Download Cloud Digital Leader Certification.docx and more Exams Nursing in PDF only on Docsity!
Cloud Digital Leader Certification
You decide to migrate your on-premises environment to the cloud You need to determine which resource components still need to be assigned ownership. Which two functions are owned by a public cloud provider? Hardware maintenance Infrastructure architecture Infrastructure deployment automation Hardware capacity management Fixing application security issues - correct answer Hardware Maintenance and Hardware capacity Management Your organization stores highly sensitive data on premises that cannot be sent over the public internet The data must be processed both on-premises and in the cloud What should your organization do? Configure Identity-Aware Proxy (IAP) in your Google Cloud VPC network Create a Cloud VPN tunnel between Google Cloud and your data center Order a Partner Interconnect connection with your network provider Enable Private Google Access in your Google Cloud VPC network. - correct answer Order a Partner Interconnect (for Sensitive data - can't be shared over public cloud) Which Google Cloud service or feature lets you build machine learning models using Standard SQL and data in a data warehouse'? BigQuery ML TensorFlow AutoML Tables Cloud Bigtable ML - correct answer BigQuery ML
Your organization needs to plan its cloud infrastructure expenditures Which should your organization do? Review cloud resource costs frequently because costs change often based on use Review cloud resource costs annually as part of planning your organizations overall budget If your organization uses only cloud resources, infrastructure costs are no longer part of your overall budget Involve fewer people in cloud resource planning than your organization did for on¬ premises resource planning - correct answer Review cloud resource costs frequently because costs change often based on use You are migrating workloads to the cloud The goal of the migration is to serve customers worldwide as quickly as possible According to local regulations certain data is required to be stored in a specific geographic area and it can be served worldwide You need to design the architecture and deployment for your workloads. What should you do? Select a public cloud provider that is only active in the required geographic area Select a private cloud provider that globally replicates data storage for fast data access Select a public cloud provider that guarantees data location in the required geographic area. Select a private cloud provider that is only active in the required geographic area. - correct answer Select a public cloud provider that guarantees data location in the required geographic area. Your manager wants to restrict communication of all virtual machines with internet access; with resources in another network; or with a resource outside Compute Engine It is expected that different teams will create new folders and projects in the near future. How would you restrict all virtual machines from having an external IP address? Define an organization policy at the root organization node to restrict virtual machine instances from having an external IP address Define an organization policy on all existing folders to define a constraint to restrict virtual machine instances from having an external IP address.
Virtual Public Cloud Compute Engine Anthos - correct answer Anthos Your organization runs many workloads in different Google Cloud projects, each Itnked to the same billing account Each project s workload costs can vary from month to month but the overall combined cost of all projects is relatively stable Your organization needs to optimize its cost What should your organization do? Purchase a commitment per project for each projects usual minimum Create a billing account per project and link each project to a different billing account Turn on committed use discount sharing, and create a commitment for the combined usage Move all workloads from all different projects into one single consolidated project - correct answer Create a billing account per project and link each project to a different billing account Your organization wants an economical solution to store data such as files, graphical images, and videos and to access and share them securely Which Google Cloud product or service should your organization use? Cloud Storage Cloud SQL Cloud Spanner BigQuery - correct answer Cloud Storage Your organization is developing an application that will manage payments and online bank accounts located around the world The most critical requirement for your database is that each transaction is handled consistently. Your organization anticipates almost unlimited growth in the amount of data stored Which Google Cloud product should your organization choose? Cloud SQL
Cloud Storage Firestore Cloud Spanner - correct answer Cloud Spanner The operating systems of some of your organization s virtual machines may have a security vulnerability How can your organization most effectively identify all virtual machines that do not have the latest security update? View the Security Command Center to identify virtual machines running vulnerable disk images. View the Compliance Reports Manager to identify and download a recent PCI audit View the Security Command Center to identify virtual machines started more than 2 weeks ago. View the Compliance Reports Manager to identify and download a recent SOC 1 audit. - correct answer View the Security Command Center to identify virtual machines running vulnerable disk images. Your company's development team is building an application that will be deployed on Cloud Run You are designing a Cl/CD pipeline so that any new version of the application can be deployed in the fewest number of steps possible using the Cl/CD pipeline you are designing You need to select a storage location for the images of the application after the Cl part of your pipeline has built them. What should you do? Create a Compute Engine image containing the application Store the images in Container Registry. Store the images in Cloud Storage Create a Compute Engine disk containing the application - correct answer Store the images in Container Registry. Your organization is developing a mobile app and wants to select a fully featured cloud-based compute platform for it Which Google Cloud product or feature should your organization use'? Google Kubenetes Engine
How should a multinational organization that is migrating to Google Cloud consider security and privacy regulations to ensure that it is in compliance with global standards? Comply with data security and privacy regulations in each geographical region Comply with regional standards for data security and privacy, because they supersede all international regulations Comply with international standards for data security and privacy, because they supersede all regional regulations Comply with regional data security regulations, because they're more complex than privacy standards. - correct answer Comply with data security and privacy regulations in each geographical region Each of the three cloud service models— infrastructure as a service (laaS), platform as a service (PaaS), and software as a service (SaaS)— offers benefits between flexibility and levels of management by the cloud provider and the customer Why would SaaS be the right choice of service model? You want a balance between flexibility for the customer and the level of management by the cloud provider. You want to minimize the level of management by the customer. You want to maximize flexibility for the customer You want to be able to shift your emphasis between flexibility and management by the cloud provider as business needs change - correct answer You want to minimize the level of management by the customer. Your large and frequently changing organization s user information is stored in an on-premises LDAP database The database includes user passwords and group and organization membership. How should your organization provision Google accounts and groups to access Google Cloud resources? Replicate the LDAP infrastructure on Compute Engine Use the Firebase Authentication REST API to create users Use Google Cloud Directory Sync to create users Use the Identity Platform REST API to create users - correct answer Use Google Cloud Directory Sync to create users
