Cloud Digital Leader Practice Test 30 — 15 Questions

Question 1

A startup wants to run a containerized web application that scales to zero when not in use, and only pay for the time the container is processing requests. Which Google Cloud compute service should they choose?

Accepted Answer

Cloud Run. Cloud Run is the correct choice because it is a fully managed serverless compute platform that automatically scales your containerized application to zero when there are no incoming requests. You are billed only for the resources consumed during request processing, measured in 100-millisecond increments, which aligns perfectly with the requirement to pay only for active processing time.

Answer

Google Kubernetes Engine (GKE)

Answer

App Engine Standard Environment

Answer

Compute Engine with autoscaling

Question 2

A company uses Cloud SQL for PostgreSQL and needs to run complex analytical queries on the same dataset without affecting the performance of the transactional database. What should they do?

Accepted Answer

Create read replicas of the Cloud SQL instance and run queries on the replicas. Option D is correct because using Cloud SQL read replicas offloads read-only queries from the primary instance. Option A is wrong because BigQuery is for data warehousing, not real-time replication. Option B is wrong because exporting to Cloud Storage is not for live queries. Option C is wrong because increasing machine type may not isolate analytical loads.

Answer

Schedule periodic exports to Cloud Storage and query with BigQuery

Answer

Upgrade the Cloud SQL instance to a higher machine type

Answer

Use BigQuery to directly query Cloud SQL via federated queries

Question 3

A company wants to store archival data that must be retained for 10 years. The data is accessed less than once a year. Which Cloud Storage class is the most cost-effective?

Accepted Answer

Archive Storage. Archive Storage is the most cost-effective option for data that must be retained for 10 years and is accessed less than once a year. This class offers the lowest storage cost among Google Cloud Storage classes, specifically designed for long-term preservation of data that is rarely accessed, with a minimum storage duration of 365 days and higher retrieval costs that are acceptable given the infrequent access pattern.

Answer

Standard Storage

Answer

Nearline Storage

Answer

Coldline Storage

Question 4

A company uses BigQuery for analytics and needs to enforce row-level security based on user department. Only users from the 'Sales' department should see rows where department = 'Sales'. Which BigQuery feature should they use?

Accepted Answer

Row-level access policies using a filter on the department column. Option B is correct because BigQuery row-level access policies allow filtering rows based on conditions. Option A is wrong because column-level security hides columns, not rows. Option C is wrong because authorized views are for sharing data across projects. Option D is wrong because IAM roles are for access control at the table/dataset level, not row-level.

Answer

Custom IAM roles with fine-grained permissions

Answer

Column-level security with classification tags

Answer

Authorized views with a WHERE clause

Question 5

A developer is building a mobile backend that receives thousands of events per second from IoT devices. The events must be processed in real time and then stored for analysis. Which set of services should they use?

Accepted Answer

Cloud Pub/Sub -> Cloud Dataflow -> BigQuery. Option A is correct because Cloud Pub/Sub provides a scalable, fully managed message ingestion service for high-throughput event streams, Cloud Dataflow (based on Apache Beam) enables real-time stream processing with exactly-once semantics and low latency, and BigQuery offers a serverless data warehouse for fast analytical queries on the processed data. This combination handles the requirements of real-time processing and subsequent storage for analysis without operational overhead.

Answer

Cloud IoT Core -> Cloud Storage -> Dataproc

Answer

Cloud Pub/Sub -> Cloud Storage -> BigQuery

Answer

Cloud Pub/Sub -> Cloud Functions -> Cloud SQL

Question 6

A company wants to migrate a legacy monolithic application to Google Cloud with minimal code changes. The application runs on a specific OS version and uses a relational database. Which migration approach is most suitable?

Accepted Answer

Lift and shift to Compute Engine and Cloud SQL. Option C is correct because 'Lift and shift' (rehosting) moves the application with minimal changes. Option A is wrong because refactoring requires code changes. Option B is wrong because replatforming may require changes to the platform. Option D is wrong because rebuilding is a complete rewrite.

Answer

Rebuild the application using serverless functions

Answer

Refactor the application into microservices

Answer

Replatform to use Cloud Run

Question 7

A developer needs to grant a service account the minimum permissions required to publish messages to a Pub/Sub topic. Which IAM role should they assign?

Accepted Answer

roles/pubsub.publisher. The correct answer is C because the `roles/pubsub.publisher` role grants the minimum permissions required to publish messages to a Pub/Sub topic. This role includes the `pubsub.topics.publish` permission, which allows a service account to send messages to a specific topic without granting any other unnecessary permissions like subscribing or managing the topic.

Answer

roles/editor

Answer

roles/pubsub.subscriber

Answer

roles/pubsub.admin

Question 8

A project manager wants a cost-effective way to run batch processing jobs that run for a few hours each night. The jobs are fault-tolerant and can be interrupted. Which Compute Engine option is most suitable?

Accepted Answer

Preemptible VMs. Preemptible VMs are Compute Engine instances that last up to 24 hours and can be terminated at any time by Google Cloud, making them ideal for fault-tolerant, interruptible batch jobs that run for a few hours each night. They offer up to 80% cost savings compared to regular VMs, which aligns perfectly with the project manager's requirement for a cost-effective solution.

