I85PREP
⌘ K
Google Cloud Digital Leader study materials
Google Cloud Digital Leader study resources

Google Cloud Digital Leader practice questions

One question at a time. Build your Google Cloud Digital Leader understanding.

First 50 of 190 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloud Adoption and Implementation

A retail company wants to move its on-premises workloads to the cloud to reduce capital expenditure and scale during peak shopping seasons. Which benefit of cloud technology best describes this advantage?

  1. Open source compatibility
  2. Elasticity and scalability Correct answer.
  3. Data sovereignty
  4. Vendor lock-in reduction

Explanation

Elasticity and scalability allow a business to automatically adjust computing resources based on demand, which is ideal for handling seasonal traffic spikes without upfront capital investment. This is a core value proposition of cloud computing for retail workloads.

Question 2Cloud Adoption and Implementation

What is the primary difference between capital expenditure (CapEx) and operational expenditure (OpEx) in the context of cloud computing?

  1. CapEx is a recurring monthly cost while OpEx is a one-time investment
  2. CapEx involves upfront investment in physical infrastructure while OpEx involves pay-as-you-go cloud spending Correct answer.
  3. CapEx applies only to software licenses while OpEx applies to hardware
  4. CapEx and OpEx are identical in cloud financial models

Explanation

In cloud computing, CapEx refers to upfront investments in physical infrastructure like servers and data centers, while OpEx refers to ongoing operational costs such as pay-as-you-go cloud service fees. Moving to the cloud shifts spending from CapEx to OpEx, improving cash flow flexibility.

Question 3Cloud Adoption and Implementation

An organization wants to use a cloud deployment model where it maintains some workloads on-premises while running others in Google Cloud. Which deployment model does this describe?

  1. Public cloud
  2. Private cloud
  3. Hybrid cloud Correct answer.
  4. Community cloud

Explanation

A hybrid cloud model combines on-premises infrastructure (or a private cloud) with public cloud services like Google Cloud. This allows organizations to keep sensitive workloads on-premises while leveraging cloud scalability for other applications.

Question 4Cloud Adoption and Implementation

What role does a digital transformation champion play in an organization adopting cloud technology?

  1. They only manage the IT budget
  2. They advocate for and drive the adoption of cloud and digital technologies across the organization Correct answer.
  3. They replace the CTO role entirely
  4. They handle all technical implementation personally

Explanation

A digital transformation champion advocates for and drives cloud adoption across the organization. They help align business goals with technology solutions, build organizational buy-in, identify use cases for cloud, and support culture change necessary for successful digital transformation.

Question 5Cloud Adoption and Implementation

Which term describes the practice of running workloads across multiple cloud providers such as Google Cloud and AWS simultaneously?

  1. Hybrid cloud
  2. Multi-cloud Correct answer.
  3. Private cloud
  4. Edge computing

Explanation

Multi-cloud refers to using services from multiple cloud providers simultaneously. Organizations adopt multi-cloud strategies to avoid vendor lock-in, leverage best-of-breed services from different providers, and improve resilience by distributing workloads.

Question 6Cloud Adoption and Implementation

In the broad hybrid-IT terminology used by this scenario, an organization combines on-premises workloads with cloud workloads. Which strategy label fits?

  1. Full cloud migration
  2. Cloud-first strategy
  3. Hybrid cloud strategy Correct answer.
  4. Cloud-only deployment

Explanation

A hybrid cloud strategy involves maintaining some workloads on-premises while running others in the cloud. This approach allows organizations to gradually migrate, keep sensitive data on-premises, and leverage cloud scalability for other workloads.

Question 7Cloud Adoption and Implementation

What does the term 'cloud-native' mean in the context of application development?

