GCP Cloud Digital Leader Practice Questions¶
40 scenario-based questions weighted by exam domain.
Exam Domain Breakdown¶
| Domain | Weight | Questions |
|---|---|---|
| Digital Transformation with Google Cloud | 17% | 7 |
| Innovating with Data and Google Cloud | 23% | 9 |
| Infrastructure and Application Modernization | 23% | 9 |
| Google Cloud Security and Operations | 21% | 8 |
| Scaling with Google Cloud Operations | 16% | 7 |
Cert page: exams/gcp/cloud-digital-leader/
Domain 1: Digital Transformation with Google Cloud (Questions 1-7)¶
Question 1¶
Scenario: A traditional retail company wants to digitally transform their business. Currently, they use on-premises servers that require significant capital expenditure and long procurement cycles. What is a key benefit of moving to cloud computing for their digital transformation?
A. Higher upfront capital costs B. Shifting from CapEx to OpEx with pay-as-you-go pricing and rapid scalability C. Longer deployment cycles D. Reduced access to global markets
Answer
**Correct: B** **Why:** Cloud computing transforms capital expenditure (buying hardware) into operational expenditure (paying for usage). Pay-as-you-go pricing means paying only for resources consumed. Rapid provisioning enables scaling up/down based on demand without procurement delays. This financial flexibility and agility is fundamental to digital transformation. **Key Concept:** [Digital Transformation with Cloud](https://cloud.google.com/learn/what-is-digital-transformation)Question 2¶
Scenario: A company's leadership team is concerned about lock-in when adopting cloud services. They want flexibility to use multiple cloud providers and avoid dependency on a single vendor. What Google Cloud capability addresses this concern?
A. Proprietary services only B. Open source technologies (Kubernetes, TensorFlow) and support for multi-cloud/hybrid strategies through Anthos C. Contracts requiring single-cloud usage D. Data formats that only work on Google Cloud
Answer
**Correct: B** **Why:** Google Cloud embraces open source: Kubernetes (container orchestration), TensorFlow (machine learning), and open data formats. Anthos enables running applications consistently across Google Cloud, other clouds, and on-premises. This reduces lock-in by using portable technologies and supporting multi-cloud strategies. **Key Concept:** [Anthos Multi-Cloud](https://cloud.google.com/anthos/docs/concepts/overview)Question 3¶
Scenario: A hospital network wants to use cloud computing but is concerned about regulatory compliance for patient data, particularly around data residency and privacy requirements. How does Google Cloud help address these concerns?
A. Ignore compliance requirements B. Data residency controls, compliance certifications (HIPAA, FedRAMP), and Assured Workloads for regulated industries C. Store all data in any region without controls D. Compliance is the customer's sole responsibility
Answer
**Correct: B** **Why:** Google Cloud provides data residency controls to keep data in specific regions. Compliance certifications (HIPAA BAA, FedRAMP, SOC, ISO) demonstrate adherence to standards. Assured Workloads provides additional controls for highly regulated industries. This shared responsibility model helps customers meet compliance requirements. **Key Concept:** [Google Cloud Compliance](https://cloud.google.com/security/compliance)Question 4¶
Scenario: A manufacturing company has factories in remote locations with limited internet connectivity. They want to use cloud analytics while keeping some processing local for low latency and reliability. What Google Cloud approach supports this hybrid requirement?
A. Cloud-only with no local processing B. Edge computing with Anthos for edge and Google Distributed Cloud for remote locations C. On-premises only without cloud D. Require high-bandwidth connections everywhere
Answer
**Correct: B** **Why:** Google Distributed Cloud and Anthos for edge extend Google Cloud capabilities to edge locations and on-premises environments. This enables local processing for low-latency needs and reliability during connectivity issues, while still connecting to cloud for analytics and ML. This hybrid approach addresses real-world connectivity constraints. **Key Concept:** [Google Distributed Cloud](https://cloud.google.com/distributed-cloud)Question 5¶
Scenario: An executive asks: "Why should we transform our business with cloud rather than just upgrading our existing data center?" What is the most compelling business argument for cloud transformation?
