Cloud Digital Leader Multiple Select — 30 Questions

Question 1

A company's application uses a relational database for transactional data (orders, payments) and a separate NoSQL database for user session data and product catalog. Why might an architect choose two different database types for the same application?

Accepted Answer

Different data patterns suit different database types — relational databases for ACID-compliant transactions, NoSQL for high-throughput flexible-schema lookups. This is called polyglot persistence.. Option B is correct because it describes polyglot persistence, where an application uses multiple database types to handle different data patterns optimally. Relational databases enforce ACID properties (Atomicity, Consistency, Isolation, Durability) essential for transactional data like orders and payments, ensuring data integrity. NoSQL databases, such as document stores or key-value stores, provide high throughput and flexible schemas ideal for session data and product catalogs, which require fast lookups and can tolerate eventual consistency.

Answer

Using two databases reduces costs by splitting storage between cheaper providers.

Answer

Two databases provide automatic redundancy — if one fails, the other takes over.

Question 2

A company is designing a disaster recovery plan for its critical application running on Google Kubernetes Engine (GKE) in us-central1. The application uses Cloud SQL (MySQL) as its database. Which TWO actions should the company take to achieve a Recovery Point Objective (RPO) of less than 5 minutes and a Recovery Time Objective (RTO) of less than 1 hour in the event of a regional outage? (Choose two.)

Accepted Answer

Configure Cloud SQL for cross-region replication using a read replica in a different region.. Option C is correct because Cloud SQL cross-region replication using a read replica in a different region provides asynchronous replication with a typical lag of under 5 minutes, enabling an RPO of less than 5 minutes. In a regional outage, you can promote the read replica to a primary instance in the other region, achieving an RTO of under 1 hour by failing over the application's database connection.

Answer

Use Cloud SQL's automated backups with a backup schedule every 4 hours.

Answer

Store container images in a regional registry in the same region.

Answer

Use Cloud CDN to cache static content.

Question 3

A financial services company must comply with strict data residency regulations. Which TWO cloud features help meet compliance requirements?

Accepted Answer

Data location controls. Data location controls (Option A) allow administrators to explicitly restrict where data is stored and processed, ensuring compliance with data residency regulations that mandate data remain within specific geographic boundaries. Customer-managed encryption keys (Option E) enable the organization to control who has access to the encryption keys, ensuring that even if data is stored in a cloud provider's infrastructure, the provider cannot decrypt it without the customer's permission, which is critical for meeting regulatory requirements.

Answer

Open source software

Answer

Public internet access

Answer

Single data center footprint

Question 4

Which TWO of the following are common use cases for deploying workloads to the cloud? (Choose 2)

Accepted Answer

Running a global SaaS application for customers worldwide. Option D is correct because cloud platforms like AWS, Azure, and GCP provide global infrastructure with multiple regions and edge locations, enabling SaaS applications to serve customers worldwide with low latency via CDNs and load balancers. Option E is correct because cloud storage services (e.g., Amazon S3, Azure Blob Storage) offer durable, cost-effective off-site backup and automated disaster recovery through replication across Availability Zones or Regions, often with 99.999999999% durability.

Answer

High-frequency trading requiring microsecond latency

Answer

Air-gapped, classified workloads with no internet connection

Answer

Running a legacy mainframe application that requires dedicated hardware

Question 5

Which THREE of the following are common benefits of adopting a cloud infrastructure compared to on-premises? (Choose 3)

Accepted Answer

Ability to scale globally in minutes. Option A is correct because cloud infrastructure enables rapid global scaling by provisioning resources across multiple geographic regions within minutes, leveraging automated orchestration and APIs. This is a fundamental advantage over on-premises setups, which require lengthy procurement, shipping, and manual configuration to expand capacity.

Answer

Elimination of all security vulnerabilities

Answer

Complete transfer of security responsibility to the provider

Question 6

A large enterprise is evaluating moving its data analytics workloads to Google Cloud. Which TWO factors should they consider when comparing on-premises costs to cloud costs? (Choose two.)

Accepted Answer

Elimination of hardware maintenance labor costs. Option A is correct because moving analytics workloads to Google Cloud eliminates the need for the enterprise to maintain its own hardware, including servers, storage, and networking equipment. This removes direct labor costs for tasks such as hardware troubleshooting, firmware updates, and physical repairs, which are instead handled by Google's infrastructure teams. This is a direct operational expenditure (OpEx) saving compared to the capital expenditure (CapEx) and ongoing maintenance of on-premises hardware.

