Google Cloud Digital Leader Practice Latest Real Exam Question and Answers | Pass Google CDL

0:02 hello and welcome to this new video in this video we're going to cover some important real exam question answers for Google Cloud digital leader certification exam so before going to the question answers we request you to kindly subscribe to YouTube channel if you're not already subscriber and these question answers PDF is also available to download from shaping pixel.com website the full link will be in the description so let's jump on to the questions question number one your company uses Google Cloud platform to house secure customer data you are a data security manager and want to control which permissions are granted to the users who

0:47 handle the data which of the following should you do to control permissions and we have four options option A assigned roles option b use access lists option C use authentications and option D assign resources so the right answer here is option A assign rules so in order to assign permissions you should assign rules Cloud identify allows you to manage and authorize your user accounts across multiple applications and projects it also supports SLE 2.0 for single sign on as well as two Factor authentication whichever option you

1:33 choose you have full control over which permissions are granted to your users user access list are for customizing access to specific objects within a bucket rather than managing permissions authentications are not appropriate in this scenario because rules include authentication measures such as SLE 2.0 for single sign on as well as two Factor authentication resources refers to folders and projects not uses permissions to access them question number two which of the following Google Cloud products can be used to explore and visualize data choose two answers and we have four

2:19 options Cloud composer data prog data lab data studio so the right answer here is option C data lab and option D data studio so data lab and data Studio are tools for exploring and visualizing data data lab allows you to interactively explore visualize analyze and transform data using familiar languages such as Python and SQL pre-installed Jupiter introductory sample and tutorial notebooks show you how to access analyze Monitor and visualize data data studio is a tool that allows you to tell your

3:06 data story with charts including line bar and pie charts geom Maps area and bubble graphs paginated data tables PBO tables and more Cloud fire store is a storage tool it is a nosql document database that lets you easily store sync and query data for your mobile and web apps on a global scale it is not appropriate in this scenario because it is not a data visualization tool data proc is a tool for processing and analyzing data data proc is a fully managed and highly scalable service for running Apache spark Apache Flink Prest to and 30 plus open source tools and Frameworks it is not appropriate in this scenario because it is not primarily a

3:52 data visualization tool as specified in this scenario to download the PDF of all these question and answers please visit our website shaping pixel.com or you can join the channel membership on YouTube on followers Pack 2 the links are available in the description question number three you are migrating workloads to the cloud the goal of the migration is to serve customers worldwide as quickly as possible according to local regulations certain data is required to be stored in a specific geographic area and it can be served worldwide you need to design the

4:39 architecture and deployment for your workloads what should you do and we have four options option a select a public cloud provider that is only active in the required geographic area option b select a private cloud provider that globally replicates data storage for fast data access option C select a public cloud provider that guarantees data location in the required geographic area option D select a private cloud provider that is only active in the required geographic area so the right answer here is option C select a public cloud provider that guarantees data location in the required geographic

5:26 area so a public cloud is an IT model model where public cloud service providers make Computing Services including compute and storage develop and deploy environments and applications available on demand to organizations and individuals over the public internet question number four you are an IT manager who wants to reduce the cost and labor that would be required for a manual application modernization project using using a Google Cloud solution you are deciding whether to adapt migrate for compute engine or migrate for anos and need to explain the differences between the two solutions to manage

6:11 which of the following differences would you explain and we have four options option A migrate for compute engine charges for transferring data to Google but migrate for anos does not option b migrate for anthos migrates to contain and migrate for compute engine migrates to Virtual machines option C migrate for compute engine requires complex deployment and setup while migrate for anos requires only lift and shift migration option D migrate for anthos requires manual operating system upgrades and migrate for compute engine is fully managed so the right answer here is

6:58 option b so the key difference between the two solutions is that migrate for anthos migrates to containers and migrate for compute engine migrates to Virtual machines the difference the difference between the two solutions is not that migrate for compute engine charges for transferring data to Google but migrate for anthos does not migrate for compute engine does not charge for Ingress traffic migrate for compute engine is often associated with lift and shift operations while migrate for anos may involve a more complex to its containerized system depending on the needs of the organization migrate for anthos does not require a manual operating system upgrades because it is

7:44 containerized system and migrate for compute engine is not a fully managed s solution the compute engine offers two kinds of VM instance groups managed and unmanaged managed instant groups let you operate apps on multiple identical vmss unmanaged instance groups let you load balance across a fleet of VMS that you manage yourself question number five your organization needs a large amount of extra computing power within the next 2 weeks after those two weeks the need for the additional resources will end which is the most cost effective approach and

8:30 we have four options option A use a committed use discount to reserve a very powerful virtual machine option b purchase one very powerful physical computer option C start a very powerful virtual machion without using a committed use discount option D purchase multiple physical computers and scale workload across them so the right answer here is option C start a very power aul virtual Mission without using a committed use discount so when you purchase a committed use contract you purchase compute engine resources such as CPUs memory gpus local ssts and solar tenant

9:17 notes at a discount price in return for committing to paying for those resources for one year or 3 years question number six which of the following operations in big query reduce the total cost of ownership for customers choose three answers and we have four options queries retrieving results from the catchy option b batch loading data into big query for local files option C running a query on an external data source from PI query option D deleting a table view individual table partitions and user defined

