Cloud Digital Leader Google Cloud products, services, and solutions Practice Test 2 — 15 Questions

Question 1

A company wants to use pre-trained Google AI models to add vision capabilities to their application — specifically to detect objects in images and extract text from scanned documents — without training their own models. Which Google Cloud APIs provide these capabilities?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Cloud Vision API for object detection and OCR; Cloud Document AI for structured document extraction.. Cloud Vision API provides pre-trained models for object detection and OCR (Optical Character Recognition) to extract text from images, while Cloud Document AI specializes in extracting structured data (e.g., fields, tables) from scanned documents. Both services require no custom training, aligning with the company's requirement to use pre-trained Google AI models.

Answer

BigQuery ML for both use cases — it trains vision models on image data stored in BigQuery.

Answer

Vertex AI AutoML Vision — train a custom model on your own images.

Answer

Cloud Natural Language API for text extraction from images.

Question 2

A company runs many containerized microservices that need orchestration — automatic scheduling, scaling, self-healing, and rolling updates. They want a managed service so they don't maintain the control plane themselves. Which Google Cloud service is purpose-built for this?

Accepted Answer

Google Kubernetes Engine (GKE). Google Kubernetes Engine (GKE) is a managed Kubernetes service that provides automatic orchestration, scaling, self-healing, and rolling updates for containerized microservices. It fully manages the Kubernetes control plane, including the API server, etcd, and scheduler, so the customer does not have to maintain them. This makes GKE the purpose-built solution for the described requirements.

Answer

Cloud Run

Answer

Cloud Composer

Answer

Compute Engine with managed instance groups

Question 3

A development team builds a mobile app using Firebase. They need a real-time database that syncs data across all connected clients instantly (e.g., a collaborative to-do app where all users see updates in real-time). Which Firebase/Google Cloud service provides this?

Accepted Answer

Cloud Firestore or Firebase Realtime Database for real-time data sync across all connected clients.. Cloud Firestore and Firebase Realtime Database are the only Firebase/Google Cloud services that provide real-time data synchronization across all connected clients. They use persistent WebSocket connections or HTTP long-polling to push updates instantly to every subscribed client, making them ideal for collaborative apps like a shared to-do list.

Answer

Cloud SQL with read replicas to distribute updates to clients.

Answer

BigQuery streaming inserts for real-time data delivery to mobile clients.

Answer

Cloud Pub/Sub subscriptions on the mobile clients.

Question 4

A company's web application faces DDoS attacks and SQL injection attempts from the internet. They need a service that sits in front of their load balancer to block malicious traffic before it reaches their application servers. Which Google Cloud service provides this protection?

Accepted Answer

Cloud Armor. Cloud Armor is Google Cloud's web application firewall (WAF) and DDoS mitigation service that operates at the edge of Google's network, in front of the load balancer. It can filter incoming traffic based on Layer 7 rules (e.g., SQL injection patterns, cross-site scripting) and Layer 3/4 conditions (e.g., IP reputation, rate limiting), blocking malicious requests before they reach the load balancer or application servers. This makes it the correct choice for protecting against both DDoS attacks and SQL injection attempts at the network perimeter.

Answer

Cloud Firewall (VPC firewall rules)

Answer

Cloud VPN

Answer

Cloud Identity-Aware Proxy (IAP)

Question 5

An enterprise wants employees to access internal web applications securely from any location (including remote work from home) without using a VPN. Employees should only access apps they're authorized for, based on their identity and device context. Which Google Cloud service enables this zero-trust access model?

Accepted Answer

Cloud Identity-Aware Proxy (IAP). Cloud Identity-Aware Proxy (IAP) is the correct service because it enforces zero-trust access by verifying a user's identity and device context before granting access to internal web applications, without requiring a VPN. It uses Google's BeyondCorp model to authenticate and authorize each request based on identity and context, allowing secure access from any location.

Answer

Cloud VPN with split tunneling for internal application access.

Answer

Cloud Armor IP allowlist to restrict access to corporate office IP ranges.

Answer

Cloud Load Balancing with SSL termination.

