[Mar-2024] Cloud-Digital-Leader Exam Questions and Valid Cloud-Digital-Leader Dumps PDF
Cloud-Digital-Leader Brain Dump: A Study Guide with Tips & Tricks for passing Exam
NEW QUESTION # 183
Your organization consists of many teams. Each team has many Google Cloud projects. Your organization wants to simplify the management of identity and access policies for these projects.
How can you group these projects to meet this goal?
- A. Use folders to group each team's projects
- B. Assign labels based on the virtual machines that are part of each team's projects
- C. Group each team's projects into a separate organization node
- D. Group each team's projects into a separate domain
Answer: A
Explanation:
https://cloud.google.com/resource-manager/docs/creating-managing-folders
NEW QUESTION # 184
You are working with a user to set up an application in a new VPC behind a firewall and it is no-ticed that the user is concerned about data egress. Therefore, to provide assistance you want to con-figure the fewest open egress ports. Which of the following statement is correct?
- A. Set up a high-priority (1000) rule that pairs both ingress and egress ports.
- B. Set up a low-priority (65534) rule that blocks all egress and a high-priority rule (1000) that allows only the appropriate ports.
- C. Set up a high-priority (1000) rule that blocks all egress and a low-priority (65534) rule that allows only the appropriate ports.
- D. Set up a high-priority (1000) rule to allow the appropriate ports.
Answer: B
Explanation:
Implied rules Every VPC network has two implied firewall rules. These rules exist, but are not shown in the Cloud Console:
Implied allow egress rule. An egress rule whose action is allow, destination is 0.0.0.0/0, and priority is the lowest possible (65535) lets any instance send traffic to any destination, except for traffic blocked by Google Cloud. A higher priority firewall rule may restrict outbound access. Internet access is allowed if no other firewall rules deny outbound traffic and if the instance has an external IP address or uses a Cloud NAT instance. For more information, see Internet access requirements.
Reference link- https://cloud.google.com/vpc/docs/firewalls
NEW QUESTION # 185
Your organization uses Active Directory to authenticate users. Users' Google account access must be removed when their Active Directory account is terminated.
How should your organization meet this requirement?
- A. Configure two-factor authentication in the Google domain
- B. Remove the Google account from all IAM policies
- C. Configure BeyondCorp and Identity-Aware Proxy in the Google domain
- D. Configure single sign-on in the Google domain
Answer: D
Explanation:
Explanation
Configure single sign-on in the Google domain
Single sign-on: Whenever a user needs to authenticate, Google Cloud delegates the authentication to Active Directory by using the Security Assertion Markup Language (SAML) protocol. This delegation ensures that only Active Directory manages user credentials and that any applicable policies or multi-factor authentication (MFA) mechanisms are being enforced. For a sign-on to succeed.
https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction Reference Link- https://cloud.google.com/architecture/identity/single-sign-on
NEW QUESTION # 186
Which Google Cloud product or feature makes specific recommendations based on security risks and compliance violations?
- A. Google Cloud firewalls
- B. Google Cloud Armor
- C. Security Command Center
- D. Cloud Deployment Manager
Answer: C
NEW QUESTION # 187
An organization wants full control of their virtual machine infrastructure for a custom home-grown application with a product that autoscales and automatically updates.
Which Google Cloud product or solution should the organization use?
- A. Cloud Run
- B. App Engine
- C. Cloud Build
- D. Compute Engine
Answer: D
Explanation:
Explanation
Compute Engine will allow you to have full control of their VM infrastructure and you can autoscale and also apply automatic updates.
NEW QUESTION # 188
Which of the following is/are core storage options available on the Google Cloud Platform?
- A. Cloud Spanner
- B. Cloud SQL and Google Big Table
- C. Cloud Storage and Cloud Data Store
- D. All of the above
Answer: D
Explanation:
Google Cloud Platform has other storage options to meet your needs for structured, unstructured, transactional and relational data. Core storage options: Cloud Storage, Cloud SQL, Cloud Spanner, Cloud Data Store and Google Big Table. Depending on your application, you might want to use one or several of these services to get the job done.
