Cloud Digital Leader

Question 1

A financial services company is moving sensitive workloads to Google Cloud. Their compliance team wants a way to see near-real-time logs whenever a Google support or engineering employee accesses their content, including the reason for that access, so they can independently verify that provider staff are not viewing data without justification. Which Google Cloud capability directly meets this requirement?

Accepted Answer

Access Transparency

Answer

Cloud Audit Logs (Admin Activity logs)

Answer

Identity and Access Management (IAM)

Answer

VPC Service Controls

Question 2

A company's finance team notices that their Compute Engine spending has grown steadily, and they suspect many VMs are oversized or idle. The cloud operations team wants an automated way to receive specific, data-driven suggestions to reduce costs without manually inspecting every resource. Which Google Cloud capability should they use?

Accepted Answer

Recommender (Active Assist), which analyzes usage and provides rightsizing and idle-resource recommendations

Answer

Cloud Billing budget alerts to notify them when spending exceeds a threshold

Answer

Committed use discounts to lock in lower pricing for the existing VMs

Answer

Cloud Monitoring dashboards to visualize aggregate CPU and memory metrics

Question 3

A financial services company runs a demanding PostgreSQL-based application that mixes high-volume transactional workloads with frequent complex analytical queries on the same operational data. They want a fully managed Google Cloud database that stays PostgreSQL-compatible, delivers superior transactional performance, and accelerates analytical queries without forcing a rewrite of their existing application. Which service best fits these needs?

Accepted Answer

AlloyDB for PostgreSQL

Answer

Cloud Storage

Answer

Cloud Bigtable

Answer

Firestore

Question 4

A retail company has a monolithic inventory system running on-premises. The digital team wants to let external mobile and partner developers consume inventory data without exposing the legacy backend directly, while adding rate limiting, authentication, and usage analytics. Which Google Cloud product best addresses this need?

Accepted Answer

Apigee API Management

Answer

Cloud Run

Answer

Compute Engine managed instance group

Answer

GKE Enterprise

Question 5

A financial services company has built several internal services that partner organizations now want to consume programmatically. Leadership wants to expose these services externally with consistent security, usage quotas per partner, developer onboarding through a self-service portal, and the ability to track and eventually charge for API consumption. Which Google Cloud product best meets these requirements?

Accepted Answer

Apigee API Management

Answer

Cloud Run

Answer

Cloud Load Balancing

Answer

GKE Enterprise

Question 6

A retail company has built several backend microservices that expose data to internal teams and a few external partners. Leadership is concerned about inconsistent security enforcement, no visibility into which teams call which services, and difficulty enforcing rate limits across the different APIs. They want a single layer to manage, secure, and monitor all of their APIs without rewriting the backends. Which Google Cloud product should they adopt?

Accepted Answer

Apigee API Management

Answer

Cloud Run

Answer

Google Kubernetes Engine (GKE)

Answer

Cloud Functions

Question 7

A retail company wants to build a custom image classification model to sort product photos into their own proprietary catalog categories. Their team has labeled training data but has no machine learning engineers or coding expertise, and they want to train the model without writing code. Which Google Cloud approach best fits their needs?

Accepted Answer

Use Vertex AI AutoML to train a custom image classification model through a no-code interface

Answer

Use the pre-trained Cloud Vision API to classify the product images

Answer

Write custom TensorFlow training code and run it on Vertex AI custom training

Answer

Use Gemini with prompt engineering to categorize each product photo individually

Question 8

A retail analytics team has built interactive dashboards on top of a BigQuery dataset. As adoption grows, business users complain that the dashboards feel slow when many people filter and drill down at the same time. The team wants to accelerate these repeated, interactive queries without redesigning their tables or moving data to another system. Which Google Cloud capability best addresses this need?

Accepted Answer

Enable BigQuery BI Engine to provide in-memory acceleration for interactive analytic queries

Answer

Export the dataset to Cloud Storage and query it as a data lake

Answer

Migrate the tables to Cloud SQL to handle concurrent dashboard users

Answer

Schedule a nightly Dataflow batch job to precompute all possible filter combinations

Question 9

A retail analytics team wants to automatically load their Google Ads and YouTube marketing report data into their BigQuery data warehouse on a recurring daily schedule, without building or maintaining any custom ingestion code. Which Google Cloud capability best meets this need?

Accepted Answer

BigQuery Data Transfer Service

Answer

A manually run SQL export script scheduled with cron on a Compute Engine VM

Answer

Looker dashboards connected directly to the ad platforms

Answer

Cloud Storage bucket lifecycle rules

Question 10

A retail analytics team wants to enrich their sales data with demographic and weather information to understand regional buying patterns. They do not want to source, license, and load this external data themselves, and they want to join it directly with their existing tables using SQL. Which Google Cloud capability best meets this need?