Question 6

A company runs workloads across Google Cloud and on-premises environments. They want a single management plane to deploy and manage containerized applications consistently across both environments using the same tooling and policies. Which Google Cloud product provides this unified hybrid/multi-cloud management?

Accepted Answer

Anthos — Google's hybrid and multi-cloud application management platform.. Anthos is Google Cloud's hybrid and multi-cloud application management platform that provides a single control plane for deploying and managing containerized applications consistently across on-premises and cloud environments. It uses GKE on-prem and Anthos Config Management to enforce uniform policies, service mesh, and CI/CD pipelines, enabling the unified management described in the scenario.

Answer

Cloud Interconnect — it connects on-premises to Google Cloud.

Answer

Google Distributed Cloud — runs Google Cloud services inside the customer's data center.

Answer

Cloud Deployment Manager — deploys resources via infrastructure-as-code templates.

Question 7

A company wants to send transactional emails (receipts, password resets) and marketing emails at scale from their application. Which approach is recommended when using Google Cloud?

Accepted Answer

Integrate a third-party email delivery service (e.g., SendGrid, Mailgun) with the GCP application.. Google Cloud does not provide a native transactional email service, so integrating a dedicated third-party email delivery service like SendGrid or Mailgun is the recommended approach. These services handle deliverability, reputation management, and compliance with email standards (e.g., SPF, DKIM, DMARC), which are critical for high-volume transactional and marketing emails. Using GCP's native services like Cloud Functions or App Engine to send emails directly would rely on SMTP relays that often have strict sending limits and poor deliverability.

Answer

Use Gmail to manually send all transactional emails.

Answer

Use BigQuery to store and send emails directly to customers.

Answer

Deploy an SMTP server on Compute Engine and send emails directly from GCP IP addresses.

Question 8

A data engineering team needs to orchestrate a complex data pipeline that involves multiple steps: extracting data from various sources, transforming it with Dataflow, loading it into BigQuery, and running validation jobs — all in a specific sequence with retry logic and scheduling. Which Google Cloud service manages this workflow orchestration?

Accepted Answer

Cloud Composer (managed Apache Airflow). Cloud Composer is a managed Apache Airflow service that provides workflow orchestration, including dependency management, retry logic, and scheduling for complex pipelines. It allows you to define a DAG (Directed Acyclic Graph) that sequences tasks like Dataflow extraction, BigQuery loading, and validation jobs, with built-in retry and scheduling capabilities.

Answer

Cloud Scheduler — cron-based job scheduling.

Answer

Cloud Dataflow — stream and batch processing.

Answer

Cloud Functions — event-driven function execution.

Question 9

A company wants its internal applications to be accessible via a custom domain name (e.g., `app.company.com`) that routes to their Google Cloud load balancer. Which Google Cloud service manages DNS records for this?

Accepted Answer

Cloud DNS. Cloud DNS is the correct service because it is Google Cloud's managed DNS service that translates human-readable domain names (like app.company.com) into IP addresses. It allows you to create and manage DNS records (such as A, CNAME, or ALIAS records) that point your custom domain to the IP address or hostname of your Google Cloud load balancer, enabling traffic routing to your internal applications.

Answer

Cloud CDN — it manages domain names for cached content.

Answer

Cloud Load Balancing — it automatically assigns domain names.

Answer

Cloud Armor — it routes traffic based on domain names.

Question 10

A company wants to use Google Cloud's Generative AI capabilities to build an internal assistant that can answer questions about company policies using documents stored in Google Drive. Which Google Cloud product provides pre-built infrastructure for building this type of AI application?

Accepted Answer

Vertex AI Agent Builder with Gemini and document-grounded search (RAG).. Vertex AI Agent Builder with Gemini and document-grounded search (RAG) is correct because it provides pre-built infrastructure for building a generative AI assistant that retrieves information from enterprise documents. It combines Gemini's large language model with Retrieval-Augmented Generation (RAG) to ground answers in company policy documents stored in Google Drive, without requiring custom model training or manual infrastructure setup.

