Cloud Digital Leader Practice Test 45 — 15 Questions

Question 1

An analytics team needs to create dashboards and visualizations from data stored in BigQuery. They want a free solution that integrates natively. Which tool should they use?

Accepted Answer

Looker Studio. Looker Studio (formerly Google Data Studio) is a free, fully managed business intelligence and data visualization tool that natively connects to BigQuery. It allows users to create interactive dashboards and reports without any cost, making it the ideal choice for an analytics team seeking a free, natively integrated solution. Its direct BigQuery connector enables real-time querying and visualization of large datasets.

Answer

Cloud Dataflow

Answer

Looker

Answer

Google Sheets

Question 2

A company wants to use Google Cloud to innovate faster by leveraging managed services. Which TWO benefits are directly associated with using managed services? (Choose 2)

Accepted Answer

Reduced operational overhead (no patching, no server management). Option A is correct because managed services shift routine operational tasks such as OS patching, server provisioning, and infrastructure maintenance to the cloud provider, freeing the company's staff to focus on innovation rather than undifferentiated operations. Option D is correct because managed services typically include built-in high availability, replication, and automatic scaling features, so the company gains resilience and elasticity without designing and operating those mechanisms itself. Options B, C, and E are not correct: managed services reduce rather than increase control over the underlying hardware, generally require fewer staff to operate, and are typically more cost-effective than self-managed alternatives when total operational costs are considered.

Answer

Increased control over the underlying hardware

Answer

Requires more staff to manage

Answer

Higher cost compared to self-managed solutions

Question 3

A company is building a new application that needs to send transactional emails (order confirmations, password resets, account notifications) to customers. Google Cloud does not provide a native SMTP email service. Which approach is standard for sending transactional emails from Google Cloud applications?

Accepted Answer

Integrating a third-party transactional email service (such as SendGrid, Mailgun, or Postmark) via API from the Cloud Run or Cloud Functions application. Google Cloud does not offer a native SMTP service for sending transactional emails. The standard approach is to integrate a third-party transactional email service (e.g., SendGrid, Mailgun, Postmark) via API from serverless compute services like Cloud Run or Cloud Functions. These services handle deliverability, reputation, and compliance with email standards (SPF, DKIM, DMARC) that are critical for transactional email.

Answer

Using Cloud Storage to store email templates and delivering them directly to customers' inboxes

Answer

Running a self-managed SMTP server on a Compute Engine VM and configuring MX records to deliver email

Answer

Using Gmail directly by authenticating the application with a corporate Gmail account and sending through Gmail SMTP

Question 4

A company runs workloads across Google Cloud and on-premises environments. They want a single management plane to deploy and manage containerized applications consistently across both environments using the same tooling and policies. Which Google Cloud product provides this unified hybrid/multi-cloud management?

Accepted Answer

Anthos — Google's hybrid and multi-cloud application management platform.. Anthos is Google Cloud's hybrid and multi-cloud application management platform that provides a single control plane for deploying and managing containerized applications consistently across on-premises and cloud environments. It uses GKE on-prem and Anthos Config Management to enforce uniform policies, service mesh, and CI/CD pipelines, enabling the unified management described in the scenario.

Answer

Cloud Interconnect — it connects on-premises to Google Cloud.

Answer

Google Distributed Cloud — runs Google Cloud services inside the customer's data center.

Answer

Cloud Deployment Manager — deploys resources via infrastructure-as-code templates.

Question 5

A company is migrating a legacy application to Google Cloud. The application has variable traffic and requires reliable, low-latency database access. The team wants to minimize operational overhead. Which TWO services should they consider for the database tier? (Choose two.)

Accepted Answer

Cloud SQL. Cloud SQL (A) is correct because it is a fully managed relational database service that supports MySQL, PostgreSQL, and SQL Server, offering automatic backups, patching, replication, and scaling with minimal operational overhead, making it suitable for a legacy application needing low-latency access. Cloud Spanner (B) is correct because it is a fully managed, horizontally scalable relational database that provides strong consistency and high availability with low latency even under variable traffic, and it removes operational burden such as sharding and replication management. Cloud Bigtable (C) is not ideal because it is a NoSQL wide-column store optimized for large analytical and high-throughput workloads, not general legacy relational applications. Firestore (D) is a NoSQL document database better suited for mobile, web, and serverless apps rather than a legacy relational workload. Self-managed MySQL on Compute Engine (E) is incorrect because it requires the team to handle patching, backups, replication, and scaling themselves, which increases operational overhead rather than minimizing it.