A. Cloud is always cheaper for all workloads B. Cloud enables business agility - faster innovation, global scale, and focus on core business rather than infrastructure management C. Cloud eliminates all IT jobs D. Cloud requires no changes to processes
Answer
**Correct: B** **Why:** Cloud transformation is about business outcomes, not just technology. Agility means launching products faster, scaling globally without building data centers, and freeing teams from infrastructure maintenance to focus on innovation. It's not always cheaper (depends on workload), doesn't eliminate IT (shifts skills), and requires process changes. **Key Concept:** [Business Value of Cloud](https://cloud.google.com/learn/what-is-digital-transformation#section-3)Question 6¶
Scenario: A startup wants to build their application on Google Cloud but is concerned about costs as they're uncertain about their traffic patterns. They might have very low usage initially but could scale rapidly if successful. What pricing model helps address this concern?
A. Fixed annual contracts regardless of usage B. Pay-as-you-go pricing with automatic scaling, sustained use and committed use discounts available as usage becomes predictable C. Upfront payment for maximum anticipated capacity D. No cost control options
Answer
**Correct: B** **Why:** Pay-as-you-go means paying only for actual usage - ideal for unpredictable startups. As usage patterns emerge, sustained use discounts apply automatically (up to 30% off). For predictable workloads, committed use discounts provide up to 70% savings. This flexibility supports both uncertain startups and established enterprises. **Key Concept:** [Google Cloud Pricing](https://cloud.google.com/pricing)Question 7¶
Scenario: A company wants to understand the environmental impact of their IT infrastructure. They're considering cloud migration partly for sustainability reasons. How does Google Cloud support sustainability goals?
A. No sustainability initiatives B. Carbon-neutral operations since 2007, 100% renewable energy matching, and carbon footprint reporting tools C. Higher energy consumption than on-premises D. Sustainability is not a consideration
Answer
**Correct: B** **Why:** Google has been carbon neutral since 2007 and matches 100% of its electricity consumption with renewable energy purchases. Cloud platforms are more efficient than typical on-premises data centers due to economies of scale and optimization. Carbon Footprint dashboard shows emissions from cloud usage. **Key Concept:** [Google Cloud Sustainability](https://cloud.google.com/sustainability)Domain 2: Innovating with Data and Google Cloud (Questions 8-16)¶
Question 8¶
Scenario: A retail company wants to analyze their sales data to identify trends and make data-driven decisions. They have 10TB of historical data and want to run complex analytical queries. They don't want to manage infrastructure. Which Google Cloud service is best suited for this?
A. Cloud SQL B. BigQuery - a serverless data warehouse for analytics at scale C. Cloud Storage alone D. Compute Engine with self-managed database
Answer
**Correct: B** **Why:** BigQuery is a fully managed, serverless data warehouse designed for large-scale analytics. It handles petabytes of data with fast SQL queries. No infrastructure management - Google handles scaling, security, and maintenance. Pay only for queries run and data stored. Ideal for business intelligence and analytical workloads. **Key Concept:** [BigQuery Overview](https://cloud.google.com/bigquery/docs/introduction)Question 9¶
Scenario: A media company wants to automatically categorize and tag millions of images in their content library. They don't have machine learning expertise in-house. What Google Cloud capability enables this?
A. Hire ML engineers first B. Vision AI pre-trained models that can identify objects, text, and categorize images without custom ML development C. Manual image tagging only D. Build models from scratch
Answer
**Correct: B** **Why:** Vision AI provides pre-trained machine learning models for image analysis. It can detect objects, read text (OCR), recognize faces, and categorize content - all via simple API calls. No ML expertise required. This democratizes AI capabilities for businesses without data science teams. **Key Concept:** [Vision AI](https://cloud.google.com/vision)Question 10¶
Scenario: A financial services company needs to process and analyze real-time stock market data feeds. They need to detect anomalies and alert traders within seconds. What Google Cloud services support this real-time analytics requirement?
A. Batch processing with nightly reports B. Pub/Sub for streaming ingestion combined with Dataflow or BigQuery streaming for real-time analysis C. Manual monitoring D. Weekly data imports
Answer
**Correct: B** **Why:** Pub/Sub provides real-time message ingestion at any scale. Dataflow enables stream processing with windowing and analytics. BigQuery supports streaming inserts with real-time query capabilities. Together they enable ingesting, processing, and analyzing data in real-time with sub-second latency. **Key Concept:** [Real-time Analytics Architecture](https://cloud.google.com/architecture/building-real-time-data-pipelines)Question 11¶
Scenario: A healthcare organization wants to use AI to help radiologists detect potential abnormalities in X-ray images. They have strict accuracy requirements and need to understand how the AI makes decisions. What approach should they consider?
