Your manager wants to restrict communication of all virtual machines with internet access; with resources in another network; or with a resource outside Compute Engine. It is expected that different teams will create new folders and projects in the near future. How would you restrict all virtual machines from having an external IP address?
-
A
Define an organization policy at the root organization node to restrict virtual machine instances from having an external IP address
-
B
Define an organization policy on all existing folders to define a constraint to restrict virtual machine instances from having an external IP address
-
C
Define an organization policy on all existing projects to restrict virtual machine instances from having an external IP address
-
D
Communicate with the different teams and agree that each time a virtual machine is created, it must be configured without an external IP address
Reveal answer details
Close answer details
Correct answerA
ExplanationReferences: https://cloud.google.com/resource-manager/docs/organization-policy/overview
You have experimented with Google Cloud using your own credit card and expensed the costs to your company. Your company wants to streamline the billing process and charge the costs of your projects to their monthly invoice. What should you do?
-
A
Grant the financial team the IAM role of Billing Account User on the billing ac-count linked to your credit card.
-
B
Change the billing account of your projects to the billing account of your company.
-
C
Create a ticket with Google Billing Support to ask them to send the invoice to your company.
-
D
Set up BigQuery billing export and grant your financial department IAM access to query the data.
Reveal answer details
Close answer details
Correct answerB
ExplanationTo change the Cloud Billing account for a project, you need to be able to move a project from one Cloud Billing account to another. To accomplish this task, you need permissions adequate to unlink the project from the existing Cloud Billing account AND to link the project to the target Cloud Billing account. Roles with adequate permissions to perform this task: Project Owner or Project Billing Manager on the project, AND Billing Account Administrator or Billing Account User for the target Cloud Billing account Reference link- https://cloud.google.com/billing/docs/how-to/modify
Your organization is on a critical path with recently developed applications. They are going into production in a month. A few million users are expected to use the new application. They want to ensure minimum disruption when the application goes live. Any issues have to be dealt with within minutes and resolved as quickly as possible. Which Support package should they take?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerD
ExplanationPremium Support will have a 15-minute response time with 24/7 response for high & criti-cal-impact issues. https://cloud.google.com/support
An organization wants to move from a strategic cloud adoption maturity level to a trans-formational one. How should the organization change the way they scale?
-
A
-
B
Deploy changes when problems arise.
-
C
Deploy changes programmatically.
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationBecause automation is a transformational approach which ensures changes are constant and low-risk.
An organization is hosting an application in Europe, and customers in Asia are reporting slow response times despite their fast internet connection. What is the problem?
-
A
Not enough application servers
-
B
-
C
-
D
Misconfigured application servers
Reveal answer details
Close answer details
Correct answerC
ExplanationNetwork latency refers to the delay that occurs in data transmission over a network, which can affect the response time of an application for users who are geographically distant from the server hosting the application. In this case, customers in Asia experience slow response times because the application is hosted in Europe, causing a higher latency due to the physical distance between the user and the server. Network latency is correct because it addresses the primary issue of increased delay due to geographical distance. References: Google Cloud Networking: Understanding Network Latency and Performance Google Cloud: Global Load Balancing Solutions to Reduce Latency
An organization is planning to create many new applications and needs a system for managing and orchestrating their containers. Why should they use Google Kubernetes Engine?
-
A
It enables rapid application deployment and testing.
-
B
It optimizes virtual machine performance.
-
C
It connects legacy systems to an application.
-
D
It provides pre-written source code for application development.
Reveal answer details
Close answer details
Your company security team manages access control to production systems using an LDAP directory group. How is this access control managed in the Google Cloud production project?
-
A
Assign the proper role to the Service Account in the project's IAM Policy
-
B
Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group.
-
C
Assign the proper role to the Google Group in the project's IAM Policy.
-
D
Create the project in a folder with the same name as the LDAP directory group.
Reveal answer details
Close answer details
Correct answerC
ExplanationReferences: https://cloud.google.com/blog/products/identity-security/achieving-identity-and-access-governance-on-google-cloud
Your organization runs a distributed application in the Compute Engine virtual machines. Your organization needs redundancy, but it also needs extremely fast communication (less than 10 milliseconds) between the parts of the application in different virtual machines. Where should your organization locate this virtual machines?
-
A
In a single zone within a single region
-
B
In different zones within a single region
-
C
In multiple regions, using one zone per region
-
D
In multiple regions, using multiple zones per region
Reveal answer details
Close answer details
Correct answerB
ExplanationMulti zone is also redundant within the region and it provides the lowest latency. Reference link: https://cloud.google.com/solutions/best-practices-compute-engine-region-selection
What is a defining feature of a non-relational database?
-
A
Repotting across multiple data sources
-
B
Queries that join multiple tables
-
C
A strictly enforced schema
-
D
Reveal answer details
Close answer details
Question 10
Single choice
Your organization needs to allow a production job to have access to a BigQuery dataset. The production job is running on a Compute Engine instance that is part of an instance group. What should be included in the IAM Policy on the BigQuery dataset?
-
A
The Compute Engine instance group
-
B
The project that owns the Compute Engine instance
-
C
The Compute Engine service account
-
D
The Compute Engine instance
Reveal answer details
Close answer details
Correct answerC
ExplanationWhen an identity calls a Google Cloud API, BigQuery requires that the identity has the appropriate permissions to use the resource. You can grant permissions by granting roles to a user, a group, or a service account. Reference link- https:// cloud.google.com/bigquery/docs/access-control
Question 11
Single choice
Which of the following is/are true about Bare Metal Solutions?
