Cloud Digital Leader Practice Test 44 — 15 Questions

Question 1

A developer needs to add machine learning capabilities to their application without training models from scratch. Which Google Cloud service provides pre-trained models via API?

Accepted Answer

Cloud Vision API. Cloud Vision API offers pre-trained models for image analysis accessible via API, allowing developers to integrate ML without training.

Answer

Vertex AI

Answer

AI Platform Training

Answer

Cloud AutoML

Question 2

A company wants to adopt a hybrid cloud strategy to keep sensitive data on-premises while taking advantage of Google Cloud for analytics. Which TWO Google Cloud products enable this architecture? (Choose 2)

Accepted Answer

Anthos. Anthos provides a consistent platform across on-premises and cloud. Cloud VPN or Cloud Interconnect can connect on-prem to Google Cloud. Secret Manager is for secrets; Cloud Run is serverless; BigQuery is analytics but does not enable hybrid architecture.

Answer

BigQuery

Answer

Cloud Run

Answer

Secret Manager

Question 3

An organization wants to reduce its carbon footprint by using Google Cloud. Which of the following statements about Google Cloud's sustainability efforts is correct?

Accepted Answer

Google Cloud matches 100% of its global electricity consumption with renewable energy.. Google Cloud matches 100% of its global electricity consumption with renewable energy and aims for 24/7 carbon-free energy by 2030.

Answer

Google Cloud uses nuclear energy as its primary power source.

Answer

Google Cloud data centers are powered by 100% carbon-free energy since 2020.

Answer

Google Cloud purchases carbon offsets to neutralize all emissions.

Question 4

A company wants to run a stateful application that requires persistent, high-performance block storage attached to a single Compute Engine instance. The application needs consistent low latency. Which storage solution should they use?

Accepted Answer

Persistent Disk. Persistent Disk provides durable block storage with consistent performance attached to a single VM. Local SSDs are ephemeral and not suitable for stateful data.

Answer

Local SSD

Answer

Filestore

Answer

Cloud Storage

Question 5

A data engineer needs to process a large dataset stored in Cloud Storage using Apache Spark. They want to minimize cluster management overhead. Which TWO Google Cloud services can be used together to achieve this? (Choose 2.)

Accepted Answer

Dataproc. Dataproc is the managed Spark service. Cloud Storage can be used as a data source. Dataproc can read directly from Cloud Storage without needing HDFS.

Answer

Cloud SQL

Answer

BigQuery

Answer

Dataflow

Question 6

A company has a requirement to rotate encryption keys every 90 days. They are using Cloud KMS to manage keys for Cloud Storage. What is the correct way to achieve key rotation with minimal impact to existing encrypted objects?

Accepted Answer

Enable automatic rotation on the key with a 90-day period.. Cloud KMS supports automatic rotation based on a schedule. When a key is rotated, a new version is created, and new data is encrypted with the new version while old data remains decryptable with the old version.

Answer

Manually rotate the key every 90 days by generating a new key version.

Answer

Use Cloud HSM to generate a new key and update the bucket default encryption.

Answer

Create a new key and re-encrypt all existing objects using the new key.

Question 7

A security team needs to implement the principle of least privilege for a group of data scientists who only need to query BigQuery datasets, but not modify or delete them. Which THREE IAM roles should be granted? (Choose 3)

Accepted Answer

roles/bigquery.dataViewer. BigQuery Data Viewer allows querying datasets. BigQuery Job User allows running jobs. BigQuery User is a broader role that includes querying but also other permissions. The combination of these allows read-only querying.

Answer

roles/bigquery.dataEditor

Answer

roles/bigquery.admin

Question 8

A security team needs to detect and respond to threats across their Google Cloud environment. Which THREE services should they use together? (Choose 3)

Accepted Answer

Mandiant. Security Command Center for vulnerability scanning and threat detection, Chronicle for SIEM and incident response, and Mandiant for threat intelligence and forensic investigation.

