Cloud Digital Leader Practice Exam 52 — 20 Questions

Question 1

Which Google Cloud feature provides reports on how Google processes government requests for customer data and how often Google challenges overly broad requests?

Accepted Answer

Google's Transparency Report — publishing data about government requests and legal compliance.. Google's Transparency Report is the correct answer because it specifically publishes data on government requests for user data, including how Google processes these requests and how often it challenges overly broad or legally questionable demands. This report is designed to provide public visibility into government actions, not to log individual API calls or access events.

Answer

Cloud Audit Logs — they record all API calls including government data requests.

Answer

Security Command Center — it alerts when government agencies access customer data.

Answer

Access Transparency logs — they record every time any external entity accesses customer data.

Question 2

The principle of least privilege is a fundamental security concept applied to IAM in Google Cloud. Which statement best describes this principle?

Accepted Answer

Users and services should be granted only the minimum permissions required for their specific function, nothing more.. The principle of least privilege in Google Cloud IAM dictates that identities (users, groups, or service accounts) should be granted only the permissions necessary to perform their intended tasks. This minimizes the attack surface and limits the blast radius of a compromised credential. In Google Cloud, this is implemented by assigning predefined or custom roles with the exact set of permissions required, rather than using broad roles like Owner or Editor.

Answer

All users should have read-only access to prevent accidental changes.

Answer

Administrators should have full access so they can respond to any emergency quickly.

Answer

All employees should share the same IAM role to simplify permission management.

Question 3

What does 'serverless computing' mean, and what does a developer NOT have to manage when using serverless services?

Accepted Answer

Serverless means developers don't provision or manage servers, OS, or scaling — they only write and deploy code.. Serverless computing is a cloud execution model where the cloud provider dynamically manages the allocation and provisioning of servers. The developer writes and deploys code (functions) without needing to provision, configure, or scale underlying servers, operating systems, or runtime environments. Option B correctly captures this: developers only write and deploy code, while the provider handles infrastructure management.

Answer

Serverless means no code is needed — the cloud provider writes the application logic automatically.

Answer

Serverless computing only works for batch jobs that run overnight.

Answer

Serverless is a type of on-premises architecture where servers are hidden from developers.

Question 4

A data engineering team needs to orchestrate a complex data pipeline that involves multiple steps: extracting data from various sources, transforming it with Dataflow, loading it into BigQuery, and running validation jobs — all in a specific sequence with retry logic and scheduling. Which Google Cloud service manages this workflow orchestration?

Accepted Answer

Cloud Composer (managed Apache Airflow). Cloud Composer is a managed Apache Airflow service that provides workflow orchestration, including dependency management, retry logic, and scheduling for complex pipelines. It allows you to define a DAG (Directed Acyclic Graph) that sequences tasks like Dataflow extraction, BigQuery loading, and validation jobs, with built-in retry and scheduling capabilities.

Answer

Cloud Scheduler — cron-based job scheduling.

Answer

Cloud Dataflow — stream and batch processing.

Answer

Cloud Functions — event-driven function execution.

Question 5

Refer to the exhibit. A company configures a lifecycle policy on a Cloud Storage bucket. The bucket contains objects uploaded over the past year with custom time set on each object. After 60 days, what happens to the objects?

Accepted Answer

Objects with custom time more than 30 days ago are deleted.. The lifecycle policy uses the `customTime` attribute, and the rule is configured to delete objects when `customTime` is older than 30 days. After 60 days from upload, objects with a `customTime` set at upload will have had that timestamp for 60 days, so they are more than 30 days past their `customTime` and are deleted. The policy does not use object age or last access time.

Answer

All objects older than 30 days from now are deleted.

Answer

Objects are deleted after 30 days from the last access.

Answer

The lifecycle policy is invalid because custom time is not supported.

Question 6

An enterprise needs advanced business intelligence capabilities: governed semantic models that business users query with natural language, embedded analytics in their customer-facing application, and centralized data access controls. Which Google Cloud analytics product is purpose-built for these enterprise BI requirements?

Accepted Answer

Looker (enterprise BI platform with LookML semantic layer). Looker is purpose-built for enterprise BI with its LookML semantic modeling layer, which governs data definitions and access controls. It supports natural language querying through Looker's 'Ask Looker' feature and enables embedded analytics via its API and SDK, directly matching the requirements for governed semantic models, natural language queries, and embedded analytics.

