Cloud Digital Leader Practice Test 32 — 15 Questions

Question 1

An organization runs a multi-region web application behind a global external HTTP(S) load balancer. They want to protect against DDoS attacks and filter traffic based on IP reputation and request headers. Which service should they integrate with the load balancer?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Cloud Armor. Cloud Armor is Google Cloud's edge security service that attaches to global external HTTP(S) load balancers and provides WAF rules, IP reputation/denylists, geo-blocking, and header-based filtering. It's the native integration point for DDoS and Layer 7 filtering at the load balancer.

Answer

Cloud CDN

Answer

VPC firewall rules

Answer

Cloud NAT

Question 2

An organization wants to ensure its data is encrypted at rest and in transit by default on Google Cloud. Which statement is correct?

Accepted Answer

Data is encrypted at rest and in transit by default.. Google Cloud encrypts data at rest and in transit by default for many services, with customer-managed keys optional.

Answer

Customers must use CMEK to encrypt data at rest.

Answer

Only data in transit is encrypted by default.

Answer

Encryption is optional and must be enabled by the customer.

Question 3

A media company stores video files on-premises and wants to migrate them to Google Cloud for processing and transcoding. The files are accessed by a legacy on-premises application that cannot be modified. Which migration strategy should they use?

Accepted Answer

Use Storage Transfer Service to move data to Cloud Storage, then mount the bucket using Cloud Storage FUSE on the on-premises server.. Storage Transfer Service allows transferring data from on-premises to Cloud Storage, while using Cloud Storage FUSE or a VPN can keep the on-premises application accessing the files. The best approach is to use Storage Transfer Service for bulk migration and then configure hybrid access.

Answer

Use Transfer Appliance to ship data to Google Cloud and set up a VPN for the application to access Cloud Storage via private IP.

Answer

Migrate the application to run on Compute Engine and access Cloud Storage natively.

Answer

Use gsutil rsync to copy files to Cloud Storage and update the application to use Cloud Storage URLs.

Question 4

A developer needs to add machine learning capabilities to their application without training models from scratch. Which Google Cloud service provides pre-trained models via API?

Accepted Answer

Cloud Vision API. Cloud Vision API offers pre-trained models for image analysis accessible via API, allowing developers to integrate ML without training.

Answer

Vertex AI

Answer

AI Platform Training

Answer

Cloud AutoML

Question 5

A company wants to adopt a hybrid cloud strategy to keep sensitive data on-premises while taking advantage of Google Cloud for analytics. Which TWO Google Cloud products enable this architecture? (Choose 2)

Accepted Answer

Anthos. Anthos provides a consistent platform across on-premises and cloud. Cloud VPN or Cloud Interconnect can connect on-prem to Google Cloud. Secret Manager is for secrets; Cloud Run is serverless; BigQuery is analytics but does not enable hybrid architecture.

Answer

BigQuery

Answer

Cloud Run

Answer

Secret Manager

Question 6

An organization wants to reduce its carbon footprint by using Google Cloud. Which of the following statements about Google Cloud's sustainability efforts is correct?

Accepted Answer

Google Cloud matches 100% of its global electricity consumption with renewable energy.. Google Cloud matches 100% of its global electricity consumption with renewable energy and aims for 24/7 carbon-free energy by 2030.

Answer

Google Cloud uses nuclear energy as its primary power source.

Answer

Google Cloud data centers are powered by 100% carbon-free energy since 2020.

Answer

Google Cloud purchases carbon offsets to neutralize all emissions.

Question 7

A company wants to run a stateful application that requires persistent, high-performance block storage attached to a single Compute Engine instance. The application needs consistent low latency. Which storage solution should they use?

Accepted Answer

Persistent Disk. Persistent Disk provides durable block storage with consistent performance attached to a single VM. Local SSDs are ephemeral and not suitable for stateful data.

Answer

Local SSD

Answer

Filestore

Answer

Cloud Storage

Question 8

A company has a requirement to rotate encryption keys every 90 days. They are using Cloud KMS to manage keys for Cloud Storage. What is the correct way to achieve key rotation with minimal impact to existing encrypted objects?