Answer

Cloud Logging

Answer

Cloud Armor

Question 9

A company is migrating a PostgreSQL database to Google Cloud. They want high performance, AI-optimized capabilities, and compatibility with existing PostgreSQL tools. Which service should they choose?

Accepted Answer

AlloyDB. AlloyDB is a PostgreSQL-compatible database optimized for high performance and AI workloads, with built-in ML integration. Cloud SQL for PostgreSQL provides compatibility but lacks AI optimization. Spanner is a different architecture. Bigtable is NoSQL.

Answer

Cloud Spanner

Answer

Cloud SQL for PostgreSQL

Answer

Cloud Bigtable

Question 10

An organisation needs to securely connect its on-premises data centre to Google Cloud with high bandwidth and low latency for hybrid cloud workloads. They want a dedicated, private connection that does not traverse the public internet. Which solution should they use?

Accepted Answer

Cloud Interconnect. Cloud Interconnect provides dedicated, private connections between on-prem and Google Cloud with high bandwidth and low latency. VPN uses the public internet, Cloud CDN is for content delivery, and Cloud NAT is for outbound internet access.

Answer

Cloud NAT

Answer

Cloud CDN

Answer

Cloud VPN

Question 11

Which Google Cloud service provides a serverless data warehouse for running SQL queries on petabyte-scale data with no need to manage infrastructure?

Accepted Answer

BigQuery. BigQuery is a fully managed, serverless data warehouse that supports SQL queries on massive datasets.

Answer

Cloud SQL

Answer

Dataflow

Answer

Pub/Sub

Question 12

A developer wants to deploy a containerised microservice that can scale to zero when not in use and automatically scale up based on HTTP requests. The microservice is stateless and runs a custom Docker image. Which Google Cloud compute service is BEST suited for this workload?

Accepted Answer

Cloud Run. Cloud Run is a serverless compute platform that runs stateless containers and can scale to zero when idle. It automatically scales based on incoming requests, making it ideal for event-driven microservices. GKE requires a cluster to run even when idle, Compute Engine VMs are always on, and App Engine Standard does not support custom containers.

Answer

Google Kubernetes Engine (GKE)

Answer

Compute Engine with managed instance groups

Answer

App Engine Standard environment

Question 13

A retail company experiences sudden traffic spikes during holiday sales. They want to automatically add or remove compute capacity to handle the load without manual intervention. Which Google Cloud feature should they use?

Accepted Answer

Managed instance groups with autoscaling. Managed instance groups with autoscaling automatically adjust the number of VM instances based on load, ensuring scalability without over-provisioning.

Answer

Cloud Load Balancing

Answer

Cloud Functions

Answer

Cloud CDN

Question 14

A company runs a batch job that processes data every night. The job can tolerate interruptions and currently runs on a dedicated on-premises server that is underutilized. They want to migrate to Google Cloud and minimise compute cost. Which compute option is most cost-effective?

Accepted Answer

Preemptible VMs. Preemptible VMs offer significantly lower cost (up to 80% discount) but can be terminated at any time, making them ideal for fault-tolerant batch workloads. Standard VMs are more expensive, sole-tenant nodes are for isolation, and GPUs add cost.

Answer

Sole-tenant nodes

Answer

Standard (on-demand) VMs

Answer

VMs with GPUs

Question 15

A company wants to implement the principle of least privilege for a team of developers who need to deploy applications on Compute Engine and monitor logs. Which THREE IAM roles should be granted? (Choose 3)

Accepted Answer

roles/iam.serviceAccountUser. roles/compute.instanceAdmin provides permissions to manage instances. roles/logging.viewer provides read access to logs. roles/iam.serviceAccountUser allows attaching service accounts to instances. roles/compute.networkAdmin is too broad for developers. roles/compute.admin is a full admin role, violating least privilege.

Answer

roles/compute.networkAdmin

Answer

roles/compute.admin