-
A
Enterprise-grade deployment platform
-
B
All your existing investment in tooling and best practices will work as is
-
C
Continue to run any version, and feature set, any database option, and any cus-tomizations (patchsets)
-
D
Reveal answer details
Close answer details
Correct answerD
ExplanationBare Metal Solution for Oracle Bring your Oracle workloads to Google Cloud with Bare Metal Solution and jumpstart your cloud journey with minimal risk. Continue to run any version, any feature set, any database option, and any customizations (patchsets) Enterprise-grade deployment platform High availability with Oracle RAC Works with any application, any Oracle versions
Question 12
Single choice
Cloud SQL is a fully-managed relational database service for MySQL, PostgreSQL and SQL serv-ers, keeping Cloud SQL Google Cloud Service in mind, which of the following statements is/are correct?
-
A
Data inside cloud SQL is automatically Encrypted.
-
B
Cloud SQL automatically ensures your databases are reliable, secure, and scala-ble so that your business continues to run without disruption.
-
C
With DMS (Database Migration Service) it becomes very easy to Migration of Pro-duction Database.
-
D
Reveal answer details
Close answer details
Correct answerD
ExplanationCloud SQL Fully managed relational database service for MySQL, PostgreSQL, and SQL Server. Run the exact same relational databases you know with their rich extension collections, configuration flags and developer ecosystem, but without the hassle of self management. -Reduce maintenance cost with fully managed MySQL, PostgreSQL and SQL Server databases. -Ensure business continuity with reliable and secure services backed by 24/7 SRE team. -Automate database provisioning, storage capacity management, and other time-consuming tasks. -Database observability made easy for developers with Cloud SQL Insights. -Easy integration with existing apps and Google Cloud services like GKE and BigQuery. Key features: Fully managed Cloud SQL automatically ensures your databases are reliable, secure, and scalable so that your business continues to run without disruption. Cloud SQL automates all your backups, replication, encryption patches, and capacity increases-- while ensuring greater than 99.95% availability, anywhere in the world. Integrated Access Cloud SQL instances from just about any application. Easily connect from App Engine, Compute Engine, Google Kubernetes Engine, and your workstation. Open up analytics possibilities by using BigQuery to directly query your Cloud SQL databases. Reliable Easily configure replication and backups to protect your data. Go further by enabling automatic failover to make your database highly available. Your data is automatically encrypted, and Cloud SQL is SSAE 16, ISO 27001, and PCI DSS compliant and supports HIPAA compliance. Easy migrations to Cloud SQL Database Migration Service (DMS) makes it easy to migrate your production databases to Cloud SQL with minimal downtime. This serverless offering eliminates the manual hassle of provisioning, managing, and monitoring migration-specific resources. DMS leverages the native replication capabilities of MySQL and PostgreSQL to maximize the fidelity and reliability of your migration. And it's available at no additional charge for native like-to-like migrations to Cloud SQL.
Question 13
Single choice
An organization is using new technologies to change its business processes and culture to develop new customer experiences and adapt to market dynamics. What is the name of this approach?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerA
ExplanationDigital transformation refers to the use of new technologies to fundamentally change how an organization operates, interacts with customers, and delivers value. It includes changes to business processes, culture, and customer experiences to better adapt to market dynamics and leverage new digital capabilities. Digital transformation is correct because it involves using new technologies to drive changes in business processes, customer experiences, and organizational culture to stay competitive in a rapidly changing market. References: Google Cloud Digital Transformation: Accelerate Business Growth with Cloud Google Cloud: Digital Transformation Strategy
Question 14
Single choice
One of your clients is in the retail sector. They have a small team supporting their operations and a small development team taking care of application development. They have heard of the benefits of machine learning, but they do not have the capacity to hire data scientists or the work to retain them. They have a team of analysts who works primarily on BigQuery and knows how to run SQL queries. They want to be able to get into the new age of machine learning and artificial intelligence. What options are available to run on Google Cloud?
-
A
Use the popular open-source libraries SciPy and NumPy to create machine learn-ing models.
-
B
Use the Unified AI Platform to create a custom TensorFlow model.
-
C
Use BigQuery ML to create machine learning models using SQL queries.
-
D
Integrate the Cloud Vision API and the Cloud Speech API to create a custom mod-el that will suit the retail sector.
Reveal answer details
Close answer details
Correct answerC
ExplanationBigQuery ML allows you to create ML models using standard SQL queries. Those familiar with BigQuery and ML will be able to create ML models with just a basic understanding of machine learning. https://cloud.google.com/bigquery-ml/docs/
Question 15
Single choice
What is the benefit of using a unified cloud data solution?
-
A
Data will always cost less to store
-
B
Data can be automatically secured from external threats
-
C
Data can enable innovation because it's no longer siloed.
