Cloud Digital Leader How Google Cloud Resources Are Managed Practice Test 2 — 15 Questions

Question 1

A startup wants to organize its Google Cloud resources by separating development, staging, and production environments. They also need to apply common IAM policies across all projects in each environment. Which resource hierarchy component should they use to group projects per environment?

Accepted Answer

Folders. Folders allow grouping of projects and are used to reflect organizational structure or environment separation. IAM policies applied at the folder level are inherited by all projects within that folder.

Answer

Organization node

Answer

Tags

Answer

Labels

Question 2

A company needs to estimate the monthly cost of running a set of Compute Engine instances, including network egress and Cloud Storage usage, before deploying the architecture. Which tool should they use?

Accepted Answer

Google Cloud Pricing Calculator. The Google Cloud Pricing Calculator allows users to input their expected resource usage and receive a cost estimate before deployment.

Answer

Active Assist recommendations

Answer

Budget alerts

Answer

Cost Management dashboard

Question 3

An engineer wants to analyze historical spending trends and break down costs by project, region, and service. They need to run complex SQL queries on the billing data. What is the recommended approach?

Accepted Answer

Enable billing export to BigQuery and query the exported tables. Billing export to BigQuery sends detailed billing information (e.g., usage, cost, project, labels) into BigQuery tables, enabling complex SQL analysis.

Answer

Set up a budget alert to receive cost reports daily

Answer

Use the Cloud Billing API to programmatically fetch cost data

Answer

Download the monthly invoice CSV and import it into Sheets

Question 4

An organization wants to ensure that all projects in the organization have a specific IAM policy applied, such as restricting the use of certain machine series. They also need to enforce this policy on new projects automatically. Where should they set this policy?

Accepted Answer

At the organization node. Organization policies applied at the organization node are inherited by all projects under it, ensuring uniform enforcement across the entire hierarchy.

Answer

At the project level for each project

Answer

Using tags on individual resources

Answer

At the folder level for each environment

Question 5

A company runs Compute Engine instances that experience stable, predictable usage. They want to reduce costs by committing to a 1-year term for these virtual machines. Which discount type should they use?

Accepted Answer

Committed use discounts. Committed use discounts (CUDs) allow customers to commit to a certain amount of resources (vCPUs, memory) for 1 or 3 years in exchange for a significant discount. This is ideal for predictable workloads.

Answer

Preemptible VMs

Answer

Sole-tenant nodes

Answer

Sustained use discounts

Question 6

An organization wants to tag resources with environment (dev/staging/prod) and cost center (e.g., 'marketing', 'engineering') for cost allocation and filtering in billing reports. Which feature should they use?

Accepted Answer

Labels. Labels are key-value pairs that can be attached to resources and are used for billing cost allocation, filtering in cost reports, and resource grouping. Tags are for organization policy enforcement and network firewall rules.

Answer

Organization policy tags

Answer

Folders

Answer

Network tags

Question 7

A team notices that their Compute Engine instances are consistently running at low CPU utilization. They want to reduce costs by receiving recommendations to resize or stop idle VMs. Which service provides these recommendations?

Accepted Answer

Active Assist. Active Assist includes Recommender, which provides cost optimization recommendations such as rightsizing VMs, identifying idle resources, and suggesting committed use discounts.

Answer

Cost Management dashboard

Answer

Cloud Scheduler

Answer

Cloud Monitoring

Question 8

An organization has multiple projects in Google Cloud. They want to enforce a policy that prevents the creation of Compute Engine instances with more than 8 vCPUs in any project under a specific folder, except for a few exempted projects. How can they achieve this with minimal overhead?

Accepted Answer

Use organization policy with tags: define a tag 'exempt' and attach it to exempted projects; set the policy condition to apply unless the resource has the tag.. Using organization policy constraints with tags allows conditional enforcement. By attaching a tag to exempted projects and using conditions in the policy, they can apply the restriction to most projects while allowing exceptions.

Answer

Use IAM conditions with a custom role to deny creation of large instances.

Answer

Create a folder for exempted projects and apply a allow policy to that folder.

Answer

Apply a custom organization policy at the folder level without tags, and add exceptions in each project individually.