A. Use AI without explanation capabilities B. Vertex AI with Explainable AI features providing insights into model predictions C. Replace radiologists with AI D. Avoid AI in healthcare
Answer
**Correct: B** **Why:** Vertex AI provides enterprise AI platform with Explainable AI features showing which parts of an image contributed to predictions. This transparency is crucial for healthcare where understanding AI decisions is important for trust and compliance. AI augments radiologists rather than replacing them. **Key Concept:** [Explainable AI](https://cloud.google.com/vertex-ai/docs/explainable-ai/overview)Question 12¶
Scenario: A company has data in multiple systems - CRM, ERP, and various databases. They want to create a unified view of their data and enable self-service analytics for business users. What Google Cloud capability helps achieve this?
A. Keep data siloed in separate systems B. Dataplex for data management across data lakes, warehouses, and marts with unified governance C. Manual data integration D. Single monolithic database
Answer
**Correct: B** **Why:** Dataplex provides unified data management across distributed data (lakes, warehouses, marts). It enables discovering, organizing, and governing data regardless of where it resides. Looker and Looker Studio provide self-service analytics and visualization. This breaks down silos while maintaining governance. **Key Concept:** [Dataplex](https://cloud.google.com/dataplex/docs/introduction)Question 13¶
Scenario: A e-commerce company wants to provide personalized product recommendations to customers. They have purchase history data but no data science team. What Google Cloud service can help them implement recommendations quickly?
A. Build custom ML models from scratch B. Recommendations AI that provides retail-specific personalization with minimal ML expertise required C. Show random products D. Manual curation only
Answer
**Correct: B** **Why:** Recommendations AI is a purpose-built service for retail recommendations. It handles complex ML model training using your catalog and user behavior data. Provides multiple recommendation types (similar items, user preferences, frequently bought together) via simple API. Minimal ML expertise needed. **Key Concept:** [Recommendations AI](https://cloud.google.com/recommendations-ai/docs/overview)Question 14¶
Scenario: A logistics company wants to optimize their delivery routes using AI. They have historical delivery data and want to reduce fuel costs and improve delivery times. What type of AI/ML approach is most relevant?
A. Image recognition B. Optimization algorithms and machine learning for route optimization based on traffic, distance, and delivery windows C. Natural language processing D. Speech recognition
Answer
**Correct: B** **Why:** Route optimization uses optimization algorithms (operations research) combined with ML for traffic prediction. Google Cloud offers Route Optimization API for fleet routing. BigQuery ML can analyze historical patterns. This applies AI to operational efficiency, directly impacting business metrics like cost and delivery time. **Key Concept:** [Route Optimization API](https://cloud.google.com/optimization/docs)Question 15¶
Scenario: A call center wants to automatically transcribe and analyze customer calls to identify common issues and sentiment. What Google Cloud AI services support this use case?
A. Manual call listening B. Speech-to-Text for transcription combined with Natural Language API for sentiment analysis and entity extraction C. Video analysis only D. Image recognition
Answer
**Correct: B** **Why:** Speech-to-Text API converts audio to text with high accuracy. Natural Language API analyzes text for sentiment (positive, negative, neutral), extracts entities (products mentioned, issues), and classifies content. Together they automate call analysis at scale, providing insights impossible to gather manually. **Key Concept:** [Speech-to-Text](https://cloud.google.com/speech-to-text) and [Natural Language AI](https://cloud.google.com/natural-language)Question 16¶
Scenario: A company wants to ensure their data analytics practices comply with data governance requirements. They need to track data lineage (where data comes from), ensure data quality, and manage access. What Google Cloud service provides these capabilities?
A. No data governance tools B. Dataplex for data governance including data lineage, quality rules, and access management across distributed data C. Manual documentation D. Spreadsheet tracking
Answer
**Correct: B** **Why:** Dataplex provides comprehensive data governance: data lineage shows data origins and transformations, data quality rules validate data automatically, and IAM integration manages access. Data Catalog discovers and tags data assets. This enables governance without requiring all data to move to one place. **Key Concept:** [Dataplex Data Governance](https://cloud.google.com/dataplex/docs/data-governance)Domain 3: Infrastructure and Application Modernization (Questions 17-25)¶
Question 17¶
Scenario: A company has a legacy monolithic application running on physical servers. They want to move to the cloud quickly with minimal changes as a first step. What migration approach is this?
