Cloud Digital Leader Fundamental Cloud Concepts Practice Test 3 — 15 Questions

Question 1

Which of the following is a key characteristic of cloud computing as defined by NIST that allows users to automatically provision computing resources without requiring human interaction with each service provider?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

On-demand self-service. On-demand self-service enables users to provision resources automatically as needed, without requiring human interaction with the provider.

Answer

Measured service

Answer

Resource pooling

Answer

Broad network access

Question 2

A startup wants to deploy a containerized web application without managing servers or clusters. They need automatic scaling, a managed runtime, and pay only for resources used. Which Google Cloud service should they choose?

Accepted Answer

Cloud Run. Cloud Run is a fully managed serverless platform for containers that automatically scales and charges only for resources used. It fits the requirements perfectly.

Answer

Google Kubernetes Engine (GKE)

Answer

Compute Engine

Answer

App Engine

Question 3

A company needs to run a legacy application that requires full control over the operating system, including custom kernel modules. They want to minimize management overhead for the underlying hardware. Which cloud service model should they use?

Accepted Answer

IaaS. IaaS provides virtualized computing resources where the customer manages the OS and above, while the cloud provider manages the hardware and hypervisor.

Answer

PaaS

Answer

FaaS

Answer

SaaS

Question 4

An engineer is deploying a global application that requires low latency for users in North America, Europe, and Asia. They plan to use Compute Engine instances in multiple regions. Which Google Cloud resource is essential to distribute traffic and provide a single anycast IP address?

Accepted Answer

Global external HTTP(S) load balancer. Global external HTTP(S) load balancer provides a single anycast IP and distributes traffic across regions, enabling low-latency access worldwide.

Answer

Cloud CDN

Answer

Traffic Director

Answer

Cloud NAT

Question 5

Which statement best describes the shared responsibility model in Google Cloud?

Accepted Answer

Google is responsible for security of the infrastructure; customers are responsible for their data and configurations.. Google is responsible for the security of the cloud infrastructure, while customers are responsible for security within the cloud, including data, access, and configurations.

Answer

Google is responsible for all security aspects, including customer data.

Answer

Customers are responsible for physical security of data centers.

Answer

Security is entirely the customer's responsibility in IaaS.

Question 6

An organization needs to comply with HIPAA for storing healthcare data in Google Cloud. Which of the following is a customer responsibility?

Accepted Answer

Implementing IAM policies to control access to PHI. Under the shared responsibility model, the customer is responsible for configuring access controls (IAM) and encrypting PHI appropriately.

Answer

Physical security of Google data centers

Answer

Patching the hypervisor

Answer

Obtaining SOC 2 certification for Google Cloud

Question 7

Which Google Cloud tool allows customers to measure the gross carbon emissions associated with their Google Cloud usage?

Accepted Answer

Carbon Footprint dashboard in the Google Cloud Console. The Cloud Carbon Footprint tool provides visibility into the gross carbon emissions associated with a customer's Google Cloud usage.

Answer

Google Cloud's Sustainability API

Answer

Cloud Monitoring

Answer

Cloud Audit Logs

Question 8

A company wants to run a stateful application that requires persistent, high-performance block storage attached to a single Compute Engine instance. The application needs consistent low latency. Which storage solution should they use?

Accepted Answer

Persistent Disk. Persistent Disk provides durable block storage with consistent performance attached to a single VM. Local SSDs are ephemeral and not suitable for stateful data.

Answer

Local SSD

Answer

Filestore

Answer

Cloud Storage

Question 9

A company wants to use Google Cloud for a workload that requires compliance with PCI DSS. Which of the following is a Google responsibility under the shared model?

Accepted Answer

Patching the hypervisor. Google is responsible for maintaining the security of the infrastructure, including the hypervisor, network, and physical security, which are part of PCI DSS compliance scope for the cloud provider.

Answer

Configuring firewall rules to protect cardholder data

Answer

Managing access keys for cardholder data

Answer

Encrypting cardholder data at rest

Question 10

A company is migrating a legacy monolithic application to Google Cloud. The application has variable traffic and requires a relational database. They want to minimize operational overhead. Which TWO Google Cloud services should they choose? (Choose TWO.)

Accepted Answer

Cloud Run. Cloud Run is a serverless container platform that minimizes operational overhead by automatically scaling. Cloud SQL is a fully managed relational database service, reducing database management tasks.

Answer

Compute Engine

Answer

Google Kubernetes Engine

Answer

BigQuery

Question 11

A company is deploying a microservices architecture on Google Cloud and wants to ensure secure communication between services. Which THREE measures should they implement? (Choose THREE.)

Accepted Answer

Configure firewall rules to allow only necessary traffic. Using service mesh (e.g., Anthos Service Mesh) enables mTLS between services. Configuring firewall rules restricts network traffic. Enabling VPC Flow Logs helps monitor and audit traffic.

Answer

Assign public IP addresses to all services

Answer

Use the same service account for all services

Question 12

A startup needs to migrate an on-premises web application to the cloud with minimal operational overhead. The application runs on a custom runtime that is difficult to containerize. The team wants to focus only on code, not infrastructure management. Which Google Cloud service is MOST appropriate?

Accepted Answer

App Engine. App Engine is a PaaS offering that fully manages the runtime environment, allowing developers to deploy code without managing servers or containers. Cloud Run requires containerization, Compute Engine is IaaS (more overhead), and GKE requires managing Kubernetes clusters.

Answer

Compute Engine

Answer

Google Kubernetes Engine (GKE)

Answer

Cloud Run

Question 13

Which characteristic of cloud computing allows a user to provision virtual machines without needing to interact with Google Cloud support or create a ticket?

Accepted Answer

On-demand self-service. On-demand self-service means users can provision resources automatically without human interaction. The other options are also NIST characteristics but do not specifically address provisioning without manual intervention.

Answer

Broad network access

Answer

Measured service

Answer

Resource pooling

Question 14

An organization needs to store confidential healthcare data in Google Cloud. Which compliance certification ensures that Google Cloud infrastructure meets the required security controls for protected health information (PHI)?

Accepted Answer

HIPAA. HIPAA (Health Insurance Portability and Accountability Act) sets standards for protecting PHI. Customers must sign a Business Associate Agreement (BAA) with Google to use GCP for HIPAA-covered data. The other certifications address different data types.

Answer

ISO 27001

Answer

SOC 2

Answer

PCI DSS

Question 15

A global e-commerce company wants to serve its website from Google Cloud with low latency to users worldwide. The website consists of static content (images, CSS) and dynamic content served by a backend application. Which combination of services should they use?

Accepted Answer

Cloud Storage with Cloud CDN for static content, and Compute Engine instances behind Cloud Load Balancing for dynamic content. Cloud CDN caches static content at edge locations (PoPs) for low-latency delivery. Cloud Load Balancing distributes traffic across backend instances in multiple regions, and the backend can be deployed on Compute Engine or GKE. Cloud Storage alone cannot serve dynamic content; Cloud Functions is serverless but not ideal for full web serving; Cloud Armor is a security service.

Answer

Compute Engine with Cloud Armor

Answer

Cloud Functions for all content

Answer

Cloud Storage only