Cloud Digital Leader Practice Test 9 — 10 Questions

Question 1

A software team wants to host their container images securely within Google Cloud and integrate with Cloud Build for CI/CD pipelines and GKE for deployments. Which Google Cloud product serves as the managed repository for storing and managing container images?

Accepted Answer

Artifact Registry, Google Cloud's managed repository for container images and build artifacts with native CI/CD integration. Artifact Registry is Google Cloud's fully managed, next-generation repository for storing, managing, and securing container images and build artifacts. It natively integrates with Cloud Build for CI/CD pipelines and GKE for deployments, providing features like vulnerability scanning, access control via IAM, and support for multiple formats (Docker, Maven, npm, etc.). This makes it the correct choice for the team's requirements.

Answer

Cloud Storage, by storing container images as objects in a bucket

Answer

Container Registry (gcr.io), the legacy Google container image service

Answer

Cloud Source Repositories, for storing source code and container build files

Question 2

An organization wants to ensure that Google Cloud services used by its employees cannot be used to exfiltrate data to a competitor's Google Cloud project. For example, they want to prevent copying data from their Cloud Storage bucket to a Storage bucket owned by a competitor. Which Google Cloud security control most directly prevents this type of insider data exfiltration?

Accepted Answer

VPC Service Controls, which create a security perimeter around Google Cloud APIs so data cannot be moved to projects outside the defined perimeter. VPC Service Controls (C) directly prevent data exfiltration by creating a security perimeter around Google Cloud APIs. This perimeter blocks any data movement to resources outside the defined perimeter, such as a competitor's Cloud Storage bucket, regardless of the user's IAM permissions. It works at the API layer, intercepting requests that attempt to copy data to an unauthorized project.

Answer

IAM permissions that restrict users from accessing competitor projects

Answer

Cloud DLP, by scanning and redacting sensitive data before it can be stored

Answer

Organization Policy constraints that prevent resource creation in competitor accounts

Question 3

An architect explains that her cloud application uses a 'loosely coupled architecture.' She contrasts it with a tightly coupled on-premises system where all components run in a single process. What is the primary operational benefit of loose coupling in a cloud environment?

Accepted Answer

Loose coupling allows individual components to fail, scale, or be updated independently without cascading failures to the entire system. In a loosely coupled architecture, components communicate via well-defined interfaces (e.g., REST APIs, message queues) and are deployed as independent services. This means a failure in one component does not propagate to others, and each component can be scaled or updated without affecting the rest of the system. This isolation is the primary operational benefit in a cloud environment, enabling high availability and continuous delivery.

Answer

Loosely coupled applications are always faster because messages are passed in memory rather than over the network

Answer

Loosely coupled architectures require less developer expertise and are easier to build than monolithic applications

Answer

Loose coupling reduces cloud costs because fewer network calls are made between services

Question 4

A company's cloud environment has grown rapidly and the team is struggling to understand what cloud resources exist across dozens of projects. Which Google Cloud product provides a unified inventory of all cloud assets across an organization's projects and folders?

Accepted Answer

Cloud Asset Inventory, which provides a searchable, unified inventory of all resources and IAM policies across an organization's projects and folders. Cloud Asset Inventory is the correct answer because it is the Google Cloud service specifically designed to provide a unified, searchable inventory of all cloud assets (resources and IAM policies) across an organization's projects, folders, and organization nodes. It supports real-time and historical snapshots, enabling teams to discover and track resources as the environment scales. This directly addresses the need to understand what resources exist across dozens of projects.

Answer

Cloud Billing console, which lists all resources that have incurred charges

Answer

Google Cloud Console project dashboard, which shows resources within a single project

Answer

Security Command Center, which lists security vulnerabilities in cloud resources

Question 5

A DevOps team wants to implement a release process where a new application version is first deployed to 5% of production traffic, monitored for errors, then gradually increased to 100% if metrics remain healthy. Which deployment strategy does this describe?

Accepted Answer

Canary deployment, where a new version receives a small percentage of traffic first and is progressively rolled out as metrics confirm it is healthy. This describes a canary deployment, where the new version is initially exposed to a small subset of users (e.g., 5% of traffic) and then gradually rolled out to 100% only if key metrics (latency, error rate, CPU usage) remain within acceptable thresholds. Google Cloud's Deployment Manager and GKE support canary deployments via traffic splitting with services like Istio or native GKE ingress, allowing fine-grained control over the rollout percentage.

Answer

Blue/green deployment, where two identical environments run simultaneously and traffic is switched atomically

Answer

Rolling deployment, where instances are updated sequentially one at a time until all run the new version

Answer

Recreate deployment, where the old version is terminated before the new version is deployed

Question 6

A media company stores video files, images, and static website assets that must be served globally with low latency. They want an object storage solution that is highly durable, accessible via standard HTTPS, and can be configured to make specific assets publicly accessible. Which Google Cloud storage product is most appropriate?