Accepted Answer

Use BigQuery public datasets, which provide ready-to-query external data that can be joined with the team's own tables using standard SQL

Answer

Store the sales data in a Cloud Storage data lake and manually download demographic files for each analysis

Answer

Deploy a Dataproc cluster to run Spark jobs that scrape public weather websites nightly

Answer

Use Firestore to cache demographic lookups for low-latency mobile access

Question 11

A retail analytics team already stores several years of sales history in BigQuery. Data analysts who are proficient in SQL want to build and run a product-demand forecasting model, but the company has no dedicated machine learning engineers and wants to avoid moving the data to a separate ML platform. Which Google Cloud capability best meets these needs?

Accepted Answer

Use BigQuery ML to create and train forecasting models directly in BigQuery using SQL statements

Answer

Export the data to Cloud Storage and hand it to a data science team to build models in a separate notebook environment

Answer

Load the sales data into Cloud SQL and write stored procedures to calculate forecasts

Answer

Stream the historical data through Dataflow to generate predictions in real time

Question 12

A retail company has years of sales transaction data spread across multiple systems. The analytics team wants to run large, complex SQL queries across petabytes of historical, structured data to identify purchasing trends. They do not want to provision, manage, or scale any servers, and they want fast query performance without database administration overhead. Which Google Cloud service best fits this need?

Accepted Answer

BigQuery, a fully managed, serverless data warehouse for large-scale analytics

Answer

Cloud SQL, a managed relational database for transactional workloads

Answer

Cloud Storage, an object store for raw files and backups

Answer

Firestore, a NoSQL document database for mobile and web apps

Question 13

A retail company stores its historical sales data in BigQuery. The marketing analytics team needs to run their own exploratory queries against this data without copying it, and the finance team wants to query the same tables independently. Leadership wants a solution that keeps a single authoritative copy of the data while enabling multiple teams to analyze it concurrently. Which approach best supports making this data useful and accessible across teams?

Accepted Answer

Grant each team read access to the shared BigQuery dataset so they can query the same authoritative tables directly.

Answer

Export the sales tables to CSV files and email them to each team so they can load the data into their own tools.

Answer

Create a separate full copy of the dataset for every team to prevent them from interfering with each other's queries.

Answer

Move the sales data into a Cloud SQL database and have each team connect through a shared application server.

Question 14

A logistics company wants operations managers to see near real-time package scan data in their analytics dashboards. Delivery events arrive continuously from thousands of handheld scanners, and analysts want to query the latest events within seconds of them being generated, without waiting for scheduled batch loads. Which approach best supports making this data useful and immediately queryable?

Accepted Answer

Stream the scan events into BigQuery so records become available for querying almost immediately after ingestion

Answer

Export scan events to CSV files and run a nightly batch load into BigQuery

Answer

Store the raw scan events in Cloud Storage and query them only after a weekly aggregation job

Answer

Load the scan events into a Cloud SQL instance and replicate them to BigQuery once per day

Question 15

A logistics company collects millions of GPS and sensor readings per second from its delivery fleet. Engineers need a Google Cloud database that offers extremely low latency and high write throughput for this time-series data, and they plan to run analytical scans over massive volumes of these records. Which Google Cloud managed database best fits this workload?

Accepted Answer

Cloud Bigtable

Answer

Cloud SQL

Answer

Firestore

Answer

Cloud Spanner

Question 16

A finance manager at a retail company is concerned that several project teams keep exceeding their allocated monthly cloud spend without anyone noticing until the invoice arrives. She wants a proactive way to be automatically notified as spending approaches predefined thresholds, without hard-stopping the workloads. Which Google Cloud capability best addresses this need?

Accepted Answer

Configure Cloud Billing budgets with threshold-based alerts for each project

Answer

Purchase committed use discounts to lock in lower pricing for all projects

Answer

Enable detailed billing export to BigQuery and manually review it at month end

Answer

Apply an organization policy that quota-caps CPU usage across all projects

Question 17

A hospital's finance committee is reviewing a proposal to keep running its patient records system in an owned, on-premises data center rather than migrating to the cloud. The CFO argues that the on-premises approach gives the organization one specific financial advantage the cloud cannot easily match. Which characteristic of the on-premises capital expenditure model is the CFO most likely referring to?

Accepted Answer

The organization owns depreciable physical assets and has predictable, fixed upfront costs rather than variable ongoing charges

Answer

The organization pays only for the compute resources it actually consumes each month

Answer

The organization can instantly scale capacity up and down to match patient demand

Answer

The organization shifts all hardware maintenance responsibility to a third-party provider

Question 18

A retail company's CFO is evaluating a move from on-premises data centers to Google Cloud. Currently, the company makes large upfront purchases of servers and networking hardware every few years, which it depreciates over time. The CFO wants to understand how the cloud will change the company's financial model. Which statement best describes the primary financial shift the company will experience?

