Cloud Digital Leader Practice Exam 51 — 20 Questions

Question 1

A platform engineering team is designing a self-service cloud environment for development teams. They want developers to be able to provision approved cloud resources quickly without waiting for central IT approval for every request, while still ensuring compliance with security and cost policies. Which architectural approach best balances developer agility with governance?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Provide a self-service catalog of pre-approved, policy-compliant infrastructure templates with automated provisioning, budget alerts, and org policy guardrails — enabling developer agility while enforcing compliance automatically. It uses a self-service catalog with pre-approved, policy-compliant templates (e.g., Deployment Manager or Terraform configurations) combined with Organization Policy Service guardrails and automated budget alerts. This approach allows developers to provision resources on demand while enforcing security and cost policies automatically, balancing agility with governance without manual bottlenecks.

Answer

Require all resource provisioning requests to be submitted as tickets to the central IT team for manual review and approval before any resources are created

Answer

Give all developers Owner access to all Google Cloud projects so they can provision any resources without delays

Answer

Allow developers to provision resources freely in a shared sandbox project only, keeping production entirely controlled by central IT

Question 2

A team is developing a machine learning model using TensorFlow. They want to train the model on a large dataset stored in Cloud Storage, using GPUs, and then deploy the trained model for online predictions with autoscaling. Which GCP service should they use for the entire workflow?

Accepted Answer

Vertex AI. Vertex AI is Google Cloud's unified machine learning platform that supports the entire ML workflow: data ingestion from Cloud Storage, training with GPUs, model deployment for online predictions, and autoscaling. It integrates with TensorFlow and provides managed services for each stage. AI Platform (legacy) is deprecated and lacks the full unified experience.

Answer

AI Platform (legacy)

Answer

Cloud Functions

Answer

Compute Engine with pre-installed ML frameworks

Question 3

A company wants to implement a zero-trust access model for its internal applications, eliminating the need for a traditional VPN. Employees should be allowed access based on device posture and user identity, not just network location. Which Google Cloud solution should be used?

Accepted Answer

BeyondCorp Enterprise. BeyondCorp Enterprise is Google Cloud's zero-trust access platform that enforces access decisions based on user identity and device posture rather than network location, eliminating the need for a traditional VPN. It extends Identity-Aware Proxy with endpoint verification, context-aware access, and continuous authorization, making it the correct choice for a full zero-trust model.

Answer

Security Command Center

Answer

Cloud VPN

Answer

Identity-Aware Proxy (IAP)

Question 4

A financial institution is deploying a sensitive workload on Compute Engine and needs to meet PCI DSS compliance. The security team wants to ensure that the virtual machines run on dedicated, single-tenant hardware and that no other customer's VMs share the same host. Which Compute Engine feature should they enable?

Accepted Answer

Sole-tenant nodes. Sole-tenant nodes provide dedicated, single-tenant hardware for Compute Engine VMs, ensuring that no other customer's VMs share the same host. This meets the PCI DSS requirement for dedicated hardware.

Answer

Confidential VMs

Answer

Preemptible VMs

Answer

Shielded VMs

Question 5

A startup wants to reduce capital expenditure on hardware and scale its application globally with minimal latency. Which cloud deployment model should they choose?

Accepted Answer

Public cloud. The public cloud model eliminates upfront capital expenditure because the provider owns and maintains the hardware, and the customer pays only for consumed resources (OpEx). Global providers like AWS, Azure, and GCP operate regions and edge locations worldwide, allowing applications to be deployed close to users with minimal latency. This directly matches the startup's dual requirement of reduced CapEx and global low-latency scaling.

Answer

Multi-cloud

Answer

Hybrid cloud

Answer

Private cloud

Question 6

A company is migrating a legacy monolithic application to Google Cloud. The application has variable traffic and requires a relational database. They want to minimize operational overhead. Which TWO Google Cloud services should they choose? (Choose TWO.)

Accepted Answer

Cloud Run. Cloud Run (A) is correct because it is a fully managed serverless compute platform that automatically scales containerized workloads up and down based on traffic, which directly addresses the variable traffic requirement while minimizing operational overhead since Google manages the underlying infrastructure. Cloud SQL (B) is correct because it is a fully managed relational database service supporting MySQL, PostgreSQL, and SQL Server, satisfying the relational database requirement without the operational burden of self-managing database instances. Together, Cloud Run and Cloud SQL form a low-overhead, autoscaling stack suited to a migrated monolithic application with fluctuating demand. Compute Engine (C) is not ideal because it provides raw VMs that the customer must patch, scale, and manage, increasing operational overhead. Google Kubernetes Engine (D) is not chosen because managing clusters adds operational complexity compared to serverless Cloud Run. BigQuery (E) is a serverless analytics data warehouse, not a relational OLTP database, so it does not fit the transactional relational requirement.

