Google Google Certifications CLOUD-DIGITAL-LEADER Questions & Answers

• Question 231:

  Which of the following methods should you use when you require a dynamic way of provisioning VMs on Compute Engine when it is observed that the exact specifications will be in a dedicated configuration file and you want to follow Google's recommended practices.

  A. Managed Instance Group

  B. Deployment Manager

  C. Cloud Composer

  D. Unmanaged Instance Group

  Correct Answer: B

  The question is about a dynamic way to provision VM, it can be achieved by a Deployment manager or by using terraform. MIG is creating multiple machines based on templates by load balancing

• Question 232:

  Which of the following is true while creating a boot persistent disk from a snapshot.

  A. You cannot apply a snapshot to an existing persistent disk, or apply a snapshot to persistent disks that belong to a different project than that snapshot.

  B. It is only possible to apply data from a snapshot when you first create a persistent disk.

  C. After you create a snapshot of a boot persistent disk, you can apply data from that snapshot to new persistent disks.

  D. All of the above.

  Correct Answer: D

  When you create a virtual machine (VM) instance, you must also create a boot disk for the VM. You can use a public image, a custom image, or a snapshot that was taken from another boot disk. When you create a boot disk, limit the disk

  size to 2 TB to account for the limitations of MBR partitioning.

  Compute Engine automatically creates a boot persistent disk when you create an instance. If you require additional data storage space for your instances, add one or more secondary instance storage options. You might need to create a

  standalone boot persistent disk and attach it to an instance later, or resize a boot persistent disk to improve performance and add more space for additional applications or operating system files. That process is described in Add or resize a

  persistent disk.

  As a best practice, do not use regional persistent disks for boot disks. In a failover situation, they do not force-attach to a VM.

  After you create a snapshot of a boot persistent disk, you can apply data from that snapshot to new persistent disks. It is only possible to apply data from a snapshot when you first create a persistent disk. You cannot apply a snapshot to an

  existing persistent disk, or apply a snapshot to persistent disks that belong to a different project than that snapshot.

• Question 233:

  Virtual Machine vCPU and memory usage for each of these categories can receive one of the following discounts? (Select Three Answer)

  A. Military Discounts

  B. Spot Instances

  C. Committed-Use

  D. Sustained-Use

  E. Preemptible VMs

  Correct Answer: CDE

  Sustained, Committed and Preemptible

  vCPU and memory usage for each of these categories can receive discounts

  VM vCPU and memory usage for each of these categories can receive discounts

  Sustained-use discounts--Google offers up to 30% off for workloads that run for most of the billing month on GCP services.

  Committed-use discounts--users can save up to 57% by committing to use an instance for a certain time period, with no upfront payment and with the flexibility to change instances during the commitment period.

  Preemptible VMs--similar to the concept of AWS spot instances, Google offers up to 79% off for Virtual Machines that may be shut down at any time and replaced by others.

  Reference link

  https://cloud.google.com/compute/docs/sustained-use-discounts Reference link

  https://cloud.google.com/compute/docs/instances/signing-up-committed-use-discounts

  https://cloud.google.com/compute/docs/instances/preemptible

• Question 234:

  You are a program manager in a company you need to submit a bare metal solution order for a se-cure, high performance connection with a low-latency network fabric. What network information you need to submit the order to Bare Metal Solutions.

  A. IP Ranges for example Client IP Address range used for communication between your Google Cloud and Bare Metal Solution environments.

  B. Google Cloud Project Id that you are using with your bare metal solution environ-ment.

  C. Total number of VLANs you need in your Bare Metal Solution Environment.

  D. All of the above

  Correct Answer: D

  What Bare Metal Solution provides

  Bare Metal Solution is a managed solution that provides purpose-built HPE or Atos bare-metal servers in regional extensions that are connected to Google Cloud by a managed, high-performance connection with a low-latency network fabric.

  With Bare Metal Solution, Google Cloud provides and manages the core infrastructure, the network, the physical and network security, and hardware monitoring capabilities in an environment from which you can access all of the Google

  Cloud services. The core infrastructure includes secure, controlled-environment facilities, and power. The Bare Metal Solution also includes the provisioning and maintenance of custom, sole-tenancy servers with local SAN, and smart hands

  support. The network, which is managed by Google Cloud, includes a low-latency Partner Interconnect connection into the customer Bare Metal Solution environment. The available Google Cloud services include private API access,

  management tools, support, and billing.

• Question 235:

  Your Coustomer's Organization has decided to move to the cloud. They currently run VMs on-promise but their goal on Google cloud is to run containers, primarily on Google Kuber-nete's Engine. They have a lease for their private data center for another year that they have already paid for. What could be strategy they could adopt in migrating?

  A. Jump and Ramp.

  B. Improve and Move.

  C. Rip and Replace.

  D. Left and Shift.

  Correct Answer: B

  Since they have already paid for data center for another year. They have the time and resources to work with, They can make the change to their workloads locally/on-promise Improve and Migrate Move to Google Cloud later on.

