scenario questions

Which Google Cloud service is used for monitoring and alerting on the performance and health of cloud resources?

A financial services company must comply with strict data residency regulations. They want to run sensitive workloads on-premises while using Google Cloud for burst analytics. Which deployment model should they choose?

A startup is building a web application and wants to protect it from common web attacks like SQL injection and cross-site scripting. Which Google Cloud product provides web application firewall (WAF) capabilities?

A company uses Cloud CDN to deliver static content. They notice that some content is being served stale despite a TTL of 1 hour. What should they check to ensure content is always fresh?

What is horizontal scaling, and how does it differ from vertical scaling?

A global airline wants to use cloud technology to improve the passenger experience from booking through arrival. Which combination of cloud capabilities best supports a holistic digital transformation of the end-to-end passenger journey?

A startup wants to estimate the monthly cost of running a managed Kubernetes cluster with specific node configurations before deploying. Which GCP tool should they use?

A company has a VPC with multiple subnets and wants to prevent data exfiltration by restricting access to a Cloud Storage bucket from only resources within a defined perimeter. Which Google Cloud service should they use to create an API perimeter around the bucket?

A company runs a web application on Google Kubernetes Engine (GKE) that experiences sudden traffic spikes. The operations team notices that the application's response time increases significantly during these spikes despite having Horizontal Pod Autoscaler (HPA) configured. They want to ensure consistent performance. What should they do?

A financial services company needs a relational database with global strong consistency, horizontal scaling, and 99.999% availability SLA. Which database should they choose?

A security team needs to detect and respond to threats in real time using network traffic analysis and log correlation. Which THREE services should they use? (Choose 3)

A company wants to modernize its legacy monolithic application by adopting microservices on Google Cloud. They need to ensure high availability and manage service-to-service communication. Which THREE Google Cloud services should they use? (Choose THREE.)

A company wants to use Google Cloud to innovate faster by leveraging managed services. Which TWO benefits are directly associated with using managed services? (Choose 2)

A company runs a customer-facing web application with a published SLA of 99.95% monthly availability. In the past month, the application experienced two outages: a 12-minute outage and a 7-minute outage. Did the company meet its SLA?

A company is evaluating total cost of ownership (TCO) for migrating a legacy application to Google Cloud. Which cost should they include in the cloud TCO calculation that is often overlooked?

A developer needs to store a database password securely and access it from a Compute Engine VM. The password should be automatically rotated every 90 days. Which Google Cloud service should they use?

A company is moving a regulated workload to Google Cloud and must ensure that their encryption keys are stored in a hardware security module (HSM) that meets FIPS 140-2 Level 3 validation. Which Google Cloud key management option satisfies this requirement?

A data scientist wants to train a machine learning model using a managed service that supports custom TensorFlow code and provides GPU/TPU hardware acceleration. They prefer not to manage the underlying infrastructure. Which Google Cloud service should they use?

An enterprise wants to give its business intelligence team a governed analytics platform where data models are defined centrally with version-controlled semantic definitions, and all reports are guaranteed to use the same business metric definitions. Which Google Cloud product is designed for this governed BI use case?

An enterprise's security team is implementing a strategy to protect against 'credential stuffing' attacks — where attackers use lists of username/password combinations from previous data breaches to try to log in to the company's applications. Which authentication control most effectively mitigates this threat?

An e-commerce platform uses Compute Engine to serve its website. During a flash sale, traffic spikes and some instances become unhealthy. The team wants to automatically replace unhealthy instances and maintain a minimum number of running instances. Which TWO features should they configure? (Choose 2)

A company is moving a sensitive database to Cloud SQL. They need to encrypt data at rest using customer-managed encryption keys (CMEK) and rotate the key every 30 days. How should they set this up?

A company wants to analyze their GCP spending trends by service and project over the past year. They need to export detailed billing data to a BigQuery dataset for custom queries. Which feature should they use?

A startup uses Google Workspace for email and collaboration. They want to add a custom domain to their Gmail accounts. Which service model does Google Workspace represent?

An organization has a folder-level IAM policy that grants the 'roles/compute.instanceAdmin' role to a group. A project under that folder has a policy that denies this role to the same group. What is the effective access for the group on Compute Engine instances in the project?

A company plans to run a batch processing job every night for 2 hours. They want to minimize costs while ensuring the job completes within a 4-hour window. Which pricing model should they choose?

A company's application is called 'stateless' because it doesn't store any user session data in the application server's memory. Each request contains all necessary information. Why is statelessness important for cloud scalability?

Google Cloud bills Compute Engine VMs per second (after a 1-minute minimum). A batch job runs for exactly 3 minutes and 47 seconds. How many minutes does Google Cloud charge for?

A company is migrating a PostgreSQL database to Google Cloud. They want high performance, AI-optimized capabilities, and compatibility with existing PostgreSQL tools. Which service should they choose?

A company runs many containerized microservices that need orchestration — automatic scheduling, scaling, self-healing, and rolling updates. They want a managed service so they don't maintain the control plane themselves. Which Google Cloud service is purpose-built for this?

A developer wants a fully managed environment to deploy containerized applications without managing the underlying infrastructure. They need auto-scaling, load balancing, and a serverless experience. Which Google Cloud service should they choose?

A company has a production project that requires a compute quota of 500 vCPUs, but the default limit is 200. What is the correct process to request a quota increase?

A company's cloud team is asked to demonstrate that their infrastructure changes are repeatable and auditable. They use Terraform configuration files committed to a Git repository to define all cloud resources. Which operational practice does this exemplify?

A startup needs to build a mobile application backend. They need user authentication, a real-time database that syncs to mobile clients automatically, and serverless functions for business logic — all managed with minimal backend engineering. Which Google Cloud platform provides this integrated mobile/web backend solution?

A company's engineering organization wants to share operational knowledge across teams using a 'golden path' — a recommended, pre-configured set of tools, services, and templates that makes the easy path also the correct path. Which Google Cloud concept supports this practice?

A CEO asks why the company should invest in a cloud migration when the existing on-premises infrastructure 'still works fine.' Which business case arguments are MOST relevant to present? (Select the best answer.)

A financial services firm wants to improve disaster recovery without maintaining a second physical data center. They need to replicate data asynchronously and failover quickly. How does cloud transformation help?

A startup is building an application that sends daily promotional push notifications to millions of mobile users on both iOS and Android devices. Which Google Cloud or Google service most directly provides the infrastructure for sending these mobile push notifications?

A developer needs to grant a service account the minimum permissions required to publish messages to a Pub/Sub topic. Which IAM role should they assign?

A small business wants to host a low-traffic website with a single-page application. They have limited budget and no IT staff. Which Google Cloud solution is most cost-effective and easy to manage?

A company wants to ensure that no employee can accidentally delete critical data stored in Cloud Storage. They need a solution that protects against accidental deletion even by users with full permissions. Which approach should they use?

An organization is planning to adopt cloud services but needs to understand which party is responsible for physical security of the data center. Under the shared responsibility model, who is responsible for physical data center security in a public cloud deployment?

A manufacturing company is exploring cloud adoption to improve its supply chain responsiveness. A consultant proposes using machine learning models trained on historical supply chain data to predict component shortages 8 weeks in advance. Which description best characterizes this as a digital transformation use case?

A company wants to protect its web application from common web exploits like SQL injection and cross-site scripting. They also need to block traffic from known malicious IP addresses. Which Google Cloud service should they use?

A logistics company manually tracks shipments using spreadsheets, causing frequent errors and delays in customer notifications. After implementing a cloud-based tracking platform with real-time GPS updates, automated customer notifications, and predictive delivery estimates, customer satisfaction scores increase by 35%. What kind of transformation does this primarily represent?

A traditional software company sells perpetual licenses for on-premises software. They want to transition to a cloud-based SaaS model. Beyond infrastructure savings, which business model transformation does this shift enable?

A data scientist wants to train a custom machine learning model using their own data and deploy it for online predictions. They want a unified platform that manages the entire ML lifecycle from data preparation to model serving. Which service should they use?

A retail bank's branch staff currently look up customer information in disconnected systems, requiring multiple logins and manual data consolidation before advising customers. A cloud transformation project unifies customer data into a single 360° view platform accessible from any device. What type of transformation does this primarily represent?

A company wants to reduce latency for IoT devices located in remote areas with poor connectivity. They need to preprocess data locally before sending it to the cloud. Which architecture should they use?

A multinational corporation needs to deploy a global web application that serves users from multiple continents. They want to minimize latency for end users by serving content from the nearest location. Which combination of Google Cloud services should they use?

A cloud architect is explaining to executives why they should use managed services (like Cloud SQL, Memorystore, Pub/Sub) instead of running self-managed equivalents on VMs (PostgreSQL on VM, Redis on VM, RabbitMQ on VM). Which argument best captures the strategic rationale for preferring managed services?

A media company needs to transcode and store thousands of video files daily, with variable demand. They want to minimize costs while ensuring fast processing. How does cloud transformation help?

A company wants to ensure that their confidential data stored in BigQuery cannot be shared outside the company's Google Cloud organization. Which Google Cloud security capability prevents data from being shared with external Google accounts (outside the organization)?

An organization has multiple projects and wants to aggregate logs from all projects into a single bucket for long-term retention and compliance. What should they do?

A startup wants to reduce capital expenditure on hardware and scale its application globally with minimal latency. Which cloud deployment model should they choose?

A company needs to run a legacy application that requires full control over the operating system, including custom kernel modules. They want to minimize management overhead for the underlying hardware. Which cloud service model should they use?

A startup is building a read-heavy mobile backend. They want a database that can scale out reads without downtime. Which database service should they choose?

A security team wants to get a comprehensive, organization-wide view of security misconfigurations (such as publicly accessible storage buckets, VMs without firewalls, and IAM overprivilege), vulnerabilities in container images, and active threats across all Google Cloud projects. Which Google Cloud service provides this unified security posture management?

A company's SRE team is debating whether to automate a frequently performed manual operational task. The automation would take 4 weeks of engineering time to build. The manual task takes 30 minutes per occurrence and happens approximately 20 times per month. Using the SRE concept of 'toil,' how should the team approach this decision?

Match each Google Cloud pricing concept to its definition.

A company wants to reduce its carbon footprint by running workloads on Google Cloud. Which Google Cloud commitment directly supports this goal?

A company runs a global web application hosted on Compute Engine behind a Cloud Load Balancer. They want to protect against DDoS attacks and filter incoming traffic based on IP reputation and geolocation. Which Google Cloud service should they use?

A company uses Cloud SQL for MySQL and wants to ensure that data is encrypted at rest using customer-managed keys. They also need to rotate the key every 90 days. What should they do?

An organization needs to allow a third-party auditor to review their Google Cloud resource configurations for compliance (read-only access). The auditor should not be able to modify resources or view data. Which THREE IAM roles or techniques should they use?

An organization wants to tag resources with key-value metadata for cost allocation purposes (e.g., team: marketing, environment: prod). Which feature should be used?

A company's security policy requires that when an employee is terminated, their access to all cloud resources must be revoked immediately — including any active sessions. Which approach most comprehensively achieves this in a Google Cloud environment integrated with Google Workspace?

Which TWO of the following are NIST-defined characteristics of cloud computing?

A security engineer needs to ensure that a Compute Engine instance can access a Cloud Storage bucket using its own identity, without embedding service account keys in the instance. What should the engineer do?

A global e-commerce company needs to deliver content to users quickly regardless of location. Which Google Cloud service can cache content at edge locations to reduce latency?

A company wants to reduce costs for their Compute Engine workloads. They have predictable baseline usage and are willing to commit to a 1-year term. They also want to automatically get discounts for instances running more than 25% of a month. Which THREE options should they use? (Select THREE)

A company is migrating a legacy monolithic application to Google Cloud. The application has variable traffic and requires a relational database. They want to minimize operational overhead. Which TWO Google Cloud services should they choose? (Choose TWO.)

A developer wants to deploy a containerized web application without managing servers, clusters, or Kubernetes configuration. The application should automatically scale to zero when not in use and handle bursts of traffic. Which Google Cloud service is the best fit?

Drag and drop the steps to set up a Cloud SQL for MySQL instance with a private IP address into the correct order.

An organization needs to run a batch process every night that analyzes terabytes of data from Cloud Storage and writes results back to BigQuery. The job is not time-sensitive and can be preempted. Which compute approach is most cost-effective?

An operations team has been asked to estimate the annual cost impact of a proposed new cloud architecture. The architecture would replace 50 on-demand n2-standard-4 VMs (running 24/7) with an autoscaling group that averages 10 VMs under normal load but scales to 50 during peak hours (approximately 8 hours per day). Which analytical approach best estimates the cost impact?

A company runs a critical application on Compute Engine that must always be available, even if an entire zone fails. The application stores state in a Cloud Spanner instance. The operations team wants to test disaster recovery procedures without affecting production. Which TWO actions should they take? (Select two.)

A chief digital officer is designing a transformation roadmap. She argues that cloud adoption must be accompanied by organizational changes to be effective. Which organizational change is most critical for realizing the full potential of cloud technology?

A data engineer needs to run a one-time complex data transformation job on a large dataset (10 TB) stored in Cloud Storage. The job will take approximately 8 hours and is not fault-tolerant. The engineer wants the cheapest possible compute option that can reliably complete the job. What should they use?

A company wants to deploy a web application that automatically scales based on traffic, and they do not want to manage infrastructure. The application is written in Python and uses a Flask framework. Which TWO Google Cloud services could they use?

A data scientist wants to train a custom machine learning model using a large dataset stored in BigQuery. They need a managed service that supports distributed training with GPU accelerators. Which service should they use?

An engineer needs to deploy a containerized application on Google Kubernetes Engine (GKE) and ensure that each pod gets a static IP address that persists across rescheduling. Which networking approach should they use?

An organization wants to modernize its on-premises applications. The IT team identifies three types of applications: legacy apps that can only move with significant refactoring, custom-built apps that can be containerized and moved as-is, and applications that can be replaced entirely by SaaS solutions. This categorization approach is called what?

A team deploys microservices on GKE with Horizontal Pod Autoscaler (HPA). They want to scale based on custom metrics from third-party monitoring. What must they do first?

A software team is using Google Cloud and wants to understand the difference between 'scaling up' (vertical scaling) and 'scaling out' (horizontal scaling) for their web application. Which description correctly distinguishes these two approaches?

An organization's Chief Digital Officer is building a case for cloud investment by framing it in terms of 'cloud as a strategic asset rather than a cost center.' Which argument most strongly supports this framing?

An organisation needs to securely connect its on-premises data centre to Google Cloud with high bandwidth and low latency for hybrid cloud workloads. They want a dedicated, private connection that does not traverse the public internet. Which solution should they use?

A company wants to store archived data that must be retained for 10 years. They expect to access it less than once a year. Which Cloud Storage class is the MOST cost-effective?

An organization needs to ensure that data stored in Cloud Storage is encrypted using keys that they manage and rotate themselves. Which encryption option should they choose?

Match each Google Cloud DevOps tool to its purpose.

A data engineer needs to process a continuous stream of clickstream events from a website, perform real-time aggregations (e.g., counts per page per minute), and write the results to BigQuery for dashboarding. Which combination of services should they use?

A company wants to add location-based features to their mobile app: showing nearby stores, calculating driving routes, and embedding interactive maps. Which Google Cloud platform provides these mapping and location services?

Refer to the exhibit. The autoscaler is configured to maintain a target CPU utilization of 0.6. Currently the group has 10 instances, but the autoscaler is not scaling up even though CPU utilization is above 0.8. What is the most likely reason?

A company's application stores user passwords. Their security team says passwords must be stored as hashes, never in plaintext. They want to ensure this requirement is met even if a database is compromised. Why is password hashing (with salt) the correct approach?

A company wants to use computing resources over the internet without managing physical servers. The cloud provider manages the underlying hardware and virtualization, while the company manages the operating system, middleware, and applications. Which cloud service model does this describe?

A developer wants to build a mobile app backend that uses a real-time database for chat messages, user profiles, and file storage for images. They want a fully managed, serverless solution. Which THREE Google Cloud services should they use? (Choose three.)

A security architect is evaluating Google Cloud's approach to securing customer data against both external attackers and potential internal Google personnel access. She identifies four distinct controls: (1) encryption at rest by default, (2) Access Transparency logs, (3) Customer-Managed Encryption Keys (CMEK), and (4) Access Approval. How do these four controls work together to provide layered data protection?

A cloud operations team wants to ensure that all cloud resources created in their Google Cloud organization comply with company naming standards and required cost allocation labels. Which Google Cloud capability can automatically enforce these standards on resource creation?

A company wants to use pre-trained Google AI models to add vision capabilities to their application — specifically to detect objects in images and extract text from scanned documents — without training their own models. Which Google Cloud APIs provide these capabilities?

A data engineering team needs to process streaming data from IoT devices, perform real-time transformations, and load the results into BigQuery for analysis. Which TWO Google Cloud services should they use?

A platform business (like a marketplace) hosts both buyers and sellers. As more sellers join, the marketplace becomes more valuable to buyers (more choice), and vice versa. Cloud infrastructure that can scale to handle millions of users is essential for this model. What economic concept describes why the platform becomes more valuable as it grows?

A company has applied a deny organization policy at the folder level that prevents the use of certain machine series. An IAM policy at the project level grants a user the role of compute.instanceAdmin. The user attempts to create a VM using a denied machine series. What will happen?

A startup is building a mobile health app that stores sensitive patient data in Cloud Storage. They want to ensure data is encrypted at rest using a key they manage themselves and rotate monthly. Which encryption approach should they use?

A company stores encryption keys in Cloud KMS to protect sensitive data. What does Cloud KMS provide that standard application-layer encryption does not?

Which Google Cloud commitment to open source has enabled portability for containerized applications across different cloud providers?