A. Complete application rewrite B. Lift and shift (rehost) - moving the application to cloud VMs with minimal modifications C. Stay on-premises D. Build new application from scratch
Answer
**Correct: B** **Why:** Lift and shift (rehosting) migrates applications to cloud infrastructure with minimal changes - typically moving to VMs. It's the fastest migration approach, providing quick cloud benefits (scalability, global reach) while deferring modernization. Migrate for Compute Engine automates VM migration to Google Cloud. **Key Concept:** [Migration Strategies](https://cloud.google.com/architecture/migration-to-gcp-getting-started)Question 18¶
Scenario: A development team wants to deploy their application without managing servers, patches, or scaling. They want to focus purely on writing code. What Google Cloud compute option provides this experience?
A. Compute Engine requiring VM management B. Cloud Run or Cloud Functions - serverless platforms that handle infrastructure automatically C. Self-managed Kubernetes D. Physical servers in Google data centers
Answer
**Correct: B** **Why:** Serverless platforms like Cloud Run (containers) and Cloud Functions (event-driven code) eliminate infrastructure management. No servers to provision, patch, or scale. Pay only for actual execution time. Developers focus on code while Google handles operations. This represents the most abstracted compute option. **Key Concept:** [Serverless on Google Cloud](https://cloud.google.com/serverless)Question 19¶
Scenario: A company wants to run their containerized applications with full control over the Kubernetes cluster configuration, including node types and networking. They have DevOps expertise. What Google Cloud service provides managed Kubernetes with this control?
A. Cloud Run (fully serverless) B. Google Kubernetes Engine (GKE) - managed Kubernetes with cluster configuration control C. Compute Engine only D. App Engine
Answer
**Correct: B** **Why:** GKE provides managed Kubernetes: Google manages the control plane while you configure worker nodes, networking, and cluster settings. You get Kubernetes' power and flexibility with reduced operational overhead. GKE Autopilot offers even more automation. Ideal when you need Kubernetes capabilities with some control. **Key Concept:** [Google Kubernetes Engine](https://cloud.google.com/kubernetes-engine/docs/concepts/kubernetes-engine-overview)Question 20¶
Scenario: A traditional company has applications running in their data center. They want to start using Google Cloud but need connectivity between their data center and Google Cloud that doesn't go over the public internet. What connectivity option provides this?
A. Public internet only B. Cloud Interconnect or Cloud VPN for private, secure connectivity between on-premises and Google Cloud C. No hybrid connectivity options D. Physical cable from data center to Google
Answer
**Correct: B** **Why:** Cloud Interconnect provides dedicated private connections between on-premises networks and Google Cloud (10 Gbps to 200 Gbps). Cloud VPN provides encrypted connectivity over internet. Both enable hybrid architectures where some workloads remain on-premises while connecting securely to cloud resources. **Key Concept:** [Hybrid Connectivity](https://cloud.google.com/hybrid-connectivity)Question 21¶
Scenario: A company wants to modernize their application by breaking it into smaller, independently deployable services. Each service should be developed by different teams and communicate via APIs. What architecture pattern is this?
A. Monolithic architecture B. Microservices architecture - decomposing applications into small, loosely coupled services C. Mainframe computing D. Single large application
Answer
**Correct: B** **Why:** Microservices architecture decomposes applications into small, independent services that communicate via APIs. Each service can be developed, deployed, and scaled independently. This enables faster development cycles, technology flexibility per service, and fault isolation. Google Cloud provides multiple platforms for running microservices. **Key Concept:** [Microservices on Google Cloud](https://cloud.google.com/architecture/microservices-architecture-refactoring-monoliths)Question 22¶
Scenario: A development team wants to automate their build, test, and deployment process. When code is committed, it should automatically be tested and deployed to production if tests pass. What practice and Google Cloud tools support this?
A. Manual deployments only B. CI/CD (Continuous Integration/Continuous Deployment) using Cloud Build for builds and Cloud Deploy for deployments C. Deploy directly without testing D. Weekly manual releases
Answer
**Correct: B** **Why:** CI/CD automates the software delivery pipeline. Cloud Build triggers on code commits, runs builds and tests. Cloud Deploy manages deployment to environments with approvals and rollback capabilities. This reduces manual errors, speeds up delivery, and improves software quality through consistent automated processes. **Key Concept:** [CI/CD on Google Cloud](https://cloud.google.com/docs/ci-cd)Question 23¶
Scenario: A company has APIs that different applications and partners need to access. They want to manage API access, monitor usage, rate limit abusive clients, and monetize API access. What Google Cloud service provides these API management capabilities?
