Google Google Certifications CLOUD-DIGITAL-LEADER Questions & Answers

• Question 201:

  What is a key difference between VMs and containers?

  A. Virtual Machines take less time to launch; containers take longer to launch.

  B. Virtual Machines can only run Linux; containers can run any operating system.

  C. Virtual Machines use a shared operating system and are therefore lighter; containers are heavier on resources.

  D. Each Virtual Machine in a machine has its own operating system; containers will share the same operating system.

  Correct Answer: D

  VMs have their individual OSs. All containers on a node use the host operating system.

• Question 202:

  What load balancer type is supported with Cloud Armor security policies?

  A. SSL Proxy, HTTP(S) and SSL

  B. HTTP(S) and SSL

  C. Regional SSL

  D. HTTP(S) Only

  Correct Answer: D

  Google Cloud Armor security policies protect your application by providing Layer 7 filtering and by scrubbing incoming requests for common web attacks or other Layer 7 attributes to potentially block traffic before it reaches your load balanced backend services or backend buckets. Each security policy is made up of a set of rules that filter traffic based on conditions such as an incoming request's IP address, IP range, region code, or request headers. -> Google Cloud Armor security policies are available only for backend services behind an external HTTP(S) load balancer. The load balancer can be in Premium Tier or Standard Tier. -> Google Cloud Armor security policies and IP DENY lists and ALLOW lists are available only for HTTP(S) load balancing. Reference link-https://cloud.google.com/armor/docs/security-policy-overview

• Question 203:

  You have contracted a partner to conduct some medical trials. This is a limited, 2-month contract. At the end of each day, you are expecting about 10 Gbs of data. The data is highly sensitive. What networking option would you employ?

  A. As the name indicates, set up Partner Interconnect with your partner company.

  B. Setup Dedicated Interconnect with your partner.

  C. Setup Cloud VPN and create an IPsec VPN tunnel with your partner.

  D. Create a public IP for a VM and share that with your partners so that they can access it over the internet and share the data.

  Correct Answer: C

  "Cloud VPN securely extends your peer network to Google's network through an IPsec VPN tunnel. Traffic is encrypted and travels between the two networks over the public internet. Cloud VPN is useful for low-volume data connections. For additional connection options, see the Hybrid Connectivity product page."

• Question 204:

  A customer has contacted you about migrating to Google Cloud. The customer would like to mi-grate their data from on premises as soon as possible. They don't have the budget to rewrite code, and they want the most direct route. What migration option should suggest to the customer?

  A. None, since the customer is not cloud native ready.

  B. Rip and Replace

  C. Lift and Shift

  D. Improve and Move

  Correct Answer: C

  With Lift and Shift migrations, the customer could move workloads from a source environment to a target environment with few or no modifications or refactoring https://cloud.google.com/architecture/migration-to-gcp-getting-started

• Question 205:

  What are the different storage and database services in GCP? Which is Google cloud storage and da-tabase below the option

  A. Persistent Disk

  B. Cloud SQL.

  C. Cloud Bigtable

  D. Cloud Spanner

  E. All of the Above

  Correct Answer: E

• Question 206:

  You are working for a hospital that stores its medical images in an on-premises data room and it is provided that the hospitals want to use Cloud Storage for archival storage of these images. You are required to design and implement a solution where the hospital wants an automated process to up-load any new medical images to Cloud Storage. On the basis of this statements which of the follow-ing statement is correct.

  A. Create a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub topic.

  B. Create a script that uses the gsutil command line interface to synchronize the on-premises storage with Cloud Storage. Schedule the script as a cron job.

  C. In the Cloud Console, go to Cloud Storage. Upload the relevant images to the ap-propriate bucket.

  D. Deploy a Dataflow job from the batch template, "Datastore to Cloud Storage" Schedule the batch job on the desired interval.

  Correct Answer: B

  Using sync for new images implies that you will continue to use your onprem and keep synchronizing it forever, Sync just once for the old images, new images go directly to google cloud via pub/sub, and eventually get rid of the onprem.

• Question 207:

  When you update the function in firebase by deploying updated code, instances for older versions are cleaned up along with build artifacts in __________________ and replaced by new instances.

  A. Google Cloud console.

  B. Storage and Container Registry.

  C. Container Registry repository.

  D. None of the Above

  Correct Answer: B

  Container Registry is a single place for your team to manage Docker images, perform vulnerability analysis, and decide who can access what with fine-grained access control

• Question 208:

  Your client has an on-premises data center. Due to technical limitations, they are unable to scale globally. They have decided to adopt the public cloud. However, they don't want to locked into any one vendor and, therefore, would like to work with multiple cloud providers. They have used open source container technologies and would like to continue using them.

  A. Cloud Run which supports containers and can scale in a serverless fashion

  B. Kubernetes that runs containers as their core workloads

  C. AppEngine Flexible Environment which supports containers

  D. Anthos that runs containers as their core workloads

  Correct Answer: D

  Anthos unifies the management of infrastructure and applications across on-premises, edge, and in multiple public clouds with a Google Cloud-backed control plane for consistent operation at scale.

• Question 209:

  Your customer is moving from AWS to Google Cloud. Data also needs to be moved. There is about 50TB of data. On AWS, the data resides in an S3 bucket. It is going to be moved to Cloud Storage. Data is also being continuously generated on S3 prior to the cutover. It is preferable that this is also periodically transferred. What is the best way to move the data?

  A. Use the gsutil command-line option

  B. Use the Google Cloud console to drag and drop the files easily

  C. Use the Storage Transfer Service

  D. Use a Transfer Appliance

  Correct Answer: C

  Storage Transfer Service provides options that make data transfers and synchronization easier. We can also schedule one-time transfer operations or recurring transfer operations.

  Reference link-https://cloud.google.com/storage-transfer/docs/overview Reference link-https://cloud.google.com/architecture/transferring-data-from-amazon-s3-to-cloud-storage-using-vpc-service-controls-and-storage-transfer-service

• Question 210:

  Which of the following storage options should you use when your company is using Cloud Storage to store application backup files for disaster recovery purposes, provided you want to follow Goog-le's recommended practices.

  A. Multi-Regional Storage

  B. Coldline storage

  C. Nearline Storage

  D. Regional Storage

  Correct Answer: B

  Coldline storage is a very low cost highly durable storage service for data archiving, online backup, and disaster recovery. Coldline storage is the best choice for data that you plan to access at most once a year due to its slightly lower availability, 90 day minimum storage duration cost for data access, and higher per operation costs. Nearline and Coldline are for backup and archival storage and having the highest availability for both with 99.9 percent.