance between backup sites.

Question 4

A data analytics team needs to analyze petabytes of structured data using SQL queries without managing any database infrastructure. Query results must return within seconds for most queries. Which Google Cloud service is designed for this use case?

Accepted Answer

BigQuery. BigQuery is a serverless, highly scalable data warehouse designed for analyzing petabytes of data using SQL without any infrastructure management. Its columnar storage and distributed query engine enable sub-second query performance on large datasets, making it ideal for this use case.

Answer

Cloud SQL

Answer

Cloud Bigtable

Answer

Cloud Spanner

Question 5

A security team needs to protect a web application behind an HTTP(S) Load Balancer from SQL injection and cross-site scripting (XSS) attacks. Which Google Cloud service provides these protections?

Accepted Answer

Cloud Armor. Cloud Armor is Google Cloud's edge security service that attaches to HTTP(S) Load Balancers and provides WAF capabilities, including preconfigured rules for SQL injection and XSS (the OWASP ModSecurity core rule set). It inspects requests at the load balancer before they reach the backend, blocking malicious payloads.

Answer

Cloud CDN

Answer

VPC firewall rules

Answer

Cloud DNS

Question 6

A company wants to use Google Cloud's Generative AI capabilities to build an internal assistant that can answer questions about company policies using documents stored in Google Drive. Which Google Cloud product provides pre-built infrastructure for building this type of AI application?

Accepted Answer

Vertex AI Agent Builder with Gemini and document-grounded search (RAG).. Vertex AI Agent Builder with Gemini and document-grounded search (RAG) is correct because it provides pre-built infrastructure for building a generative AI assistant that retrieves information from enterprise documents. It combines Gemini's large language model with Retrieval-Augmented Generation (RAG) to ground answers in company policy documents stored in Google Drive, without requiring custom model training or manual infrastructure setup.

Answer

BigQuery ML — train a custom language model on company policy documents.

Answer

Cloud Natural Language API — it reads and summarizes documents automatically.

Answer

Cloud Translation API — it translates policy documents into the user's language.

Question 7

A company's PostgreSQL database has grown to 50 TB and their application requires near-zero downtime, automatic failover, and the ability to scale reads horizontally without the migration complexity of switching to Spanner. Which Google Cloud database product is specifically designed as a fully managed, highly scalable PostgreSQL-compatible database?

Accepted Answer

AlloyDB for PostgreSQL. AlloyDB for PostgreSQL is a fully managed, PostgreSQL-compatible database service designed for high scalability, near-zero downtime, and automatic failover. It separates compute and storage to enable horizontal read scaling with read pools, and it uses a columnar engine for analytical acceleration, making it ideal for large workloads like 50 TB without the migration complexity of Spanner.

Answer

Cloud SQL (PostgreSQL)

Answer

Cloud Spanner

Answer

Bare metal PostgreSQL on Compute Engine

Question 8

A team uses Google Workspace (Gmail, Docs, Sheets) for their daily work. They do not manage any servers or software installation — Google maintains everything. Which cloud service model does Google Workspace represent?

Accepted Answer

Software as a Service (SaaS). Google Workspace is a classic example of Software as a Service (SaaS) because users access applications like Gmail, Docs, and Sheets via a web browser without managing the underlying infrastructure, operating systems, or software installations. Google handles all maintenance, security patching, and uptime, which aligns with the SaaS model where the provider delivers fully functional software over the internet. Unlike IaaS or PaaS, the end-user does not control the runtime environment or deploy custom code on the platform.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Database as a Service (DBaaS)

Question 9

After a major production outage, the engineering team conducts a review of what happened, why it happened, and how to prevent it in the future. This document is shared with all engineering teams. What is this practice called, and why does Google's SRE culture emphasize it?

Accepted Answer

Blameless postmortem — documenting the incident, root causes, and preventive actions to drive systemic learning without individual blame.. A blameless postmortem is a core SRE practice that focuses on documenting incidents, root causes, and preventive actions without assigning individual blame. Google's SRE culture emphasizes this to foster psychological safety, enabling teams to openly share failures and drive systemic improvements, which is essential for maintaining high reliability in large-scale distributed systems.

Answer

Performance review — identifying which engineers caused the outage for disciplinary action.

Answer

Capacity planning review — ensuring enough servers are provisioned to prevent future outages.

Answer

Change advisory board (CAB) review — approving that the outage fix is safe to deploy.