A. Direct API access without management B. Apigee API Management for securing, analyzing, and monetizing APIs C. Manual tracking of API usage D. Block all external API access
Answer
**Correct: B** **Why:** Apigee provides full API lifecycle management: secure APIs with authentication and rate limiting, analyze API usage and performance, manage developer portals, and monetize API access. This enables treating APIs as products while maintaining security and control. **Key Concept:** [Apigee API Management](https://cloud.google.com/apigee/docs/api-platform/get-started/what-apigee)Question 24¶
Scenario: A company has virtual machines on another cloud provider. They want to migrate these VMs to Google Cloud. What tool helps assess and execute this migration?
A. Manual VM recreation B. Migrate for Compute Engine (formerly Migrate for VMs) for discovering, planning, and migrating VMs from other clouds C. No migration tools available D. Start from scratch
Answer
**Correct: B** **Why:** Migrate for Compute Engine supports migrating VMs from AWS, Azure, and on-premises to Google Cloud. It includes assessment tools to plan migration, continuous replication during migration, and testing capabilities. This reduces migration risk and effort compared to manual recreation. **Key Concept:** [Migrate for Compute Engine](https://cloud.google.com/migrate/compute-engine/docs/overview)Question 25¶
Scenario: A company wants to ensure their applications are resilient - if one data center fails, their application should continue running. What Google Cloud concept supports this high availability requirement?
A. Single zone deployment only B. Multi-region or multi-zone deployments with load balancing for automatic failover C. No redundancy options D. Accept downtime during failures
Answer
**Correct: B** **Why:** Google Cloud organizes resources into regions and zones. Deploying across multiple zones (within a region) or multiple regions protects against infrastructure failures. Load balancers automatically route traffic to healthy instances. Regional services like Cloud Run and Cloud SQL provide built-in redundancy. **Key Concept:** [Regions and Zones](https://cloud.google.com/compute/docs/regions-zones)Domain 4: Google Cloud Security and Operations (Questions 26-33)¶
Question 26¶
Scenario: A security team wants to ensure that users can only access the Google Cloud resources they need for their job - no more, no less. What Google Cloud concept enables this principle of least privilege?
A. Give everyone admin access B. Identity and Access Management (IAM) with predefined and custom roles granting specific permissions C. No access controls D. Shared passwords
Answer
**Correct: B** **Why:** IAM provides fine-grained access control. Roles bundle permissions - predefined roles cover common scenarios, custom roles allow precise permission sets. Grant roles at appropriate scope (organization, folder, project, resource). This implements least privilege - users get exactly the access needed for their responsibilities. **Key Concept:** [IAM Overview](https://cloud.google.com/iam/docs/overview)Question 27¶
Scenario: A company stores sensitive customer data in Google Cloud. They want to ensure data is encrypted and they control the encryption keys. What options does Google Cloud provide for encryption key management?
A. No encryption options B. Multiple options: Google-managed keys (default), customer-managed keys in Cloud KMS, or customer-supplied keys C. Only unencrypted storage D. Customers must build their own encryption
Answer
**Correct: B** **Why:** Google Cloud encrypts all data at rest by default with Google-managed keys. Customer-managed keys (CMEK) in Cloud KMS provide customer control over keys while Google manages hardware. Customer-supplied keys (CSEK) let customers provide their own keys. External Key Manager connects to on-premises key management. **Key Concept:** [Encryption at Rest](https://cloud.google.com/security/encryption/default-encryption)Question 28¶
Scenario: An organization wants to detect security threats in their Google Cloud environment - unauthorized access, malware, data exfiltration attempts. What Google Cloud service provides threat detection?
A. No threat detection services B. Security Command Center providing security posture management and threat detection across Google Cloud C. Manual log review only D. Third-party tools required
Answer
**Correct: B** **Why:** Security Command Center (SCC) is Google Cloud's security management platform. It detects threats (Event Threat Detection), identifies vulnerabilities and misconfigurations (Security Health Analytics), and provides asset inventory. Premium tier includes additional detections and compliance reporting. **Key Concept:** [Security Command Center](https://cloud.google.com/security-command-center/docs/concepts-security-command-center-overview)Question 29¶
Scenario: A company needs to comply with industry regulations and wants to verify that their Google Cloud infrastructure meets compliance standards (PCI DSS, HIPAA, etc.). How does Google Cloud support compliance requirements?