Accepted Answer

It shifts spending from capital expenditure (CapEx) to operating expenditure (OpEx), paying for resources as they are consumed rather than large upfront purchases.

Answer

It shifts spending from operating expenditure (OpEx) to capital expenditure (CapEx), requiring larger upfront hardware investments.

Answer

It eliminates all IT costs because Google Cloud provides infrastructure at no charge for enterprise customers.

Answer

It converts all costs into fixed annual license fees that remain constant regardless of usage.

Question 19

A retail company has committed to sustainability goals and wants to report the gross carbon emissions associated with its Google Cloud usage to stakeholders. The finance and sustainability teams need location-based emissions data broken down by project, product, and region without building custom tooling. Which Google Cloud capability should they use?

Accepted Answer

Carbon Footprint, which reports the gross carbon emissions from Google Cloud usage by project, product, and region

Answer

Cloud Monitoring dashboards configured to track CPU and memory utilization across all projects

Answer

Budget alerts in Cloud Billing set to notify teams when spending approaches a threshold

Answer

The Recommender service providing idle-resource and rightsizing suggestions to cut waste

Question 20

A financial services company discovers that an attacker altered several transaction records in a database without authorization. Leadership asks which principle of the CIA triad was violated in this incident. Which principle was primarily compromised?

Accepted Answer

Integrity, because the records were modified in an unauthorized way

Answer

Confidentiality, because the records were exposed to an unauthorized party

Answer

Availability, because the records could not be accessed by users

Answer

Accountability, because no audit trail existed for the change

Question 21

A retail company's leadership is frustrated that launching a new online promotion feature takes their IT team six months because they must forecast demand, order servers, wait for delivery, and configure hardware before development can even begin. A competitor recently released a similar feature in three weeks. Which characteristic of cloud technology most directly addresses this business problem and explains why cloud is transforming how the company competes?

Accepted Answer

Cloud provides on-demand, self-service provisioning of resources, letting teams launch and iterate on new features in minutes without upfront hardware procurement

Answer

Cloud guarantees that all applications will run faster than they did on-premises because of superior processor hardware

Answer

Cloud eliminates the need for any software developers because Google manages the entire application

Answer

Cloud shifts all security responsibility to the provider, so the IT team no longer needs to plan or configure anything

Question 22

A retail company runs three separate business units, each with its own Google Cloud projects. Finance wants a single monthly invoice for all business units while still being able to see the individual spend attributed to each unit. Which approach best meets these requirements?

Accepted Answer

Link all projects across the three business units to one Cloud Billing account, and use labels or project-level breakdowns to attribute spend per unit.

Answer

Create a separate Cloud Billing account for each business unit so each receives its own invoice, then manually add the totals together each month.

Answer

Move all workloads into a single project so that only one project's costs need to be tracked and billed.

Answer

Use a budget alert on each project and treat the sum of the alert thresholds as the company's monthly invoice.

Question 23

A finance team at a retail company wants to perform detailed, custom analysis of their Google Cloud spending, breaking costs down by label, service, and project over the past year, and joining this data with their internal budgeting spreadsheets. The built-in Cloud Billing reports do not offer the granular, query-based flexibility they need. What should they configure to enable this level of cost analysis?

Accepted Answer

Enable Cloud Billing data export to BigQuery and run SQL queries against the detailed cost data

Answer

Create additional budget alerts for each project to track spending thresholds

Answer

Apply committed use discounts to all projects to simplify cost reporting

Answer

Grant the finance team the Billing Account Viewer role and rely on the standard Cloud Billing reports page

Question 24

A retail company runs a promotional flash sale twice a year, during which website traffic spikes to nearly 20 times its normal level for only a few hours. The rest of the year, traffic is steady and predictable. Their on-premises data center was sized to handle these peaks, leaving most servers idle throughout the year. Leadership wants to understand which fundamental characteristic of cloud technology most directly addresses this problem and enables business transformation. Which characteristic should you highlight?

Accepted Answer

Elasticity, allowing resources to automatically scale up during peaks and scale down afterward so you only pay for what you use

Answer

Multi-tenancy, allowing multiple customers to share the same underlying physical hardware

Answer

Data residency controls, allowing the company to choose the geographic region where data is stored

Answer

The shared responsibility model, dividing security duties between the provider and the customer

Question 25

A retail company stores product photos in a Cloud Storage bucket. Whenever a new image is uploaded, they need to automatically generate a thumbnail. The workload is sporadic and event-driven, and the team wants to write only a small piece of code without managing any servers or containers. Which Google Cloud service best fits this requirement?

