CDL Practice Exam Flashcards
Your manager wants to restrict communication of all virtual machines with internet access; with resources in another network; or with a resource outside Compute
Engine. It is expected that different teams will create new folders and projects in the near future. How would you restrict all virtual machines from having an external IP address?
A. Define an organization policy at the root organization node to restrict virtual machine instances from having an external IP address
B. Define an organization policy on all existing folders to define a constraint to restrict virtual machine instances from having an external IP address
C. Define an organization policy on all existing projects to restrict virtual machine instances from having an external IP address
D. Communicate with the different teams and agree that each time a virtual machine is created, it must be configured without an external IP address
A) To ensure consistency and compliance across your organization, enforce Organization Policies that restrict VMs from having external IP addresses. Organization Policies provide centralized control and can prevent users from creating VM instances with external IP addresses across different projects and folders within your organization.
Your company’s development team is building an application that will be deployed on Cloud Run. You are designing a CI/CD pipeline so that any new version of the application can be deployed in the fewest number of steps possible using the CI/CD pipeline you are designing. You need to select a storage location for the images of the application after the CI part of your pipeline has built them. What should you do?
A. Create a Compute Engine image containing the application
B. Store the images in Container Registry
C. Store the images in Cloud Storage
D. Create a Compute Engine disk containing the application
B) Select Google Container Registry (GCR) as the storage location for your application images. GCR allows you to securely store and manage container images in a private registry. It is tightly integrated with other Google Cloud services, including Cloud Run, making it a convenient choice.
Each of the three cloud service models - infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS) - offers benefits between flexibility and levels of management by the cloud provider and the customer. Why would SaaS be the right choice of service model?
A. You want a balance between flexibility for the customer and the level of management by the cloud provider
B. You want to minimize the level of management by the customer
C. You want to maximize flexibility for the customer.
D. You want to be able to shift your emphasis between flexibility and management by the cloud provider as business needs change
B) The main benefit of SaaS is that it offloads all infrastructure and application management to the SaaS vendor
As your organization increases its release velocity, the VM-based application upgrades take a long time to perform rolling updates due to OS boot times. You need to make the application deployments faster. What should your organization do?
A. Migrate your VMs to the cloud, and add more resources to them
B. Convert your applications into containers
C. Increase the resources of your VMs
D. Automate your upgrade rollouts
b) To make application deployments faster and improve release velocity, your organization should consider converting the applications into containers. Containers provide a lightweight and isolated runtime environment for applications, allowing for faster deployment and scaling.
Your organization uses Active Directory to authenticate users. Users’ Google account access must be removed when their Active Directory account is terminated.
How should your organization meet this requirement?
A. Configure two-factor authentication in the Google domain
B. Remove the Google account from all IAM policies
C. Configure BeyondCorp and Identity-Aware Proxy in the Google domain
D. Configure single sign-on in the Google domain
D) SSO allows for centralized user management, where user accounts and access permissions are managed in a single identity provider (such as Active Directory). When a user’s Active Directory account is terminated, SSO provides a centralized point to revoke access across multiple applications and services, including Google accounts.
You are a program manager for a team of developers who are building an event-driven application to allow users to follow one another’s activities in the app. Each time a user adds himself as a follower of another user, a write occurs in the real-time database.
The developers will develop a lightweight piece of code that can respond to database writes and generate a notification to let the appropriate users know that they have gained new followers. The code should integrate with other cloud services such as Pub/Sub, Firebase, and Cloud APIs to streamline the orchestration process. The application requires a platform that automatically manages underlying infrastructure and scales to zero when there is no activity. Which primary compute resource should your developers select, given these requirements?
A. Google Kubernetes Engine
B. Cloud Functions
C. App Engine flexible environment
D. Compute Engine
B) Cloud Functions is a serverless compute service that allows you to run event-driven code in a fully managed environment. It is designed to execute short-lived functions in response to various events, such as database writes, file uploads, HTTP requests, and Pub/Sub messages.
Your organization is developing an application that will capture a large amount of data from millions of different sensor devices spread all around the world. Your organization needs a database that is suitable for worldwide, high-speed data storage of a large amount of unstructured data.
Which Google Cloud product should your organization choose?
A. Firestore
B. Cloud Data Fusion
C. Cloud SQL
D. Cloud Bigtable
D) Cloud Bigtable =IoT solution
For worldwide, high-speed data storage of a large amount of UNSTRUCTURED data captured from millions of sensor devices, the suitable Google Cloud product for your organization would be Cloud Bigtable.
