Cloud Digital Leader Practice Test 35 — 15 Questions

Question 1

An organization has a compliance requirement to run workloads in specific geographic regions only. They want to prevent any resources from being created outside those regions. Which Google Cloud control should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Organization policy with location restriction. Organization policies with location restrictions allow administrators to set constraints on where resources can be created. The constraint `gcp.resourceLocations` can be used to restrict allowed regions. IAM roles control who can create resources, but not where. VPC Service Controls restrict data access, not resource creation location. Cloud Audit Logs only record actions.

Answer

Cloud Audit Logs

Answer

VPC Service Controls

Answer

IAM conditions with resource location

Question 2

A telecommunications company has completed a cloud migration but finds that its business agility — the speed at which it can launch new products — has not improved. An analysis reveals that while the infrastructure is now cloud-based, the software development and release processes remain unchanged: quarterly release cycles, lengthy change approval boards, and manual testing. What does this situation illustrate?

Accepted Answer

Cloud infrastructure adoption without modernizing software delivery practices (CI/CD, automated testing, continuous deployment) does not unlock agility; the delivery process is the bottleneck. The scenario illustrates that cloud infrastructure alone does not deliver business agility — the software delivery pipeline is the actual bottleneck. Quarterly releases, manual testing, and heavy change-approval boards are hallmarks of traditional waterfall/ITIL-heavy delivery, and moving VMs to a cloud provider without adopting CI/CD, automated testing, and continuous deployment leaves that constraint intact. Agility comes from the delivery practice, not the hosting location.

Answer

The company chose the wrong cloud provider; a different provider's infrastructure would enable faster releases

Answer

Quarterly release cycles are appropriate for telecommunications products that require extensive regulatory testing, and the lack of agility is not a problem

Answer

The company must rebuild all applications as microservices before cloud can provide agility benefits

Question 3

A startup needs to run a web application with unpredictable traffic. They want to avoid over-provisioning and only pay for resources used. Which cloud benefit best addresses this need?

Accepted Answer

Pay-as-you-go pricing. Pay-as-you-go pricing (Option B) directly matches the startup's need to avoid over-provisioning and pay only for resources consumed. This cloud pricing model allows resources to scale up and down automatically based on traffic, with billing tied to actual usage (e.g., compute hours, data transfer). It eliminates the capital expense of idle capacity, which is critical for unpredictable workloads.

Answer

Built-in security

Answer

Global reach and low latency

Answer

Managed services

Question 4

A developer wants to trigger a serverless function in response to a file being uploaded to a Cloud Storage bucket. Which Google Cloud service should they use?

Accepted Answer

Cloud Functions. Cloud Functions is Google Cloud's serverless compute service designed for event-driven workloads. It can be triggered by Cloud Storage events such as object finalization (file upload), making it the correct choice for running code in response to a file being uploaded to a bucket.

Answer

Compute Engine

Answer

Cloud Run

Answer

App Engine

Question 5

What does 'high availability' mean in the context of cloud services, and how is it typically measured?

Accepted Answer

High availability means a system is operational for a very high percentage of time, typically measured as a percentage (e.g., 99.9% uptime).. High availability (HA) refers to a system's ability to remain operational and accessible for an exceptionally high proportion of time, minimizing downtime. It is typically quantified as a percentage of uptime over a defined period, such as 99.9% ('three nines'), which corresponds to approximately 8.76 hours of downtime per year. This metric is fundamental in cloud service level agreements (SLAs) to guarantee service continuity.

Answer

High availability means a system is fast — it responds to requests in under 100 milliseconds.

Answer

High availability means a system stores data in multiple geographic locations for disaster recovery.

Answer

High availability requires manual intervention to restart failed services within 30 minutes.

Question 6

A business analyst needs to understand why cloud services bill differently for compute (VMs) versus object storage. Compute VMs are billed per second while they are running; Cloud Storage is billed per GB-month of data stored. Which cloud pricing principle explains why these billing units are different?

