google CLOUD DIGITAL LEADER Exam Questions
Questions for the CLOUD DIGITAL LEADER were updated on : Jul 20 ,2024
Page 1 out of 5. Viewing questions 1-15 out of 66
Question 1 Topic 1, General cloud knowledge
Topic 1
You are migrating workloads to the cloud. The goal of the migration is to serve customers worldwide as quickly as possible
According to local regulations, certain data is required to be stored in a specific geographic area, and it can be served
worldwide. You need to design the architecture and deployment for your workloads.
What should you do?
- A. Select a public cloud provider that is only active in the required geographic area
- B. Select a private cloud provider that globally replicates data storage for fast data access
- C. Select a public cloud provider that guarantees data location in the required geographic area
- D. Select a private cloud provider that is only active in the required geographic area
Answer:
C
Question 2 Topic 1, General cloud knowledge
Topic 1
Your organization needs a large amount of extra computing power within the next two weeks. After those two weeks, the
need for the additional resources will end.
Which is the most cost-effective approach?
- A. Use a committed use discount to reserve a very powerful virtual machine
- B. Purchase one very powerful physical computer
- C. Start a very powerful virtual machine without using a committed use discount
- D. Purchase multiple physical computers and scale workload across them
Answer:
C
Question 3 Topic 1, General cloud knowledge
Topic 1
Your organization needs to plan its cloud infrastructure expenditures.
Which should your organization do?
- A. Review cloud resource costs frequently, because costs change often based on use
- B. Review cloud resource costs annually as part of planning your organization’s overall budget
- C. If your organization uses only cloud resources, infrastructure costs are no longer part of your overall budget
- D. Involve fewer people in cloud resource planning than your organization did for on-premises resource planning
Answer:
A
Question 4 Topic 1, General cloud knowledge
Topic 1
The operating systems of some of your organizations virtual machines may have a security vulnerability.
How can your organization most effectively identify all virtual machines that do not have the latest security update?
- A. View the Security Command Center to identify virtual machines running vulnerable disk images
- B. View the Compliance Reports Manager to identify and download a recent PCI audit
- C. View the Security Command Center to identify virtual machines started more than 2 weeks ago
- D. View the Compliance Reports Manager to identify and download a recent SOC 1 audit
Answer:
A
Question 5 Topic 1, General cloud knowledge
Topic 1
You are currently managing workloads running on Windows Server for which your company owns the licenses. Your
workloads are only needed during working hours, which allows you to shut down the instances during the weekend. Your
Windows Server licenses are up for renewal in a month, and you want to optimize your license cost.
What should you do?
- A. Renew your licenses for an additional period of 3 years. Renew your licenses for an additional period of 3 years. Negotiate a cost reduction with your current hosting provider wherein infrastructure cost is reduced when workloads are not in use
- B. Renew your licenses for an additional period of 2 years. Negotiate a cost reduction by committing to an automatic renewal of the licenses at the end of the 2 year period
- C. Migrate the workloads to Compute Engine with a bring-your-own-license (BYOL) model
- D. Migrate the workloads to Compute Engine with a pay-as-you-go (PAYG) model
Answer:
D
Question 6 Topic 1, General cloud knowledge
Topic 1
Your organization runs a distributed application in the Compute Engine virtual machines. Your organization needs
redundancy, but it also needs extremely fast communication (less than 10 milliseconds) between the parts of the application
in different virtual machines.
Where should your organization locate this virtual machines?
- A. In a single zone within a single region
- B. In different zones within a single region
- C. In multiple regions, using one zone per region
- D. In multiple regions, using multiple zones per region
Answer:
D
Question 7 Topic 1, General cloud knowledge
Topic 1
You decide to migrate your on-premises environment to the cloud. You need to determine which resource components still
need to be assigned ownership.
Which two functions are owned by a public cloud provider? (Choose two.)
- A. Hardware maintenance
- B. Infrastructure architecture
- C. Infrastructure deployment automation
- D. Hardware capacity management
- E. Fixing application security issues
Answer:
A B
Question 8 Topic 1, General cloud knowledge
Topic 1
You are a program manager within a Software as a Service (SaaS) company that offers rendering software for animation
studios. Your team needs the ability to allow scenes to be scheduled at will and to be interrupted at any time to restart later.
Any individual scene rendering takes less than 12 hours to complete, and there is no service-level agreement (SLA) for the
completion time for all scenes. Results will be stored in a global Cloud Storage bucket. The compute resources are not
bound to any single geographical location. This software needs to run on Google Cloud in a cost-optimized way.
What should you do?
