Cloud Digital Leader Practice Test 46 — 15 Questions

Question 1

A developer wants to trigger a serverless function whenever a new object is uploaded to a Cloud Storage bucket. Which Google Cloud service should they use?

Accepted Answer

Cloud Functions. Cloud Functions is an event-driven serverless compute service that can be triggered by Cloud Storage events such as object finalise/create. Cloud Run can also be triggered by events via Eventarc, but Cloud Functions is the simpler choice for small code snippets triggered by events. Dataflow and App Engine are not designed for event-triggered functions from Cloud Storage.

Answer

Cloud Run

Answer

App Engine

Answer

Dataflow

Question 2

A data engineering team is building a streaming pipeline that ingests clickstream events from a website, processes them in real-time (e.g., aggregations, filtering), and loads the results into BigQuery for analysis. They also need the ability to replay events in case of failures. Which combination of services is MOST appropriate for the streaming ingestion and processing?

Accepted Answer

Pub/Sub and Cloud Dataflow. Pub/Sub for ingestion allows event replay (by setting a subscription's retention), and Dataflow for stream processing handles real-time transformations and writes to BigQuery.

Answer

Cloud Storage and Cloud Functions

Answer

Pub/Sub and Cloud Functions

Answer

Apache Kafka on Compute Engine

Question 3

A company wants to enforce a policy that prevents all projects in the organization from enabling certain Google Cloud APIs. Where should the policy be applied to ensure it is inherited by all projects, including future ones?

Accepted Answer

On the organization node. Organization policies applied at the organization node are inherited by all folders and projects under it. This is the most efficient way to enforce a blanket restriction across the entire resource hierarchy.

Answer

On the billing account

Answer

On each individual project

Answer

On the folder containing the projects

Question 4

A startup wants to deploy a web application with minimal operational overhead. They want to focus only on writing code and not managing servers, containers, or runtimes. Which Google Cloud service is designed for this purpose?

Accepted Answer

App Engine. App Engine is a fully managed PaaS that abstracts the underlying infrastructure, allowing developers to focus solely on code. Cloud Run requires container images, Compute Engine requires full OS management, and GKE requires cluster management.

Answer

Cloud Run

Answer

Google Kubernetes Engine (GKE)

Answer

Compute Engine

Question 5

A data engineer needs to process a continuous stream of clickstream events from a website, perform real-time aggregations (e.g., counts per page per minute), and write the results to BigQuery for dashboarding. Which combination of services should they use?

Accepted Answer

Pub/Sub, Dataflow, BigQuery. Pub/Sub ingests the stream, Dataflow processes real-time aggregations using Apache Beam, and BigQuery stores results. Cloud Functions is not suitable for streaming aggregations. Cloud Storage is for batch, not real-time. Cloud SQL is not for streaming analytics.

Answer

Pub/Sub, Cloud Functions, Cloud SQL

Answer

Cloud Storage, Dataflow, Cloud SQL

Answer

Pub/Sub, Cloud Functions, BigQuery

Question 6

A data analytics team wants to analyze large datasets using SQL and create dashboards with minimal latency. They need a serverless data warehouse and a BI tool. Which two services should they use? (Choose exactly 2.)

Accepted Answer

Looker. BigQuery is a serverless data warehouse for SQL analytics. Looker is a BI platform integrated with BigQuery for dashboards. Dataflow is for data processing, not storage. Cloud Storage is for object storage, not SQL analytics. Looker Studio is free but less feature-rich for enterprise needs.

Answer

Dataflow

Answer

Looker Studio

Answer

Cloud Storage

Question 7

A developer wants to deploy a serverless application that runs code in response to HTTP requests and events from other Google Cloud services. They also need to store configuration and session data in a fast, in-memory data store. Which TWO services should they use? (Choose TWO)

Accepted Answer

Cloud Functions. Cloud Functions handles HTTP and event-driven triggers serverlessly. Memorystore provides managed Redis/Memcached for caching and session storage. Cloud SQL is relational and not in-memory. Cloud Storage is object storage. Bigtable is NoSQL but not in-memory.

