Cloud Digital Leader Practice Questions 2 — 50 Questions

Question 1

A company wants to use pre-trained Google AI models to add vision capabilities to their application — specifically to detect objects in images and extract text from scanned documents — without training their own models. Which Google Cloud APIs provide these capabilities?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Cloud Vision API for object detection and OCR; Cloud Document AI for structured document extraction.. Cloud Vision API provides pre-trained models for object detection and OCR (Optical Character Recognition) to extract text from images, while Cloud Document AI specializes in extracting structured data (e.g., fields, tables) from scanned documents. Both services require no custom training, aligning with the company's requirement to use pre-trained Google AI models.

Answer

BigQuery ML for both use cases — it trains vision models on image data stored in BigQuery.

Answer

Vertex AI AutoML Vision — train a custom model on your own images.

Answer

Cloud Natural Language API for text extraction from images.

Question 2

An enterprise wants employees to access internal web applications securely from any location (including remote work from home) without using a VPN. Employees should only access apps they're authorized for, based on their identity and device context. Which Google Cloud service enables this zero-trust access model?

Accepted Answer

Cloud Identity-Aware Proxy (IAP). Cloud Identity-Aware Proxy (IAP) is the correct service because it enforces zero-trust access by verifying a user's identity and device context before granting access to internal web applications, without requiring a VPN. It uses Google's BeyondCorp model to authenticate and authorize each request based on identity and context, allowing secure access from any location.

Answer

Cloud VPN with split tunneling for internal application access.

Answer

Cloud Armor IP allowlist to restrict access to corporate office IP ranges.

Answer

Cloud Load Balancing with SSL termination.

Question 3

A company's security team wants to control which resources on the internet can communicate with their virtual machines in Google Cloud. Which fundamental cloud networking concept provides this control?

Accepted Answer

VPC firewall rules that control inbound and outbound network traffic to VMs based on IP ranges, protocols, and ports. VPC firewall rules are the fundamental cloud networking construct that controls network traffic to and from virtual machine instances in Google Cloud. These rules operate at the network layer, filtering traffic based on source/destination IP ranges, protocols (e.g., TCP, UDP, ICMP), and port numbers, thereby governing which internet resources can communicate with the VMs.

Answer

Cloud IAM policies that grant or deny permissions for external systems to access VM resources

Answer

Cloud Storage bucket policies that restrict access to VM storage volumes

Answer

DNS records that determine which internet addresses can resolve the VM's hostname

Question 4

Which IAM component determines what actions a user is allowed to perform on a resource?

Accepted Answer

Authorization. Authorization is the process of determining what actions a user can perform; IAM roles and permissions define this.

Answer

Audit Logging

Answer

Authentication

Answer

Encryption

Question 5

A company wants to send transactional emails (receipts, password resets) and marketing emails at scale from their application. Which approach is recommended when using Google Cloud?

Accepted Answer

Integrate a third-party email delivery service (e.g., SendGrid, Mailgun) with the GCP application.. Google Cloud does not provide a native transactional email service, so integrating a dedicated third-party email delivery service like SendGrid or Mailgun is the recommended approach. These services handle deliverability, reputation management, and compliance with email standards (e.g., SPF, DKIM, DMARC), which are critical for high-volume transactional and marketing emails. Using GCP's native services like Cloud Functions or App Engine to send emails directly would rely on SMTP relays that often have strict sending limits and poor deliverability.

Answer

Use Gmail to manually send all transactional emails.

Answer

Use BigQuery to store and send emails directly to customers.

Answer

Deploy an SMTP server on Compute Engine and send emails directly from GCP IP addresses.

Question 6

A company's risk management team wants to understand Google Cloud's approach to supply chain security — specifically, how Google ensures that the hardware and firmware running in its data centers have not been tampered with. Which Google security initiative addresses hardware supply chain integrity?

Accepted Answer

Google's Titan security chip, embedded in Google's servers, cryptographically attests boot firmware integrity and machine identity — providing hardware-level supply chain security assurance. Google's Titan security chip is a dedicated hardware root of trust that cryptographically verifies the boot firmware integrity and machine identity at every startup. This ensures that only Google-signed firmware runs on servers, preventing tampering during manufacturing, shipping, or deployment. Titan provides a hardware-anchored attestation chain that validates the entire supply chain from chip fabrication to rack installation.

