Cloud Digital Leader How Google Cloud Resources Are Managed — 20 Questions

Question 1

An organization wants to group related projects under a common parent for policy enforcement and cost tracking. Which GCP resource hierarchy level should be used to group several projects that belong to the same business unit?

Accepted Answer

Folder. Folders are used to group projects (and other folders) into a hierarchy for applying policies and organizing resources by department, team, or environment.

Answer

Organization node

Answer

Project

Answer

Resource

Question 2

A company has a folder for each department. The Finance team needs to prevent all projects under its folder from creating external IP addresses. What is the most efficient way to enforce this restriction?

Accepted Answer

Apply an organization policy constraint at the folder level. Organization policies can be defined at any level of the resource hierarchy and are inherited by child resources. Setting a constraint at the folder level applies to all projects under that folder.

Answer

Configure a service perimeter in VPC Service Controls

Answer

Use a deny IAM policy at the folder level

Answer

Set a VPC firewall rule in each project

Question 3

An engineer wants to export billing cost data to BigQuery for custom reporting. They have created a BigQuery dataset and linked it to the billing account. However, the billing export tables are not being populated. What is the most likely cause?

Accepted Answer

The BigQuery dataset is in a different location from the billing account's default region. Billing export to BigQuery requires the billing account to be linked to a project that contains the dataset, and the dataset must be in the same location (e.g., US or EU) as the billing account's default region.

Answer

The billing export has not been enabled in the Cloud Console

Answer

The engineer does not have the Billing Administrator IAM role

Answer

The billing account is not linked to the project containing the BigQuery dataset

Question 4

A startup expects unpredictable Compute Engine usage and wants to minimize costs without manual intervention. Which discount type automatically applies to VM instances that run for more than 25% of a month?

Accepted Answer

Sustained use discounts. Sustained use discounts are automatic and apply to Compute Engine instances that run for a significant portion of the month, with no upfront commitment.

Answer

Committed use discounts

Answer

Spot VM discounts

Answer

Preemptible VM discounts

Question 5

An organization uses labels to track cost by environment (dev, test, prod). However, the Finance team notices that some resources are missing the 'env' label. Which service can automatically suggest labeling resources that are missing required labels?

Accepted Answer

Active Assist Recommendations. Active Assist provides recommendations for various optimizations, including labeling. The Recommender can suggest labels for resources that are missing them, based on usage patterns.

Answer

Cost Management dashboard

Answer

Cloud Asset Inventory

Answer

Organization Policy Service

Question 6

A developer needs to estimate the monthly cost of running a set of Compute Engine instances with specific machine types, persistent disks, and network egress before deploying. Which tool should they use?

Accepted Answer

Google Cloud Pricing Calculator. The Google Cloud Pricing Calculator allows users to estimate costs for various services based on their configuration, before deployment.

Answer

Billing export to BigQuery

Answer

Active Assist Recommendations

Answer

Cost Management dashboard

Question 7

A company wants to receive notifications when its monthly spending exceeds 80% of a $10,000 budget. Which set of steps will achieve this?

Accepted Answer

Set up a budget in the Billing section of Cloud Console, define the amount, and add alert thresholds at 80%. Budgets and alerts can be set up in the Cloud Console to trigger email or Pub/Sub notifications at specified thresholds (e.g., 50%, 80%, 90%).

Answer

Create a budget alert in Cloud Monitoring with a metric threshold of 80%

Answer

Use the Google Cloud Pricing Calculator to set a spending limit

Answer

Configure a Cloud Scheduler job to check billing data in BigQuery and send a notification

Question 8

An engineer is designing a resource hierarchy for a multinational company with multiple business units. The company uses Google Workspace. What is the first step in creating the resource hierarchy?

Accepted Answer

Link the Google Workspace account to the organization node. The organization node is automatically created when a Google Workspace or Cloud Identity account is set up. It serves as the root node for the resource hierarchy.

Answer

Create a project for each business unit

Answer

Create a folder for each business unit

Answer

Enable the Cloud Resource Manager API

Question 9

A team needs to analyze spending patterns across projects using BigQuery. The billing export is already configured. However, the team cannot see any data in the billing export dataset. What is the most likely reason?