A company is migrating its on-premises applications to Google Cloud. The security team requires that all data be encrypted both in transit and at rest. Which approach meets these requirements with minimal operational overhead?

A data analytics team needs to run complex SQL queries on a large dataset stored in Cloud Storage (CSV files). They want a serverless solution that does not require managing infrastructure. Which Google Cloud service should they use?

A company is deploying a global web application and needs to serve users with low latency, protect against DDoS attacks, and scale automatically. Which two Google Cloud services should they combine? (Choose exactly 2.)

A security team wants to find misconfigurations and vulnerabilities across their Google Cloud environment, including VMs, storage, and IAM. Which service provides a unified view of these findings?

A financial company wants to run sensitive workloads on Google Cloud while ensuring data never leaves a specific geographic boundary and meets strict compliance requirements. Which THREE Google Cloud services should they combine?

A developer wants to trigger a serverless function in response to a file being uploaded to a Cloud Storage bucket. Which Google Cloud service should they use?

An architect is evaluating trade-offs between using Google Cloud's global network backbone for application traffic versus routing traffic over the public internet. She notes that Google's global network is one of the largest private networks in the world. What is the primary performance advantage of routing application traffic over Google's private backbone?

A non-profit organization wants to reduce IT overhead so they can focus on their mission. They currently manage their own email server, file storage, and website. What cloud approach best supports this transformation?

An organization wants to ensure that all projects in the organization have a specific IAM policy applied, such as restricting the use of certain machine series. They also need to enforce this policy on new projects automatically. Where should they set this policy?

A data engineering team wants to process continuous streams of real-time events from millions of devices, perform transformations, and load the results into BigQuery for analysis. They need a fully managed, serverless solution. Which service should they use?

A company wants to migrate its on-premises PostgreSQL database to Google Cloud with minimal downtime. They also need the ability to perform point-in-time recovery. Which TWO services or features should they use? (Choose two.)

A company runs a critical application on Compute Engine. They need a backup and disaster recovery strategy that includes automated backups and the ability to restore in a different region. Which TWO services should they use together? (Select 2)

Which Google Cloud feature provides reports on how Google processes government requests for customer data and how often Google challenges overly broad requests?

A company wants to implement a zero-trust access model for its internal applications, eliminating the need for a traditional VPN. Employees should be allowed access based on device posture and user identity, not just network location. Which Google Cloud solution should be used?

A company has a support plan that guarantees a 15-minute response time for P1 cases and includes a Technical Account Manager (TAM). Which support plan do they have?

A security analyst needs to analyze large volumes of security logs from multiple GCP projects, detect anomalies, and investigate incidents. The solution should support advanced analytics and threat hunting. Which service is best suited?

The principle of least privilege is a fundamental security concept applied to IAM in Google Cloud. Which statement best describes this principle?

A global e-commerce company wants to serve its website from Google Cloud with low latency to users worldwide. The website consists of static content (images, CSS) and dynamic content served by a backend application. Which combination of services should they use?

A company wants to run a batch job that processes data every night. They need to provision a VM for this task but want to minimize costs. The job can tolerate interruptions and can be resumed. Which Compute Engine VM option should they use?

What does 'serverless computing' mean, and what does a developer NOT have to manage when using serverless services?

An SRE team analyzes that their service had 47 minutes of downtime in the past 30 days. Their SLO is 99.9% monthly availability. How should the team characterize their performance relative to the SLO?

A company is evaluating whether to use a public cloud (Google Cloud), a private cloud (on-premises VMware), or a managed private cloud (hosted single-tenant environment). Which scenario is the strongest argument for choosing a managed private cloud over a public cloud?

A startup wants to launch a new application quickly and only pay for the compute resources they use, avoiding upfront hardware purchases. Which cloud benefit best supports this goal?

A cloud team performs a quarterly review of its Compute Engine instances and discovers 15 VMs that have had zero CPU utilization for over 90 days. What is the recommended operational response to these idle resources?

Which of the following is a key characteristic of cloud computing as defined by NIST that allows users to automatically provision computing resources without requiring human interaction with each service provider?

A media company stores video files, images, and static website assets that must be served globally with low latency. They want an object storage solution that is highly durable, accessible via standard HTTPS, and can be configured to make specific assets publicly accessible. Which Google Cloud storage product is most appropriate?

A retail company needs to handle sudden spikes in customer traffic during holiday promotions without over-provisioning hardware. Which cloud characteristic directly enables this capability?

A data engineering team needs to orchestrate a complex data pipeline that involves multiple steps: extracting data from various sources, transforming it with Dataflow, loading it into BigQuery, and running validation jobs — all in a specific sequence with retry logic and scheduling. Which Google Cloud service manages this workflow orchestration?

A company uses Cloud Functions (2nd gen) to process events from Pub/Sub. During traffic spikes, function instances scale but latency increases. They want to maximize throughput per instance. What should they configure?

A company's finance director asks: 'If we move to cloud, do we need to buy fewer servers?' An IT architect responds that the answer depends on whether the company is adopting IaaS, PaaS, or SaaS. How does the service model affect hardware ownership?

A team wants to track costs for their development and production environments separately. They have multiple projects for each environment. Which approach should they use to group projects by environment and analyze costs by environment in billing reports?

A team wants to use a managed MySQL database that offers automatic failover, backups, and read replicas. They also need to connect from Compute Engine instances in the same region. Which service should they use?

An organization needs to store confidential healthcare data in Google Cloud. Which compliance certification ensures that Google Cloud infrastructure meets the required security controls for protected health information (PHI)?

A mid-sized company runs a legacy inventory management system on a single on-premises server. The system uses a monolithic Java application and a PostgreSQL database. The server has reached 90% CPU usage during business hours, and the database is 800 GB. The company wants to migrate to Google Cloud to take advantage of autoscaling and reduce hardware costs. The migration must have minimal downtime and the application cannot be significantly rewritten. The team also wants to enable future scalability for peak seasons. The IT team includes experienced database administrators but limited application development resources. Given the constraints, which approach should the team take?

Google Cloud runs its own infrastructure operations using the Site Reliability Engineering (SRE) model, which Google invented. What is the core principle that distinguishes SRE from traditional IT operations?

A company wants to expose its internal backend services to external partners through a managed API layer that handles authentication, rate limiting, traffic management, and analytics — without modifying the underlying services. Which Google Cloud product is designed for this API management use case?

A company is comparing the total cost of keeping its data center versus moving to public cloud. An analyst argues that the comparison should include not just hardware costs but also facility costs. What facility costs should be included in the on-premises total cost of ownership calculation?

A development team is building a microservices-based application and wants to use a service mesh to secure and observe inter-service communication. They are using Google Kubernetes Engine (GKE). Which Google Cloud service should they integrate with GKE to provide service mesh capabilities?

Refer to the exhibit. A company configures a lifecycle policy on a Cloud Storage bucket. The bucket contains objects uploaded over the past year with custom time set on each object. After 60 days, what happens to the objects?

A data analytics company uses BigQuery for large-scale queries. They notice that some queries are very expensive due to scanning large amounts of data. They want to reduce costs without changing query logic. Which feature should they use?

An enterprise needs advanced business intelligence capabilities: governed semantic models that business users query with natural language, embedded analytics in their customer-facing application, and centralized data access controls. Which Google Cloud analytics product is purpose-built for these enterprise BI requirements?

A developer is building a mobile backend that receives thousands of events per second from IoT devices. The events must be processed in real time and then stored for analysis. Which set of services should they use?

Two competing retail companies adopt cloud at the same time. Company A uses cloud to run its existing applications more cheaply (lift-and-shift). Company B uses cloud to build new personalized customer experiences, real-time inventory optimization, and a mobile-first shopping platform. Five years later, Company B significantly outperforms Company A. What does this outcome illustrate?

A data engineering team needs to store and manage database passwords and API keys used by their applications. Which Google Cloud service should they use?

A security team wants to restrict access to a Cloud Storage bucket so that only Compute Engine VMs in the same VPC network can read objects. The VMs do not have public IP addresses. Which configuration should they use?

A startup wants to deploy a containerized web application without managing the underlying infrastructure. They want to only focus on code. Which Google Cloud service is most suitable?

A global e-commerce platform runs on Compute Engine instances in multiple regions. Users report high latency when accessing the website from South America. The company wants to improve performance by delivering static content (images, CSS, JS) from the nearest edge location. Which Google Cloud service should they implement?

A company is concerned about which security responsibilities belong to Google versus which belong to them when using Google Cloud's managed database service (Cloud SQL). In the shared responsibility model, which security tasks does Google handle?

Which Google Cloud service is a fully managed, serverless data warehouse for running SQL queries on petabyte-scale datasets?

A CEO presents a strategic plan to 'move everything to the cloud.' The board asks what business outcome should be the primary measure of success for the cloud migration. Which answer best reflects a business-outcome-oriented approach to measuring cloud migration success?

A company has a multi-regional deployment of a web application on Compute Engine. They want to improve latency for users worldwide and reduce load on the origin servers. They also need to protect against SQL injection and cross-site scripting attacks. Which TWO Google Cloud services should they implement?

A large enterprise runs a critical application on Google Cloud consisting of Compute Engine instances behind a TCP load balancer. The application experiences intermittent slow response times that last for about 10 minutes before returning to normal. This pattern has been occurring every few days at random times. The operations team has configured Cloud Monitoring alerts for CPU and memory, but no alerts have fired. They have also reviewed the load balancer logs and see no errors, but the latency spikes. The application logs show no errors during these periods. The team suspects a resource bottleneck but cannot find it. Further investigation reveals that the application makes synchronous calls to an external authentication service for each request. What is the most likely cause and corrective action?

An organization wants to allow their finance team to view billing account cost information but prevent them from making any changes to the billing account. Which IAM role should they grant?

A startup wants to secure access to its internal web applications without using a VPN. They need to enforce access based on user identity and device security posture. Which Google Cloud service should they use?

Which Google Cloud service provides a serverless data warehouse for running SQL queries on petabyte-scale data with no need to manage infrastructure?

A security engineer needs to monitor and analyze security logs from multiple GCP projects and on-premises sources in a centralized SIEM. Which Google Cloud service is designed for log management and security analytics at scale?

Refer to the exhibit. A user receives this error when trying to copy an object from one bucket to another. What is the most likely cause?

Match each Google Cloud networking concept to its description.

A media company needs to deliver video content to users worldwide with low latency. They want to cache content at edge locations. Which Google Cloud service should they use?

A company is building a real-time leaderboard for an online game using Google Cloud. They need a database that can handle millions of updates per second with low latency and serve the current top scores. Which TWO services should they use together? (Choose 2)

A company wants to store archival data that is accessed less than once a year and needs the lowest storage cost. Which TWO Cloud Storage classes are most cost-effective for this use case?

A company uses Cloud Functions and notices that some functions are taking longer than expected. They want to identify which functions have the highest latency. What should they use?

A media company currently licenses proprietary software for video editing that costs $50,000 per seat annually. They are considering a cloud-based SaaS alternative at $5,000 per seat annually. Beyond the licensing cost, which additional financial benefits should they consider when calculating total cost of ownership (TCO)?

A retail company wants to build a recommendation engine that suggests products to customers based on their browsing history. The team has ML expertise but wants to use Google's pre-built ML infrastructure to train and deploy models at scale without managing compute resources. Which Google Cloud service should they use?

A DevOps team wants to automatically build a Docker image from a GitHub repository and store it in a private registry whenever a new tag is pushed. Which Google Cloud services should they combine?

Drag and drop the steps to set up a Cloud NAT for private Compute Engine instances to access the internet in the correct order.

A software team deploys microservices using containers and wants Google Cloud to automatically manage the scaling, self-healing, and rollout of their containerized applications. They don't want to provision or manage underlying virtual machines. Which Google Cloud service best meets this need?

A company wants to protect its web application running on Google Cloud from DDoS attacks and SQL injection. Which service should they use?

A business leader asks: 'What is the difference between a data center region and an availability zone in Google Cloud?' Which explanation is most accurate?

Which THREE factors should be included when calculating the total cost of ownership (TCO) for an on-premises data center compared to Google Cloud? (Choose 3)

A business intelligence team wants to create interactive dashboards and reports from their BigQuery data without writing code. They need to share reports with stakeholders who don't have GCP accounts. Which Google Cloud tool is most appropriate?

A company needs to run containerized workloads but wants to avoid managing Kubernetes cluster infrastructure (node pools, cluster upgrades, node autoscaling) entirely. They want to simply deploy container images and have Google Cloud manage all underlying infrastructure automatically. Which Google Cloud product best fits this fully managed container execution requirement?

A company is migrating a legacy monolithic application to Google Cloud. They want to reduce operational overhead while maintaining the ability to run the application without rewriting code. Which migration strategy should they use?

What is the key difference between a virtual machine (VM) and a container in terms of how they package and run applications?

A CISO is evaluating Google Cloud's security posture and asks about independent third-party validation of Google's security practices. Which types of certifications and audit reports most directly provide this independent assurance?

What is the primary purpose of a folder in the Google Cloud resource hierarchy?

Which TWO of the following are key benefits of cloud technology that are transforming business operations?

An organization needs to apply security policies to protect their web application from DDoS attacks and SQL injection. Which Google Cloud service should they use?

A developer needs to estimate the monthly cost of running a set of Compute Engine instances with specific machine types, persistent disks, and network egress before deploying. Which tool should they use?

A company wants to replace its VPN-based remote access with a solution that grants access to internal web applications based on user identity and device context, without requiring a VPN. Which Google Cloud service should they use?

A company runs a containerized microservices application on Google Kubernetes Engine (GKE). They want to expose a set of services externally with a single IP address, implement SSL termination, and protect against DDoS attacks. Which THREE Google Cloud services should they use together?

A telecommunications company wants to launch new 5G services faster than its competitors. Which cloud characteristic most directly accelerates its ability to bring new services to market quickly?

A company's security team wants to detect and remediate public exposure of Cloud SQL instances. Which service should they use?

A company needs to estimate the monthly cost of running a set of Compute Engine instances, including network egress and Cloud Storage usage, before deploying the architecture. Which tool should they use?

An organisation is migrating its on-premises Oracle database to Google Cloud. They need a fully managed, PostgreSQL-compatible database with high performance for transaction processing and built-in AI capabilities for predictive analytics. Which database service should they choose?

A company wants to implement a zero-trust security model for accessing internal applications. Which TWO Google Cloud services should they use together? (Choose 2)

A company uses Cloud Load Balancing to distribute traffic to Compute Engine VMs. They want to protect against SQL injection and cross-site scripting attacks. Which service should they enable?

A healthcare company must store PHI in Cloud Storage. They require encryption at rest and in transit, and need to comply with HIPAA. Which combination of Google Cloud features should they implement?

A company wants to receive notifications when its monthly spending exceeds 80% of a $10,000 budget. Which set of steps will achieve this?

A data analytics team wants to analyze large datasets using SQL and create dashboards with minimal latency. They need a serverless data warehouse and a BI tool. Which two services should they use? (Choose exactly 2.)

A startup wants to deploy a web application globally and expects traffic to be unpredictable — sometimes very low, sometimes very high. Which cloud characteristic ensures the startup only pays for the compute resources it actually uses?

Which Google Cloud service provides a managed Redis or Memcached in-memory data store for caching and low-latency data access?

Which term best describes when an organization uses cloud-based tools (video conferencing, cloud document collaboration, project management platforms) to enable employees to work productively from any location?

A startup wants to deploy a containerised web application that scales automatically from zero to handle traffic spikes and charges only for the resources used during request processing. They want to avoid managing servers or Kubernetes clusters. Which compute service should they choose?

A company is migrating a legacy monolithic application to Google Cloud. They want to reduce operational overhead by eliminating server management while keeping the ability to run containers. The application has unpredictable traffic patterns and needs to scale to zero when idle. Which compute option is the best fit?

Which Google Cloud service provides a centralized view of an application's performance metrics, logs, and traces — enabling teams to monitor system health, set up alerts, and diagnose issues from a single platform?

A SRE team wants to alert when their service is consuming error budget faster than expected, rather than alerting only when the SLO threshold is crossed. Which Cloud Monitoring alerting strategy supports this approach?

A media streaming company wants to reduce latency for users worldwide by serving content from edge locations. They also want to offload traffic from their origin servers. Which Google Cloud service should they implement?

A non-technical manager asks what a 'virtual machine' is and how it differs from the physical servers the company used to run in its own data center. Which explanation is most accurate and accessible?

Which THREE of the following are best practices for managing operations in Google Cloud? (Choose THREE.)

What is virtualization in the context of cloud computing, and why is it fundamental to how cloud providers deliver services?

A company runs a mission-critical application that must be available 24/7. They want to ensure that if a Google Cloud region becomes unavailable (e.g., due to a natural disaster), the application automatically continues to serve users from another region. Which architecture pattern achieves this?

A company is planning their resource hierarchy in Google Cloud. They need to separate environments (prod, non-prod) and teams (engineering, data science). They also need to apply common policies to all prod projects. Which TWO resources should they use?

Which statement best describes the shared responsibility model in Google Cloud?

A company's cloud spending suddenly spikes by 300% for one week before returning to normal. The cloud team investigates and finds a developer accidentally left a large cluster of VMs running over the weekend. Which cloud financial management practice most effectively prevents this type of unexpected cost spike?

An architect explains that her cloud application uses a 'loosely coupled architecture.' She contrasts it with a tightly coupled on-premises system where all components run in a single process. What is the primary operational benefit of loose coupling in a cloud environment?

A company's risk management team wants to understand Google Cloud's approach to supply chain security — specifically, how Google ensures that the hardware and firmware running in its data centers have not been tampered with. Which Google security initiative addresses hardware supply chain integrity?