Answer

Google uses third-party antivirus software to scan all hardware components for tampering before installation

Answer

Google relies on hardware manufacturers' security certifications to ensure supply chain integrity

Answer

Google encrypts all hardware components with AES-256 to prevent tampering

Question 7

A business user asks what makes cloud storage different from simply buying a larger external hard drive for the office. Which characteristic most clearly differentiates cloud storage from local storage devices?

Accepted Answer

Cloud storage is accessible from anywhere via the internet, scales elastically without hardware purchases, and provides built-in redundancy across multiple physical locations. Cloud storage is fundamentally different from local storage because it provides internet-based accessibility, elastic scalability without requiring hardware procurement, and built-in redundancy across geographically distributed data centers. These characteristics enable on-demand resource provisioning and high availability, which a single external hard drive cannot offer. The correct answer, B, captures these core differentiators that align with the NIST definition of cloud computing.

Answer

Cloud storage is faster than local storage for all types of data access

Answer

Cloud storage cannot be used for backup, while external hard drives are purpose-built for backup

Answer

Cloud storage requires specialized hardware on the customer's side to access data

Question 8

A company exports all their Google Cloud logs to Cloud Storage for long-term retention required by their compliance policy (7-year log retention). Which Cloud Logging feature enables routing logs to Cloud Storage?

Accepted Answer

Configure a Cloud Logging sink (log router) that routes logs to a Cloud Storage bucket.. Cloud Logging uses sinks (log routers) to export logs to supported destinations, including Cloud Storage. A sink defines a filter and a destination; when configured, it routes matching log entries to the specified Cloud Storage bucket for long-term retention. This is the only native mechanism for continuous, automated log export without custom scripting.

Answer

Cloud Logging automatically archives all logs to Cloud Storage with no configuration needed.

Answer

Enable log streaming in Cloud Storage settings to receive logs from Cloud Logging.

Answer

Use the Cloud Logging API to periodically download logs and upload them to Cloud Storage.

Question 9

A product manager wants to understand what 'latency' means for her company's cloud-hosted e-commerce application. Her developer explains that latency is critical for user experience. Which definition of latency is most accurate in this context?

Accepted Answer

Latency is the time elapsed between a user action (click, page load) and receiving the server's response — directly affecting how fast and responsive the application feels. Latency in the context of a cloud-hosted e-commerce application specifically measures the round-trip time from a user action (such as a click or page load) to the receipt of the server's response. This directly impacts perceived responsiveness and user experience, as higher latency leads to noticeable delays in interactions like adding items to a cart or checking out.

Answer

Latency is the total amount of data that can be transferred per second between the user and the application

Answer

Latency is the percentage of time the application is available versus unavailable

Answer

Latency is the number of requests the server can handle simultaneously before performance degrades

Question 10

A cloud team wants to understand their current Google Cloud resource inventory — specifically, which VMs are running in each region, their machine types, and whether they have public IP addresses. Which approach most efficiently provides this across all projects?

Accepted Answer

Use Cloud Asset Inventory to run a single org-wide query that returns all VM instances, their regions, machine types, and network configurations across all projects. Cloud Asset Inventory provides a single, unified API to query resources across all projects in an organization. By using the `gcloud asset search-all-resources` command with the `--asset-types=compute.googleapis.com/Instance` filter, you can retrieve all VM instances along with their regions, machine types, and network configurations (including public IP addresses) in one operation, without needing to access each project individually.

Answer

Log into each Google Cloud project individually through the Console and manually record VM details in a spreadsheet

Answer

Check the Cloud Billing reports, which list all resources that have incurred charges by resource type

Answer

Enable VPC flow logs in each project to capture VM network activity

Question 11

A business intelligence team wants to create interactive dashboards and reports from their BigQuery data without writing code. They need to share reports with stakeholders who don't have GCP accounts. Which Google Cloud tool is most appropriate?

Accepted Answer

Looker Studio (formerly Data Studio). Looker Studio (formerly Data Studio) is the correct choice because it is a no-code, drag-and-drop business intelligence tool that connects directly to BigQuery, enabling the creation of interactive dashboards and reports. It also supports sharing reports via public links or embedded views, allowing stakeholders without GCP accounts to access them without needing IAM permissions.

