Cloud Digital Leader Google Cloud products, services, and solutions Practice Test 6 — 15 Questions

Question 1

A company wants to implement a CI/CD pipeline for their Cloud Run services. Which THREE Google Cloud services should they use? (Choose 3)

Accepted Answer

Cloud Build. Cloud Build is the correct service because it is Google Cloud's fully managed CI/CD platform that can automatically build, test, and deploy code from a repository. For Cloud Run services, Cloud Build can trigger builds on code changes, run tests, and then deploy the container image directly to Cloud Run using a cloudbuild.yaml configuration file.

Answer

Cloud Operations Suite

Answer

Cloud Deployment Manager

Question 2

A developer deploys a Cloud Function with the command shown. The function needs to process a file upload that typically takes 2 minutes. What is the most likely issue?

Accepted Answer

The memory allocation might be too low if the file is large. Option A is correct because the command shown does not specify a memory allocation, so the Cloud Function defaults to 256 MB. If the file being uploaded is large, this low memory can cause the function to run out of memory and fail, even if the timeout is sufficient. Processing a file upload often requires loading the file into memory, making memory a critical resource.

Answer

The runtime python39 is not available

Answer

The function cannot be triggered by HTTP

Answer

The timeout is too short for processing a 2-minute upload

Question 3

A data team has an IAM policy on a BigQuery dataset as shown. Alice needs to run a query that joins across multiple datasets. She receives a permission error. What is the most likely cause?

Accepted Answer

Alice lacks the jobUser role to run queries. Option B is correct because the BigQuery `jobUser` role is required to run query jobs, including those that join across datasets. The IAM policy shown only grants dataset-level permissions (like `dataViewer` or `dataOwner`), but Alice lacks the `jobUser` role at the project level, which is necessary to submit a query job. Without this role, she receives a permission error even if she has read access to the datasets.

Answer

The policy denies all users except Bob

Answer

Alice does not have permission to read the dataset

Answer

Bob’s dataOwner role prevents others from querying

Question 4

A team uses Terraform to create a VPC as shown. They now need to add a Compute Engine instance in the subnet. Which of the following correctly references the subnet?

Accepted Answer

Set `subnetwork = google_compute_subnetwork.subnet.self_link`. Option B is correct because when adding a Compute Engine instance to a subnet in Terraform, you must use the `subnetwork` argument (not `network`) and reference the subnet's `self_link` attribute. The `google_compute_subnetwork` resource's `self_link` provides the full URI required by the instance resource to attach to the correct subnet within the VPC.

Answer

Set `network = google_compute_subnetwork.subnet.self_link`

Answer

Set `subnetwork = google_compute_subnetwork.subnet.name`

Answer

Set `network = google_compute_network.vpc.name` and `subnetwork = google_compute_network.vpc.self_link`

Question 5

A company uses Cloud Storage to store backup files. The files are accessed on average once per year. To minimize storage costs while complying with a 365-day retention policy, which storage class should they use?

Accepted Answer

Archive. Archive storage class is the correct choice because it offers the lowest storage cost for data that is accessed less than once per year, while still meeting the 365-day retention policy. Archive has a 365-day minimum storage duration, which aligns perfectly with the retention requirement, and its retrieval costs are acceptable given the infrequent access pattern.

Answer

Coldline

Answer

Nearline

Answer

Standard

Question 6

A company migrated a microservices application to Google Kubernetes Engine (GKE). They set up an internal HTTP(S) load balancer to route traffic to the services. However, some pods are not receiving traffic. What is the most likely cause?

Accepted Answer

The pods have failing readiness probes that are preventing them from being added to the load balancer's backend endpoints.. Readiness probes determine whether a pod is ready to serve traffic. If they fail, the pod is removed from the endpoint list, causing no traffic. Firewall rules for internal load balancers are typically auto-configured.

Answer

The service type is NodePort instead of LoadBalancer.

Answer

The cluster does not have enough nodes to schedule the pods.

Answer

The firewall rules are not allowing traffic from the load balancer to the nodes.

Question 7

A developer needs to grant a service account the minimum permissions required to publish messages to a Pub/Sub topic. Which IAM role should they assign?

Accepted Answer

roles/pubsub.publisher. The correct answer is C because the `roles/pubsub.publisher` role grants the minimum permissions required to publish messages to a Pub/Sub topic. This role includes the `pubsub.topics.publish` permission, which allows a service account to send messages to a specific topic without granting any other unnecessary permissions like subscribing or managing the topic.

Answer

roles/editor

Answer

roles/pubsub.subscriber

Answer

roles/pubsub.admin

Question 8

A company wants to connect its on-premises network to Google Cloud for consistent low-latency access to resources. They also need to use the same network policies across multiple projects. Which two Google Cloud products should they use?