An engineer is deploying a global application that requires low latency for users in North America, Europe, and Asia. They plan to use Compute Engine instances in multiple regions. Which Google Cloud resource is essential to distribute traffic and provide a single anycast IP address?

A company is considering migrating its on-premises workloads to Google Cloud. Which TWO are common business drivers for cloud adoption? (Choose TWO.)

A company runs a globally distributed application with users in North America, Europe, and Asia. They need to serve static content (images, videos) with low latency from edge locations. They also need to protect against DDoS attacks. Which combination of services should they use?

A company wants to implement a data pipeline that ingests streaming events from a global user base, processes them in real-time to detect anomalies, and stores the results in a database for low-latency querying. The solution must be fully managed. Which THREE services should they use? (Choose 3)

A company is evaluating Google Cloud and wants to know: what is Access Transparency, and how does it benefit customers with stringent governance requirements?

A company is moving its financial reporting application to Google Cloud. The CFO asks: 'If Google Cloud experiences a data breach and our financial data is exposed, who is financially liable?' How should the cloud architect answer this question?

An organization runs its entire infrastructure on a single public cloud provider (Google Cloud). All applications, data, and services live in Google Cloud's infrastructure. Which deployment model describes this?

A company's monolithic application is difficult to update because any change requires testing and redeploying the entire application, causing multi-hour downtime during updates. The team is considering a microservices architecture. What is the primary benefit of microservices in this context?

A company wants to connect its on-premises network to Google Cloud for consistent low-latency access to resources. They also need to use the same network policies across multiple projects. Which two Google Cloud products should they use?

A company's security team wants to control which resources on the internet can communicate with their virtual machines in Google Cloud. Which fundamental cloud networking concept provides this control?

An engineer needs to grant a team access to view but not edit Compute Engine instances in a project. They also need to ensure that any new instances created in a folder automatically inherit a policy that denies using certain machine types. Which TWO steps should they take? (Choose TWO.)

A company is building a new application that needs to send transactional emails (order confirmations, password resets, account notifications) to customers. Google Cloud does not provide a native SMTP email service. Which approach is standard for sending transactional emails from Google Cloud applications?

A developer needs to allow a Compute Engine VM to read from a specific Cloud Storage bucket. Which IAM role should be granted to the VM's service account?

A company runs a web application on Compute Engine. They want to reduce costs by committing to a 1-year contract for their VM usage. Which pricing model should they use?

A company has a multi-project GCP environment with a single billing account. They want to receive alerts when any project's spending exceeds its allocated budget, and they want to analyze cost trends by project and service. Which THREE services should they use together?

A logistics company needs to send millions of shipment status updates per day from IoT tracking devices to backend systems for processing and storage. The solution must decouple the tracking devices from the backend and handle traffic spikes without losing messages. Which Google Cloud product best fits this asynchronous messaging requirement?

A developer wants to deploy a containerized web application that can automatically scale to zero when there are no requests, and charges only for resources used during request processing. Which Google Cloud compute service should they use?

A company uses Google Workspace for email, documents, and meetings. They want to leverage an AI assistant that can help draft emails, create slides, and summarise meeting notes. Which product provides this functionality?

A startup is building a gaming application where players must see each other's moves in real time. The database storing game state must guarantee that all players see the same state simultaneously. Which consistency requirement does this impose and why does it matter for database selection?

A cloud team wants to understand their current Google Cloud resource inventory — specifically, which VMs are running in each region, their machine types, and whether they have public IP addresses. Which approach most efficiently provides this across all projects?

A company wants to protect its web application deployed on Google Cloud from OWASP Top 10 attacks and also block traffic from specific geographic regions. Which TWO services should they use together? (Choose 2)

An engineer is designing a resource hierarchy for a multinational company with multiple business units. The company uses Google Workspace. What is the first step in creating the resource hierarchy?

A company wants to reserve Compute Engine resources for a 3-year term to get a significant discount. Which discount type should they use?

A CISO is designing an identity strategy for Google Cloud that follows Zero Trust principles. She proposes that no long-lived credentials (API keys, service account keys) should be used for any automated workloads. What Google Cloud mechanism replaces service account keys for authenticating workloads running on Google Cloud infrastructure?

A company wants to build an application that can understand and respond to natural language queries from customers (e.g., a customer support chatbot). Which Google Cloud capability should they use?

An architect proposes using a 'private cloud' deployment model for a company that wants cloud-like capabilities but is prohibited from using public cloud due to data residency regulations. What is a key advantage of private cloud compared to public cloud, and what is a significant trade-off?

A developer needs to store and manage API keys and certificates in a secure, centralized manner, with automatic rotation and integration with Cloud Functions. Which Google Cloud service should they use?

A retail company wants to reduce latency for customers in Europe and Asia by hosting their application closer to users. They also need high availability in case of a regional outage. Which TWO actions should they take?

A healthcare company needs to run a large batch processing job that analyzes patient records using Apache Spark, transforming data from Cloud Storage and writing results to BigQuery. The job runs once daily and requires a large cluster that should exist only during the job. Which Google Cloud product best handles this ephemeral large-batch Spark workload?

A startup's web application is being targeted by a denial-of-service attack that is flooding its servers with millions of fake requests per second. Which Google Cloud product provides automatic DDoS protection for the application?

Drag and drop the steps to migrate an on-premises MySQL database to Cloud SQL using Database Migration Service into the correct order.

A security team is reviewing a developer's request to be granted the 'Owner' role on a production Google Cloud project 'just in case they need broad access.' The security team rejects this and instead grants a more specific role. Which security principle does the security team's decision enforce?

A company needs to perform interactive SQL analytics on petabytes of data without managing any infrastructure. They need to query data stored in Cloud Storage and want the fastest query performance. Which Google Cloud service should they use?

A startup wants to deploy a containerized web application without managing servers or clusters. They need automatic scaling, a managed runtime, and pay only for resources used. Which Google Cloud service should they choose?

A company wants to use a pre-trained model to extract text from scanned invoices. They need a fully managed API that can be called via REST. Which Google Cloud service should they use?

A small e-commerce company runs its website on Compute Engine instances behind a Global External HTTP(S) Load Balancer. They are concerned about application-layer DDoS attacks, such as SQL injection and cross-site scripting (XSS), that could compromise customer data and degrade performance. The company wants a managed solution that provides both DDoS protection and web application firewall (WAF) capabilities without requiring constant manual updates. They have a limited budget and prefer a solution that is easy to configure and does not require extensive infrastructure changes. What should they implement?

A startup wants to launch a new product globally within 2 weeks. If it relied on traditional on-premises infrastructure, provisioning servers would take 6–8 weeks. By using the public cloud, the startup can launch on time. Which cloud benefit does this scenario illustrate?

A company runs a web application on Compute Engine. During seasonal sales, traffic spikes unpredictably. The operations team wants to ensure the application scales automatically without manual intervention while minimizing cost. Which solution should they implement?

Google Cloud encrypts all customer data at rest by default without any configuration required. A customer asks: 'Do we need to do anything special to encrypt our data stored in Cloud Storage?' What is the correct answer?

A company is adopting cloud to improve operational efficiency. Which TWO benefits are directly associated with cloud's resource pooling characteristic?

A company wants to reduce its carbon footprint and has committed to using 100% renewable energy for its cloud infrastructure. Which Google Cloud value proposition directly supports this goal?

A DevOps engineer notices that a Cloud Function is timing out after 9 minutes. The function performs a long-running data transformation. They need to increase the timeout. What is the maximum timeout they can set for a Cloud Function (1st gen)?

A retail company experiences sudden traffic spikes during flash sales. Their on-premises infrastructure often runs out of capacity, causing downtime. They are migrating to Google Cloud and need to automatically handle traffic spikes without manual intervention. Which approach should they take?

A startup is building a mobile app backend that requires a scalable NoSQL database with real-time synchronisation across devices. The database should support offline access and automatic conflict resolution. Which Google Cloud database service meets these requirements?

A company's application traffic is served by a Google Cloud global HTTP load balancer. They want to understand how request traffic distributes across backend instances in different regions. Which metric best represents this distribution?

An organization wants to enforce that all Compute Engine instances must have a label 'environment' set to 'production', 'staging', or 'development'. They also want to ensure that instances in the 'production' folder cannot be created with public IP addresses. Which THREE steps should they take? (Choose 3)

A company exports all their Google Cloud logs to Cloud Storage for long-term retention required by their compliance policy (7-year log retention). Which Cloud Logging feature enables routing logs to Cloud Storage?

A startup based in London wants to expand its SaaS application to serve customers in 15 countries across North America, Asia, and Europe — all within 6 months. Without cloud infrastructure, building data centers in each region would take years and cost hundreds of millions. How does cloud specifically enable this global expansion timeline?

An organization wants to use machine learning to analyze customer feedback but has no ML expertise. They need a service that can train custom models with minimal coding. Which Google Cloud service should they use?

A data analyst needs to create interactive dashboards and reports from data stored in BigQuery. They want a fully managed business intelligence platform without building custom applications. Which Google Cloud product should they use?

An engineer is troubleshooting a Cloud SQL instance that is running out of memory. They want to reduce memory usage without changing the machine type. Which action would help?

A developer wants to deploy a containerised microservice that can scale to zero when not in use and automatically scale up based on HTTP requests. The microservice is stateless and runs a custom Docker image. Which Google Cloud compute service is BEST suited for this workload?

Which TWO statements about encryption in transit in Google Cloud are correct? (Choose 2)

A security team wants to detect and respond to threats across multiple GCP projects, including identifying misconfigurations and vulnerabilities. They need a single pane of glass. Which service provides a unified view of security findings across projects?

A city government deploys thousands of IoT sensors (traffic, air quality, energy usage, waste levels) and analyzes the data in real time to optimize traffic signals, dispatch waste collection vehicles proactively, and adjust street lighting automatically. What concept describes this use of cloud and IoT?

An organisation needs to block common web attacks like SQL injection and cross-site scripting (XSS) at the edge of Google's network, before traffic reaches their applications. Which Google Cloud service should they use?

What is the difference between a Service Level Indicator (SLI), a Service Level Objective (SLO), and a Service Level Agreement (SLA)?

A retail company runs a web application on Google Kubernetes Engine (GKE). They want to automatically scale the application based on custom metrics (e.g., number of items in a shopping cart). Which TWO resources should they configure?

A retail company experiences sudden traffic spikes during holiday sales. They want to automatically add or remove compute capacity to handle the load without manual intervention. Which Google Cloud feature should they use?

A company stores its data in Google Cloud. The security team asks: can Google employees access our customer data without our knowledge or consent? What does Google's commitment ensure?

A development team builds a mobile app using Firebase. They need a real-time database that syncs data across all connected clients instantly (e.g., a collaborative to-do app where all users see updates in real-time). Which Firebase/Google Cloud service provides this?

An organization needs to enforce that developers can only create Compute Engine instances in the us-central1 region. Which IAM approach should they use?

Which cloud benefit allows a company to automatically add or remove computing resources based on demand, avoiding both over-provisioning and under-provisioning?

A company wants to allow a third-party security firm to conduct a penetration test against their Google Cloud environment to identify vulnerabilities. What is Google Cloud's policy on penetration testing?

A company wants to enable its developers to write and run code in various programming languages (Python, Node.js, Go) without provisioning or managing any servers. The code should execute in response to HTTP requests. Which Google Cloud product is designed for this serverless, function-level execution model?

A hospital runs a patient records system that must remain on-premises due to strict regulatory data residency requirements. However, they also want to use cloud-based AI for diagnostic imaging analysis. Which cloud deployment model best describes their architecture?

An e-commerce company is experiencing traffic spikes during flash sales. They need their application to automatically scale up and down based on CPU utilization, without manual intervention. Their application runs on a managed platform. Which feature should they enable?

A company has multiple teams deploying to Google Cloud and wants to allocate cloud costs by team. Each team should see only their own costs and be accountable for their spending. Which Google Cloud feature enables this cost allocation and visibility?

A company has deployed a critical application on Google Cloud and wants to understand what happens to their workloads during a Google Cloud data center maintenance event (e.g., host system upgrades). What Google Compute Engine feature handles this automatically for most VMs?

An organization wants to ensure business continuity by replicating critical data to a different region. Which Google Cloud feature should they use?

A DevOps team wants to implement a release process where a new application version is first deployed to 5% of production traffic, monitored for errors, then gradually increased to 100% if metrics remain healthy. Which deployment strategy does this describe?

A company is evaluating total cost of ownership (TCO) for moving its on-premises data center to Google Cloud. Which of the following costs should they include in the cloud TCO assessment?

A company with fluctuating demand wants to pay only for the resources it consumes, with no long-term commitments. Which Google Cloud feature allows them to automatically adjust capacity based on real-time demand?

A bank's innovation team proposes building a new digital lending product using cloud services. The risk team objects, citing regulatory concerns about data sovereignty and auditability in cloud environments. What is the most effective way for the innovation team to address these concerns?

A security team needs to detect and alert on suspicious outbound network traffic from their GCP environment, such as data exfiltration attempts. They require a managed service that analyzes traffic for threats. Which service should they use?

A company has a batch processing job that reads data from Cloud Storage, transforms it, and writes to BigQuery. The job runs nightly and takes approximately 2 hours. The team wants to reduce costs by using a managed service that automatically provisions and de-provisions resources. Which service should they use?

A company wants to gain visibility into their Google Cloud spending across multiple projects. Which TWO methods allow them to analyze cost data?

A retail bank wants to launch new digital banking features quickly to compete with fintech startups while maintaining strict regulatory compliance. Which cloud transformation strategy best addresses both agility and compliance?

A company has a fixed budget for GCP and wants to prevent any cost overrun by automatically disabling all resources when the monthly budget is exceeded. Which approach should they use?

A startup wants to run a Node.js web application with zero server management and automatic scaling. They expect unpredictable traffic and want to minimise costs. Which Google Cloud service should they choose?

Which IAM component determines what actions a user is allowed to perform on a resource?

A startup expects unpredictable Compute Engine usage and wants to minimize costs without manual intervention. Which discount type automatically applies to VM instances that run for more than 25% of a month?

An energy company is deploying smart meters across millions of homes that transmit energy consumption data every 15 minutes. Which description best characterizes the digital transformation opportunity this data creates?

A company wants to use machine learning models but has no in-house data science team. They need a service that allows them to train custom models using their own data without managing infrastructure. Which Google Cloud service should they use?

A government agency is evaluating whether to move citizen services to the cloud. Officials are concerned about vendor lock-in — specifically that they might become entirely dependent on one provider. Which approach best mitigates this risk while still allowing the agency to benefit from cloud services?

Match each Google Cloud migration term to its description.

A company uses Cloud Storage to store backup files. The files are accessed on average once per year. To minimize storage costs while complying with a 365-day retention policy, which storage class should they use?

A company must meet regulatory requirements that restrict where data can be stored and processed. They need to ensure that Google Cloud personnel have limited and audited access to their data. Which combination of services should they use?

A data engineering team needs to build a pipeline that reads event data from Pub/Sub in real time, applies transformations and aggregations, and writes results to BigQuery — all without managing any infrastructure. Which Google Cloud product is designed for this serverless stream and batch data processing use case?

A developer needs to trigger a serverless function whenever a new file is uploaded to a Cloud Storage bucket. The function will process the file and store results in Firestore. Which Google Cloud service should they use for the function?

An organization has multiple projects with many underutilized Compute Engine instances. They want to identify idle instances and generate recommendations for downsizing or deleting them. The finance team wants to see cost savings estimates. Which tool should they use?

An engineer needs to organize resources for multiple departments and enforce organization-wide policies such as restricting VM external IP addresses. Which GCP resource hierarchy level should the policy be applied at to ensure all projects inherit it?

A manufacturing company deploys sensors in its factories that send data to cloud platforms for real-time analysis. The cloud-based system predicts equipment failures 48 hours in advance, enabling maintenance before failures occur. What operational model shift does this represent?

An organization needs to store API keys, database passwords, and certificates securely, with automatic rotation and audit logging. Which Google Cloud service should they use?

A logistics company collects GPS data from 50,000 trucks every 30 seconds. Previously they sampled only 1% of this data due to storage costs. In the cloud, they store and analyze 100% of the data and discover route optimization patterns that reduce fuel costs by 12%. Which concept does this illustrate about cloud and data?

A security team needs to protect a web application behind an HTTP(S) Load Balancer from SQL injection and cross-site scripting (XSS) attacks. Which Google Cloud service provides these protections?

A marketing team wants to create interactive dashboards and reports for business stakeholders using data stored in BigQuery, without writing code. Which Google Cloud product is most appropriate for this self-service business intelligence requirement?

A company's security policy requires that all cloud-to-cloud communication between services must be encrypted in transit. An auditor asks how Google Cloud handles encryption for network traffic between Google services within its network. What is Google's default approach to encryption in transit within its infrastructure?

A business user asks what makes cloud storage different from simply buying a larger external hard drive for the office. Which characteristic most clearly differentiates cloud storage from local storage devices?

Which Google Cloud service provides a fully managed, scalable NoSQL document database suitable for mobile and web applications with real-time data synchronization?

When data is transmitted between a user's browser and a Google Cloud-hosted web application over HTTPS, which security protection does this provide?

Which TWO statements are benefits of using a multi-cloud strategy? (Choose 2)

A company's cloud costs have increased by 40% over the past quarter. The operations team wants to identify and address the root causes. Which cost optimization strategies should they investigate first?

A software team wants to host their container images securely within Google Cloud and integrate with Cloud Build for CI/CD pipelines and GKE for deployments. Which Google Cloud product serves as the managed repository for storing and managing container images?

A global financial services firm is migrating its risk analysis workloads to Google Cloud to accelerate new model deployments. Which cloud benefit most directly supports faster time-to-market?