-
D
Data will always be backed up and cannot be lost or deleted
Reveal answer details
Close answer details
Question 16
Multiple choice
Virtual Machine vCPU and memory usage for each of these categories can receive one of the following discounts? (Select Three Answer)
-
A
-
B
-
C
-
D
-
E
Reveal answer details
Close answer details
Correct answersC, D, E
ExplanationSustained, Committed and Preemptible vCPU and memory usage for each of these categories can receive discounts VM vCPU and memory usage for each of these categories can receive discounts Sustained-use discounts--Google offers up to 30% off for workloads that run for most of the billing month on GCP services. Committed-use discounts--users can save up to 57% by committing to use an instance for a certain time period, with no upfront payment and with the flexibility to change instances during the commitment period. Preemptible VMs--similar to the concept of AWS spot instances, Google offers up to 79% off for Virtual Machines that may be shut down at any time and replaced by others. Reference link https://cloud.google.com/compute/docs/sustained-use-discounts Reference link https://cloud.google.com/compute/docs/instances/signing-up-committed-use-discounts https://cloud.google.com/compute/docs/instances/preemptible
Question 17
Single choice
An organization wants to dynamically adjust its application to serve different user needs. What are the benefits of storing their data in the cloud for this use case?
-
A
Data can be stored in archive for long term access
-
B
Automatic data cleaning and validation
-
C
Real-time data ingestion and analysis
-
D
No data access management required
Reveal answer details
Close answer details
Correct answerC
ExplanationBy storing their application data in the cloud the organization will be able to gather and analyze user behavior data in real-time. This will enable them to dynamically adjust their application for different user needs.
Question 18
Single choice
A customer has new applications to build that has to handle both batch data and streaming data. Which product should they choose?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationDataflow is the managed version of Apache Beam. Beam = Batch + Stream. Unified stream and batch data processing that's serverless, fast, and cost-effective.  Reference link- https://cloud.google.com/dataflow
Question 19
Single choice
An organization with a commissions-based business model is struggling to predict cloud costs due to fluctuating revenue. How can the organization optimize the use of their cloud resources?
-
A
By applying intelligent recommendations
-
B
By decentralizing financial decision making
-
C
By sharing project ownership across all teams
-
D
By increasing their capital expenditure
Reveal answer details
Close answer details
Correct answerA
ExplanationRefer the section "recommendations" under cost management "View intelligent recommendations for optimizing your costs and usage. Easily apply these changes for immediate cost savings and greater efficiency." https://cloud.google.com/cost-management
Question 20
Single choice
After rolling out a new update, an organization found a minor bug in its online video game. How should the organization approach this bug while following SRE principles?
-
A
Accept and learn from the bug because failure is normal
-
B
Accept and ignore the bug because it is only minor
-
C
Hold a postmortem to reprimand the employee responsible for the bug
-
D
Document bug correction to eliminate all future bugs
Reveal answer details
Close answer details
Correct answerA
Explanationhttps://www.blameless.com/sre/sre-principles Accepting failure as normal is one of the SRE principles. SREs believe that accepting failure as normal helps to build an iterative, collaborative culture. One way this is done is by holding a blameless "lessons learned" discussion after an incident occurs.
Question 21
Single choice
Which of the following storage options should you use when your company is using Cloud Storage to store application backup files for disaster recovery purposes, provided you want to follow Goog-le's recommended practices.
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationColdline storage is a very low cost highly durable storage service for data archiving, online backup, and disaster recovery. Coldline storage is the best choice for data that you plan to access at most once a year due to its slightly lower availability, 90 day minimum storage duration cost for data access, and higher per operation costs. Nearline and Coldline are for backup and archival storage and having the highest availability for both with 99.9 percent.
Question 22
Single choice
An organization wants to refactor their application by using a microservices architecture when migrating to the cloud. Which benefit would this action provide?
-
A
The refactored application is more efficient and scalable.
-
B
No code changes will be required.
-
C
This migration pattern provides the fastest path to the cloud.
-
D
The application will become PCI-DSS compliant by default.
Reveal answer details
Close answer details
Correct answerA
ExplanationThe refactored application is more efficient and scalable. Here's why: The organization wants to refactor its application into a microservices architecture when migrating to the cloud. Google Cloud Product Relevance: Why Not Other Options: References: For more information on microservices and cloud-native architectures, refer to the Google Cloud Microservices documentation.
Question 23
Single choice
You are a program manager in a company you need to submit a bare metal solution order for a se-cure, high performance connection with a low-latency network fabric. What network information you need to submit the order to Bare Metal Solutions.
-
A
IP Ranges for example Client IP Address range used for communication between your Google Cloud and Bare Metal Solution environments.
-
B
Google Cloud Project Id that you are using with your bare metal solution environ-ment.
-
C
Total number of VLANs you need in your Bare Metal Solution Environment.
-
D
Reveal answer details
Close answer details
Correct answerD
ExplanationWhat Bare Metal Solution provides Bare Metal Solution is a managed solution that provides purpose-built HPE or Atos bare-metal servers in regional extensions that are connected to Google Cloud by a managed, high-performance connection with a low-latency network fabric. With Bare Metal Solution, Google Cloud provides and manages the core infrastructure, the network, the physical and network security, and hardware monitoring capabilities in an environment from which you can access all of the Google Cloud services. The core infrastructure includes secure, controlled-environment facilities, and power. The Bare Metal Solution also includes the provisioning and maintenance of custom, sole-tenancy servers with local SAN, and smart hands support. The network, which is managed by Google Cloud, includes a low-latency Partner Interconnect connection into the customer Bare Metal Solution environment. The available Google Cloud services include private API access, management tools, support, and billing.
Question 24
Single choice
What does Cloud Logging help an organization do?
-
A
Analyze live source code and log code updates.
-
B
Deploy infrastructure as code.
-
C
Analyze logs and accelerate application troubleshooting.
-
D
Manage storage of custom VM images.