NEW QUESTION # 189
How would a global organization benefit from managing their data with Cloud Spanner?
- A. Cloud Spanner visualizes and analyzes data in real time
- B. Cloud Spanner is optimized for cold storage
- C. Cloud Spanner is optimized to ingest unstructured data
- D. Cloud Spanner replicates data across regions in real time
Answer: D
Explanation:
Explanation
Spanner is Google's scalable, multi-version, globally-distributed, and synchronously-replicated database.
NEW QUESTION # 190
A partner of yours used to have their own private data center. Your company was already on Google Cloud and now they have also moved to Google Cloud. You are investigating whether there are ways to collaborate better or shared services. What would be one good option to consider?
- A. Use VPC Shared Networks to share common resources.
- B. Use VPC Peering to share resources privately between your two organizations.
- C. Use public IP addresses as before. It will automatically be routed internally only.
- D. Use Private Service Access within Google Cloud.
Answer: B
Explanation:
VPC Network Peering allows internal IP address connectivity across two Virtual Private Cloud (VPC) networks regardless of whether they belong to the same project or the same organization.
-> Shared VPC is only within an organization - it allows an organization to connect resources from multiple projects to a common Virtual Private Cloud (VPC) network, so that they can communicate with each other securely and efficiently using internal IPs from that network.
-> Private Google Access is only to access Google APIs and services
References:
-> https://cloud.google.com/vpc/docs/vpc-peering
-> https://cloud.google.com/vpc/docs/private-google-access
-> https://cloud.google.com/vpc/docs/shared-vpc
NEW QUESTION # 191
An e-commerce company's business has been booming. To keep up with the growth the IT team also grew. Many new people are being added and new resources are being set up. The CIO is in conver-sation with you over coffee one day and expresses her growing concern that they might be moving too fast. Their security checks and policies have not kept pace. She worries that somebody would make a misconfiguration or compliance violation thus exposing the company to data and privacy loss. What can you advise her?
- A. Use Cloud Armor to block any DDoS attacks that could be a threat.
- B. Use Cloud Identity-Aware Proxy to allow only specific users to access the data.
- C. Use Cloud Data Loss Prevention to prevent the loss of any data.
- D. Use Security Command Center to have a centralized view of assets and get noti-fied on misconfigurations and vulnerabilities.
Answer: D
Explanation:
Security Command Center is the right tool for this use case. It can check resources for security issues and notify you when issues are found.
https://cloud.google.com/security-command-center
NEW QUESTION # 192
Your Google Cloud Platform [GCP] admin has to manage a bunch of API keys for external services that are accessed by different applications, which are used by a few teams. What is the best way to manage them?
- A. Store the information in Kubernetes Secrets and only grant read permissions to users as required.
- B. Encrypt the information and store it in Cloud Storage for centralized access. Give the decrypt key only to the users who need to access it.
- C. Store the information in Secret Manager and give IAM read permissions as re-quired.
- D. Share the information in a Github repository and grant access to the repo in IAM as required.
Answer: C
Explanation:
Explanation
Store the information in Secret Manager is a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data. Secret Manager provides a central place and single source of truth to manage access, and audit secrets across Google Cloud.
https://cloud.google.com/secret-manager
NEW QUESTION # 193
With respect to the Core Feature of Standby Instances of Cloud SQL which one of the options is correct.?
- A. None of the Above.
- B. The standby instance is used in high availability to replace the primary instance when failover occurs. The standby instance appears in the Google Cloud Console but does not get billed. When failover occurs, connections to the primary instance need to be manually transferred to the standby instance.
- C. The standby instance is used in high availability to replace the primary instance when failover occurs. The standby instance appears in the Google Cloud Console but does not get billed. When failover occurs, connections to the primary instance are automatically transferred to the standby instance.