Answer

Increased latency due to network distance

Answer

Licensing costs for software that may not be compatible with cloud

Answer

Requirement to redesign applications for cloud-native services

Question 7

A company is planning to migrate a legacy monolithic Linux application to Google Cloud. They want to minimize changes initially but have the flexibility to modernize later. Which three approaches should they consider?

Accepted Answer

Use Cloud Run for stateless containers. Option A is correct because Cloud Run allows you to deploy stateless containers without modifying the application code, minimizing initial changes while providing serverless scalability and the flexibility to modernize later by refactoring into microservices. This approach supports containerized workloads from a legacy monolithic app with minimal lift-and-shift effort.

Answer

Replatform to App Engine Flexible Environment

Answer

Refactor to microservices on GKE

Question 8

A site reliability engineer is implementing SRE practices in Google Cloud. Which TWO of the following are key principles of SRE? (Choose TWO.)

Accepted Answer

Using error budgets to balance reliability and feature velocity. Option A is correct because error budgets are a core SRE principle that define the acceptable level of failure (e.g., 99.9% uptime allows 0.1% errors). This budget is used to balance the tension between releasing new features (velocity) and maintaining system reliability, allowing teams to halt deployments when the budget is exhausted.

Answer

Measuring everything with SLIs, SLOs, and SLAs

Answer

Centralizing all operations in a single team

Answer

Deploying changes only during maintenance windows

Question 9

Which TWO statements correctly describe Cloud Run scaling behavior?

Accepted Answer

You can define a target concurrency to control how many requests each container instance handles.. Option C is correct because Cloud Run allows you to set a target concurrency (the number of simultaneous requests a single container instance can handle). This is a key scaling parameter that controls how many requests are routed to each instance before Cloud Run spins up additional instances. By default, concurrency is set to 80, but you can adjust it up to 1000 or set it to 1 for sequential processing.

Answer

The maximum number of instances can be set to 'default' which is unlimited.

Answer

You can set a minimum number of instances to ensure zero cold starts.

Answer

Autoscaling uses CPU and memory utilization to make decisions.

Question 10

Which THREE are required to achieve HIPAA compliance on Google Cloud?

Accepted Answer

Sign a Business Associate Agreement (BAA) with Google. Option A is correct because HIPAA requires covered entities and their business associates to have a written agreement that establishes the permitted and required uses of protected health information (PHI). Google Cloud provides a standard Business Associate Agreement (BAA) that customers must sign to contractually bind Google to HIPAA obligations, including safeguarding ePHI and reporting breaches. Without a signed BAA, Google is not legally liable as a business associate under HIPAA, making this a foundational requirement for compliance.

Answer

Use a dedicated project for all PHI workloads

Answer

Configure multi-factor authentication for all users

Question 11

A company wants to monitor the health and performance of their applications running on Google Cloud. Which two Google Cloud services should they use together for comprehensive observability?

Accepted Answer

Cloud Monitoring. Cloud Monitoring and Cloud Logging together form the core of Google Cloud's observability stack. Cloud Monitoring collects metrics, uptime checks, and alerting policies, while Cloud Logging ingests, stores, and analyzes log data. Combined, they provide the metrics, logs, and alerting needed to comprehensively monitor application health and performance.

Answer

Cloud Profiler

Answer

Cloud Debugger

Answer

Cloud Trace

Question 12

Which TWO of the following are key characteristics of cloud computing as defined by NIST? (Choose 2)

Accepted Answer

Measured service. Measured service is a key characteristic of cloud computing as defined by NIST (SP 800-145). It means that cloud systems automatically control and optimize resource usage by leveraging a metering capability at some level of abstraction appropriate to the type of service (e.g., storage, processing, bandwidth, and active user accounts). This allows both the provider and consumer to monitor, control, and report usage, providing transparency for billing and chargeback.

Answer

Virtualization

Answer

Multi-tenancy

Answer

Serverless computing

Question 13

Which TWO of the following are important considerations when designing a cloud solution for data residency compliance? (Choose exactly 2.)

Accepted Answer

Enabling Cloud Data Residency policies. Options A and D are correct. A is correct because data must stay in specific geographic boundaries. D is correct because Cloud Data Residency policies enforce location constraints. B is incorrect because storing data in a single zone does not guarantee residency; zones are within a region. C is incorrect because encryption does not change data location. E is incorrect because storage class affects availability, not residency.