  1. Applications that were originally built for on-premises and later moved to the cloud
  2. Applications designed from the ground up to leverage cloud capabilities like scalability, resilience, and managed services Correct answer.
  3. Applications that can only run on Google Cloud
  4. Applications built using only open-source tools

Explanation

Cloud-native applications are designed from the start to take full advantage of cloud computing capabilities. They typically use microservices, containers, CI/CD, and managed services to achieve scalability, resilience, and rapid deployment in cloud environments.

Question 8Cloud Adoption and Implementation

How does Google Cloud's 'pay-as-you-go' pricing model benefit businesses compared to traditional IT procurement?

  1. Businesses must pay for a minimum of one year upfront
  2. Businesses only pay for the resources they actually consume, reducing waste and upfront costs Correct answer.
  3. Businesses receive unlimited free resources
  4. The pricing model only applies to storage services

Explanation

Google Cloud's pay-as-you-go model charges businesses only for the cloud resources they actually use, billed by the second or minute depending on the service. This eliminates the need for large upfront capital investments and reduces waste from over-provisioning.

Question 9Cloud Adoption and Implementation

What is the benefit of using managed services in Google Cloud compared to self-managed infrastructure?

  1. Managed services require more operational overhead
  2. Managed services handle infrastructure maintenance, patching, and scaling, allowing teams to focus on business logic Correct answer.
  3. Managed services are always more expensive
  4. Managed services do not support security features

Explanation

Managed services in Google Cloud (like Cloud SQL, BigQuery, Cloud Run) handle operational tasks such as infrastructure provisioning, patching, backups, and scaling. This frees development teams to focus on building business applications rather than managing infrastructure.

Question 10Cloud Adoption and Implementation

What is the concept of 'total cost of ownership' (TCO) when comparing cloud and on-premises infrastructure?

  1. TCO only includes the hardware purchase price
  2. TCO includes all direct and indirect costs over the lifecycle, including hardware, software, personnel, facilities, and downtime Correct answer.
  3. TCO is only relevant for cloud computing
  4. TCO does not include labor costs

Explanation

Total cost of ownership (TCO) encompasses all direct and indirect costs over the entire lifecycle of an IT solution. This includes hardware, software licenses, personnel, facilities, power, cooling, maintenance, and downtime costs. Cloud often reduces TCO by eliminating many of these on-premises costs.

Question 11Cloud Adoption and Implementation

What does the term 'open standard' mean in the context of cloud computing, and why does Google Cloud emphasize it?

  1. Open standards mean all cloud services are free
  2. Open standards are publicly available technical specifications that enable interoperability and reduce vendor lock-in Correct answer.
  3. Open standards only apply to open-source software
  4. Open standards guarantee 100% uptime

Explanation

Open standards are publicly available technical specifications that allow different systems and platforms to work together. Google Cloud emphasizes open standards (like Kubernetes, TensorFlow, and Apache Beam) to give customers portability and reduce the risk of vendor lock-in.

Question 12Cloud Adoption and Implementation

What is the difference between IaaS (Infrastructure as a Service) and PaaS (Platform as a Service) in cloud computing?

  1. IaaS and PaaS are the same service model
  2. IaaS provides raw computing resources (VMs, storage, networks) while PaaS provides a managed platform for building and deploying applications Correct answer.
  3. PaaS provides more control over infrastructure than IaaS
  4. IaaS is only available for storage

Explanation

IaaS provides raw computing infrastructure like virtual machines, storage, and networking, giving customers full control over the operating system and applications. PaaS provides a managed platform (like App Engine) that handles infrastructure management so developers can focus on writing code.

Question 13Cloud Adoption and Implementation

A small business wants to adopt a customer relationship management (CRM) tool without installing or maintaining any software on its own servers. Which cloud service model best fits this need?

  1. Infrastructure as a Service (IaaS), where the business manages the CRM application and operating system
  2. Software as a Service (SaaS), where the provider hosts and manages the entire application accessed over the internet Correct answer.
  3. Platform as a Service (PaaS), where the business builds a custom CRM platform from scratch
  4. Database as a Service (DBaaS), where the business only rents a database to store CRM records

Explanation

Software as a Service (SaaS) delivers complete, provider-managed applications over the internet. With SaaS, customers do not install, maintain, or patch the software - they simply access it, typically via a web browser, and pay a subscription. Common examples include Google Workspace and Salesforce, which fit a small business wanting CRM without server management.