Question 9

A company needs to track spending per team by tagging resources with a 'team' label. However, some engineers are not applying consistent labels, leading to untagged resources. How can they enforce that all new resources are created with a specific label?

Accepted Answer

Use a custom organization policy to require the 'team' label on all resources.. Organization policies can be used to enforce that resources must have certain labels. This can be done using the 'constraints/compute.requireOsLogin' for Compute Engine, but more generally, the 'constraints/iam.requireLabels' or custom constraints. However, the simplest way is to use a policy that requires a label key 'team' on all resources.

Answer

Set up a budget alert to notify when untagged resources are created.

Answer

Create a folder per team and apply labels at the folder level.

Answer

Run a weekly script to tag untagged resources.

Question 10

A developer wants to create a new project in Google Cloud. They have the Project Creator role at the organization level. Which of the following is NOT required to create a project?

Accepted Answer

The Google Cloud CLI installed locally. To create a project, you need the resourcemanager.projects.create permission and a billing account must be linked. However, enabling APIs is not required at project creation; it can be done later.

Answer

The resourcemanager.projects.create permission

Answer

A billing account linked to the project

Answer

Enabling the Cloud Resource Manager API

Question 11

A company has a Premium support plan. They experience a critical production outage and need immediate assistance. What is the guaranteed response time for a P1 (Priority 1) case?

Accepted Answer

15 minutes. Premium support offers a 15-minute response time for P1 cases, along with a Technical Account Manager (TAM) and other benefits.

Answer

4 hours

Answer

8 hours

Answer

1 hour

Question 12

An engineer needs to increase the default limit of 24 CPUs per region for Compute Engine instances in their project. They have already consumed 20 CPUs and need to launch a new instance with 8 CPUs. What should they do?

Accepted Answer

Request a quota increase in the Cloud Console Quotas page.. Service quotas are per-project and per-region limits. The engineer must request a quota increase via the Quotas page in the Cloud Console before exceeding the limit.

Answer

Launch the instance anyway; Google Cloud will automatically increase the quota.

Answer

Create a new project and launch the instance there.

Answer

Use a different region with available quota.

Question 13

A company wants to set up cost controls and analysis. They need to receive notifications when spending exceeds certain thresholds, and also be able to run custom queries on billing data. Which TWO actions should they take? (Choose 2)

Accepted Answer

Create a budget and set alert thresholds. To receive notifications at thresholds, they need to create a budget and set alerts. To run custom queries, they should enable billing export to BigQuery.

Answer

Set up a Pub/Sub topic for billing alerts

Answer

Activate the Cost Management dashboard

Answer

Enable billing export to Cloud Storage

Question 14

An organization wants to enforce that all Compute Engine instances must have a label 'environment' set to 'production', 'staging', or 'development'. They also want to ensure that instances in the 'production' folder cannot be created with public IP addresses. Which THREE steps should they take? (Choose 3)

Accepted Answer

Create an organization policy constraint that prohibits external IP addresses on Compute Engine instances in the production folder.. To enforce labels, they should create a custom organization policy constraint that requires the label. To restrict public IPs on instances under the production folder, they can use a VPC Service Controls perimeter or a custom constraint. However, VPC Service Controls restricts data exfiltration but not public IPs directly. A more direct approach is to use an organization policy to restrict external IPs on instances.

Answer

Use IAM conditions to deny the compute.instances.create permission without the label.

Answer

Set up VPC Service Controls to restrict access to the production VPC.

Answer

Create a folder for each environment and apply the label automatically using a Cloud Function triggered by Resource Manager events.

Question 15

A company needs to reduce costs on Compute Engine instances that run batch jobs for varying durations. They can tolerate interruptions and do not require a specific uptime guarantee. Which TWO instance types or purchasing options should they consider? (Choose 2)

Accepted Answer

Spot VMs. Preemptible VMs can be terminated at any time but are significantly cheaper, suitable for fault-tolerant batch jobs. Spot VMs are similar to preemptible but with no maximum runtime and often lower price. Both are ideal for batch workloads that can handle interruptions.

Answer

Sole-tenant nodes

Answer

Committed use discounts

Answer

Sustained use discounts