Accepted Answer

Cloud Functions

Answer

Compute Engine managed instance group

Answer

Google Kubernetes Engine (GKE) Standard

Answer

Apigee API management

Question 26

A retail company runs a small, single-purpose function that validates a shipping address whenever a customer submits a checkout form. Traffic is unpredictable and spiky, and the team wants to write only the function logic without managing servers, containers, or scaling configuration. They also want costs to be zero when there is no traffic. Which Google Cloud service best fits this need?

Accepted Answer

Cloud Functions triggered by an HTTP request

Answer

A Compute Engine managed instance group with autoscaling

Answer

A GKE Standard cluster running the validation logic as a Deployment

Answer

An Apigee API proxy hosting the validation logic

Question 27

A gaming company based in North America is launching a new multiplayer title and expects rapid adoption in Europe and Asia. Their current on-premises data center is located only in the United States, and early beta testers in Asia are complaining about high lag. Leadership wants to understand how moving to a public cloud provider could specifically help them address this expansion challenge. Which characteristic of cloud technology most directly solves their problem?

Accepted Answer

The cloud's global network of regions and data centers lets them deploy workloads closer to players worldwide, reducing latency

Answer

The cloud converts their capital expenditure into operating expenditure, freeing up cash for marketing

Answer

The cloud provider assumes full responsibility for the security of their application code and player data

Answer

The cloud automatically applies operating system patches so their staff can focus on new features

Question 28

A mid-sized logistics company currently runs its own data center, where a team of six engineers spends most of their week racking servers, applying OS patches, replacing failed drives, and configuring backups. Leadership wants those engineers to instead build a new route-optimization application that could differentiate the business from competitors. Which characteristic of cloud technology most directly enables this shift?

Accepted Answer

The cloud provider assumes responsibility for underlying hardware and facility operations, letting internal staff redirect their time to activities that create business value

Answer

The cloud converts recurring operating expenses into a large upfront capital investment that the finance team can depreciate over several years

Answer

The cloud guarantees that applications will never experience downtime because provider infrastructure is fully redundant

Answer

The cloud allows the company to keep its existing data center hardware while adding remote monitoring dashboards

Question 29

An SRE team at an online retailer wants to be automatically notified when the checkout service's response latency exceeds an acceptable level, so they can respond before customers are significantly affected. Which Google Cloud capability should they configure to achieve this?

Accepted Answer

A Cloud Monitoring alerting policy based on a latency metric threshold

Answer

A Cloud Billing budget alert tied to the checkout service's spend

Answer

A BigQuery scheduled query that summarizes daily latency logs

Answer

An Active Assist recommendation to rightsize the checkout service VMs

Question 30

A retail company runs dozens of microservices across several Google Cloud projects. Their operations team struggles because each team checks logs and metrics in isolation, making it hard to spot system-wide performance issues quickly. They want a single place to visualize metrics, set up alerting policies, and track the health of all services. Which Google Cloud capability best addresses this need?

Accepted Answer

Cloud Monitoring dashboards and alerting policies aggregating metrics across projects

Answer

Cloud Billing budget alerts to track spending anomalies per service

Answer

Google Cloud Armor to protect the microservices from external attacks

Answer

Carbon Footprint report to measure the emissions of each microservice

Question 31

A retail company currently runs its own data center and buys enough physical servers upfront to handle the busiest shopping day of the year. For most of the year these servers sit at roughly 20% utilization, but the company still pays for all the hardware, power, and cooling regardless of usage. Leadership wants to understand the primary financial advantage of moving this workload to a public cloud pay-as-you-go model. Which statement best describes that advantage?

Accepted Answer

The company pays only for the compute resources it actually consumes, avoiding the cost of idle capacity provisioned for peak demand.

Answer

The company gains full ownership of the physical servers in the cloud provider's data center, increasing its long-term asset value.

Answer

The cloud provider guarantees a fixed monthly bill that never changes regardless of how much the company scales up or down.

Answer

The company eliminates all responsibility for securing and configuring its applications once workloads run in the cloud.

Question 32

A three-person startup wants to launch a new mobile app but has very little upfront funding. The founders are worried about spending money on servers they may not fully use if the app fails to attract users. Which fundamental characteristic of cloud computing most directly addresses their concern?

Accepted Answer

The pay-as-you-go model lets them pay only for the resources they actually consume, avoiding large upfront investments

Answer

Cloud providers offer perpetual software licenses that never expire

Answer

The cloud guarantees that all applications will succeed commercially

Answer

On-premises hardware can be purchased at a fixed discount when bought in bulk

Question 33

A retail company runs a stateless product-catalog API packaged as a Docker container. Traffic is highly variable, dropping to nearly zero overnight and spiking during flash sales. The team wants to deploy the container without managing servers or Kubernetes clusters, pay only for actual request processing, and scale automatically including down to zero. Which Google Cloud service best fits these requirements?