Reveal answer details
Close answer details
Question 25
Single choice
How does a least privilege resource access model contribute to cloud security?
-
A
Google is responsible for determining access to cloud resources.
-
B
Employees may only access on-premises software with special permission.
-
C
Only managers and other senior employees have cloud resource access.
-
D
Employees only have access to the cloud resources necessary for their job.
Reveal answer details
Close answer details
Correct answerD
ExplanationThis is the definition of a least privilege model. A supporting principle that helps organizations achieve these goals is the principle of least privilege. The principle of least privilege addresses access control and states that an individual should have only the minimum access privileges necessary to perform a specific job or task and nothing more
Question 26
Single choice
When creating machine learning models, a key initial step is to identify the type of model required. One of these is the classification model. Which of these statements define a classification model?
-
A
A type of machine learning model for distinguishing among two or more discrete values.
-
B
-
C
A type of machine learning model is a meta-model maker, which classifies algo-rithms based on the quality of their output.
-
D
A type of machine learning model that outputs continuous (typically, floating-point) values.
-
E
g. the predicted price of the house is $120,000.
-
F
A type of classic model approach that is less used today and which has been re-placed by the regression model.
Reveal answer details
Close answer details
Correct answerA
ExplanationA classification model classifies the incoming data into one or more discrete classes.
Question 27
Single choice
Your ed-tech start-up was originally launched in a small geography. Any user sign-ups, course progress, tests taken, etc. are captured on a self-managed MySQL database. Every user generates many such transactions. Now you're taking the application globally and preparing for a much larger influx of users from all over the world. The existing MySQL server is unlikely to be able to scale. Which convenient option can be considered?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationCloud Spanner is a global scale SQL database that scales extremely well. That would be the best choice.
Question 28
Single choice
A public cloud provider's service level performance has moved below the service level objective (SLO), but remains above the service level agreement (SLA). What is an outcome of this change in service level performance?
-
A
The public cloud provider is encouraged to push out new updates
-
B
The public cloud provider is encouraged to prioritize service reliability
-
C
End users face unexpected or prolonged downtime
-
D
End users face a decrease in service latency
Reveal answer details
Close answer details
Question 29
Single choice
An organization is altering their gaming product so that it is compatible with cloud technology. What can they expect when moving from traditional technology to cloud technology?
-
A
No change to existing responsibilities
-
B
-
C
A shift toward using structured data
-
D
Increased hardware maintenance
Reveal answer details
Close answer details
Question 30
Single choice
An organization wants to ingest custom log data from GKE environments, virtual machines, and Google Cloud services. Which Google Cloud tool should the organization use?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 31
Single choice
In terms of Cloud SQL for MySQL Features offered by Google Cloud Platform which of the statements is/ are correct?
-
A
Do not support Private IP (private service access).
-
B
Customer data is encrypted on Google's internal networks and in database tables, temporary files, and backups.
-
C
Do not Provide automated and on-demand backups and point-in-time recovery.
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationCloud SQL for MySQL: Features -Fully managed MySQL Community Edition databases in the cloud. -Cloud SQL instances support MySQL 8.0, 5.7 (default), and 5.6, and provide up to 624 GB of RAM and 64 TB of data storage, with the option to automatically increase the storage size, as needed. -Create and manage instances in the Google Cloud Console. -Instances are available in the Americas, EU, Asia, and Australia. -Customer data is encrypted on Google's internal networks and in database tables, temporary files, and backups. -Support for secure external connections with the Cloud SQL Auth proxy or with the SSL/TLS protocol. -Support for private IP (private services access). -Data replication between multiple zones with automatic failover. -Import and export databases using mysqldump, or import and export CSV files. -Support for MySQL wire protocol and standard MySQL connectors. -Automated and on-demand backups and point-in-time recovery. -Instance cloning. -Integration with Google Cloud's operations suite logging and monitoring.
Question 32
Single choice
A fitness band company is continuously ingesting data from millions of its consumers. Different kinds of data based on time, like location, heartbeat rate, temperature, movement, etc. are connect-ed. They need a high throughput database that can write data very fast. Since their users are spread across the world, they need the database to be geographically scalable. Consumers also want to see near-real-time visualizations of their activities. Which of these databases would be a good fit?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationBigtable is the best suited for time series data. It also has high read-write throughput and ability to scale globally.
Question 33
Multiple choice
Customer Managed Encryption Keys (CMEK) can be used for encrypting data inside Cloud BigTable, which of the following statements is/are correct. (Select two answer)
-
A
Administrators can not rotate
-
B
Not supported for instances that have clustered in more than one region.
-
C
CMEK can only be configured at the cluster level.
-
D
You can not use the same CMEK key in multiple projects
Reveal answer details
Close answer details
Correct answersB, C
ExplanationCustomer-managed encryption keys for Cloud BigTable. By default, all the data at rest in Cloud Bigtable is encrypted using Google's default encryption. Bigtable handles and manages this encryption for you without any additional action on your part. If you have specific compliance or regulatory requirements related to the keys that protect your data, you can use customer-managed encryption keys (CMEK) for BigTable. Instead of Google managing the encryption keys that protect your data, your BigTable instance is protected using a key that you control and manage in Cloud Key Management Service (Cloud KMS). Features Security: CMEK provides the same level of security as Google's default encryption but provides more administrative control. Data access control: Administrators can rotate, manage access to, and disable or destroy the key used to protect data at rest in BigTable . Auditability: All actions on your CMEK keys are logged and viewable in Cloud Logging. Comparable performance: BigTable CMEK-protected instances offer comparable performance to BigTable instances that use Google default encryption. Flexibility: You can use the same CMEK key in multiple projects or instances or you can use separate keys, depending on your business needs.
