Cloud Digital Leader Practice Test 29 — 15 Questions

Question 1

A company is migrating its on-premises data center to Google Cloud. They want to avoid large upfront hardware costs and only pay for the resources they consume. Which cloud benefit does this represent?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Pay-as-you-go pricing. The scenario describes a shift from capital expenditure (CapEx) to operational expenditure (OpEx), which is the core of pay-as-you-go pricing. This model allows the company to avoid large upfront hardware costs and only pay for the compute, storage, and network resources actually consumed, aligning with Google Cloud's consumption-based billing model.

Answer

Security

Answer

High availability

Answer

Scalability

Question 2

An engineer is setting up budgets and alerts to manage costs. They want to receive a notification when forecasted spend exceeds 80% of the budget amount. Which step is required to enable forecast-based alerts?

Accepted Answer

Select 'Forecasted spend' as the alert threshold type in the budget configuration. In the budget alert configuration, you can set alert thresholds based on actual or forecasted spend. To alert on forecasted spend, you must select the 'Forecasted spend' option when defining the threshold rules.

Answer

Enable billing export to BigQuery and set up a scheduled query

Answer

Create a Cloud Function that checks current spend every hour

Answer

Use the Cost Management API to query forecast data

Question 3

Which THREE are required to achieve HIPAA compliance on Google Cloud?

Accepted Answer

Sign a Business Associate Agreement (BAA) with Google. HIPAA requires covered entities and their business associates to have a written agreement that establishes the permitted and required uses of protected health information (PHI). Google Cloud provides a standard Business Associate Agreement (BAA) that customers must sign to contractually bind Google to HIPAA obligations, including safeguarding ePHI and reporting breaches. Without a signed BAA, Google is not legally liable as a business associate under HIPAA, making this a foundational requirement for compliance.

Answer

Use a dedicated project for all PHI workloads

Answer

Configure multi-factor authentication for all users

Question 4

A team uses Terraform to create a VPC as shown. They now need to add a Compute Engine instance in the subnet. Which of the following correctly references the subnet?

Accepted Answer

Set `subnetwork = google_compute_subnetwork.subnet.self_link`. When adding a Compute Engine instance to a subnet in Terraform, you must use the `subnetwork` argument (not `network`) and reference the subnet's `self_link` attribute. The `google_compute_subnetwork` resource's `self_link` provides the full URI required by the instance resource to attach to the correct subnet within the VPC.

Answer

Set `network = google_compute_subnetwork.subnet.self_link`

Answer

Set `subnetwork = google_compute_subnetwork.subnet.name`

Answer

Set `network = google_compute_network.vpc.name` and `subnetwork = google_compute_network.vpc.self_link`

Question 5

Match each Google Cloud serverless compute option to its characteristic.

Accepted Answer

Cloud Functions: Executes code in response to events, scaling to zero when idle.. The correct matches are: Cloud Functions for event-driven execution, Cloud Run for containerized HTTP services, and App Engine for managed web applications. Common confusions involve swapping the event-driven nature of Cloud Functions with the container-based approach of Cloud Run, or pairing App Engine with event-driven triggers instead of web app hosting.

Answer

Cloud Functions: Runs containerized applications in a managed environment.

Answer

Cloud Run: Fully managed platform that supports multiple programming languages for web apps.

Answer

App Engine: Event-driven, short-lived execution of code in response to triggers.

Question 6

A developer is building a mobile backend that receives thousands of events per second from IoT devices. The events must be processed in real time and then stored for analysis. Which set of services should they use?

Accepted Answer

Cloud Pub/Sub -> Cloud Dataflow -> BigQuery. Cloud Pub/Sub provides a scalable, fully managed message ingestion service for high-throughput event streams, Cloud Dataflow (based on Apache Beam) enables real-time stream processing with exactly-once semantics and low latency, and BigQuery offers a serverless data warehouse for fast analytical queries on the processed data. This combination handles the requirements of real-time processing and subsequent storage for analysis without operational overhead.

Answer

Cloud IoT Core -> Cloud Storage -> Dataproc

Answer

Cloud Pub/Sub -> Cloud Storage -> BigQuery

Answer

Cloud Pub/Sub -> Cloud Functions -> Cloud SQL

Question 7

An organization is planning to adopt cloud services but needs to understand which party is responsible for physical security of the data center. Under the shared responsibility model, who is responsible for physical data center security in a public cloud deployment?

Accepted Answer

The cloud provider, who is entirely responsible for all physical security of data center facilities and hardware. In the cloud shared responsibility model, physical security of data centers — including building access controls, perimeter security, surveillance, and hardware security — is always the sole responsibility of the cloud provider. Customers never have physical access to cloud provider data centers and bear no responsibility for physical security. This is one of the fundamental security benefits of using a public cloud.

Answer

The customer, because they own the data stored in the data center

Answer

A shared responsibility: the cloud provider secures the building exterior while the customer secures the server racks

Answer

A third-party security company contracted by both the customer and the cloud provider

Question 8

Drag and drop the steps to create a new Virtual Private Cloud (VPC) network with a subnet in Google Cloud into the correct order.