Accepted Answer

Cloud Run

Answer

Google Kubernetes Engine (GKE) Standard

Answer

Compute Engine managed instance group with autoscaling

Answer

GKE Enterprise across multiple clusters

Question 34

A retail company has a stateless containerized REST API that currently runs on a self-managed Kubernetes cluster in their data center. Traffic varies widely throughout the day, and the operations team spends significant time patching nodes and managing cluster capacity. Leadership wants to eliminate cluster management overhead entirely while keeping the existing container image and paying only for actual request processing. Which Google Cloud service best fits these requirements?

Accepted Answer

Cloud Run

Answer

Google Kubernetes Engine (GKE) Standard

Answer

Compute Engine managed instance group

Answer

GKE Enterprise

Question 35

A retail company runs an internal reporting service that is only used a few times a day when managers request sales summaries. The service is packaged as a stateless container. Management wants to avoid paying for compute when the service is idle, and the operations team does not want to manage servers, scaling policies, or clusters. Which Google Cloud compute option best fits these requirements?

Accepted Answer

Deploy the container to Cloud Run, which scales to zero when there is no traffic

Answer

Deploy the container to a Compute Engine managed instance group with autoscaling

Answer

Deploy the container to a Standard GKE cluster with a horizontal pod autoscaler

Answer

Deploy the container to a single always-on Compute Engine VM

Question 36

A development team has packaged a stateless web application into a container image. They want to deploy it so that it automatically scales to zero when there is no traffic, scales up during demand spikes, and requires no cluster or server management. They only want to pay for the compute time when requests are actually being processed. Which Google Cloud service best fits these requirements?

Accepted Answer

Cloud Run

Answer

Compute Engine with a managed instance group

Answer

Google Kubernetes Engine (GKE) Standard cluster

Answer

Bare Metal Solution

Question 37

An online retailer runs its e-commerce platform in an on-premises data center. During annual holiday sales, traffic spikes to nearly ten times the normal load for a few weeks, but demand returns to baseline the rest of the year. The IT team currently buys enough hardware to survive the peak, leaving most servers idle for the majority of the year. Which characteristic of cloud computing most directly addresses this specific problem?

Accepted Answer

Scalability, allowing resources to automatically expand during the holiday spike and contract afterward so capacity matches actual demand

Answer

The shared responsibility model, which transfers all security duties to the cloud provider

Answer

The software-as-a-service model, which delivers ready-to-use applications through a browser

Answer

A capital expenditure model, which lets the retailer purchase hardware in advance for predictable budgeting

Question 38

A mid-sized retailer is planning to launch an experimental online marketplace. Leadership is nervous because previous IT projects required buying servers upfront, and if the project failed, that hardware investment was wasted. The CTO wants to explain how moving this initiative to the cloud changes the financial risk profile of trying new ideas. Which statement best captures the business advantage the CTO should emphasize?

Accepted Answer

The cloud lets the retailer pay for resources only as they are consumed, so an unsuccessful experiment can be shut down without a stranded hardware investment.

Answer

The cloud guarantees the marketplace will succeed because Google-managed infrastructure removes all business risk from the project.

Answer

The cloud requires the retailer to sign multi-year hardware leases, which locks in predictable costs regardless of project outcome.

Answer

The cloud eliminates the need to measure total cost of ownership because all cloud spending is fully tax-deductible.

Question 39

A mid-sized media company runs its own data center. The engineering team spends most of its week racking servers, replacing failed hardware, and applying firmware updates, leaving little time to build new streaming features that customers are requesting. Leadership asks how moving to the cloud would fundamentally change how the team spends its time. Which explanation best describes why cloud technology transforms the business in this situation?

Accepted Answer

The cloud provider assumes responsibility for the underlying physical infrastructure, freeing the team to redirect its effort toward building differentiating features and innovation.

Answer

Moving to the cloud eliminates the need for any staff to manage applications, since the provider now owns all software the company runs.

Answer

Cloud adoption guarantees that the company's streaming features will never experience downtime because the provider fully manages fault tolerance for the customer's code.

Answer

The cloud converts all recurring subscription fees into a one-time capital purchase, reducing the total number of tasks the team performs.

Question 40

A mid-sized retailer runs its own data center and struggles because it must purchase enough servers up front to handle its busiest shopping season, leaving that hardware mostly idle the rest of the year. The CFO wants a model where the company only pays for computing resources as they are actually consumed, so spending rises and falls with real usage. Which characteristic of cloud computing directly delivers this benefit?