Question 34
Single choice
An organization is looking for a solution that will allow them to build new applications, modernize old ones, and run applications across different cloud providers. What solution should the organization use?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationThe organization should use Anthos. Anthos is a hybrid and multi-cloud application platform that allows organizations to build, deploy, and manage applications across different cloud providers, on-premises, and edge locations. It offers a consistent development and deployment experience across hybrid and multi-cloud environments, and provides a unified management interface for applications running on Kubernetes.
Question 35
Single choice
An organization has created a medical fitness app and wants to store a very large amount of data about exercise times, activity, and calories burned for later analysis. Which data management solution should the organization use?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 36
Single choice
Your organization wants an economical solution to store data such as files, graphical images, and videos and to access and share them securely. Which Google Cloud product or service should your organization use?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerA
ExplanationGoogle Storage is GCP's version of AWS Simple Storage Service (S3) and an S3 bucket would be equivalent to a Google Storage bucket across the two clouds
Question 37
Single choice
Each of the three cloud service models-infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS)-offers benefits between flexibility and levels of management by the cloud provider and the customer. Why would SaaS be the right choice of service model?
-
A
You want a balance between flexibility for the customer and the level of management by the cloud provider
-
B
You want to minimize the level of management by the customer
-
C
You want to maximize flexibility for the customer.
-
D
You want to be able to shift your emphasis between flexibility and management by the cloud provider as business needs change
Reveal answer details
Close answer details
Correct answerB
ExplanationBenefits of SaaS The main benefit of SaaS is that it offloads all infrastructure and application management to the SaaS vendor. References: https://www.ibm.com/cloud/learn/iaas-paas-saas
Question 38
Single choice
An organization runs their application on a virtual machine, but every time they want to edit specific features, they have to bring the system offline to update the applica-tion. What would be a more appropriate solution for their app?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationBecause containers can compartmentalize applications which enables parts to be edited in isolation. Reference link- https://cloud.google.com/learn/what-are-containers
Question 39
Single choice
You are a DevOps Engineer in an E-commerce company that sells products globally, across the countries, Customers buy products, add them to carts or check-in stock from different parts of the world with different timestamps, you need to choose a database that can scale globally without any hassle and lots of developer support, it should be consistent across regions, can scale horizontally to support enormous user, automatically replicates, shards and even auto transaction pro-cessing. Which of the following database do you choose?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationCloud Spanner: Fully managed relational database with unlimited scale, strong consistency, and up to 99.999% availability. -Get all the benefits of relational semantics and SQL with unlimited scale -Start at any size and scale with no limits as your needs grow -Enjoy high availability with zero scheduled downtime and online schema changes -Deliver high-performance transactions with strong consistency across regions and continents -Focus on innovation, eliminating manual tasks with capabilities like automatic sharding Automatic sharding Cloud Spanner optimizes performance by automatically sharding the data based on request load and size of the data. As a result, you can spend less time worrying about how to scale your database and instead focus on scaling your business. Strong transactional consistency Purpose-built for external, strong, global transactional consistency. Regional and multi-regional configurations No matter where your users may be, apps backed by Cloud Spanner can read and write up-to-date strongly consistent data globally Additionally, when running a multi-region instance, your database is able to survive a regional failure, and offers industry-leading 99.999% availability. Online schema changes with no downtime Cloud Spanner users can make a schema change, whether it's adding a column or adding an index while serving traffic with zero downtime. Hence you now have the flexibility to adapt your database to your business needs without compromising on the availability of your application.
Question 40
Single choice
An organization delivers a proactive healthcare service. They want to efficiently and automatically collect patient data. What should the organization encourage the patients to do?
-
A
Use at-home health screening devices and then upload their health data daily
-
B
Wear Internet of Things (IoT) devices that upload their health data in real time
-
C
Self-assess their health data and then document and upload it in real time
-
D
Visit a nurse who will use Internet of Things (IoT) devices to collect and upload their health data
Reveal answer details
Close answer details
Question 41
Single choice
You are consulting for a client who is migrating to Google Cloud. They presently have a matrix or-ganization. Their IT environments were managed around projects. Each team had multiple projects. All the projects had a flat structure under the company. What would you advise them when plan-ning for the move?
-
A
On Google Cloud, create a folder corresponding to each team. Under that, there could be projects or further sub folders as the team decides.
-
B
In terms of not disturbing the project developers and testers, advise them that the strategic decision is to retain the structure on Google Cloud also.
-
C
Since a Project could spawn other sub-Projects, on Google Cloud it is better to as-sign a folder for each Project.
-
D
The flat structure is what is currently used in IT organizations, and this can be used as-is which will provide the best results.
Reveal answer details
Close answer details
Correct answerA
ExplanationFolders for a related group of projects are the recommended approach.-> A flat structure under the organization node is possible on Google Cloud, but it is not recommended. It becomes tougher to manage. -> Projects cannot have sub-projects; there can only be resources within Projects. Reference link- https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy
Question 42
Single choice
Which scenario uses machine learning to unlock business value from unstructured data?
