Cloud Digital Leader Practice Test 35 — 15 Questions

Question 1

Refer to the exhibit. A company configures a lifecycle policy on a Cloud Storage bucket. The bucket contains objects uploaded over the past year with custom time set on each object. After 60 days, what happens to the objects?

Accepted Answer

Objects with custom time more than 30 days ago are deleted.. Option B is correct because the lifecycle policy uses the `customTime` attribute, and the rule is configured to delete objects when `customTime` is older than 30 days. After 60 days from upload, objects with a `customTime` set at upload will have had that timestamp for 60 days, so they are more than 30 days past their `customTime` and are deleted. The policy does not use object age or last access time.

Answer

All objects older than 30 days from now are deleted.

Answer

Objects are deleted after 30 days from the last access.

Answer

The lifecycle policy is invalid because custom time is not supported.

Question 2

A company uses Cloud Functions and notices that some functions are taking longer than expected. They want to identify which functions have the highest latency. What should they use?

Accepted Answer

Cloud Monitoring metrics. Cloud Monitoring metrics, specifically the 'execution_time' metric for Cloud Functions, provide the precise latency data needed to identify functions with the highest execution duration. Unlike logs or error reports, metrics are designed for numerical aggregation and can be used to create dashboards or alerts that rank functions by their p50, p95, or p99 latency values.

Answer

Cloud Audit Logs

Answer

Error Reporting

Answer

Cloud Logging queries

Question 3

A developer is troubleshooting a slow response from a Cloud Run service. Which Google Cloud service can they use to trace requests across microservices?

Accepted Answer

Cloud Trace. Cloud Trace is the correct service because it is specifically designed for distributed tracing, collecting latency data from applications and displaying it in a trace timeline. It can trace requests as they propagate across multiple microservices, including Cloud Run services, by using trace context propagation headers (e.g., `X-Cloud-Trace-Context`). This allows the developer to identify bottlenecks and slow components in a request path.

Answer

Cloud Profiler

Answer

Cloud Logging

Answer

Cloud Debugger

Question 4

A company is migrating to Google Cloud and wants to reduce operational overhead for managing their infrastructure. Which Google Cloud service allows them to define infrastructure as code and automate provisioning?

Accepted Answer

Cloud Deployment Manager. Cloud Deployment Manager is the correct answer because it is a Google Cloud service that allows you to define your infrastructure as code using declarative templates (in YAML, Python, or Jinja2). It automates the provisioning and management of Google Cloud resources, reducing manual operational overhead by enabling repeatable, version-controlled deployments.

Answer

Google Cloud SDK

Answer

Cloud Console

Answer

Cloud Shell

Question 5

A company runs batch processing jobs using preemptible VMs to reduce costs. They need to ensure these jobs can scale out significantly during peak hours. Which Compute Engine pricing model should they combine with autoscaling to optimize cost for these workloads?

Accepted Answer

Sustained use discounts.. C is correct because sustained use discounts automatically apply to preemptible VMs running for a significant portion of a month, reducing costs further without any upfront commitment. Autoscaling ensures that as demand increases, more preemptible VMs are launched, and the sustained use discount kicks in for the cumulative usage across the month, optimizing cost for bursty, fault-tolerant workloads.

Answer

Preemptible VMs with no further discounts.

Answer

Sole-tenant nodes.

Answer

Committed use discounts.

Question 6

A company runs a web application on Compute Engine instances behind a managed instance group with autoscaling based on CPU utilization. After a marketing campaign, traffic spikes and the autoscaler adds instances quickly, but the application becomes slow. What is the most likely cause?

Accepted Answer

Autoscaler uses CPU utilization but the application is memory-bound. The autoscaler adds instances based on CPU utilization, but if the application is memory-bound, adding more instances does not alleviate memory pressure. Each new instance still runs the same memory-intensive workload, so CPU may remain low while memory is exhausted, causing slowdowns. The autoscaler fails to address the actual bottleneck, leading to poor performance despite scaling out.

Answer

Instances are in different zones causing inter-zone latency

Answer

Autoscaling cooldown period is too short

Answer

Health check interval is too long

Question 7

A company wants to automatically scale their Compute Engine managed instance group based on the number of requests per second. Which metric should they use?

Accepted Answer

custom metric from Cloud Monitoring. Option D is correct because the company needs to scale based on requests per second, which is a custom application-level metric. Cloud Monitoring allows you to create custom metrics from your application, and managed instance groups can use these custom metrics for autoscaling, enabling precise scaling based on actual request throughput rather than proxy indicators.

Answer

CPU utilization

Answer

HTTP load balancing serving capacity

Answer

Instance group size

Question 8

An e-commerce platform uses Compute Engine instances in a managed instance group behind a Cloud Load Balancer. During a flash sale, the load balancer reports increased error rates. The operations team suspects the instances are overwhelmed. Which two steps should they take to troubleshoot the issue? (Choose TWO.)

Accepted Answer

Check the CPU utilization of the instance group in Cloud Monitoring.. Option D is correct because checking CPU utilization in Cloud Monitoring directly reveals whether the instance group is resource-constrained. High CPU utilization indicates that the instances are overwhelmed, which aligns with the increased error rates reported by the load balancer. This metric is a primary indicator of compute capacity issues and helps validate the team's suspicion before taking corrective action.