Answer

Cloud SQL

Answer

Cloud Bigtable

Answer

Cloud Storage

Question 8

A company wants to reduce costs for its batch processing jobs that run nightly on Compute Engine. The jobs are fault-tolerant and can be interrupted. They are considering using preemptible VMs. Which THREE statements about preemptible VMs are true?

Accepted Answer

Preemptible VMs do not offer live migration.. Preemptible VMs can be terminated at any time within 24 hours (typical max 24h). They are significantly cheaper than regular VMs. They cannot be migrated to regular VMs; you must recreate them. They do not offer live migration. They are suitable for fault-tolerant batch jobs.

Answer

Preemptible VMs can be migrated to regular VMs if preemption occurs.

Answer

Preemptible VMs provide the same SLA as standard VMs.

Question 9

What is the primary purpose of VPC Service Controls?

Accepted Answer

To prevent data exfiltration from Google Cloud services. VPC Service Controls create perimeters around Google Cloud services to prevent data exfiltration. VPC firewall rules control network traffic. Cloud Armor is for DDoS. Cloud IDS is for intrusion detection.

Answer

To control ingress and egress traffic at the network level

Answer

To detect network intrusions

Answer

To protect against DDoS attacks

Question 10

A large enterprise is migrating its on-premises data center to Google Cloud. They need a dedicated, low-latency, and highly available connection between their on-premises network and their VPC. Which networking service should they use?

Accepted Answer

Cloud Interconnect. Cloud Interconnect provides dedicated, high-bandwidth, low-latency connections with SLAs. Cloud VPN is over the public internet and may not meet strict latency/availability requirements. Load Balancing and CDN are not for connectivity to on-premises.

Answer

Cloud CDN

Answer

Cloud VPN

Answer

Cloud Load Balancing

Question 11

A developer wants to deploy a containerized web application that can scale to zero when not in use, and only pay for actual request processing time. Which Google Cloud compute service should the developer use?

Accepted Answer

Cloud Run. Cloud Run is a serverless container runtime that scales to zero and charges per request, ideal for containerized apps with variable traffic. Cloud Functions is for smaller code snippets, not containers. Compute Engine runs VMs continuously, and GKE requires at least one node.

Answer

Cloud Functions

Answer

Compute Engine

Answer

Google Kubernetes Engine (GKE)

Question 12

A data science team needs to train a custom machine learning model using their own data. They want a unified platform that manages the entire ML lifecycle, including data preparation, training, tuning, and deployment. Which service should they use?

Accepted Answer

Vertex AI. Vertex AI is Google Cloud's unified ML platform that covers the full lifecycle from data to deployment.

Answer

AutoML

Answer

AI Platform

Answer

Cloud Functions

Question 13

A startup is building a mobile app and needs to store user profiles and preferences. The data is hierarchical and the app requires real-time synchronization across devices. Which Google Cloud database should they use?

Accepted Answer

Firestore. Firestore is a NoSQL document database designed for mobile apps, with real-time sync and offline support. Cloud SQL and Spanner are relational, not ideal for hierarchical data. Bigtable is for time-series/analytics, not mobile app data.

Answer

Cloud Spanner

Answer

Cloud Bigtable

Answer

Cloud SQL

Question 14

A data engineering team needs to store and manage database passwords and API keys used by their applications. Which Google Cloud service should they use?

Accepted Answer

Secret Manager. Secret Manager is designed to store secrets like passwords and API keys. Cloud KMS is for encryption keys. Cloud Key Management Service is for creating and managing cryptographic keys, not storing secrets. Cloud Storage is for objects.

Answer

Cloud KMS

Answer

Cloud Key Management Service

Answer

Cloud Storage

Question 15

An engineer needs to grant a team access to view but not edit Compute Engine instances in a project. They also need to ensure that any new instances created in a folder automatically inherit a policy that denies using certain machine types. Which TWO steps should they take? (Choose TWO.)

Accepted Answer

Apply an organization policy constraint to the folder to deny certain machine types. IAM roles grant permissions; compute.viewer provides read-only access to Compute resources. Organization policies can be set at the folder level to restrict machine types across all projects within.

Answer

Grant the team the 'roles/iam.securityReviewer' role

Answer

Use a deny IAM policy at the project level to block create permissions

Answer

Set a quota for the machine type at the project level