Google Cloud Digital Leader Exam Questions Instant Access

Question 1

Your organization needs to restrict access to a Cloud Storage bucket. Only employees who are based in Canada should be allowed to view the contents.

What is the most effective and efficient way to satisfy this requirement?

ADeploy the Cloud Storage bucket to a Google Cloud region in Canada

BConfigure Google Cloud Armor to allow access to the bucket only from IP addresses based in Canada

CGive each employee who is based in Canada access to the bucket

DCreate a group consisting of all Canada-based employees, and give the group access to the bucket

Answer : D

Because you can use your own private VPN to access the Canada-only bucket from anywhere in the world.

Question 2

How does Google Cloud ensure that customer data remains secure and private when at rest?

ABy aggregating training data for customers within each industry

BBy automatically locking files containing suspicious code

CBy auditing platform privacy practices against industry standards

DBy providing privacy reviews for critical customer applications

Answer : C

Google Cloud commitment to keep the data secure and private:

1. Org owns the data and not Google

2. Google does not sell data to 3rd parties

3. All customer data is encrypted by default

4. Google Cloud guards insider against your data

5. No backdoor access to any govt. entity

6. Google's privacy practices are audited against international standards

Question 3

The government has ordered an audit of your company's dat

a. You have hired an external company to conduct the audit. They need to be able to review the data stored in your Cloud Storage buckets across eight projects. How would you grant them access?

AGive the auditors an Owner role on the eight buckets so that they have proper access.

BGive them Storage Object Viewer access to the buckets in those eight projects.

CThey might need access to all projects as the audit progresses; so give them access to all Storage buckets so that you don't have to do it repeatedly later on.

DThey might need access to all projects as the audit progresses; so give them the Editor role on all Storage buckets so that you don't have to do it repeatedly later on.

Answer : B

Apply the Principle of Least Privilege and only provide read permissions on only the required buckets. No more, no less

https://cloud.google.com/storage/docs/access-control/iam-roles

Question 4

What is the Site Reliability Engineering (SRE) term for an organizations desired level of reliability and performance?

AEnhanced support

BScalable infrastructure

CService-level indicator

DService-level objective

Answer : D

The correct answer is D. Service-level objective. Here's why:

Context of the Questio n : The organization wants to understand the term used in Site Reliability Engineering (SRE) for defining the desired level of reliability and performance.

Google Cloud Product Relevance:

A Service-Level Objective (SLO) is a key term in SRE, representing the target level of reliability or performance for a specific service. SLOs define acceptable levels of service in terms of availability, latency, or other performance metrics. They are used to set clear expectations and help measure whether services meet the desired reliability levels.

SLOs are closely tied to Service-Level Agreements (SLAs) and Service-Level Indicators (SLIs), where SLIs measure specific aspects of service performance, and SLOs set the target levels based on those indicators.

Why Not Other Options:

A . Enhanced support: This is a support option for Google Cloud customers and is not related to SRE concepts.

B . Scalable infrastructure: This refers to cloud infrastructure's ability to scale resources up or down but is not specific to reliability and performance metrics.

C . Service-level indicator: An SLI measures a specific aspect of the service's performance but does not define the target level of performance.

Google Cloud Digital Leader Reference:

Refer to the Site Reliability Engineering (SRE) documentation to learn more about SLOs, SLIs, and SLAs.

Question 5

An organization needs to increase the speed at which they can train machine learning models Which domain-specific hardware is designed for this task?

APreemptible or Spot VMs

BContainers

CBare Metal Solution

DCloud TPUs

Answer : D

Question 6

A financial services company is running an experimental application workload that has a very large number of mathematical calculations involving floating-point numbers. The current application that is running on compute engine is not providing enough speed and throughput. What are the options to increase the processing performance?

AUse a serverless option like Cloud Functions that will automatically scale as much as required.

BInstead of using a 'general purpose' machine family, use 'compute-optimized' machine family.

CSince processing could also be dependent on reading and writing data to the disk, use a fast Local SSD.

DAttach GPUs to the virtual machine for number crunching.

Answer : D

Compute Engine provides graphics processing units (GPUs) that you can add to your virtual machines (VMs). You can use these GPUs to accelerate specific workloads on your VMs such as machine learning and data processing.

https://cloud.google.com/compute/docs/gpus

Question 7

What conditions be true if a VM interface wants to send packets to the external IP addresses of Google APIs and services using Private Google Access?

AVM interface does not have an external IP address assigned.

BVM interface is connected to a subnet where Private Google Access is disabled

CBoth A and B

DNone of the Above.

Answer : A

A VM interface cansend packets to the external IP addressesof Google APIs and services using Private Google Access if all these conditions are met:

- The VM interface is connected to a subnet where Private Google Access is enabled.

- The VPC network that contains the subnet meets the network requirements for Google APIs and services.

- The VM interface does not have an external IP address assigned.

- The source IP address of packets sent from the VM matches the VM interface's primary internal IP address or an internal IP address from an alias IP range.

A VM with an external IP address assigned to its network interface doesn't need Private Google Access to connect to Google APIs and services. However, the VPC network must meet the requirements for accessing Google APIs and services.