Cloud Digital Leader Why Cloud Technology Can Transform Business Practice Test 5 — 15 Questions

Question 1

A gaming company uses Google Cloud to run a multiplayer game. They use Compute Engine VMs with GPUs for game servers. During peak hours, latency increases. They want to automatically add more game server instances based on the number of concurrent players. Which scaling approach should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a managed instance group with autoscaling based on a custom metric representing concurrent players.. Utilizing a custom metric (number of concurrent players) with managed instance groups and autoscaling is the best approach. Cloud Load Balancing distributes traffic but does not scale based on custom metrics.

Answer

Use Cloud Load Balancing to distribute traffic and add more VM instances manually.

Answer

Use Cloud Functions to spin up new game server VMs when player count exceeds a threshold.

Answer

Pre-provision a fixed number of VMs with GPUs to handle peak load at all times.

Question 2

A company wants to adopt a zero-trust security model for accessing Google Cloud resources. Which Google Cloud technology BEST supports this approach?

Accepted Answer

BeyondCorp Enterprise. BeyondCorp Enterprise is Google Cloud's zero-trust access platform that enforces identity- and context-aware access to applications and resources without requiring a VPN. It embodies the zero-trust principle of 'never trust, always verify' by evaluating user identity, device posture, and context for every request. This is the most comprehensive Google Cloud technology for zero-trust.

Answer

Cloud VPN

Answer

Cloud Identity-Aware Proxy (IAP)

Answer

Firewall Rules

Question 3

An organization wants to ensure its data is encrypted at rest and in transit by default on Google Cloud. Which statement is correct?

Accepted Answer

Data is encrypted at rest and in transit by default.. Google Cloud encrypts data at rest and in transit by default for many services, with customer-managed keys optional.

Answer

Customers must use CMEK to encrypt data at rest.

Answer

Only data in transit is encrypted by default.

Answer

Encryption is optional and must be enabled by the customer.

Question 4

A company is migrating a legacy application to Google Cloud. The application has variable traffic and requires reliable, low-latency database access. The team wants to minimize operational overhead. Which TWO services should they consider for the database tier? (Choose two.)

Accepted Answer

Cloud SQL. Cloud SQL (A) is correct because it is a fully managed relational database service that supports MySQL, PostgreSQL, and SQL Server, offering automatic backups, patching, replication, and scaling with minimal operational overhead, making it suitable for a legacy application needing low-latency access. Cloud Spanner (B) is correct because it is a fully managed, horizontally scalable relational database that provides strong consistency and high availability with low latency even under variable traffic, and it removes operational burden such as sharding and replication management. Cloud Bigtable (C) is not ideal because it is a NoSQL wide-column store optimized for large analytical and high-throughput workloads, not general legacy relational applications. Firestore (D) is a NoSQL document database better suited for mobile, web, and serverless apps rather than a legacy relational workload. Self-managed MySQL on Compute Engine (E) is incorrect because it requires the team to handle patching, backups, replication, and scaling themselves, which increases operational overhead rather than minimizing it.

Answer

Cloud Bigtable

Answer

Firestore

Answer

Self-managed MySQL on Compute Engine

Question 5

A company wants to reduce its cloud spending by optimizing storage costs for infrequently accessed data. Which THREE Google Cloud storage classes should they consider? (Choose three.)

Accepted Answer

Archive. The scenario asks for storage classes suited to infrequently accessed data to cut costs, and the three marked options fit that profile. C (Archive) is correct because it is the lowest-cost class for data accessed less than once a year, with a 365-day minimum storage duration, ideal for long-term retention. D (Coldline) is correct because it targets data accessed less than once a quarter, offering low cost with a 90-day minimum storage duration. E (Nearline) is correct because it is designed for data accessed less than once a month, providing lower cost than hotter classes with a 30-day minimum storage duration. A (Standard) is not appropriate because it is the highest-cost class for frequently accessed data, and B (Regional) is not a storage class but a location type that can apply to Standard, Nearline, Coldline, or Archive, so neither reduces cost for infrequent access.

Answer

Standard

Answer

Regional

Question 6

A company wants to reduce its on-premises data center footprint by moving workloads to Google Cloud. They need to maintain low-latency connectivity between their remaining on-premises equipment and their Google Cloud VPC. Which Google Cloud service should they use?

Accepted Answer

Dedicated Interconnect. Dedicated Interconnect provides direct, private, high-bandwidth connections between on-premises and Google Cloud, meeting low-latency requirements. Partner Interconnect uses service providers with lower bandwidth. Cloud VPN is internet-based and slower. Direct Peering lacks SLAs.

Answer

Cloud VPN

Answer

Partner Interconnect

Answer

Direct Peering

Question 7

A startup wants to launch a new application and expects unpredictable traffic patterns. They want to avoid upfront hardware costs and only pay for resources they use. Which cloud deployment model best meets their needs?