Answer

Choosing the lowest-cost storage class

Answer

Using a single availability zone for all data

Answer

Encrypting all data at rest

Question 14

A company uses Cloud Spanner for a global application. They need to ensure high availability and disaster recovery across regions. Which TWO actions should they take? (Choose 2)

Accepted Answer

Schedule regular backups using Cloud Spanner backup feature. Option B is correct because Cloud Spanner's built-in backup feature allows you to create consistent backups of your database without impacting performance, and these backups can be restored to a different region for disaster recovery. This provides a reliable way to recover from regional failures or data corruption, ensuring high availability and DR across regions.

Answer

Deploy the database in a single region with backups

Answer

Configure read replicas in a different region

Answer

Use Cloud Memorystore to cache database queries

Question 15

A company wants to implement a CI/CD pipeline for their Cloud Run services. Which THREE Google Cloud services should they use? (Choose 3)

Accepted Answer

Cloud Build. Cloud Build is the correct service because it is Google Cloud's fully managed CI/CD platform that can automatically build, test, and deploy code from a repository. For Cloud Run services, Cloud Build can trigger builds on code changes, run tests, and then deploy the container image directly to Cloud Run using a cloudbuild.yaml configuration file.

Answer

Cloud Operations Suite

Answer

Cloud Deployment Manager

Question 16

A gaming company runs a real-time multiplayer game server on Google Kubernetes Engine. They want to optimize costs while ensuring low latency for players across different regions. Which three strategies should they implement? (Choose THREE.)

Accepted Answer

Use committed use discounts (CUDs) for sustained resource usage.. Committed use discounts (CUDs) are ideal for sustained resource usage because they offer significant cost savings (up to 70%) in exchange for a 1- or 3-year commitment to a minimum level of compute resources. For a gaming server that runs continuously, CUDs reduce the per-hour cost of the underlying GKE nodes, directly optimizing long-term operational expenses without impacting latency.

Answer

Use spot VMs with a node taint and toleration for game server pods.

Answer

Use preemptible VMs for game server pods.

Question 17

Which TWO are recommended practices when configuring autoscaling for Compute Engine managed instance groups?

Accepted Answer

Use a load balancer in front of the instance group.. Options B and D are correct. Setting min and max instances prevents over- and under-scaling. Using a load balancer distributes traffic to the group. Option A is wrong because multiple metrics are recommended. Option C is wrong because cooldown prevents thrashing. Option E is wrong because custom metrics can be combined with standard metrics.

Answer

Disable the cool-down period to react faster to spikes.

Answer

Use a single metric (e.g., CPU utilization) for simplicity.

Answer

Scale based on custom metrics only.

Question 18

Which THREE components should a company include in their architecture to design a global web application with low latency for users worldwide?

Accepted Answer

Cloud CDN.. A Cloud CDN caches content at edge locations worldwide, reducing latency by serving users from a nearby point of presence (PoP). This is essential for a global web application because it minimizes the round-trip time for static and dynamic content, directly addressing the requirement for low latency across geographically distributed users.

Answer

Backend buckets for static content.

Answer

Regional internal load balancer.

Question 19

A company uses Cloud Monitoring to collect metrics from their applications running on Google Kubernetes Engine (GKE). They want to create custom dashboards and set up alerting policies. Which THREE capabilities are available in Cloud Monitoring? (Choose THREE.)

Accepted Answer

Define custom metrics via the Monitoring API. Option C is correct because the Cloud Monitoring API allows you to define and write custom metrics, which can then be used in dashboards and alerting policies. This is essential for capturing application-specific data that is not automatically collected by the default GKE integration, such as business KPIs or custom performance counters.

Answer

Query logs using Logging Query Language

Answer

Automatically remediate incidents with Cloud Functions

Question 20

Which TWO statements about Cloud Identity-Aware Proxy (IAP) are correct?

Accepted Answer

IAP can be used to protect access to Compute Engine VMs via SSH and RDP without a VPN. Option B is correct because Cloud IAP enables identity-based access to Compute Engine instances via SSH and RDP without requiring a VPN or bastion host. IAP uses the user's identity and request context to create a secure tunnel, forwarding traffic to the instance over HTTPS and verifying the user's credentials before allowing the connection.

Answer

IAP encrypts data at rest by default

Answer

IAP only works with Google Cloud applications

Answer

IAP requires using a third-party identity provider