A multinational corporation wants to serve content to users worldwide with low latency. They plan to use Google Cloud's content delivery network and points of presence. Which cloud benefit enables this?

A company's security architect wants to implement 'privacy by design' principles when building a new customer data platform on Google Cloud. What does privacy by design mean in this context?

A company has a folder for each department. The Finance team needs to prevent all projects under its folder from creating external IP addresses. What is the most efficient way to enforce this restriction?

A data engineer needs to process a continuous stream of events from a global user base, perform real-time transformations, and write the results to both Cloud Storage and BigQuery. The solution must handle sudden traffic spikes and be fully managed (no server management). Which combination of services should the engineer use?

A large bank is undergoing a cloud transformation. The CTO argues that the transformation will require a 'bimodal IT' approach — running two modes of IT simultaneously. What does bimodal IT mean in this context, and what is its primary criticism?

A retail company's IT director says: 'We need to digitize our business.' A digital transformation consultant responds that digitization and digital transformation are different things. Which statement best captures the distinction?

A company migrates its on-premises database to Cloud SQL. The security team is concerned about who is responsible for patching the underlying operating system and database engine. Under the shared responsibility model, which of the following is true?

A healthcare company must comply with HIPAA and store all protected health information (PHI) only in the United States. They use Google Cloud and want to prevent any accidental data storage outside the US. Which two services should they implement?

A developer wants to deploy a containerised web application that can scale to zero when not in use, and only pay for actual request processing time. Which Google Cloud compute service should they choose?

A company wants to analyze its Google Cloud spending trends by project, service, and labels. They need to run custom SQL queries on billing data and retain it for 2 years. Which approach should they use?

A developer wants to build a CI/CD pipeline that automatically builds a Docker container from a GitHub repository, stores the image securely, and deploys it to Cloud Run. Which THREE services should they integrate? (Select 3)

A company runs a batch job that processes data every night. The job can tolerate interruptions and currently runs on a dedicated on-premises server that is underutilized. They want to migrate to Google Cloud and minimise compute cost. Which compute option is most cost-effective?

A company is migrating its on-premises data center to Google Cloud. They want to avoid large upfront hardware costs and only pay for the resources they consume. Which cloud benefit does this represent?

A reliability engineering team wants to proactively identify weaknesses in their distributed system by deliberately injecting failures — killing random instances, introducing network latency, and cutting off database connections — to observe how the system responds. What is this practice called?

A company uses a legacy on-premises database and wants to migrate to Google Cloud with minimal changes to application code. They need a fully managed relational database that supports MySQL compatibility and automatic failover. Which service should they choose?

A company migrated a microservices application to Google Kubernetes Engine (GKE). They set up an internal HTTP(S) load balancer to route traffic to the services. However, some pods are not receiving traffic. What is the most likely cause?

A startup wants to deploy a containerized web application that can scale to zero during periods of no traffic, and they want to minimize operational overhead. Which Google Cloud compute service is the BEST fit?

What is a key benefit of using a Platform as a Service (PaaS) offering like App Engine compared to Infrastructure as a Service (IaaS) like Compute Engine?

A data analytics team processes large datasets using Apache Spark. They want a fully managed service that allows them to run Spark jobs without provisioning clusters. Which Google Cloud service should they use?

Which Google Cloud resource serves as the root node in the resource hierarchy and is linked to a Google Workspace or Cloud Identity account?

A company's security team wants to ensure that only approved corporate devices can access Google Cloud resources, regardless of whether the user has valid credentials. Which Google Cloud security capability enforces device-level access requirements?

A company wants to implement a serverless event-driven architecture where object uploads to Cloud Storage trigger a function that processes the file and stores results in Firestore. The function needs to be written in Python. Which three Google Cloud services are required?

A company wants to ensure that even if an attacker compromises an employee's password and passes MFA, the attacker cannot access sensitive Google Cloud resources from an unmanaged personal laptop. Which Google security feature enforces device trust as part of access decisions?

Which term describes the process by which organizations integrate digital technology into all areas of their business, fundamentally changing how they operate and deliver value to customers?

A developer needs to store application secrets (database passwords, API keys, OAuth tokens) securely so that they are not hardcoded in source code or environment variables. The secrets should be automatically versioned and rotatable. Which Google Cloud product is designed for this secure secrets management requirement?

A data scientist needs to build a custom machine learning model using TensorFlow on Google Cloud. The training data is stored in Cloud Storage and is hundreds of gigabytes. The data scientist wants to use a managed service that handles hyperparameter tuning and distributed training without managing infrastructure. Which TWO services can be used together to achieve this? (Choose 2)

Refer to the exhibit. A user receives this error when trying to SSH into a Compute Engine instance. Which IAM role should be granted to the user?

A company runs Compute Engine instances that experience stable, predictable usage. They want to reduce costs by committing to a 1-year term for these virtual machines. Which discount type should they use?

A startup wants to deploy a containerized web application that can scale to zero when not in use and automatically scale based on request traffic. They have limited DevOps experience and want minimal infrastructure management. Which compute service should they choose?

A user attempts to create a new Compute Engine instance in the us-central1 region and receives an error indicating that the quota for 'CPUs' has been exceeded. Where should the user go to request a quota increase?

A company needs to store petabytes of time-series IoT sensor data and query it with single-digit millisecond latency at millions of reads per second. The data has a simple key-value structure with timestamps. Which Google Cloud database is MOST appropriate?

A company is designing a disaster recovery strategy for a critical application. They need to ensure that if an entire Google Cloud region becomes unavailable, the application can still serve traffic from another region with minimal data loss. Which TWO strategies should they implement? (Choose 2.)

A developer is troubleshooting why a Compute Engine instance cannot start in a specific region. The error indicates a quota limit. Which TWO steps should the developer take?

A company is building a data pipeline that ingests events from multiple sources, processes them in real-time, and stores the results in a data warehouse for analysis. They need a fully managed, serverless solution for stream processing. Which THREE Google Cloud services should they use?

A company is adopting a multi-cloud strategy to avoid vendor lock-in and use best-of-breed services. Which TWO statements accurately describe multi-cloud? (Choose 2)

An organization wants to ensure that all data stored in Cloud Storage is encrypted with customer-managed keys that can be rotated on demand. They also need to log every key use for audit compliance. Which combination of services should they use?

Refer to the exhibit. A team deployed this Cloud Run service. During a load test, the service receives high traffic, but the number of container instances never exceeds 10. What is the most likely cause?

A small startup can now access the same world-class AI, machine learning, and global infrastructure that previously only Fortune 500 companies with billion-dollar IT budgets could afford. Which cloud characteristic enables this competitive equalization?

A consumer goods company uses cloud-based demand sensing — analyzing real-time sales signals, social media trends, and weather data to adjust production runs dynamically. This has reduced stockouts by 35% and overstock waste by 28%. Which aspect of digital transformation does this most directly exemplify?

An organization wants to ensure that all projects under a specific folder inherit a policy that disables the creation of external IP addresses. Which Google Cloud resource hierarchy level should the policy be applied to enforce this requirement for all child resources?

A data analyst wants to create interactive dashboards and reports using data from BigQuery, without writing code. Which Google Cloud BI tool should they use?

Which of the following is a characteristic of the cloud according to the NIST definition?

A healthcare company needs to store patient data in Google Cloud and must comply with HIPAA (Health Insurance Portability and Accountability Act). Which statement correctly describes how Google Cloud helps them achieve HIPAA compliance?

An SRE team is practicing 'chaos engineering' by simulating a zone-level failure in their staging environment. They find that their application does not automatically recover — traffic is not redirected and the service remains down. What architectural component is most likely missing?

A company wants to encrypt sensitive data stored in Cloud Storage with a key that is generated and stored on-premises using a hardware security module (HSM). They do not want Google to have access to the key. Which encryption option should they use?

A CISO is implementing a Zero Trust security architecture for the company's Google Cloud environment. Under Zero Trust, which fundamental assumption about network traffic changes compared to traditional perimeter-based security?

A DevOps engineer wants to automatically delete a Cloud Storage object after 30 days from creation. The object is stored in a bucket with the 'Standard' storage class. Which approach should the engineer use?

A financial services company is migrating its on-premises monitoring system to Google Cloud. They need to collect metrics, logs, and traces from multiple projects and provide a unified view for their operations team. Security requires that logs containing sensitive data be stored with additional encryption and access controls. Which combination of services should they use?

A developer needs to debug a production issue by analyzing logs from multiple microservices. Which Google Cloud service should they use to filter and search logs in real time?

A company's compliance team asks what evidence they can provide to regulators to demonstrate that Google Cloud services meet industry security standards. Which type of documentation most directly provides this evidence?

A large hospital network wants to move patient records to the cloud and enable doctors to access records from any device. The Chief Medical Officer is supportive, but the legal department raises data privacy concerns, and the IT department fears job losses. Which aspect of digital transformation does this scenario highlight?

According to the shared responsibility model, which of the following is the customer responsible for?

A startup founder argues that her company has an advantage over established enterprises when adopting cloud-native technologies. Which characteristic of startups most supports this claim in the context of digital transformation?

A company stores customer data in Google Cloud and wants to ensure data confidentiality in the event that hardware is decommissioned and returned by Google. How does Google protect customer data when storage hardware reaches end of life?

A development team runs a web application on Cloud Run. They need to store session state across requests. Which Google Cloud service should they use?

A company's cloud cost has grown significantly. A FinOps analysis reveals the largest waste category is idle Cloud SQL instances — 12 database instances that were provisioned for projects that have since ended, but were never deleted. What process failure most directly caused this waste?

A company wants to migrate its on-premises PostgreSQL database to Google Cloud with minimal application changes. They need high availability and want to leverage AI-powered optimizations for performance. Which service should they choose?

A company wants to run containerized applications on Google Cloud without managing the underlying infrastructure. Which service should they use?

Which TWO statements accurately describe Google Cloud's sustainability commitments? (Choose 2)

A finance team needs to analyze detailed cost data across multiple projects, including resource-level breakdowns, labels, and cost attribution. They want to export this data to a BigQuery dataset for custom analysis. Which billing export option should they enable?

A company is deploying a global web application with static content (images, CSS, JS) and dynamic API calls. They want to reduce latency for users worldwide. Which TWO services should they combine? (Choose 2)

An e-commerce company needs a globally distributed relational database with strong consistency and 99.999% SLA to handle customer orders and inventory across multiple regions. They require SQL compatibility and automatic replication. Which database should they use?

A company wants to implement a zero-trust security model to replace its legacy VPN for accessing internal web applications. Employees use both company-managed and personal devices. Which Google Cloud service provides context-aware access based on user identity and device posture?

A company is migrating its on-premises data warehouse to Google Cloud. The data warehouse contains structured relational data (sales transactions, customer records) and is queried using standard SQL. The company wants to separate compute and storage costs and automatically scale compute resources up and down based on query load. Which Google Cloud service is most appropriate?

A security architect wants to implement a 'never trust, always verify' security approach where no user or service is assumed to be trustworthy based on network location alone. Every access request must be authenticated and authorized regardless of whether it comes from inside or outside the corporate network. Which security model describes this approach?

An engineer needs to increase the default limit of 24 CPUs per region for Compute Engine instances in their project. They have already consumed 20 CPUs and need to launch a new instance with 8 CPUs. What should they do?

Which THREE actions can help reduce Compute Engine costs? (Choose three.)

A global e-commerce company wants to build a product recommendation engine that suggests items to customers based on their real-time browsing behavior and purchase history. They want a pre-built solution that doesn't require building an ML recommendation model from scratch. Which Google Cloud product is purpose-built for retail recommendations?

A company wants to run a critical stateful application on Compute Engine with the highest availability. The application requires block storage that can survive a zone failure. Which TWO actions should they take? (Choose TWO)

A traditional insurance company is facing competition from 'insurtech' startups that use telematics data, AI, and cloud platforms to offer usage-based, real-time personalized insurance products. The traditional company's CTO proposes a cloud-first digital transformation. Which business model change most clearly represents digital transformation rather than digitization?

A startup wants to launch a new web application globally with minimal upfront investment and the ability to scale automatically based on traffic. Which cloud deployment model best meets these requirements?

A product manager wants to understand what 'latency' means for her company's cloud-hosted e-commerce application. Her developer explains that latency is critical for user experience. Which definition of latency is most accurate in this context?

A company wants to use Google Cloud for a workload that requires compliance with PCI DSS. Which of the following is a Google responsibility under the shared model?

Which TWO Google Cloud services help prevent data exfiltration from virtual machines?

A company has migrated sensitive customer data to Google Cloud. The legal team asks: 'If Google is hosting our data, who is responsible for ensuring that data is not improperly accessed by unauthorized users through our application?' Under the shared responsibility model, how should the CTO answer?

A company wants to use Google Cloud's Generative AI capabilities to build an internal assistant that can answer questions about company policies using documents stored in Google Drive. Which Google Cloud product provides pre-built infrastructure for building this type of AI application?

A company has a requirement from their security auditor to demonstrate that all administrative actions performed in Google Cloud (such as creating VMs, modifying IAM policies, and deleting storage buckets) are logged and tamper-evident. Which Cloud Logging log type fulfills this requirement?

A company is migrating to Google Cloud and wants to reduce operational overhead for managing their infrastructure. Which Google Cloud service allows them to define infrastructure as code and automate provisioning?

A developer wants to deploy a serverless application that runs code in response to HTTP requests and events from other Google Cloud services. They also need to store configuration and session data in a fast, in-memory data store. Which TWO services should they use? (Choose TWO)

A company has a Google Cloud environment with 50 projects and 200 engineers. The security team wants to ensure that a new security policy — requiring all Cloud Storage buckets to have uniform bucket-level access enabled — applies to all existing and future buckets across all projects. Which approach scales to the entire organization?

A company wants to create a customer-facing conversational AI assistant that understands natural language and can answer questions about its products, integrated into their website and mobile app. Which Google Cloud AI product is the most appropriate starting point?

A regional insurance company competes with an InsurTech startup that uses cloud-native AI to personalize policies, process claims in minutes, and launch new products weekly. The traditional insurer takes 6 months to launch new products and 2 weeks to process claims. Which cloud-enabled business model advantage does the startup have?

A developer wants to deploy a Python script that runs in response to new files uploaded to a Cloud Storage bucket. The script performs simple image transformations. Which compute service is the BEST fit?

An organization's security team reviews their Google Cloud environment and finds that several Cloud Storage buckets have `allAuthenticatedUsers` bindings, and multiple service accounts have the Owner role. Which Google Cloud tool automatically identifies these types of high-risk IAM configurations?

A multinational company must ensure that personal data of European citizens stored in Google Cloud cannot be accessed by or transferred to systems outside the European Union, as required by GDPR data residency requirements. Which Google Cloud controls most directly enforce this?

A company uses committed use discounts (CUDs) for its production workload baseline. An engineer proposes also using sustained use discounts (SUDs) for the same VMs. Why is this incorrect?

An operations team is performing a post-incident review after a production outage. The team lead insists that the review must follow a 'blameless postmortem' approach. What does this mean, and why is it important for organizational learning?

A company wants to analyse streaming data from IoT devices in real time with sub-second latency, using SQL queries. Which combination of services should they use?

An organization wants to ensure business continuity by failing over to a secondary region in case of disaster. Which cloud characteristic enables this capability?

A team needs to run a machine learning model using custom code in Python with TensorFlow, and they want to train it at scale on GPU hardware without managing infrastructure. Which Google Cloud service is best suited?

An organization is considering cloud adoption. Their CTO argues that 'the cloud is just someone else's computers — why should we trust it?' Which is the strongest counterargument for cloud trust and reliability?

A global gaming company needs to serve low-latency content to players worldwide. They want to cache static assets (images, videos) at edge locations closest to users. Which Google Cloud product should they use?

A retail bank is building a partnership with a fintech startup. The bank provides regulated financial services infrastructure and customer reach; the fintech provides innovative digital experiences. Which cloud architectural pattern most naturally enables this kind of bank-fintech partnership?

A traditional bank processes loan applications using manual paper-based workflows that take 2 weeks per application. The bank wants to use cloud technology to reduce this to under 24 hours. Which cloud-enabled capability primarily drives this transformation?

A team is developing a machine learning model using TensorFlow. They want to train the model on a large dataset stored in Cloud Storage, using GPUs, and then deploy the trained model for online predictions with autoscaling. Which GCP service should they use for the entire workflow?

When choosing a Google Cloud region for a new application, which factors should primarily drive the decision?

An engineer needs to prevent data exfiltration from a project by ensuring that Cloud Storage buckets can only be accessed from within a VPC network. Which TWO steps should they take? (Choose 2)

A government digital transformation initiative aims to make citizen services available online 24/7. A project manager notes that the technical implementation is proceeding well but citizen adoption remains low. Which dimension of digital transformation has the initiative overlooked?

A company hosts a web application that receives requests from users globally. To handle failures, they run three identical copies of their application behind a load balancer. When one copy fails, the load balancer automatically stops sending traffic to it. What load balancing feature enables this?

A company uses two different public cloud providers (AWS for their North American operations and Google Cloud for their European operations) to meet data residency requirements and avoid vendor lock-in. Which deployment model does this represent?

A small business wants to host a static website with minimal management overhead. They want high availability and low cost. Which Google Cloud service should they use?

A company wants to grant a data analyst read-only access to specific BigQuery datasets, but only if the request comes from within the corporate network. Which two Google Cloud tools should they combine to enforce this?

A company uses Cloud Monitoring to collect metrics from their applications running on Google Kubernetes Engine (GKE). They want to create custom dashboards and set up alerting policies. Which THREE capabilities are available in Cloud Monitoring? (Choose THREE.)

A digital media company hosts video content globally. They want to reduce origin server load and deliver content faster to viewers worldwide. Their current architecture routes all viewer requests directly to the origin servers in `us-central1`, causing high latency for viewers in Asia and Europe. Which Google Cloud networking capability addresses this?