Your organization needs to restrict access to a Cloud Storage bucket Only employees who are based in Canada should be allowed to view the contents What is the most effective and efficient way to satisfy this requirement? Deploy the Cloud Storage bucket to a Google Cloud region in Canada. Configure Google Cloud Armor to allow access to the bucket only from IP addresses based in Canada Give each employee who is based in Canada access to the bucket Create a group consisting of all Canada-based employees, and give the group access to the bucket - correct answer Create a group consisting of all Canada-based employees, and give the group access to the bucket Your organization is releasing its first publicly available application in Google Cloud The application is critical to your business and customers and requires a 2-hour SLA How should your organization set up support to minimize costs? Enroll in Premium Support Enroll in Enhanced Support. Enroll in Standard Support Enroll in Basic Support. - correct answer Enroll in Enhanced Support. As your organization increases its release velocity the VM-based application upgrades take a long time to perform rolling updates due to OS boot times You need to make the application deployments faster Migrate your VMs to the cloud, and add more resources to them Convert your applications into containers Increase the resources of your VMs. Automate your upgrade rollouts - correct answer Automate your upgrade rollouts
Configure two-factor authentication in the Google domain. Remove the Google account from all lAM policies, Configure BeyondCorp and Identity-Aware Proxy in the Google domain Configure single sign-on in the Google domain - correct answer Configure single sign-on in the Google domain Your organization consists of many teams. Each team has many Google Cloud projects Your organization wants to simplify the management of identity and access policies for these projects How can you group these projects to meet this goal? Group each team s projects into a separate domain. Assign labels based on the virtual machines that are part of each team s projects. Use folders to group each teams projects Group each team s projects into a separate organization node - correct answer Use folders to group each teams projects Your organization is developing an application that will capture a large amount of data from millions of different sensor devices spread all around the world Your organization needs a database that is suitable for worldwide, high-speed data storage of a large amount of unstructured data Which Google Cloud product should your organization choose? Firestore Cloud Data Fusion Cloud SQL Cloud Bigtable - correct answer Cloud Bigtable You are a program manager within a Software as a Service (SaaS) company that offers rendering software for animation studios Your team needs the ability to allow scenes to be scheduled at will and to be interrupted at any time to restart later Any individual scene rendering takes less than 12 hours to complete, and there is no service-level agreement (SLA) for the completion time for all scenes Results will be stored in a global Cloud Storage bucket The compute resources are not bound to any single geographical location. This software needs to run on Google Cloud in a cost- optimized way. What should you do?
Deploy the application on Compute Engine using preemptible instances Develop the application so it can run in an unmanaged instance group. Create a reservation for the minimum number of Compute Engine instances you will use Start more instances with fewer virtual centralized processing units (vCPUs) instead of f - correct answer Deploy the application on Compute Engine using preemptible instances Your organization is developing a plan for migrating to Google Cloud What is a best practice when initially configuring your Google Cloud environment? Create a project via the Google Cloud Console per department in your company. Define your resource hierarchy with an organization node on top. Create projects based on team members requests Make every member of your company the project owner - correct answer Define your resource hierarchy with an organization node on top. Your organization needs to establish private network connectivity between its on- premises network and its workloads running in Google Cloud You need to be able to set up the connection as soon as possible Which Google Cloud product or feature should you use? Cloud Interconnect Direct Peering Cloud VPN Cloud CDN - correct answer Cloud VPN (Can use interconnect or Cloud VPN, but cVPN is faster) Your organization offers public mobile apps and websites You want to migrate to a Google Cloud based solution for checking and maintaining your users' usernames and passwords and controlling their access to different resources based on their identity Which should your organization choose'?
BigQuery Data Transfer Service MySQL batch insert Database Migration Service Cloud Composer - correct answer Database Migration Service Your company is running the majority of its workloads in a co located data center The workloads are running on virtual machines (VMs) on top of a hypervisor and use either Linux or Windows server editions. As part of your company s transformation strategy, you need to modernize workloads as much as possible by adopting current cloud-native technologies You need to migrate the workloads into Google Cloud. Wha should you do? Export the VMs into VMDK format, and import them into Compute Engine Export the VMs into VMDK format, and import them into Google Cloud VMware Engine Migrate the workloads using Migrate for Compute Engine Migrate the workloads using Migrate for Anthos. - correct answer Migrate the workloads using Migrate for Anthos. Your organization is running all its workloads in a private cloud on top of a hypervisor Your organization has decided it wants to move to Google Cloud as quickly as possible Your organization wants minimal changes to the current environment, while using the maximum amount of managed services Google offers. Migrate the workloads to Google Cloud VMware Engine Migrate the workloads to Compute Engine Migrate the workloads to Bare Metal Solution Migrate the workloads to Google Kubernetes Engine - correct answer Migrate the workloads to Compute Engine Your organization is building an application running in Google Cloud Currently software builds tests and regular deployments are done manually, but you want to reduce work for the team Your organization wants to use Google Cloud managed solutions to automate your build: testing, and deployment process. Which Google Cloud product or feature should your organization use?
Cloud Scheduler Cloud Code Cloud Build Cloud Deployment Manager - correct answer Cloud Build Your organization is developing and deploying an application on Google Cloud Tracking your Google Cloud spending needs to stay as simple as possible What should you do to ensure that workloads in the development environment are fully isolated from production workloads? Apply a unique tag to the development resources. Associate the development resources with their own network Associate the development resources with their own billing account Put the development resources in their own project - correct answer Associate the development resources with their own billing account
