Google Google Certifications CLOUD-DIGITAL-LEADER Questions & Answers

• Question 331:

  Your organization is defining the resource hierarchy for its new application in Google Cloud. You need separate development and production environments. The production environment will be deployed in Compute Engine in two regions. Which structure should your organization choose?

  A. Create a single project for all environments. Use labels to segregate resources by environment.

  B. Create a single project for all environments. Use tags to segregate resources by environment.

  C. Create one project for the development environment and one project for the production environment.

  D. Create two projects for the development environment and two projects for the production environment (one for each region).

  Correct Answer: C

  Many organizations have separate development and production environments so they can build and test new features without disturbing production traffic. In Optimizely, you can create separate projects for each environment to help with

  governance.

  With separate development and production projects, your organization can safely build and QA experiments and Personalization campaigns in a development environment before deploying to production. This approach allows multiple

  stakeholders in your organization to act as gatekeepers for running new experiments in production.

  Reference link-https://support.optimizely.com/hc/en-us/articles/4410284353805-Set-up-projects-for-development-and-production-environments

• Question 332:

  Your company has multiple internal applications used by your employees. You also have to give access to certain vendors and contractors. What is a good option for you to adopt?

  A. Keep the credentials separate for each application to reduce the blast radius in case of any issues.

  B. Use an external identity provider that is famous and popular like Facebook or Twitter; that way, even your vendors and contractors will have an account there.

  C. Allow all users, especially contractors and vendors, to bring their own identities, like those at gmail.com.

  D. Use an IDaaS (Identity as a Service) product that can centrally manage authenti-cation and authorization for the applications.

  Correct Answer: D

  IDaaS-identity providers managed by the company give better control over security and privacy. Security/access can be set granularly, while also being centralized. You don't have to manage multiple credentials.

• Question 333:

  Your organization wants an economical solution to store data such as files, graphical images, and videos and to access and share them securely. Which Google Cloud product or service should your organization use?

  A. Cloud Storage

  B. Cloud SQL

  C. Cloud Spanner

  D. BigQuery

  Correct Answer: A

  Google Storage is GCP's version of AWS Simple Storage Service (S3) and an S3 bucket would be equivalent to a Google Storage bucket across the two clouds

• Question 334:

  You are leading projects in an IT services company. Your customer's project requires analyzing im-ages. They have many 10s of 1000s of raw images that they have made available to you. Your small technology team needs to build a machine learning model. The images are unlabeled. You don't have the people or the capacity to label the images. What is your approach?

  A. Look for open-source labeled images that closely resemble the given images.

  B. Request data labeling service from Google.

  C. Tell the customer it is their duty to label the images.

  D. Hire temporary workers who can quickly label the images.

  Correct Answer: C

  Google's Data Labeling Service lets you work with human labelers to generate highly accurate labels for a collection of data that you can use in machine learning models.

  References: -> https://cloud.google.com/vertex-ai/docs/datasets/data-labeling-job -> https://cloud.google.com/ai-platform/data-labeling/docs

• Question 335:

  Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public internet. The workloads running on those virtual machines need to access BigQuery and Cloud Storage, using their publicly accessible interfaces, without violating the security requirement.

  Which Google Cloud product or feature should your organization use?

  A. Identity-Aware Proxy

  B. Cloud NAT (network address translation)

  C. VPC internal load balancers

  D. Private Google Access

  Correct Answer: D

  VM instances that only have internal IP addresses (no external IP addresses) can use Private Google Access. They can reach the external IP addresses of Google APIs and services. The source IP address of the packet can be the primary internal IP address of the network interface or an address in an alias IP range that is assigned to the interface. If you disable Private Google Access, the VM instances can no longer reach Google APIs and services; they can only send traffic within the VPC network.

  https://cloud.google.com/vpc/docs/configure-private-google-access

• Question 336:

  Your organization needs to allow a production job to have access to a BigQuery dataset. The production job is running on a Compute Engine instance that is part of an instance group. What should be included in the IAM Policy on the BigQuery dataset?

  A. The Compute Engine instance group

  B. The project that owns the Compute Engine instance

  C. The Compute Engine service account

  D. The Compute Engine instance

  Correct Answer: C

  When an identity calls a Google Cloud API, BigQuery requires that the identity has the appropriate permissions to use the resource. You can grant permissions by granting roles to a user, a group, or a service account. Reference link-https:// cloud.google.com/bigquery/docs/access-control

• Question 337:

  Your organization meant to purchase a 3-year Committed Use Discount, but accidentally purchased a 1-year Committed Use Discount instead. What should your organization do?

  A. Contact your financial institution.

  B. Contact Trust and Safety.

  C. Contact Cloud Billing Support.

  D. Contact Technical Support.

  Correct Answer: C

  https://cloud.google.com/compute/docs/instances/signing-up-committed-use-discounts

• Question 338:

  Your organization needs to minimize how much it pays for data traffic from the Google network to the internet. What should your organization do?

  A. Choose the Standard network service tier.

  B. Choose the Premium network service tier.

  C. Deploy Cloud VPN.

  D. Deploy Cloud NAT.

  Correct Answer: A

  Choose the Standard network service tier. While Premium tier is the default for all egress traffic and offers the highest performance, when cost is a consideration.

  Standard tier is the more economical. https://cloud.google.com/blog/products/networking/networking-cost-optimization-best-practices

• Question 339:

  Your organization is releasing its first publicly available application in Google Cloud. The application is critical to your business and customers and requires a 2-hour SLA. How should your organization set up support to minimize costs?

  A. Enroll in Premium Support

  B. Enroll in Enhanced Support

  C. Enroll in Standard Support

  D. Enroll in Basic Support

  Correct Answer: B

  Reference: https://www.secureauth.com/enhanced-support-offering/

  SecureAuth is dedicated to providing the industry-leading enhanced support ensuring the long term success of your SecureAuth SaaS IAM deployment

• Question 340:

  You want to build an application that will allow customers to register and login. It would be great to have the ability to secure it with multi-factor authentication and the ability to reset credentials. As a small startup, you want to build the main application as quickly as possible and have minimum overhead. Which might be a suitable option for you on Google Cloud?

  A. Since identity and credentials should be secure and private, do not trust other ser-vice providers.

  B. Cloud Identity

  C. Google Workspace

  D. Cloud Identity Platform

  Correct Answer: D

  Cloud Identity Platform allows you to manage identity and credentials for your consumer-facing applications. So that's the right one in this case to use. "Identity Platform is a customer identity and access management (CIAM) platform that helps organizations add identity and access management functionality to their applications, protect user accounts, and scale with confidence on Google Cloud." Reference link-https://cloud.google.com/identity-platform