Cloud Digital Leader Why Cloud Technology Can Transform Business Practice Test 5 — 15 Questions

Question 1

A company wants to reduce its on-premises data center footprint by moving workloads to Google Cloud. They need to maintain low-latency connectivity between their remaining on-premises equipment and their Google Cloud VPC. Which Google Cloud service should they use?

Accepted Answer

Dedicated Interconnect. Dedicated Interconnect provides direct, private, high-bandwidth connections between on-premises and Google Cloud, meeting low-latency requirements. Partner Interconnect uses service providers with lower bandwidth. Cloud VPN is internet-based and slower. Direct Peering lacks SLAs.

Answer

Cloud VPN

Answer

Partner Interconnect

Answer

Direct Peering

Question 2

A startup wants to launch a new application and expects unpredictable traffic patterns. They want to avoid upfront hardware costs and only pay for resources they use. Which cloud deployment model best meets their needs?

Accepted Answer

Public cloud. Public cloud offers pay-as-you-go pricing, on-demand scaling, and no upfront hardware costs, ideal for unpredictable workloads. Private and hybrid models typically involve capital expenditure.

Answer

Private cloud

Answer

Hybrid cloud

Answer

Multi-cloud

Question 3

A retail company experiences traffic spikes during holiday sales. They need to automatically scale their web application instances based on CPU utilization. Which Google Cloud service should they configure?

Accepted Answer

Managed instance group with autoscaling. Managed instance groups with autoscaling automatically add or remove VM instances based on metrics like CPU utilization, handling traffic spikes efficiently.

Answer

Cloud Load Balancing

Answer

Google Kubernetes Engine with Horizontal Pod Autoscaler

Answer

Cloud Functions

Question 4

A company is migrating a legacy monolithic application to Google Cloud. They want to reduce operational overhead while maintaining the ability to run the application without rewriting code. Which migration strategy should they use?

Accepted Answer

Lift and shift (rehosting). Lift and shift (rehosting) moves the application to VMs without changes, reducing operational overhead by eliminating data center management. Refactoring requires code changes. Replatforming uses managed services but may need modifications. Retiring removes the application.

Answer

Retiring

Answer

Replatforming (lift, tinker, and shift)

Answer

Refactoring (rearchitecting)

Question 5

A global e-commerce platform needs to serve content with low latency to users worldwide. They want to cache static content at edge locations near users. Which Google Cloud service should they use?

Accepted Answer

Cloud CDN. Cloud CDN uses Google's global edge network to cache static content, reducing latency by serving from locations close to users. Cloud Armor is for security. Cloud DNS is for domain resolution. Cloud Storage alone does not cache at edges.

Answer

Cloud DNS

Answer

Cloud Armor

Answer

Cloud Storage

Question 6

A company wants to use machine learning to analyze customer reviews without building and training models from scratch. They need a pre-trained model that can classify sentiment. Which Google Cloud service should they use?

Accepted Answer

Cloud Natural Language API. Cloud Natural Language API provides pre-trained models for sentiment analysis, entity recognition, etc. AutoML Natural Language requires custom training. Vertex AI is a platform for building custom models. Dialogflow is for conversational interfaces.

Answer

Vertex AI

Answer

AutoML Natural Language

Answer

Dialogflow

Question 7

A financial services company must comply with strict data residency regulations. They need to store customer data in a specific geographic region and ensure it never leaves that region. Which Google Cloud feature should they use?

Accepted Answer

Organization Policy with location restrictions. Organization Policy with location restrictions allows admins to restrict resource creation to specific regions, preventing data from being stored elsewhere. VPC Service Controls provide data exfiltration prevention but do not restrict region. IAM controls access, not location. Cloud KMS manages keys.

Answer

VPC Service Controls

Answer

Cloud IAM

Answer

Cloud Key Management Service

Question 8

A company runs a web application on Compute Engine. They want to reduce costs by committing to a 1-year contract for their VM usage. Which pricing model should they use?

Accepted Answer

Committed use discounts. Committed use discounts offer significant discounts in exchange for a 1-year or 3-year commitment to specific resource usage. Sustained use discounts apply automatically based on monthly usage. Preemptible VMs are for short-lived, fault-tolerant workloads. Pay-as-you-go is standard on-demand pricing.