Accepted Answer

Cloud Interconnect. Cloud Interconnect provides dedicated, low-latency, and consistent connectivity between an on-premises network and Google Cloud, bypassing the public internet. Shared VPC allows the company to centrally define and apply network policies (e.g., firewall rules, routes) across multiple projects from a single host project, ensuring uniform policy enforcement.

Answer

Cloud NAT

Answer

Cloud VPN

Answer

VPC Network Peering

Question 9

A company is planning to migrate a legacy monolithic Linux application to Google Cloud. They want to minimize changes initially but have the flexibility to modernize later. Which three approaches should they consider?

Accepted Answer

Use Cloud Run for stateless containers. Option A is correct because Cloud Run allows you to deploy stateless containers without modifying the application code, minimizing initial changes while providing serverless scalability and the flexibility to modernize later by refactoring into microservices. This approach supports containerized workloads from a legacy monolithic app with minimal lift-and-shift effort.

Answer

Replatform to App Engine Flexible Environment

Answer

Refactor to microservices on GKE

Question 10

A data analytics team uses BigQuery for large-scale queries. They notice that queries are scanning more data than necessary, leading to high costs. Which feature should they implement to reduce the amount of data scanned per query?

Accepted Answer

Partitioning. Partitioning divides a table into segments based on a column (e.g., date), allowing BigQuery to prune partitions during query execution. When a query includes a filter on the partitioning column, BigQuery scans only the relevant partitions, significantly reducing the bytes processed and lowering costs.

Answer

Materialized views

Answer

Streaming inserts

Answer

Clustering

Question 11

A company is running a PostgreSQL database on Cloud SQL and needs to ensure high availability with automatic failover in the event of a zone failure. Which configuration should they use?

Accepted Answer

Enable regional persistent disk and configure a standby instance in a different zone.. Option A is correct because enabling regional persistent disk allows the primary and standby Cloud SQL instances to share the same underlying storage across zones. When a zone failure occurs, the standby instance in a different zone automatically takes over with no data loss, providing high availability with automatic failover.

Answer

Use point-in-time recovery.

Answer

Configure connection pooling.

Answer

Set up a cross-region read replica.

Question 12

A company wants to monitor its Google Cloud spending and receive alerts when costs exceed a threshold. Which two services should they use together?

Accepted Answer

Cloud Billing Budgets and Alerts. Cloud Billing Budgets and Alerts (D) allows you to define a spending threshold and receive notifications when costs approach or exceed that limit. Cloud Monitoring (E) can ingest those budget alert events and trigger additional actions, such as sending notifications via email, SMS, or Pub/Sub, or integrating with incident management tools. Together, they provide a complete cost monitoring and alerting solution.

Answer

Cloud Scheduler

Answer

Cloud Asset Inventory

Answer

Cloud Logging

Question 13

A startup wants to deploy a containerized web application without managing the underlying infrastructure. They want to only focus on code. Which Google Cloud service is most suitable?

Accepted Answer

Cloud Run. Cloud Run is the correct choice because it is a fully managed serverless platform that executes stateless containers in a request-driven environment, abstracting all infrastructure management. This allows the startup to focus solely on code by deploying container images directly from Artifact Registry or Container Registry, with automatic scaling down to zero when not in use.

Answer

Google Kubernetes Engine

Answer

Compute Engine

Answer

App Engine

Question 14

Refer to the exhibit. A user receives this error when trying to SSH into a Compute Engine instance. Which IAM role should be granted to the user?

Accepted Answer

roles/compute.instanceAdmin.v1. The error indicates the user lacks SSH access to the Compute Engine instance. The `roles/compute.instanceAdmin.v1` role includes the `compute.instances.setMetadata` permission, which allows the user to add their SSH public key to the instance's metadata, enabling SSH access. This role also provides broader instance management capabilities, making it the correct choice for resolving SSH connectivity issues.

Answer

roles/compute.osLogin

Answer

roles/iam.serviceAccountUser

Answer

roles/compute.admin

Question 15

Refer to the exhibit. A company configures a lifecycle policy on a Cloud Storage bucket. The bucket contains objects uploaded over the past year with custom time set on each object. After 60 days, what happens to the objects?

Accepted Answer

Objects with custom time more than 30 days ago are deleted.. Option B is correct because the lifecycle policy uses the `customTime` attribute, and the rule is configured to delete objects when `customTime` is older than 30 days. After 60 days from upload, objects with a `customTime` set at upload will have had that timestamp for 60 days, so they are more than 30 days past their `customTime` and are deleted. The policy does not use object age or last access time.

Answer

All objects older than 30 days from now are deleted.

Answer

Objects are deleted after 30 days from the last access.

Answer

The lifecycle policy is invalid because custom time is not supported.