- D. The standby instance is used in high availability to replace the primary instance when failover occurs. The standby instance doesn't appear in the Google Cloud Console. When failover occurs, connections to the primary instance are automati-cally transferred to the standby instance.
Answer: D
Explanation:
The standby instance is used in high availability to replace the primary instance when failover occurs. The standby instance doesn't appear in the Google Cloud Console. When failover occurs, connections to the primary instance are automatically transferred to the standby instance.
Cloud SQL Key Terms:
Cloud SQL instance
A Cloud SQL instance corresponds to one virtual machine (VM). The VM includes the database instance and accompanying software containers to keep the database instance up and running.
Database instance
A database instance is the set of software and files that operate the databases: MySQL, PostgreSQL or SQL Server.
High availability
Cloud SQL instances using high availability (HA) provide greater reliability than non-HA instances.
HA in Cloud SQL works by having two synchronized instances: a primary instance and a standby instance. Each instance has exactly one VM. Each instance is in a different zone in the same region.
Failover
A failover is when Cloud SQL switches serving from the original primary instance to the standby instance.
Autofailover is a mechanism that automatically triggers failover when a Cloud SQL instance didn't issue a heartbeat in the previous interval.
Standby instances
The standby instance is used in high availability to replace the primary instance when failover occurs. The standby instance doesn't appear in the Google Cloud Console. When failover occurs, connections to the primary instance are automatically transferred to the standby instance.
Clone
When you clone a Cloud SQL instance, you create a new instance that is a copy of the source instance, but is completely independent. After cloning is complete, changes to the source instance are not reflected in the clone, and changes in the clone are not reflected in the source instance.
Replication
Replication is the ability to create copies of a Cloud SQL instance or an on-premises database, and offload work to the copies. The main reason for using replication is to scale the use of data in a database without degrading performance on the primary instance.
Read replica
The read replica is an exact copy of the primary instance. Data and other changes on the primary instance are updated in almost real time on the read replica. Send your write transactions to the primary instance, and your read requests to the read replica. The read replica processes queries, read requests, and analytics traffic, thus reducing the load on the primary instance.
Source server
Replication copies transactions from a primary instance to one or more read replicas. The primary instance is also called the source server. The source server can be a Cloud SQL primary instance, or a server outside of Google Cloud, such as an on-premises server or a server running in a different cloud. If the source server is outside of Google Cloud, we call it Replication from an external server.
Cloud SQL Auth proxy client
The Cloud SQL Auth proxy client is open source software maintained by Cloud SQL. It connects to a companion process, the Cloud SQL Auth proxy server, running on your Cloud SQL instance. You run the Cloud SQL Auth proxy client on your own servers. The Cloud SQL Auth proxy client can be used to establish a secure SSL/TLS connection to the database instance, and/or to avoid having to open the firewall. Authentication is done through Identity and Access Management (IAM).
NEW QUESTION # 194
As your organization increases its release velocity, the VM-based application upgrades take a long time to perform rolling updates due to OS boot times. You need to make the application deployments faster.
What should your organization do?
- A. Increase the resources of your VMs
- B. Migrate your VMs to the cloud, and add more resources to them
- C. Automate your upgrade rollouts
- D. Convert your applications into containers
Answer: D
NEW QUESTION # 195
A startup client of yours does offline data processing for a few of its clients. They are mi-grating their applications and the associated data to Google Cloud. They have 100TB of data to move. They presently have a very small private data center setup connected to a local internet provider. The maximum bandwidth they are able to get is 100Mbps. How long will it take them to transfer the data over the internet if the transfer goes smoothly?
- A. About 2 years.
- B. About 12 days.
- C. About 100 days.
- D. About 24 hours.
Answer: C
Explanation:
Explanation
The key reason I included this question is to clarify some terminologies that will be important for your estimates. The data size mentioned is a TB terabyte. Note the "byte". The speed is mentioned in Mbps, which is Megabits per second. Note the "bits". 8 bits make a byte. So, to get the actual number of bits transferred, you need to multiply the TB number by 8.