- A. Deploy the application on Compute Engine using preemptible instances
- B. Develop the application so it can run in an unmanaged instance group
- C. Create a reservation for the minimum number of Compute Engine instances you will use
- D. Start more instances with fewer virtual centralized processing units (vCPUs) instead of fewer instances with more vCPUs
Answer:
A
Question 9 Topic 1, General cloud knowledge
Topic 1
Your manager wants to restrict communication of all virtual machines with internet access; with resources in another
network; or with a resource outside Compute Engine. It is expected that different teams will create new folders and projects
in the near future.
How would you restrict all virtual machines from having an external IP address?
- A. Define an organization policy at the root organization node to restrict virtual machine instances from having an external IP address
- B. Define an organization policy on all existing folders to define a constraint to restrict virtual machine instances from having an external IP address
- C. Define an organization policy on all existing projects to restrict virtual machine instances from having an external IP address
- D. Communicate with the different teams and agree that each time a virtual machine is created, it must be configured without an external IP address
Answer:
A
Explanation:
Reference: https://cloud.google.com/resource-manager/docs/organization-policy/overview
Question 10 Topic 1, General cloud knowledge
Topic 1
Your multinational organization has servers running mission-critical workloads on its premises around the world. You want to
be able to manage these workloads consistently and centrally, and you want to stop managing infrastructure.
What should your organization do?
- A. Migrate the workloads to a public cloud
- B. Migrate the workloads to a central office building
- C. Migrate the workloads to multiple local co-location facilities
- D. Migrate the workloads to multiple local private clouds
Answer:
A
Question 11 Topic 1, General cloud knowledge
Topic 1
Your organization stores highly sensitive data on-premises that cannot be sent over the public internet. The data must be
processed both on-premises and in the cloud.
What should your organization do?
- A. Configure Identity-Aware Proxy (IAP) in your Google Cloud VPC network
- B. Create a Cloud VPN tunnel between Google Cloud and your data center
- C. Order a Partner Interconnect connection with your network provider
- D. Enable Private Google Access in your Google Cloud VPC network
Answer:
C
Explanation:
After the service provider provisions your connection, you can start passing traffic between your networks by using the
service provider's network.
Reference: https://cloud.google.com/network-connectivity/docs/interconnect/concepts/partner-overview
Question 12 Topic 1, General cloud knowledge
Topic 1
Your companys development team is building an application that will be deployed on Cloud Run. You are designing a CI/CD
pipeline so that any new version of the application can be deployed in the fewest number of steps possible using the CI/CD
pipeline you are designing. You need to select a storage location for the images of the application after the CI part of your
pipeline has built them.
What should you do?
- A. Create a Compute Engine image containing the application
- B. Store the images in Container Registry
- C. Store the images in Cloud Storage
- D. Create a Compute Engine disk containing the application
Answer:
B
Explanation:
Reference: https://cloud.google.com/container-registry/docs/pushing-and-pulling
Question 13 Topic 1, General cloud knowledge
Topic 1
Each of the three cloud service models - infrastructure as a service (IaaS), platform as a service (PaaS), and software as a
service (SaaS) - offers benefits between flexibility and levels of management by the cloud provider and the customer.
Why would SaaS be the right choice of service model?
- A. You want a balance between flexibility for the customer and the level of management by the cloud provider
- B. You want to minimize the level of management by the customer
- C. You want to maximize flexibility for the customer.
- D. You want to be able to shift your emphasis between flexibility and management by the cloud provider as business needs change
Answer:
B
Explanation:
Benefits of SaaS
The main benefit of SaaS is that it offloads all infrastructure and application management to the SaaS vendor. Reference:
https://www.ibm.com/cloud/learn/iaas-paas-saas
Question 14 Topic 1, General cloud knowledge
Topic 1
As your organization increases its release velocity, the VM-based application upgrades take a long time to perform rolling
updates due to OS boot times. You need to make the application deployments faster.
What should your organization do?
- A. Migrate your VMs to the cloud, and add more resources to them
- B. Convert your applications into containers
- C. Increase the resources of your VMs
- D. Automate your upgrade rollouts
Answer:
D
Explanation:
Reference: https://cloud.google.com/compute/docs/instance-groups/rolling-out-updates-to-managed-instance-groups
Question 15 Topic 1, General cloud knowledge
Topic 1
Your organization uses Active Directory to authenticate users. Users Google account access must be removed when their
Active Directory account is terminated.
How should your organization meet this requirement?
- A. Configure two-factor authentication in the Google domain
- B. Remove the Google account from all IAM policies
- C. Configure BeyondCorp and Identity-Aware Proxy in the Google domain
- D. Configure single sign-on in the Google domain
Answer:
D