Cloud Bigtable is a fully managed, highly scalable, and high-performance NoSQL database service designed for large-scale applications that require low-latency and high-throughput data storage.
IoT solution
Your organization is building an application running in Google Cloud. Currently, software builds, tests, and regular deployments are done manually, but you want to reduce work for the team. Your organization wants to use Google Cloud managed solutions to automate your build, testing, and deployment process.
Which Google Cloud product or feature should your organization use?
A. Cloud Scheduler
B. Cloud Code
C. Cloud Build
D. Cloud Deployment Manager
Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects?
C) Cloud Build is a fully managed CI/CD platform that automates the build, test, and deployment of your applications. It provides a reliable and scalable infrastructure to compile source code, run unit tests, and package artifacts for deployment. Cloud Build integrates with popular source code repositories like GitHub and Bitbucket, allowing you to trigger builds automatically on code changes or schedules
Your organization needs to build streaming data pipelines. You don’t want to manage the individual servers that do the data processing in the pipelines. Instead, you want a managed service that will automatically scale with the amount of data to be processed.
Which Google Cloud product or feature should your organization choose?
A. Pub/Sub
B. Dataflow
C. Data Catalog
D. Dataprep by Trifacta
B) Dataflow is a fully managed service that allows you to build and run streaming data pipelines without having to manage the underlying infrastructure. Dataflow will automatically scale your pipelines to meet the demands of your data.
Note: a pipeline is a sequence of steps that are executed to process and analyze data. Pipelines are commonly used in data engineering and machine learning to automate complex data workflows.
Your organization is building an application running in Google Cloud. Currently, software builds, tests, and regular deployments are done manually, but you want to reduce work for the team. Your organization wants to use Google Cloud managed solutions to automate your build, testing, and deployment process.
Which Google Cloud product or feature should your organization use?
A. Cloud Scheduler
B. Cloud Code
C. Cloud Build
D. Cloud Deployment Manager
C. Cloud Build is a fully managed CI/CD platform that automates the build, test, and deployment of your applications. It provides a reliable and scalable infrastructure to compile source code, run unit tests, and package artifacts for deployment. Cloud Build integrates with popular source code repositories like GitHub and Bitbucket, allowing you to trigger builds automatically on code changes or schedules
Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects?
A. Cloud Logging
B. Identity and Access Management
C. Google Cloud Armor
D. Security Command Center
B. IAM - Centrallized control over all users.
Key word = projects
Your organization needs to establish private network connectivity between its on-premises network and its workloads running in Google Cloud. You need to be able to set up the connection as soon as possible. Which Google Cloud product or feature should you use?
A. Cloud Interconnect
B. Direct Peering
C. Cloud VPN
D. Cloud CDN
A) Cloud Interconnect ~ data transfers:
Google Cloud Interconnect is a suite of products that enables you to connect your on-premises network to Google Cloud. This allows you to transfer data between your on-premises network and Google Cloud at high speeds and with low latency.
Your organization is developing a mobile app and wants to select a fully featured cloud-based compute platform for it.
Which Google Cloud product or feature should your organization use?
A. Google Kubernetes Engine
B. Firebase
C. Cloud Functions
D. App Engine
B) It’s a tricky question, because it refers to compute engine, and according to Google cheatsheet, Compute services do not include Firebase, but App Engine is included. However, one must notice, that Firebase is part of a completely separate ecosystem of services, dedicated to mobile apps, which also includes specialized compute services. So, the correct answer is B
Your company has been using a shared facility for data storage and will be migrating to Google Cloud. One of the internal applications uses Linux custom images that need to be migrated. Which Google Cloud product should you use to maintain the custom images?
A. App Engine flexible environment
B. Compute Engine
C. App Engine standard environment
D. Google Kubernetes Engine
B) You can use Google Compute Engine (GCE) to create and manage virtual machines (VMs) based on custom images. GCE enables you to create new VM instances and specify your custom image as the boot disk for those instances.
Your organization wants to migrate its data management solutions to Google Cloud because it needs to dynamically scale up or down and to run transactional SQL queries against historical data at scale. Which Google Cloud product or service should your organization use?
A. BigQuery
B. Cloud Bigtable
C. Pub/Sub
D. Cloud Spanner
D) Cloud Spanner is a GLOBAL distributed, horizontally SCALABLE, and strongly CONSISTENT RELATIONAL DATABASE service provided by Google Cloud. Cloud Spanner is well-suited for TRANSACTIONAL WORKLOADS with strong CONSISTENCY
requirements across multiple regions.