Answer

N2 high-CPU VMs

Answer

Regular VMs with committed use discounts

Answer

Sole-tenant nodes

Question 9

A company uses Cloud Spanner for a global application. They need to ensure high availability and disaster recovery across regions. Which TWO actions should they take? (Choose 2)

Accepted Answer

Schedule regular backups using Cloud Spanner backup feature. Option B is correct because Cloud Spanner's built-in backup feature allows you to create consistent backups of your database without impacting performance, and these backups can be restored to a different region for disaster recovery. This provides a reliable way to recover from regional failures or data corruption, ensuring high availability and DR across regions.

Answer

Deploy the database in a single region with backups

Answer

Configure read replicas in a different region

Answer

Use Cloud Memorystore to cache database queries

Question 10

A financial services company is migrating a legacy monolithic application to Google Cloud. The application uses a SQL Server database and has compliance requirements to encrypt data at rest and in transit. The migration must minimize code changes. The application runs on Windows Server and currently uses Active Directory for authentication. The company wants to use Google Cloud's managed services where possible. Which approach best meets these requirements?

Accepted Answer

Lift and shift the application to Compute Engine with SQL Server on Windows VMs. Use Cloud SQL for SQL Server with encryption enabled, and configure Active Directory via Managed Microsoft AD.. Option B is correct because it uses Compute Engine (minimal code changes) with Cloud SQL for SQL Server (managed encryption at rest and in transit) and Managed Microsoft AD (integrates with existing AD). Option A is incorrect because it uses SQL Server on VMs (more operational overhead) and does not fully leverage managed services; Cloud VPN is for connectivity, not encryption. Option C is incorrect because containerizing SQL Server is complex and requires code changes. Option D is incorrect because keeping the database on-premises does not meet the goal of using managed services.

Answer

Migrate the application to Compute Engine with SQL Server on Windows VMs. Use Cloud SQL for SQL Server but keep the database on-premises for compliance.

Answer

Containerize the application and deploy on GKE with SQL Server in a container. Use Cloud SQL for SQL Server with encryption.

Answer

Migrate the application to Compute Engine instances with SQL Server on Windows VMs. Use Cloud VPN for connectivity. Enable encryption on the VMs and use SSL for SQL connections.

Question 11

A company wants to implement a CI/CD pipeline for their Cloud Run services. Which THREE Google Cloud services should they use? (Choose 3)

Accepted Answer

Cloud Build. Cloud Build is the correct service because it is Google Cloud's fully managed CI/CD platform that can automatically build, test, and deploy code from a repository. For Cloud Run services, Cloud Build can trigger builds on code changes, run tests, and then deploy the container image directly to Cloud Run using a cloudbuild.yaml configuration file.

Answer

Cloud Operations Suite

Answer

Cloud Deployment Manager

Question 12

A developer deploys a Cloud Function with the command shown. The function needs to process a file upload that typically takes 2 minutes. What is the most likely issue?

Accepted Answer

The memory allocation might be too low if the file is large. Option A is correct because the command shown does not specify a memory allocation, so the Cloud Function defaults to 256 MB. If the file being uploaded is large, this low memory can cause the function to run out of memory and fail, even if the timeout is sufficient. Processing a file upload often requires loading the file into memory, making memory a critical resource.

Answer

The runtime python39 is not available

Answer

The function cannot be triggered by HTTP

Answer

The timeout is too short for processing a 2-minute upload

Question 13

A data team has an IAM policy on a BigQuery dataset as shown. Alice needs to run a query that joins across multiple datasets. She receives a permission error. What is the most likely cause?

Accepted Answer

Alice lacks the jobUser role to run queries. Option B is correct because the BigQuery `jobUser` role is required to run query jobs, including those that join across datasets. The IAM policy shown only grants dataset-level permissions (like `dataViewer` or `dataOwner`), but Alice lacks the `jobUser` role at the project level, which is necessary to submit a query job. Without this role, she receives a permission error even if she has read access to the datasets.

Answer

The policy denies all users except Bob

Answer

Alice does not have permission to read the dataset

Answer

Bob’s dataOwner role prevents others from querying

Question 14

A company needs to analyze streaming data from IoT devices in real time. Which Google Cloud service should they use as the primary ingestion and analysis pipeline?

Accepted Answer

Dataflow. Dataflow is the correct choice because it provides a unified stream and batch processing model based on Apache Beam, enabling real-time ingestion and analysis of streaming IoT data with exactly-once processing semantics and automatic scaling. BigQuery is a data warehouse for analytics on stored data, not a real-time ingestion pipeline. Cloud Storage is an object store for static data, not a streaming pipeline. Cloud Pub/Sub is a messaging service for ingestion but lacks built-in analysis capabilities.

Answer

BigQuery

Answer

Cloud Storage

Answer

Cloud Pub/Sub

Question 15

A company uses Cloud CDN to deliver static content. They notice that some content is being served stale despite a TTL of 1 hour. What should they check to ensure content is always fresh?

Accepted Answer

Verify that the origin server sets appropriate Cache-Control headers (e.g., max-age=3600).. Option A is correct because Cloud CDN relies on the Cache-Control: max-age directive from the origin server to determine how long content should be considered fresh. If the origin does not set max-age=3600 (or a comparable value), Cloud CDN may serve stale content even if the CDN TTL is configured to 1 hour, as the CDN respects the origin's cache headers by default. Ensuring the origin sets appropriate Cache-Control headers guarantees that Cloud CDN caches content for the intended duration.

Answer

Enable cache invalidation for all objects daily.

Answer

Increase the TTL in the CDN configuration to 24 hours.

Answer

Use Cloud Storage as the origin and set caching to 'public'.