10:05 functions so the right answer here is option A queries retrieving results from the catchy and option b batch loading data into big query from local files and option C running a query on an external data source from Big query certain operations in Google bigquery are free and can result in reductions in the total cost of ownership of the business using the service customers are not charged for queries that retrieves results from a catchy batch loading data into big Quarry from local files are deleting a table view individual table

10:51 partitions are user defined functions customers using Google Pi Quarry are charged for the amount of data processed in the selected columns and for running a query on an external data source from Big query so those functions performed in big query do not result in TCO reduction question number seven your organization needs to plan its Cloud infrastructure expenditures which should your organization do and we have four options option a review Cloud resources cost frequently because cost change often based on use option b review Cloud resource cost

11:38 annually as a part of planning your organization overall budget option C if your organization uses only Cloud resources infrastructure cost are no longer part of your overall budget option D involve fewer people in Cloud resource planning then your organization did for on premises resource planning Mone so the right answer here is option a review Cloud resource cost frequently because cost change often based on use so Financial governance variable nature of cloud resources and their cost spending must be monitored and

12:24 controlled on an ongoing basis question number eight how can a software developer contribute to site reliability engineering within an organization and we have four options option A by allocating a problem solving task to operations team option b by manually configuring production systems option C by focusing on implementing automation or option D by creating static Solutions in order to avoid failure so the right answer here is option C by focusing on implementing

13:14 automation site reliability engineering team focus on hiring software Engineers to run products and create systems to accomplish the work that would otherwise be performed often manually by sis admins in a traditional operational model problem solving task were often allocated to operation themes site reliability engineering focuses on automatic production systems rather than manually configuring them site liability engineering focuses on Dynamic not static solutions to problems SRE operates with the understanding that failure is planned for and expected and that solutions to problems may change as a result

14:06 question number nine the operating system of some of your organization's virtual machines may have a security vulnerability how can you organize most effectively identify all virtual machines that do not have the latest security update and we have four options option A View the security Command Center to identify virtual Machin running vulnerable disk images option b view the compliance reports manager to identify and download a recent PCI audit option C view the security Command Center to identify virtual Mission started more than 2 weeks ago option D view the compliance reports manager to identify and download a recent s so1

14:54 audit so the right answer here is option A View the security Command Center enter to identify virtual missiones running vulnerable disk images security Command Center so gain centralized visibility and control discover misconfigurations and vulnerabilities report on and maintain compliance detect threats targeting your Google assets question number 10 you are a manager for an energy company that is collecting non structured key value data in the form of

15:39 usage reports from energy meters and more home appliance sensors your it department needs to securely connect and manage its iot devices which of the following solutions would help you to connect and manage the iot devices securely and we have four options iot core track traffic director iot Hub iot portal so the right answer here is option a iot core so Internet of Things core is a fully managed service that allows you to connect to and manages iot devices securely traffic director helps you

16:24 helps to deploy Global load balancing across clusters and virtual machines in instances iot Hub is not a Google Cloud product iot portal is not a Google Cloud product question number 11 you are currently managing workloads running on Windows server for which your company owns the license your workloads are only needed during working hours which allows you to shout shut down the instances during the weekend your Windows Server licenses are up for enable in a month and you want to optimize your license cost what should you do and we have four

17:10 options option A renew your licenses for an additional period of 3 years renew your licenses for an additional period of 3 years negotiate a cost reduction with your current hosting provider where in infrastructure cost is reduced when workloads are not in use option b renew your licenses for an additional period of 2 years negotiate a cost reduction by committing to an automatic renewal of the license at the end of the 2-year period option C migrate the workloads to compute Engine with the bring your own license model option D migrate the workloads to compute Engine with the payo model so the right answer here is option

17:57 C migrate the workload to compute engine with a bring your own license model so bringing your existing physical core or physical processor licenses that have dedicated Hardware requirements requires you to bring your own media and to run that media on Hardware configurations such as s tenant nodes that are compant with your licenses question number 12 an organization wants

18:43 to use a Google cloud service for a Time restricted project with the following guideline the developers should be free from infrastructure management activities the choosing service should be able to integrate clean prepare blend transfer and transform data which of the following Google cloud services should the organization use and we have four options cloud data fion Cloud composer data catalog and data proc so the right answer here is option a cloud data Vision cloud data vision is best suited for the given scenario because it is fully managed service that helps quickly

19:29 build and manage data pipelines by integrating cleaning preparing blending transferring and transforming data Cloud composer facilities creating scheduling monitoring and managing workflows it is not the optimal service for a project that requires the integration of data data catalog is a fully managed and scalable metadata management service that allows organization to understand all their Google cloud data by enabling quick Discovery and management because data catalog focuses on metadata management rather than data integration cleaning preparing blending transferral and transformation it is not the best solution in this scenario data

20:15 Brock is a service that facilitates batch processing querying and streaming it is not the best solution for the situation because it is primarily used for batch processing rather than managing data Pipelines question number 13 your organization runs a distributed application in the compute engine virtual machines your organization needs redundency but it also needs extremely fast communication between the parts of the application in different virtual machines where should your organization locate this virtual machine and we have four options option A in a