Answer

Compute Engine

Answer

Google Kubernetes Engine

Answer

BigQuery

Question 7

A retail company experiences heavy traffic during holiday sales and low traffic at other times. Which cloud computing characteristic is most beneficial for handling this variable workload?

Accepted Answer

Elasticity. Elasticity (option C) is correct because it lets the cloud automatically scale resources up during holiday traffic spikes and scale back down during low-traffic periods, matching capacity to real-time demand. This dynamic provisioning is exactly what a variable, seasonal workload requires to maintain performance without over-provisioning. Broad network access (A) only describes accessing services over the network and does not address capacity changes. High availability (B) concerns uptime and fault tolerance, not scaling to variable load. Pay-as-you-go pricing (D) is a billing model that complements elasticity but does not itself handle the workload variation.

Answer

Broad network access

Answer

High availability

Answer

Pay-as-you-go pricing

Question 8

A DevOps team wants to automatically build a Docker image from a GitHub repository and store it in a private registry whenever a new tag is pushed. Which Google Cloud services should they combine?

Accepted Answer

Cloud Build and Artifact Registry. Cloud Build is Google Cloud's fully managed CI/CD service that can be triggered by GitHub tag pushes via Cloud Build triggers. Artifact Registry is the modern, recommended private registry for storing Docker images (and other artifacts), replacing the older Container Registry. Together, they provide an automated build-and-store pipeline: Cloud Build builds the image from the GitHub repo, and Artifact Registry stores it privately.

Answer

Cloud Build and Container Registry

Answer

Cloud Source Repositories and Container Registry

Answer

Cloud Functions and Artifact Registry

Question 9

Which TWO statements about committed use discounts (CUDs) are true? (Choose two.)

Accepted Answer

CUDs can be purchased for specific resources such as vCPUs and memory.. Option B is correct because Google Cloud committed use discounts are purchased against specific resource types, such as vCPUs and memory, for example in Compute Engine, where you commit to a certain amount of vCPU and RAM usage in a region. Option E is correct because CUDs are commitment-based discounts that require either a 1-year or 3-year term, in exchange for lower prices on eligible usage. Option A is incorrect because sustained use discounts, not CUDs, are the automatic discounts for sustained usage without any upfront commitment. Option C is incorrect because CUDs do not apply to any Google Cloud service automatically; they are limited to specific eligible services and resources, such as Compute Engine and some other services with their own commitment models. Option D is incorrect because CUDs are not applied automatically without user action; the user must purchase or sign up for the commitment, unlike sustained use discounts.

Answer

CUDs provide a discount for sustained usage without any upfront commitment.

Answer

CUDs can be applied to any Google Cloud service automatically.

Answer

CUDs are applied automatically without any action from the user.

Question 10

Which of the following is a key characteristic of cloud computing as defined by NIST that allows users to automatically provision computing resources without requiring human interaction with each service provider?

Accepted Answer

On-demand self-service. On-demand self-service is the NIST characteristic that allows consumers to unilaterally provision computing capabilities (e.g., server time, storage) automatically without requiring human interaction with each service provider. This is exactly what the question describes — automatic provisioning without provider interaction. It is one of the five essential characteristics of cloud computing defined in NIST SP 800-145.

Answer

Measured service

Answer

Resource pooling

Answer

Broad network access

Question 11

A company is evaluating total cost of ownership (TCO) for moving its on-premises data center to Google Cloud. Which of the following costs should they include in the cloud TCO assessment?

Accepted Answer

Compute and storage usage fees. Cloud TCO assessments focus on the operational expenses the customer pays to the cloud provider — compute, storage, networking, and managed service fees — because these replace the capital and operational costs of on-premises infrastructure. Compute and storage usage fees are the recurring cloud charges that directly substitute for owned hardware and self-managed facilities. Including them is essential to compare the true ongoing cost of the cloud model against the data center baseline.

Answer

Data center facility rent and power

Answer

Hardware purchase and maintenance costs

Answer

Employee salaries for data center staff

Question 12

A company wants to migrate its on-premises PostgreSQL database to Google Cloud with minimal application changes. They need high availability and want to leverage AI-powered optimizations for performance. Which service should they choose?

Accepted Answer

AlloyDB. AlloyDB for PostgreSQL is a fully managed, PostgreSQL-compatible database service on Google Cloud that offers high availability and uses AI-powered optimizations for performance, such as adaptive caching and automated tuning. It is designed for minimal application changes because it is wire-compatible with PostgreSQL. This makes it the best fit for migrating an on-premises PostgreSQL database with high availability and AI-driven performance.

Answer

Bigtable

Answer

Cloud SQL for PostgreSQL

Answer

Cloud Spanner

Question 13

An organization wants to group related projects under a common parent for policy enforcement and cost tracking. Which GCP resource hierarchy level should be used to group several projects that belong to the same business unit?