Answer

Switch to a Network Load Balancer for higher throughput.

Answer

Increase the size of the instance group without investigation.

Answer

Enable HTTP health checks on the load balancer.

Question 9

A financial services company is migrating its on-premises monitoring system to Google Cloud. They need to collect metrics, logs, and traces from multiple projects and provide a unified view for their operations team. Security requires that logs containing sensitive data be stored with additional encryption and access controls. Which combination of services should they use?

Accepted Answer

Cloud Monitoring, Cloud Logging, and Cloud Trace with a custom sink to a BigQuery dataset that uses CMEK.. Option B is correct because the company needs to collect metrics, logs, and traces (requiring Cloud Monitoring, Cloud Logging, and Cloud Trace) and must store logs containing sensitive data with additional encryption and access controls. A custom sink to BigQuery with CMEK provides customer-managed encryption keys for the BigQuery dataset, and BigQuery's native access controls (IAM, row-level security) satisfy the requirement for additional access controls beyond the default Logging buckets.

Answer

Cloud Monitoring, Cloud Logging, and Cloud Trace with Logging's _Required and _Default buckets.

Answer

Cloud Monitoring and Cloud Logging with Log Analytics.

Answer

Cloud Monitoring, Cloud Logging, and Cloud Trace with Cloud Audit Logs.

Question 10

Which THREE of the following are best practices for managing operations in Google Cloud? (Choose THREE.)

Accepted Answer

Set up budget alerts to monitor costs. Setting up budget alerts in Google Cloud allows you to monitor costs proactively by triggering notifications when spending exceeds defined thresholds. This is a fundamental operational best practice to avoid unexpected bills and maintain financial control over your cloud resources.

Answer

Use Cloud Logging to store all logs indefinitely to ensure compliance

Answer

Use a single project for all workloads to simplify management

Question 11

A company wants to implement SLOs for their API service. They need to measure the proportion of successful requests over a 30-day window. Which metric should they use?

Accepted Answer

SLI = good events / total events. Option D is correct because an SLI (Service Level Indicator) is defined as the ratio of good events to total events, which directly measures the proportion of successful requests over a 30-day window. This aligns with the requirement to track request success rate, not just system uptime. In Google Cloud operations, SLOs are built on SLIs that count discrete events like HTTP 200 responses versus all requests.

Answer

availability (uptime)

Answer

latency at 99th percentile

Answer

requests/success

Question 12

A developer needs to debug a production issue by analyzing logs from multiple microservices. Which Google Cloud service should they use to filter and search logs in real time?

Accepted Answer

Cloud Logging. Cloud Logging (formerly Stackdriver Logging) is the correct service because it provides a centralized log management system that can ingest logs from multiple microservices, filter them using advanced queries, and search them in real time. Its Logs Explorer interface supports custom filters, labels, and timestamps, enabling developers to pinpoint production issues across distributed services without delay.

Answer

Cloud Monitoring

Answer

Error Reporting

Answer

Cloud Debugger

Question 13

A financial services company needs to ensure that all access to sensitive data in Cloud Storage is logged with information about the user and the reason for access. Which feature should they enable?

Accepted Answer

Access Transparency. Access Transparency provides detailed logs of actions taken by Google Cloud support and engineering personnel when accessing customer data, including the specific user and the business reason for access. This meets the requirement for logging all access to sensitive data in Cloud Storage with user identity and reason, as it covers both Google and customer-side access.

Answer

Cloud Data Loss Prevention (DLP)

Answer

Security Command Center

Answer

Cloud Audit Logs

Question 14

A healthcare company must store PHI in Cloud Storage. They require encryption at rest and in transit, and need to comply with HIPAA. Which combination of Google Cloud features should they implement?

Accepted Answer

Cloud Storage with SSE-GCP and use HTTPS, sign BAA with Google.. Option C is correct because Cloud Storage with server-side encryption (SSE-GCP) provides encryption at rest by default, HTTPS ensures encryption in transit, and signing a Business Associate Agreement (BAA) with Google is a mandatory contractual requirement for HIPAA compliance. This combination satisfies all stated requirements: encryption at rest, encryption in transit, and HIPAA compliance.

Answer

Cloud Storage with SSE-C, HTTP for in-transit, and enable HIPAA compliance flag.

Answer

Use Cloud Storage with CSEK and disable public access.

Answer

Use Cloud Storage with CMEK and use VPN for transit.

Question 15

Refer to the exhibit. A security engineer applies this IAM policy. What is the effect?

Accepted Answer

Access is allowed only from the IP address 203.0.113.1.. The IAM policy shown in the exhibit includes a condition block that uses the `ipAddress` condition key with the `IpAddress` operator set to `203.0.113.1`. This restricts access to only requests originating from that specific IP address. All other conditions or permissions in the policy are effectively overridden by this explicit allow condition, meaning access is denied from any other IP address.

Answer

Access is allowed only to resources tagged with 'production'.

Answer

Access is allowed only with two-factor authentication.

Answer

Access is allowed only during business hours.

Cloud Digital Leader Practice Test 35 — 15 Questions

Exhibit

Cloud Digital Leader Practice Test 35 — 15 Questions

Exhibit