Cloud Digital Leader Practice Exam 53 — 20 Questions

Question 1

An architect proposes using a 'private cloud' deployment model for a company that wants cloud-like capabilities but is prohibited from using public cloud due to data residency regulations. What is a key advantage of private cloud compared to public cloud, and what is a significant trade-off?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Advantage: full control over data residency, security posture, and compliance configuration. Trade-off: organization bears full cost of infrastructure, loses public cloud's scale economics, and has limited elasticity compared to public cloud's vast resource pools. A private cloud gives the organization exclusive control over data residency, security, and compliance, which is essential when regulations prohibit public cloud use. The trade-off is that the organization must bear the full capital and operational costs of the infrastructure, losing the scale economics and near-infinite elasticity of public cloud providers like AWS, Azure, or GCP.

Answer

Advantage: private cloud is always cheaper than public cloud. Trade-off: private cloud provides less storage capacity

Answer

Advantage: private cloud provides automatic scaling to unlimited capacity. Trade-off: private cloud requires purchasing hardware every time capacity is needed

Answer

Advantage: private cloud services are managed by the cloud provider, reducing operational burden. Trade-off: customers cannot customize private cloud configurations

Question 2

A small e-commerce company runs its website on Compute Engine instances behind a Global External HTTP(S) Load Balancer. They are concerned about application-layer DDoS attacks, such as SQL injection and cross-site scripting (XSS), that could compromise customer data and degrade performance. The company wants a managed solution that provides both DDoS protection and web application firewall (WAF) capabilities without requiring constant manual updates. They have a limited budget and prefer a solution that is easy to configure and does not require extensive infrastructure changes. What should they implement?

Accepted Answer

Enable Cloud Armor with preconfigured WAF rules and configure it on the load balancer.. Cloud Armor is a managed, Google Cloud-native service that provides both DDoS protection and a web application firewall (WAF) with preconfigured rules for SQL injection and XSS. It integrates directly with the Global External HTTP(S) Load Balancer, requires no manual updates (rules are maintained by Google), and is cost-effective because it charges based on policy usage rather than infrastructure overhead. This meets the company's need for easy configuration, minimal infrastructure changes, and managed security.

Answer

Configure VPC firewall rules to block suspicious IP addresses.

Answer

Set up Cloud NAT to route all traffic through a single IP address.

Answer

Use Cloud VPN to connect users to the load balancer.

Question 3

A media company needs to deliver video content to users worldwide with low latency. They want to cache content at edge locations. Which Google Cloud service should they use?

Accepted Answer

Cloud CDN. Cloud CDN uses Google's global edge network to cache content close to users, reducing latency for media delivery.

Answer

Cloud Storage

Answer

Cloud Load Balancing

Answer

Cloud Interconnect

Question 4

A startup wants to launch a new mobile app globally. They expect user traffic to be unpredictable and want to only pay for the compute resources they use. Which cloud benefit BEST addresses this need?

Accepted Answer

Pay-as-you-go pricing. The pay-as-you-go model allows startups to avoid large upfront capital expenditure and only pay for actual usage, which is ideal for unpredictable workloads.

Answer

Global Reach

Answer

Agility

Answer

Scalability

Question 5

A company is designing a disaster recovery strategy for a critical application. They need to ensure that if an entire Google Cloud region becomes unavailable, the application can still serve traffic from another region with minimal data loss. Which TWO strategies should they implement? (Choose 2.)

Accepted Answer

Deploy the application in multiple regions. Multi-region deployment across at least two regions provides region-level failure protection. To minimize data loss, synchronous replication (e.g., using Cloud Spanner or multi-region Cloud Storage) ensures data consistency across regions.

Answer

Deploy the application in multiple zones within a single region

Answer

Use asynchronous replication for the database

Answer

Use a single load balancer

Question 6

An organization wants to reduce latency for users in Europe. They plan to deploy their application in a Google Cloud region located in Europe. Which region should they choose?

Accepted Answer

europe-west1. europe-west1 is located in Belgium, Europe, providing low latency for European users.

Answer

us-central1

Answer

asia-east1

Answer

australia-southeast1

Question 7

An organization needs to allow a third-party auditor to review their Google Cloud resource configurations for compliance (read-only access). The auditor should not be able to modify resources or view data. Which THREE IAM roles or techniques should they use?

Accepted Answer

Grant the Viewer role at the project level. Viewer gives read-only access to all resources (except data). Organization Policy Administrator is for setting policies, not reading configurations. Security Reviewer specifically allows reading security settings. Access Transparency logs help auditors see Google's access. Cloud Debugger is for debugging code, not compliance.

Answer

Grant the Organization Policy Administrator role

Answer

Grant the Cloud Debugger role

Question 8

A data analytics firm wants to query data across Cloud Storage and BigQuery without moving the data. They need a single SQL interface. Which Google Cloud service enables this?

Accepted Answer

BigQuery external tables (federated queries). BigQuery allows querying external data sources like Cloud Storage via external tables (federated queries) without loading data.

Answer

Dataproc with Spark SQL

Answer

Cloud SQL federated queries

Answer

BigQuery Omni

Question 9

Which Google Cloud service is used for monitoring and alerting on the performance and health of cloud resources?

Accepted Answer

Cloud Monitoring. Cloud Monitoring (formerly Stackdriver Monitoring) provides visibility into the performance, uptime, and health of cloud applications.

Answer

Cloud Logging

Answer

Cloud Profiler

Answer

Cloud Trace

Question 10

A company is considering migrating its on-premises workloads to Google Cloud. Which TWO are common business drivers for cloud adoption? (Choose TWO.)