A financial services firm is migrating a legacy application to Google Cloud. The application requires static IP addresses that must not change during migration. The network team wants to minimize downtime. Which migration strategy should they use?

A security team is conducting a threat model for their Google Cloud environment. They identify 'insider threat' — a malicious authorized employee who intentionally exfiltrates or destroys data — as a key risk. Which combination of Google Cloud controls most effectively mitigates this risk?

An organization wants to protect its web application from DDoS attacks and SQL injection. Which Google Cloud service should they deploy?

A company needs to store petabytes of time-series IoT sensor data and query it with single-digit millisecond latency at millions of reads per second. The data has a simple key-value structure with timestamps. Which Google Cloud database is MOST appropriate?

What compliance certification verifies that an organization's Information Security Management System (ISMS) meets internationally recognized standards for managing information security risks?

A company wants to enforce that all Cloud Storage buckets in a project have uniform bucket-level access enabled. Which Google Cloud tool should they use?

A company wants to migrate its on-premises MySQL database to Google Cloud with minimal changes to the application. Which managed database service should they use?

A data engineer needs to process a large dataset stored in Cloud Storage using Apache Spark. They want to minimize cluster management overhead. Which TWO Google Cloud services can be used together to achieve this? (Choose 2.)

A company wants to migrate its on-premises Oracle database to Google Cloud. They need PostgreSQL compatibility with high performance for transaction processing and built-in support for AI-driven optimisations. Which database service should they choose?

A company wants to deploy a multi-tier web application on Google Cloud that requires high availability across zones. The application consists of a stateless web frontend and a stateful database backend. Which TWO actions should the company take to meet the high availability requirement? (Select two.)

A company runs a batch processing job every hour using Cloud Dataflow. They notice increasing costs and want to optimize. Which three actions would reduce cost? (Choose exactly 3.)

Match each Google Cloud storage class to its use case.

A security team needs to monitor and analyze logs from multiple GCP projects to detect threats across the organization. They require a SIEM solution that can ingest logs from on-premises and other clouds. Which service should they use?

A company wants to monitor the CPU and memory utilisation of their Compute Engine instances and set up alerts when utilisation exceeds 80%. Which Google Cloud service should they use?

A team runs a production Compute Engine instance that has been running for 15 days in a 30-day month. They also have a second instance that runs occasionally for testing. They want to maximize cost savings without committing to a 1-year or 3-year term. Which discount will apply automatically?

A company uses Cloud SQL and wants to encrypt data at rest with a key that they manage and rotate themselves. They also want to ensure that the encryption happens automatically before data is written to disk. Which configuration should they choose?

When a company moves from maintaining its own data center to using Google Cloud, which operational responsibility does Google assume that the company previously managed?

A retail company needs to process financial transactions requiring strict ACID compliance, serve global customers with consistent low-latency reads and writes, and scale horizontally without downtime for maintenance. Which Google Cloud database service is uniquely designed to meet all three requirements simultaneously?

Google Cloud's infrastructure is designed to be highly available across multiple failure domains. What are 'availability zones' in Google Cloud, and how do they differ from 'regions'?

Which Google Cloud service is a managed platform for building, training, and deploying ML models, including support for AutoML and custom models?

A company needs to organize their GCP resources into a hierarchy that reflects their departments: Engineering, Marketing, and Finance. Each department has multiple projects. They also want to apply common policies to all departments except Finance, which has special compliance requirements. Which TWO steps should they take?

A retail company experiences sudden traffic spikes during flash sales. Their on-premises infrastructure often runs out of capacity, causing website slowdowns. Which cloud characteristic directly solves this problem?

A DevOps engineer wants to audit all actions performed by Google personnel on their customer data stored in Cloud Storage. They need to review logs that show access by Google employees and the reason for access. Which logging feature should they enable?

A team uses multiple cloud services and wants to deploy all resources — VPCs, Cloud SQL databases, GKE clusters, and IAM roles — using a declarative, open-source infrastructure-as-code tool that works across multiple cloud providers. Which tool integrates natively with Google Cloud for this purpose?

A company is running a PostgreSQL database on Cloud SQL and needs to ensure high availability with automatic failover in the event of a zone failure. Which configuration should they use?

A company has multiple projects and wants to organize them by environment (dev, test, prod) and by team (engineering, marketing, finance). They also need to apply IAM policies that affect all projects in a given environment. Which TWO steps should they take?

A security engineer notices that a Compute Engine instance is running a VM with a public IP that should not be accessible from the internet. They want to ensure this configuration is prevented by default for all future projects in the organization. What should they do?

A healthcare company runs its critical application on Google Cloud. The application uses Cloud SQL for patient records, Cloud Storage for medical images, and Pub/Sub for data ingestion. The security team requires that all data at rest be encrypted with a key that is managed and rotated by their on-premises HSM. They also need to ensure that any potential data exfiltration is immediately detected and prevented. Recently, a vulnerability scan revealed that a Cloud SQL instance had a public IP. The team wants to enforce that no Cloud SQL instance can be created with a public IP across the entire organization. Additionally, they need to implement a solution to monitor and alert on any suspicious activity, such as a large download from Cloud Storage. They have a limited budget and cannot afford complex custom solutions. Which combination of Google Cloud services should they use to meet these requirements?

Which Google Cloud service provides a fully managed, serverless data warehouse for petabyte-scale analytics with SQL?

A startup wants to launch a new mobile app globally. They expect user traffic to be unpredictable and want to only pay for the compute resources they use. Which cloud benefit BEST addresses this need?

An organization wants to reduce latency for users in Europe. They plan to deploy their application in a Google Cloud region located in Europe. Which region should they choose?

Which TWO of the following cloud characteristics directly enable a business to innovate faster than using traditional IT?

A company wants to receive near-real-time notifications when spending in a project exceeds 50%, 75%, and 100% of a monthly budget of $50,000. They also want to automatically disable billing for the project if spending exceeds $60,000. Which configuration should they use?

A multinational corporation needs to establish a private, low-latency connection between their on-premises data center and Google Cloud. The connection must be consistent, reliable, and support at least 10 Gbps throughput. Which solution should they use?

A security administrator needs to grant a developer the minimum permissions to create and delete Cloud Storage buckets in a specific project, but NOT allow them to modify the contents of those buckets (e.g., upload or delete objects). Which IAM role should they assign?

A company wants to use machine learning to analyze customer reviews without building and training models from scratch. They need a pre-trained model that can classify sentiment. Which Google Cloud service should they use?

A company wants to reduce costs for its batch processing jobs that run nightly on Compute Engine. The jobs are fault-tolerant and can be interrupted. They are considering using preemptible VMs. Which THREE statements about preemptible VMs are true?

A solutions architect is explaining why using managed cloud database services (like Cloud SQL or Cloud Spanner) is preferable to running a database on a self-managed virtual machine in most cases. What is the primary operational advantage of managed database services over self-managed databases on VMs?

A developer is troubleshooting a slow response from a Cloud Run service. Which Google Cloud service can they use to trace requests across microservices?

A company wants to replace its VPN-based remote access with a solution that grants access based on user identity, device security status, and context (e.g., location, IP). Which Google Cloud service should they use?

A company is building a microservices architecture on Google Kubernetes Engine (GKE). They need to expose services externally with HTTPS, distribute traffic across the cluster, and protect against DDoS attacks. Which THREE Google Cloud services should they combine? (Choose THREE)

A security engineer needs to analyze network traffic for malicious payloads and anomalies in real-time across multiple VPC networks in a project. The solution must be managed and not require deploying third-party appliances. Which service should they use?

A company is using Cloud SQL for MySQL and notices that read queries are becoming slow as the application scales. They want to offload read traffic from the primary instance to improve performance. Which Cloud SQL feature should they enable?

A technology company runs its containerized microservices on Google Kubernetes Engine (GKE). The development team frequently pushes new container images to Container Registry, and those images are deployed to a production cluster. The security team recently discovered that a few running containers have critical vulnerabilities from outdated base images. They want to enforce a policy that only vulnerability-scanned and approved images can be deployed in the production cluster. The team uses Cloud Build for CI/CD and Container Analysis for vulnerability scanning. Which solution should they implement to meet this requirement?

An organization stores sensitive data in BigQuery. They need to restrict access to specific columns based on user role, while allowing analysis at the dataset level. Which feature should they use?

A cloud team receives an alert that a critical production service's error rate has spiked. Following incident response best practices, what is the correct first priority action?

A retail company wants to migrate its on-premises e-commerce platform to Google Cloud. The application is stateless and runs on virtual machines. The company wants to minimize operational overhead and allow the application to automatically scale based on CPU utilization. Which Google Cloud service should they use?

A company is building a real-time analytics pipeline on Google Cloud. They need to ingest streaming data from IoT devices, process it with low latency, and then store the results for real-time querying. Which TWO services should they use? (Choose TWO.)

An organization wants to group related projects under a common parent for policy enforcement and cost tracking. Which GCP resource hierarchy level should be used to group several projects that belong to the same business unit?

A company wants to ensure that their customer data stored in BigQuery is encrypted at rest using customer-managed encryption keys (CMEK). Which Google Cloud service should they use to manage these keys?

A startup wants to launch a social media app globally. They have no existing IT infrastructure and very limited capital. The app will experience unpredictable traffic patterns, with usage expected to rapidly grow after viral campaigns. They need low latency for users across North America, Europe, and Asia. The development team is small and wants to focus on coding rather than operations. They also need to store user-generated content like images and videos. The CTO is evaluating whether to build on-premises or use cloud services. Which approach best meets their needs?

A developer accidentally commits an application's Google Cloud service account key to a public GitHub repository. The key is valid and grants access to production resources. What is the correct immediate response?

An enterprise wants employees to access internal web applications securely from any location (including remote work from home) without using a VPN. Employees should only access apps they're authorized for, based on their identity and device context. Which Google Cloud service enables this zero-trust access model?

An administrator wants to enforce that all API calls to a specific Cloud Storage bucket must come from a limited range of IP addresses. Which configuration should they use?

A company wants to proactively identify underutilized Compute Engine VMs (high provisioned capacity but low actual usage) to reduce costs. Which Google Cloud tool provides recommendations for right-sizing VMs?

A company is migrating its on-premises PostgreSQL database to Google Cloud. They need a managed service that is fully compatible with PostgreSQL, offers high availability, and provides automated backups. Which TWO Google Cloud services should they consider?

Match each Google Cloud security concept to its description.

A team is designing a CI/CD pipeline for a microservices application. They want to automatically build container images from source code, store them securely, and deploy to GKE. Which THREE services should they include? (Choose three.)

A non-profit organization with limited IT staff wants to use cloud to improve its fundraising and donor management without hiring technology specialists. Which type of cloud service model is most appropriate for this organization's need?

A company is migrating a legacy monolithic application to Google Cloud. They want to break it into microservices without managing underlying servers or container orchestration. Which TWO Google Cloud services allow them to deploy containerized applications serverlessly?

A company runs a high-performance computing (HPC) workload on Compute Engine that requires low-latency, high-throughput scratch storage. The workload is checkpointed every hour. Which TWO storage options should the engineer consider for the scratch storage? (Choose 2)

A data analytics firm wants to query data across Cloud Storage and BigQuery without moving the data. They need a single SQL interface. Which Google Cloud service enables this?

A developer needs to deploy a containerized microservice that scales to zero when not in use and automatically scales up on incoming traffic. The microservice uses a custom container image that listens on port 8080. Which Google Cloud compute service is BEST suited for this requirement?

A healthcare startup is building a HIPAA-compliant application on Google Cloud. They need to encrypt data at rest and manage their own encryption keys. Which service should they use for key management?

An organization wants to use Google Cloud to analyze large-scale genomic data. The data is stored in Cloud Storage in a compressed format. They need to run a custom Python pipeline that preprocesses the data and then uses a GPU-intensive algorithm for alignment. The preprocessing is CPU-bound and takes 30 minutes per sample, while the alignment takes 1 hour per sample on a GPU. They have thousands of samples. Which compute approach is MOST cost-effective?

A company is migrating a legacy monolithic application to Google Cloud. The application currently runs on a single physical server with a custom Linux distribution. The team wants to minimize changes to the application while gaining the benefits of cloud infrastructure. Which migration strategy should they use?

A company runs batch processing jobs on scheduled intervals. They want to minimise costs by using short-lived compute capacity that can be interrupted but offers significant discounts. Which type of Compute Engine VM should they use?

Which defense-in-depth layer includes measures like access controls, vulnerability management, and intrusion detection systems?

A company's finance team wants to understand why their cloud bills vary significantly month to month, unlike their fixed on-premises IT costs. Which fundamental cloud pricing characteristic explains this variability?

A data team has an IAM policy on a BigQuery dataset as shown. Alice needs to run a query that joins across multiple datasets. She receives a permission error. What is the most likely cause?

A company runs a batch processing workload every night that takes 60 minutes on a single n1-standard-32 VM. They want to reduce costs by using preemptible VMs but need the job to complete within 90 minutes. The job can be parallelized if necessary. Which approach is most cost-effective?

A company uses multiple public clouds (AWS, Azure, Google Cloud) for different workloads. They want to centralize monitoring and logging. Which Google Cloud service can aggregate logs from all clouds?

A company needs to set a budget for their GCP project and receive notifications when spending reaches 50%, 90%, and 100% of the budget. Which action should they take?

A company needs to encrypt data at rest using keys that they manage, but they want to reduce operational overhead by having Google Cloud host the key management infrastructure. Which TWO options achieve this? (Choose 2)

A developer wants to deploy a containerized application that can scale down to zero when not in use and charges only for the resources consumed during request processing. Which Google Cloud compute service should they choose?

A media company has a web application that serves video content globally. The application is deployed on Compute Engine instances behind a TCP load balancer in a single region. Users in distant regions experience high latency. The company wants to improve performance for all users while keeping operational overhead low. They also need to handle sudden spikes in traffic during live events. What should they do?

What is the primary purpose of VPC Service Controls?

A company's PostgreSQL database has grown to 50 TB and their application requires near-zero downtime, automatic failover, and the ability to scale reads horizontally without the migration complexity of switching to Spanner. Which Google Cloud database product is specifically designed as a fully managed, highly scalable PostgreSQL-compatible database?

Drag and drop the steps to recover a Compute Engine VM from a snapshot in the correct order.

An organization uses labels to track cost by environment (dev, test, prod). However, the Finance team notices that some resources are missing the 'env' label. Which service can automatically suggest labeling resources that are missing required labels?

A security administrator needs to ensure that Google personnel do not access customer data without explicit authorization. Which service should they use to get logs of Google employee access?

A machine learning team wants to train, evaluate, deploy, and monitor ML models in a unified platform without managing infrastructure, and with built-in support for experiment tracking, model versioning, and A/B testing between model versions. Which Google Cloud product provides this end-to-end managed ML platform?

An organization uses Security Command Center (SCC) premium tier and wants to automatically remediate a specific finding type by disabling public access to Cloud Storage buckets. What is the recommended approach?

Match each Google Cloud service to its primary use case.

A company wants to implement the principle of least privilege for a team of developers who need to deploy applications on Compute Engine and monitor logs. Which THREE IAM roles should be granted? (Choose 3)

A company is planning a cloud migration and wants to understand the difference between 'lift and shift' and 'cloud-native' approaches. Which statement correctly distinguishes these two migration strategies?

A company has deployed a web application on Compute Engine in us-central1-a. Users in Europe report high latency. The company wants to reduce latency by serving traffic from a location closer to European users. However, they currently use a zonal managed instance group. What is the MOST cost-effective and operationally simple approach to reduce latency for European users?

A company uses Google Workspace for identity. They want employees to use their Google Workspace credentials to access third-party applications (Salesforce, Slack, etc.) without separate passwords for each app. Which technology enables this?

A company wants to migrate its existing on-premises virtual machines (VMware VMs) to Google Cloud with minimal changes to the operating system and applications. Which Google Cloud product is specifically designed for migrating on-premises VMs to Google Cloud with minimal modification?

A startup needs to quickly deploy a web application with minimal infrastructure management. They want to focus on code, not servers. Which Google Cloud service model is most appropriate?

An engineer needs to analyze detailed cost data, including resource-level usage costs and labels, to create custom reports. Which approach should they use?

A global gaming company uses Cloud Spanner for their leaderboard. They notice that write latency spikes during peak hours. The database is currently deployed in a single region. Which scaling strategy should they implement to reduce write latency globally?

Match each Google Cloud AI/ML term to its definition.

Google Cloud's operations suite includes Cloud Monitoring for metrics. What is the difference between 'monitoring' and 'observability' in cloud operations?

A company is evaluating whether to use a content delivery network (CDN) for its e-commerce website. Which scenario would most benefit from CDN implementation?

Google's physical data center security includes multiple layers of protection. Which of the following is NOT a physical security measure Google uses at its data centers?

A company wants to reserve Compute Engine instances for a 3-year term to get the maximum discount. They expect consistent usage and want the discount to apply automatically to any instance matching the configuration. Which purchasing option should they choose?

A company wants to reduce its on-premises data center footprint by moving workloads to Google Cloud. They need to maintain low-latency connectivity between their remaining on-premises equipment and their Google Cloud VPC. Which Google Cloud service should they use?

A company wants to reduce its Google Cloud costs without reducing its workload capacity. The team identifies that several production VMs consistently use less than 30% of their allocated CPU and memory. What is the most straightforward cost optimization action?

You are monitoring Compute Engine instances with Cloud Monitoring. You notice that autoscaling is not triggering even though CPU utilization is above 80% for several minutes. The managed instance group has autoscaling based on CPU utilization with a target of 0.8. What is the most likely cause?