21:01 single zone within a single region option b in different zones within a single region option C and multiple regions using one Jone per region option D in multiple regions using multiple Jones per region so the right answer here is option D in multiple regions using multiple Jones per region a multi- region architecture can provide higher availability than deploying to a single region question number 14 you are a

21:48 project manager managing a client project intended to enhance customer experience in bfsi by providing smart communication Solutions as the solution is being developed for bfsi industry your client has indicated that they prefer to have complete control of data an operating system along with run times and middleware which of the following Cloud offerings would you suggest to your client we have four options option A infrastructure is a service option B platform is a service option C function as a service and option D software as a service so the right answer here is option A infrastructure as a

22:34 service so infrastructure is a service provides complete control over the data apps middleware operating system automated Hardware deployment virtualized management workload question number 15 an organization decides to migrate their on premises environment to the cloud they need to determine which resource components still need to be assigned ownership which two functions does a public cloud provider own choose to and we have five options option A Hardware maintenance option b infrastructure architecture option C infrastructure deployment automation option D Hardware

23:20 capacity management option e fixing application security issues so so the right answer here is option A Hardware maintenance and option D Hardware capacity management at a minimum when considering infrastructure as a service the cloud provider is responsible for Hardware boot heart and kernel and IPS storage and Etc question number 16 your client is a banking company that is designing a

24:07 disaster recovery plan for its historical compliance oriented data Speedy access to data is not a requirement of the plan which of the following Disaster Recovery pattern would you suggest and we have four options C warm hot live so the right answer here is option a cold so there is no spare infrastructure associated with the cold Dr pattern and in case of disaster the planed strategy is implemented for the rapid setup of the cold Dr site the infrastructure setup is in a place in the warm Dr pattern along with all the required equipment and setup however data loading or restoration is required in case of a

24:54 disaster the hard Dr pattern backup site has the equipment and all the setup along with the current data in the hard DV pattern and live is not Dr pattern type question number 17 you are a program manager within a software is a service company that offers rendering software for animation Studios your team needs the ability to allow scenes to be scheduled at will and to be interrupted at any time to restart later any individual scene rendering takes less than 12 hours to complete and there is no service level agreement for the completion time for all scenes results

25:42 will be stored in a global cloud storage bucket the compute resources are not bound to any single geographic location the software needs to run on Google cloud in a cost optimized way what should you do and we have four options of option a deploy the application on compute engine using pritable instances option b develop the application so it can run in an unmanaged instance group option C create a reservation for the minimum number of compute engine instances you will use option D start more instances with fewer virtual centralized processing units instead of fewer instances with more cpvs

26:29 so the right answer here is option A so pritable PM instances are available at much lower price 60 to 90% discount compared to the price of standard VMS however compute engine might stop these instances if it needs to reclaim the compute capacity for allocation to other VMS question number 18 the Global Insurance and financial companies planning to adopt cloud services to bring down infrastructure costs the cloud deployment model adapt

27:14 must meet all relevant international data security regulations to ensure a regulation compliance the customer data with client identifying data should be stored on premises data with without client identifying data will be stored on the public Cloud which of the following Cloud deployment models would you recommend and we have four options option a public Cloud option b private Cloud option C Community cloud and option D hybrid Cloud so the right answer here is option D hybrid cloud

27:59 as a customer requires storing customer data with CID on premises and storing other applications and data on the public Cloud the hybrid Cloud deployment model would be the most appropriate hybrid Cloud consist of both public cloud and on premises resources as the scenario requires that the customer data with C be stored on premises the public Cloud deployment model is incorrect the private Cloud deployment model would not be called cost efficient because the private cloud is operated so only for a single organization a community Cloud deployment model would not allow the organization to compile with the regulations to store customer data with CID because several organizations from the specific Community share the

28:54 infrastructure question number 19 your manager wants to rest communication of all virtual machines with internet access with resources in another Network or with a resource outside compute engine it is expected that different teams will create new folders and projects in the near future how would you restrict all virtual missiones from having an external IP address and we have four options option A Define an organization policy at the root organization node to restrict virtual Mission instances for having an internal IP address option b Define an organization policy on all existing folders to define a constraint to restrict virtual machine instances from having an external IP

29:40 addresses option C Define an organization policy on all existing projects to restrict virtual Mission instances from having an external IP address and option D communication with the different teams and agree that each time a virtual machine is created it must be configured without an external IP address so the right answer here is option A Define an organization policy at the root organization note to restrict virtual machine instances from having an external IP address so the organization policy serves service gives you centralized and programmatic control over the

30:26 organization's CL all resources as the organization policy administrator you will be able to configure constraints across your entire resource hierarchy question number 20 a company that stores some of its customers credit card data on premises is migrating the data to Global Cloud prior to migration the organization wants to understand how Google will store and process the customer data data which of the following aspects of the Google Cloud platform should the organization learn more about and we have four options availability complains privacy

31:12 security so the right answer here is option C privacy privacy in the context of the cloud refers to the data organizations or individuals have access to and share when the organization moves its data to the cloud the organization retains control of the data as a as a Google Cloud customer the organization should learn that when it migrates to the cloud it continues to own its customers data and can control who has access to it and who the data can be stored shared with Google stores and processes data but the data remains private because access to it is controlled by by the organization