A. No compliance support B. Compliance certifications (SOC, ISO, PCI, HIPAA), shared responsibility model, and compliance reports accessible to customers C. Compliance is entirely customer's burden D. Automatic compliance without effort
Answer
**Correct: B** **Why:** Google Cloud maintains compliance certifications (SOC 1/2/3, ISO 27001, PCI DSS, HIPAA, FedRAMP). Compliance reports are available through compliance documentation. Shared responsibility means Google secures infrastructure while customers secure their data and configurations. Assured Workloads provides additional controls for regulated industries. **Key Concept:** [Google Cloud Compliance](https://cloud.google.com/security/compliance)Question 30¶
Scenario: A company wants to ensure their employees can only access Google Cloud from corporate networks or approved devices, not from personal devices or public networks. What Google Cloud feature enables this?
A. No device or network restrictions possible B. BeyondCorp Enterprise and Access Context Manager for device trust and network-based access controls C. Allow access from anywhere D. VPN only approach
Answer
**Correct: B** **Why:** BeyondCorp Enterprise implements zero trust security. Access Context Manager defines access levels based on device attributes (managed, encrypted), network (corporate IP ranges), and user identity. These access levels can be enforced on Google Cloud resources, ensuring access only from trusted contexts. **Key Concept:** [BeyondCorp Enterprise](https://cloud.google.com/beyondcorp-enterprise)Question 31¶
Scenario: A security incident occurred and the team needs to investigate what happened. They need to see who accessed what resources, when, and what actions they took. Where should they look?
A. No audit capabilities B. Cloud Audit Logs capturing admin activities, data access, and system events across Google Cloud C. Manual observation only D. Ask users what they did
Answer
**Correct: B** **Why:** Cloud Audit Logs automatically capture API calls including who (identity), what (action/resource), when (timestamp), and where (source IP). Admin Activity logs (always on) track configuration changes. Data Access logs (configurable) track data reads/writes. These provide essential forensic data for investigations. **Key Concept:** [Cloud Audit Logs](https://cloud.google.com/logging/docs/audit)Question 32¶
Scenario: A company wants to prevent sensitive data from leaving their Google Cloud environment, even if an attacker gains access credentials. What Google Cloud feature provides this data loss prevention at the network perimeter?
A. No data loss prevention B. VPC Service Controls creating security perimeters that prevent data exfiltration from protected services C. Trust all authenticated users D. Firewall rules only
Answer
**Correct: B** **Why:** VPC Service Controls create a security perimeter around Google Cloud services. Data cannot be copied to resources outside the perimeter even with valid credentials. This prevents data exfiltration attacks - a compromised credential can't copy BigQuery data to an attacker's project outside the perimeter. **Key Concept:** [VPC Service Controls](https://cloud.google.com/vpc-service-controls/docs/overview)Question 33¶
Scenario: A company wants to understand the security posture of their Google Cloud environment at a glance. They need to see vulnerabilities, misconfigurations, and compliance status in one place. What provides this unified view?
A. Check each service individually B. Security Command Center dashboard showing findings, vulnerabilities, compliance status across all Google Cloud resources C. No unified security view D. Third-party tools only
Answer
**Correct: B** **Why:** Security Command Center provides a unified dashboard showing security findings across all Google Cloud resources. Security Health Analytics identifies misconfigurations. Web Security Scanner finds application vulnerabilities. Container Analysis detects container vulnerabilities. Compliance dashboards show status against standards. **Key Concept:** [Security Command Center Dashboard](https://cloud.google.com/security-command-center)Domain 5: Scaling with Google Cloud Operations (Questions 34-40)¶
Question 34¶
Scenario: A company's application is running on Google Cloud and they need to ensure it's performing well. They want to monitor response times, error rates, and resource utilization. What Google Cloud service provides this monitoring capability?