Accepted Answer

Public cloud. Public cloud offers pay-as-you-go pricing, on-demand scaling, and no upfront hardware costs, ideal for unpredictable workloads. Private and hybrid models typically involve capital expenditure.

Answer

Private cloud

Answer

Hybrid cloud

Answer

Multi-cloud

Question 8

A retail company experiences traffic spikes during holiday sales. They need to automatically scale their web application instances based on CPU utilization. Which Google Cloud service should they configure?

Accepted Answer

Managed instance group with autoscaling. Managed instance groups with autoscaling automatically add or remove VM instances based on metrics like CPU utilization, handling traffic spikes efficiently.

Answer

Cloud Load Balancing

Answer

Google Kubernetes Engine with Horizontal Pod Autoscaler

Answer

Cloud Functions

Question 9

A company is migrating a legacy monolithic application to Google Cloud. They want to reduce operational overhead while maintaining the ability to run the application without rewriting code. Which migration strategy should they use?

Accepted Answer

Lift and shift (rehosting). Lift and shift (rehosting) moves the application to Google Cloud with minimal or no code changes, which directly satisfies the requirement to avoid rewriting code while reducing the operational burden of running on-premises hardware. It is the fastest migration strategy and preserves the existing monolithic architecture.

Answer

Retiring

Answer

Replatforming (lift, tinker, and shift)

Answer

Refactoring (rearchitecting)

Question 10

A global e-commerce platform needs to serve content with low latency to users worldwide. They want to cache static content at edge locations near users. Which Google Cloud service should they use?

Accepted Answer

Cloud CDN. Cloud CDN caches static content at Google's globally distributed edge locations, bringing content closer to users and reducing latency for worldwide audiences. It integrates with external HTTP(S) load balancing and Cloud Storage or Compute Engine backends, making it the correct choice for edge caching of static assets.

Answer

Cloud DNS

Answer

Cloud Armor

Answer

Cloud Storage

Question 11

A company wants to use machine learning to analyze customer reviews without building and training models from scratch. They need a pre-trained model that can classify sentiment. Which Google Cloud service should they use?

Accepted Answer

Cloud Natural Language API. The Cloud Natural Language API is a pre-trained, fully managed service that exposes sentiment analysis (among other NLP features like entity and syntax analysis) through a simple REST/RPC call, so no model training or ML expertise is required. It directly satisfies the requirement for a pre-trained sentiment classification model. Vertex AI and AutoML require you to build/train or at least manage a model, and Dialogflow is for conversational agents, not sentiment classification.

Answer

Vertex AI

Answer

AutoML Natural Language

Answer

Dialogflow

Question 12

A financial services company must comply with strict data residency regulations. They need to store customer data in a specific geographic region and ensure it never leaves that region. Which Google Cloud feature should they use?

Accepted Answer

Organization Policy with location restrictions. Organization Policy with location restrictions allows admins to restrict resource creation to specific regions, preventing data from being stored elsewhere. VPC Service Controls provide data exfiltration prevention but do not restrict region. IAM controls access, not location. Cloud KMS manages keys.

Answer

VPC Service Controls

Answer

Cloud IAM

Answer

Cloud Key Management Service

Question 13

A company runs a web application on Compute Engine. They want to reduce costs by committing to a 1-year contract for their VM usage. Which pricing model should they use?

Accepted Answer

Committed use discounts. Committed use discounts offer significant discounts in exchange for a 1-year or 3-year commitment to specific resource usage. Sustained use discounts apply automatically based on monthly usage. Preemptible VMs are for short-lived, fault-tolerant workloads. Pay-as-you-go is standard on-demand pricing.

Answer

Preemptible VMs

Answer

Sustained use discounts

Answer

Pay-as-you-go

Question 14

A company wants to allow its employees to securely access internal applications without a traditional VPN. They want to use Google's zero-trust security model. Which Google Cloud product should they implement?

Accepted Answer

BeyondCorp Enterprise. BeyondCorp Enterprise is Google's zero-trust access solution that grants access based on user identity and context, not network location. Cloud VPN is traditional VPN. Cloud Armor is WAF. Identity-Aware Proxy (IAP) is part of BeyondCorp but the broader product is BeyondCorp Enterprise.

Answer

Cloud VPN

Answer

Identity-Aware Proxy (IAP)

Answer

Cloud Armor

Question 15

A data analytics team needs to run complex SQL queries on a large dataset stored in Cloud Storage (CSV files). They want a serverless solution that does not require managing infrastructure. Which Google Cloud service should they use?

Accepted Answer

BigQuery. BigQuery is a serverless data warehouse that can query data in Cloud Storage via external tables or direct loading. Cloud Dataproc is managed Hadoop/Spark, not serverless for SQL. Cloud Dataflow is for stream/batch processing. Cloud SQL is a managed relational database.

Answer

Cloud Dataflow

Answer

Cloud Dataproc

Answer

Cloud SQL