Cloud Digital Leader Why Cloud Technology Can Transform Business Practice Test 5 — 15 Questions

Question 1

A company wants to adopt a zero-trust security model for accessing Google Cloud resources. Which Google Cloud technology BEST supports this approach?

Accepted Answer

BeyondCorp Enterprise. BeyondCorp Enterprise is Google's zero-trust security model that allows access based on identity and context, without VPNs.

Answer

Cloud VPN

Answer

Cloud Identity-Aware Proxy (IAP)

Answer

Firewall Rules

Question 2

An organization wants to ensure its data is encrypted at rest and in transit by default on Google Cloud. Which statement is correct?

Accepted Answer

Data is encrypted at rest and in transit by default.. Google Cloud encrypts data at rest and in transit by default for many services, with customer-managed keys optional.

Answer

Customers must use CMEK to encrypt data at rest.

Answer

Only data in transit is encrypted by default.

Answer

Encryption is optional and must be enabled by the customer.

Question 3

A company is migrating a legacy application to Google Cloud. The application has variable traffic and requires reliable, low-latency database access. The team wants to minimize operational overhead. Which TWO services should they consider for the database tier? (Choose two.)

Accepted Answer

Cloud SQL. Cloud SQL provides managed relational databases with automatic failover and replication. Cloud Spanner provides globally distributed, strongly consistent database with automatic sharding. Both reduce operational overhead.

Answer

Cloud Bigtable

Answer

Firestore

Answer

Self-managed MySQL on Compute Engine

Question 4

A company runs a web application on Compute Engine. They want to improve availability by distributing traffic across multiple regions and automatically failing over if one region becomes unhealthy. Which TWO services should they combine? (Choose two.)

Accepted Answer

Cloud DNS with geo-routing. External HTTPS Load Balancer with global backend services can route traffic across regions and support failover. Cloud DNS with health checks can route traffic to healthy backends.

Answer

Internal Load Balancer

Answer

External HTTPS Load Balancer with backend buckets

Answer

Network Load Balancer

Question 5

A company wants to reduce its cloud spending by optimizing storage costs for infrequently accessed data. Which THREE Google Cloud storage classes should they consider? (Choose three.)

Accepted Answer

Archive. Nearline, Coldline, and Archive are cost-effective storage classes for infrequently accessed data with lower retrieval costs.

Answer

Standard

Answer

Regional

Question 6

A company wants to reduce its on-premises data center footprint by moving workloads to Google Cloud. They need to maintain low-latency connectivity between their remaining on-premises equipment and their Google Cloud VPC. Which Google Cloud service should they use?

Accepted Answer

Dedicated Interconnect. Dedicated Interconnect provides direct, private, high-bandwidth connections between on-premises and Google Cloud, meeting low-latency requirements. Partner Interconnect uses service providers with lower bandwidth. Cloud VPN is internet-based and slower. Direct Peering lacks SLAs.

Answer

Cloud VPN

Answer

Partner Interconnect

Answer

Direct Peering

Question 7

A startup wants to launch a new application and expects unpredictable traffic patterns. They want to avoid upfront hardware costs and only pay for resources they use. Which cloud deployment model best meets their needs?

Accepted Answer

Public cloud. Public cloud offers pay-as-you-go pricing, on-demand scaling, and no upfront hardware costs, ideal for unpredictable workloads. Private and hybrid models typically involve capital expenditure.

Answer

Private cloud

Answer

Hybrid cloud

Answer

Multi-cloud

Question 8

A retail company experiences traffic spikes during holiday sales. They need to automatically scale their web application instances based on CPU utilization. Which Google Cloud service should they configure?

Accepted Answer

Managed instance group with autoscaling. Managed instance groups with autoscaling automatically add or remove VM instances based on metrics like CPU utilization, handling traffic spikes efficiently.

