Cloud Digital Leader How Google Cloud Resources Are Managed — 25 Questions

Question 1

A team needs to analyze spending patterns across projects using BigQuery. The billing export is already configured. However, the team cannot see any data in the billing export dataset. What is the most likely reason?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The IAM permissions for the BigQuery dataset are incorrect. Billing export tables are typically populated within a few hours to a day. If no data is visible, the most common cause is that the team lacks necessary IAM permissions (e.g., BigQuery Data Viewer) on the export dataset. Dataset location does not need to match a billing account region, and export tables are not monthly.

Answer

The billing account has not been linked to the project

Answer

The BigQuery dataset is in a different region than the billing account's default region

Answer

The billing export tables are only updated monthly

Question 2

A company needs to optimize costs for Compute Engine VMs. They have a mix of workloads: some are batch jobs that can be interrupted, while others are critical services that must run 24/7. The company wants to use the most cost-effective options without sacrificing reliability for critical services. Which THREE strategies should they implement?

Accepted Answer

Use committed use discounts for the 24/7 critical services. Committed use discounts provide larger discounts for predictable, always-on workloads. Rightsizing VMs using Active Assist recommendations helps eliminate wasted resources by matching VM sizes to actual usage. Preemptible/Spot VMs are ideal for fault-tolerant batch jobs. The other options are not effective cost optimization strategies.

Answer

Set up budget alerts to monitor spending

Answer

Rely solely on sustained use discounts for all instances

Question 3

A company needs to track spending per team by tagging resources with a 'team' label. However, some engineers are not applying consistent labels, leading to untagged resources. How can they enforce that all new resources are created with a specific label?

Accepted Answer

Use a custom organization policy to require the 'team' label on all resources.. Organization policies can be used to enforce that resources must have certain labels by defining a custom constraint that requires the 'team' label on all resources. This denies resource creation if the label is missing.

Answer

Set up a budget alert to notify when untagged resources are created.

Answer

Create a folder per team and apply labels at the folder level.

Answer

Run a weekly script to tag untagged resources.

Question 4

A developer wants to create a new project in Google Cloud. They have the Project Creator role at the organization level. Which of the following is NOT required to create a project?

Accepted Answer

The Google Cloud CLI installed locally. The Google Cloud CLI is not required to create a project; you can use the Google Cloud Console or the Cloud Resource Manager API directly. However, you need the resourcemanager.projects.create permission (B), a billing account must be linked (C), and the Cloud Resource Manager API must be enabled (D) — the API is required for project management and is automatically enabled in the Console, but must be explicitly enabled if using the CLI or API directly.

Answer

The resourcemanager.projects.create permission

Answer

A billing account linked to the project

Answer

Enabling the Cloud Resource Manager API

Question 5

An organization has a folder for each department, with multiple projects under each folder. The security team wants to deny the creation of VMs with public IPs in all projects under the 'production' folder, except for the 'web-server' project where public IPs are required. How can they implement this using IAM and Organization Policies?

Accepted Answer

Apply a deny policy at the folder level, then use tags with organization policy conditional enforcement to allow the exception project.. Set an organization policy at the folder level to deny public IPs by default, then use resource tags with conditional enforcement in the organization policy to allow the exception project (e.g., resources tagged with 'allow-public-ip' are exempt).

Answer

Apply an allow policy at the project level and a deny policy at the resource level.

Answer

Apply a deny policy at the organization node and an allow policy at the project level.

Answer

Use IAM roles to restrict VM creation only in the production folder.

Question 6

A company uses a single billing account for multiple projects. The finance team needs to see costs broken down by team (based on a label 'team'). However, some resources are missing the label. What is the most efficient way to identify unlabeled resources and enforce labeling?

Accepted Answer

Export billing data to BigQuery and query for resources missing the label.. Exporting billing data to BigQuery allows querying across all projects for resources missing the 'team' label. This is the most efficient method because it provides a single view of all billed resources, including unlabeled ones, and enables SQL queries to identify gaps. Other options are either manual or don't effectively identify unlabeled resources across projects.