31:59 Google provides the organization with tools and features to control that access thus helping the organization maintain the privacy of the customers data in the cloud question number 21 your multinational organization has servers running Mission critical workloads on its premises around the world you want to be able to manage this workload consistently and centrally and you want to stop managing infrastructure what should your organization do and we have four options option A migrate the workloads to public Cloud option b migrate the workloads to

32:46 a central office building option C migrate the workloads to multiple local collocation facilities option D migrate the workloads to mulp multiple local private clouds so the right answer here is option A migrate the workloads to a public Cloud question number 22 Cloud build can deploy to which of these services and we have four options kubernetes app engine Cloud functions Cloud build can deploy to all these services so the right answer here is

33:33 option D Cloud buil can deploy to all these Services as a part of your continuous deployment pipeline Cloud build can perform deployments using command line tools and deploy to Google kuties engine app engine Cloud functions and Firebase question number 23 your organization stores highly sensitive data on premises that cannot be sent over the public internet the data must be processed both on premises and in the cloud what should your organization do and we have four

34:19 options option A configure identity aware proxy in your Google Cloud VPC Network option b create a cloud VPN tunnel between Google cloud and your data center option C order a partner in interconnect connection with your network provider option D enable private Google access in your Google Cloud VPC Network so the right answer here is option C order a partner internet connection with your network provider after the service provider Provisions your connection you can start passing traffic between your networks by using the service providers

35:11 Network question number 24 your organization has planned to implement site reliability engineering best practices you are tasked with configuring application Level monitoring and monitoring service level objectives for applications and Trigger alerts when slos are violated which of the following products should you choose for these tasks and we have four options error reporting Cloud logging Cloud monitoring Cloud Trace so the right answer here is option C Cloud monitoring Cloud monitoring helps to gain visibility into application ation

35:57 and infrastructure performance availability and health by automatically collecting system metrics enabling SRE best practices creating custom dashboards creating alerts in integration with Incident Management tools question number 25 your company's development team is building an application that will be deployed on cloud run you are designing a cicd pipeline so that any new version of the application can be deployed in the fewest number of steps possible using cicd pipeline you are D designing you need to select a storage location for the images of the

36:43 application after the CI part of your pipeline has built them what should you do and we have four options option A create a compute engine image containing the application option B Store the images in container registry option C store the images in cloud storage option D create a compute engine T containing the application so the right answer here is option B Store the images in container registry pushing and pulling images are two of the most common container registry tasks these document focuses on pushing and pulling IM image images with

37:38 Docker question number 26 you are a manager with the E retail website the company has opted for the standard support customer care plan the number of users has searched recently and the company has realized a need for responses to its Priority One cases in 1 hour while also maintaining control of cost which of the following supports plans would you suggest and we have four options basic standard enhanced premium so the right answer here is option C enhanced the enhanced support customer

38:23 is the appropriate choice in this scenario because it includes one hour response time but is less costly than the premium support care plan the enhanced support includes 1hour response time for P1 cases 24x7 for P1 and P2 cases multi- Channel support technical experts with Advanced product knowledge third party Technology support question number 27 each of the three three cloud service models infrastructure is a service platform as a service and software as a service offers benefits between flexibility and levels of management by the cloud provider and the customer why would SAS

39:10 be the right choice of service model and we have four options option A you want a balance between flexibility for the customer and the level of management by the cloud provider option b you want to minimize the level of management by the customer option C you want to maximum maximize flexibility for the customer option D you want to be able to shift your empasis between flexibility and management by the cloud provider as a business needs change so the right answer here is option b you want to minimize the level of management by the customer the main benefit of SAS is that

39:56 it off loads all infrastructure and application management to the SAS vendor question number 28 which of the following are benefits of APG choose three answers so we have four options option A the ability to predict API traffic patterns option b the ability to make backend Services visible option C the ability to modernize Legacy Services via restful interfaces option D the ability to record and analyze business metrics so the right answer here is option A the ability to predict API

40:43 traffic patterns and option C the ability to modernize Legacy Services via restful interfaces and option D the ability to record and analyze business metrics a PG allows the users to predict API traffic patterns through metrics that can be used to understand potential traffic fluctuations and other information modernize Legacy Services via restful interfaces by packaging Legacy applications and as an API abstraction and modernization layer to insulate client facing applications from shifting

41:30 backend Services a PG is an abstraction layer between backend services and the user it does not make the backend service layer visible question number 29 as your organization increases its release velocity the VM based application of grades take a long time to perform rolling updates due to OS boot times you need to make the application deployments faster what should your organization do and we have four options option A migrate your VMS to the cloud and add more resources to

42:15 them option b convert your applications into containers option C increase the resources of your VMS option D automate your up create rollouts so the right answer here is option b convert your applications into containers since the problem with the current infrastructure base on VM is with OS boot time in particular so upgrading the workload to Containers would be the right choice as then OS boot time problem is eliminated which means a faster workload

43:07 execution question number 30 which of the following Google infrastructure security layers provides denial of service protection and we have four options operational security internet communication storage Services user identity so the right answer here is option b internet communication there are six go six Google infrastructure security layers operational security internet communication storage Services user identity service deployment and Hardware infrastructure Google front end and

