Cloud Digital Leader Fundamental Cloud Concepts Practice Test 5 — 15 Questions

Question 1

A security administrator needs to grant a developer the minimum permissions to create and delete Cloud Storage buckets in a specific project, but NOT allow them to modify the contents of those buckets (e.g., upload or delete objects). Which IAM role should they assign?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Custom role with storage.buckets.* permissions. Storage Admin (roles/storage.admin) grants full control over buckets and objects, which is too permissive. The correct approach is to create a custom role with only storage.buckets.* permissions, or use predefined roles like Storage Object Admin? Actually, Storage Object Admin allows object management. The question requires bucket management only. A custom role with storage.buckets.create and storage.buckets.delete (and maybe storage.buckets.get) is necessary; predefined roles do not separate bucket and object permissions perfectly. But among standard roles, 'Storage Admin' is too broad; there is no predefined role that only allows bucket management without object access. So the answer must be a custom role.

Answer

Storage Admin (roles/storage.admin)

Answer

Storage Object Admin (roles/storage.objectAdmin)

Answer

Project Editor (roles/editor)

Question 2

A DevOps engineer notices that a Cloud Function is timing out after 9 minutes. The function performs a long-running data transformation. They need to increase the timeout. What is the maximum timeout they can set for a Cloud Function (1st gen)?

Accepted Answer

9 minutes. Cloud Functions (1st gen) have a maximum timeout of 9 minutes (540 seconds). For longer timeouts, they would need to use Cloud Functions (2nd gen) which supports up to 60 minutes, or use Cloud Run.

Answer

15 minutes

Answer

30 minutes

Answer

60 minutes

Question 3

An e-commerce platform uses Compute Engine to serve its website. During a flash sale, traffic spikes and some instances become unhealthy. The team wants to automatically replace unhealthy instances and maintain a minimum number of running instances. Which TWO features should they configure? (Choose 2)

Accepted Answer

Managed instance group (MIG). Managed instance groups (MIGs) provide autoscaling and autohealing. Autoscaling adjusts the number of instances based on load, and autohealing replaces unhealthy instances automatically.

Answer

Regional load balancer

Answer

Cloud CDN

Answer

Cloud NAT

Question 4

A developer wants a fully managed environment to deploy containerized applications without managing the underlying infrastructure. They need auto-scaling, load balancing, and a serverless experience. Which Google Cloud service should they choose?

Accepted Answer

Cloud Run. Cloud Run is a fully managed, serverless container platform that auto-scales, handles load balancing, and charges only for resources used. It abstracts all infrastructure management.

Answer

Google Kubernetes Engine

Answer

Compute Engine

Answer

App Engine Standard

Question 5

An organization wants to reduce latency for users in Europe. They plan to deploy their application in a Google Cloud region located in Europe. Which region should they choose?

Accepted Answer

europe-west1. europe-west1 is located in Belgium, Europe, providing low latency for European users.

Answer

us-central1

Answer

asia-east1

Answer

australia-southeast1

Question 6

A financial services company must run a legacy Windows application that requires a specific version of IIS and custom Windows patches. The company wants to minimize operational overhead but needs full control over the OS. Which Google Cloud service is most appropriate?

Accepted Answer

Compute Engine. Compute Engine provides IaaS, allowing full control over the OS and application stack, including custom patches and configurations.

Answer

Google Kubernetes Engine

Answer

App Engine Flexible Environment

Answer

Cloud Run

Question 7

A data analytics team processes large datasets using Apache Spark. They want a fully managed service that allows them to run Spark jobs without provisioning clusters. Which Google Cloud service should they use?

Accepted Answer

Dataproc. Dataproc is a managed Spark and Hadoop service. With Dataproc, you can create clusters quickly, but the fully managed serverless option is Dataproc Serverless, which runs Spark jobs without cluster management.

Answer

BigQuery

Answer

Dataflow

Answer

Cloud Dataprep

Question 8

A startup uses Google Workspace for email and collaboration. They want to add a custom domain to their Gmail accounts. Which service model does Google Workspace represent?

Accepted Answer

SaaS. Google Workspace is a SaaS offering where Google manages all infrastructure, including the application, runtime, OS, and hardware.

Answer

PaaS

Answer

FaaS

Answer

IaaS

Question 9

An e-commerce company experiences unpredictable traffic spikes. They need to ensure their web application automatically scales out during high demand and scales in when demand drops, paying only for resources used. Which cloud benefit best describes this?

Accepted Answer

Elasticity. Elasticity allows resources to automatically scale up and down based on demand, optimizing cost and performance.

Answer

Economies of scale

Answer

Broad network access

Answer

Reliability

Question 10

A company stores sensitive healthcare data in Google Cloud and must comply with HIPAA. They are using Cloud Storage and BigQuery. Which of the following is the customer responsible for under the shared responsibility model?

Accepted Answer

Implementing IAM policies to restrict access to healthcare data. Under the shared responsibility model, the customer is responsible for access management (IAM), encryption of data at rest and in transit, and configuring firewall rules. Google is responsible for the physical security of data centers, hypervisor, and network infrastructure.

Answer

Physical security of data centers

Answer

Hardware maintenance of storage servers

Answer

Network infrastructure security

Question 11

A global gaming company needs to serve low-latency content to players worldwide. They want to cache static assets (images, videos) at edge locations closest to users. Which Google Cloud product should they use?

Accepted Answer

Cloud CDN. Cloud CDN uses Google's global edge network Points of Presence (PoPs) to cache content, reducing latency for users worldwide.

Answer

Cloud Storage

Answer

Compute Engine with global load balancer

Answer

Cloud Spanner

Question 12

A company wants to run a batch job that processes data every night. They need to provision a VM for this task but want to minimize costs. The job can tolerate interruptions and can be resumed. Which Compute Engine VM option should they use?

Accepted Answer

Preemptible VM. Preemptible VMs are short-lived, cost-effective instances that can be terminated at any time but are ideal for batch jobs that can handle interruptions.

Answer

VM with committed use discount

Answer

Sole-tenant node

Answer

Standard VM

Question 13

Which of the following is a characteristic of the cloud according to the NIST definition?

Accepted Answer

Measured service. Measured service is one of the five essential characteristics of cloud computing as defined by NIST.

Answer

Manual scaling

Answer

Limited network access

Answer

Single tenancy

Question 14

A multinational corporation must store and process data subject to GDPR. They need to ensure that personal data of EU residents remains within the EU. Which Google Cloud feature should they use?

Accepted Answer

Organization policies with location restrictions. Data residency constraints in Google Cloud allow organizations to specify where data is stored by using organization policies and choosing specific regions. This ensures data does not leave the EU.

Answer

Cloud Audit Logs

Answer

Cloud KMS

Answer

VPC Service Controls

Question 15

A company is designing a disaster recovery strategy for a critical application. They need to ensure that if an entire Google Cloud region becomes unavailable, the application can still serve traffic from another region with minimal data loss. Which TWO strategies should they implement? (Choose 2.)

Accepted Answer

Deploy the application in multiple regions. Multi-region deployment across at least two regions provides region-level failure protection. To minimize data loss, synchronous replication (e.g., using Cloud Spanner or multi-region Cloud Storage) ensures data consistency across regions.

Answer

Deploy the application in multiple zones within a single region

Answer

Use asynchronous replication for the database

Answer

Use a single load balancer