Cloud Digital Leader Practice Test 8 — 10 Questions

Question 1

A financial services firm's board asks the CTO to quantify the business value of the company's three-year cloud transformation program. The CTO presents metrics including: 40% faster product launches, 60% reduction in unplanned downtime, and 25% reduction in infrastructure cost. Which framework best describes what these metrics collectively represent?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

A balanced view of transformation value spanning speed-to-market, operational resilience, and cost efficiency — collectively representing total business value delivered. The three metrics collectively provide a balanced view of business value from a cloud transformation: speed-to-market (40% faster product launches), operational resilience (60% reduction in unplanned downtime), and cost efficiency (25% reduction in infrastructure cost). This aligns with the GCDL framework's emphasis on measuring total business value beyond just financial ROI, capturing how cloud enables agility, reliability, and cost optimization simultaneously.

Answer

Return on investment calculated purely from infrastructure cost reduction

Answer

A technical benchmark comparing on-premises versus cloud infrastructure performance

Answer

Compliance metrics demonstrating that the transformation met regulatory requirements

Question 2

A company uses Google Workspace for identity. They want employees to use their Google Workspace credentials to access third-party applications (Salesforce, Slack, etc.) without separate passwords for each app. Which technology enables this?

Accepted Answer

Single Sign-On (SSO) using SAML 2.0 or OIDC with Google Workspace as the Identity Provider.. Single Sign-On (SSO) using SAML 2.0 or OIDC allows Google Workspace to act as the Identity Provider (IdP), issuing authentication tokens that third-party applications (like Salesforce and Slack) trust. This eliminates the need for separate passwords, as users authenticate once with Google Workspace and the IdP handles subsequent access via security assertions or ID tokens.

Answer

VPN — employees connect to the corporate VPN which provides access to all apps.

Answer

Cloud Armor — blocks unauthorized access attempts to applications.

Answer

Shared service account — all employees use the same credential.

Question 3

An e-commerce company plans its infrastructure for peak shopping events (e.g., Black Friday) which drive 50× normal traffic. On-premises, they must maintain 50× capacity year-round. In the cloud, they provision 50× capacity only during peak periods. Which cloud characteristic enables this cost optimization?

Accepted Answer

Elasticity — the ability to rapidly scale resources up during peak demand and release them when no longer needed.. Elasticity is the cloud characteristic that allows resources to be automatically provisioned to handle 50× peak traffic and then de-provisioned when demand subsides, eliminating the need to maintain idle capacity year-round. This contrasts with on-premises infrastructure, where capacity must be statically over-provisioned to handle peak loads, leading to significant cost inefficiency. The ability to scale out and scale in dynamically based on real-time demand is the core enabler of the described cost optimization.

Answer

Measured service — metering and reporting resource consumption.

Answer

Broad network access — accessing resources from any internet-connected device.

Answer

Resource pooling — the provider's resources are shared among many customers.

Question 4

A company wants its internal applications to be accessible via a custom domain name (e.g., `app.company.com`) that routes to their Google Cloud load balancer. Which Google Cloud service manages DNS records for this?

Accepted Answer

Cloud DNS. Cloud DNS is the correct service because it is Google Cloud's managed DNS service that translates human-readable domain names (like app.company.com) into IP addresses. It allows you to create and manage DNS records (such as A, CNAME, or ALIAS records) that point your custom domain to the IP address or hostname of your Google Cloud load balancer, enabling traffic routing to your internal applications.

Answer

Cloud CDN — it manages domain names for cached content.

Answer

Cloud Load Balancing — it automatically assigns domain names.

Answer

Cloud Armor — it routes traffic based on domain names.

Question 5

A company is evaluating Google Cloud and wants to know: what is Access Transparency, and how does it benefit customers with stringent governance requirements?

Accepted Answer

Access Transparency logs when Google Cloud personnel access customer content, providing an audit trail for governance.. Access Transparency logs are a Google Cloud feature that provides customers with near real-time logs whenever Google personnel access their data. This creates a detailed audit trail, which is essential for customers with stringent governance or compliance requirements, as it allows them to monitor and verify that access is only for authorized purposes.