A small startup wants to protect its web application from common attacks like SQL injection and cross-site scripting (XSS). They also need DDoS protection. Which Google Cloud security service should they use?

A company wants to reduce costs for their long-running Compute Engine instances by committing to a 1-year term. Which type of discount should they use?

A financial services firm must comply with PCI DSS and wants to run workloads on Google Cloud. They need to isolate their production environment from development and enforce granular access controls. Which Google Cloud service should they use?

A healthcare organization wants to build an application that ingests FHIR-formatted patient records from multiple hospital systems, normalizes them, and makes them queryable by clinical researchers. Which Google Cloud service is purpose-built for healthcare data interoperability?

A company currently uses Hadoop and Spark for batch data processing on a large on-premises cluster. They want to migrate these workloads to Google Cloud with minimal rewriting of existing Spark and Hadoop jobs. Which Google Cloud service is the best fit?

A development team needs a managed relational database (MySQL or PostgreSQL) for their web application. They want automatic backups, patching, and high availability without managing a database server. Which Google Cloud service provides this?

A data engineering team needs to process streaming data from Cloud Pub/Sub, perform transformations, and write the results to BigQuery. The team requires exactly-once processing semantics and automatic scaling. Which service should they use?

A company wants to know: if Google Cloud experiences a data breach that exposes customer data, what are Google's notification obligations under standard Cloud service terms?

A project manager wants a cost-effective way to run batch processing jobs that run for a few hours each night. The jobs are fault-tolerant and can be interrupted. Which Compute Engine option is most suitable?

A company needs to analyze streaming data from IoT devices in real time. Which Google Cloud service should they use as the primary ingestion and analysis pipeline?

A traditional brick-and-mortar bookstore chain wants to use cloud technology to compete with online retailers. The store manager proposes putting all store inventory data in the cloud. The digital transformation advisor says this is only the first step. What does the advisor mean?

An engineer wants to export billing cost data to BigQuery for custom reporting. They have created a BigQuery dataset and linked it to the billing account. However, the billing export tables are not being populated. What is the most likely cause?

An engineer wants to analyze historical spending trends and break down costs by project, region, and service. They need to run complex SQL queries on the billing data. What is the recommended approach?

A company's application experiences a P1 (critical) production incident at 2 AM on a Sunday. The on-call engineer resolves the issue after 3 hours but isn't sure which team members to contact or what steps to follow during an incident. What operational practice and tooling would have helped manage this incident better?

A financial services firm must store customer transaction logs for 7 years to comply with regulatory requirements. The data must be immutable after writing, and access should be restricted to authorized auditors only. Which storage solution and configuration should they use?

A company runs workloads across Google Cloud and on-premises environments. They want a single management plane to deploy and manage containerized applications consistently across both environments using the same tooling and policies. Which Google Cloud product provides this unified hybrid/multi-cloud management?

A data analyst needs to run ad-hoc SQL queries on a large dataset stored in Cloud Storage. The data is in CSV format and does not require real-time results. Which Google Cloud service should they use?

A startup wants to automatically rotate encryption keys used for Cloud Storage objects every 90 days. Which service should they use?

A company wants to receive a 15-minute response time for Priority 1 production issues and have a dedicated Technical Account Manager. Which support plan should they purchase?

Which Google Cloud tool allows customers to measure the gross carbon emissions associated with their Google Cloud usage?

Which term describes the model where the cloud provider is responsible for the security of the cloud infrastructure, while the customer is responsible for security within their own cloud environment (data, applications, access management)?

A security team needs to implement a zero-trust architecture for a web application that is accessed by both internal employees and external partners. They require context-aware access that checks device posture and identity. Which THREE components should they use? (Choose three.)

Which Google Cloud service can be used to create and manage virtual networks, subnets, firewall rules, and VPN connections?

Which Google Cloud service provides a fully managed SIEM solution for log analysis, threat detection, and incident response?

A company runs batch analytics jobs every night using Apache Spark on a cluster. The jobs require 100 vCPUs and run for 3 hours. The cluster must be created, run, and then shut down automatically to minimise cost. Which service should they use?

A product team is discussing how to handle a planned 48-hour maintenance window for a critical customer-facing service. The SRE team argues the maintenance window is unnecessary with proper cloud architecture. Which cloud capability eliminates the need for planned downtime maintenance windows?

An organization needs to store archival data that must be retained for 10 years for compliance. Access to this data is expected to be less than once a year, and retrieval can take up to 24 hours. Which Cloud Storage class is the MOST cost-effective for this data?

A company's operations team needs visibility into network traffic patterns, latency between services, and potential network bottlenecks across their Google Cloud deployment. Which Google Cloud product provides network performance monitoring, connectivity testing, and traffic analysis?

Which Google Cloud security layer is responsible for protecting data stored on disk using either Google-managed or customer-managed encryption keys?

Drag and drop the steps to create a new Virtual Private Cloud (VPC) network with a subnet in Google Cloud into the correct order.

A company runs a stateful web application on Compute Engine. They need to ensure that persistent data is retained if an instance fails, and that traffic is automatically distributed across healthy instances. Which TWO Google Cloud services should they use? (Choose 2)

A company's cloud costs have grown faster than its business. The FinOps team is implementing cloud cost governance. Which practice most effectively ensures that individual teams are accountable for their cloud spending?

A developer wants to run her application code without managing any servers, operating systems, or runtime environments. She wants to focus entirely on writing business logic. Which cloud service model best fits this requirement?

A financial services company is required to keep all data within a specific geographic region for regulatory compliance. They plan to deploy a globally distributed application using Cloud Spanner. How should they configure Cloud Spanner to meet this compliance requirement?

A traditional bank is considering adopting open banking — exposing its financial data and transaction capabilities as APIs to third-party developers (with customer consent). This enables FinTech startups to build new financial products on top of the bank's infrastructure. What cloud capability is most essential to safely and scalably implement open banking?

A company's web application faces DDoS attacks and SQL injection attempts from the internet. They need a service that sits in front of their load balancer to block malicious traffic before it reaches their application servers. Which Google Cloud service provides this protection?

An architect is evaluating whether to use a relational database or a NoSQL database for a new application that must store product catalog data. Products have highly variable attributes — a book has ISBN, author, and genre; a bicycle has frame size, wheel diameter, and material. Which database characteristic makes NoSQL document databases advantageous for this use case?

Drag and drop the steps to set up a Cloud Storage bucket with uniform bucket-level access into the correct order.

A startup needs to migrate an on-premises web application to the cloud with minimal operational overhead. The application runs on a custom runtime that is difficult to containerize. The team wants to focus only on code, not infrastructure management. Which Google Cloud service is MOST appropriate?

An organization wants to enforce that all data stored in Cloud Storage buckets is encrypted with a key that they control and rotate periodically. They also need to audit key usage. Which approach should they take?

A company stores sensitive data in Cloud Storage. They want to restrict access to only users from the company's corporate network (IP range 203.0.113.0/24) and ensure data is encrypted at rest using a customer-managed key. Which TWO configurations are required? (Select 2)

A cloud architect wants to ensure that only certain users in the finance team can access a Cloud Storage bucket containing invoices. They also want to log all access attempts. Which two services should they use?

A financial services company is subject to regulations requiring them to demonstrate that their cloud provider's employees cannot access customer data without the customer's explicit approval. Which Google Cloud feature most directly addresses this requirement?

A data engineer needs to process streaming clickstream data in real-time, apply transformations, and write the output to BigQuery. Which Google Cloud service is built for this use case?

A company stores sensitive healthcare data in Google Cloud and must comply with HIPAA. They are using Cloud Storage and BigQuery. Which of the following is the customer responsible for under the shared responsibility model?

A team notices that their Compute Engine instances are consistently running at low CPU utilization. They want to reduce costs by receiving recommendations to resize or stop idle VMs. Which service provides these recommendations?

A team uses Google Workspace (Gmail, Docs, Sheets) for their daily work. They do not manage any servers or software installation — Google maintains everything. Which cloud service model does Google Workspace represent?

A company uses Google Cloud across 5 teams, 20 projects, and 3 regions. They want to enforce a standard that all resources include specific labels (e.g., `team`, `environment`, `cost-center`) for cost attribution and governance. What is the most scalable way to enforce this labeling standard?

Which TWO statements about Cloud Identity-Aware Proxy (IAP) are correct?

A large enterprise wants to enforce the principle of least privilege for its cloud resources. The security team needs to audit all IAM policy changes across the organization and ensure that custom roles are used where predefined roles are too permissive. Which three Google Cloud services or features should be combined to achieve this? (Choose three.)

A CTO explains to her board that moving to cloud reduces the company's 'total cost of ownership' compared to running an on-premises data center. Which cost category is most commonly underestimated in on-premises TCO calculations?

Google operates its data centers using 100% renewable energy and has committed to running all operations on carbon-free energy 24/7 by 2030. How does this sustainability posture benefit a company that migrates its workloads to Google Cloud?

A company wants to send transactional emails (receipts, password resets) and marketing emails at scale from their application. Which approach is recommended when using Google Cloud?

A global fintech company needs a database that can handle financial transactions across 50+ countries with consistent, ACID-compliant operations, SQL queries, and automatic global replication with no downtime for maintenance. Which Google Cloud database service meets all these requirements?

An analytics team needs to create dashboards and visualizations from data stored in BigQuery. They want a free solution that integrates natively. Which tool should they use?

An engineer is setting up budgets and alerts to manage costs. They want to receive a notification when forecasted spend exceeds 80% of the budget amount. Which step is required to enable forecast-based alerts?

A start-up wants to quickly build and deploy a web application using managed services to avoid operational overhead. They need a serverless compute platform that automatically scales and charges only for execution time. Which Google Cloud service should they use?

Drag and drop the steps to enable and use Cloud Audit Logs for a project into the correct order.

A company wants to scan its Cloud Storage buckets for sensitive data like credit card numbers and social security numbers. Which service should they use?

A developer wants to label resources with key-value pairs to track cost by team. Which GCP feature should they use?

Match each Google Cloud serverless compute option to its characteristic.

A company wants to assign metadata to resources for cost allocation reporting. They need to categorize resources by environment (production, staging, development) and team (engineering, marketing). They also need to use this metadata in billing exports. Which approach should they take?

A company wants to run a batch job that processes large files (up to 100 TB each) using a custom Linux executable. The job runs once a month and takes about 12 hours. They want to minimise cost. Which compute option should they choose?

An organization wants to achieve a zero-trust security model on Google Cloud. Which TWO Google Cloud security capabilities support this goal? (Choose TWO.)

A developer wants to trigger a serverless function whenever a new object is uploaded to a Cloud Storage bucket. Which Google Cloud service should they use?

An organization wants to tag resources with environment (dev/staging/prod) and cost center (e.g., 'marketing', 'engineering') for cost allocation and filtering in billing reports. Which feature should they use?

Which term describes a physical or conceptual object (like a factory machine, building, or supply chain) that is represented as a digital model in the cloud, allowing simulation and analysis without touching the physical object?

A company's security policy requires all employees to verify their identity using more than just a password when accessing Google Cloud resources. What security feature enforces this requirement?

A company wants to store encryption keys for encrypting data at rest in Cloud Storage, and also needs to automatically rotate the keys every 30 days. Additionally, they require an audit log of key usage. Which TWO services should they use? (Choose two.)

A company is deploying a microservices architecture on Google Cloud and wants to ensure secure communication between services. Which THREE measures should they implement? (Choose THREE.)

A company uses Cloud Storage to store sensitive data. They want to enforce that all objects uploaded are encrypted with a customer-managed key that they can rotate and control. What should they configure?

An e-commerce company experiences unpredictable traffic spikes. They need to ensure their web application automatically scales out during high demand and scales in when demand drops, paying only for resources used. Which cloud benefit best describes this?

An operations team wants to receive an automated alert when their web application's HTTP error rate exceeds 5% for more than 5 minutes. Which Google Cloud product is used to configure this type of metric-based alert?

What is 'infrastructure as code' (IaC), and what problem does it solve compared to manually configuring cloud resources through a web console?

An organization needs to comply with HIPAA for storing healthcare data in Google Cloud. Which of the following is a customer responsibility?

A company wants to ensure that sensitive data (credit card numbers, SSNs) stored in BigQuery is automatically identified and protected. They also want ongoing scanning to detect if any new data violates their data governance policies. Which Google Cloud service provides these capabilities?

A multinational corporation must store and process data subject to GDPR. They need to ensure that personal data of EU residents remains within the EU. Which Google Cloud feature should they use?

A company wants to run a batch job that processes large log files stored in Cloud Storage every night. The job typically runs for 2 hours on a single VM with 16 vCPUs and 64 GB of memory. They want to minimize costs. Which compute option is BEST?

A healthcare provider wants to use AI to analyze unstructured medical records — scanned documents with handwritten notes and printed text — to extract diagnosis codes for billing. Which combination of Google Cloud AI products most directly addresses this document understanding use case?

A company's SRE team sets an SLO of 99.5% monthly availability for a non-critical internal tool. A business stakeholder argues the target should be 99.99%. The SRE team pushes back. Which SRE argument best supports keeping the 99.5% target?

A company wants to set up a hybrid cloud connection between its on-premises data center and Google Cloud VPC with a dedicated, high-bandwidth, low-latency link. Which service should they use?

A company is evaluating Total Cost of Ownership (TCO) for migrating from on-premises to Google Cloud. Which cost is typically reduced or eliminated in the cloud?

What is the difference between RTO (Recovery Time Objective) and RPO (Recovery Point Objective) in disaster recovery planning?

Which TWO statements correctly describe Cloud Run scaling behavior?

A company is evaluating whether to adopt a multi-cloud strategy (using two or more cloud providers for different workloads). An engineer lists the following arguments: (1) resilience against a single cloud provider outage, (2) negotiating leverage on pricing, (3) using best-of-breed services from each provider. A cloud architect cautions that multi-cloud also introduces significant challenges. What is the most significant operational challenge of a multi-cloud approach?

A cloud architect is reviewing logs from a production incident. She wants to search all log entries across multiple Google Cloud projects for error messages containing a specific string. Which Google Cloud product enables centralized log searching and analysis across an entire organization?

A financial services company must store and process sensitive customer data that is subject to GDPR and PCI DSS. They need to ensure that data is encrypted at rest and in transit, and that encryption keys are managed by a hardware security module (HSM) that is FIPS 140-2 Level 3 certified. Which Google Cloud service should they use for key management?

A financial services firm's board asks the CTO to quantify the business value of the company's three-year cloud transformation program. The CTO presents metrics including: 40% faster product launches, 60% reduction in unplanned downtime, and 25% reduction in infrastructure cost. Which framework best describes what these metrics collectively represent?

A company runs a multi-tenant SaaS application on Google Cloud where each customer's data must be strictly isolated from other customers'. A security architect is evaluating approaches: (A) logical isolation using application-level tenant IDs in a shared database, (B) IAM-based separation using separate service accounts per tenant, or (C) infrastructure-level isolation with separate Google Cloud projects per tenant. Which approach provides the strongest isolation guarantee?

A healthcare organization must store patient health records (PHI) in the cloud and comply with HIPAA. They need to ensure data is encrypted at rest by default, maintain access logs, and restrict access to authorized personnel. Which THREE Google Cloud features or services should they use?

A multinational corporation must comply with data residency requirements that prohibit storing data outside specific geographic regions. They plan to use BigQuery for analytics. How can Google Cloud help enforce this requirement?

An enterprise is planning to migrate its on-premises data center to Google Cloud to avoid a hardware refresh cycle. The migration must minimize application changes. Which migration strategy should they prioritize?

A company classifies its data into four sensitivity levels: Public, Internal, Confidential, and Restricted. Which type of data would typically be classified as 'Restricted' and require the highest level of security controls?

A streaming media company (similar to Netflix or Spotify) uses AI to analyze a user's viewing or listening history and serve personalized content recommendations. Without cloud-scale compute and ML, this personalization would be impossible at scale. What business outcome does this AI-powered personalization primarily drive?

A financial institution is deploying a sensitive workload on Compute Engine and needs to meet PCI DSS compliance. The security team wants to ensure that the virtual machines run on dedicated, single-tenant hardware and that no other customer's VMs share the same host. Which Compute Engine feature should they enable?

A hospital network wants to improve patient outcomes by sharing medical records across its 12 hospitals so that any physician can access a patient's complete history. Currently, each hospital has its own isolated system. Which cloud characteristic is most relevant to enabling this cross-hospital data sharing?

A company's web service has a Service Level Objective (SLO) of 99.9% monthly availability. In a 30-day month, how many minutes of downtime are allowed before the SLO is violated?

A company with a global user base wants to deploy a web application on Google Cloud that is highly available and resilient to zone failures. The application runs on Compute Engine and uses a stateful backend (e.g., a database). Which THREE design elements should they implement?

A company is running a production application on Compute Engine and wants to ensure that if a quota for a resource is exceeded, the engineering team is notified immediately. Which THREE steps should they take? (Choose THREE.)

Which Google Cloud service provides a unified platform for building, training, and deploying machine learning models at scale?

A company's application experiences traffic spikes every weekday morning when employees log in at 9 AM. The team wants their infrastructure to automatically handle these spikes without manual intervention and without over-provisioning resources all day. Which Google Cloud capability addresses this?

An organisation must store archival data that is accessed less than once a year. They need the lowest storage cost and can tolerate a retrieval time of several hours. Which Cloud Storage class should they use?

A multinational retail company has an on-premises infrastructure with a mix of Windows and Linux servers. They are planning to migrate their e-commerce platform to Google Cloud to take advantage of scalability and reduce latency. The platform consists of a web frontend (Apache), a backend API (Node.js), and a MySQL database. They want to minimize downtime during the migration. They have a limited budget and need a solution that is cost-effective and quick to implement. The IT team has experience with containers but prefers to avoid managing Kubernetes. Which approach should they take?

