Cloud Digital Leader Practice Test 43 — 15 Questions

Question 1

A company's engineering organization wants to share operational knowledge across teams using a 'golden path' — a recommended, pre-configured set of tools, services, and templates that makes the easy path also the correct path. Which Google Cloud concept supports this practice?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use Terraform blueprints, organization policies, and Cloud Foundation Toolkit to create pre-configured landing zones that enforce standards automatically.. The Cloud Foundation Toolkit (CFT) provides Terraform blueprints and pre-configured landing zones that enforce organizational policies and standards automatically. This aligns directly with the 'golden path' concept by making the easy path (using the blueprints) also the correct path (enforcing compliance and best practices through organization policies and automated deployments).

Answer

Create a shared Google Slides presentation documenting best practices for teams to reference.

Answer

Grant all teams Organization Admin access so they can configure resources however they prefer.

Answer

Hire a dedicated cloud architect to review every new project's design before it starts.

Question 2

A platform business (like a marketplace) hosts both buyers and sellers. As more sellers join, the marketplace becomes more valuable to buyers (more choice), and vice versa. Cloud infrastructure that can scale to handle millions of users is essential for this model. What economic concept describes why the platform becomes more valuable as it grows?

Accepted Answer

Network effects — the platform becomes more valuable to each participant as the total number of participants grows.. Network effects describe how the value of a platform increases for all participants as the user base grows. In a cloud-hosted marketplace, each new seller adds inventory that attracts more buyers, and each new buyer creates demand that attracts more sellers, creating a positive feedback loop. Cloud infrastructure is essential here because it must elastically scale to support this exponential growth in transactions and data without performance degradation.

Answer

Economies of scale — lower per-unit costs as production volume increases.

Answer

Monopoly pricing power — larger platforms can charge higher prices.

Answer

Marginal cost reduction — digital goods can be replicated at near-zero marginal cost.

Question 3

A company's cloud cost has grown significantly. A FinOps analysis reveals the largest waste category is idle Cloud SQL instances — 12 database instances that were provisioned for projects that have since ended, but were never deleted. What process failure most directly caused this waste?

Accepted Answer

The absence of a resource decommissioning process: when projects end, there is no formal step to identify and delete associated cloud resources, allowing idle infrastructure to persist and accrue costs indefinitely. The root cause is the lack of a formal resource decommissioning process. When projects end, there is no automated or manual step to identify and delete associated Cloud SQL instances, so idle databases continue to incur costs. In Google Cloud, Cloud SQL instances do not auto-delete; they persist until explicitly removed, making a decommissioning workflow essential to prevent waste.

Answer

The company should have used a cheaper database service instead of Cloud SQL

Answer

Cloud SQL pricing is too high compared to on-premises databases, making any unused capacity expensive

Answer

The database administrators forgot to enable automatic deletion for idle Cloud SQL instances

Question 4

A financial services company is subject to regulations requiring them to demonstrate that their cloud provider's employees cannot access customer data without the customer's explicit approval. Which Google Cloud feature most directly addresses this requirement?

Accepted Answer

Access Transparency and Access Approval, which log and require explicit customer approval for Google personnel access to customer content. Access Transparency and Access Approval directly address the regulatory requirement by providing near real-time logs of Google personnel actions on customer content and requiring explicit customer approval before such access can occur. Access Transparency logs every access attempt by Google employees, while Access Approval allows customers to approve or deny those requests, ensuring no unauthorized access without customer consent.

Answer

Customer-Managed Encryption Keys (CMEK), where the customer controls the encryption key and can revoke access

Answer

Cloud Audit Logs, which record all customer actions within Google Cloud

Answer

VPC Service Controls, which prevent Google employees from accessing resources inside the service perimeter

Question 5

A company wants to analyse streaming data from IoT devices in real time with sub-second latency, using SQL queries. Which combination of services should they use?

Accepted Answer

Cloud Pub/Sub + Dataflow + BigQuery. Dataflow with unbounded sources (like Pub/Sub) and SQL via Beam SQL or Dataflow SQL can process streaming data with low latency. BigQuery can also stream data but with higher latency (seconds). Cloud Functions is not ideal for real-time SQL analytics. Dataproc is for batch processing.

Answer

Cloud IoT Core + Cloud Functions + Bigtable

Answer

Cloud Pub/Sub + Dataproc + Cloud Storage

Answer

Cloud Pub/Sub + Cloud Functions + Cloud SQL

Question 6

A company is deploying a global web application with static content (images, CSS, JS) and dynamic API calls. They want to reduce latency for users worldwide. Which TWO services should they combine? (Choose 2)

Accepted Answer

Cloud CDN. Cloud CDN (option B) caches static content (images, CSS, JS) at Google's globally distributed edge points of presence (PoPs), reducing latency for users by serving content from a location closer to them. The External HTTP(S) Load Balancer (option C) is required to front the application and integrate with Cloud CDN, providing global anycast IP, SSL termination, and traffic distribution to backend instances. Together, they enable low-latency delivery of both static and dynamic content by combining edge caching with intelligent load balancing.

Answer

Cloud VPN

Answer

Cloud Armor

Answer

Cloud DNS

Question 7

A CTO explains to her board that moving to cloud reduces the company's 'total cost of ownership' compared to running an on-premises data center. Which cost category is most commonly underestimated in on-premises TCO calculations?