Accepted Answer

Cloud Storage, Google Cloud's object storage for unstructured data accessible via HTTPS with configurable public access. Cloud Storage is Google Cloud's object storage service designed for unstructured data such as video files, images, and static website assets. It provides global accessibility via standard HTTPS, offers 99.999999999% (11 9's) durability, and supports granular access control through IAM and ACLs, allowing specific assets to be made publicly accessible. This directly matches all the requirements in the question.

Answer

Filestore, Google Cloud's managed NFS file storage service

Answer

Persistent Disk, Google Cloud's block storage for virtual machine instances

Answer

Cloud SQL, Google Cloud's managed relational database service

Question 7

Two competing retail companies adopt cloud at the same time. Company A uses cloud to run its existing applications more cheaply (lift-and-shift). Company B uses cloud to build new personalized customer experiences, real-time inventory optimization, and a mobile-first shopping platform. Five years later, Company B significantly outperforms Company A. What does this outcome illustrate?

Accepted Answer

Cloud adoption creates competitive advantage only when used to transform business models and customer experiences, not just to reduce infrastructure costs. This scenario illustrates the critical distinction between cloud as cost reduction versus cloud as business enablement. Both companies 'adopted cloud,' but Company A treated it as infrastructure cost optimization (digitization) while Company B used it to fundamentally change customer experiences and business operations (digital transformation). The competitive divergence confirms that transformation, not mere migration, is the source of cloud's competitive value.

Answer

Company B must have spent more on cloud than Company A, proving that higher cloud investment always produces better outcomes

Answer

Company A made a mistake by moving to cloud; it should have stayed on-premises to avoid disruption

Answer

Company B succeeded because it used a different cloud provider with superior technology

Question 8

A startup's web application is being targeted by a denial-of-service attack that is flooding its servers with millions of fake requests per second. Which Google Cloud product provides automatic DDoS protection for the application?

Accepted Answer

Cloud Armor, which provides DDoS protection and WAF capabilities to detect and mitigate volumetric attacks against the application. Cloud Armor is the correct answer because it is Google Cloud's managed DDoS protection and Web Application Firewall (WAF) service. It uses Google's global infrastructure to absorb and filter volumetric attacks (e.g., SYN floods, UDP reflection attacks) at the edge, before traffic reaches the application. It integrates with Cloud Load Balancing to inspect and drop malicious requests based on pre-configured or adaptive rules.

Answer

Cloud Storage, by distributing the static content of the application across multiple storage regions

Answer

Cloud IAM, by revoking permissions for the IP addresses generating attack traffic

Answer

Cloud Monitoring, by alerting the team so they can manually scale up servers to absorb the attack

Question 9

A solutions architect is explaining why using managed cloud database services (like Cloud SQL or Cloud Spanner) is preferable to running a database on a self-managed virtual machine in most cases. What is the primary operational advantage of managed database services over self-managed databases on VMs?

Accepted Answer

Managed database services automate operational tasks like backups, patching, HA failover, and scaling — freeing engineering teams to focus on application development rather than database administration. Option B is correct because managed database services like Cloud SQL and Cloud Spanner abstract away the operational overhead of database administration. They automate critical tasks such as automated backups, patch management, high-availability failover, and horizontal scaling, which allows engineering teams to focus on application logic rather than managing database servers, replication, or storage.

Answer

Managed databases are always significantly cheaper than self-managed databases on VMs

Answer

Managed databases guarantee better query performance than self-managed databases for all workload types

Answer

Managed databases provide stronger data encryption than self-managed databases on VMs

Question 10

A cloud team performs a quarterly review of its Compute Engine instances and discovers 15 VMs that have had zero CPU utilization for over 90 days. What is the recommended operational response to these idle resources?

Accepted Answer

Investigate whether each VM is still needed; delete confirmed unused VMs to eliminate wasted spend, potentially saving thousands per month. Option B is correct because the recommended operational response to idle Compute Engine instances is to investigate their necessity and delete them if unused. Idle VMs with zero CPU utilization for over 90 days incur ongoing costs for persistent disks, static IPs, and other attached resources, even if the CPU is idle. Deleting confirmed unused VMs eliminates this wasted spend, potentially saving thousands per month, aligning with Google Cloud's cost optimization best practices.

Answer

Leave the VMs running in case they are needed for future workloads — storage costs are minimal for idle VMs

Answer

Upgrade the idle VMs to larger machine types so they can handle future workloads if needed

Answer

Apply committed use discounts to the idle VMs to reduce their cost while keeping them available