Accepted Answer

Cost optimization by converting CapEx to OpEx. Agility (faster time to market) and cost optimization (pay-as-you-go) are key drivers. Guaranteed uptime and data sovereignty are not inherent cloud benefits.

Answer

Guaranteed 100% uptime for all services

Answer

Ability to avoid any vendor lock-in

Answer

Elimination of all security risks

Question 11

An organization wants to use machine learning to analyze customer feedback but has no ML expertise. They need a service that can train custom models with minimal coding. Which Google Cloud service should they use?

Accepted Answer

AutoML Natural Language. AutoML Natural Language allows users to train custom NLP models with a simple interface, requiring no ML expertise.

Answer

Cloud Vision API

Answer

Vertex AI

Answer

Cloud Natural Language API

Question 12

A company wants to reduce its carbon footprint and has committed to using 100% renewable energy for its cloud infrastructure. Which Google Cloud value proposition directly supports this goal?

Accepted Answer

Sustainability (renewable energy match). Google Cloud matches 100% of its global energy consumption with renewable energy and aims for carbon-free energy by 2030. Security, open source, and compliance are unrelated to renewable energy.

Answer

Open cloud (Kubernetes/TensorFlow)

Answer

Security (BeyondCorp/encryption)

Answer

Trust and compliance (certifications)

Question 13

Which TWO statements are benefits of using a multi-cloud strategy? (Choose 2)

Accepted Answer

Ability to use best-of-breed services from different providers. Multi-cloud avoids vendor lock-in and can optimize costs by using the best services from each provider. It does not inherently improve latency (can increase complexity), does not reduce security risks, and does not simplify management.

Answer

Reduced overall security risk

Answer

Simplified operational management

Answer

Improved latency for all users

Question 14

A company runs a high-performance computing (HPC) workload on Compute Engine that requires low-latency, high-throughput scratch storage. The workload is checkpointed every hour. Which TWO storage options should the engineer consider for the scratch storage? (Choose 2)

Accepted Answer

Persistent Disk (SSD). For HPC scratch storage, local SSDs provide very high IOPS and low latency but are ephemeral. Persistent Disk balanced or SSD provides durable block storage with good performance, but local SSDs are often preferred for scratch due to lower latency. Cloud Storage is object storage, not block. Filestore is file storage but typically has higher latency than local SSD. The best options are local SSD for performance and Persistent Disk for durability if checkpointed data needs to persist.

Answer

Persistent Disk (HDD)

Answer

Filestore

Answer

Cloud Storage

Question 15

Which TWO statements accurately describe Google Cloud's sustainability commitments? (Choose 2)

Accepted Answer

Google Cloud aims to run on 24/7 carbon-free energy in all its data centers by 2030.. Google has matched 100% of its global electricity use with renewable energy since 2017 and aims for 24/7 carbon-free energy by 2030. Google does not offset all emissions (carbon offsets are separate from matching). Regions are not all carbon-neutral today. Data centers are not powered solely by on-site solar.

Answer

All Google Cloud regions are already carbon-neutral.

Answer

Google Cloud offsets all of its historical carbon emissions.

Answer

Google Cloud data centers are powered exclusively by on-site solar panels.

Question 16

A retail company experiences sudden traffic spikes during flash sales. Their on-premises infrastructure often runs out of capacity, causing website slowdowns. Which cloud characteristic directly solves this problem?

Accepted Answer

Scalability. Scalability allows resources to be automatically added during peak demand and removed when not needed, preventing over-provisioning and under-provisioning.

Answer

Pay-as-you-go pricing

Answer

Global reach

Answer

Security

Question 17

A data engineer needs to process a continuous stream of events from a global user base, perform real-time transformations, and write the results to both Cloud Storage and BigQuery. The solution must handle sudden traffic spikes and be fully managed (no server management). Which combination of services should the engineer use?

Accepted Answer

Pub/Sub, Dataflow, Cloud Storage, BigQuery. Pub/Sub ingests and buffers the stream, Dataflow (a fully managed stream processing service) reads from Pub/Sub, performs transformations, and writes to Cloud Storage and BigQuery with exactly-once semantics. Cloud Functions is for lightweight event-driven code, not heavy stream processing. Cloud Scheduler is for cron jobs. Composer is for workflow orchestration.

Answer

Pub/Sub, Cloud Functions, Cloud Storage

Answer

Pub/Sub, Dataflow, Cloud Functions

Answer

Cloud Scheduler, Cloud Functions, BigQuery

Question 18

An organization needs to store archival data that must be retained for 10 years and is accessed less than once a year. Which Cloud Storage class offers the lowest storage cost?

Accepted Answer

Archive. Archive storage is the lowest-cost storage class for long-term retention, with a 365-day minimum storage duration and higher retrieval costs.

Answer

Standard

Answer

Coldline

Answer

Nearline

Question 19

Which Google Cloud service provides a managed Redis or Memcached in-memory data store for caching and low-latency data access?

Accepted Answer

Memorystore. Memorystore is the fully managed in-memory data store service for Redis and Memcached, used for caching and low-latency access.

Answer

Firestore

Answer

Bigtable

Answer

Cloud SQL

Question 20

A team is designing a CI/CD pipeline for a microservices application. They want to automatically build container images from source code, store them securely, and deploy to GKE. Which THREE services should they include? (Choose three.)

Accepted Answer

Cloud Build. Cloud Build builds container images from source; Artifact Registry stores the images; GKE is the deployment target. Cloud Deploy could also be used for continuous delivery, but the three most essential are Build, Artifact Registry, and GKE.

Answer

Cloud Storage

Answer

Cloud Run