43:52 denial of service protection are provided at the internet communication layer the oper National Security layer addresses intrusion detection and reducing Insider risk are some of the areas addressed it encryption add and deletion of data production are provided at the storage service layer authentication and login abuse protection are found at the user identity layer question number 31 your organization uses active directory to authenticate users users Google account access must be removed when their active directory account is terminated how should your organization meet this

44:38 requirement and we have four options option A configure two Factor authentication in the Google domain option b remove the Google account from all IM am policies option b configure Beyond Corp and identity aware proxy in the Google domain option D configure single sign on in the Google domain so the right answer here is option D configure single sign on in the Google domain your organization uses active directory to authenticate users then you need to use single sign on as an authentication scheme that allows a user to login with a single ID

45:24 and password to different systems and softw Ware SSO allows it departments to administ administer a single identity that can access many machines and cloud services question number 32 you are a project manager for a global company that offers high resolution documentary film editing Services your team of content editors in New York and London needs to collaborate on editing projects that are located in cloud storage buckets the maximum time to wait for a video availability must be within a Target time of 15 minutes with minimal

46:11 loss exposure which of the following storage configurations should you choose and we have four options single region dual region multi- region with default replication a dual region with turbo replication so the right answer here is option D dual region with turbo replication dual region storage with turbo replication enabled would be the appropriate storage configuration in this scenario because turbo replication allows you to as synchronously replicate newly written cloud storage object to a separate region within a target of 15

46:58 minutes because turbo replication is applicable only for dual region buckets it can be implemented in this scenario because the project teams are in London and New York question number 33 your company has recently acquired three growing startups in three different countries you want to reduce over head in infrastructure management and keep your cost low without sacrificing security and quality of service to your customers how should you meet these requirements and we have four options option a host all your subsidiaries services on premises together with your

47:45 existing Services option b host all your subsidiary Services together with your existing services on the public Cloud option C build a homogeneous infrastructure at each subsidiary and invest in training their Engineers option D build a homogeneous infrastructure at each subsidiary and invest in hiring more Engineers so the right answer here is option b host all your subsidiaries Services together with your existing services on the public cloud both maintenance cost becomes cheaper and management becomes easier when

48:32 subsidiaries workloads along with parent organizations workloads are deployed on the public Cloud question number 34 a startup is planning to adopt Google cloud services as a first step the company plans to migrate its data to Google Cloud which of the following should the company use to migrate over 1 tab of data from a private data center to the cloud while adhering to a strict timeline of 1 to 2 days and accommodating available bandwidth in order to meet the project deadline and we have four options option A Storage transfer service option b g

49:18 sutil option C transfer Appliance and option D migrate for anos and jke so the right answer here is option A Storage transfer service storage transfer service allows you to migrate data from a private data center to Google cloud with storage transfer you can move petabytes of data from on premises sources or other clouds or online networks with billions of files and tens of gbps you can also optimize your network bandwidth and accelerate transfers with scale out

50:06 performance question number 35 what is the differ between standard and cold Line storage and we have four options option a Cod Line storage is for data for which a slow transfer rate is acceptable option b standard and cold Line storage have different durability guarantees option C standard and cod Line storage use different apis option D Cod Line storage is for infrequently accessed data so the right answer here is option D Cod Line storage is for infrequently accessed data the categorization is based on how

50:53 frequently data is accessed and hence ch accordingly question number 36 a fitness application company is collecting the Health Data of its uses in adding approximately 50 terabytes of data every month the data is expected to grow to 200 plus terabyte every year users are primarily concerned with the last 30 days of dat data and we wait for data retrieval if the data is older than 30 days the company decided that they will now store the infrequently accessed data older than 30 days to minimize the cost

51:40 as this data is typically accessed at Max once per quarter or less which storage option would be best suited to store infrequently accessed data and we have four options standard near line cool line and achieve so the right answer here is option C Cod line Cod Line storage is best suited to store infrequently access data that is planned to be read or modified at most once per quarter standard storage is best suited to infrequently accessed data also known as hot data nearline

52:26 storage is is best suited to store data that will be read or modified once a month or less archieve storage is best suited to store archieve data that is required for legal regulatory or Disaster Recovery reasons question number 36 what would provide near Li unlimited availability of computing resources without requiring your organiz ation to repr procure and provision new equipment and we have four options option a public Cloud option b containers option C private cloud and option D

53:12 microservices so the right answer here is option a public Cloud question number 38 which of the following defines a private cloud and we have four options a collection of resources that are not shared with the general public or a collection of virtual on demand services that are offered to the public a collection of resources that are shared between private and public Cloud uses a collection of resources that are isolated on premises for use by an organization so the right answer here is option A a collection of resources that are not shared with the general

54:05 public a private cloud is a collection of resources that are not shared with the general public a public cloud is a virtual on demand service that is offered to the public a hybrid collection of resources that are shared between the private and public an on-site data center is a collection of on premises resources that are used by an organization question number 39 you are a program manager for a team of developers who are building an event driven application to allow users to follow one another's activity in the app each time a user adds himself as a follower of another user a right occurs in the realtime

54:53 database the developers will develop a lightweight p piece of code that can respond to database rights and generate a notification to let the appropriate users know that they have gained new followers the code should integrate with other cloud services such as Pub sub Firebase and Cloud apis to streamline the orchestration process the application requires a platform that automatically manages underlaying infrastructure and scales to zero when there is no activity which primary computer resource should your developer select given these requirements and we have four options option A Google kuties engine option b Cloud functions option C app engine