If your focus is more on performing transactional SQL queries against historical data, ensuring strong consistency, and managing relational database workloads, Cloud Spanner would be a suitable choice
Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public internet. The workloads running on those virtual machines need to access BigQuery and Cloud Storage, using their publicly accessible interfaces, without violating the security requirement.
Which Google Cloud product or feature should your organization use?
A. Identity-Aware Proxy
B. Cloud NAT (network address translation)
C. VPC internal load balancers
D. Private Google Access
D. Private Google Access (PGA) allows you to access Google APIs and services from your on-premises network without exposing your workloads to the public internet. This is achieved by creating a private connection between your on-premises network and Google Cloud Platform (GCP).
Which Google Cloud product is designed to reduce the risks of handling personally identifiable information (PII)?
A. Cloud Storage
B. Google Cloud Armor
C. Cloud Data Loss Prevention
D. Secret Manager
C
(?)
Your organization is migrating to Google Cloud. As part of that effort, it needs to move terabytes of data from on-premises file servers to Cloud Storage. Your organization wants the migration process to be automated and to be managed by Google. Your organization has an existing Dedicated Interconnect connection that it wants to use. Which Google Cloud product or feature should your organization use?
A. Storage Transfer Service
B. Migrate for Anthos
C. BigQuery Data Transfer Service
D. Transfer Appliance
A) Storage Transfer Service
Your organization needs to analyze data in order to gather insights into its daily operations. You only want to pay for the data you store and the queries you perform. Which Google Cloud product should your organization choose for its data analytics warehouse?
A. Cloud SQL
B. Dataproc
C. Cloud Spanner
D. BigQuery
D) Google BigQuery is a fully managed, serverless data warehouse that offers high-performance analytics on large datasets. It is designed to handle massive amounts of data and provides a scalable solution for your data analytics needs.
By leveraging Google BigQuery, your organization can efficiently analyze large volumes of data, gain actionable insights, and only pay for the resources and queries consumed, making it a cost-effective and scalable solution for your data analytics warehouse needs.
What is BQ?
Data warehouse
- full managed (no infra)
- peta/terabyte scale
- run analytics on vast amounts of data in real time
- Used SQL
-PAYG
What is Cloud Spanner?
Cloud Spanner = relational DB
- fully managed
- Mission critical workloads
- transactional consistency @ global scale
- HA
- SQL
What is Cloud Bigtable
A fully-managed NoSQL DB for large analytics & operational workloads
Note: Same database that powers many core Google services, including Search, Analytics, Maps, and Gmail.
What is Cloud Functions?
A lightweight compute option (FaaS)
- serverless
- no need to manage runtime or server
Used by uploading single purpose code to respond to cloud events
**Your organization is developing an application that will manage payments and online bank accounts located around the world. The most critical requirement for your database is that each transaction is handled consistently. Your organization anticipates almost unlimited growth in the amount of data stored. Which Google Cloud product should your organization choose?
A. Cloud SQL
B. Cloud Storage
C. Firestore
D. Cloud Spanner
D. Cloud Spanner is a fully managed, mission-critical, relational database service that offers transactional consistency at global scale
Your organization is moving an application to Google Cloud. As part of that effort, it needs to migrate the application’s working database from another cloud provider to Cloud SQL. The database runs on the MySQL engine. The migration must cause minimal disruption to users. Data must be secured while in transit.
Which should your organization use?
A. BigQuery Data Transfer Service
B. MySQL batch insert
C. Database Migration Service
D. Cloud Composer
C) DMS can migrate your database with minimal disruption to users. It uses a continuous replication process to migrate your data to Cloud SQL. This means that your application can continue to read and write data to the database during the migration.
Your organization wants to predict the behavior of visitors to its public website. To do that, you have decided to build a machine learning model. Your team has database-related skills but only basic machine learning skills, and would like to use those database skills.
Which Google Cloud product or feature should your organization choose?
A. BigQuery ML
B. LookML
C. TensorFlow
D. Cloud SQL
A) BigQuery ML lets you create and execute machine learning models in BigQuery using standard SQL queries. BigQuery ML democratizes machine learning by letting SQL practitioners (DB users) build models using existing SQL tools and skills. BigQuery ML increases development speed by eliminating the need to move data.