Accepted Answer

A pay-as-you-go, consumption-based pricing model that charges for resources actually used

Answer

The shared responsibility model that splits security duties between provider and customer

Answer

Multi-region redundancy that replicates data across geographic locations

Answer

A software-as-a-service model that delivers fully managed applications

Question 41

A retail company runs an e-commerce application that requires a relational database to handle order transactions, inventory records, and customer accounts. The engineering team wants strong transactional consistency and SQL support, but they do not want to manage database patching, backups, or replication themselves. Which Google Cloud data management solution best fits this need?

Accepted Answer

Cloud SQL, a fully managed relational database service

Answer

BigQuery, a serverless data warehouse for analytics

Answer

Cloud Storage, an object storage service for a data lake

Answer

Firestore, a NoSQL document database

Question 42

A media company receives thousands of raw video files, JSON logs, and image assets daily from various production teams. They want a single, cost-effective landing repository to store all of this data in its original format before any processing or analysis takes place. Which Google Cloud service should they use as this initial storage layer?

Accepted Answer

Cloud Storage, serving as a data lake for raw, varied-format objects

Answer

Cloud SQL, using separate tables for each file type

Answer

BigQuery, loading each file directly into partitioned tables

Answer

Firestore, storing each asset as a document in collections

Question 43

A financial services company must comply with an internal policy requiring that the organization retain full control over the lifecycle of the encryption keys protecting its data in Google Cloud, including the ability to rotate, disable, and revoke keys on its own schedule. They are comfortable with Google storing the keys but insist on managing them directly. Which encryption option best meets this requirement?

Accepted Answer

Use customer-managed encryption keys (CMEK) with Cloud Key Management Service

Answer

Rely on Google's default encryption at rest, since all data is automatically encrypted

Answer

Disable encryption and store data in a private VPC to isolate it from the internet

Answer

Use customer-supplied encryption keys (CSEK) so Google never has access to any key material at any time

Question 44

A retail company's finance team is reviewing their Google Cloud bill and notices that some Compute Engine costs are automatically reduced when instances run for a large portion of the month, without any prior commitment or contract being signed. Which billing feature is responsible for these automatic reductions?

Accepted Answer

Sustained use discounts, which are applied automatically as usage increases over the month

Answer

Committed use discounts, which require a 1- or 3-year usage commitment

Answer

Budget alerts, which reduce spending when a threshold is reached

Answer

Spot VM pricing, which offers deep discounts for interruptible workloads

Question 45

A healthcare company is preparing for an internal audit and must demonstrate that Google Cloud complies with recognized industry standards such as ISO 27001, SOC 2, and HIPAA. A compliance officer asks where they can obtain Google's third-party audit reports and certifications on demand, without contacting sales. Which Google Cloud resource should they use?

Accepted Answer

Compliance Reports Manager

Answer

Cloud Identity and Access Management (IAM)

Answer

Access Transparency logs

Answer

Security Command Center

Question 46

A media company runs a fleet of Compute Engine virtual machines that operate 24/7 at a predictable, steady level of utilization throughout the year. Finance wants to reduce the compute bill without changing the architecture or risking interruption of these always-on workloads. Which option best meets this requirement?

Accepted Answer

Purchase committed use discounts for a one- or three-year term covering the steady baseline capacity

Answer

Migrate the workloads to Spot VMs to take advantage of the deepest available discounts

Answer

Move the workloads to Cloud Run so they scale to zero when idle

Answer

Enable managed instance group autoscaling to add and remove instances automatically

Question 47

A retail company runs its customer-facing web application on a fixed set of Compute Engine virtual machines. Traffic is highly unpredictable, with sudden spikes during flash sales followed by long quiet periods. The operations team wants Google Cloud to automatically add and remove identical VM instances based on CPU load, without rewriting the application. Which Compute Engine capability best meets this need?

Accepted Answer

A managed instance group with autoscaling based on a load metric

Answer

A larger single VM using vertical machine-type resizing

Answer

Sole-tenant nodes dedicated to the application

Answer

Preemptible VMs scheduled to run only during business hours

Question 48

A manufacturing company runs a licensed legacy application on physical servers in its own data center. The application requires specific OS-level configurations, custom kernel modules, and cannot easily be rewritten. The company wants to move to Google Cloud quickly with minimal changes to the application while retaining full control over the operating system. Which Google Cloud compute option best fits this migration approach?