Accepted Answer

Enable automatic rotation on the key with a 90-day period.. Cloud KMS supports automatic rotation based on a schedule. When a key is rotated, a new version is created, and new data is encrypted with the new version while old data remains decryptable with the old version.

Answer

Manually rotate the key every 90 days by generating a new key version.

Answer

Use Cloud HSM to generate a new key and update the bucket default encryption.

Answer

Create a new key and re-encrypt all existing objects using the new key.

Question 9

A security team needs to detect and respond to threats across their Google Cloud environment. Which THREE services should they use together? (Choose 3)

Accepted Answer

Mandiant. Security Command Center for vulnerability scanning and threat detection, Chronicle for SIEM and incident response, and Mandiant for threat intelligence and forensic investigation.

Answer

Cloud Logging

Answer

Cloud Armor

Question 10

Which Google Cloud service provides a serverless data warehouse for running SQL queries on petabyte-scale data with no need to manage infrastructure?

Accepted Answer

BigQuery. BigQuery is a fully managed, serverless data warehouse that supports SQL queries on massive datasets.

Answer

Cloud SQL

Answer

Dataflow

Answer

Pub/Sub

Question 11

A developer wants to deploy a containerised microservice that can scale to zero when not in use and automatically scale up based on HTTP requests. The microservice is stateless and runs a custom Docker image. Which Google Cloud compute service is BEST suited for this workload?

Accepted Answer

Cloud Run. Cloud Run is a serverless compute platform that runs stateless containers and can scale to zero when idle. It automatically scales based on incoming requests, making it ideal for event-driven microservices. GKE requires a cluster to run even when idle, Compute Engine VMs are always on, and App Engine Standard does not support custom containers.

Answer

Google Kubernetes Engine (GKE)

Answer

Compute Engine with managed instance groups

Answer

App Engine Standard environment

Question 12

A retail company experiences sudden traffic spikes during holiday sales. They want to automatically add or remove compute capacity to handle the load without manual intervention. Which Google Cloud feature should they use?

Accepted Answer

Managed instance groups with autoscaling. Managed instance groups with autoscaling automatically adjust the number of VM instances based on load, ensuring scalability without over-provisioning.

Answer

Cloud Load Balancing

Answer

Cloud Functions

Answer

Cloud CDN

Question 13

A company runs a batch job that processes data every night. The job can tolerate interruptions and currently runs on a dedicated on-premises server that is underutilized. They want to migrate to Google Cloud and minimise compute cost. Which compute option is most cost-effective?

Accepted Answer

Preemptible VMs. Preemptible VMs offer significantly lower cost (up to 80% discount) but can be terminated at any time, making them ideal for fault-tolerant batch workloads. Standard VMs are more expensive, sole-tenant nodes are for isolation, and GPUs add cost.

Answer

Sole-tenant nodes

Answer

Standard (on-demand) VMs

Answer

VMs with GPUs

Question 14

A start-up wants to quickly build and deploy a web application using managed services to avoid operational overhead. They need a serverless compute platform that automatically scales and charges only for execution time. Which Google Cloud service should they use?

Accepted Answer

Cloud Run. Cloud Run is a serverless compute platform that runs containers, auto-scales, and charges per execution. Compute Engine is IaaS, Kubernetes Engine is container orchestration (not serverless), and Cloud Functions is also serverless but for event-driven functions, not full web apps with containers.

Answer

Cloud Functions

Answer

Compute Engine

Answer

Google Kubernetes Engine (GKE)

Question 15

An enterprise is planning to migrate its on-premises data center to Google Cloud to avoid a hardware refresh cycle. The migration must minimize application changes. Which migration strategy should they prioritize?

Accepted Answer

Lift and shift (rehost). Lift and shift (rehost) moves applications as-is to cloud VMs, minimizing changes while avoiding hardware refresh costs.

Answer

Re-architecting applications to use microservices

Answer

Replacing applications with SaaS

Answer

Refactoring to use managed services like Cloud SQL