Cloud Digital Leader Practice Test 34 — 15 Questions

Question 1

A company wants to reduce its carbon footprint by using cloud infrastructure powered by renewable energy. Which Google Cloud sustainability commitment is most relevant?

Accepted Answer

100% renewable energy match. Google Cloud matches 100% of its global electricity consumption with renewable energy purchases.

Answer

Net zero emissions by 2025

Answer

Carbon offset program

Answer

Carbon-free energy by 2025

Question 2

A company runs a globally distributed application with users in North America, Europe, and Asia. They need to serve static content (images, videos) with low latency from edge locations. They also need to protect against DDoS attacks. Which combination of services should they use?

Accepted Answer

Cloud CDN and Cloud Armor. Cloud CDN caches static content at edge locations for low latency, and Cloud Armor provides DDoS protection and WAF capabilities.

Answer

Cloud CDN and Cloud NAT

Answer

Cloud Load Balancing and Cloud CDN

Answer

Cloud Armor and Cloud Interconnect

Question 3

A company wants to receive near-real-time notifications when spending in a project exceeds 50%, 75%, and 100% of a monthly budget of $50,000. They also want to automatically disable billing for the project if spending exceeds $60,000. Which configuration should they use?

Accepted Answer

Create a budget with thresholds at 50%, 75%, 100% and set up a Cloud Function that listens to Pub/Sub messages from the budget to automatically disable billing when a 120% threshold is exceeded.. Budgets can be set with multiple threshold rules for notifications. However, automatically disabling billing requires a separate automation (e.g., Cloud Functions triggered by Pub/Sub) because budgets do not perform actions beyond notifications and Pub/Sub messages.

Answer

Use the Cost Management dashboard to monitor spending and disable billing manually.

Answer

Create a budget alert at 100% only and manually disable billing when alerted.

Answer

Create a budget with thresholds at 50%, 75%, 100% and set the 'disable billing' action on the budget.

Question 4

A security engineer needs to ensure that a Compute Engine instance can access a Cloud Storage bucket using its own identity, without embedding service account keys in the instance. What should the engineer do?

Accepted Answer

Create a service account, grant it the required IAM roles on the bucket, and attach the service account to the Compute Engine instance.. Attaching a service account to the Compute Engine instance allows it to authenticate using instance metadata without keys.

Answer

Create a service account and download its key. Store the key in Cloud Storage and have the instance download it at startup.

Answer

Create a service account, generate a key, and use the gcloud auth activate-service-account command on the instance.

Answer

Use the default Compute Engine service account and grant it roles on the bucket; no additional steps needed.

Question 5

A company uses Cloud SQL for MySQL and needs to migrate to a PostgreSQL-compatible database that offers improved performance for AI workloads (e.g., vector embeddings). Which Google Cloud database is MOST suitable?

Accepted Answer

AlloyDB. AlloyDB is a PostgreSQL-compatible database that is optimized for high performance and features like vector embeddings for AI, making it ideal for this migration.

Answer

Cloud SQL for PostgreSQL

Answer

Cloud Spanner

Answer

Bigtable

Question 6

An organization needs to store API keys, database passwords, and certificates securely, with automatic rotation and audit logging. Which Google Cloud service should they use?

Accepted Answer

Secret Manager. Secret Manager is designed to store secrets like API keys and passwords, with built-in rotation and audit logging.

Answer

Cloud Storage with encryption

Answer

Cloud KMS

Answer

Cloud HSM

Question 7

A DevOps engineer wants to audit all actions performed by Google personnel on their customer data stored in Cloud Storage. They need to review logs that show access by Google employees and the reason for access. Which logging feature should they enable?

Accepted Answer

Access Transparency. Access Transparency provides logs of Google personnel accessing customer data. It shows the time, reason, and data accessed. Cloud Audit Logs track actions performed by users and services within the customer's project, not Google personnel. VPC Flow Logs are for network flows. Cloud Logging is the general platform but does not specifically capture Google personnel access without Access Transparency.

Answer

Cloud Audit Logs

Answer

Cloud Logging

Answer

VPC Flow Logs

Question 8

An engineer is troubleshooting a Cloud SQL instance that is running out of memory. They want to reduce memory usage without changing the machine type. Which action would help?