Answer

Vertex AI Workbench

Answer

Cloud Dataprep by Trifacta

Answer

BigQuery Studio

Question 12

A CEO asks why the company should invest in a cloud migration when the existing on-premises infrastructure 'still works fine.' Which business case arguments are MOST relevant to present? (Select the best answer.)

Accepted Answer

Cloud enables faster innovation and time-to-market, reduces total cost of ownership, and provides access to advanced capabilities (AI, analytics) that improve competitive positioning.. It directly addresses the CEO's strategic concerns by highlighting cloud's ability to accelerate innovation and time-to-market, reduce total cost of ownership (TCO) through pay-as-you-go pricing and elimination of hardware lifecycle costs, and provide access to advanced capabilities like AI and analytics that on-premises infrastructure cannot easily match. These arguments frame cloud migration as a competitive necessity rather than a mere technology upgrade, which is the core of the business case.

Answer

The cloud uses newer hardware and newer versions of Linux, which are technically superior.

Answer

Cloud providers have more IT staff than the company, so IT headcount can be reduced immediately.

Answer

The current infrastructure will eventually fail, so proactive migration avoids future risk.

Question 13

A company's application experiences a P1 (critical) production incident at 2 AM on a Sunday. The on-call engineer resolves the issue after 3 hours but isn't sure which team members to contact or what steps to follow during an incident. What operational practice and tooling would have helped manage this incident better?

Accepted Answer

Establish a documented incident response process with defined roles, escalation paths, and runbooks, supported by on-call rotation tooling and Cloud Monitoring alerting.. A documented incident response process with defined roles, escalation paths, and runbooks ensures that the on-call engineer knows exactly whom to contact and what steps to follow during a P1 incident. Combined with on-call rotation tooling (e.g., PagerDuty, Opsgenie) and Cloud Monitoring alerting, this practice reduces mean time to acknowledge (MTTA) and mean time to resolve (MTTR) by providing clear, repeatable procedures. Without such a process, the engineer wasted time determining the response, which a runbook would have eliminated.

Answer

Increase the application's max_instances so it scales to handle the issue automatically.

Answer

Move all production deployments to Sunday nights to avoid weekday incident risk.

Answer

Disable monitoring alerts to prevent false alarms that wake engineers unnecessarily.

Question 14

A company has multiple teams deploying to Google Cloud and wants to allocate cloud costs by team. Each team should see only their own costs and be accountable for their spending. Which Google Cloud feature enables this cost allocation and visibility?

Accepted Answer

Use separate projects per team within a folder structure, with resource labels for sub-team cost attribution.. Google Cloud's resource hierarchy allows you to create separate projects per team within a folder structure, and resource labels provide granular cost attribution for sub-teams or environments. This enables each team to see only their own costs via billing export and cost breakdowns in the Cloud Billing console, ensuring accountability without manual splitting.

Answer

Create one large project for all teams and split the bill manually at month-end.

Answer

Purchase dedicated hardware for each team so costs are inherently separate.

Answer

Use Cloud Identity to create separate accounts for each team and bill separately.

Question 15

When choosing a Google Cloud region for a new application, which factors should primarily drive the decision?

Accepted Answer

Proximity to users (for low latency), data residency requirements, available services in the region, and pricing.. Selecting a Google Cloud region requires balancing multiple factors: proximity to users minimizes latency for real-time applications; data residency ensures compliance with local regulations (e.g., GDPR); service availability varies by region (e.g., some regions lack GPUs or specific machine types); and pricing differs due to regional operational costs. Google Cloud's global infrastructure is designed to let customers choose regions based on these trade-offs, not on a single criterion.

Answer

Always choose `us-central1` because it has the most services and lowest cost.

Answer

The alphabetical order of region names — 'a' regions are newer and more stable.

Answer

Google assigns regions automatically based on the user's IP address at account creation.

Question 16

An SRE team analyzes that their service had 47 minutes of downtime in the past 30 days. Their SLO is 99.9% monthly availability. How should the team characterize their performance relative to the SLO?

Accepted Answer

The SLO was missed: 99.9% availability allows approximately 43.2 minutes of downtime in a 30-day month, so 47 minutes exceeded the error budget by about 3.8 minutes. The SLO of 99.9% monthly availability allows a maximum downtime of 43.2 minutes in a 30-day month (30 days × 24 hours × 60 minutes × 0.001 = 43.2 minutes). Since the actual downtime was 47 minutes, the error budget was exceeded by 3.8 minutes, meaning the SLO was missed. This calculation is standard for Google Cloud SRE practices, where error budgets are derived directly from the SLO percentage.