Question 14Cloud Adoption and Implementation

In Google Cloud's global infrastructure, what is an edge point of presence (edge PoP)?

  1. A data center that only stores archived data at the network edge
  2. A Google-operated point of presence located close to end users that caches content and routes traffic to reduce latency Correct answer.
  3. A private data center operated by a single customer inside a Google Cloud region
  4. A backup facility used only when a primary region fails

Explanation

Google Cloud operates edge points of presence (edge PoPs) in major cities and internet exchange points around the world. These edge locations sit close to end users, allowing services like Cloud CDN and Cloud Load Balancing to cache content and route traffic with lower latency than serving requests from a central region.

Question 15Cloud Adoption and Implementation

What is a common business risk for an organization that delays adopting cloud technology while competitors modernize?

  1. Lower long-term IT costs due to avoiding cloud subscriptions
  2. Slower product delivery, reduced scalability, and falling behind competitors in innovation Correct answer.
  3. Automatic compliance with all industry regulations
  4. Improved data security by keeping everything on-premises

Explanation

Organizations that postpone cloud adoption risk slower product delivery, limited scalability during demand spikes, higher capital expenditure, and reduced competitiveness as modernized competitors release features faster and leverage data and AI. Delaying transformation rarely preserves advantage; it typically widens the gap.

Question 16Cloud Adoption and Implementation

Google Cloud describes five business transformation benefits: intelligence, freedom, collaboration, trust, and sustainability. Which capability best exemplifies the 'freedom' benefit?

  1. Using open-source technologies and open standards to avoid vendor lock-in through portability Correct answer.
  2. Automatically encrypting customer data at rest by default
  3. Matching 100% of electricity consumption with renewable energy purchases
  4. Building ML models with pre-trained APIs

Explanation

The 'freedom' benefit reflects Google Cloud's emphasis on open-source technologies, open standards (such as Kubernetes and TensorFlow), and multicloud portability (such as Anthos), giving customers the flexibility to move workloads and avoid vendor lock-in.

Question 17Google infrastructure and application modernization decisions

A logistics company wants to migrate its legacy monolithic application to the cloud. Which migration strategy involves moving the application as-is without making changes?

  1. Refactor
  2. Rehost (lift and shift) Correct answer.
  3. Rebuild
  4. Replatform

Explanation

Rehosting, commonly called lift and shift, involves moving an application to the cloud without modifying its code or architecture. This is the fastest migration strategy and is often used for legacy applications where immediate cloud benefits like infrastructure scalability are desired.

Question 18Google infrastructure and application modernization decisions

Which Google Cloud compute service allows you to run containers without managing the underlying infrastructure or Kubernetes clusters?

  1. Compute Engine
  2. Google Kubernetes Engine (GKE)
  3. Cloud Run Correct answer.
  4. App Engine Standard

Explanation

Cloud Run is a fully managed serverless platform that allows you to run stateless containers without worrying about the underlying infrastructure. It automatically scales based on incoming requests and you pay only for the resources your container uses.

Question 19Google infrastructure and application modernization decisions

What is the primary benefit of containerization for application modernization?

  1. Containers eliminate the need for any operating system
  2. Containers package applications with their dependencies, ensuring consistent behavior across environments Correct answer.
  3. Containers can only run on Google Cloud
  4. Containers automatically fix application bugs

Explanation

Containerization packages an application along with all its dependencies, libraries, and configuration files into a single portable unit. This ensures the application runs consistently across development, testing, and production environments regardless of the underlying infrastructure.

Question 20Google infrastructure and application modernization decisions

Which Google Cloud service should a company use to manage and orchestrate containerized applications at scale?