Accepted Answer

IT staff labor costs for ongoing maintenance, patching, hardware replacement, and operations, which are frequently underestimated in on-premises TCO. On-premises TCO calculations frequently underestimate the labor costs associated with ongoing IT staff tasks such as applying security patches, performing hardware replacements, managing firmware updates, and handling day-to-day operations. These operational expenses (OpEx) accumulate over the lifecycle of the data center and often exceed the initial capital expenditure (CapEx) for hardware, making them a critical but overlooked component in total cost of ownership comparisons with cloud providers like AWS, Azure, or GCP.

Answer

Hardware acquisition costs, which are typically overestimated in on-premises environments

Answer

Software licensing costs, which are always higher on-premises than in the cloud

Answer

Internet bandwidth costs, which are negligible on-premises

Question 8

Google operates its data centers using 100% renewable energy and has committed to running all operations on carbon-free energy 24/7 by 2030. How does this sustainability posture benefit a company that migrates its workloads to Google Cloud?

Accepted Answer

The company's Scope 2 carbon emissions decrease because Google's infrastructure runs on renewable energy and operates more efficiently than typical enterprise data centers.. When a company migrates workloads to Google Cloud, it inherits Google's carbon-free energy procurement for its infrastructure. This directly reduces the company's Scope 2 emissions (indirect emissions from purchased electricity) since Google's data centers are powered by 100% renewable energy and operate with industry-leading efficiency (e.g., average PUE of 1.10). The company does not need to purchase separate offsets or add-ons to realize this benefit.

Answer

Companies must purchase separate carbon offset credits to claim sustainability benefits from using Google Cloud.

Answer

Only companies that purchase the Google Cloud Carbon Footprint add-on receive sustainability benefits.

Answer

Sustainability benefits are only available in specific geographic regions where Google has solar farms.

Question 9

Which IAM concept defines what actions a user can perform on a resource?

Accepted Answer

Authorization. Authorization defines what actions are allowed. Authentication verifies identity. Roles and permissions are part of authorization. The question asks for the concept that defines actions.

Answer

Permissions

Answer

Authentication

Answer

Roles

Question 10

A financial services company must comply with strict data residency regulations. They want to run sensitive workloads on-premises while using Google Cloud for burst analytics. Which deployment model should they choose?

Accepted Answer

Hybrid cloud. Hybrid cloud connects on-premises infrastructure with public cloud, allowing the company to keep sensitive data on-premises while leveraging cloud analytics.

Answer

Public cloud

Answer

Private cloud

Answer

Multi-cloud

Question 11

A developer needs to store a database password securely and access it from a Compute Engine VM. The password should be automatically rotated every 90 days. Which Google Cloud service should they use?

Accepted Answer

Secret Manager. Secret Manager is designed to store secrets like passwords, API keys, and certificates. It supports automatic rotation of secrets. Cloud KMS is for encryption keys, not secrets. Cloud Storage is not secure for secrets. IAM does not store secrets.

Answer

IAM

Answer

Cloud Storage with server-side encryption

Answer

Cloud KMS

Question 12

A company is evaluating total cost of ownership (TCO) for migrating a legacy application to Google Cloud. Which cost should they include in the cloud TCO calculation that is often overlooked?

Accepted Answer

Data egress fees. Egress charges for data leaving Google Cloud are an often-overlooked cost that can significantly impact TCO.

Answer

Software licensing for operating systems

Answer

Cost of physical security for data centers

Answer

Cost of electricity for servers

Question 13

A company wants to allow its employees to securely access internal applications without a traditional VPN. They want to use Google's zero-trust security model. Which Google Cloud product should they implement?

Accepted Answer

BeyondCorp Enterprise. BeyondCorp Enterprise is Google's zero-trust access solution that grants access based on user identity and context, not network location. Cloud VPN is traditional VPN. Cloud Armor is WAF. Identity-Aware Proxy (IAP) is part of BeyondCorp but the broader product is BeyondCorp Enterprise.

Answer

Cloud VPN

Answer

Identity-Aware Proxy (IAP)

Answer

Cloud Armor

Question 14

An organization wants to ensure its data is encrypted at rest and in transit by default on Google Cloud. Which statement is correct?

Accepted Answer

Data is encrypted at rest and in transit by default.. Google Cloud encrypts data at rest and in transit by default for many services, with customer-managed keys optional.

Answer

Customers must use CMEK to encrypt data at rest.

Answer

Only data in transit is encrypted by default.

Answer

Encryption is optional and must be enabled by the customer.

Question 15

A media company stores video files on-premises and wants to migrate them to Google Cloud for processing and transcoding. The files are accessed by a legacy on-premises application that cannot be modified. Which migration strategy should they use?

Accepted Answer

Use Storage Transfer Service to move data to Cloud Storage, then mount the bucket using Cloud Storage FUSE on the on-premises server.. Storage Transfer Service allows transferring data from on-premises to Cloud Storage, while using Cloud Storage FUSE or a VPN can keep the on-premises application accessing the files. The best approach is to use Storage Transfer Service for bulk migration and then configure hybrid access.

Answer

Use Transfer Appliance to ship data to Google Cloud and set up a VPN for the application to access Cloud Storage via private IP.

Answer

Migrate the application to run on Compute Engine and access Cloud Storage natively.

Answer

Use gsutil rsync to copy files to Cloud Storage and update the application to use Cloud Storage URLs.