Free Sample — 15 Practice Questions
Preview 15 of 288 questions from the Cloud Digital Leader exam.
Try before you buy — purchase the full study guide for all 288 questions with answers and explanations.
Question 285
Your company is running the majority of its workloads in a co-located data center. The workloads are running on virtual machines (VMs) on top of a hypervisor and use either Linux or Windows server editions. As part of your company's transformation strategy, you need to modernize workloads as much as possible by adopting cloud-native technologies. You need to migrate the workloads into Google Cloud.
What should you do?
A. Export the VMs into VMDK format, and import them into Compute Engine
B. Export the VMs into VMDK format, and import them into Google Cloud VMware Engine
C. Migrate the workloads using Migrate for Compute Engine
D. Migrate the workloads using Migrate for Anthos
Show Answer
Correct Answer: D
Explanation:
The requirement is to modernize workloads as much as possible using cloud-native technologies. Migrate for Anthos is designed to modernize existing VM-based applications by transforming them into containerized workloads running on GKE, enabling Kubernetes, portability, and cloud-native operational benefits. The other options primarily perform lift-and-shift VM migrations (Compute Engine or VMware Engine) without true cloud-native modernization.
Question 179
An organization wants to move from a tactical cloud adoption approach to a transformational approach.
How should they adapt the way they lead the organization?
A. Increase top-down visibility and foster a culture of blamelessness
B. Shift from an operational expenditure model to capital expenditure
C. Drive cloud adoption with an individual contributor focus
D. Invest in on-premises infrastructure to redesign relationships between IT and employees
Show Answer
Correct Answer: A
Explanation:
A transformational cloud approach requires a shift in leadership and culture, not just technology or cost models. Increasing top-down visibility aligns the organization around a clear vision and strategy, while fostering a blameless culture enables learning, experimentation, and continuous improvement—key traits of transformational cloud adoption. The other options focus on financial models, individual contributors, or on‑premises investments, which do not drive organizational transformation.
Question 254
Your organization uses Active Directory to authenticate users. Users' Google account access must be removed when their Active Directory account is terminated.
How should your organization meet this requirement?
A. Configure two-factor authentication in the Google domain
B. Remove the Google account from all IAM policies
C. Configure BeyondCorp and Identity-Aware Proxy in the Google domain
D. Configure single sign-on in the Google domain
Show Answer
Correct Answer: D
Explanation:
Configuring single sign-on (SSO) federates Google accounts with Active Directory as the authoritative identity provider. When a user's AD account is terminated or disabled, authentication to Google services automatically fails, removing Google account access without separate manual deprovisioning. The other options do not directly link Google access lifecycle to AD account status.
Question 157
How is privacy defined in the context of cloud technology?
A. Restrictions on data access and sharing
B. Procedures to authenticate user identity
C. Susceptibility to data breaches and cyber attacks
D. Compliance with regulatory standards
Show Answer
Correct Answer: A
Explanation:
In cloud technology, privacy primarily concerns controlling who can access data and how it can be shared or used. Restrictions on data access and sharing directly define privacy. Authentication (B) is security, breaches (C) are risks, and compliance (D) supports privacy but does not define it.
Question 10
An organization is building advanced machine learning models in Google Cloud by using TensorFlow. They want to develop their models faster with purpose-built hardware. Which solution should the organization use?
A. TPUs
B. CPUs
C. CPUs
D. GPUs
Show Answer
Correct Answer: A
Explanation:
TPUs (Tensor Processing Units) are purpose-built accelerators designed by Google specifically to speed up machine learning workloads, especially TensorFlow training and inference. They provide significantly higher performance for deep learning compared to general-purpose CPUs, and are more tightly optimized for TensorFlow than GPUs, enabling faster model development on Google Cloud.
Question 274
Your organization needs to plan its cloud infrastructure expenditures.
Which should your organization do?
A. Review cloud resource costs frequently, because costs change often based on use
B. Review cloud resource costs annually as part of planning your organization's overall budget
C. If your organization uses only cloud resources, infrastructure costs are no longer part of your overall budget
D. Involve fewer people in cloud resource planning than your organization did for on-premises resource planning
Show Answer
Correct Answer: A
Explanation:
Cloud infrastructure uses consumption-based pricing that can fluctuate with usage, scaling, and pricing changes. Frequent cost reviews are necessary to accurately plan and control expenditures. Annual-only reviews are insufficient, cloud costs still belong in the overall budget, and cloud planning typically involves at least as many stakeholders as on‑premises planning.
Question 160
An organization is moving away from an on-premises infrastructure. Instead, they want to create, access, and share information virtually in the cloud.
What should the organization consider?
A. Built-in security when moving their data to the cloud
B. Replacing their perimeter security with data encryption keys
C. Optimizing cost-management with a capital expenditure model
D. Increased hardware capacity when moving their data to the cloud
Show Answer
Correct Answer: A
Explanation:
When moving from on‑premises to cloud-based creation, access, and sharing of data, organizations must consider the cloud provider’s built‑in security features and the shared responsibility model. Security is a primary consideration in cloud adoption, whereas replacing perimeter security with only encryption keys (B) is incomplete, capital expenditure (C) contradicts cloud’s operational expenditure model, and increased hardware capacity (D) is not required when using cloud resources.