55:40 flexible environment option D compute engine so the right answer here is option b Cloud functions so Cloud functions give developers access to Firebase and Google Cloud events along with scalable computing power to run code in response to those events while it's expected that fireos apps will use cloud functions in unique ways to meet their unique requirements typically use cases might fall into these areas notify users when something interesting happens perform database sanitization and maintenance execute intensive tasks in the cloud instead of

56:27 instead of in your app integrate with third party services and apis question number 40 to optimize the company's Google Cloud spend the management committee team wants and it Clans waterfall overview of their monthly costs and savings which of the following should you use to provide this information to the management team and we have four options cost breakdown reports budget notifications cost table reports pricing table reports so the right answer here is

57:12 option a cost breakdown reports the cost breakdown report helps with an atlans waterfall overview of Mone monthly costs and savings budget notification facilities a real-time status of the cloud building budget and are not a method of gaining an overview of monthly cost cost table reports help access and analyze invoice and statements details but are not an optimal method for providing an overview of costs the pricing table reports help access SQ prices for Google cloud services and is not an efficient method for providing a high level picture of cost

58:03 question number 41 your organization is developing an application that will capture a large amount of data from millions of different sensors devices spread all around the world your organization needs a database that is suitable for worldwide highspeed data storage of a large amount of unstructured data which Google Cloud product should you organize ization choose and we have four options fire store cloud data Fusion Cloud SQL Cloud big table so the right answer here is option D Cloud big

58:50 table the cloud pick table a fully managed scalable nosql database service for large analytics and operational workloads with up to 99.999% availability question number 42 your client is a Global Packaging and printing company they want to migrate to a fully managed Google Cloud Storage solution with the following capabilities web content management file sharing media processing and rendering data analysis which solution should the company use and we have four options Arch storage file store persistent disk

59:38 local SSD so the right answer here is option B file store so file store enables application migration to the cloud without requiring you to rewrite or re architect thus accelerating and simplifying your migration file St is a fully managed service suitable for web content management file sharing rendering and processing media and Performing data analytics question number 43 your organization needs to build streaming data pipelines you don't want to manage

1:00:25 the individual servers that do the data processing in the pipelines instead you want a managed service that will automatically scale with the amount of data to be processed which Google Cloud product or feature should your organization choose and we have four options Pub sub data flow data catalog data prep by triactor so the right answer here is option b d data flow so the data flow service fully manages Google cloud services such as compute engines and cloud storage to run

1:01:11 your data flow job automatically spinning up and tearing down the necessary resources the data flow service provides visibility into your job through tools like the data flow monitoring interface and the data flow command line interface question number 44 which of the following occurs when an organization adopts Cloud technology to create and Define new ways of communicating and collaborating for its customers employees and stakeholders and we have four options A reduced need for security option b the burning platform effect option C virtualization of all

1:01:57 business operations option D organizational transformation so the right answer here is option D organizational transformation the main result for adopting Cloud technology is that it transforms the way organizations operate these operational transformation includes changes in the way customers employees and State holders interact by adopting Cloud Technologies organizations can transform how employees collaborate within organizations as well as how they interact and share knowledge and information with customers and stakeholders adopting Cloud technology increases the Speed and Agility with

1:02:44 which organizations can share data and Analysis categorize information make predictions and share insights reduced need for security is not feature of adapting Cloud technology adapting Cloud Technologies increases the need for security because organizations and Cloud platforms provides face even greater demands for data security in the cloud question number 45 your organization is building an application running in Google Cloud correct ly software builds tests and regular deployments are done manually but you

1:03:31 want to reduce work for the team your organization wants to use Google Cloud managed solution to automate your build testing and deployment process which Google Cloud product or feature should your organization use and we have four options Cloud scheduler Cloud code Cloud build Cloud dep deployment manager so the right answer here is option C Cloud build deploy your application to app engine using the gcloud app deploy command this command automatically builds a container image by using the

1:04:17 cloud build service and then deploys that image to the app engine flexible environment question number 46 which of the following is a major cost benefit for adopting Cloud native architecture and we have four options managed services with high operational savings managed open source are open-source compatible Services continuous integration continuous delivery monitoring and automation recovery so the right answer here is option A managed services with high

1:05:04 operational savings a key cost benefit of cloud native architecture is that it is includes managed services that result in high operational savings because the customer is no longer responsible for them such manage services could include infrastructure is a service in which the cloud provider manages such things as Hardware storage and encryption platform is a service in which the service provider is responsible for identity and access management features and software is a service in which operations is to some extent managed

1:06:14 access C option D security Command Center so the right answer here is option security Command Center security Command Center is a centralized security and risk management platform for your Google Cloud resources it is a single tool that offers a variety of security features including gain centralized visibility and control discover misconfigurations and vulnerabilities report on and maintain compents detect threats targeting your Google Cloud

1:07:02 assets question number 48 an organization using Google Cloud wants to hierarchically organize and group resources as well as manage access control and configuration settings for container resources which Google product or service should the organization use and we have four options event T artifact registry container registry resource manager API so the right answer here is option D resource manager API the resource manager API service helps Google Cloud customers programmatically manage the container