  1. Cloud Functions
  2. Google Kubernetes Engine (GKE) Correct answer.
  3. Cloud Storage
  4. Cloud SQL

Explanation

Google Kubernetes Engine (GKE) is a managed Kubernetes service that automates the deployment, scaling, and management of containerized applications. It provides enterprise-grade orchestration for running containers at scale with features like auto-scaling and self-healing.

Question 21Google infrastructure and application modernization decisions

An organization wants to run event-driven code that automatically responds to Cloud Storage file uploads without provisioning servers. Which service should they choose?

  1. Compute Engine
  2. GKE
  3. Cloud Functions Correct answer.
  4. Cloud Spanner

Explanation

Cloud Functions is a serverless, event-driven compute platform that lets you run code in response to events from Google Cloud services. It can be triggered by Cloud Storage events like file uploads, Pub/Sub messages, and HTTP requests without any server management.

Question 22Google infrastructure and application modernization decisions

What is the primary business value of APIs in the context of cloud modernization?

  1. APIs replace the need for databases
  2. APIs enable different applications and services to communicate and share data securely Correct answer.
  3. APIs are only used for mobile applications
  4. APIs eliminate the need for security controls

Explanation

APIs (Application Programming Interfaces) enable different software applications and services to communicate with each other. In cloud modernization, APIs allow organizations to expose data and functionality as services, enabling integration between systems and creating new business opportunities.

Question 23Google infrastructure and application modernization decisions

Which Google Cloud product provides API management capabilities including analytics, developer portals, and security policies?

  1. Cloud Endpoints
  2. Apigee Correct answer.
  3. Cloud CDN
  4. Cloud Armor

Explanation

Apigee is Google Cloud's full-lifecycle API management platform. It provides capabilities for designing, securing, analyzing, and scaling APIs, along with a developer portal for API consumers. It is designed for enterprise API management use cases.

Question 24Google infrastructure and application modernization decisions

A startup wants to quickly prototype a web application without managing servers. Which Google Cloud compute option is most appropriate?

  1. Compute Engine with custom machine types
  2. App Engine Correct answer.
  3. Bare Metal Solution
  4. Google Kubernetes Engine with manual node pools

Explanation

App Engine is a fully managed platform-as-a-service (PaaS) that lets developers build and deploy web applications without managing the underlying infrastructure. It handles provisioning, scaling, and load balancing automatically, making it ideal for rapid prototyping.

Question 25Google infrastructure and application modernization decisions

What is Pub/Sub in Google Cloud, and what is its primary use case?

  1. A relational database for transactional workloads
  2. A messaging service for asynchronous event-driven communication between services Correct answer.
  3. A machine learning model training service
  4. A virtual private network service

Explanation

Pub/Sub is Google Cloud's fully managed messaging service that enables asynchronous, reliable communication between independent applications. It decouples senders (publishers) and receivers (subscribers), making it ideal for event-driven architectures, data streaming, and microservices communication.

Question 26Google infrastructure and application modernization decisions

What is the primary purpose of Google Cloud's Anthos platform?

  1. To provide a data warehouse for analytics
  2. To manage applications across on-premises, Google Cloud, and other cloud environments from a single platform Correct answer.
  3. To encrypt data at rest
  4. To provide CDN services for web applications

Explanation

Anthos is Google Cloud's application management platform that enables organizations to build, deploy, and manage applications across hybrid and multi-cloud environments. It provides a consistent development and operations experience across on-premises data centers and multiple cloud providers.

Question 27Google infrastructure and application modernization decisions

A media company needs to deliver video content to users worldwide with low latency. Which Google Cloud service should they use?

  1. Cloud Storage
  2. Cloud CDN Correct answer.
  3. Cloud SQL
  4. Cloud Spanner

Explanation

Cloud CDN (Content Delivery Network) caches content at Google's global edge locations to deliver it to users with low latency. It works with Cloud Load Balancing to accelerate content delivery for websites, videos, and APIs worldwide.

