Cloud Digital Leader Why Cloud Technology Can Transform Business Practice Question
A company wants to adopt a hybrid cloud strategy to keep sensitive data on-premises while taking advantage of Google Cloud for analytics. Which TWO Google Cloud products enable this architecture? (Choose 2)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Anthos
Anthos provides a consistent platform across on-premises and cloud. Cloud VPN or Cloud Interconnect can connect on-prem to Google Cloud. Secret Manager is for secrets; Cloud Run is serverless; BigQuery is analytics but does not enable hybrid architecture.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
BigQuery
Why it's wrong here
BigQuery is a fully managed, serverless data warehouse for running SQL-based analytics over large datasets. It does not provide any mechanism to extend Google Cloud infrastructure to on-premises environments, nor does it manage application workloads across hybrid locations, so it cannot serve as the basis for a hybrid cloud architecture.
- ✓
Anthos
Why this is correct
Anthos is a hybrid and multi-cloud application platform built on Google Kubernetes Engine (GKE) and the Kubernetes ecosystem, enabling consistent deployment, policy management, and service mesh across on-premises clusters and Google Cloud. It allows organizations to modernize existing applications, run them anywhere, and apply uniform governance, making it the core component for a hybrid cloud strategy that retains sensitive workloads on-premises.
- ✗
Cloud Run
Why it's wrong here
Cloud Run is a serverless compute platform that executes stateless containers on Google's infrastructure, automatically scaling to zero and only charging per request. It cannot be installed on on-premises hardware, so it does not provide a control plane or runtime that spans hybrid environments; it is designed solely for cloud-native, event-driven applications.
- ✗
Secret Manager
Why it's wrong here
Secret Manager is a cloud-based service for securely storing, versioning, and accessing API keys, passwords, and certificates via an API. It manages credentials but does not establish any network path between on-premises systems and Google Cloud, nor does it orchestrate workloads, so it is irrelevant to the hybrid infrastructure itself.
- ✓
Cloud VPN
Why this is correct
Cloud VPN creates an IPsec VPN tunnel over the public internet, securely connecting an on-premises network to a Google Cloud VPC for encrypted data transfer. It is a correct choice for hybrid cloud networking, but it only solves connectivity; it does not provide workload portability, management, or consistent runtime across environments, which Anthos delivers.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
Learn chapter
Cloud Digital Transformation
Key term
VPN
A VPN (Virtual Private Network) creates a secure, encrypted tunnel between your device and a remote server, protecting your data and hiding your online activity.
Key term
Anthos
Anthos is a Google Cloud platform that lets you run applications consistently across different computing environments, like on-premises data centers and multiple public clouds.
About these practice questions
Courseiva writes every GCDL question from scratch — 829 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This GCDL practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the GCDL exam.