Cloud Digital Leader Fundamental Cloud Concepts Practice Test 5 — 15 Questions

Question 1

A data analytics team needs to process streaming data from thousands of IoT devices in real time. They want to ingest the data, process it (e.g., windowed aggregations), and then load it into BigQuery for analysis. Which Google Cloud service should they use for the stream processing step?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Cloud Dataflow. Cloud Dataflow is Google Cloud's fully managed, serverless service for both batch and stream processing, built on Apache Beam. It natively supports windowed aggregations, exactly-once processing, and autoscaling, making it ideal for real-time IoT data pipelines. Dataflow can read from Pub/Sub, apply transformations (e.g., fixed/sliding windows), and write to BigQuery with built-in connectors. Unlike Dataproc, it abstracts away cluster management, so the team can focus on pipeline logic rather than infrastructure.

Answer

BigQuery

Answer

Cloud Pub/Sub

Answer

Cloud Dataproc

Question 2

A development team is building a microservices-based application and wants to use a service mesh to secure and observe inter-service communication. They are using Google Kubernetes Engine (GKE). Which Google Cloud service should they integrate with GKE to provide service mesh capabilities?

Accepted Answer

Cloud Service Mesh (Anthos Service Mesh). Anthos Service Mesh (ASM) is a fully managed service mesh that provides traffic management, security (mTLS), and observability for microservices running on GKE and other environments.

Answer

Apigee

Answer

Cloud Traffic Director

Answer

Cloud Endpoints

Question 3

A company is using Cloud SQL for MySQL and notices that read queries are becoming slow as the application scales. They want to offload read traffic from the primary instance to improve performance. Which Cloud SQL feature should they enable?

Accepted Answer

Read replicas. Read replicas in Cloud SQL for MySQL are designed specifically to offload read traffic from the primary instance by maintaining an asynchronous copy of the data that applications can query directly. By directing SELECT queries to one or more read replicas, the primary instance is freed up to handle write operations, improving overall throughput and reducing latency on the primary. This is the standard horizontal scaling pattern for read-heavy Cloud SQL workloads.

Answer

Automatic failover replicas

Answer

Connection pooling

Answer

Point-in-time recovery

Question 4

A multinational corporation needs to deploy a global web application that serves users from multiple continents. They want to minimize latency for end users by serving content from the nearest location. Which combination of Google Cloud services should they use?

Accepted Answer

Cloud Load Balancing (global) with Cloud CDN. Cloud Load Balancing (global) with Cloud CDN (Option C) is the correct combination because a global external HTTP(S) load balancer provides a single anycast IP address that routes users to the nearest Google edge location, and Cloud CDN caches content at those edge locations to reduce latency. This architecture ensures that users on different continents are served from the closest point of presence, minimizing round-trip time and improving performance.

Answer

Compute Engine with regional load balancers

Answer

Cloud Run with Cloud NAT

Answer

Cloud DNS with Traffic Director

Question 5

A data scientist wants to train a machine learning model using a managed service that supports custom TensorFlow code and provides GPU/TPU hardware acceleration. They prefer not to manage the underlying infrastructure. Which Google Cloud service should they use?

Accepted Answer

AI Platform Training (Vertex AI Training). AI Platform Training (now Vertex AI Training) is a managed service that allows you to run custom TensorFlow/PyTorch training jobs on pre-configured VM instances with GPUs/TPUs, without managing the cluster.

Answer

Compute Engine with pre-installed TensorFlow

Answer

Cloud Functions

Answer

Google Kubernetes Engine with GPU nodes

Question 6

A security administrator needs to grant a developer the minimum permissions to create and delete Cloud Storage buckets in a specific project, but NOT allow them to modify the contents of those buckets (e.g., upload or delete objects). Which IAM role should they assign?

Accepted Answer

Custom role with storage.buckets.* permissions. Storage Admin (roles/storage.admin) grants full control over buckets and objects, which is too permissive. The correct approach is to create a custom role with only storage.buckets.* permissions, or use predefined roles like Storage Object Admin? Actually, Storage Object Admin allows object management. The question requires bucket management only. A custom role with storage.buckets.create and storage.buckets.delete (and maybe storage.buckets.get) is necessary; predefined roles do not separate bucket and object permissions perfectly. But among standard roles, 'Storage Admin' is too broad; there is no predefined role that only allows bucket management without object access. So the answer must be a custom role.

Answer

Storage Admin (roles/storage.admin)

Answer

Storage Object Admin (roles/storage.objectAdmin)

Answer

Project Editor (roles/editor)

Question 7

A DevOps engineer notices that a Cloud Function is timing out after 9 minutes. The function performs a long-running data transformation. They need to increase the timeout. What is the maximum timeout they can set for a Cloud Function (1st gen)?