Answer

Looker Studio (free BI dashboards)

Answer

BigQuery — it provides natural language querying via BQML.

Answer

Vertex AI — it builds ML models that answer business questions.

Question 7

A company wants to proactively identify underutilized Compute Engine VMs (high provisioned capacity but low actual usage) to reduce costs. Which Google Cloud tool provides recommendations for right-sizing VMs?

Accepted Answer

Active Assist Recommender — ML-based VM rightsizing recommendations.. Google Cloud's Active Assist provides intelligent recommendations including VM rightsizing recommendations. These are powered by ML analysis of actual VM CPU and memory utilization over the past 8 days. The recommendations appear in the Cloud Console (Compute Engine → VM instances → Recommendations) and in the Recommender API. Rightsizing recommendations suggest optimal machine types based on observed usage, often identifying VMs that can be downsized to save significant costs.

Answer

Cloud Monitoring — set alerts for low CPU utilization.

Answer

Cloud Asset Inventory — lists all VMs and their configurations.

Answer

Cloud Billing budgets — set spending limits to prevent overspend.

Question 8

A retail bank's branch staff currently look up customer information in disconnected systems, requiring multiple logins and manual data consolidation before advising customers. A cloud transformation project unifies customer data into a single 360° view platform accessible from any device. What type of transformation does this primarily represent?

Accepted Answer

Business process and customer experience transformation — unifying data to enable better customer service through digital tools.. The project unifies fragmented customer data into a single 360° view platform accessible from any device, directly improving how staff serve customers. This is a business process and customer experience transformation, as it eliminates manual data consolidation and multiple logins, enabling faster, more personalized service through digital tools. The cloud enables this by providing a centralized data store and API-driven access, which is the core of transforming customer interactions rather than just upgrading infrastructure.

Answer

Infrastructure modernization — replacing old servers with cloud VMs.

Answer

Security transformation — reducing the number of password logins required.

Answer

Cost reduction initiative — eliminating duplicate software licenses.

Question 9

A reliability engineering team wants to proactively identify weaknesses in their distributed system by deliberately injecting failures — killing random instances, introducing network latency, and cutting off database connections — to observe how the system responds. What is this practice called?

Accepted Answer

Chaos engineering — deliberately injecting controlled failures to discover system weaknesses and build resilience confidence.. Chaos engineering is the practice of deliberately injecting controlled failures—such as killing instances, introducing latency, or cutting database connections—into a distributed system to proactively identify weaknesses and build resilience confidence. This approach aligns with Google Cloud's reliability principles, where tools like Chaos Monkey (part of the Simian Army) or Google's internal DiRT (Disaster Recovery Testing) are used to test system behavior under failure conditions.

Answer

Destructive testing — deliberately breaking the system to determine the breaking point.

Answer

Penetration testing — simulating attacks to find security vulnerabilities.

Answer

Load testing — verifying the system handles expected traffic volumes.

Question 10

A CEO presents a strategic plan to 'move everything to the cloud.' The board asks what business outcome should be the primary measure of success for the cloud migration. Which answer best reflects a business-outcome-oriented approach to measuring cloud migration success?

Accepted Answer

Measurable business improvements such as reduced time-to-market for new products, lower infrastructure costs, and improved customer satisfaction enabled by cloud capabilities. It ties cloud migration success directly to measurable business outcomes, such as reduced time-to-market, lower infrastructure costs, and improved customer satisfaction. This aligns with the GCDL principle that cloud technology is a business enabler, not just an IT project. A business-outcome-oriented approach ensures that migration efforts are evaluated by their impact on strategic goals, such as agility and cost efficiency, rather than technical milestones.

Answer

The percentage of applications successfully migrated to cloud infrastructure

Answer

The number of cloud certifications earned by the IT team during the migration

Answer

Achieving 100% elimination of on-premises infrastructure by the end of the first year

Question 11

Refer to the exhibit. A user receives this error when trying to copy an object from one bucket to another. What is the most likely cause?