Answer

Use the gcloud command 'gcloud compute instances list --filter labels:team' to list resources with the label.

Answer

Use the Cloud Console to manually check each resource.

Answer

Set up a budget alert for resources without labels.

Question 7

Which GCP support plan provides 15-minute response time for P1 incidents and a Technical Account Manager (TAM)?

Accepted Answer

Premium. Premium Support is the only plan that offers a 15-minute response time for P1 incidents and includes a Technical Account Manager (TAM). Enhanced Support provides a 1-hour P1 response time and does not include a TAM.

Answer

Enhanced

Answer

Standard

Answer

Basic

Question 8

A team wants to enforce that resources in a specific folder must have a label with key 'cost-center' and value 'finance'. Which Google Cloud feature can enforce this requirement?

Accepted Answer

Organization policies with a constraint on labels. Organization policies can enforce this requirement using a custom constraint. For example, a custom boolean constraint with CEL can require that every resource in the folder has the label 'cost-center' with value 'finance'. The predefined 'constraints/gcp.resourceLabels' constraint is a list constraint that limits which labels can be applied, but it does not require a label to be present.

Answer

IAM Conditions

Answer

Active Assist recommendations

Answer

Cloud Audit Logs

Question 9

A company has set a budget at the project level with alerts at 50%, 90%, and 100% of the budget. However, they notice that actual spending is not triggering alerts. What is the most likely cause?

Accepted Answer

The budget was created at the billing account level instead of the project level. If the budget was created at the billing account level instead of the project level, alerts are based on the total billing account spend, not the individual project spend. Since the company set the budget at the project level but might have inadvertently created it at the billing account level, they would not receive alerts for that specific project's spending until the billing account reaches the threshold.

Answer

The project has exceeded the default service quota

Answer

The budget amount is lower than the committed use discount amount

Answer

The budget was created at the project level, but alerts can only be set on billing account budgets

Question 10

A company wants to reduce Compute Engine costs for a production workload that runs 24/7. They are willing to commit to a 1-year term. Which TWO actions would help reduce costs? (Choose TWO.)

Accepted Answer

Use active assist recommendations to rightsize VMs. Committed use discounts (CUDs) provide significant discounts for 1- or 3-year commitments and are ideal for 24/7 workloads. Rightsizing recommendations from Active Assist help reduce costs by resizing VMs to match actual usage. Preemptible VMs are not suitable for 24/7 workloads as they can be terminated at any time. Sustained use discounts are automatic, so there is no action to 'enable' them.

Answer

Change all VMs to n1-standard-1 instances

Answer

Enable sustained use discounts

Answer

Use preemptible VMs instead of regular VMs

Question 11

A company wants to allocate costs for shared resources (e.g., a Cloud SQL instance used by multiple teams) to each team's budget. They also need to filter resources by environment (prod, dev) in the Cost Management dashboard. Which TWO steps should they take? (Choose TWO.)

Accepted Answer

Apply labels to the Cloud SQL instance such as 'team:alpha' and 'environment:prod'. Labels are the primary mechanism for cost allocation and filtering in the Cost Management dashboard. Applying labels like 'team:alpha' and 'environment:prod' to the shared Cloud SQL instance allows you to allocate costs and filter by environment. Additionally, enabling billing export to BigQuery and querying by label is a best practice for detailed cost analysis and reporting, enabling you to allocate shared resource costs to each team's budget effectively. Together, these two steps provide both the necessary metadata (labels) and the tooling to query and allocate costs accurately.

Answer

Create separate Cloud SQL instances for each team

Answer

Purchase committed use discounts for the instance

Answer

Use a budget for each team at the project level

Question 12

An organization wants to group related projects under a common parent for policy enforcement and cost tracking. Which GCP resource hierarchy level should be used to group several projects that belong to the same business unit?

Accepted Answer

Folder. Folders are used to group projects (and other folders) into a hierarchy for applying policies and organizing resources by department, team, or environment.