1:07:48 Resources by creating reading and updating metadata for Google Cloud platform resource containers question number 49 your organization needs to establish private network connectivity between its on premises Network and its workloads running in Google Cloud you need to be able to set up the connection as soon as possible which Google Cloud product or feature should you use and we have four options Cloud interconnect direct bearing Cloud VPN Cloud

1:08:33 CDN so the right answer here is option C cloudvpn cloudvpn setup can be done instantly and through it travels over internet it is private in nature Cloud interconnect needs physically dedicated connection question number 50 a credit card company has moved its applications to Google Cloud its customer data is stored across cloud storage data store and big quy and is used by applications and employees across the firm which Google Cloud

1:09:19 solution should you use for the detection and classification of the stored sensitive data data and we have four options Cloud armor cloud data loss prevention risk manager security Command Center so the right answer here is option b cloud data loss prevention the cloud data loss prevention service enables the discovery detection and classification of stored sensitive data with cloud data loss prevention you can create dashboards and audit reports and automate tagging remediation or policy based on findings connect DLP

1:10:04 results into security Command Center data catalog or export to your own s or governance tool for further analysis question number 51 your organizing ation is developing a mobile app and wants to select a fully featured cloud-based compute platform for it which Google Cloud product or feature should your organization use and we have four options Google kues engine Firebase Cloud functions app engine so the right answer here is option b

1:10:51 Firebase Firebase is Google's mobile development platform question number 52 your organization is developing a global multiplayer game and requires a database that can constantly capture player statistics the most critical requirement of the database is that it can serve information for game lader vots and return consistent ranking at any given time across game players all over the world World the game is rapidly developing following with almost unlimited growth in the number of players which Google Cloud product should the organization choose

1:11:36 and we have four options fire store Cloud spanner Cloud SQL bare metal so the right answer here is option b Cloud spanner Cloud spanner is a fully managed relational database with unlimit limited horizontal scalability strong consistency and up to 99.999% availability because it is both Global and Unlimited in scale it is the most appropriate choice in the scenario it is highly available with zero scheduled downtime and online schema changes it allows developers to focus on Innovation innovating gaming functions because it eliminates manual tasks with

1:12:22 capabilities like automatic sharding that are feature of cloud SQL spanner provides a globally consistent database that can keep inventry or match history such as the player information providing and gaining later boards for massive player populations any anywhere anywhere in the world question number 53 your company has been using a shared facility for data storage and will be migrating to Google Cloud one of the internal applications uses Linux custom images that need to be migrated which Google Cloud product should you use to maintain

1:13:08 the custom images and we have four options option A app engine flexible environment option b compute engine option C app engine standard environment option D Google communities engine so the right answer here is option b compute engine you can use one of the following image types public and custom images question number 54 a news media chained with over 200 Publications plans to build a scalable secure and

1:13:54 serverless document database with a powerful query engine that can be added with mobile and web apps which Google Cloud product are service should the organization use and we have four options memor store Cloud big table cloudsql fire store so the right answer here is option D fire store so F store is a scalable secured and serverless nosql database doent database with a powerful query engine that can be added to mobile and web apps memory store is an inmemory data store best used to build application catches Cloud big table is Google's fully managed product and is a nosql big data

1:14:41 database service it is a cloud native nosql wide column store for large scale low latency workloads including personalization hardtech and recommendation engines it is not the best ideal database for a search engine that can be added with mobile and web apps cloudsql is a relational database service and is not suitable for these use case it is most commonly used in lift and shift of on premises SQL databases to the cloud large scale SQL data analytics supporting content management system data store storage and scalability and managing databases using infrastructure as code

1:15:31 question number 55 your organization wants to migrate its data Management Solutions to Google Cloud because it needs to dynamically scale up or down and to run transaction SQL queries against is historical data and scale which Google Cloud product or service should your organization use and we have four options bigquery Cloud big table Pub sub Cloud spanner so the right answer here is option D Cloud spanner so Cloud spanner is a fully managed Mission critical relational database service it is a it is designed to provide a scalable online transaction processing database with high avability

1:16:16 and strong consisteny consistency at global scale question number 56 which of the following are always the responsibility of customers using the public Cloud choose two answers and we have four options web client protection data protection network controls patch management so the right answer here is option a web client production option b data protection this is security of the client that is being used by the customers to access the web content is the customers's responsibility management classification and un plans

1:17:04 obligation adherence are the customers responsibility configuring managing and securing network controls are shared responsibilities in infrastructure as a service and platform as a service models however the cloud provider is responsible primarily for network controls in the software as a service model patch mark management is a shared responsibility in infrastructure as a service and platform as a service the cloud provider manages patches in the software as a service model question number 57 your organization needs to categorize objects in a large group of static images using

1:17:49 machine learning which Google Cloud product or service should your organizer I ation use and we have four options big query ml autom ml video intelligence Cloud Vision API autom ml tables so the right answer here is option C Cloud Vision API so Vision API can assign labels to images and quickly classify them into millions of predefined categories detect objects and faces read printed and handwritten text and build valuable metadata into your image

1:18:43 catalog question number 58 a devops team is responsible for maintaining and analyzing system and application rules for an application running across several instances on gole Google Cloud platform what steps should the team take to ensure the Integrity of the logs generated on these instances choose two answers and we have four options option A Implement log versioning on log buckets in cloud storage option b copy the logs to another project with a different owner option C set the logging level to only collect log outputs for critical messages option D export all lock files to

