Cloud Digital Leader Google Cloud products, services, and solutions Practice Test 7 — 15 Questions

Question 1

A company wants to monitor its Google Cloud spending and receive alerts when costs exceed a threshold. Which two services should they use together?

Accepted Answer

Cloud Billing Budgets and Alerts. Cloud Billing Budgets and Alerts (D) allows you to define a spending threshold and receive notifications when costs approach or exceed that limit. Cloud Monitoring (E) can ingest those budget alert events and trigger additional actions, such as sending notifications via email, SMS, or Pub/Sub, or integrating with incident management tools. Together, they provide a complete cost monitoring and alerting solution.

Answer

Cloud Scheduler

Answer

Cloud Asset Inventory

Answer

Cloud Logging

Question 2

A startup wants to deploy a containerized web application without managing the underlying infrastructure. They want to only focus on code. Which Google Cloud service is most suitable?

Accepted Answer

Cloud Run. Cloud Run is the correct choice because it is a fully managed serverless platform that executes stateless containers in a request-driven environment, abstracting all infrastructure management. This allows the startup to focus solely on code by deploying container images directly from Artifact Registry or Container Registry, with automatic scaling down to zero when not in use.

Answer

Google Kubernetes Engine

Answer

Compute Engine

Answer

App Engine

Question 3

Refer to the exhibit. A user receives this error when trying to SSH into a Compute Engine instance. Which IAM role should be granted to the user?

Accepted Answer

roles/compute.instanceAdmin.v1. The error indicates the user lacks SSH access to the Compute Engine instance. The `roles/compute.instanceAdmin.v1` role includes the `compute.instances.setMetadata` permission, which allows the user to add their SSH public key to the instance's metadata, enabling SSH access. This role also provides broader instance management capabilities, making it the correct choice for resolving SSH connectivity issues.

Answer

roles/compute.osLogin

Answer

roles/iam.serviceAccountUser

Answer

roles/compute.admin

Question 4

Refer to the exhibit. A company configures a lifecycle policy on a Cloud Storage bucket. The bucket contains objects uploaded over the past year with custom time set on each object. After 60 days, what happens to the objects?

Accepted Answer

Objects with custom time more than 30 days ago are deleted.. The lifecycle policy uses the `customTime` attribute, and the rule is configured to delete objects when `customTime` is older than 30 days. After 60 days from upload, objects with a `customTime` set at upload will have had that timestamp for 60 days, so they are more than 30 days past their `customTime` and are deleted. The policy does not use object age or last access time.

Answer

All objects older than 30 days from now are deleted.

Answer

Objects are deleted after 30 days from the last access.

Answer

The lifecycle policy is invalid because custom time is not supported.

Question 5

A multinational retail company has an on-premises infrastructure with a mix of Windows and Linux servers. They are planning to migrate their e-commerce platform to Google Cloud to take advantage of scalability and reduce latency. The platform consists of a web frontend (Apache), a backend API (Node.js), and a MySQL database. They want to minimize downtime during the migration. They have a limited budget and need a solution that is cost-effective and quick to implement. The IT team has experience with containers but prefers to avoid managing Kubernetes. Which approach should they take?

Accepted Answer

Migrate the frontend to App Engine Standard, the backend to Cloud Run, and the database to Cloud SQL with read replicas.. It combines fully managed, serverless services (App Engine Standard for the web frontend and Cloud Run for the backend API) with Cloud SQL for the database, which meets the requirements of minimizing downtime, being cost-effective, and avoiding Kubernetes management. App Engine Standard and Cloud Run automatically scale to zero when not in use, reducing costs, and Cloud SQL with read replicas provides high availability and low-latency reads without complex orchestration. This approach also allows for a gradual migration with minimal disruption, as the existing code can be adapted with minimal changes.

Answer

Use Compute Engine for the web frontend, Cloud Functions for the backend API, and Cloud Spanner for the database.

Answer

Lift and shift all components to Compute Engine with an autoscaling managed instance group, and migrate the database to Cloud SQL.

Answer

Containerize all components using GKE, use Cloud SQL for the database, and deploy using a CI/CD pipeline.

Question 6

A company needs to analyze streaming data from IoT devices in real time. Which Google Cloud service should they use as the primary ingestion and analysis pipeline?