Answer

Access Transparency shows customers which Google Cloud services are available in their region.

Answer

Access Transparency is a feature that makes all customer data visible to Google for quality improvement.

Answer

Access Transparency provides customers with real-time dashboards of their application's security vulnerabilities.

Question 6

A company has deployed a critical application on Google Cloud and wants to understand what happens to their workloads during a Google Cloud data center maintenance event (e.g., host system upgrades). What Google Compute Engine feature handles this automatically for most VMs?

Accepted Answer

Live migration transparently moves VMs to healthy hosts during maintenance with no VM downtime.. Google Compute Engine uses Live Migration to automatically move running VMs from a host undergoing maintenance (e.g., host system upgrades) to a healthy host without interrupting the VM. This process preserves the VM's memory, network connections, and disk state, resulting in zero VM downtime. It is enabled by default for most VM instances, except those with GPUs or certain machine types that explicitly opt out.

Answer

VMs are terminated and restarted automatically on new hardware, causing a few minutes of downtime.

Answer

VMs are snapshotted, the snapshot is restored on new hardware, and the VM is restarted.

Answer

Customers must subscribe to Google Cloud support to receive advance notice and schedule their own maintenance windows.

Question 7

A development team uses Cloud Build to automatically build, test, and create container images whenever code is pushed to their repository. The resulting Docker images need to be stored securely and made available to their GKE deployment pipelines. Which Google Cloud service stores and manages these container images?

Accepted Answer

Artifact Registry. Artifact Registry is the correct service because it is a fully managed, private container registry designed to store, manage, and secure Docker images and other artifacts. It integrates natively with Cloud Build for pushing images and with GKE for pulling them, supporting vulnerability scanning and IAM-based access control.

Answer

Cloud Storage bucket with a `containers/` folder.

Answer

Cloud SQL — storing build artifacts in a relational database.

Answer

Cloud Source Repositories — the code repository stores both source code and container images.

Question 8

What is the difference between RTO (Recovery Time Objective) and RPO (Recovery Point Objective) in disaster recovery planning?

Accepted Answer

RTO is the maximum acceptable downtime duration; RPO is the maximum acceptable data loss measured in time.. RTO (Recovery Time Objective) defines the maximum acceptable duration of downtime after a disaster, while RPO (Recovery Point Objective) defines the maximum acceptable amount of data loss measured in time (e.g., the age of the last backup). These are key metrics in disaster recovery planning that directly influence the choice of backup frequency, replication strategy, and failover architecture in cloud environments like GCDL.

Answer

RTO is the time to back up data; RPO is the time to restore it.

Answer

RTO and RPO are both measured in bytes — the maximum data that can be lost during recovery.

Answer

RTO is the number of replicas required; RPO is the geographic distance between backup sites.

Question 9

A data analytics team needs to analyze petabytes of structured data using SQL queries without managing any database infrastructure. Query results must return within seconds for most queries. Which Google Cloud service is designed for this use case?

Accepted Answer

BigQuery. BigQuery is a serverless, highly scalable data warehouse designed for analyzing petabytes of data using SQL without any infrastructure management. Its columnar storage and distributed query engine enable sub-second query performance on large datasets, making it ideal for this use case.

Answer

Cloud SQL

Answer

Cloud Bigtable

Answer

Cloud Spanner

Question 10

A security team needs to protect a web application behind an HTTP(S) Load Balancer from SQL injection and cross-site scripting (XSS) attacks. Which Google Cloud service provides these protections?

Accepted Answer

Cloud Armor. Cloud Armor is Google Cloud's edge security service that attaches to HTTP(S) Load Balancers and provides WAF capabilities, including preconfigured rules for SQL injection and XSS (the OWASP ModSecurity core rule set). It inspects requests at the load balancer before they reach the backend, blocking malicious payloads.

Answer

Cloud CDN

Answer

VPC firewall rules

Answer

Cloud DNS