-
A
Recommending new products based on previous purchases
-
B
Analyzing tabular records of product defects to predict future maintenance cycles
-
C
Monitoring financial transactions to identify potential fraud and risk
-
D
Determining customer sentiments from call center voice recordings
Reveal answer details
Close answer details
Question 43
Single choice
A cinema company wants to build a model to predict customer visit patterns for the coming year. They have three years of customer visit data across 300 theaters; however, the data has been stored in different formats by different theaters. They must train the ML model. What should they do?
-
A
Choose an ML model type that can process different formats of input data.
-
B
Transform the data into a consistent format.
-
C
Use the last year of data so there are fewer inconsistencies for the model to handle.
-
D
Group different format types and train a different model for each group.
Reveal answer details
Close answer details
Correct answerB
ExplanationThe cinema company wants to build a machine learning model to predict customer visit patterns using three years of customer visit data stored in different formats. For effective ML model training, the input data must be in a consistent format. Google Cloud Product Relevance: Why Not Other Options: References: Refer to Dataflow and Dataprep documentation for details on data transformation and preparation services in Google Cloud.
Question 44
Single choice
Your organization needs to build streaming data pipelines. You don't want to manage the individual servers that do the data processing in the pipelines. Instead, you want a managed service that will automatically scale with the amount of data to be processed. Which Google Cloud product or feature should your organization choose?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationReferences: https://cloud.google.com/dataflow/docs/guides/deploying-a-pipeline Reference link- (https://cloud.google.com/dataflow/docs/guides/deploying-a-pipeline)
Question 45
Single choice
An online retail organization wants to optimize their service. What is an example of unstructured data that they can use to make decisions?
-
A
-
B
Seller location coordinates
-
C
-
D
Warehouse inventory records
Reveal answer details
Close answer details
Correct answerA
Explanationhttps://cloud.google.com/storage/docs/requester-pays
Question 46
Single choice
An IoT platform is providing services to home security systems. They have more than a million customers, each with many home devices. Burglaries or child safety issues are concerns that the clients customers. Therefore, the platform has to respond very quickly in near real time. What could be a typical data pipeline used to support this platform on Google Cloud?
-
A
Cloud Pub/Sub, Cloud Dataflow, Data Studio
-
B
Cloud Functions, Cloud Dataproc, Looker
-
C
Cloud Pub/Sub, Cloud Dataflow, BigQuery
-
D
Cloud Functions, Cloud Dataproc, BigQuery
Reveal answer details
Close answer details
Correct answerA
Explanation=> Cloud Pub/Sub-Cloud Pub/Sub is the best to be the end-point for ingesting large amounts of data. It will grow as required, can stream data to downstream systems, and can also work with intermittently available backends. => Cloud Dataflow-supports streaming data and therefore is an appropriate option for processing the data that is ingested. => BigQuery-BigQuery also supports streaming data and its possible to do real time ana-lytics on it. => DataStudio-DataStudio and Looker are for visualization. They don't have any in-built analysis. => Cloud Functions-Cloud Functions is a useful serverless endpoint. However, Pub/Sub is better in this case because it can also retain messages for a set period if it was not possi-ble to deliver it first time. =>Cloud Dataproc-Cloud Dataproc is used for Hadoop/Spark workloads and won't be a good fit here.
Question 47
Single choice
An organization has servers running mission-critical workloads on-premises around the world. They want to modernize their infrastructure with a multi-cloud architecture. What benefit could the organization experience?
-
A
Ability to disable regional network connectivity during cyber attacks
-
B
Ability to keep backups of their data on-premises in case of failure
-
C
Full management access to their regional infrastructure
-
D
Reduced likelihood of system failure during high demand events
Reveal answer details
Close answer details
Correct answerD
ExplanationA multi-cloud architecture can help organizations to reduce the likelihood of system failure during high demand events by spreading their workloads across multiple clouds. This can help to ensure that even if one cloud experiences an outage, the organization's applications will still be available to users.
Question 48
Single choice
What type of cloud computing service provides raw compute, storage, and network, organized in ways that are familiar to physical data centers?
-
A
-
B
-
C
Infrastructure as a Service.
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationWhat is Infrastructure as a service : IaaS (infrastructure as a service) is a computing model that offers resources on-demand to businesses and individuals via the cloud. IaaS is attractive because acquiring computing resources to run applications or store data the traditional way requires time and capital. Enterprises must purchase equipment through procurement processes that can take months. They must invest in physical spaces: typically specialized rooms with power and cooling. And after deploying the systems, enterprises need IT, professionals, to manage them. All this is challenging to scale when demand spikes or the business grows. Enterprises risk running out of capacity or overbuilding and ending up with infrastructure that suffers from low utilization. These challenges are why IaaS use is steadily growing. Learn more about Compute Engine, Cloud Storage, etc.
Question 49
Single choice
The operating systems of some of your organization's virtual machines may have a security vulnerability. How can your organization most effectively identify all virtual machines that do not have the latest security update?
-
A
View the Security Command Center to identify virtual machines running vulnerable disk images
-
B
View the Compliance Reports Manager to identify and download a recent PCI audit
-
C
View the Security Command Center to identify virtual machines started more than 2 weeks ago
-
D
View the Compliance Reports Manager to identify and download a recent SOC 1 audit
Reveal answer details
Close answer details
Correct answerA
ExplanationSecurity Health Analytics and Web Security Scanner detectors generate vulnerabilities findings that are available in Security Command Center. Your ability to view and edit findings is determined by the Identity and Access Management (IAM) roles and permissions you are assigned. For more information about IAM roles in Security Command Center. Reference link: https://cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings
Question 50
Single choice
An organization is evaluating its defenses against cyber security threats and is concerned about the risks of social engineering by cyber criminals. How might these attacks happen?
