Cloud Digital Leader Practice Test 36 — 15 Questions

Question 1

A security analyst needs to analyze large volumes of security logs from multiple GCP projects, detect anomalies, and investigate incidents. The solution should support advanced analytics and threat hunting. Which service is best suited?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Chronicle. Chronicle is a cloud-native SIEM that ingests logs, provides analytics, and supports threat hunting.

Answer

Cloud Logging

Answer

BigQuery

Answer

Security Command Center

Question 2

Which defense-in-depth layer includes measures like access controls, vulnerability management, and intrusion detection systems?

Accepted Answer

Operational security. Operational security involves the policies and procedures to protect data and systems during operation, including access controls, vulnerability scanning, and intrusion detection. Physical security covers hardware and facilities; infrastructure security covers network and platform; data security covers encryption and data loss prevention.

Answer

Data security

Answer

Physical security

Answer

Infrastructure security

Question 3

A company is migrating a legacy monolithic application to Google Cloud. They want to reduce operational overhead while maintaining the ability to run the application without rewriting code. Which migration strategy should they use?

Accepted Answer

Lift and shift (rehosting). Lift and shift (rehosting) moves the application to VMs without changes, reducing operational overhead by eliminating data center management. Refactoring requires code changes. Replatforming uses managed services but may need modifications. Retiring removes the application.

Answer

Retiring

Answer

Replatforming (lift, tinker, and shift)

Answer

Refactoring (rearchitecting)

Question 4

A global e-commerce platform needs to serve content with low latency to users worldwide. They want to cache static content at edge locations near users. Which Google Cloud service should they use?

Accepted Answer

Cloud CDN. Cloud CDN uses Google's global edge network to cache static content, reducing latency by serving from locations close to users. Cloud Armor is for security. Cloud DNS is for domain resolution. Cloud Storage alone does not cache at edges.

Answer

Cloud DNS

Answer

Cloud Armor

Answer

Cloud Storage

Question 5

A media company needs to stream live video to global viewers with low latency. They also want to protect against DDoS attacks. Which combination of Google Cloud networking services should they use?

Accepted Answer

Cloud CDN and Cloud Armor. Cloud CDN caches content at edge locations for low-latency delivery, and Cloud Armor provides DDoS protection and WAF capabilities at the edge.

Answer

Cloud Interconnect and Cloud VPN

Answer

Cloud DNS and Cloud Armor

Answer

Cloud Load Balancing and Cloud NAT

Question 6

An engineer needs to analyze detailed cost data, including resource-level usage costs and labels, to create custom reports. Which approach should they use?

Accepted Answer

Set up billing export to BigQuery. Billing export to BigQuery allows you to export detailed, granular billing data (including labels and resource-level costs) to a BigQuery dataset for custom analysis and reporting.

Answer

Use the Cost Management dashboard to export a CSV

Answer

Manually review invoices

Answer

Use the Cloud Pricing Calculator

Question 7

What is a key benefit of using a Platform as a Service (PaaS) offering like App Engine compared to Infrastructure as a Service (IaaS) like Compute Engine?

Accepted Answer

No need to manage the underlying OS or runtime environment. PaaS abstracts away the underlying OS and runtime, so developers only manage their code. IaaS requires managing OS, patches, and middleware. PaaS also typically includes built-in scaling and load balancing.

Answer

Lower cost for always-on workloads

Answer

Full control over the operating system and hardware

Answer

Ability to install custom software on the server

Question 8

A data analytics team processes large datasets using Apache Spark. They want a fully managed service that allows them to run Spark jobs without provisioning clusters. Which Google Cloud service should they use?

Accepted Answer

Dataproc. Dataproc is a managed Spark and Hadoop service. With Dataproc, you can create clusters quickly, but the fully managed serverless option is Dataproc Serverless, which runs Spark jobs without cluster management.

Answer

BigQuery

Answer

Dataflow

Answer

Cloud Dataprep

Question 9

A financial services company needs a relational database with global strong consistency, horizontal scaling, and 99.999% availability SLA. Which database should they choose?

Accepted Answer

Cloud Spanner. Cloud Spanner offers global distribution, strong consistency, automatic horizontal scaling, and a 99.999% SLA. Cloud SQL does not scale globally, Firestore is NoSQL, and Bigtable lacks strong consistency.

Answer

Cloud Bigtable

Answer

Cloud SQL

Answer

Firestore

Question 10

A company needs to audit all actions performed by administrators on their Google Cloud project, including who accessed what resource and when. Which logging feature should they enable?

Accepted Answer

Cloud Audit Logs. Cloud Audit Logs record admin activity, data access, and system events for compliance and auditing.

Answer

Cloud Monitoring

Answer

Access Transparency

Answer

VPC Flow Logs

Question 11

A company wants to scan its Cloud Storage buckets for sensitive data like credit card numbers and social security numbers. Which service should they use?

Accepted Answer

Sensitive Data Protection. Sensitive Data Protection (DLP API) is used to inspect and de-identify sensitive data. Security Command Center is for vulnerabilities. Web Risk API checks URLs against threat lists. reCAPTCHA is for bot protection.

Answer

Security Command Center

Answer

reCAPTCHA Enterprise

Answer

Web Risk API

Question 12

A company has set a budget alert at 80% and 100% of $10,000 for a specific project. The project has a billing account linked. What happens when the cost reaches $8,000?

Accepted Answer

A notification is sent to the configured Pub/Sub topic.. Budget alerts trigger notifications at the defined threshold percentages. At $8,000 (80% of $10,000), the alert fires but does not automatically stop spending.

Answer

The project is automatically suspended.

Answer

All resources in the project are deleted.

Answer

The billing account is disabled.

Question 13

A company currently runs its applications in a co-location data centre with a 5-year contract for hardware. They are considering migrating to Google Cloud to avoid the upcoming hardware refresh cycle. Which business driver is most directly addressed by this migration?

Accepted Answer

Cost optimisation (avoiding CAPEX). Hardware refresh avoidance is a key migration motivation, shifting from CAPEX to OPEX. Agility, scalability, and innovation are also benefits but not the primary driver for this specific scenario.

Answer

Scalability

Answer

Agility

Answer

Innovation (AI/ML access)

Question 14

A company wants to monitor the CPU and memory utilisation of their Compute Engine instances and set up alerts when utilisation exceeds 80%. Which Google Cloud service should they use?

Accepted Answer

Cloud Monitoring. Cloud Monitoring (formerly Stackdriver) collects metrics from GCP resources, including CPU and memory utilisation, and allows creation of alerting policies. Cloud Logging is for logs, Cloud Trace is for tracing, and Cloud Error Reporting is for error analysis.

Answer

Cloud Logging

Answer

Cloud Error Reporting

Answer

Cloud Trace

Question 15

What is the primary purpose of Google Cloud Armor?

Accepted Answer

To protect applications from DDoS attacks and application-level threats. Cloud Armor is a web application firewall (WAF) that provides DDoS protection and security rules to protect applications distributed across Google Cloud. Cloud CDN accelerates content, Cloud NAT provides outbound internet access, and VPC is for virtual networking.

Answer

To accelerate content delivery globally

Answer

To provide outbound internet connectivity to private instances

Answer

To manage virtual private cloud networking