Accepted Answer

9 minutes. For Google Cloud Functions (1st gen), the maximum configurable timeout is 9 minutes (540 seconds). The question states the function is already timing out at 9 minutes, which is the ceiling — the engineer cannot increase it further in 1st gen. To exceed 9 minutes, they must migrate to Cloud Functions 2nd gen (which supports up to 60 minutes) or use Cloud Run.

Answer

15 minutes

Answer

30 minutes

Answer

60 minutes

Question 8

An e-commerce platform uses Compute Engine to serve its website. During a flash sale, traffic spikes and some instances become unhealthy. The team wants to automatically replace unhealthy instances and maintain a minimum number of running instances. Which TWO features should they configure? (Choose 2)

Accepted Answer

Managed instance group (MIG). Managed instance groups (MIGs) provide autoscaling and autohealing. Autoscaling adjusts the number of instances based on load, and autohealing replaces unhealthy instances automatically.

Answer

Regional load balancer

Answer

Cloud CDN

Answer

Cloud NAT

Question 9

A developer wants a fully managed environment to deploy containerized applications without managing the underlying infrastructure. They need auto-scaling, load balancing, and a serverless experience. Which Google Cloud service should they choose?

Accepted Answer

Cloud Run. Cloud Run is a fully managed, serverless container platform that auto-scales, handles load balancing, and charges only for resources used. It abstracts all infrastructure management.

Answer

Google Kubernetes Engine

Answer

Compute Engine

Answer

App Engine Standard

Question 10

An organization wants to reduce latency for users in Europe. They plan to deploy their application in a Google Cloud region located in Europe. Which region should they choose?

Accepted Answer

europe-west1. europe-west1 is a Google Cloud region physically located in Belgium, so deploying there places compute and storage close to European users, reducing network round-trip latency. The other options are regions on different continents, which would add transatlantic or transpacific latency for European users.

Answer

us-central1

Answer

asia-east1

Answer

australia-southeast1

Question 11

A financial services company must run a legacy Windows application that requires a specific version of IIS and custom Windows patches. The company wants to minimize operational overhead but needs full control over the OS. Which Google Cloud service is most appropriate?

Accepted Answer

Compute Engine. Compute Engine provides full control over the operating system, including the ability to install custom Windows patches and specific IIS versions, while remaining a managed IaaS offering that minimizes operational overhead compared to on-premises. It is the only option that gives the customer OS-level access required for a legacy Windows application with custom patch dependencies.

Answer

Google Kubernetes Engine

Answer

App Engine Flexible Environment

Answer

Cloud Run

Question 12

A data analytics team processes large datasets using Apache Spark. They want a fully managed service that allows them to run Spark jobs without provisioning clusters. Which Google Cloud service should they use?

Accepted Answer

Dataproc. Dataproc is Google Cloud's fully managed Apache Spark and Hadoop service, letting teams submit Spark jobs to ephemeral or long-running clusters without provisioning infrastructure themselves. It supports Spark, Spark SQL, PySpark, Hive, and Pig, and integrates with Cloud Storage and BigQuery as data sources. That matches the requirement exactly.

Answer

BigQuery

Answer

Dataflow

Answer

Cloud Dataprep

Question 13

A startup uses Google Workspace for email and collaboration. They want to add a custom domain to their Gmail accounts. Which service model does Google Workspace represent?

Accepted Answer

SaaS. Google Workspace is a SaaS offering where Google manages all infrastructure, including the application, runtime, OS, and hardware.

Answer

PaaS

Answer

FaaS

Answer

IaaS

Question 14

An e-commerce company experiences unpredictable traffic spikes. They need to ensure their web application automatically scales out during high demand and scales in when demand drops, paying only for resources used. Which cloud benefit best describes this?

Accepted Answer

Elasticity. Elasticity is the cloud characteristic that allows resources to automatically scale out during demand spikes and scale in when demand drops, so the company pays only for what it uses. This matches the e-commerce scenario of unpredictable traffic. It is a core benefit of cloud computing.

Answer

Economies of scale

Answer

Broad network access

Answer

Reliability

Question 15

A company stores sensitive healthcare data in Google Cloud and must comply with HIPAA. They are using Cloud Storage and BigQuery. Which of the following is the customer responsible for under the shared responsibility model?

Accepted Answer

Implementing IAM policies to restrict access to healthcare data. Under the shared responsibility model, the customer is responsible for access management (IAM), encryption of data at rest and in transit, and configuring firewall rules. Google is responsible for the physical security of data centers, hypervisor, and network infrastructure.

Answer

Physical security of data centers

Answer

Hardware maintenance of storage servers

Answer

Network infrastructure security