Accepted Answer

Dataflow. Dataflow is the correct choice because it provides a unified stream and batch processing model based on Apache Beam, enabling real-time ingestion and analysis of streaming IoT data with exactly-once processing semantics and automatic scaling. BigQuery is a data warehouse for analytics on stored data, not a real-time ingestion pipeline. Cloud Storage is an object store for static data, not a streaming pipeline. Cloud Pub/Sub is a messaging service for ingestion but lacks built-in analysis capabilities.

Answer

BigQuery

Answer

Cloud Storage

Answer

Cloud Pub/Sub

Question 7

A company uses Cloud CDN to deliver static content. They notice that some content is being served stale despite a TTL of 1 hour. What should they check to ensure content is always fresh?

Accepted Answer

Verify that the origin server sets appropriate Cache-Control headers (e.g., max-age=3600).. Cloud CDN relies on the Cache-Control: max-age directive from the origin server to determine how long content should be considered fresh. If the origin does not set max-age=3600 (or a comparable value), Cloud CDN may serve stale content even if the CDN TTL is configured to 1 hour, as the CDN respects the origin's cache headers by default. Ensuring the origin sets appropriate Cache-Control headers guarantees that Cloud CDN caches content for the intended duration.

Answer

Enable cache invalidation for all objects daily.

Answer

Increase the TTL in the CDN configuration to 24 hours.

Answer

Use Cloud Storage as the origin and set caching to 'public'.

Question 8

A project manager wants a cost-effective way to run batch processing jobs that run for a few hours each night. The jobs are fault-tolerant and can be interrupted. Which Compute Engine option is most suitable?

Accepted Answer

Preemptible VMs. Preemptible VMs are Compute Engine instances that last up to 24 hours and can be terminated at any time by Google Cloud, making them ideal for fault-tolerant, interruptible batch jobs that run for a few hours each night. They offer up to 80% cost savings compared to regular VMs, which aligns perfectly with the project manager's requirement for a cost-effective solution.

Answer

N2 high-CPU VMs

Answer

Regular VMs with committed use discounts

Answer

Sole-tenant nodes

Question 9

A retail company wants to migrate its on-premises e-commerce platform to Google Cloud. The application is stateless and runs on virtual machines. The company wants to minimize operational overhead and allow the application to automatically scale based on CPU utilization. Which Google Cloud service should they use?

Accepted Answer

Compute Engine with managed instance groups and autoscaling. The application runs on virtual machines and is stateless, making Compute Engine with managed instance groups and autoscaling the most direct fit. Managed instance groups automatically handle scaling based on CPU utilization without requiring containerization or code changes, minimizing operational overhead while preserving the existing VM-based architecture.

Answer

Google Kubernetes Engine (GKE)

Answer

Cloud Run

Answer

App Engine Standard Environment

Question 10

A healthcare organization needs to store and analyze large volumes of patient diagnostic imaging data (e.g., DICOM files) in Google Cloud. The data must be stored in a cost-effective manner for long-term retention, with the ability to query metadata and run analytics using SQL-like queries. Which combination of Google Cloud services best meets these requirements?

Accepted Answer

Cloud Storage (Nearline) for images, BigQuery for metadata analytics. Cloud Storage Nearline provides cost-effective long-term storage for large imaging files with retrieval flexibility, while BigQuery enables SQL-based analytics on metadata extracted from DICOM headers, meeting both retention and query requirements without the cost of standard storage or the complexity of transactional databases.

Answer

Cloud Storage (Standard) for images, Datastore for metadata

Answer

Cloud Storage (Archive) for images, Cloud Spanner for metadata

Answer

Cloud Filestore for images, Cloud SQL for metadata

Question 11

A company is designing a disaster recovery plan for its critical application running on Google Kubernetes Engine (GKE) in us-central1. The application uses Cloud SQL (MySQL) as its database. Which TWO actions should the company take to achieve a Recovery Point Objective (RPO) of less than 5 minutes and a Recovery Time Objective (RTO) of less than 1 hour in the event of a regional outage? (Choose two.)

Accepted Answer

Configure Cloud SQL for cross-region replication using a read replica in a different region.. Option C is correct because Cloud SQL cross-region replication maintains a continuously updated read replica in a different region, so in a regional outage the replica can be promoted with only seconds to minutes of data loss, satisfying the RPO of under 5 minutes. Option D is correct because deploying a GKE cluster in a second region and using Multi-cluster Ingress provides a pre-provisioned, load-balanced failover target so the application can be served from the surviving region within the 1-hour RTO. Option A is incorrect because 4-hour automated backups cannot meet an RPO of less than 5 minutes, since up to 4 hours of data could be lost. Option B is incorrect because a regional registry in the same region would itself be unavailable during a regional outage and does not address database recovery or RPO/RTO. Option E is incorrect because Cloud CDN only caches static content and does nothing to recover the GKE workload or Cloud SQL database during a regional failure.