Answer

The SLO was met because 47 minutes is less than 1 hour of downtime per month

Answer

The SLO cannot be evaluated because downtime minutes are not the correct unit for measuring availability

Answer

The SLO was met with margin because 47 minutes represents less than 0.5% downtime

Question 17

A regional insurance company competes with an InsurTech startup that uses cloud-native AI to personalize policies, process claims in minutes, and launch new products weekly. The traditional insurer takes 6 months to launch new products and 2 weeks to process claims. Which cloud-enabled business model advantage does the startup have?

Accepted Answer

Innovation velocity and operational efficiency through cloud-native AI, enabling faster product iteration and dramatically faster customer service delivery.. The startup leverages cloud-native AI to achieve innovation velocity (weekly product launches vs. 6 months) and operational efficiency (minutes vs. 2 weeks for claims). This is a direct cloud-enabled business model advantage: elastic infrastructure and AI services allow rapid iteration and automated workflows, which traditional on-premises systems cannot match.

Answer

Lower insurance premiums because cloud infrastructure costs less than data centers.

Answer

Better regulatory compliance because cloud providers have more compliance certifications.

Answer

Access to more insurance actuarial data than the traditional insurer.

Question 18

A government digital transformation initiative aims to make citizen services available online 24/7. A project manager notes that the technical implementation is proceeding well but citizen adoption remains low. Which dimension of digital transformation has the initiative overlooked?

Accepted Answer

The initiative overlooked user-centered design, accessibility, digital literacy support, and citizen trust-building — critical dimensions of public sector digital transformation beyond technical delivery. Digital transformation in the public sector requires more than just technical deployment; it demands user-centered design, accessibility compliance (e.g., WCAG 2.1), digital literacy programs, and trust-building mechanisms. Without these, even a fully functional cloud-based platform will fail to achieve adoption, as citizens may lack the skills, confidence, or ability to use the service.

Answer

The government should have used a different cloud provider with better uptime guarantees

Answer

The government needs to force citizens to use online services by removing all in-person service options

Answer

The initiative should have started with machine learning features before launching basic services

Question 19

An energy company is deploying smart meters across millions of homes that transmit energy consumption data every 15 minutes. Which description best characterizes the digital transformation opportunity this data creates?

Accepted Answer

The granular real-time consumption data enables cloud-scale analytics for demand response, predictive grid management, personalized energy recommendations, and anomaly detection — transforming the utility into an intelligent energy services company. The 15-minute granular consumption data from millions of smart meters creates a high-velocity, high-volume data stream that is ideal for cloud-scale analytics. This enables real-time demand response (e.g., load balancing), predictive grid maintenance (e.g., transformer overload forecasting), personalized energy-saving recommendations, and anomaly detection (e.g., meter tampering or outages). The digital transformation opportunity lies in moving from a reactive utility to a proactive, data-driven energy services company, which is only feasible with the elastic compute and storage of cloud platforms.

Answer

The company can replace manual meter reading visits, reducing operational costs

Answer

The company can move its billing system to the cloud, improving invoice generation speed

Answer

The data can be stored in a cloud database, reducing the cost of on-premises storage

Question 20

A financial services firm's board asks the CTO to quantify the business value of the company's three-year cloud transformation program. The CTO presents metrics including: 40% faster product launches, 60% reduction in unplanned downtime, and 25% reduction in infrastructure cost. Which framework best describes what these metrics collectively represent?

Accepted Answer

A balanced view of transformation value spanning speed-to-market, operational resilience, and cost efficiency — collectively representing total business value delivered. The three metrics collectively provide a balanced view of business value from a cloud transformation: speed-to-market (40% faster product launches), operational resilience (60% reduction in unplanned downtime), and cost efficiency (25% reduction in infrastructure cost). This aligns with the GCDL framework's emphasis on measuring total business value beyond just financial ROI, capturing how cloud enables agility, reliability, and cost optimization simultaneously.

Answer

Return on investment calculated purely from infrastructure cost reduction

Answer

A technical benchmark comparing on-premises versus cloud infrastructure performance

Answer

Compliance metrics demonstrating that the transformation met regulatory requirements