Accepted Answer

The service account used does not have the required IAM permissions to copy objects.. The error when copying an object between buckets is most likely due to insufficient IAM permissions. In Google Cloud, the service account initiating the copy must have both `storage.objects.get` (to read the source object) and `storage.objects.create` (to write to the destination bucket) permissions. Without these, the operation fails with an access denied error, even if the buckets exist and are accessible.

Answer

The buckets are located in different regions and cross-region copy is not allowed.

Answer

The destination bucket has exceeded its storage quota.

Answer

The source bucket name is misspelled in the request.

Question 12

A city government deploys thousands of IoT sensors (traffic, air quality, energy usage, waste levels) and analyzes the data in real time to optimize traffic signals, dispatch waste collection vehicles proactively, and adjust street lighting automatically. What concept describes this use of cloud and IoT?

Accepted Answer

Smart city — using cloud, IoT, and AI to optimize city operations and resource utilization in real time.. A smart city uses digital technology — IoT sensors, cloud analytics, AI, and connectivity — to optimize city operations, improve resident quality of life, and use resources more efficiently. Cloud platforms receive sensor data via IoT Core or Pub/Sub, process it with Dataflow, analyze patterns with BigQuery and AI, and trigger automated responses (traffic signal changes, dispatch notifications). This is one of the most impactful applications of cloud transformation at city scale.

Answer

E-government — providing digital access to government services online.

Answer

Digital twin — creating virtual replicas of city infrastructure.

Answer

Edge computing — processing data locally at each sensor to reduce cloud bandwidth.

Question 13

A logistics company collects GPS data from 50,000 trucks every 30 seconds. Previously they sampled only 1% of this data due to storage costs. In the cloud, they store and analyze 100% of the data and discover route optimization patterns that reduce fuel costs by 12%. Which concept does this illustrate about cloud and data?

Accepted Answer

Cloud scale removes data storage and analysis constraints, enabling companies to derive business insights from complete datasets that were previously too costly to collect and process.. It directly captures the core transformation that cloud computing enables: the removal of data storage and processing constraints. By moving from sampling 1% of GPS data to analyzing 100%, the company could identify route optimization patterns that were invisible in the sampled subset, leading to a 12% fuel cost reduction. This illustrates how cloud elasticity and pay-as-you-go pricing allow businesses to process complete datasets, unlocking insights that were previously economically infeasible with on-premises or limited storage.

Answer

Cloud storage is cheaper per GB than on-premises — the only benefit is cost reduction.

Answer

GPS data is only useful when analyzed by Google's AI — the company's own analytics wouldn't find patterns.

Answer

The company should have used data sampling more aggressively to reduce cloud costs further.

Question 14

A software team deploys microservices using containers and wants Google Cloud to automatically manage the scaling, self-healing, and rollout of their containerized applications. They don't want to provision or manage underlying virtual machines. Which Google Cloud service best meets this need?

Accepted Answer

Google Kubernetes Engine (GKE), which manages containerized applications with automatic scaling, self-healing, and rolling updates. Google Kubernetes Engine (GKE) is the correct choice because it provides a managed Kubernetes environment that automates scaling, self-healing (e.g., automatic pod restarts and node repair), and rollout management (e.g., rolling updates and rollbacks) for containerized applications. This meets the requirement of not provisioning or managing underlying virtual machines, as GKE abstracts the node infrastructure.

Answer

Compute Engine, Google Cloud's virtual machine service

Answer

Cloud Storage, for storing container images and serving them to instances

Answer

Cloud CDN, which distributes containerized applications globally

Question 15

A company's security policy requires all employees to verify their identity using more than just a password when accessing Google Cloud resources. What security feature enforces this requirement?

Accepted Answer

Multi-factor authentication (MFA) / Two-step verification (2SV).. Multi-factor authentication (MFA) / Two-step verification (2SV) is the correct answer because it explicitly requires users to provide two or more verification factors (e.g., something you know, something you have, something you are) to access Google Cloud resources. This directly enforces the policy of verifying identity beyond just a password, as MFA/2SV adds an additional layer of security by requiring a second factor such as a time-based one-time password (TOTP) from an authenticator app, a hardware security key (e.g., FIDO2), or a push notification. Google Cloud Identity Platform supports this via security key enforcement and 2SV policies, ensuring that password compromise alone is insufficient for access.

