Cloud Digital Leader Practice Test 44 — 15 Questions

Question 1

A media company needs to deliver video content to users worldwide with low latency. They want to cache content at edge locations. Which Google Cloud service should they use?

Accepted Answer

Cloud CDN. Cloud CDN uses Google's global edge network to cache content close to users, reducing latency for media delivery.

Answer

Cloud Storage

Answer

Cloud Load Balancing

Answer

Cloud Interconnect

Question 2

A team is designing a CI/CD pipeline for a microservices application. They want to automatically build container images from source code, store them securely, and deploy to GKE. Which THREE services should they include? (Choose three.)

Accepted Answer

Cloud Build. Cloud Build (A) is correct because it is Google Cloud's managed CI/CD service that compiles source code and builds container images, and it integrates natively with GKE and Artifact Registry for automated pipelines. Artifact Registry (D) is correct because it securely stores and manages container images (and other artifacts) with IAM-based access control and vulnerability scanning, serving as the image repository the pipeline pushes to and GKE pulls from. GKE (E) is correct because it is the target runtime for deploying the containerized microservices, and it can pull images directly from Artifact Registry within the same project. Cloud Storage (B) is not the right choice because it is object storage for blobs, not a container image registry with the tagging and vulnerability features needed here. Cloud Run (C) is not correct because it is a serverless container platform, not the GKE deployment target specified in the scenario.

Answer

Cloud Storage

Answer

Cloud Run

Question 3

A city government deploys thousands of IoT sensors (traffic, air quality, energy usage, waste levels) and analyzes the data in real time to optimize traffic signals, dispatch waste collection vehicles proactively, and adjust street lighting automatically. What concept describes this use of cloud and IoT?

Accepted Answer

Smart city — using cloud, IoT, and AI to optimize city operations and resource utilization in real time.. A smart city uses digital technology — IoT sensors, cloud analytics, AI, and connectivity — to optimize city operations, improve resident quality of life, and use resources more efficiently. Cloud platforms receive sensor data via IoT Core or Pub/Sub, process it with Dataflow, analyze patterns with BigQuery and AI, and trigger automated responses (traffic signal changes, dispatch notifications). This is one of the most impactful applications of cloud transformation at city scale.

Answer

E-government — providing digital access to government services online.

Answer

Digital twin — creating virtual replicas of city infrastructure.

Answer

Edge computing — processing data locally at each sensor to reduce cloud bandwidth.

Question 4

A logistics company collects GPS data from 50,000 trucks every 30 seconds. Previously they sampled only 1% of this data due to storage costs. In the cloud, they store and analyze 100% of the data and discover route optimization patterns that reduce fuel costs by 12%. Which concept does this illustrate about cloud and data?

Accepted Answer

Cloud scale removes data storage and analysis constraints, enabling companies to derive business insights from complete datasets that were previously too costly to collect and process.. It directly captures the core transformation that cloud computing enables: the removal of data storage and processing constraints. By moving from sampling 1% of GPS data to analyzing 100%, the company could identify route optimization patterns that were invisible in the sampled subset, leading to a 12% fuel cost reduction. This illustrates how cloud elasticity and pay-as-you-go pricing allow businesses to process complete datasets, unlocking insights that were previously economically infeasible with on-premises or limited storage.

Answer

Cloud storage is cheaper per GB than on-premises — the only benefit is cost reduction.

Answer

GPS data is only useful when analyzed by Google's AI — the company's own analytics wouldn't find patterns.

Answer

The company should have used data sampling more aggressively to reduce cloud costs further.

Question 5

A software team deploys microservices using containers and wants Google Cloud to automatically manage the scaling, self-healing, and rollout of their containerized applications. They don't want to provision or manage underlying virtual machines. Which Google Cloud service best meets this need?