Accepted Answer

Migrate the application to Compute Engine virtual machines using a lift-and-shift approach

Answer

Rewrite the application into stateless containers and deploy on Cloud Run

Answer

Refactor the application into individual functions deployed on Cloud Functions

Answer

Package the application into microservices and orchestrate them on GKE

Question 49

A financial services company is migrating a legacy application to Google Cloud. Their software vendor licenses are tied to physical hardware, and their compliance auditors require that the workload run on physically isolated servers not shared with other customers. Which Compute Engine option best meets these requirements?

Accepted Answer

Sole-tenant nodes that dedicate physical servers to the company's workloads

Answer

Standard preemptible VM instances to reduce licensing costs

Answer

A managed instance group with autoscaling enabled

Answer

Deploying the application to Cloud Run for full isolation

Question 50

A healthcare organization stores patient medical records in Google Cloud. During a security review, the compliance team wants to ensure that even if an unauthorized party gains access to the underlying storage media, the patient data cannot be read. Which principle of the CIA triad is this control primarily addressing?

Accepted Answer

Confidentiality

Answer

Integrity

Answer

Availability

Answer

Authentication

Question 51

A regional retail chain has collected years of customer purchase history, loyalty program activity, and in-store sensor data, but this information sits unused across disconnected systems. The CEO argues that combining and analyzing this data could reveal buying patterns to personalize promotions and outperform competitors. From a business-value perspective, which statement best describes why acting on the CEO's idea matters?

Accepted Answer

Data becomes a strategic asset only when it is analyzed to generate insights that drive better decisions and competitive advantage.

Answer

The primary value of the data comes from the reduced storage costs achieved by consolidating it into a single system.

Answer

Simply retaining large volumes of historical data guarantees the organization a competitive advantage over rivals.

Answer

The data's main value is in satisfying regulatory retention requirements rather than informing business strategy.

Question 52

A media company collects massive volumes of raw data from many sources: video files, JSON logs, sensor readings, and CSV exports. The data science team wants to keep everything in its original, unprocessed format at low cost so they can explore and transform it later for various analytics and machine learning projects. Which Google Cloud data management approach best fits this need?

Accepted Answer

Build a data lake using Cloud Storage to hold raw, diverse data in its native format

Answer

Store all data in a Cloud SQL relational database with a rigid schema defined upfront

Answer

Load everything into a BigQuery data warehouse only after fully cleaning and structuring it

Answer

Use Firestore to store the raw video, log, and sensor data as document collections

Question 53

A logistics company is designing a new analytics platform. The data engineering team is documenting the overall data lifecycle so that stakeholders understand how raw sensor readings from delivery trucks eventually become executive dashboards. Which sequence correctly represents the general stages of the Google Cloud data lifecycle?

Accepted Answer

Ingest (collect), store, process/analyze, then explore/visualize

Answer

Visualize, process, store, then ingest

Answer

Store, visualize, ingest, then analyze

Answer

Process, ingest, visualize, then store

Question 54

A retail analytics team needs to run frequent SQL queries and generate business reports on cleaned, structured sales transaction data that has been organized into tables with a defined schema. They want a fully managed solution optimized for fast analytical queries across large historical datasets. Which Google Cloud solution best fits this need?

Accepted Answer

Use BigQuery as the data warehouse for the structured, query-ready data

Answer

Store the data in a Cloud Storage data lake and query the raw files directly

Answer

Use Firestore to store the transaction records for reporting

Answer

Use Cloud SQL to run the analytical reporting workloads

Question 55

A logistics company collects GPS events from thousands of delivery trucks. The data engineering team needs a fully managed service to build data pipelines that can transform and enrich both real-time streaming events and nightly batch files before loading the results into their data warehouse. They want to avoid managing clusters or servers. Which Google Cloud service should they choose?

Accepted Answer

Cloud Dataflow

Answer

Cloud Storage

Answer

Looker

Answer

Cloud Spanner

Question 56

A media company runs an existing Apache Spark and Hadoop cluster on-premises to process large batches of log data. They want to move these open-source workloads to Google Cloud with minimal changes to their existing Spark jobs, while offloading cluster management. Which Google Cloud service should they use?

Accepted Answer

Dataproc

Answer

BigQuery

Answer

Cloud SQL

Answer

Firestore

Question 57

A financial services company is designing its cloud security posture. The security architect wants to ensure that if one control fails—such as a misconfigured firewall rule—additional independent safeguards (such as IAM restrictions, encryption, and monitoring) still protect sensitive customer data. Which security concept best describes this approach?

Accepted Answer

Defense in depth

Answer

The principle of least privilege

Answer

The CIA triad's availability pillar

Answer

Shared responsibility model

Question 58

A finance department receives thousands of scanned PDF invoices from suppliers each month. Staff currently retype fields such as invoice number, date, and total amount into their accounting system. The company wants to automatically extract this structured data from the documents with minimal machine learning expertise. Which Google Cloud solution best fits this need?