Question 28Google infrastructure and application modernization decisions

Which Google Cloud service allows organizations to run workloads on dedicated physical servers for licensing or compliance reasons?

  1. Compute Engine with sole-tenant nodes Correct answer.
  2. Cloud Functions
  3. App Engine
  4. Cloud Run

Explanation

Compute Engine sole-tenant nodes provide dedicated physical servers for your workloads. This is useful for organizations with licensing requirements tied to physical cores, compliance needs for workload isolation, or performance requirements that benefit from dedicated hardware.

Question 29Google infrastructure and application modernization decisions

What is the function of Cloud Load Balancing in Google Cloud?

  1. To store backup copies of data
  2. To distribute incoming network traffic across multiple backend instances to ensure reliability and performance Correct answer.
  3. To manage encryption keys
  4. To create virtual private networks

Explanation

Cloud Load Balancing distributes incoming traffic across multiple backend instances (VMs, containers, or serverless backends) to ensure no single instance is overwhelmed. It provides high availability, automatic scaling, and global traffic management.

Question 30Google infrastructure and application modernization decisions

An e-commerce company experiences unpredictable traffic spikes during flash sales. Which Google Cloud computing feature helps handle these spikes without manual intervention?

  1. Manual instance provisioning
  2. Autoscaling with managed instance groups Correct answer.
  3. Sole-tenant nodes
  4. Preemptible VMs only

Explanation

Autoscaling with managed instance groups automatically adds or removes VM instances based on metrics like CPU utilization or load. This allows applications to handle unpredictable traffic spikes during flash sales without manual intervention and scales down afterward to save costs.

Question 31Google infrastructure and application modernization decisions

What is the primary purpose of Google Cloud's Cloud Interconnect service?

  1. To create virtual machines
  2. To establish dedicated, high-bandwidth, low-latency connections between on-premises networks and Google Cloud Correct answer.
  3. To manage container images
  4. To provide serverless computing

Explanation

Cloud Interconnect provides dedicated, enterprise-grade connections between on-premises networks and Google Cloud. It offers higher bandwidth, lower latency, and more consistent networking compared to standard internet connections, available as Dedicated Interconnect or Partner Interconnect.

Question 32Google infrastructure and application modernization decisions

Which statement best describes the relationship between regions and zones in Google Cloud?

  1. A zone contains multiple regions
  2. Regions and zones are the same concept
  3. A region contains multiple zones, each being an isolated deployment area within the region Correct answer.
  4. Zones are only available in North America

Explanation

In Google Cloud, a region is a specific geographic area that contains multiple zones. Each zone is an isolated deployment area within a region with its own power, cooling, and networking. Distributing resources across zones provides high availability within a region.

Question 33Google infrastructure and application modernization decisions

Which Google Cloud service provides managed Memcached and Redis for in-memory data caching?

  1. Cloud SQL
  2. Memorystore Correct answer.
  3. Cloud Spanner
  4. Cloud Storage

Explanation

Memorystore is Google Cloud's fully managed in-memory data store service that supports both Redis and Memcached. It provides sub-millisecond data access for caching, session management, and real-time analytics, improving application performance.

Question 34Cloud Security, Risk and Compliance

What is the shared responsibility model in cloud security?

  1. The cloud provider is responsible for all security aspects
  2. The customer is responsible for all security aspects
  3. Security responsibilities are divided between the cloud provider and the customer Correct answer.
  4. Security is optional in cloud environments

Explanation

The shared responsibility model divides security responsibilities between the cloud provider and the customer. Google Cloud secures the underlying infrastructure (hardware, network, data centers), while customers are responsible for securing their data, access controls, application configurations, and workloads.

Question 35Cloud Security, Risk and Compliance

Which Google Cloud service provides centralized visibility into security threats and vulnerabilities across your Google Cloud environment?