Answer

Cloud Bigtable

Answer

Firestore

Answer

Self-managed MySQL on Compute Engine

Question 6

An architect proposes using a 'private cloud' deployment model for a company that wants cloud-like capabilities but is prohibited from using public cloud due to data residency regulations. What is a key advantage of private cloud compared to public cloud, and what is a significant trade-off?

Accepted Answer

Advantage: full control over data residency, security posture, and compliance configuration. Trade-off: organization bears full cost of infrastructure, loses public cloud's scale economics, and has limited elasticity compared to public cloud's vast resource pools. A private cloud gives the organization exclusive control over data residency, security, and compliance, which is essential when regulations prohibit public cloud use. The trade-off is that the organization must bear the full capital and operational costs of the infrastructure, losing the scale economics and near-infinite elasticity of public cloud providers like AWS, Azure, or GCP.

Answer

Advantage: private cloud is always cheaper than public cloud. Trade-off: private cloud provides less storage capacity

Answer

Advantage: private cloud provides automatic scaling to unlimited capacity. Trade-off: private cloud requires purchasing hardware every time capacity is needed

Answer

Advantage: private cloud services are managed by the cloud provider, reducing operational burden. Trade-off: customers cannot customize private cloud configurations

Question 7

A small e-commerce company runs its website on Compute Engine instances behind a Global External HTTP(S) Load Balancer. They are concerned about application-layer DDoS attacks, such as SQL injection and cross-site scripting (XSS), that could compromise customer data and degrade performance. The company wants a managed solution that provides both DDoS protection and web application firewall (WAF) capabilities without requiring constant manual updates. They have a limited budget and prefer a solution that is easy to configure and does not require extensive infrastructure changes. What should they implement?

Accepted Answer

Enable Cloud Armor with preconfigured WAF rules and configure it on the load balancer.. Cloud Armor is a managed, Google Cloud-native service that provides both DDoS protection and a web application firewall (WAF) with preconfigured rules for SQL injection and XSS. It integrates directly with the Global External HTTP(S) Load Balancer, requires no manual updates (rules are maintained by Google), and is cost-effective because it charges based on policy usage rather than infrastructure overhead. This meets the company's need for easy configuration, minimal infrastructure changes, and managed security.

Answer

Configure VPC firewall rules to block suspicious IP addresses.

Answer

Set up Cloud NAT to route all traffic through a single IP address.

Answer

Use Cloud VPN to connect users to the load balancer.

Question 8

A startup wants to launch a new mobile app globally. They expect user traffic to be unpredictable and want to only pay for the compute resources they use. Which cloud benefit BEST addresses this need?

Accepted Answer

Pay-as-you-go pricing. The pay-as-you-go model allows startups to avoid large upfront capital expenditure and only pay for actual usage, which is ideal for unpredictable workloads.

Answer

Global Reach

Answer

Agility

Answer

Scalability

Question 9

An organization wants to reduce latency for users in Europe. They plan to deploy their application in a Google Cloud region located in Europe. Which region should they choose?

Accepted Answer

europe-west1. europe-west1 is a Google Cloud region physically located in Belgium, so deploying there places compute and storage close to European users, reducing network round-trip latency. The other options are regions on different continents, which would add transatlantic or transpacific latency for European users.

Answer

us-central1

Answer

asia-east1

Answer

australia-southeast1

Question 10

A company wants to reduce its carbon footprint and has committed to using 100% renewable energy for its cloud infrastructure. Which Google Cloud value proposition directly supports this goal?

Accepted Answer

Sustainability (renewable energy match). Google Cloud matches 100% of its global energy consumption with renewable energy and aims for carbon-free energy by 2030. Security, open source, and compliance are unrelated to renewable energy.

Answer

Open cloud (Kubernetes/TensorFlow)

Answer

Security (BeyondCorp/encryption)

Answer

Trust and compliance (certifications)

Question 11

A global e-commerce company wants to build a product recommendation engine that suggests items to customers based on their real-time browsing behavior and purchase history. They want a pre-built solution that doesn't require building an ML recommendation model from scratch. Which Google Cloud product is purpose-built for retail recommendations?