Accepted Answer

Document AI, using a pre-trained invoice parser to extract fields

Answer

Cloud Vision API to detect objects within the scanned images

Answer

Vertex AI custom training to build a model from scratch on labeled invoices

Answer

Speech-to-Text API to convert the document contents into text

Question 59

A healthcare company is evaluating Google Cloud for storing patient records. Their compliance team asks what protects the stored data if someone were to gain physical access to the underlying storage media in a Google data center. Which Google Cloud security feature addresses this specific concern by default, without any configuration by the customer?

Accepted Answer

Encryption at rest, which automatically encrypts all customer data stored on disk

Answer

Identity and Access Management (IAM) roles that restrict who can read the data

Answer

VPC Service Controls that create a security perimeter around resources

Answer

Cloud Armor, which protects applications from distributed denial-of-service attacks

Question 60

A healthcare company is moving patient records to Google Cloud. Their security team is specifically worried about an attacker intercepting and reading data as it travels across the network between their application and Google Cloud APIs. Which Google Cloud security capability directly addresses this concern?

Accepted Answer

Encryption in transit, which protects data as it moves between the client and Google services and between Google's data centers

Answer

Identity and Access Management (IAM) roles that restrict who can view the records

Answer

Encryption at rest, which automatically encrypts stored data on Google's persistent disks

Answer

Cloud Audit Logs, which record who accessed the patient records and when

Question 61

A retail company has moved most of its steady-state workloads to Google Cloud. The finance and platform teams want a single view that shows how effectively their committed use discounts are being consumed and highlights where additional commitments could save money. Which Google Cloud capability best supports this ongoing FinOps optimization practice?

Accepted Answer

The Cost optimization and commitment analysis reports in Cloud Billing (including recommendations for committed use discounts)

Answer

Cloud Monitoring uptime checks configured across all production services

Answer

The Carbon Footprint report to track gross emissions by project

Answer

Organization policy constraints applied at the folder level

Question 62

A retail company has adopted Google Cloud and finds that engineering teams launch resources freely, leading to unpredictable monthly bills. The finance team wants to build a lasting practice where engineering, finance, and business teams collaborate continuously to make cost-aware decisions—rather than relying on a single one-time cleanup. Which approach best describes what the company should establish?

Accepted Answer

A FinOps culture that fosters shared accountability and ongoing collaboration between finance, engineering, and business teams

Answer

A quarterly audit performed exclusively by the finance department to reclaim unused resources

Answer

A hard organization policy that blocks all engineers from creating any billable resources without CFO approval

Answer

A migration to fixed-capacity on-premises hardware to make costs fully predictable

Question 63

A finance manager at a retail company wants a clear, itemized monthly document that serves as the official record of charges for the accounting department to reconcile payments and file for tax purposes. They are not looking to analyze usage trends or forecast future spending. Which Google Cloud Billing artifact best meets this specific need?

Accepted Answer

The Cloud Billing invoice, which provides the official statement of charges for a billing period

Answer

A Cloud Monitoring dashboard showing resource utilization metrics

Answer

A budget with threshold alerts configured in the billing account

Answer

The cost breakdown report analyzing spending by service and project

Question 64

A large enterprise runs dozens of projects across multiple departments under one Cloud Billing account. Leadership complains that no team feels responsible for its own cloud spending, and finance cannot attribute costs to the business units that generate them. As a FinOps practice, what should the organization implement to make each department accountable for the costs it incurs?

Accepted Answer

Apply resource labels and use billing data with a showback/chargeback model to attribute and report costs back to each department

Answer

Purchase committed use discounts for all projects to reduce the overall bill

Answer

Move every department into a single shared project to simplify the billing report

Answer

Enable customer-managed encryption keys so each department controls its own resources

Exam domain	Exam weight	Practice
Digital Transformation with Google Cloud	17%	Practice this topic
Exploring Data Transformation with Google Cloud	16%	Practice this topic
Innovating with Google Cloud Artificial Intelligence	16%	Practice this topic
Modernizing Infrastructure and Applications with Google Cloud	17%	Practice this topic
Trust and Security with Google Cloud	17%	Practice this topic
Scaling with Google Cloud Operations	17%	Practice this topic

Cloud Digital Leader (CDL) practice exam & study guide

Start studying CDL

All CDL study resources

CDL exam domains

Sample CDL questions

Key CDL terms

CDL frequently asked questions

Digital Transformation with Google Cloud (17%)

Exploring Data Transformation with Google Cloud (16%)

Innovating with Google Cloud Artificial Intelligence (16%)

Modernizing Infrastructure and Applications with Google Cloud (17%)

Trust and Security with Google Cloud (17%)

Scaling with Google Cloud Operations (17%)