-
A
-
B
Physical damage to hardware
-
C
-
D
Distributed denial-of-service attacks
Reveal answer details
Close answer details
Correct answerC
ExplanationPhishing emails are a common form of social engineering attack where attackers impersonate legitimate entities to trick users into revealing sensitive information, such as passwords or credit card details. These attacks exploit human psychology rather than technical vulnerabilities. Phishing emails is correct because it represents a primary method of social engineering used by cybercriminals to manipulate individuals into divulging confidential information. References: Google Cloud Security Best Practices: Social Engineering Attacks Google Cloud Cybersecurity Framework: Protection Against Phishing
Question 51
Single choice
Your organization needs to analyze data in order to gather insights into its daily operations. You only want to pay for the data you store and the queries you perform. Which Google Cloud product should your organization choose for its data analytics warehouse?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerD
ExplanationBigQuery is an enterprise data warehouse for large amounts of relational structured data Serverless, highly scalable, and cost-effective multicloud data warehouse designed for business agility.
Question 52
Single choice
An organization wants to collect and store all logs generated by applications running in Google Cloud. Which service should they use1?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 53
Single choice
You are a program manager within a Software as a Service (SaaS) company that offers rendering software for animation studios. Your team needs the ability to allow scenes to be scheduled at will and to be interrupted at any time to restart later. Any individual scene rendering takes less than 12 hours to complete, and there is no service-level agreement (SLA) for the completion time for all scenes. Results will be stored in a global Cloud Storage bucket. The compute resources are not bound to any single geographical location. This software needs to run on Google Cloud in a cost-optimized way. What should you do?
-
A
Deploy the application on Compute Engine using preemptible instances
-
B
Develop the application so it can run in an unmanaged instance group
-
C
Create a reservation for the minimum number of Compute Engine instances you will use
-
D
Start more instances with fewer virtual centralized processing units (vCPUs) instead of fewer instances with more vCPUs
Reveal answer details
Close answer details
Correct answerA
ExplanationPreemptible VMs are cost-effective instances that can be used for short-lived and non-critical workloads. Since the rendering of individual scenes takes less than 12 hours and can be interrupted and restarted, you can leverage preemptible VMs to perform the rendering tasks. Preemptible VMs are available at a significantly lower cost compared to regular instances but can be preempted by GCP with a 30-second notice. By designing your rendering workflow to handle interruptions gracefully, such as checkpointing and resuming, you can take advantage of the cost savings provided by preemptible VMs. https://cloud.google.com/compute/docs/instances/preemptible
Question 54
Single choice
An organization has created an application that can diagnose different medical conditions when users submit images of their affected body parts. Which Google Cloud product or service did the organization use?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationThe question describes an application that can diagnose medical conditions based on images submitted by users. This is a task typically handled by machine learning (ML) models, specifically those focused on image recognition and classification. Google Cloud Product Relevance: Why Not Other Options: References: For more information on Machine Learning with Google Cloud, refer to the Google Cloud documentation on AutoML Vision and Vertex AI. Understanding the basic principles and applications of Google Cloud's ML services is crucial for the Google Cloud Digital Leader exam, which emphasizes knowing how different services solve business challenges.
Question 55
Single choice
What load balancer type is supported with Cloud Armor security policies?
-
A
SSL Proxy, HTTP(S) and SSL
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerD
ExplanationGoogle Cloud Armor security policies protect your application by providing Layer 7 filtering and by scrubbing incoming requests for common web attacks or other Layer 7 attributes to potentially block traffic before it reaches your load balanced backend services or backend buckets. Each security policy is made up of a set of rules that filter traffic based on conditions such as an incoming request's IP address, IP range, region code, or request headers. -> Google Cloud Armor security policies are available only for backend services behind an external HTTP(S) load balancer. The load balancer can be in Premium Tier or Standard Tier. -> Google Cloud Armor security policies and IP DENY lists and ALLOW lists are available only for HTTP (S) load balancing. Reference link- https://cloud.google.com/armor/docs/security-policy-overview
Question 56
Single choice
Compute Engine provides machine type recommendations to help you optimize the re-source utilization of your virtual machine (VM) instances. What is this capability called?
-
A
-
B
-
C
Rightsizing Recommendations
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationCompute Engine provides machine type recommendations to help you optimize the resource utilization of your virtual machine (VM) instances. These recommendations are generated automatically based on system metrics gathered by the Cloud Monitoring service over the previous 8 days. Use these recommendations to resize your instance's machine type to use the instance's resources more efficiently. This feature is also known as rightsizing recommendations Reference link- https://cloud.google.com/compute/docs/instances/apply-machine-type-recommendations-for-instances
Question 57
Single choice
Which policy helps Google Cloud keep customer data private?
-
A
Google tests the service availability of customer applications.
-
B
Google does not use customer data for advertising purposes.
-
C
Google migrates customer data to an offline server when a threat is detected.
-
D
Google does not allow customers to change encryption keys.
Reveal answer details
Close answer details
Question 58
Single choice
A client is currently running software on their on-premise systems that is bound by a certain type of license. They are allowed to run the software on virtualized machines. However, they cannot run them on virtualized machines that are shared by two different companies, teams, or projects. What option do they have on Google Cloud?