1:19:30 bigquery so the right answer here is option A Implement log versioning on log buckets in cloud storage and option b copy the logs to another project with a different owner so here are two things you could do to protect the Integrity of your log files Implement log versioning on log buckets in cloud storage to prevent losing or overring over written data if an unauthorized person gains access the cloud storage service automatically encrypts all data before it is return returned to the log buckets still with versioning you can increase security by forcing a new version to be saved

1:20:17 whenever an object in a log bucket is changed copy the logs to another project with a different owner to require two people to have ownership of the logs question number 59 which Google Cloud product is designed to reduce the risk of handling personal identifiable information and we have four options cloud storage Google Cloud armor cloud data loss prevention secret manager so the right answer here is option C cloud data loss

1:21:03 prevention cloud data loss prevention fully managed service designed to help you discover classify and protect your most sensitive data question number 160 your client has multiple ongoing projects and to remove conflicts has asked you to device a way to segregate service level resources such as the compute storage and networking resources being used by various projects which of the following should you use and we have four options folders projects labels and tags so the right answer here

1:21:50 is option b projects projects constitute service level resources such as compute storage and networking resources folders are used for projects rather than service level resources labels are used to annotate resources constituting projects and are the best choice for granular level cost tracking a tag is a string of characters added to a resource tags field tags cannot be created separately and not not separate

1:22:45 resources question number 61 your organization is migrating to Google Cloud as a part of that effort it needs to move bytes of data from on premes file servers to cloud storage your organization wants the migration process to be automated and to be managed by Google your organization has an existing dedicated interconnect connection that it wants to use which Google Cloud product or feature should your organization use and we have four options storage transfer service migrate for anos big query data transfer service transfer Appliance so the right answer here is

1:23:31 option A Storage transfer service question number 62 your organization is looking for network connectivity with Google cloud between its own one premises Network and Google Cloud the network connectivity must allow encrypted traffic to the Google cloud and have higher throughput which of the following networking Solutions should you use we have four options Cloud VPN Cloud interconnect Cloud router traffic director so the right answer here is

1:24:17 option b Cloud interconnect Cloud interconnect extends your on prises network to Google's Network through a highly available low latency connection you can use dedicated interconnected interconnect to connect directly to Google or use partner interconnect to connect to Google through a supported service provider question number 63 your organization needs to analyze data in order to gather insights into its daily operations you

1:25:02 only want to pay for the data you store and the queries you perform which Google Cloud product should your organization choose for its data analytics Warehouse we have four options Cloud SQL data BR Cloud spanner B query so the right answer here is option D bqu bqu is an Enterprise data warehouse for large amounts of relational structured data question number

1:25:49 64 you are managing the development of new application you need a solution that will meet the following requirements the developers should focus on writing code deployment should be zero configuration the developer should not manage infrastructure the service should be scalable and accommodate surges in traffic without provisioning patching or monitoring applications should be safe from security threats which Google Cloud solution should you use and we have four options app engine Cloud functions confidentials VMS even track so the right answer here

1:26:34 is option A app engine app engine is a fully managed serverless platform that helps to build highly scalable and secure applications app engine is suited to applications that have multiple functionalities behaving in various interrelated ways question number 65 your organization wants to run a container based application on Google Cloud this application is expected to increase in complexity you have a security need for fine grained control of traffic between

1:27:21 the containers you also have a operational lead to exercise fine grain control over the application scaling policies what Google Cloud product or feature should your organization use and we have four options Google kuber's engine cluster app engine Cloud run compute engine virtual machines so the right answer here is option A Google kues engine cluster question number 66 a team of cloud Engineers is working on developing and deploying a interiorized application

1:28:08 that will process and serve a large amount of image data in cloud storage the data must be invocable via request or events which Google Cloud compute service should the team use so that there is there are no infrastructure management problems and we have four options Cloud build Cloud code Cloud run Cloud deploy so the right answer here is option C Cloud run so Cloud run is a fully managed serverless compute platform that enables the development and deployment of a containerized application invocable via request are events using Cloud run would

1:28:56 avoid the problem of infrastructure management because it is a fully managed service question number 67 which Google Cloud product or future makes specific recommendations based on security risks and compliance violations and we have four options option A Google Cloud firewalls option b security Command Center option C Cloud deployment manager option D Google Cloud armor so the right answer here is option b security Command Center

1:29:59 question number 68 which of the following scenarios is not suitable for a Content delivery Network choose two answers and we have four options option A a website for a small construction company located in the United States option b a global retail company with customers in Europe and America option C a family history website with with only few visitors annually option D a global media website that provides news in multiple languages so the right answer here is option A a website for a small construction company located in unit the United

1:30:46 States and option C a family history website with only a few visitors annually a website with users located in a specific geographic area would not benefit from a Content delivery Network so content delivery networks are especially usage for large complex websites with users spread across the globe and websites are mobile apps with lots of dynamic content the small company will most likely not need a CDN because its customers are Geographic Ally closer to the

1:31:34 server question number 69 which Google Cloud product provides a consistent platform for multicloud application deployments and extends other Google cloud services to your organization's environment and we have four options

…