Answer

BigQuery ML — train a custom language model on company policy documents.

Answer

Cloud Natural Language API — it reads and summarizes documents automatically.

Answer

Cloud Translation API — it translates policy documents into the user's language.

Question 11

A company currently uses Hadoop and Spark for batch data processing on a large on-premises cluster. They want to migrate these workloads to Google Cloud with minimal rewriting of existing Spark and Hadoop jobs. Which Google Cloud service is the best fit?

Accepted Answer

Cloud Dataproc — managed Apache Spark and Hadoop with minimal code changes.. Cloud Dataproc is a managed service for running Apache Spark and Hadoop clusters on Google Cloud. It supports the same open-source versions of Spark and Hadoop that the company currently uses, allowing them to migrate their existing batch processing workloads with minimal code changes. This makes it the best fit for the stated requirement of minimal rewriting.

Answer

Cloud Dataflow — it runs all Spark and Hadoop jobs natively.

Answer

BigQuery — it runs Spark SQL queries via BigQuery Spark stored procedures.

Answer

Google Kubernetes Engine — deploy Spark clusters on Kubernetes.

Question 12

A development team needs a managed relational database (MySQL or PostgreSQL) for their web application. They want automatic backups, patching, and high availability without managing a database server. Which Google Cloud service provides this?

Accepted Answer

Cloud SQL. Cloud SQL is a fully managed relational database service for MySQL, PostgreSQL, and SQL Server. It handles automated backups, patching, and high availability (via regional failover replicas) without requiring the user to manage the underlying database server, directly matching the team's requirements.

Answer

Compute Engine with a self-managed MySQL installation.

Answer

Cloud Bigtable

Answer

Cloud Storage

Question 13

A power utility company collects electricity meter readings from 10 million smart meters every 15 minutes — generating billions of rows of time-series data per year. They need to query this data to detect anomalies and patterns. Which Google Cloud database is optimized for this massive-scale time-series IoT data?

Accepted Answer

Cloud Bigtable. Cloud Bigtable is a fully managed, scalable NoSQL database designed for large analytical and operational workloads, making it ideal for ingesting and querying high-throughput time-series data from millions of IoT devices. It supports sub-10ms latency on queries, automatic sharding, and seamless integration with Google Cloud's data analytics ecosystem (e.g., BigQuery, Dataflow), which is critical for detecting anomalies and patterns across billions of rows of meter readings.

Answer

Cloud SQL (PostgreSQL)

Answer

Firestore

Answer

Cloud Storage (CSV files)

Question 14

A developer wants to run a small piece of code that resizes images whenever a new image is uploaded to Cloud Storage. The code runs for less than a second and should only be triggered by the upload event. No always-on server is needed. Which Google Cloud service is ideal?

Accepted Answer

Cloud Functions triggered by Cloud Storage object creation events.. Cloud Functions is the ideal serverless compute service for event-driven, short-lived tasks like image resizing triggered by Cloud Storage uploads. It automatically scales to zero when idle, charges only for execution time (sub-second in this case), and natively binds to Cloud Storage object creation events via the `google.storage.object.finalize` trigger, eliminating the need for any always-on infrastructure.

Answer

A Compute Engine VM that runs continuously, checking for new uploads every minute.

Answer

Cloud Run with a permanent container that listens for uploads.

Answer

BigQuery scheduled query that processes new uploads daily.

Question 15

A development team uses Cloud Build to automatically build, test, and create container images whenever code is pushed to their repository. The resulting Docker images need to be stored securely and made available to their GKE deployment pipelines. Which Google Cloud service stores and manages these container images?

Accepted Answer

Artifact Registry. Artifact Registry is the correct service because it is a fully managed, private container registry designed to store, manage, and secure Docker images and other artifacts. It integrates natively with Cloud Build for pushing images and with GKE for pulling them, supporting vulnerability scanning and IAM-based access control.

Answer

Cloud Storage bucket with a `containers/` folder.

Answer

Cloud SQL — storing build artifacts in a relational database.

Answer

Cloud Source Repositories — the code repository stores both source code and container images.