Answer

Use Cloud SQL's automated backups with a backup schedule every 4 hours.

Answer

Store container images in a regional registry in the same region.

Answer

Use Cloud CDN to cache static content.

Question 12

A company runs a data processing pipeline on a single Compute Engine instance in us-west1-a. The instance reads data from Cloud Storage, processes it, and writes results back to Cloud Storage. The pipeline runs once per day and takes about 6 hours. Recently, the instance has been experiencing out-of-memory errors, causing the pipeline to fail. The operations team wants a cost-effective solution that can handle varying data volumes without manual intervention. They also want to ensure the pipeline completes within the daily window. What should they do?

Accepted Answer

Redesign the pipeline to run on Cloud Dataflow and use batch mode with autoscaling.. The correct option is B: redesigning the pipeline to run on Cloud Dataflow in batch mode with autoscaling directly addresses the out-of-memory failures and varying data volumes, because Dataflow dynamically scales worker instances up or down based on workload and distributes processing across many workers, so no single machine's memory limits the job. It is also cost-effective for a once-per-day, ~6-hour job since batch mode only consumes resources while the job runs and can complete within the daily window. Option A does not fit because a managed instance group autoscaling on CPU still runs the pipeline on individual VMs and does not solve the per-instance memory ceiling or the need to parallelize the data processing. Option C is wrong because streaming mode is designed for continuously arriving data and would keep resources running and cost more for a daily batch pipeline. Option D only temporarily relieves memory pressure and does not handle varying data volumes or provide automatic scaling.

Answer

Use a managed instance group with autoscaling based on CPU utilization.

Answer

Redesign the pipeline to run on Cloud Dataflow and use streaming mode.

Answer

Increase the memory of the existing instance to a larger machine type.

Question 13

A media company has a web application that serves video content globally. The application is deployed on Compute Engine instances behind a TCP load balancer in a single region. Users in distant regions experience high latency. The company wants to improve performance for all users while keeping operational overhead low. They also need to handle sudden spikes in traffic during live events. What should they do?

Accepted Answer

Deploy additional instances in multiple regions and use a global HTTP(S) load balancer with Cloud CDN.. Deploying instances in multiple regions and using a global HTTP(S) load balancer with Cloud CDN reduces latency by serving content from edge locations close to users. Cloud CDN caches video content at Google's global edge points of presence (PoPs), while the global HTTP(S) load balancer provides anycast IP-based traffic distribution across regions, handling traffic spikes through automatic scaling and distributed capacity.

Answer

Use Cloud Run for the application and enable automatic scaling globally.

Answer

Move the application to Google Kubernetes Engine and use horizontal pod autoscaling.

Answer

Increase the machine type of existing instances and add more instances in the same region.

Question 14

A company wants to monitor the health and performance of their applications running on Google Cloud. Which two Google Cloud services should they use together for comprehensive observability?

Accepted Answer

Cloud Monitoring. Cloud Monitoring and Cloud Logging together form the core of Google Cloud's observability stack. Cloud Monitoring collects metrics, uptime checks, and alerting policies, while Cloud Logging ingests, stores, and analyzes log data. Combined, they provide the metrics, logs, and alerting needed to comprehensively monitor application health and performance.

Answer

Cloud Profiler

Answer

Cloud Debugger

Answer

Cloud Trace

Question 15

A retail company runs a customer-facing web application on Compute Engine instances. The security team wants to protect the application from common web exploits such as SQL injection and cross-site scripting, and also wants to mitigate distributed denial-of-service (DDoS) attacks without modifying the application code. Which Google Cloud service should the company implement to meet these requirements?

Accepted Answer

Cloud Armor. Cloud Armor is the correct choice because it is the Google Cloud edge security service that integrates with external HTTP(S) load balancers to deliver WAF filtering and DDoS protection. Its preconfigured rules defend against OWASP Top 10 threats like SQL injection and cross-site scripting, and its rate-based and adaptive protection rules absorb volumetric attacks. Because enforcement happens at the load balancer, the application itself remains unchanged, meeting every requirement in the scenario.

Answer

VPC Service Controls

Answer

Cloud Identity-Aware Proxy

Answer

Cloud NAT