-
A
Google Cloud is a public cloud accessed by multiple customers.
-
B
Allocate a Bare Metal machine.
-
C
Setup exclusive login to the VM with self-generated security keys.
-
D
Allocate sole-tenant nodes
Reveal answer details
Close answer details
Correct answerD
ExplanationSole-tenancy lets you have exclusive access to a sole-tenant node, which is a physical Compute Engine server that is dedicated to hosting only your project's VMs. Use sole-tenant nodes to keep your VMs physically separated from VMs in other projects, or to group your VMs together on the same host hardware. https://cloud.google.com/compute/docs/nodes/sole-tenant-nodes
Question 59
Single choice
An organization is concerned about the risk of data loss that may occur due to hardware failures or cyber attacks. They want to restore their systems to a previous state if such an event occurs. What should the organization do?
-
A
Set service level objectives (SLOs).
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerC
ExplanationThe organization is concerned about data loss due to hardware failures or cyber-attacks and wants to restore their systems to a previous state in case of such events. Google Cloud Product Relevance: Why Not Other Options: References: To understand more about backup strategies in Google Cloud, refer to Backup and DR (Disaster Recovery) documentation.
Question 60
Single choice
Your organization recently migrated its compute workloads to Google Cloud. You want these workloads in Google Cloud to privately and securely access your large volume of on-premises data, and you also want to minimize latency. What should your organization do?
-
A
Use Storage Transfer Service to securely make your data available to Google Cloud
-
B
Create a VPC between your on-premises data center and your Google resources
-
C
Peer your on-premises data center to Google's Edge Network
-
D
Use Transfer Appliance to securely make your data available to Google Cloud
Reveal answer details
Close answer details
Correct answerB
Explanationcreate a VPC between your on-premises data center and your Google resources. This can be achieved by using Private Google Access for on-premises hosts, which provides a way for on-premises systems to connect to Google APIs and services by routing traffic through a Cloud VPN tunnel or a VLAN attachment for Cloud Interconnect. This solution should minimize latency as traffic is routed through a Cloud VPN tunnel or a VLAN attachment for Cloud Interconnect, instead of traversing the public internet.
Question 61
Single choice
An organization is deploying applications to the cloud using platform as a service. In the shared responsibility model, what remains the responsibility of the customer organization?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerD
ExplanationThe organization is deploying applications to the cloud using Platform as a Service (PaaS), which means certain responsibilities are shared between the cloud provider (Google Cloud) and the customer. Google Cloud Product Relevance: Why Not Other Options: References: Refer to Google Cloud Shared Responsibility Model documentation for a deeper understanding of responsibilities between the provider and the customer.
Question 62
Single choice
Your team is publishing research results and needs to make large amounts of data available to other researchers within the professional community and the public at minimum cost. How should you host the data?
-
A
Use a Cloud Storage bucket and enable "Requester Pays.'
-
B
Use a Cloud Storage bucket and provide Signed URLs for the data files.
-
C
Use a Cloud Storage bucket and set up a Cloud Interconnect connection to allow access to the data.
-
D
Host the data on-premises. and set up a Cloud Interconnect connection to allow access to the data.
Reveal answer details
Close answer details
Correct answerA
ExplanationEnabling Requester Pays is useful, for example, if you have a lot of data you want to make available to users, but you don't want to be charged for their access to that data. Reference link- https://cloud.google.com/storage/docs/requester-pays
Question 63
Single choice
An organization wants to develop an application that can be personalized to user preferences throughout the year. Why should they build a cloud-native application instead of modernizing their existing on-premises application?
-
A
Developers can rely on the cloud provider for all source code
-
B
Developers can launch new features in an agile way
-
C
IT managers can migrate existing application architecture without needing updates
-
D
IT managers can accelerate capital expenditure planning
Reveal answer details
Close answer details
Question 64
Single choice
An organization is using machine learning to make predictions. One of their datasets mistakenly includes mislabeled data. How will the prediction be impacted?
-
A
Increased risk of privacy leaks
-
B
Increased risk of inaccuracy
-
C
Decreased model compatibility
-
D
Decreased model training time
Reveal answer details
Close answer details
Correct answerB
ExplanationMislabeled data can introduce errors and inconsistencies into the training process, which can lead to inaccurate predictions. When the model learns from mislabeled examples, it may develop incorrect patterns or associations, compromising its ability to make accurate predictions on new, unseen data.
Question 65
Single choice
What cloud service model would you want to select if you want to solve a particular busi-ness problem by providing CRM services in the cloud to your enterprises?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Correct answerB
ExplanationSaaS Software as a Service (SaaS) provides you a complete product that is run and managed by the service provider. You worry only about using the software and not about infrastructure. SaaS provides the lowest level of flexibility and management control over the infrastructure. (Example: Google Gsuite and MS O365)
Question 66
Single choice
An organization wants to use all available data to offer predictive suggestions on their website that improve over time. Which method should the organization use?
-
A
-
B
-
C
-
D
Reveal answer details
Close answer details
Question 67
Single choice
An organization wants its users to validate a series of new features for their app. Why should they use App Engine?
-
A
Because their app is containerized and enabled by microservices
-
B
Because the updated app will only include new features
-
C
To run different versions of the app for different users
-
D
To run different versions of the app for the same user
Reveal answer details
Close answer details
|