Accepted Answer

The BigQuery dataset is in a different region than the billing account's default region. Billing export tables typically start populating within a few hours of setup. If no data appears, the most common cause is that the dataset location does not match the billing account's default region.

Answer

The billing account has not been linked to the project

Answer

The IAM permissions for the BigQuery dataset are incorrect

Answer

The billing export tables are only updated monthly

Question 10

An organization wants to tag resources with key-value metadata for cost allocation purposes (e.g., team: marketing, environment: prod). Which feature should be used?

Accepted Answer

Labels. Labels are key-value pairs that can be applied to resources for billing, filtering, and cost attribution. They are visible in billing reports and the cost management dashboard.

Answer

Organization policy constraints

Answer

IAM custom roles

Answer

Tags (network tags)

Question 11

A company has a production project that requires a compute quota of 500 vCPUs, but the default limit is 200. What is the correct process to request a quota increase?

Accepted Answer

Navigate to IAM & Admin > Quotas in Cloud Console, select the metric, and request an increase. Quota increases can be requested through the Cloud Console under IAM & Admin > Quotas, where the engineer can select the metric (e.g., CPUs) and request a higher limit.

Answer

Shut down idle VMs to free up quota

Answer

Create a new support ticket with the Billing team

Answer

Use the gcloud compute quotas update command

Question 12

A company wants to reserve Compute Engine instances for a 3-year term to get the maximum discount. They expect consistent usage and want the discount to apply automatically to any instance matching the configuration. Which purchasing option should they choose?

Accepted Answer

Committed use discounts with a 3-year term. Committed use discounts (CUDs) offer significant discounts in exchange for a commitment to use a minimum level of resources for 1 or 3 years. They apply automatically to eligible instances in the specified region and machine series.

Answer

Sustained use discounts

Answer

Preemptible VM instances

Answer

Reserved instances (like AWS)

Question 13

A company has multiple projects and wants to organize them by environment (dev, test, prod) and by team (engineering, marketing, finance). They also need to apply IAM policies that affect all projects in a given environment. Which TWO steps should they take?

Accepted Answer

Apply IAM policies at the folder level. Using folders to group projects by environment allows inheritance of IAM policies. Labels are used for cost attribution and filtering, not for policy enforcement.

Answer

Create separate billing accounts for each environment

Answer

Use organization policies at the project level

Answer

Use labels to group projects by environment

Question 14

A company needs to optimize costs for Compute Engine VMs. They have a mix of workloads: some are batch jobs that can be interrupted, while others are critical services that must run 24/7. The company wants to use the most cost-effective options without sacrificing reliability for critical services. Which THREE strategies should they implement?

Accepted Answer

Use committed use discounts for the 24/7 critical services. Sustained use discounts automatically apply to long-running VMs. Committed use discounts provide larger discounts for predictable, always-on workloads. Preemptible/Spot VMs are ideal for fault-tolerant batch jobs. The other options are not relevant or would not reduce costs.

Answer

Set up budget alerts to monitor spending

Answer

Rely solely on sustained use discounts for all instances

Question 15

A company needs to enforce that no project in the organization can create resources outside of the us-central1 region. They also need to allow the Finance team to manage billing for all projects. Which TWO steps should they take?

Accepted Answer

Apply the `gcp.resourceLocations` organization policy constraint at the organization node. Organization policies can be applied at the organization level to restrict locations. Billing account access is controlled by IAM roles on the billing account, granting the Finance team the Billing Account Administrator role.

Answer

Create a separate billing account for each project

Answer

Use IAM deny policies at the organization node to block resource creation outside us-central1

Answer

Create a folder and apply an organization policy constraint to restrict locations at the folder level

Question 16

A startup wants to organize its Google Cloud resources by separating development, staging, and production environments. They also need to apply common IAM policies across all projects in each environment. Which resource hierarchy component should they use to group projects per environment?

Accepted Answer

Folders. Folders allow grouping of projects and are used to reflect organizational structure or environment separation. IAM policies applied at the folder level are inherited by all projects within that folder.

Answer

Organization node

Answer