Accepted Answer

Reduce the max_connections flag. Enabling automatic storage increase helps with disk space but not memory. Reducing max_connections limits concurrent connections, saving memory. Adding a read replica shares read load but doesn't reduce memory per instance. Switching to MyISAM is not possible in Cloud SQL for InnoDB-based MySQL.

Answer

Enable automatic storage increase

Answer

Add a read replica

Answer

Switch from InnoDB to MyISAM

Question 9

A data engineering team wants to process continuous streams of real-time events from millions of devices, perform transformations, and load the results into BigQuery for analysis. They need a fully managed, serverless solution. Which service should they use?

Accepted Answer

Cloud Dataflow. Dataflow is a fully managed, serverless service for stream and batch data processing, with built-in connectors to Pub/Sub and BigQuery. Pub/Sub is for ingestion only, not processing. Cloud Functions is not designed for high-throughput streaming. Dataproc is a managed Hadoop/Spark service, not serverless.

Answer

Dataproc

Answer

Cloud Pub/Sub

Answer

Cloud Functions

Question 10

A team needs to run a machine learning model using custom code in Python with TensorFlow, and they want to train it at scale on GPU hardware without managing infrastructure. Which Google Cloud service is best suited?

Accepted Answer

Vertex AI. Vertex AI provides a unified platform for ML, including managed training jobs with GPU support, hyperparameter tuning, and model serving—all without managing infrastructure. Compute Engine requires manual setup. Cloud Functions and Cloud Run are not designed for distributed training.

Answer

Cloud Run

Answer

Compute Engine

Answer

Cloud Functions

Question 11

A user attempts to create a new Compute Engine instance in the us-central1 region and receives an error indicating that the quota for 'CPUs' has been exceeded. Where should the user go to request a quota increase?

Accepted Answer

Cloud Console > IAM & Admin > Quotas. Quota increases for resources like vCPUs are requested via the Cloud Console's IAM & Admin > Quotas page, not Support or Pricing Calculator.

Answer

Cloud Console > Billing > Budgets

Answer

Google Cloud Pricing Calculator

Answer

Cloud Console > Support > Cases

Question 12

A company wants to connect its on-premises data center to Google Cloud securely and with low latency. Which Google Cloud service should they use?

Accepted Answer

Cloud Interconnect. Cloud Interconnect provides dedicated, high-bandwidth connections between on-premises and Google Cloud, offering lower latency and more reliability than VPN.

Answer

Cloud NAT

Answer

Cloud VPN

Answer

Cloud CDN

Question 13

A company has a support plan that guarantees a 15-minute response time for P1 cases and includes a Technical Account Manager (TAM). Which support plan do they have?

Accepted Answer

Premium Support. The Premium support plan includes a 15-minute P1 response time and a TAM. Enhanced provides <1 hour, and Standard/ Basic provide limited support.

Answer

Standard Support

Answer

Enhanced Support

Answer

Basic Support

Question 14

A company uses a legacy on-premises database and wants to migrate to Google Cloud with minimal changes to application code. They need a fully managed relational database that supports MySQL compatibility and automatic failover. Which service should they choose?

Accepted Answer

Cloud SQL for MySQL. Cloud SQL for MySQL is a fully managed relational database with MySQL compatibility, automatic failover, and minimal code changes. Cloud Spanner is globally distributed and requires schema changes, Bigtable is NoSQL, and Firestore is document-based.

Answer

Firestore

Answer

Cloud Spanner

Answer

Cloud Bigtable

Question 15

A developer needs to store and manage API keys and certificates in a secure, centralized manner, with automatic rotation and integration with Cloud Functions. Which Google Cloud service should they use?

Accepted Answer

Secret Manager. Secret Manager stores secrets like API keys, passwords, and certificates, and integrates with Cloud Functions for secure access. Cloud KMS manages encryption keys, not secrets. Cloud Storage is not designed for secret management. Cloud Asset Inventory tracks resources.

Answer

Cloud Storage

Answer

Cloud KMS

Answer

Cloud Asset Inventory