Question 10

An organization's leadership sets a goal to make all future business decisions based on data rather than intuition. They migrate from siloed departmental spreadsheets to a centralized cloud data platform where all teams access the same real-time data. What organizational concept does this represent?

Accepted Answer

Data-driven decision making — using objective data analysis rather than intuition to guide business decisions.. The scenario describes a shift from intuition-based decisions to decisions grounded in objective data analysis, which is the essence of data-driven decision making. The migration to a centralized cloud data platform ensures all teams access the same real-time data, eliminating silos and enabling consistent, evidence-based choices across the organization.

Answer

Data warehousing — storing historical data for reporting purposes.

Answer

Business intelligence — creating reports and dashboards.

Answer

Data governance — policies for who owns and manages data.

Question 11

A streaming media company (similar to Netflix or Spotify) uses AI to analyze a user's viewing or listening history and serve personalized content recommendations. Without cloud-scale compute and ML, this personalization would be impossible at scale. What business outcome does this AI-powered personalization primarily drive?

Accepted Answer

Increased user engagement and retention through relevant content discovery, driving higher subscription revenue.. AI-powered personalization at cloud scale directly increases user engagement by surfacing relevant content, which improves retention and drives subscription revenue. Without cloud-scale compute and ML, the real-time analysis of viewing history and collaborative filtering needed for personalized recommendations would be computationally infeasible for millions of users.

Answer

Reduced server costs due to more efficient content caching.

Answer

Elimination of human content curators who previously selected recommendations manually.

Answer

Reduction in content licensing costs because the AI selects cheaper content to recommend.

Question 12

An enterprise wants to give its business intelligence team a governed analytics platform where data models are defined centrally with version-controlled semantic definitions, and all reports are guaranteed to use the same business metric definitions. Which Google Cloud product is designed for this governed BI use case?

Accepted Answer

Looker, with its LookML semantic layer for centrally governed, version-controlled metric definitions used consistently across all reports. Looker is the correct choice because it provides a governed analytics platform with its LookML semantic layer. LookML allows data models to be defined centrally with version control, ensuring that all reports and dashboards use the same business metric definitions consistently. This directly addresses the enterprise's need for a governed BI solution where semantic definitions are managed and versioned.

Answer

Looker Studio, Google's free self-service data visualization tool

Answer

BigQuery, where analysts write shared SQL queries stored in the project

Answer

Vertex AI, which provides a model registry for governing ML model definitions

Question 13

A healthcare organization wants to build an application that ingests FHIR-formatted patient records from multiple hospital systems, normalizes them, and makes them queryable by clinical researchers. Which Google Cloud service is purpose-built for healthcare data interoperability?

Accepted Answer

Cloud Healthcare API with FHIR store support.. The Cloud Healthcare API with FHIR store support is purpose-built for healthcare data interoperability because it natively handles FHIR (Fast Healthcare Interoperability Resources) standards, including resource validation, versioning, and search. It provides a managed service that ingests, normalizes, and stores FHIR-formatted patient records from multiple hospital systems, enabling secure querying by clinical researchers without requiring custom ETL pipelines.

Answer

BigQuery — store FHIR JSON records and query them with SQL.

Answer

Cloud SQL — store patient records in a relational schema.

Answer

Google Forms — collect patient data directly from hospitals via web forms.

Question 14

A company needs to store large volumes of unstructured data (images, videos, backups, documents) with high durability and global accessibility. Which Google Cloud service is designed for object storage at any scale?

Accepted Answer

Cloud Storage. Cloud Storage is Google Cloud's fully managed, scalable object storage service designed for unstructured data such as images, videos, backups, and documents. It offers high durability (99.999999999% annual durability) and global accessibility via a unified namespace, making it the correct choice for storing large volumes of unstructured data at any scale.

Answer

Persistent Disk

Answer

Cloud Filestore

Answer

Cloud Spanner

Question 15

A company's application stores user passwords. Their security team says passwords must be stored as hashes, never in plaintext. They want to ensure this requirement is met even if a database is compromised. Why is password hashing (with salt) the correct approach?

Accepted Answer

Hashing with salt makes stored passwords irreversible — even if the database is stolen, attackers cannot recover the original passwords without computationally intensive per-user brute force.. Password hashing with salt is the correct approach because it transforms passwords into irreversible digests. Even if the database is compromised, an attacker cannot recover the original passwords without performing a computationally expensive brute-force attack on each salted hash individually. This ensures the plaintext password is never stored or recoverable, meeting the security requirement.

Answer

Hashing passwords allows the application to recover the original password when users forget it.