Total data transferred (in bits) = 100 * 1,000,000,000,000 * 8 bits
Speed = 100Mbps = 100 * 1,000,000. i.e. 100 million bits are transferred per second.
Hence time taken to transfer all the data = Total Data/Speed = 8,000,000 seconds.
Number of seconds in a day = 24*60*60 = 86,400
Total time taken in days = 8,000,000/86,400 = 92.59 days
Reference link
- https://cloud.google.com/architecture/migration-to-google-cloud-transferring-your-large-datasets#online_versu
NEW QUESTION # 196
An organization needs to migrate specialized workloads to the cloud while maintaining their existing complex licensing and architecture.
What Google Cloud solution should the organization use?
- A. Cloud Run
- B. Compute Engine
- C. Cloud Functions
- D. Bare Metal Solution
Answer: D
Explanation:
Explanation
"This solution provides a path to modernize your application infrastructure landscape, while maintaining your existing investments and architecture. With Bare Metal Solution, you can bring your specialized workloads to Google Cloud, allowing you access and integration with GCP services with minimal latency."
NEW QUESTION # 197
Your organization runs a distributed application in the Compute Engine virtual machines. Your organization needs redundancy, but it also needs extremely fast communication (less than 10 milliseconds) between the parts of the application in different virtual machines.
Where should your organization locate this virtual machines?
- A. In multiple regions, using one zone per region
- B. In different zones within a single region
- C. In a single zone within a single region
- D. In multiple regions, using multiple zones per region
Answer: B
Explanation:
Multi zone is also redundant within the region and it provides the lowest latency.
Reference link:-
https://cloud.google.com/solutions/best-practices-compute-engine-region-selection
NEW QUESTION # 198
How should a multinational organization that is migrating to Google Cloud consider security and privacy regulations to ensure that it is in compliance with global standards?
- A. Comply with regional data security regulations, because they're more complex than privacy standards
- B. Comply with data security and privacy regulations in each geographical region
- C. Comply with regional standards for data security and privacy, because they supersede all international regulations
- D. Comply with international standards for data security and privacy, because they supersede all regional regulations
Answer: B
Explanation:
Explanation
Comply with data security and privacy regulations in each geographical region For a multi-national corporation, they need to abide not just by international laws, but also regional laws where they do business.
NEW QUESTION # 199
A Customer has their current SAP systems using Microsoft SQL Server as the Database. They are migrating to Google Cloud and also preparing to later migrate to the latest ver-sion of SAP. The entire IT team is being directed to focus on the migration to the new ver-sion of SAP. The new version of SAP does not use Microsoft SQL Server as the Database, Any but the most critical IT management tasks are being deprioritized, How should they migrate their current database to Google Cloud?
- A. BigQuery
- B. Cloud SQL
- C. Spanner
- D. Bare Metal
Answer: B
Explanation:
Explanation
Cloud SQL supports SQL Server, Since the IT team's attention is being focused on other activities, they will have less time for existing admin tasks, It would be best to take a managed/hosted version.
NEW QUESTION # 200
An online retail organization wants to optimize their service.
What is an example of unstructured data that they can use to make decisions?
- A. Product sales trends
- B. Seller location coordinates
- C. Customer survey comments
- D. Warehouse inventory records
Answer: C
Explanation:
Explanation
https://cloud.google.com/storage/docs/requester-pays
NEW QUESTION # 201
You decide to migrate your on-premises environment to the cloud. You need to determine which resource components still need to be assigned ownership.
Which two functions are owned by a public cloud provider? (Choose two.)
- A. Hardware maintenance
- B. Fixing application security issues
- C. Hardware capacity management
- D. Infrastructure deployment automation
- E. Infrastructure architecture
Answer: A,C
Explanation:
Explanation
In a shared responsible model, hardware maintence and capacity management cloud provider is the responsible part.
