Cloud Digital Leader Practice Test 8 — 10 Questions

Question 1

A company uses Google Workspace for identity. They want employees to use their Google Workspace credentials to access third-party applications (Salesforce, Slack, etc.) without separate passwords for each app. Which technology enables this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Single Sign-On (SSO) using SAML 2.0 or OIDC with Google Workspace as the Identity Provider.. Single Sign-On (SSO) using SAML 2.0 or OIDC allows Google Workspace to act as the Identity Provider (IdP), issuing authentication tokens that third-party applications (like Salesforce and Slack) trust. This eliminates the need for separate passwords, as users authenticate once with Google Workspace and the IdP handles subsequent access via security assertions or ID tokens.

Answer

VPN — employees connect to the corporate VPN which provides access to all apps.

Answer

Cloud Armor — blocks unauthorized access attempts to applications.

Answer

Shared service account — all employees use the same credential.

Question 2

A startup is building a mobile app backend that requires a scalable NoSQL database with real-time synchronisation across devices. The database should support offline access and automatic conflict resolution. Which Google Cloud database service meets these requirements?

Accepted Answer

Firestore. Firestore is a NoSQL document database that offers real-time listeners, offline data persistence, and automatic multi-device synchronisation. It is designed for mobile and web apps. Bigtable is for high-throughput time-series, Cloud SQL is relational, and Cloud Spanner is for globally distributed relational workloads without built-in offline syncing.

Answer

Cloud Spanner

Answer

Cloud SQL

Answer

Cloud Bigtable

Question 3

An e-commerce company plans its infrastructure for peak shopping events (e.g., Black Friday) which drive 50× normal traffic. On-premises, they must maintain 50× capacity year-round. In the cloud, they provision 50× capacity only during peak periods. Which cloud characteristic enables this cost optimization?

Accepted Answer

Elasticity — the ability to rapidly scale resources up during peak demand and release them when no longer needed.. Elasticity is the cloud characteristic that allows resources to be automatically provisioned to handle 50× peak traffic and then de-provisioned when demand subsides, eliminating the need to maintain idle capacity year-round. This contrasts with on-premises infrastructure, where capacity must be statically over-provisioned to handle peak loads, leading to significant cost inefficiency. The ability to scale out and scale in dynamically based on real-time demand is the core enabler of the described cost optimization.

Answer

Measured service — metering and reporting resource consumption.

Answer

Broad network access — accessing resources from any internet-connected device.

Answer

Resource pooling — the provider's resources are shared among many customers.

Question 4

A security team wants to detect and respond to threats across multiple GCP projects, including identifying misconfigurations and vulnerabilities. They need a single pane of glass. Which service provides a unified view of security findings across projects?

Accepted Answer

Security Command Center. Security Command Center provides a unified dashboard for security findings across projects, including vulnerability scanning, threat detection, and misconfiguration alerts. Chronicle is a SIEM for log analysis but not a unified view of findings. Cloud Audit Logs provide logs but not aggregation. Cloud Operations is for monitoring and logging, not security-specific findings.

Answer

Cloud Operations

Answer

Cloud Audit Logs

Answer

Chronicle

Question 5

A company wants its internal applications to be accessible via a custom domain name (e.g., `app.company.com`) that routes to their Google Cloud load balancer. Which Google Cloud service manages DNS records for this?

Accepted Answer

Cloud DNS. Cloud DNS is the correct service because it is Google Cloud's managed DNS service that translates human-readable domain names (like app.company.com) into IP addresses. It allows you to create and manage DNS records (such as A, CNAME, or ALIAS records) that point your custom domain to the IP address or hostname of your Google Cloud load balancer, enabling traffic routing to your internal applications.

Answer

Cloud CDN — it manages domain names for cached content.

Answer

Cloud Load Balancing — it automatically assigns domain names.

Answer

Cloud Armor — it routes traffic based on domain names.

Question 6

A company is evaluating Google Cloud and wants to know: what is Access Transparency, and how does it benefit customers with stringent governance requirements?

Accepted Answer

Access Transparency logs when Google Cloud personnel access customer content, providing an audit trail for governance.. Access Transparency logs are a Google Cloud feature that provides customers with near real-time logs whenever Google personnel access their data. This creates a detailed audit trail, which is essential for customers with stringent governance or compliance requirements, as it allows them to monitor and verify that access is only for authorized purposes.

Answer

Access Transparency shows customers which Google Cloud services are available in their region.

Answer

Access Transparency is a feature that makes all customer data visible to Google for quality improvement.

Answer

Access Transparency provides customers with real-time dashboards of their application's security vulnerabilities.

Question 7

A company has deployed a critical application on Google Cloud and wants to understand what happens to their workloads during a Google Cloud data center maintenance event (e.g., host system upgrades). What Google Compute Engine feature handles this automatically for most VMs?

Accepted Answer

Live migration transparently moves VMs to healthy hosts during maintenance with no VM downtime.. Google Compute Engine uses Live Migration to automatically move running VMs from a host undergoing maintenance (e.g., host system upgrades) to a healthy host without interrupting the VM. This process preserves the VM's memory, network connections, and disk state, resulting in zero VM downtime. It is enabled by default for most VM instances, except those with GPUs or certain machine types that explicitly opt out.

Answer

VMs are terminated and restarted automatically on new hardware, causing a few minutes of downtime.

Answer

VMs are snapshotted, the snapshot is restored on new hardware, and the VM is restarted.

Answer

Customers must subscribe to Google Cloud support to receive advance notice and schedule their own maintenance windows.

Question 8

A development team uses Cloud Build to automatically build, test, and create container images whenever code is pushed to their repository. The resulting Docker images need to be stored securely and made available to their GKE deployment pipelines. Which Google Cloud service stores and manages these container images?

Accepted Answer

Artifact Registry. Artifact Registry is the correct service because it is a fully managed, private container registry designed to store, manage, and secure Docker images and other artifacts. It integrates natively with Cloud Build for pushing images and with GKE for pulling them, supporting vulnerability scanning and IAM-based access control.

Answer

Cloud Storage bucket with a `containers/` folder.

Answer

Cloud SQL — storing build artifacts in a relational database.

Answer

Cloud Source Repositories — the code repository stores both source code and container images.

Question 9

What is the difference between RTO (Recovery Time Objective) and RPO (Recovery Point Objective) in disaster recovery planning?

Accepted Answer

RTO is the maximum acceptable downtime duration; RPO is the maximum acceptable data loss measured in time.. RTO (Recovery Time Objective) defines the maximum acceptable duration of downtime after a disaster, while RPO (Recovery Point Objective) defines the maximum acceptable amount of data loss measured in time (e.g., the age of the last backup). These are key metrics in disaster recovery planning that directly influence the choice of backup frequency, replication strategy, and failover architecture in cloud environments like GCDL.

Answer

RTO is the time to back up data; RPO is the time to restore it.

Answer

RTO and RPO are both measured in bytes — the maximum data that can be lost during recovery.

Answer

RTO is the number of replicas required; RPO is the geographic distance between backup sites.

Question 10

A data analytics team needs to analyze petabytes of structured data using SQL queries without managing any database infrastructure. Query results must return within seconds for most queries. Which Google Cloud service is designed for this use case?

Accepted Answer

BigQuery. BigQuery is a serverless, highly scalable data warehouse designed for analyzing petabytes of data using SQL without any infrastructure management. Its columnar storage and distributed query engine enable sub-second query performance on large datasets, making it ideal for this use case.

Answer

Cloud SQL

Answer

Cloud Bigtable

Answer

Cloud Spanner