Accepted Answer

Navigate to VPC networks page, then click 'Create VPC Network', then enter a name for the VPC, then configure the subnet settings, then click 'Create'.. The correct order starts with navigating to the VPC networks page, then creating a new VPC, naming it, configuring the subnet, and finally creating it.

Answer

Navigate to VPC networks page, then click 'Create VPC Network', then configure the subnet settings, then enter a name for the VPC, then click 'Create'.

Answer

Click 'Create VPC Network', then navigate to VPC networks page, then enter a name, then configure subnet, then click 'Create'.

Answer

Navigate to VPC networks page, then enter a name for the VPC, then click 'Create VPC Network', then configure the subnet, then click 'Create'.

Question 9

A global e-commerce company needs to deliver content to users quickly regardless of location. Which Google Cloud service can cache content at edge locations to reduce latency?

Accepted Answer

Cloud CDN. Cloud CDN (Content Delivery Network) uses Google's globally distributed edge caches to deliver content from the nearest point of presence (PoP) to the user, significantly reducing latency. It integrates with Cloud Load Balancing and Cloud Storage to cache static and dynamic content, accelerating delivery for a global e-commerce platform.

Answer

Cloud Storage

Answer

Cloud Load Balancing

Answer

Cloud Interconnect

Question 10

A company uses Cloud Functions and notices that some functions are taking longer than expected. They want to identify which functions have the highest latency. What should they use?

Accepted Answer

Cloud Monitoring metrics. Cloud Monitoring metrics, specifically the 'execution_time' metric for Cloud Functions, provide the precise latency data needed to identify functions with the highest execution duration. Unlike logs or error reports, metrics are designed for numerical aggregation and can be used to create dashboards or alerts that rank functions by their p50, p95, or p99 latency values.

Answer

Cloud Audit Logs

Answer

Error Reporting

Answer

Cloud Logging queries

Question 11

An organization has multiple projects and wants to aggregate logs from all projects into a single bucket for long-term retention and compliance. What should they do?

Accepted Answer

Use log sinks to route logs to a Cloud Storage bucket in a central project. Log sinks in Cloud Logging can route logs from multiple source projects to a centralized Cloud Storage bucket in a separate project. This meets the requirement for long-term retention and compliance, as Cloud Storage provides durable, cost-effective archival storage with lifecycle management policies.

Answer

Use log sinks to route logs to a BigQuery dataset

Answer

Enable VPC Flow Logs

Answer

Use Cloud Logging's aggregation view

Question 12

A non-profit organization wants to reduce IT overhead so they can focus on their mission. They currently manage their own email server, file storage, and website. What cloud approach best supports this transformation?

Accepted Answer

Replacing on-premise services with Google Workspace, Cloud Storage, and App Engine. It fully eliminates IT overhead by replacing self-managed services with fully managed cloud alternatives: Google Workspace handles email and collaboration, Cloud Storage provides scalable file storage without server management, and App Engine runs the website with automatic scaling and zero infrastructure maintenance. This aligns with the goal of reducing IT overhead to focus on the mission.

Answer

Upgrading their on-premise hardware to faster servers

Answer

Creating a hybrid cloud with a VPN to their data center

Answer

Migrating their applications to virtual machines in Compute Engine

Question 13

An organization needs to run a batch process every night that analyzes terabytes of data from Cloud Storage and writes results back to BigQuery. The job is not time-sensitive and can be preempted. Which compute approach is most cost-effective?

Accepted Answer

Compute Engine with preemptible VMs. Preemptible VMs on Compute Engine offer the lowest cost for fault-tolerant batch workloads because they are up to 80% cheaper than regular VMs but can be terminated at any time. Cloud Run has a request timeout limit and is not ideal for long-running batch jobs. GKE with preemptible nodes is also cost-effective but requires Kubernetes expertise and is more complex than simply using preemptible VMs. Cloud Functions has a timeout limit.

Answer

Cloud Functions with background trigger

Answer

Google Kubernetes Engine with standard nodes

Answer

Cloud Run with manual scaling

Question 14

Drag and drop the steps to set up a Cloud CDN for a backend bucket in the correct order.

Accepted Answer

Create and prepare the bucket, then set up a load balancer, then enable Cloud CDN, then test.. First create and prepare the bucket, then set up a load balancer, enable CDN, and test.

Answer

Create and prepare the bucket, then enable Cloud CDN, then set up a load balancer, then test.

Answer

Set up a load balancer, then create and prepare the bucket, then enable Cloud CDN, then test.

Answer

Create and prepare the bucket, then set up a load balancer, then test, then enable Cloud CDN.

Question 15

A developer needs to trigger a serverless function whenever a new file is uploaded to a Cloud Storage bucket. The function will process the file and store results in Firestore. Which Google Cloud service should they use for the function?

Accepted Answer

Cloud Functions. Cloud Functions is an event-driven serverless compute service that can be triggered by Cloud Storage events.

Answer

App Engine

Answer

Compute Engine

Answer

Cloud Run