A company needs to enforce that no project in the organization can create resources outside of the us-central1 region. They also need to allow the Finance team to manage billing for all projects. Which TWO steps should they take?

A company wants to allow its employees to securely access internal applications without a traditional VPN. They want to use Google's zero-trust security model. Which Google Cloud product should they implement?

A company runs Compute Engine instances for batch processing that are shut down on weekends. They want to automatically reduce costs without committing to a 1-year or 3-year term. Which discount type applies?

A company wants to minimize its carbon footprint in the cloud. They are evaluating Google Cloud sustainability features. Which THREE practices help reduce environmental impact?

A company wants to implement a hybrid cloud architecture connecting their on-premises data center to Google Cloud. They need high bandwidth (10 Gbps), low latency, and a service-level agreement (SLA). Which TWO services can provide dedicated connectivity? (Choose two.)

A startup wants to run a containerized web application on Google Cloud without managing the underlying servers or Kubernetes clusters. They expect traffic to vary significantly, and they want to only pay for the resources consumed during request processing. Which Google Cloud compute option should they choose?

A development team uses Cloud Build to automatically build, test, and create container images whenever code is pushed to their repository. The resulting Docker images need to be stored securely and made available to their GKE deployment pipelines. Which Google Cloud service stores and manages these container images?

A financial services company must comply with regulations requiring data residency within the EU. They want to run workloads on Google Cloud. Which action should they take?

A company wants to set up cost controls and analysis. They need to receive notifications when spending exceeds certain thresholds, and also be able to run custom queries on billing data. Which TWO actions should they take? (Choose 2)

A traditional newspaper company is seeing declining print subscriptions and wants to transform its business model. Which cloud capability most directly enables the company to reach new digital audiences and create personalized content experiences at scale?

An organization wants to ensure its data is encrypted at rest and in transit by default on Google Cloud. Which statement is correct?

A financial services firm must keep sensitive data on-premises due to regulatory requirements but wants to use Google Cloud's AI/ML services for analytics on that data. Which deployment model should they adopt?

A retail company migrated its e-commerce platform to Google Cloud. During a flash sale, the application experiences high latency. The architecture uses managed instance groups with autoscaling based on CPU utilization. The database is Cloud SQL with read replicas. What is the MOST likely cause of the latency?

A company wants to reduce its carbon footprint by using cloud infrastructure powered by renewable energy. Which Google Cloud sustainability commitment is most relevant?

A company needs to send messages between different microservices in a decoupled way. When one service publishes an event, multiple downstream services should receive and process it independently. Which Google Cloud service enables this publish-subscribe messaging pattern?

A retail company uses Google Cloud to run an online store. They have a security requirement that all API calls to Cloud Storage must come from the company's on-premises network only. Which Google Cloud security feature should they implement?

A company's employees use Google Workspace for email, documents, and collaboration. The IT team wants to require all employees to use a physical security key (like a YubiKey) as their second authentication factor when signing in — eliminating phishing-vulnerable SMS and authenticator app codes. Which Google Workspace security capability supports this requirement?

A gaming company uses Google Cloud to run a multiplayer game. They use Compute Engine VMs with GPUs for game servers. During peak hours, latency increases. They want to automatically add more game server instances based on the number of concurrent players. Which scaling approach should they use?

A company uses Cloud SQL for MySQL and needs to migrate to a PostgreSQL-compatible database that offers improved performance for AI workloads (e.g., vector embeddings). Which Google Cloud database is MOST suitable?

A large enterprise is migrating its on-premises data center to Google Cloud. They need a dedicated, low-latency, and highly available connection between their on-premises network and their VPC. Which networking service should they use?

A security engineer wants to block malicious traffic patterns at the edge of Google's network before it reaches their application. Which service should they configure?

A company stores sensitive customer data in Cloud Storage buckets. The security team wants to ensure that only authorized users can access the data, and access is logged for audit. Which two practices should they implement? (Choose two.)

A multinational corporation uses Cloud Identity-Aware Proxy (IAP) to secure access to applications. They notice that some users outside the corporate network can still reach the applications. What is the most likely misconfiguration?

A company is migrating its on-premises workloads to Google Cloud and wants to understand the total cost of ownership (TCO) savings. Which costs are typically LOWER in the cloud compared to on-premises?

A developer needs to run a small piece of Python code that processes a message from Pub/Sub and stores the result in Firestore. The code runs infrequently (a few hundred times per day) and takes less than a second to execute. Which compute service is most cost-effective and simple to manage?

An organization's digital transformation initiative is failing to deliver expected outcomes despite significant cloud technology investment. A review reveals that business units operate in silos, processes remain unchanged, and employees resist new ways of working. Which factor is most likely the root cause of the failure?

A retailer experiences traffic spikes during holiday sales. They want to ensure their website can handle the load without performance degradation. Which cloud characteristic is most relevant?

An organization needs to ensure that data stored in Cloud Storage is encrypted at rest using keys that are rotated every 30 days. They also need to audit who accesses the keys and when. Which THREE services should they use? (Choose 3)

A company uses Google Cloud and has a compliance requirement to store certain data only within the European Union and ensure it cannot be accessed from outside the EU, even by Google operations personnel. Which Google Cloud offering specifically addresses this level of data sovereignty?

A CISO asks why Google Cloud's security model is described as a 'defense-in-depth' approach. Which explanation best describes this concept in the context of Google Cloud's infrastructure security?

A company runs a microservices application on Google Kubernetes Engine (GKE) and wants to reduce costs by using preemptible nodes for stateless workloads. However, they need to ensure that critical stateful workloads are not disrupted. Which two actions should they take?

An organization uses Google Cloud Identity and Access Management (IAM). A new employee is a data engineer who needs to read BigQuery datasets and run queries but should NOT be able to create new datasets, delete tables, or modify IAM policies. Which IAM role should be assigned?

A company wants to ensure data encryption at rest using customer-managed keys for Cloud SQL and Cloud Storage. Which TWO actions must they take? (Choose 2)

An SRE team has a monthly error budget of 43 minutes (99.9% SLO). In the first week of the month, a deployment causes a 50-minute outage. What should the SRE team do for the remainder of the month, and why?

Which Google Cloud service is a fully managed, serverless data warehouse for analytics with built-in ML capabilities (e.g., BigQuery ML)?

A retail company experiences huge traffic spikes during Black Friday and slow periods otherwise. They want to avoid over-provisioning servers and reduce costs. Which cloud feature directly addresses this need?

A company's application stores sensitive customer information in Cloud Storage. A security audit finds that one bucket has 'allUsers' access granted (making it publicly accessible on the internet). The security team wants to prevent this from happening in the future. Which control prevents public access from being granted to Cloud Storage buckets?

An organization has multiple projects in Google Cloud. They want to enforce a policy that prevents the creation of Compute Engine instances with more than 8 vCPUs in any project under a specific folder, except for a few exempted projects. How can they achieve this with minimal overhead?

A company wants to ensure that only API calls from within a specific VPC can access their Cloud Storage buckets, even if the bucket is public. Which Google Cloud feature should they use?

A Virtual Private Cloud (VPC) in Google Cloud provides network isolation. What does 'network isolation' mean in this context, and why is it important?

A company needs to run a Hadoop/Spark workload on Google Cloud. They must use existing YARN applications and need to optimise for cost by using preemptible VMs for task nodes. Which three services should they use?

Which Google Cloud service allows you to run code in response to events (e.g., file upload to Cloud Storage) without provisioning servers?

A company runs a web application on Compute Engine instances behind a managed instance group with autoscaling based on CPU utilization. After a marketing campaign, traffic spikes and the autoscaler adds instances quickly, but the application becomes slow. What is the most likely cause?

A large online retailer operates a microservices-based e-commerce platform on Google Kubernetes Engine (GKE) across multiple zones. The application consists of several stateless services that handle customer traffic, inventory, and order processing. Recently, the company migrated its relational database to Cloud Spanner to achieve global scalability and strong consistency. After the migration, during peak shopping periods (e.g., Black Friday), the application experiences significant performance degradation. The operations team monitors CPU utilization of the pods and finds it consistently below 60% even under heavy load. However, Cloud Spanner metrics show high query latency and increased number of transactions waiting for lock conflicts. The team suspects that the bottleneck is now the database, not the compute. The application is designed to scale horizontally by adding more pod replicas. The team wants to ensure that scaling decisions are based on the actual performance bottleneck. What should they do?

A team uses Terraform to create a VPC as shown. They now need to add a Compute Engine instance in the subnet. Which of the following correctly references the subnet?

A company wants to reduce its cloud spending by optimizing storage costs for infrequently accessed data. Which THREE Google Cloud storage classes should they consider? (Choose three.)

A media company needs to stream live video to global viewers with low latency. They also want to protect against DDoS attacks. Which combination of Google Cloud networking services should they use?

A media company stores video files on-premises and wants to migrate them to Google Cloud for processing and transcoding. The files are accessed by a legacy on-premises application that cannot be modified. Which migration strategy should they use?

A company wants to monitor the health and performance of their applications running on Google Cloud. Which two Google Cloud services should they use together for comprehensive observability?

A DevOps team wants to automate their software build, test, and deployment process on Google Cloud. They need a service that triggers automatically when code is pushed to a repository, builds container images, runs tests, and deploys to production. Which Google Cloud product orchestrates this CI/CD pipeline?

A company needs to reduce costs on Compute Engine instances that run batch jobs for varying durations. They can tolerate interruptions and do not require a specific uptime guarantee. Which TWO instance types or purchasing options should they consider? (Choose 2)

A business wants to reduce the time to market for new features by enabling developers to provision infrastructure without waiting for IT. Which cloud attribute supports this?

Which characteristic of cloud computing allows a user to provision virtual machines without needing to interact with Google Cloud support or create a ticket?

A developer wants to run a small piece of code that resizes images whenever a new image is uploaded to Cloud Storage. The code runs for less than a second and should only be triggered by the upload event. No always-on server is needed. Which Google Cloud service is ideal?

A data engineer needs to process a continuous stream of clickstream events from multiple sources, aggregate them into 1-minute windows, and write the results to BigQuery for real-time dashboarding. The solution must handle exactly-once processing semantics. Which combination of services should they use?

A company uses service accounts to allow their application running on a Compute Engine VM to access Cloud Storage. Which is the most secure way to configure this service account access?

A company has a stateful application running on Compute Engine. They want to scale horizontally while preserving state. Which configuration should they use?

An organization wants to use Google Cloud's AI/ML services to build a custom image recognition model without managing the underlying infrastructure. Which Google Cloud service should they use?

A company wants to connect its on-premises data center to Google Cloud with a reliable, lower-latency connection that doesn't traverse the public internet, but doesn't need the bandwidth of a full Dedicated Interconnect. Which Google Cloud connectivity product is most appropriate?

A security team wants to ensure that only container images built by their approved CI/CD pipeline can run in their GKE cluster. Images built outside the approved process — even by internal engineers — should be blocked. Which Google Cloud security feature enforces this?

A large enterprise has 200+ applications and is developing its cloud migration strategy. A cloud architect argues that not all applications should be migrated the same way. Which migration strategy framework best organizes the different approaches for moving applications to cloud?

A company is concerned that employees might accidentally or maliciously upload sensitive personal data (such as credit card numbers or Social Security Numbers) to Cloud Storage buckets. Which Google Cloud product can automatically scan uploaded files and identify sensitive data patterns?

A company has a requirement to rotate encryption keys every 90 days. They are using Cloud KMS to manage keys for Cloud Storage. What is the correct way to achieve key rotation with minimal impact to existing encrypted objects?

A company wants to store archival data that must be retained for 10 years. The data is accessed less than once a year. Which Cloud Storage class is the most cost-effective?

Drag and drop the steps to deploy a containerized application to Google Kubernetes Engine (GKE) into the correct order.

A company wants to innovate quickly by leveraging machine learning without building models from scratch. Which Google Cloud service allows them to use pre-trained models via APIs?

A startup's website becomes unexpectedly popular and traffic spikes 50x within minutes. The application is hosted on Google Cloud. Which Google Cloud product automatically increases the number of application instances in response to this traffic spike without manual intervention?

A developer wants to deploy a containerized web application that can scale to zero when not in use, and only pay for actual request processing time. Which Google Cloud compute service should the developer use?

A company wants to optimize Cloud Storage costs for a bucket containing 100 TB of access logs. The logs from the last 7 days are frequently analyzed; logs from 8–90 days are occasionally reviewed; logs older than 90 days are archived for compliance but rarely accessed. What is the most cost-effective storage class configuration?

A company runs a batch processing workload every night that can tolerate interruptions. The workload runs on Compute Engine VMs and takes 2 hours to complete. They want to reduce costs. Which VM pricing model should they use?

Which THREE are required to achieve HIPAA compliance on Google Cloud?

A startup is deploying a containerised web application on Google Cloud. They want to minimise operational overhead and only pay for the resources consumed when requests are being processed. The application should automatically scale to zero when idle. Which compute service should they choose?

Which cloud computing characteristic is defined by the NIST as the ability for a consumer to provision computing capabilities automatically without requiring human interaction with each service provider?

A global e-commerce platform needs to serve content with low latency to users worldwide. They want to cache static content at edge locations near users. Which Google Cloud service should they use?

A web application's homepage loads user-specific data (shopping cart, recent orders) on every visit. The data changes frequently. An engineer suggests caching this data in a Redis cache between the web tier and the database. What is the primary benefit of this caching layer?

A financial services company must comply with strict data residency regulations. They need to store customer data in a specific geographic region and ensure it never leaves that region. Which Google Cloud feature should they use?

A startup wants to run a containerized web application that scales to zero when not in use, and only pay for the time the container is processing requests. Which Google Cloud compute service should they choose?

A data analytics team uses BigQuery for large-scale queries. They notice that queries are scanning more data than necessary, leading to high costs. Which feature should they implement to reduce the amount of data scanned per query?

A company's cloud environment has grown rapidly and the team is struggling to understand what cloud resources exist across dozens of projects. Which Google Cloud product provides a unified inventory of all cloud assets across an organization's projects and folders?

A company's IT team is planning its network architecture for a Google Cloud deployment. They want to ensure that their development, staging, and production environments are completely isolated from each other at the network level. What is the most effective way to achieve this isolation in Google Cloud?

A financial services company needs a managed data warehouse that can ingest streaming transaction data in real time AND support complex SQL analytics across years of historical data — all without managing any infrastructure. Which Google Cloud product meets both streaming ingest and analytical query requirements in a single serverless service?

An online retailer stores product images in a Cloud Storage bucket. Current access patterns: images uploaded once and read frequently for 30 days, then accessed rarely after 90 days, and must be retained for 7 years for compliance. Which storage class transition strategy minimizes cost while meeting requirements?

Which IAM concept defines what actions a user can perform on a resource?

A developer needs to add machine learning capabilities to their application without training models from scratch. Which Google Cloud service provides pre-trained models via API?

An organization wants to ensure that Google Cloud services used by its employees cannot be used to exfiltrate data to a competitor's Google Cloud project. For example, they want to prevent copying data from their Cloud Storage bucket to a Storage bucket owned by a competitor. Which Google Cloud security control most directly prevents this type of insider data exfiltration?

A developer wants to estimate the monthly cost of running a Kubernetes cluster with 3 nodes of n1-standard-4 in the us-central1 region before provisioning. Which tool should the developer use?

A data analytics team needs to process streaming data from thousands of IoT devices in real time. They want to ingest the data, process it (e.g., windowed aggregations), and then load it into BigQuery for analysis. Which Google Cloud service should they use for the stream processing step?

A company's application is composed of 15 microservices. When a performance issue occurs, the team struggles to determine which service is causing latency since request traces span multiple services. Which Google Cloud service helps identify which specific service in a microservices chain is causing slowdowns?

What does 'high availability' mean in the context of cloud services, and how is it typically measured?

A company wants to connect its on-premises data center to Google Cloud securely and with low latency. Which Google Cloud service should they use?

A company wants to automatically receive a discount for running Compute Engine instances for more than 25% of a month without any upfront commitment. Which discount type applies?

A company needs to audit all actions performed by administrators on their Google Cloud project, including who accessed what resource and when. Which logging feature should they enable?

A team is using Cloud Build to build container images and push them to Artifact Registry. The build process involves sensitive dependencies that should not be exposed to the internet. The team wants to ensure that all builds execute on a private network without public IP addresses. What should the team configure?

A company runs a video processing application that triggers a function each time a new video is uploaded to Cloud Storage. The function transcodes the video and stores the result. Which compute service is BEST suited for this event-driven workload?

A company uses Cloud Spanner for a global application. They need to ensure high availability and disaster recovery across regions. Which TWO actions should they take? (Choose 2)

Match each Google Cloud data service to its primary function.

A power utility company collects electricity meter readings from 10 million smart meters every 15 minutes — generating billions of rows of time-series data per year. They need to query this data to detect anomalies and patterns. Which Google Cloud database is optimized for this massive-scale time-series IoT data?

An engineer needs to distribute incoming HTTP traffic across multiple backend VM instances in different regions, with automatic failover and SSL termination. Which load balancing product should they use?

A traditional taxi company is losing market share to ride-sharing apps built on cloud platforms. A digital transformation consultant explains that the ride-sharing companies have a fundamental advantage rooted in their technology architecture. Which cloud-enabled capability most directly explains the ride-sharing companies' competitive advantage?

A data analytics team needs to analyze petabytes of structured data using SQL queries without managing any database infrastructure. Query results must return within seconds for most queries. Which Google Cloud service is designed for this use case?

A company is migrating a legacy application to Google Cloud. The application has variable traffic and requires reliable, low-latency database access. The team wants to minimize operational overhead. Which TWO services should they consider for the database tier? (Choose two.)