NEW QUESTION # 202
An organization wants to add a new function to their application. They want to write the code and let the public cloud provider handle the infrastructure.
Which infrastructure solution should they use?
- A. Bare Metal Solution
- B. Serverless computing
- C. Virtual machines
- D. Container Registry
Answer: B
Explanation:
Serverless computing , as public cloud prouder(eg. google) will mange the infra things
NEW QUESTION # 203
An organization wants to search hundreds of scanned documents for key information like dates, names, and other specific words.
Why should the organization use application programming interfaces (APIs)?
- A. To ingest data in real time and encrypt unmatched words
- B. To replace the scanned documents with an online survey
- C. To create digital versions of the documents and locate key information
- D. To transform the documents into unstructured data.
Answer: D
Explanation:
Explanation
The text from the PDF/scanned documents/images gets converted into JSON (unstructured file) which will be further used for search.
NEW QUESTION # 204
Your organization wants to predict the behavior of visitors to its public website. To do that, you have decided to build a machine learning model. Your team has database-related skills but only basic machine learning skills, and would like to use those database skills.
Which Google Cloud product or feature should your organization choose?
- A. TensorFlow
- B. LookML
- C. BigQuery ML
- D. Cloud SQL
Answer: C
Explanation:
Reference:
NEW QUESTION # 205
You are a program manager in a company you need to submit a bare metal solution order for a se-cure, high performance connection with a low-latency network fabric. What network information you need to submit the order to Bare Metal Solutions.
- A. Total number of VLANs you need in your Bare Metal Solution Environment.
- B. IP Ranges for example Client IP Address range used for communication between your Google Cloud and Bare Metal Solution environments.
- C. Google Cloud Project Id that you are using with your bare metal solution environ-ment.
- D. All of the above
Answer: D
Explanation:
What Bare Metal Solution provides
Bare Metal Solution is a managed solution that provides purpose-built HPE or Atos bare-metal servers in regional extensions that are connected to Google Cloud by a managed, high-performance connection with a low-latency network fabric.
With Bare Metal Solution, Google Cloud provides and manages the core infrastructure, the network, the physical and network security, and hardware monitoring capabilities in an environment from which you can access all of the Google Cloud services. The core infrastructure includes secure, controlled-environment facilities, and power.
The Bare Metal Solution also includes the provisioning and maintenance of custom, sole-tenancy servers with local SAN, and smart hands support.
The network, which is managed by Google Cloud, includes a low-latency Partner Interconnect connection into the customer Bare Metal Solution environment.
The available Google Cloud services include private API access, management tools, support, and billing.
NEW QUESTION # 206
Your organization needs to minimize how much it pays for data traffic from the Google network to the internet. What should your organization do?
- A. Choose the Standard network service tier.
- B. Deploy Cloud NAT.
- C. Deploy Cloud VPN.
- D. Choose the Premium network service tier.
Answer: A
Explanation:
Explanation
Choose the Standard network service tier. While Premium tier is the default for all egress traffic and offers the highest performance, when cost is a consideration. Standard tier is the more economical.
Text, letter Description automatically generated
https://cloud.google.com/blog/products/networking/networking-cost-optimization-best-practices
NEW QUESTION # 207
How does a least privilege resource access model contribute to cloud security?
- A. Only managers and other senior employees have cloud resource access.
- B. Employees only have access to the cloud resources necessary for their job.
- C. Employees may only access on-premises software with special permission.
- D. Google is responsible for determining access to cloud resources.
Answer: B
Explanation:
This is the definition of a least privilege model.
A supporting principle that helps organizations achieve these goals is the principle of least privilege. The principle of least privilege addresses access control and states that an individual should have only the minimum access privileges necessary to perform a specific job or task and nothing more
NEW QUESTION # 208
......
Cloud-Digital-Leader Exam Questions: Free PDF Download Recently Updated Questions: https://exam-labs.prep4sureguide.com/Cloud-Digital-Leader-prep4sure-exam-guide.html