• Question 236:

  You are a program manager in a company and handling a project and you need to create a virtual machine on google cloud console that will be very simple to set up, by flipping a bit via command, API, or with developer console that gives you 30 seconds to shut down when you're preempted, allow you to save your work that also helps in the company budget upto 70-80% of less charges than the regular VMs.

  A. Bare Metal Solutions

  B. Preemptible Virtual Machines.

  C. Google Cloud VM Instances

  D. None of the above.

  Correct Answer: B

  Preemptible VMs have all these features Simple configuration

  Create a preemptible instance simply by flipping a bit via command, API, or developer console.

  Easy extensibility

  Attach GPUs and local SSDs to preemptible instances for additional performance and savings.

  Graceful shutdown

  Compute Engine gives you 30 seconds to shut down when you're preempted, letting you save your work in progress for later.

  Large scale computing

  Spin up as many instances as you need and turn them off when you're done. You only pay for what you use.

  Quickly reclaim capacity

  Managed instance groups automatically recreate your instances when they're preempted (if capacity is available).

  Fixed pricing

  Preemptible VMs have fixed pricing up to 80% off regular instances. They show up on your bill separately so you'll see just how much you're saving.

• Question 237:

  You have deployed a new public web application that allows users to register and login with email ids, phone numbers, or user ids. You are seeing some unusual activity with user registrations and logins from a few IPs. A large number of accounts were created very quickly. Logins are also hap-pening quickly thereafter from these new accounts. Different parts of the application are being ex-plored, all of which are putting a heavy load on the application. What could be a problem and how can you solve it?

  A. A hacker group has hired a bunch of people to create accounts and manually use the system. Use Cloud Asset Inventory to see if there have been changes in the inventory.

  B. Bots are creating accounts and then using them. Use Google Cloud's Web App and API Protection (WAAP).

  C. Bots are creating accounts and then using them. Use Identity-Aware Proxy to re-strict the users to known users.

  D. Automated testing tools might still be running and creating accounts. Use Identity-Aware Proxy to restrict the users to known users.

  Correct Answer: B

  Bots attacking the application is the most likely scenario in this case. Using WAAP is the right protection plan: Anti-DDoS, anti-bot, WAF, and API protection help you protect against new and existing threats while helping you keep your apps and APIs compliant and continuously available.

  https://cloud.google.com/solutions/web-app-and-api-protection

• Question 238:

  In discussions with a prospective customer who wants to move to Google Cloud to make use of the latest, scalable technologies available therein, you learn that there are very strict regulations concern-ing the storage of data. They only have the approval to store it in their current private data cen-ter. What would you advise them?

  A. Retain on-premise itself those portions of data and compute which are under regulation. Take advantage of all the other cloud capabilities for remaining work-loads.

  B. It is too risky to touch anything in such a scenario. It is best to remain entirely on-premise.

  C. Regulations are guidelines. As long as the data remains encrypted, you can move it anywhere.

  D. Petition the government for changes to such regulations as all industries are mov-ing to the public cloud. Then, when the regulations are eased, move to Google Cloud.

  Correct Answer: A

  Moving to Google Cloud is not an all-or-nothing option. Certain workloads can continue to remain on-premise while the predominant chunk moves to Google Cloud

• Question 239:

  Your company has a requirement to run manual tests on their web products for UX research before it is released to end customers. The people who will do the tests are external to the company. They will either use their own Gmail id or be given temporary email ids using the applications and record-ing their inputs in another app. The UX testing is done in the last week of the month. Each month the UX testers could be different. How should the IT team manage the users?

  A. Since the app is anyways going to be public, create permanent credentials for the UX testers that they can conveniently use each time.

  B. It would be a security issue to have users come and go. Recommend that the test-ers be permanently hired to plug the vulnerability issue.

  C. It would be a security issue to have users come and go. Recommend that the test-ers be permanently hired to plug the vulnerability issue.

  D. Create a Group with the permissions required to do the test and record their in-puts. When users arrive each week, add them to the group and after the testing period, remove them from the group.

  Correct Answer: D

  Groups are convenient to use for this requirement. Permissions to the group are automatically inherited by the members of the group. Adding and removing UX testers from the group will grant and remove permissions.

• Question 240:

  In Google Cloud IAM: if a policy applied at the project level gives you Owner permissions, your access to an individual resource in that project might be restricted to View permission if someone applies a more restrictive policy directly to that resource. What is correct below the options

  A. False

  B. None of the above.

  C. True

  D. Not defined by GCP.

  Correct Answer: A

  Policies are a union of those applied to resources themselves and those inherited from higher levels in the hierarchy. If a parent policy is less restrictive, it overrides a more restrictive policy applied to the resource. If a parent policy is more restrictive, it does not override a less restrictive policy applied to the resource. Therefore, access granted at a higher level in the hierarchy cannot be taken away by policies applied at a lower level in the hierarchy.