Question 9
A financial organization has many customers who close their accounts every year. The organization wants to use data and AI to identify at-risk customers, so they can retain customers by offering discounts and improved services. What should the organization do?
A. Create a dashboard of previous customers that have exited, and look for obvious correlations in the visualization.
B. Create a ML model based on the demographics and activities of previous customers that exited.
C. Create a survey for all customers to identify their current level of satisfaction.
D. Create a report based on last year’s customer feedback.
Show Answer
Correct Answer: B
Explanation:
The goal is to proactively identify customers who are at risk of closing their accounts. Building a machine learning model using historical data (such as demographics and customer activities of those who previously exited) enables predictive analytics to detect patterns associated with churn and apply them to current customers. This allows targeted retention actions. The other options focus on descriptive or reactive approaches (dashboards, surveys, reports) and do not provide scalable, predictive identification of at-risk customers.
Question 229
Your company security team manages access control to production systems using an LDAP directory group.
How is this access control managed in the Google Cloud production project?
A. Assign the proper role to the Service Account in the project's IAM Policy
B. Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group.
C. Assign the proper role to the Google Group in the project's IAM Policy.
D. Create the project in a folder with the same name as the LDAP directory group.
Show Answer
Correct Answer: C
Explanation:
Google Cloud IAM best practice is to grant roles to groups, not individual users or service accounts for human access. An LDAP directory group can be synchronized or represented as a Google Group, and assigning the appropriate IAM role to that Google Group at the project level centrally manages production access.
Question 176
A manager wants to review Google Cloud data access among their employees.
Who is responsible for defining data access policies?
A. Cloud Identity
B. Google Cloud Customer Care team
C. Their organization's IT team
D. Their organization's end users
Show Answer
Correct Answer: C
Explanation:
The question asks *who* is responsible for defining data access policies, not which Google Cloud service enforces them. Defining access policies is a governance and security responsibility that belongs to the organization, typically handled by its IT or security team. Cloud Identity/IAM is the tool used to implement those decisions, not the decision-maker itself. End users and Google support do not define organizational access policies.
Question 40
An organization is transforming their raw data into a format that can be used to derive business insights. Which step of the data value chain does this action represent?
A. Data analysis
B. Data collection
C. Data storage
D. Data processing
Show Answer
Correct Answer: D
Explanation:
Transforming raw data into a usable format for deriving business insights corresponds to data processing. This stage includes cleaning, structuring, aggregating, and converting data so it is ready for analysis. Data collection gathers the data, storage holds it, and analysis comes after processing to extract insights.
Question 110
An organization is struggling to meet user demand for change and wants to modernize their legacy applications by moving the applications to the cloud.
Why would this help the organization satisfy user expectations?
A. Customer data can be used to offer tailored content
B. Toil automation helps make automatic updates
C. Updates can be pushed out more quickly to repair bugs
D. DevOps requires that industry trends be measured and tracked
Show Answer
Correct Answer: C
Explanation:
Moving legacy applications to the cloud enables faster release cycles through cloud-native tooling such as CI/CD, automation, and scalable infrastructure. This allows organizations to deploy updates and fixes more quickly, helping them respond faster to user demands for change and improving overall user satisfaction. The other options are not inherently dependent on moving applications to the cloud.
Question 51
An organization wants to build custom machine learning models. They require a managed platform that provides services to gather data, build models, and then deploy and monitor those models. Which service should they use?
A. Document AI
B. Natural Language API
C. Kubernetes Engine
D. Vertex AI
Show Answer
Correct Answer: D
Explanation:
Vertex AI is a fully managed machine learning platform that supports the entire ML lifecycle, including data preparation, model building and training, deployment, and ongoing monitoring. The other options are either pre-built AI APIs or general infrastructure services and do not provide end-to-end managed ML capabilities.
Question 193
How does Cloud SQL help organizations create business insights?
A. Integrates with business intelligence and analytics platforms
B. Generates predictions using machine learning models
C. Generates real-time charts and intelligent analytics
D. Transforms business data from unstructured to structured
Show Answer
Correct Answer: A
Explanation:
Cloud SQL is a managed relational database service. It does not itself perform machine learning, real-time analytics, or data transformation, but it integrates easily with business intelligence and analytics tools, enabling organizations to analyze their stored data and derive business insights.
Question 207
A hotel wants to modernize their legacy systems so that customers can make reservations through a mobile app.
What's the benefit of using an application programming interface (API) to do this?
A. They do not have to develop the end-user application
B. They can deprecate their legacy systems
C. They can transform their systems to be cloud-native
D. They do not have to rewrite the legacy system
Show Answer
Correct Answer: D
Explanation:
Using an API allows the hotel to expose existing legacy system functionality through a standardized interface that a mobile app can consume. This enables modernization at the integration layer, so the mobile app can interact with the legacy systems without requiring a full rewrite of those systems. The other options are not guaranteed benefits of APIs: an API does not eliminate the need for an end-user app, does not inherently deprecate legacy systems, and does not automatically make systems cloud-native.