Accepted Answer

Cloud resources are billed based on their natural unit of consumption: compute time for VMs (per second running) and data volume over time for storage (per GB-month) — matching billing to how each resource is actually consumed. Cloud providers align billing units with the natural consumption pattern of each resource. Compute VMs consume CPU and memory continuously while running, making per-second billing the most granular and fair measure of actual usage. Object storage, by contrast, incurs cost primarily from the capacity occupied over time, so billing per GB-month directly reflects the resource's persistent footprint. This principle ensures customers pay only for what they use, in the unit that matches the resource's operational behavior.

Answer

Cloud providers bill different resources differently to maximize revenue by charging the highest rates for the most-used services

Answer

Storage is charged per GB-month because cloud providers cannot measure storage usage per second accurately

Answer

The billing difference is a temporary situation; cloud providers are working toward a single universal billing unit for all services

Question 7

A company wants to enforce that all Cloud Storage buckets in a project have uniform bucket-level access enabled. Which Google Cloud tool should they use?

Accepted Answer

Define an Organization Policy with a constraint on uniform bucket-level access.. Organization Policies in Google Cloud allow administrators to enforce constraints across the entire resource hierarchy. The constraint `constraints/storage.uniformBucketLevelAccess` can be applied at the project, folder, or organization level to require uniform bucket-level access on all Cloud Storage buckets, preventing any bucket from being created or updated without it.

Answer

Use Cloud Audit Logs to monitor and alert on non-compliant buckets.

Answer

Set an IAM policy to deny access to buckets without uniform access.

Answer

Use Cloud Key Management Service to rotate keys.

Question 8

A multinational corporation uses Cloud Identity-Aware Proxy (IAP) to secure access to applications. They notice that some users outside the corporate network can still reach the applications. What is the most likely misconfiguration?

Accepted Answer

IAP is set to 'allUsers' instead of 'allAuthenticatedUsers'.. Setting IAP to 'allUsers' allows unauthenticated access from any user on the internet, bypassing IAP's authentication and authorization checks. IAP should be configured with 'allAuthenticatedUsers' or a more specific set of principals to enforce identity verification before granting access to the application.

Answer

The firewall rules allow ingress from 0.0.0.0/0.

Answer

IAP is not enabled on the backend service.

Answer

The OAuth 2.0 client ID is misconfigured.

Question 9

Which THREE of the following are common benefits of adopting a cloud infrastructure compared to on-premises? (Choose 3)

Accepted Answer

Ability to scale globally in minutes. Option A is correct because cloud providers operate redundant infrastructure across multiple geographic regions and Availability Zones, so resources can be provisioned and distributed worldwide within minutes rather than waiting weeks for physical hardware delivery and datacenter build-out. Option C is correct because the pay-as-you-go model bills based on actual consumption of compute, storage, and network resources, converting fixed costs into variable operational expenses. Option E is correct because adopting cloud eliminates the large upfront capital expenditure (CapEx) required to purchase servers, storage arrays, and networking gear, replacing it with operating expenditure (OpEx). Option B is incorrect because no environment, cloud or on-premises, can eliminate all security vulnerabilities; the shared responsibility model still leaves customer-side risks such as misconfiguration and application flaws. Option D is incorrect because security responsibility is shared, not fully transferred — the provider secures the cloud (physical facilities, hypervisor, managed services), while the customer remains responsible for security in the cloud (data, identities, configurations, patching of IaaS workloads).

Answer

Elimination of all security vulnerabilities

Answer

Complete transfer of security responsibility to the provider

Question 10

A large enterprise is evaluating moving its data analytics workloads to Google Cloud. Which TWO factors should they consider when comparing on-premises costs to cloud costs? (Choose two.)

Accepted Answer

Elimination of hardware maintenance labor costs. Option A is correct because moving analytics workloads to Google Cloud eliminates the need to maintain physical servers, including tasks like hardware repairs, firmware updates, and replacement cycles, which removes associated labor costs from the on-premises total cost of ownership. Option C is correct because shutting down or downsizing on-premises data centers directly reduces power consumption and cooling expenses, which are significant operational costs in on-premises environments. Option B is not a cost factor but a performance consideration, and network latency does not directly represent a cost comparison item. Option D is a potential migration or compatibility concern rather than a direct on-premises versus cloud cost factor. Option E is an application design consideration, not a cost factor for comparing on-premises and cloud expenses.

