Google Google Certifications CLOUD-DIGITAL-LEADER Questions & Answers

• Question 381:

  Your organization wants to predict the behavior of visitors to its public website. To do that, you have decided to build a machine learning model. Your team has database-related skills but only basic machine learning skills, and would like to use those database skills.

  Which Google Cloud product or feature should your organization choose?

  A. BigQuery ML

  B. LookML

  C. TensorFlow

  D. Cloud SQL

  Correct Answer: A

  Reference: https://cloud.google.com/architecture/predicting-customer-propensity-to-buy

• Question 382:

  What are the key features of Google Cloud Identity.

  A. Multi-factor authentication (MFA)

  B. Single sign-on (SSO)

  C. Works with your favorite apps and Endpoint management

  D. All of the Above

  Correct Answer: D

  Cloud Identity:

  A unified identity, access, app, and endpoint management (IAM/EMM) platform.

  -Give users easy access to apps with single sign-on.

  -Multi-factor authentication protects user and company data.

  -Endpoint management enforces policies for personal and corporate devices KEY FEATURES :

  Modernize IT and strengthen security

  Multi-factor authentication (MFA)

  Help protect your user accounts and company data with a wide variety of MFA verification methods such as push notifications, Google Authenticator, phishing-resistant Titan Security Keys, and using your Android or iOS device as a security

  key.

  Endpoint management

  Improve your company's device security posture on Android, iOS, and Windows devices using a unified console. Set up devices in minutes and keep your company data more secure with endpoint management. Enforce security policies, wipe

  company data, deploy apps, view reports, and export details.

  Single sign-on (SSO)

  Enable employees to work from virtually anywhere, on any device, with single sign-on to thousands of pre-integrated apps, both in the cloud and on-premises.

  Works with your favorite apps

  Cloud Identity integrates with hundreds of cloud applications out of the box--and we're constantly adding more to the list so you can count on us to be your single identity platform today and in the future.

• Question 383:

  Your team is working on building a machine learning model. There are a bunch of terminologies that are being used. What is an "instance" or an "example"?

  A. An input variable is used in making predictions. E.g. number of rooms in a house price prediction model.

  B. One row of a dataset containing one or more input columns and possibly a prediction result.

  C. An answer for a prediction task,?either the answer produced by a machine learning system or the right answer supplied in training data. E.g. image contains a "cat".

  D. The "knobs" that you tweak during successive runs of training a model. E.g. learning rate

  Correct Answer: B

  One row of a dataset containing one or more input columns and possibly a prediction result. https://developers.google.com/machine-learning/guides/rules-of-ml#terminology

• Question 384:

  Your company security team manages access control to production systems using an LDAP directory group. How is this access control managed in the Google Cloud production project?

  A. Assign the proper role to the Service Account in the project's IAM Policy

  B. Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group.

  C. Assign the proper role to the Google Group in the project's IAM Policy.

  D. Create the project in a folder with the same name as the LDAP directory group.

  Correct Answer: C

  Reference: https://cloud.google.com/blog/products/identity-security/achieving-identity-and-access-governance-on-google-cloud

• Question 385:

  The government has ordered an audit of your company's data. You have hired an external company to conduct the audit. They need to be able to review the data stored in your Cloud Storage buckets across eight projects. How would you grant them access?

  A. Give the auditors an Owner role on the eight buckets so that they have proper access.

  B. Give them Storage Object Viewer access to the buckets in those eight projects.

  C. They might need access to all projects as the audit progresses; so give them access to all Storage buckets so that you don't have to do it repeatedly later on.

  D. They might need access to all projects as the audit progresses; so give them the Editor role on all Storage buckets so that you don't have to do it repeatedly later on.

  Correct Answer: B

  Apply the Principle of Least Privilege and only provide read permissions on only the required buckets. No more, no less https://cloud.google.com/storage/docs/access-control/iam-roles

• Question 386:

  A video game organization has invested in cloud technology to generate insights from user behaviors. They want to ensure recommendations of games are aligned to players' interests. What may have prompted this business decision?

  A. Customers expect faster time to market for games.

  B. Employees expect source code changes to be deployed faster.

  C. Customers expect a personalized experience.

  D. Employees expect more predictable data management spending.

  Correct Answer: C

  Because in the cloud era, users expect more personalization and customization.

• Question 387:

  Your organization wants to optimize its use of Google Cloud's discounts on virtual machine-based workloads. You plan to use 200 CPUs constantly for the next 3 years, and you forecast that spikes of up to 300 CPUs will occur approximately 30% of the time. What should you choose?

  A. 1-year committed use discount for 200 CPUs

  B. 3-year committed use discount for 300 CPUs

  C. 3-year committed use discount for 200 CPUs

  D. Regular pay-as-you-go pricing

  Correct Answer: C

  You can get a 57% discount by agreeing to commit to a 3-year contract. Any usage over the commitment will just be billed at the standard rate. Since they only need 300 CPUs 30% of the time, will pick answer C so that we are not paying usage off 300 CPUs all of the time. This gives us a discount of 57% for 200 CPU's, huge cost savings.

• Question 388:

  Your customer currently has a hybrid cloud setup including their on-premises data center and AWS. They are consolidating all their services on Google Cloud as part of a modernization plan and want to spend less IT effort in the future. There are about 10 MySQL and 25 PostgreSQL databases across the two DCs. What is the best option to for them?

  A. Use the Data Catalog Service to manage the metadata of the databases

  B. Use Cloud Dataflow service and setup Google's Cloud SQL as the sink and the others as the source, which will cause the data to flow in as expected.

  C. Use the Database Migration Service

  D. Use the Bare Metal Solution and copy the databases directly as they are on-premises and on AWS.

  Correct Answer: C

  Database Migration is the right one to use: "Simplifying migrations to Cloud SQL. Now available for MySQL and PostgreSQL migrations, with SQL Server coming soon." Since the customer also doesn't want to manage their own database installations in the future, Cloud SQL is the best option.

  

  https://cloud.google.com/database-migration

• Question 389:

  A partner of yours used to have their own private data center. Your company was already on Google Cloud and now they have also moved to Google Cloud. You are investigating whether there are ways to collaborate better or shared services. What would be one good option to consider?

  A. Use Private Service Access within Google Cloud.

  B. Use VPC Peering to share resources privately between your two organizations.

  C. Use public IP addresses as before. It will automatically be routed internally only.

  D. Use VPC Shared Networks to share common resources.

  Correct Answer: B

  VPC Network Peering allows internal IP address connectivity across two Virtual Private Cloud (VPC) networks regardless of whether they belong to the same project or the same organization. -> Shared VPC is only within an organization-it allows an organization to connect resources from multiple projects to a common Virtual Private Cloud (VPC) network, so that they can communicate with each other securely and efficiently using internal IPs from that network. -> Private Google Access is only to access Google APIs and services References: -> https://cloud.google.com/vpc/docs/vpc-peering -> https://cloud.google.com/vpc/docs/private-google-access-> https://cloud.google.com/vpc/docs/shared-vpc

• Question 390:

  An organization wants to move from a strategic cloud adoption maturity level to a trans-formational one. How should the organization change the way they scale?

  A. None of these

  B. Deploy changes when problems arise.

  C. Deploy changes programmatically.

  D. Review changes manually.

  Correct Answer: C

  Because automation is a transformational approach which ensures changes are constant and low-risk.