Answer

Storing passwords as hashes allows sharing them between systems for single sign-on.

Answer

Google Cloud automatically encrypts all database contents, making password hashing unnecessary.

Question 16

A company with fluctuating demand wants to pay only for the resources it consumes, with no long-term commitments. Which Google Cloud feature allows them to automatically adjust capacity based on real-time demand?

Accepted Answer

Autoscaling. Autoscaling is the correct answer because it automatically adjusts the number of compute resources (e.g., VM instances) up or down based on real-time demand metrics such as CPU utilization, request count, or custom metrics. This allows the company to pay only for the resources it consumes without any long-term commitments, as instances are added or removed dynamically to match current load.

Answer

Cloud Armor

Answer

Committed use discounts

Answer

Preemptible VMs

Question 17

A company is evaluating whether to use a public cloud (Google Cloud), a private cloud (on-premises VMware), or a managed private cloud (hosted single-tenant environment). Which scenario is the strongest argument for choosing a managed private cloud over a public cloud?

Accepted Answer

The company has regulatory requirements that mandate physically dedicated (single-tenant) infrastructure or strict hardware-level isolation.. A managed private cloud (hosted single-tenant) provides physically dedicated infrastructure that ensures hardware-level isolation, which is often required by strict regulatory standards such as HIPAA, PCI-DSS, or FedRAMP. Public clouds like Google Cloud typically use multi-tenant architectures where multiple customers share the same physical hardware, which may not satisfy these compliance mandates. The key differentiator is the guarantee of dedicated physical resources, not just logical isolation.

Answer

The company wants to pay less for cloud services.

Answer

The company wants the fastest possible internet speeds for their applications.

Answer

The company has fewer than 10 employees and doesn't need multi-tenant scale.

Question 18

A media company currently licenses proprietary software for video editing that costs $50,000 per seat annually. They are considering a cloud-based SaaS alternative at $5,000 per seat annually. Beyond the licensing cost, which additional financial benefits should they consider when calculating total cost of ownership (TCO)?

Accepted Answer

Eliminated hardware costs, reduced IT maintenance staff, no upgrade cycles, and freed facilities costs — all lowering the true on-premises TCO that should be compared against the SaaS subscription.. The total cost of ownership (TCO) for on-premises software includes not just the licensing fee but also hardware acquisition, IT staff for maintenance, periodic upgrade costs, and physical facility expenses. By moving to a SaaS model, the company eliminates these variable costs, making the $5,000 per seat subscription a more accurate comparison against the fully-loaded on-premises TCO, which often exceeds the $50,000 license alone.

Answer

Only the licensing cost difference ($45,000 per seat) matters for the financial comparison.

Answer

The SaaS option has an internet dependency risk that may cost more than the savings.

Answer

The vendor's market capitalization, since larger companies are more financially stable.

Question 19

An organization is considering cloud adoption. Their CTO argues that 'the cloud is just someone else's computers — why should we trust it?' Which is the strongest counterargument for cloud trust and reliability?

Accepted Answer

Google Cloud operates at a scale enabling reliability (multiple 9s SLAs, redundant infrastructure, third-party audits) that most organizations cannot achieve with their own data centers.. It directly addresses the CTO's concern by highlighting that major cloud providers like Google Cloud operate at a scale that enables reliability metrics (e.g., 99.99% uptime SLAs) and infrastructure redundancy (e.g., multi-region deployments, automatic failover) that most on-premises data centers cannot match. This is supported by third-party audits (e.g., SOC 2, ISO 27001) that validate security and operational practices, making the cloud not just 'someone else's computers' but a professionally managed, highly resilient environment.

Answer

Cloud providers can be fully trusted because governments require them to guarantee zero downtime.

Answer

Google employees are more trustworthy than the company's own IT staff.

Answer

The CTO's concern is valid — companies should never move sensitive data to the cloud.

Question 20

A developer wants to deploy a containerized web application without managing servers, clusters, or Kubernetes configuration. The application should automatically scale to zero when not in use and handle bursts of traffic. Which Google Cloud service is the best fit?

Accepted Answer

Cloud Run. Cloud Run is the best fit because it is a fully managed serverless container platform that automatically scales to zero when idle and scales up to handle traffic bursts, without requiring any server, cluster, or Kubernetes configuration. The developer simply deploys a container image, and Cloud Run handles all infrastructure management, including scaling and load balancing.

Answer

Google Kubernetes Engine (GKE)

Answer

Compute Engine

Answer

App Engine Standard