Answer

Increased latency due to network distance

Answer

Licensing costs for software that may not be compatible with cloud

Answer

Requirement to redesign applications for cloud-native services

Question 11

A company is evaluating Total Cost of Ownership (TCO) for migrating from on-premises to Google Cloud. Which cost is typically reduced or eliminated in the cloud?

Accepted Answer

Data center facility and hardware maintenance costs. On-premises costs like data center facility, power, cooling, and hardware maintenance are eliminated in the cloud, as the provider manages the infrastructure.

Answer

Software subscription fees

Answer

Cloud storage costs

Answer

Internet bandwidth costs

Question 12

A company wants to implement a CI/CD pipeline for their Cloud Run services. Which THREE Google Cloud services should they use? (Choose 3)

Accepted Answer

Cloud Build. Cloud Build (B) is correct because it is Google Cloud's managed CI service that executes build steps defined in cloudbuild.yaml, compiles the container image, and can trigger builds from Cloud Source Repositories, GitHub, or Bitbucket on commit. Container Registry or Artifact Registry (E) is correct because the container image produced by Cloud Build must be stored in a registry; Artifact Registry is the recommended successor to Container Registry for storing and versioning Docker images that Cloud Run will pull. Cloud Deploy (C) is correct because it is the managed CD service that takes the built image and orchestrates progressive delivery to Cloud Run targets (dev/staging/prod) with approval gates and rollout strategies. Cloud Operations Suite (A) is monitoring, logging, and tracing—useful for observability but not a CI/CD pipeline component. Cloud Deployment Manager (D) is an infrastructure-as-code tool for provisioning Google Cloud resources via YAML/Jinja templates, not for building or delivering application containers.

Answer

Cloud Operations Suite

Answer

Cloud Deployment Manager

Question 13

A company's application experiences traffic spikes every weekday morning when employees log in at 9 AM. The team wants their infrastructure to automatically handle these spikes without manual intervention and without over-provisioning resources all day. Which Google Cloud capability addresses this?

Accepted Answer

Configure autoscaling on the application's infrastructure to automatically scale up for load and scale down during off-peak hours.. Google Cloud's managed instance groups (MIGs) with autoscaling can automatically adjust the number of VM instances based on load metrics (e.g., CPU utilization, requests per second). This handles the 9 AM traffic spike without manual intervention and avoids over-provisioning during off-peak hours by scaling down when demand decreases.

Answer

Purchase reserved capacity for peak load and configure it to be active only on weekdays.

Answer

Deploy additional VMs manually each weekday morning and terminate them at night.

Answer

Use Cloud Monitoring to send an email alert when CPU exceeds 80% so the team can manually scale.

Question 14

A financial services company needs to migrate its on-premises data center to Google Cloud to reduce operational overhead and improve scalability. They have a mix of legacy and modern applications. Which approach should they use to minimize migration risk while accelerating their digital transformation?

Accepted Answer

Use Anthos to manage applications across on-premises and Google Cloud, enabling gradual migration.. Anthos provides a consistent Kubernetes-based platform that spans on-premises environments and Google Cloud, allowing the company to migrate workloads incrementally rather than in a risky big-bang cutover. This hybrid management model reduces migration risk while still enabling modernization and scalability as applications are moved at their own pace. Option A is too disruptive and slow, since rewriting all applications as microservices before any migration delays transformation and introduces significant re-engineering risk. Option C is also risky because moving everything immediately to GKE ignores legacy application compatibility and operational readiness. Option D does not accelerate digital transformation, as a pure lift-and-shift to Compute Engine preserves existing operational overhead and technical debt.

Answer

Rewrite all applications as cloud-native microservices before migration.

Answer

Migrate everything to Google Kubernetes Engine (GKE) immediately.

Answer

Lift and shift all applications to Compute Engine as-is.

Question 15

A company wants to automatically scale their Compute Engine managed instance group based on the number of requests per second. Which metric should they use?

Accepted Answer

custom metric from Cloud Monitoring. The company needs to scale based on requests per second, which is a custom application-level metric. Cloud Monitoring allows you to create custom metrics from your application, and managed instance groups can use these custom metrics for autoscaling, enabling precise scaling based on actual request throughput rather than proxy indicators.

Answer

CPU utilization

Answer

HTTP load balancing serving capacity

Answer

Instance group size