Accepted Answer

Google Kubernetes Engine (GKE), which manages containerized applications with automatic scaling, self-healing, and rolling updates. Google Kubernetes Engine (GKE) is the correct choice because it provides a managed Kubernetes environment that automates scaling, self-healing (e.g., automatic pod restarts and node repair), and rollout management (e.g., rolling updates and rollbacks) for containerized applications. This meets the requirement of not provisioning or managing underlying virtual machines, as GKE abstracts the node infrastructure.

Answer

Compute Engine, Google Cloud's virtual machine service

Answer

Cloud Storage, for storing container images and serving them to instances

Answer

Cloud CDN, which distributes containerized applications globally

Question 6

A company's security policy requires all employees to verify their identity using more than just a password when accessing Google Cloud resources. What security feature enforces this requirement?

Accepted Answer

Multi-factor authentication (MFA) / Two-step verification (2SV).. Multi-factor authentication (MFA) / Two-step verification (2SV) is the correct answer because it explicitly requires users to provide two or more verification factors (e.g., something you know, something you have, something you are) to access Google Cloud resources. This directly enforces the policy of verifying identity beyond just a password, as MFA/2SV adds an additional layer of security by requiring a second factor such as a time-based one-time password (TOTP) from an authenticator app, a hardware security key (e.g., FIDO2), or a push notification. Google Cloud Identity Platform supports this via security key enforcement and 2SV policies, ensuring that password compromise alone is insufficient for access.

Answer

Password complexity requirements — enforcing long, complex passwords.

Answer

IP allowlisting — only allowing access from office IP addresses.

Answer

Session timeout — automatically logging out users after 30 minutes of inactivity.

Question 7

A telecommunications company wants to launch new 5G services faster than its competitors. Which cloud characteristic most directly accelerates its ability to bring new services to market quickly?

Accepted Answer

On-demand provisioning that allows infrastructure to be deployed in minutes rather than waiting months for hardware procurement and installation. On-demand provisioning allows the company to spin up virtual servers, networks, and storage in minutes via APIs, eliminating the months-long lead time required for traditional hardware procurement and installation. This directly reduces the time-to-market for new 5G services, as infrastructure can be scaled and configured on the fly to support rapid deployment and testing.

Answer

The ability to store large amounts of customer call records in the cloud at lower cost

Answer

Cloud providers' global data center network ensures low latency for all customer calls

Answer

Managed cloud databases that eliminate the need for database administrators

Question 8

A startup wants to estimate the monthly cost of running a managed Kubernetes cluster with specific node configurations before deploying. Which GCP tool should they use?

Accepted Answer

Google Cloud Pricing Calculator. The Google Cloud Pricing Calculator is the purpose-built tool for estimating costs of GCP resources—including GKE clusters with specified node machine types, counts, and regions—before any resources are deployed. It lets users model workloads (e.g., GKE Standard vs Autopilot, node vCPU/memory, committed use discounts) and produces a forward-looking monthly cost estimate. Because the startup wants a pre-deployment estimate, the calculator is the correct choice.

Answer

Active Assist recommendations

Answer

Cost Management dashboard

Answer

Billing export to BigQuery

Question 9

Which Google Cloud commitment to open source has enabled portability for containerized applications across different cloud providers?

Accepted Answer

Kubernetes. Kubernetes is an open-source container orchestration system originally developed by Google and now maintained by the Cloud Native Computing Foundation (CNCF). Google's commitment to open source Kubernetes has enabled portability of containerized applications across different cloud providers, as the same Kubernetes APIs and manifests work on GKE, EKS, AKS, and on-premises clusters. This avoids vendor lock-in and allows multi-cloud strategies.

Answer

Kubeflow

Answer

Istio

Answer

TensorFlow

Question 10

Which Google Cloud service allows you to run code in response to events (e.g., file upload to Cloud Storage) without provisioning servers?

Accepted Answer

Cloud Functions. Cloud Functions is Google Cloud's serverless Functions-as-a-Service (FaaS) platform. It executes small, single-purpose code snippets in response to events from sources like Cloud Storage object finalization, Pub/Sub messages, or HTTP requests, with no server provisioning or management required. The service automatically scales based on event volume and bills only for execution time, making it the canonical answer for event-driven, serverless compute.