Accepted Answer

Folder. Folders are the GCP resource hierarchy level designed to group projects under a common parent, enabling policy inheritance (IAM, Org Policy) and cost aggregation for a business unit. A folder can contain projects and other folders, forming a tree under the organization node. This makes folders the correct choice for grouping several projects belonging to the same business unit.

Answer

Organization node

Answer

Project

Answer

Resource

Question 14

A company wants to set up a hybrid cloud connection between its on-premises data center and Google Cloud VPC with a dedicated, high-bandwidth, low-latency link. Which service should they use?

Accepted Answer

Cloud Interconnect. Cloud Interconnect provides a dedicated, private physical connection between an on-premises network and a Google Cloud VPC, offering high bandwidth (10 Gbps or 100 Gbps per link) and low latency compared to public internet paths. It supports Dedicated Interconnect (direct connection at a Google colocation facility) and Partner Interconnect (via a service provider), both designed for enterprise-grade hybrid cloud connectivity. This meets the requirement for a dedicated, high-bandwidth, low-latency link.

Answer

Cloud VPN

Answer

Cloud CDN

Answer

Cloud NAT

Question 15

A company uses Google Cloud and has a compliance requirement to store certain data only within the European Union and ensure it cannot be accessed from outside the EU, even by Google operations personnel. Which Google Cloud offering specifically addresses this level of data sovereignty?

Accepted Answer

Sovereign Controls offerings (e.g., T-Systems Sovereign Cloud) or Assured Workloads with data residency and personnel access controls.. Sovereign Controls offerings (such as T-Systems Sovereign Cloud) and Assured Workloads with data residency and personnel access controls are specifically designed to meet strict data sovereignty requirements. These solutions ensure that data remains within the EU and that Google operations personnel cannot access it, addressing both geographic storage and access restrictions mandated by compliance frameworks like GDPR.

Answer

Selecting EU regions for all resources in the Cloud Console.

Answer

VPC Service Controls — they prevent data from leaving the VPC boundary.

Answer

Cloud Armor — it blocks requests originating from outside the EU.

Question 16

An engineer needs to distribute incoming HTTP traffic across multiple backend VM instances in different regions, with automatic failover and SSL termination. Which load balancing product should they use?

Accepted Answer

Cloud Load Balancing. Cloud Load Balancing is Google Cloud's fully managed, software-defined load balancing service that supports global anycast IPs, cross-region backend distribution, automatic failover via health checks, and SSL/TLS termination at the load balancer. It handles HTTP(S) traffic across VM instances in multiple regions with a single global IP, which matches every requirement in the scenario.

Answer

Cloud CDN

Answer

Cloud NAT

Answer

Cloud Armor

Question 17

A financial services company must run a legacy Windows application that requires a specific version of IIS and custom Windows patches. The company wants to minimize operational overhead but needs full control over the OS. Which Google Cloud service is most appropriate?

Accepted Answer

Compute Engine. Compute Engine provides full control over the operating system, including the ability to install custom Windows patches and specific IIS versions, while remaining a managed IaaS offering that minimizes operational overhead compared to on-premises. It is the only option that gives the customer OS-level access required for a legacy Windows application with custom patch dependencies.

Answer

Google Kubernetes Engine

Answer

App Engine Flexible Environment

Answer

Cloud Run

Question 18

A multinational corporation needs to deploy a global web application that serves users from multiple continents. They want to minimize latency for end users by serving content from the nearest location. Which combination of Google Cloud services should they use?

Accepted Answer

Cloud Load Balancing (global) with Cloud CDN. Cloud Load Balancing (global) with Cloud CDN (Option C) is the correct combination because a global external HTTP(S) load balancer provides a single anycast IP address that routes users to the nearest Google edge location, and Cloud CDN caches content at those edge locations to reduce latency. This architecture ensures that users on different continents are served from the closest point of presence, minimizing round-trip time and improving performance.

Answer

Compute Engine with regional load balancers

Answer

Cloud Run with Cloud NAT

Answer

Cloud DNS with Traffic Director

Question 19

Which Google Cloud service is used for monitoring and alerting on the performance and health of cloud resources?

Accepted Answer

Cloud Monitoring. Cloud Monitoring is Google Cloud's service for collecting metrics, creating dashboards, and configuring alerts on the performance and health of cloud resources. It integrates with services like Compute Engine, GKE, and Cloud Run to provide visibility and proactive notifications. This directly matches the requirement for monitoring and alerting.

Answer

Cloud Logging

Answer

Cloud Profiler

Answer

Cloud Trace

Question 20

Which Google Cloud service provides a managed Redis or Memcached in-memory data store for caching and low-latency data access?

Accepted Answer

Memorystore. Memorystore is Google Cloud's fully managed in-memory data store service that supports Redis and Memcached. It provides low-latency caching and data access, making it ideal for applications requiring high-speed data retrieval.

Answer

Firestore

Answer

Bigtable

Answer

Cloud SQL