A company's analytics team wants to enable business users to create their own reports and dashboards from a governed set of BigQuery data, without writing SQL. At the same time, the data engineering team must maintain centralized control over how key metrics (like 'revenue' or 'active users') are defined. Which Google Cloud product architecture best meets both requirements?

A developer tries to create a new Compute Engine instance in the us-central1 region but receives an error 'Quota 'CPUS' exceeded. Limit: 24.0'. What should the developer do to resolve this?

A company currently runs its applications in a co-location data centre with a 5-year contract for hardware. They are considering migrating to Google Cloud to avoid the upcoming hardware refresh cycle. Which business driver is most directly addressed by this migration?

A developer wants to deploy a containerized web application that automatically scales to zero when not in use, and they want to minimize operational overhead. Which compute service should they use?

An organization wants to ensure that all projects in their GCP organization have consistent IAM policies. They also need to restrict the use of external IP addresses on Compute Engine instances for security. Which TWO tools should they use? (Choose TWO.)

A company has a Premium support plan. They experience a critical production outage and need immediate assistance. What is the guaranteed response time for a P1 (Priority 1) case?

A company uses Google Cloud and wants to understand their monthly cloud spend before the invoice arrives, track spending trends, and identify the top cost drivers across all services. Which built-in Google Cloud tool provides this visibility?

A security team needs to implement the principle of least privilege for a group of data scientists who only need to query BigQuery datasets, but not modify or delete them. Which THREE IAM roles should be granted? (Choose 3)

A developer is deploying a web application on Compute Engine and needs to distribute traffic across multiple VM instances in different regions. They also need SSL termination and health checks. Which Google Cloud networking service should they use?

A healthcare organization needs to store and analyze large volumes of patient diagnostic imaging data (e.g., DICOM files) in Google Cloud. The data must be stored in a cost-effective manner for long-term retention, with the ability to query metadata and run analytics using SQL-like queries. Which combination of Google Cloud services best meets these requirements?

A platform engineering team is designing a self-service cloud environment for development teams. They want developers to be able to provision approved cloud resources quickly without waiting for central IT approval for every request, while still ensuring compliance with security and cost policies. Which architectural approach best balances developer agility with governance?

A DevOps engineer needs to grant a CI/CD pipeline (running on Compute Engine) permissions to deploy a Cloud Run service. The pipeline uses a service account. What is the correct approach to assign the necessary IAM role to the service account?

A startup wants to organize its Google Cloud resources by separating development, staging, and production environments. They also need to apply common IAM policies across all projects in each environment. Which resource hierarchy component should they use to group projects per environment?

A company wants to automatically scale their Compute Engine managed instance group based on the number of requests per second. Which metric should they use?

A company wants its internal applications to be accessible via a custom domain name (e.g., `app.company.com`) that routes to their Google Cloud load balancer. Which Google Cloud service manages DNS records for this?

A company needs to store petabytes of time-series IoT sensor data and query it with single-digit millisecond latency at millions of reads per second. The data has a simple key-value structure with timestamps. Which Google Cloud database is MOST appropriate?

A company runs a web application on Compute Engine. They want to improve availability by distributing traffic across multiple regions and automatically failing over if one region becomes unhealthy. Which TWO services should they combine? (Choose two.)

A data science team needs to train a custom machine learning model using their own data. They want a unified platform that manages the entire ML lifecycle, including data preparation, training, tuning, and deployment. Which service should they use?

A retail company experiences traffic spikes during holiday sales. They need to automatically scale their web application instances based on CPU utilization. Which Google Cloud service should they configure?

A company is running a stateful web application on Compute Engine with a SQL database. They want to use Cloud Load Balancing to distribute traffic across multiple instances in different zones. The application stores session state locally on each VM. Users report that after being directed to a different instance, their session is lost. What is the most suitable solution to maintain session persistence?

A cloud operations engineer notices that the managed instance group 'my-mig' has been scaling up frequently, but the application performance is still degraded. The CPU utilization metric shows high values. What is most likely the issue?

Which tool would you use to estimate the monthly cost of running a set of Compute Engine virtual machines before deploying them?

An organization wants to detect and respond to threats across their GCP environment, including finding misconfigurations, vulnerabilities, and potential malicious activity. Which service provides a unified view of security findings?

A company runs a mission-critical PostgreSQL database on Google Cloud that must support automatic failover to a standby instance within 60 seconds if the primary instance fails, with minimal data loss. Which Cloud SQL configuration satisfies this high availability requirement?

A company has employees who use personal (unmanaged) devices to access corporate applications. The security team wants to prevent sensitive Google Workspace documents from being downloaded to personal devices. Which Google control most directly addresses this data loss prevention requirement for device-based scenarios?

A regional grocery chain wants to compete with national chains that have larger marketing budgets. A consultant argues that cloud adoption can help level the playing field. Which cloud advantage most directly supports this argument?

An organization wants to separate billing and access control for two departments, each with multiple projects. They also need to apply common IAM policies to all projects in a department. What is the recommended way to structure their resource hierarchy?

A company uses Cloud Functions to process image uploads. Each image triggers a function that uses Vision API to extract text and stores results in Firestore. The function sometimes fails due to timeout when images are large. How should they redesign for reliability and scale?

A company migrating to the cloud wants to focus on building applications rather than managing servers. Which Google Cloud compute service provides a fully managed platform for web applications that automatically scales?

An organization needs to enforce that resources in a specific project cannot use certain machine series (e.g., f1-micro) due to performance requirements. They also need to tag resources with an 'environment' label for cost tracking. Which TWO methods should they use? (Choose TWO.)

A retail chain with 500 stores wants to implement dynamic pricing — adjusting prices in real-time based on demand signals, competitor pricing, inventory levels, and weather forecasts. This requires processing millions of data points and updating prices across all stores within minutes. Which cloud capabilities make this possible?

Which Google Cloud service provides threat intelligence and incident response capabilities, including access to Mandiant expertise?

A company wants to detect and prioritize vulnerabilities in their Compute Engine VMs and GKE clusters. They also need a centralized view of security findings across their organization. Which service should they use?

Which layer of Google's defence-in-depth security model includes the use of TLS for data in transit?

A company wants to adopt a hybrid cloud strategy to keep sensitive data on-premises while taking advantage of Google Cloud for analytics. Which TWO Google Cloud products enable this architecture? (Choose 2)

A company wants to analyze petabytes of sales data using SQL queries with sub-second response times for dashboards. They need a fully managed, serverless solution that separates storage and compute. Which service meets these requirements?

An organisation needs to run a batch analytics job every night that processes terabytes of data stored in Cloud Storage. The job is expected to run for 3 hours and can tolerate interruptions. The compute resources should be as cost-effective as possible. Which Compute Engine VM type should be used?

A startup is building a mobile app that needs to store user profiles and preferences with low latency. The data is unstructured and frequently read/written. Which TWO Google Cloud database services are most suitable? (Choose 2)

A telecommunications company has completed a cloud migration but finds that its business agility — the speed at which it can launch new products — has not improved. An analysis reveals that while the infrastructure is now cloud-based, the software development and release processes remain unchanged: quarterly release cycles, lengthy change approval boards, and manual testing. What does this situation illustrate?

A startup wants to launch a new application and expects unpredictable traffic patterns. They want to avoid upfront hardware costs and only pay for resources they use. Which cloud deployment model best meets their needs?

A global e-commerce company serves customers from multiple continents. They want to guarantee fast page load times and minimize latency. Which Google Cloud service is most suitable for this transformation?

An organization wants to use Google Cloud for processing healthcare data subject to HIPAA regulations in the United States. Which contractual document must the organization obtain from Google before storing Protected Health Information (PHI) in Google Cloud?

An engineer is deploying a globally distributed application that requires strong consistency across multiple continents with a 99.999% uptime SLA. The data model is relational with SQL queries. Which database service should they use?

A fashion retailer wants to use cloud to better understand customer preferences and launch trend-responsive product lines faster. Which capability most directly enables the retailer to sense market trends earlier and respond faster than competitors?

A business analyst needs to understand why cloud services bill differently for compute (VMs) versus object storage. Compute VMs are billed per second while they are running; Cloud Storage is billed per GB-month of data stored. Which cloud pricing principle explains why these billing units are different?

A security team needs to detect and respond to threats across their Google Cloud environment. Which THREE services should they use together? (Choose 3)

A company wants to adopt a zero-trust security model for accessing Google Cloud resources. Which Google Cloud technology BEST supports this approach?

A regulated financial services firm must ensure that its data never leaves a specific geographic region (EU) for compliance with GDPR data residency requirements. Which Google Cloud features help enforce this requirement?

A team needs to process and analyze streaming data in real-time as it arrives from IoT sensors. The pipeline must apply transformations, filter events, and write results to BigQuery. Which Google Cloud service is designed for this stream processing use case?

A company wants to enforce the principle of least privilege by granting a service account only the permissions necessary to publish messages to a specific Pub/Sub topic. Which IAM approach should they use?

A data engineering team is building a streaming pipeline that ingests clickstream events from a website, processes them in real-time (e.g., aggregations, filtering), and loads the results into BigQuery for analysis. They also need the ability to replay events in case of failures. Which combination of services is MOST appropriate for the streaming ingestion and processing?

A company wants to enforce a policy that prevents all projects in the organization from enabling certain Google Cloud APIs. Where should the policy be applied to ensure it is inherited by all projects, including future ones?

An engineer needs to store database passwords and API keys securely. The secrets must be encrypted at rest with a customer-managed key and automatically rotated every 90 days. Which service should they use?

According to the NIST definition of cloud computing, which characteristic allows users to unilaterally provision computing resources such as server time and network storage without requiring human interaction with the service provider?

An organization needs to protect a web application hosted on Google Cloud from DDoS attacks and SQL injection attempts. They want a managed security service that integrates with Cloud Load Balancing. Which service should they use?

Which principle states that a user should be granted only the permissions necessary to perform their job functions?

An organization needs to store archival data that must be retained for 10 years and is accessed less than once a year. Which Cloud Storage class offers the lowest storage cost?

Refer to the exhibit. A DevOps engineer wants to create a chart showing the rate of items sold per second over time. What is a limitation of this metric for that purpose?

A company needs to store large volumes of unstructured data (images, videos, backups, documents) with high durability and global accessibility. Which Google Cloud service is designed for object storage at any scale?

A company's cloud operations team is implementing a tagging strategy for cost allocation. They want to ensure that the 'cost-center' label is present on every Compute Engine VM and Cloud Storage bucket created in their Google Cloud organization. Currently, some resources are created without this label. Which combination of controls best enforces and remediates this requirement?

What is the primary purpose of Google Cloud Armor?

A company's DevOps team wants to orchestrate a complex workflow that involves calling multiple Google Cloud APIs in sequence — first running a Cloud Build job, then checking the results, then either deploying to Cloud Run or sending a notification. Which Google Cloud product is designed for orchestrating multi-step workflow logic?

A global e-commerce company is moving its user-facing application to Google Cloud to improve performance for customers worldwide. They need low-latency content delivery and fast DNS resolution. Which TWO Google Cloud services should they use? (Choose 2)

A financial services company is designing a multi-cloud architecture with Google Cloud and AWS. They need to encrypt data at rest in Google Cloud using a key stored in their on-premises Hardware Security Module (HSM). What is the best approach?

Drag and drop the steps to configure a load balancer for an HTTP application on Compute Engine into the correct order.

An organization runs a multi-region web application behind a global external HTTP(S) load balancer. They want to protect against DDoS attacks and filter traffic based on IP reputation and request headers. Which service should they integrate with the load balancer?

A security team wants to be alerted when Google Cloud personnel access their customer data. They need logs that show the reason for access and what data was accessed. Which service provides this?

A company's security team wants to be alerted when someone with administrative permissions changes an IAM policy in their Google Cloud organization. Which Google Cloud capability enables this detection?

After a major production outage, the engineering team conducts a review of what happened, why it happened, and how to prevent it in the future. This document is shared with all engineering teams. What is this practice called, and why does Google's SRE culture emphasize it?

Which TWO of the following are key characteristics of cloud computing as defined by NIST? (Choose 2)

A startup wants to deploy a web application with minimal operational overhead. They want to focus only on writing code and not managing servers, containers, or runtimes. Which Google Cloud service is designed for this purpose?

A retail company stores petabytes of customer transaction data for compliance reasons. They access data less than once a year but must retain it for 10 years. They want the lowest-cost storage. Which storage class should they choose?

A company has a batch processing job that runs once per day and can be interrupted without significant impact. They want to reduce costs by using Google Cloud infrastructure. Which compute option should they choose?

A company is planning a cloud architecture and needs to decide between a monolithic application design and a microservices architecture. What is the most significant operational trade-off between these two approaches in a cloud environment?

A company wants to implement SLOs for their API service. They need to measure the proportion of successful requests over a 30-day window. Which metric should they use?

A company wants to replace its VPN-based remote access with a zero-trust solution that verifies user identity and device health before granting access to internal applications. Which Google Cloud service should they use?

A traditional retailer currently maintains its own data centers, purchasing servers every 3–5 years and paying for facilities, power, and staff regardless of demand. When it migrates its workloads to the public cloud, which change in cost model does it experience?

Which TWO statements about committed use discounts (CUDs) are true? (Choose two.)

Which THREE practices are recommended for securing a Kubernetes cluster in Google Kubernetes Engine (GKE)?

An organization wants to reduce its carbon footprint by using Google Cloud. Which of the following statements about Google Cloud's sustainability efforts is correct?

A financial services company must run a legacy Windows application that requires a specific version of IIS and custom Windows patches. The company wants to minimize operational overhead but needs full control over the OS. Which Google Cloud service is most appropriate?

A company wants to monitor its Google Cloud spending and receive alerts when costs exceed a threshold. Which two services should they use together?

An operations team tracks the following metrics for their customer portal: request latency p99, error rate, and requests per second. In Site Reliability Engineering terminology, what are these metrics called, and what do they collectively define?

Which Google Cloud service provides a fully managed, scalable data warehouse for running SQL queries on petabyte-scale data and supports BI tools like Looker?

A company's production database is running on a Compute Engine VM with a 500 GB Persistent Disk. The operations team wants to create a backup they can restore from in case of data corruption or accidental deletion. Which Google Cloud capability provides point-in-time backup for Persistent Disks?

A startup is building a mobile app and needs to store user profiles and preferences. The data is hierarchical and the app requires real-time synchronization across devices. Which Google Cloud database should they use?

Drag and drop the steps to set up a Cloud CDN for a backend bucket in the correct order.

A company wants to ensure that its Google Cloud resources can only be accessed from within a specific VPC network, preventing data exfiltration to the internet. They need to enforce this for Cloud Storage and BigQuery APIs. Which service should they use?

A company wants to run containerized applications on Google Cloud without managing the underlying VMs or orchestrator. Which compute service should they choose?

A regional hospital chain wants to improve patient outcomes by analyzing electronic health records (EHRs) from multiple departments, including radiology, pathology, and pharmacy. Currently, each department stores data in separate on-premises databases, making it difficult to correlate information. The hospital must comply with HIPAA and other data privacy regulations. They have a small IT team and limited budget for new hardware. They want to enable clinicians to run ad-hoc queries across all data and generate insights using machine learning, without managing infrastructure. Which solution best achieves these goals?

What is the primary benefit of using preemptible VMs on Compute Engine?

A data analyst at a media company needs to run complex SQL queries on petabytes of user engagement data to produce weekly reports. The dataset is stored in Google Cloud. Which Google Cloud product is purpose-built for this type of large-scale analytical SQL workload?

A company wants to run a stateful application that requires persistent, high-performance block storage attached to a single Compute Engine instance. The application needs consistent low latency. Which storage solution should they use?

A solutions architect is designing a system that must remain available even if an entire Google Cloud region becomes unavailable due to a major disaster. Which deployment approach achieves this goal?

A company has set a budget alert at 80% and 100% of $10,000 for a specific project. The project has a billing account linked. What happens when the cost reaches $8,000?

A company is running a latency-sensitive application on Compute Engine instances in a single zone. They want to improve availability without sacrificing low latency. Which strategy should they use?

A company uses folders to separate environments (dev, test, prod) and teams (eng, data, security). An engineer needs to apply a policy that disables the use of 'g1-small' machine types only in the 'dev' folder under the 'eng' folder. The organization node has no existing constraints. What is the most specific way to apply this policy?

An organization has a compliance requirement to run workloads in specific geographic regions only. They want to prevent any resources from being created outside those regions. Which Google Cloud control should they use?

An organization's leadership sets a goal to make all future business decisions based on data rather than intuition. They migrate from siloed departmental spreadsheets to a centralized cloud data platform where all teams access the same real-time data. What organizational concept does this represent?

A company wants to set up automated checks that continuously verify their website's homepage, login page, and API endpoints are accessible from multiple global locations. If any endpoint becomes unreachable for more than 2 minutes, the on-call engineer should be alerted. Which Cloud Monitoring feature provides this?

Which Google Cloud service helps identify and classify sensitive data such as credit card numbers or personal health information in Cloud Storage and BigQuery?

A media company needs to store and serve video files globally with high availability and low latency. They also need to process these videos using transcoding. Which THREE Google Cloud services should they use? (Choose 3)

What is a key business benefit of moving from a capital expenditure (CapEx) model for IT infrastructure to an operational expenditure (OpEx) model like pay-as-you-go cloud computing?

An e-commerce company plans its infrastructure for peak shopping events (e.g., Black Friday) which drive 50× normal traffic. On-premises, they must maintain 50× capacity year-round. In the cloud, they provision 50× capacity only during peak periods. Which cloud characteristic enables this cost optimization?

A startup is building a mobile app and needs a real-time database that synchronises data across user devices automatically. The data model is document-based, and the app needs offline support. Which database should they use?