Answer

Preemptible VMs

Answer

Sustained use discounts

Answer

Pay-as-you-go

Question 9

A company wants to allow its employees to securely access internal applications without a traditional VPN. They want to use Google's zero-trust security model. Which Google Cloud product should they implement?

Accepted Answer

BeyondCorp Enterprise. BeyondCorp Enterprise is Google's zero-trust access solution that grants access based on user identity and context, not network location. Cloud VPN is traditional VPN. Cloud Armor is WAF. Identity-Aware Proxy (IAP) is part of BeyondCorp but the broader product is BeyondCorp Enterprise.

Answer

Cloud VPN

Answer

Identity-Aware Proxy (IAP)

Answer

Cloud Armor

Question 10

A data analytics team needs to run complex SQL queries on a large dataset stored in Cloud Storage (CSV files). They want a serverless solution that does not require managing infrastructure. Which Google Cloud service should they use?

Accepted Answer

BigQuery. BigQuery is a serverless data warehouse that can query data in Cloud Storage via external tables or direct loading. Cloud Dataproc is managed Hadoop/Spark, not serverless for SQL. Cloud Dataflow is for stream/batch processing. Cloud SQL is a managed relational database.

Answer

Cloud Dataflow

Answer

Cloud Dataproc

Answer

Cloud SQL

Question 11

A company is moving a sensitive database to Cloud SQL. They need to encrypt data at rest using customer-managed encryption keys (CMEK) and rotate the key every 30 days. How should they set this up?

Accepted Answer

Create a key in Cloud KMS, specify it as the CMEK for Cloud SQL, and set rotation period to 30 days. Cloud KMS allows managing keys outside the service, and you can set an automatic rotation period of 30 days. Cloud HSM provides hardware-backed keys but is not required. Protecting the key with IAM is separate. Enabling encryption by default uses Google-managed keys, not CMEK.

Answer

Enable encryption by default in Cloud SQL settings

Answer

Use Cloud HSM to generate a key and import it to Cloud SQL

Answer

Create a key in Cloud KMS and manually rotate it each month

Question 12

A company wants to run containerized applications on Google Cloud without managing the underlying VMs or orchestrator. Which compute service should they choose?

Accepted Answer

Cloud Run. Cloud Run is a fully managed serverless container platform that abstracts infrastructure. GKE requires cluster management. Compute Engine is VMs. App Engine supports containers but with more restrictions.

Answer

Google Kubernetes Engine (GKE)

Answer

Compute Engine

Answer

App Engine

Question 13

Which TWO statements are benefits of using a multi-cloud strategy? (Choose 2)

Accepted Answer

Ability to use best-of-breed services from different providers. Multi-cloud avoids vendor lock-in and can optimize costs by using the best services from each provider. It does not inherently improve latency (can increase complexity), does not reduce security risks, and does not simplify management.

Answer

Reduced overall security risk

Answer

Simplified operational management

Answer

Improved latency for all users

Question 14

Which THREE factors should be included when calculating the total cost of ownership (TCO) for an on-premises data center compared to Google Cloud? (Choose 3)

Accepted Answer

Staff salaries for data center operations. TCO includes hardware purchase, power and cooling, and staff costs. Software licensing may be similar, network egress is often lower on-premises, and opportunity cost of real estate is not typically included.

Answer

Network egress charges

Answer

Software licensing fees

Question 15

Which TWO statements accurately describe Google Cloud's sustainability commitments? (Choose 2)

Accepted Answer

Google Cloud aims to run on 24/7 carbon-free energy in all its data centers by 2030.. Google has matched 100% of its global electricity use with renewable energy since 2017 and aims for 24/7 carbon-free energy by 2030. Google does not offset all emissions (carbon offsets are separate from matching). Regions are not all carbon-neutral today. Data centers are not powered solely by on-site solar.

Answer

All Google Cloud regions are already carbon-neutral.

Answer

Google Cloud offsets all of its historical carbon emissions.

Answer

Google Cloud data centers are powered exclusively by on-site solar panels.