Accepted Answer

Recommendations AI (Vertex AI Search for Retail). Recommendations AI (now part of Vertex AI Search for Retail) is Google Cloud's purpose-built, pre-built solution for retail product recommendations. It uses deep learning models trained on retail-specific data (e.g., clickstream, purchase history) to generate personalized suggestions without requiring the user to build or train an ML model from scratch.

Answer

BigQuery ML — build a collaborative filtering model using SQL.

Answer

Cloud SQL — query purchase history to find commonly bought-together products.

Answer

Cloud Dataflow — stream user clickstream data to build recommendations in real time.

Question 12

A company runs batch processing jobs on scheduled intervals. They want to minimise costs by using short-lived compute capacity that can be interrupted but offers significant discounts. Which type of Compute Engine VM should they use?

Accepted Answer

Preemptible VMs. Preemptible VMs are short-lived Compute Engine instances that offer up to 60-91% discounts compared to standard VMs but can be terminated by Google at any time with a 30-second notice. They are ideal for batch processing jobs that are fault-tolerant and can be interrupted, matching the requirement to minimize costs with interruptible capacity.

Answer

E2 high-memory VMs

Answer

Sole-tenant nodes

Answer

Confidential VMs

Question 13

A data team has an IAM policy on a BigQuery dataset as shown. Alice needs to run a query that joins across multiple datasets. She receives a permission error. What is the most likely cause?

Accepted Answer

Alice lacks the jobUser role to run queries. The BigQuery `jobUser` role is required to run query jobs, including those that join across datasets. The IAM policy shown only grants dataset-level permissions (like `dataViewer` or `dataOwner`), but Alice lacks the `jobUser` role at the project level, which is necessary to submit a query job. Without this role, she receives a permission error even if she has read access to the datasets.

Answer

The policy denies all users except Bob

Answer

Alice does not have permission to read the dataset

Answer

Bob’s dataOwner role prevents others from querying

Question 14

Refer to the exhibit. A DevOps engineer notices that the alert fires even when there is only a single 5-second spike of errors that lasts for one minute. What is the most likely cause?

Accepted Answer

The trigger count is set to 1, so a single minute of high rate fires the alert. The correct answer is A: the trigger count is set to 1, so a single minute of high rate fires the alert. In Cloud Monitoring alerting policies, the trigger count specifies how many consecutive alignment periods must violate the condition before the alert fires; with a count of 1, even one 60-second window containing a brief 5-second error spike is enough to trigger the alert. This matches the scenario where a single short spike lasting one minute causes the alert to fire. Option B is wrong because a 60s alignment period is not inherently too short and would not by itself cause firing on one spike. Option C is wrong because the threshold value of 5 relates to the metric condition, not the number of periods required to fire. Option D is wrong because a trigger count of 2 would require two consecutive violating periods, which would actually suppress firing on a single one-minute spike.

Answer

The alignment period is too short (60s)

Answer

The threshold value (5) is too low

Answer

The trigger count is set to 2, so two consecutive periods are needed

Question 15

A company is moving its financial reporting application to Google Cloud. The CFO asks: 'If Google Cloud experiences a data breach and our financial data is exposed, who is financially liable?' How should the cloud architect answer this question?

Accepted Answer

Liability depends on where the breach originated: Google is responsible for failures in its infrastructure security; the customer is responsible for breaches resulting from misconfiguration, application vulnerabilities, or inadequate access controls in areas under their responsibility. The Google Cloud Shared Responsibility Model explicitly delineates liability: Google is responsible for the security of the cloud (e.g., physical infrastructure, hypervisor, network controls), while the customer is responsible for security in the cloud (e.g., IAM policies, application code, data encryption). In a breach, liability is determined by where the failure occurred—if Google’s infrastructure (e.g., GKE node isolation) fails, Google bears liability; if the customer misconfigures a Cloud Storage bucket or leaves a Compute Engine firewall open, the customer bears liability. This aligns with the CFO’s question about financial liability, which is not absolute but contingent on the breach’s origin.

Answer

Google Cloud bears full financial liability for all data breaches involving customer data on its platform

Answer

The customer bears all liability for any breach because they chose to use cloud services

Answer

No party is liable because data breaches in cloud are force majeure events similar to natural disasters