Answer

Organization node

Answer

Project

Answer

Resource

Question 13

A company has a folder for each department. The Finance team needs to prevent all projects under its folder from creating external IP addresses. What is the most efficient way to enforce this restriction?

Accepted Answer

Apply an organization policy constraint at the folder level. Organization policies can be defined at any level of the resource hierarchy and are inherited by child resources. Setting a constraint at the folder level applies to all projects under that folder.

Answer

Configure a service perimeter in VPC Service Controls

Answer

Use a deny IAM policy at the folder level

Answer

Set a VPC firewall rule in each project

Question 14

An engineer wants to export billing cost data to BigQuery for custom reporting. They have created a BigQuery dataset and linked it to the billing account. However, the billing export tables are not being populated. What is the most likely cause?

Accepted Answer

The BigQuery dataset is in a different location from the billing account's default region. Billing export to BigQuery requires the billing account to be linked to a project that contains the dataset, and the dataset must be in the same location (e.g., US or EU) as the billing account's default region.

Answer

The billing export has not been enabled in the Cloud Console

Answer

The engineer does not have the Billing Administrator IAM role

Answer

The billing account is not linked to the project containing the BigQuery dataset

Question 15

A startup expects unpredictable Compute Engine usage and wants to minimize costs without manual intervention. Which discount type automatically applies to VM instances that run for more than 25% of a month?

Accepted Answer

Sustained use discounts. Sustained use discounts are automatic and apply to Compute Engine instances that run for a significant portion of the month, with no upfront commitment.

Answer

Committed use discounts

Answer

Spot VM discounts

Answer

Preemptible VM discounts

Question 16

An organization uses labels to track cost by environment (dev, test, prod). However, the Finance team notices that some resources are missing the 'env' label. Which service can automatically suggest labeling resources that are missing required labels?

Accepted Answer

Active Assist Recommendations. Active Assist provides recommendations for various optimizations, including labeling. The Recommender can suggest labels for resources that are missing them, based on usage patterns.

Answer

Cost Management dashboard

Answer

Cloud Asset Inventory

Answer

Organization Policy Service

Question 17

A developer needs to estimate the monthly cost of running a set of Compute Engine instances with specific machine types, persistent disks, and network egress before deploying. Which tool should they use?

Accepted Answer

Google Cloud Pricing Calculator. The Google Cloud Pricing Calculator allows users to estimate costs for various services based on their configuration, before deployment.

Answer

Billing export to BigQuery

Answer

Active Assist Recommendations

Answer

Cost Management dashboard

Question 18

A company wants to receive notifications when its monthly spending exceeds 80% of a $10,000 budget. Which set of steps will achieve this?

Accepted Answer

Set up a budget in the Billing section of Cloud Console, define the amount, and add alert thresholds at 80%. Budgets and alerts can be set up in the Cloud Console to trigger email or Pub/Sub notifications at specified thresholds (e.g., 50%, 80%, 90%).

Answer

Create a budget alert in Cloud Monitoring with a metric threshold of 80%

Answer

Use the Google Cloud Pricing Calculator to set a spending limit

Answer

Configure a Cloud Scheduler job to check billing data in BigQuery and send a notification

Question 19

An engineer is designing a resource hierarchy for a multinational company with multiple business units. The company uses Google Workspace. What is the first step in creating the resource hierarchy?

Accepted Answer

Link the Google Workspace account to the organization node. The organization node is automatically created when a Google Workspace or Cloud Identity account is set up. It serves as the root node for the resource hierarchy.

Answer

Create a project for each business unit

Answer

Create a folder for each business unit

Answer

Enable the Cloud Resource Manager API

Question 20

An organization wants to tag resources with key-value metadata for cost allocation purposes (e.g., team: marketing, environment: prod). Which feature should be used?

Accepted Answer

Labels. Labels are key-value pairs that can be applied to resources for billing, filtering, and cost attribution. They are visible in billing reports and the cost management dashboard.

Answer

Organization policy constraints

Answer

IAM custom roles

Answer

Tags (network tags)