A. No monitoring available B. Cloud Monitoring providing metrics, dashboards, and alerting for Google Cloud resources and applications C. Manual observation only D. Third-party tools required
Answer
**Correct: B** **Why:** Cloud Monitoring (formerly Stackdriver) collects metrics from Google Cloud resources automatically and supports custom metrics. Dashboards visualize performance. Alerting policies notify teams when metrics exceed thresholds. This provides visibility needed to ensure application health and performance. **Key Concept:** [Cloud Monitoring](https://cloud.google.com/monitoring/docs/monitoring-overview)Question 35¶
Scenario: A development team is troubleshooting application issues. They need to see application logs from multiple services and correlate them to understand a transaction flow. What Google Cloud service helps with this?
A. Logs on individual servers only B. Cloud Logging with centralized log management, log-based metrics, and correlation with Cloud Trace for distributed tracing C. Print statements only D. No logging support
Answer
**Correct: B** **Why:** Cloud Logging centralizes logs from all Google Cloud services and applications. Log Explorer enables searching and filtering across services. Log-based metrics create alerts from log patterns. Cloud Trace shows request flow across services, correlating with logs. This enables effective troubleshooting of distributed systems. **Key Concept:** [Cloud Logging](https://cloud.google.com/logging/docs/overview)Question 36¶
Scenario: A company's website traffic varies dramatically - low during off-hours and spikes during marketing campaigns. They want their infrastructure to automatically adjust to demand without manual intervention. What capability provides this?
A. Fixed capacity regardless of demand B. Autoscaling that automatically adds/removes resources based on metrics like CPU utilization or request count C. Manual scaling only D. Over-provision for peak always
Answer
**Correct: B** **Why:** Autoscaling automatically adjusts capacity based on demand. Compute Engine managed instance groups scale VMs. GKE autoscales pods (HPA) and nodes. Cloud Run scales container instances. This ensures adequate capacity during peaks while reducing costs during low periods - no manual intervention needed. **Key Concept:** [Autoscaling](https://cloud.google.com/compute/docs/autoscaler)Question 37¶
Scenario: A company wants to get recommendations on how to optimize their Google Cloud costs - identifying idle resources, rightsizing VMs, and taking advantage of discounts. What Google Cloud capability provides these insights?
A. No cost optimization support B. Active Assist providing recommendations including cost optimization, rightsizing VMs, and committed use discount opportunities C. Manual cost analysis only D. Overpay and don't optimize
Answer
**Correct: B** **Why:** Active Assist (including Recommender) analyzes usage patterns and provides actionable recommendations. Cost recommendations identify idle resources, suggest VM rightsizing, and highlight committed use discount opportunities. Implementing recommendations typically reduces costs 10-30% without impacting performance. **Key Concept:** [Active Assist](https://cloud.google.com/recommender/docs/overview)Question 38¶
Scenario: A company wants to define their infrastructure (networks, VMs, databases) as code so it can be version-controlled, reviewed, and consistently deployed. What approach and tools support this?
A. Manual configuration through console B. Infrastructure as Code (IaC) using Terraform or Deployment Manager for declarative infrastructure definition C. Undocumented manual changes D. Scripts without version control
Answer
**Correct: B** **Why:** Infrastructure as Code treats infrastructure configuration like software code - stored in version control, reviewed through pull requests, and deployed consistently. Terraform (multi-cloud) and Deployment Manager (Google Cloud native) are IaC tools. This reduces configuration drift, enables disaster recovery, and supports DevOps practices. **Key Concept:** [Infrastructure as Code](https://cloud.google.com/docs/terraform)Question 39¶
Scenario: A global company wants to ensure their application is highly available and provides good performance for users worldwide. If one region fails, users should be automatically redirected to healthy regions. What Google Cloud feature enables this?
A. Single region deployment B. Global HTTP(S) Load Balancing that routes users to the nearest healthy backend across regions C. Manual DNS changes during outages D. Accept regional outages
Answer
**Correct: B** **Why:** Google Cloud Global Load Balancing provides a single anycast IP that routes requests to the nearest healthy backend based on user location and backend health. If a region fails, traffic automatically routes to other regions. This provides high availability and low latency globally without DNS changes. **Key Concept:** [Global Load Balancing](https://cloud.google.com/load-balancing/docs/https)Question 40¶
Scenario: A finance team wants to track and allocate Google Cloud costs across different departments and projects. They need detailed billing reports showing which teams are spending what. What Google Cloud features support this cost management need?
A. Single undifferentiated bill B. Billing accounts with projects, labels for cost allocation, and detailed billing reports/exports to BigQuery for analysis C. No cost breakdown available D. Estimate costs without tracking