Answer

App Engine

Answer

Compute Engine

Answer

Google Kubernetes Engine

Question 11

A company runs a stateful web application on Compute Engine. They need to ensure that persistent data is retained if an instance fails, and that traffic is automatically distributed across healthy instances. Which TWO Google Cloud services should they use? (Choose 2)

Accepted Answer

Persistent Disk. Persistent Disk (B) is correct because it provides durable, network-attached block storage that persists independently of the Compute Engine instance lifecycle, so data survives an instance failure and can be reattached to a replacement VM. Cloud Load Balancing (C) is correct because it automatically distributes incoming traffic across healthy backend instances using health checks, removing unhealthy instances from rotation. Cloud DNS (A) only resolves domain names to IP addresses and does not provide persistence or health-based traffic distribution. Cloud CDN (D) caches HTTP(S) content at edge locations to reduce latency, not to persist application data or balance traffic. Cloud NAT (E) provides outbound internet access for private instances and does not address storage durability or load distribution.

Answer

Cloud DNS

Answer

Cloud CDN

Answer

Cloud NAT

Question 12

Which layer of Google's defence-in-depth security model includes the use of TLS for data in transit?

Accepted Answer

Data security. Google's defence-in-depth model organizes controls into layers including data security, operational security, deployment security, and physical security. TLS (Transport Layer Security) protects data in transit by encrypting communications between clients and servers, which falls squarely under the data security layer — the layer responsible for protecting data at rest, in transit, and in use. TLS is a data-protection control, not an operational, deployment, or physical control.

Answer

Operational security

Answer

Deployment security

Answer

Physical security

Question 13

Which Google Cloud service provides a centralized view of an application's performance metrics, logs, and traces — enabling teams to monitor system health, set up alerts, and diagnose issues from a single platform?

Accepted Answer

Cloud Monitoring (part of Google Cloud's operations suite). Cloud Monitoring (part of Google Cloud's operations suite) is the correct answer because it provides a unified platform for collecting and visualizing metrics, logs, and traces from applications and infrastructure. It enables teams to set up alerting policies, create dashboards, and diagnose performance issues using a single interface, integrating with services like Cloud Logging and Cloud Trace for end-to-end observability.

Answer

Cloud Security Command Center

Answer

BigQuery

Answer

Cloud Asset Inventory

Question 14

A project manager wants a cost-effective way to run batch processing jobs that run for a few hours each night. The jobs are fault-tolerant and can be interrupted. Which Compute Engine option is most suitable?

Accepted Answer

Preemptible VMs. Preemptible VMs are Compute Engine instances that last up to 24 hours and can be terminated at any time by Google Cloud, making them ideal for fault-tolerant, interruptible batch jobs that run for a few hours each night. They offer up to 80% cost savings compared to regular VMs, which aligns perfectly with the project manager's requirement for a cost-effective solution.

Answer

N2 high-CPU VMs

Answer

Regular VMs with committed use discounts

Answer

Sole-tenant nodes

Question 15

A non-technical manager asks what a 'virtual machine' is and how it differs from the physical servers the company used to run in its own data center. Which explanation is most accurate and accessible?

Accepted Answer

A virtual machine is a complete software-defined computer that runs on shared physical hardware, providing the same capabilities as a dedicated server but created and managed through software in minutes. A virtual machine (VM) is a software-based emulation of a physical computer that runs on shared physical hardware via a hypervisor. It provides the same capabilities as a dedicated server (CPU, memory, storage, networking) but can be provisioned, cloned, and managed in minutes through software, which is the core difference from traditional on-premises physical servers that require manual setup and are tied to specific hardware.

Answer

A virtual machine is a web-based application that runs in a browser and replaces traditional desktop software

Answer

A virtual machine is a physical server located in the cloud provider's data center that is reserved exclusively for one customer

Answer

A virtual machine is a type of database that stores data virtually rather than on physical disk