Answer

Cloud Load Balancing

Answer

Google Kubernetes Engine with Horizontal Pod Autoscaler

Answer

Cloud Functions

Question 9

A company is migrating a legacy monolithic application to Google Cloud. They want to reduce operational overhead while maintaining the ability to run the application without rewriting code. Which migration strategy should they use?

Accepted Answer

Lift and shift (rehosting). Lift and shift (rehosting) moves the application to VMs without changes, reducing operational overhead by eliminating data center management. Refactoring requires code changes. Replatforming uses managed services but may need modifications. Retiring removes the application.

Answer

Retiring

Answer

Replatforming (lift, tinker, and shift)

Answer

Refactoring (rearchitecting)

Question 10

A global e-commerce platform needs to serve content with low latency to users worldwide. They want to cache static content at edge locations near users. Which Google Cloud service should they use?

Accepted Answer

Cloud CDN. Cloud CDN uses Google's global edge network to cache static content, reducing latency by serving from locations close to users. Cloud Armor is for security. Cloud DNS is for domain resolution. Cloud Storage alone does not cache at edges.

Answer

Cloud DNS

Answer

Cloud Armor

Answer

Cloud Storage

Question 11

A company wants to use machine learning to analyze customer reviews without building and training models from scratch. They need a pre-trained model that can classify sentiment. Which Google Cloud service should they use?

Accepted Answer

Cloud Natural Language API. Cloud Natural Language API provides pre-trained models for sentiment analysis, entity recognition, etc. AutoML Natural Language requires custom training. Vertex AI is a platform for building custom models. Dialogflow is for conversational interfaces.

Answer

Vertex AI

Answer

AutoML Natural Language

Answer

Dialogflow

Question 12

A financial services company must comply with strict data residency regulations. They need to store customer data in a specific geographic region and ensure it never leaves that region. Which Google Cloud feature should they use?

Accepted Answer

Organization Policy with location restrictions. Organization Policy with location restrictions allows admins to restrict resource creation to specific regions, preventing data from being stored elsewhere. VPC Service Controls provide data exfiltration prevention but do not restrict region. IAM controls access, not location. Cloud KMS manages keys.

Answer

VPC Service Controls

Answer

Cloud IAM

Answer

Cloud Key Management Service

Question 13

A company runs a web application on Compute Engine. They want to reduce costs by committing to a 1-year contract for their VM usage. Which pricing model should they use?

Accepted Answer

Committed use discounts. Committed use discounts offer significant discounts in exchange for a 1-year or 3-year commitment to specific resource usage. Sustained use discounts apply automatically based on monthly usage. Preemptible VMs are for short-lived, fault-tolerant workloads. Pay-as-you-go is standard on-demand pricing.

Answer

Preemptible VMs

Answer

Sustained use discounts

Answer

Pay-as-you-go

Question 14

A company wants to allow its employees to securely access internal applications without a traditional VPN. They want to use Google's zero-trust security model. Which Google Cloud product should they implement?

Accepted Answer

BeyondCorp Enterprise. BeyondCorp Enterprise is Google's zero-trust access solution that grants access based on user identity and context, not network location. Cloud VPN is traditional VPN. Cloud Armor is WAF. Identity-Aware Proxy (IAP) is part of BeyondCorp but the broader product is BeyondCorp Enterprise.

Answer

Cloud VPN

Answer

Identity-Aware Proxy (IAP)

Answer

Cloud Armor

Question 15

A data analytics team needs to run complex SQL queries on a large dataset stored in Cloud Storage (CSV files). They want a serverless solution that does not require managing infrastructure. Which Google Cloud service should they use?

Accepted Answer

BigQuery. BigQuery is a serverless data warehouse that can query data in Cloud Storage via external tables or direct loading. Cloud Dataproc is managed Hadoop/Spark, not serverless for SQL. Cloud Dataflow is for stream/batch processing. Cloud SQL is a managed relational database.

Answer

Cloud Dataflow

Answer

Cloud Dataproc

Answer

Cloud SQL