Answer

Password complexity requirements — enforcing long, complex passwords.

Answer

IP allowlisting — only allowing access from office IP addresses.

Answer

Session timeout — automatically logging out users after 30 minutes of inactivity.

Question 16

A telecommunications company wants to launch new 5G services faster than its competitors. Which cloud characteristic most directly accelerates its ability to bring new services to market quickly?

Accepted Answer

On-demand provisioning that allows infrastructure to be deployed in minutes rather than waiting months for hardware procurement and installation. On-demand provisioning allows the company to spin up virtual servers, networks, and storage in minutes via APIs, eliminating the months-long lead time required for traditional hardware procurement and installation. This directly reduces the time-to-market for new 5G services, as infrastructure can be scaled and configured on the fly to support rapid deployment and testing.

Answer

The ability to store large amounts of customer call records in the cloud at lower cost

Answer

Cloud providers' global data center network ensures low latency for all customer calls

Answer

Managed cloud databases that eliminate the need for database administrators

Question 17

Which Google Cloud service provides a centralized view of an application's performance metrics, logs, and traces — enabling teams to monitor system health, set up alerts, and diagnose issues from a single platform?

Accepted Answer

Cloud Monitoring (part of Google Cloud's operations suite). Cloud Monitoring (part of Google Cloud's operations suite) is the correct answer because it provides a unified platform for collecting and visualizing metrics, logs, and traces from applications and infrastructure. It enables teams to set up alerting policies, create dashboards, and diagnose performance issues using a single interface, integrating with services like Cloud Logging and Cloud Trace for end-to-end observability.

Answer

Cloud Security Command Center

Answer

BigQuery

Answer

Cloud Asset Inventory

Question 18

A non-technical manager asks what a 'virtual machine' is and how it differs from the physical servers the company used to run in its own data center. Which explanation is most accurate and accessible?

Accepted Answer

A virtual machine is a complete software-defined computer that runs on shared physical hardware, providing the same capabilities as a dedicated server but created and managed through software in minutes. A virtual machine (VM) is a software-based emulation of a physical computer that runs on shared physical hardware via a hypervisor. It provides the same capabilities as a dedicated server (CPU, memory, storage, networking) but can be provisioned, cloned, and managed in minutes through software, which is the core difference from traditional on-premises physical servers that require manual setup and are tied to specific hardware.

Answer

A virtual machine is a web-based application that runs in a browser and replaces traditional desktop software

Answer

A virtual machine is a physical server located in the cloud provider's data center that is reserved exclusively for one customer

Answer

A virtual machine is a type of database that stores data virtually rather than on physical disk

Question 19

A company wants to connect its on-premises network to Google Cloud for consistent low-latency access to resources. They also need to use the same network policies across multiple projects. Which two Google Cloud products should they use?

Accepted Answer

Cloud Interconnect. Cloud Interconnect provides dedicated, low-latency, and consistent connectivity between an on-premises network and Google Cloud, bypassing the public internet. Shared VPC allows the company to centrally define and apply network policies (e.g., firewall rules, routes) across multiple projects from a single host project, ensuring uniform policy enforcement.

Answer

Cloud NAT

Answer

Cloud VPN

Answer

VPC Network Peering

Question 20

A company is building a new application that needs to send transactional emails (order confirmations, password resets, account notifications) to customers. Google Cloud does not provide a native SMTP email service. Which approach is standard for sending transactional emails from Google Cloud applications?

Accepted Answer

Integrating a third-party transactional email service (such as SendGrid, Mailgun, or Postmark) via API from the Cloud Run or Cloud Functions application. Google Cloud does not offer a native SMTP service for sending transactional emails. The standard approach is to integrate a third-party transactional email service (e.g., SendGrid, Mailgun, Postmark) via API from serverless compute services like Cloud Run or Cloud Functions. These services handle deliverability, reputation, and compliance with email standards (SPF, DKIM, DMARC) that are critical for transactional email.

Answer

Using Cloud Storage to store email templates and delivering them directly to customers' inboxes

Answer

Running a self-managed SMTP server on a Compute Engine VM and configuring MX records to deliver email

Answer

Using Gmail directly by authenticating the application with a corporate Gmail account and sending through Gmail SMTP