  1. Cloud Armor
  2. Security Command Center Correct answer.
  3. Cloud IAM
  4. VPC Service Controls

Explanation

Security Command Center is Google Cloud's centralized security and risk management platform. It provides visibility into security threats, vulnerabilities, and misconfigurations across your Google Cloud environment, helping security teams detect and respond to threats.

Question 36Cloud Security, Risk and Compliance

What does the principle of least privilege mean in the context of Cloud IAM?

  1. Every user should have administrator access to simplify management
  2. Users should be granted only the minimum permissions needed to perform their job functions Correct answer.
  3. Permissions should be assigned at the organization level to all users
  4. Least privilege only applies to service accounts, not human users

Explanation

The principle of least privilege means granting users only the minimum permissions they need to perform their specific job functions. In Cloud IAM, this reduces the risk of unauthorized access and limits the blast radius if credentials are compromised.

Question 37Cloud Security, Risk and Compliance

Which Google Cloud feature automatically encrypts data at rest without requiring any customer configuration?

  1. Customer-managed encryption keys (CMEK)
  2. Client-side encryption
  3. Default encryption at rest Correct answer.
  4. Cloud HSM

Explanation

Google Cloud automatically encrypts all customer data at rest by default using Google-managed encryption keys. This happens transparently without any customer configuration required, providing a baseline level of data protection for all Google Cloud services.

Question 38Cloud Security, Risk and Compliance

What is Google Cloud's defense-in-depth approach to security?

  1. Using a single strong firewall to protect all resources
  2. Applying multiple layers of security controls throughout the infrastructure stack Correct answer.
  3. Relying solely on encryption for all security needs
  4. Using only perimeter-based security

Explanation

Defense-in-depth is a security strategy that uses multiple layers of security controls across the infrastructure stack. Google Cloud implements this through hardware security, service deployment, data encryption, identity management, network segmentation, and operational security practices.

Question 39Cloud Security, Risk and Compliance

Which concept describes the practice of never trusting any user or device by default, regardless of their network location?

  1. Perimeter security
  2. Zero trust security model Correct answer.
  3. Network segmentation
  4. Single sign-on (SSO)

Explanation

The zero trust security model operates on the principle of 'never trust, always verify.' It requires all users and devices to be authenticated and authorized regardless of whether they are inside or outside the network perimeter. Google's BeyondCorp is an implementation of this model.

Question 40Cloud Security, Risk and Compliance

Which Google Cloud product helps protect web applications and services from distributed denial-of-service (DDoS) attacks?

  1. Cloud IAM
  2. Cloud Armor Correct answer.
  3. Cloud KMS
  4. Binary Authorization

Explanation

Cloud Armor is Google Cloud's DDoS protection and web application firewall (WAF) service. It works with Google Cloud Load Balancing to protect applications from volumetric DDoS attacks, cross-site scripting (XSS), SQL injection, and other web-based threats.

Question 41Cloud Security, Risk and Compliance

What is the function of a Virtual Private Cloud (VPC) in Google Cloud?

  1. To provide object storage for unstructured data
  2. To provide a private, isolated network for deploying Google Cloud resources Correct answer.
  3. To manage domain name resolution
  4. To serve as a container runtime environment

Explanation

A VPC provides a private, logically isolated network within Google Cloud where you can deploy resources like virtual machines, containers, and databases. VPCs give you control over IP addressing, subnets, routing, and firewall rules for your cloud resources.

Question 42Cloud Security, Risk and Compliance

An organization is concerned about data residency requirements and wants to ensure their data stays within a specific geographic location. Which Google Cloud feature addresses this?

  1. Cloud CDN edge caching
  2. Data residency controls with resource location restrictions Correct answer.
  3. Committed use discounts
  4. Preemptible VMs

Explanation

Google Cloud provides data residency controls through organization policies that restrict where resources can be created. This ensures that data remains within specific geographic regions to comply with local data sovereignty and residency regulations.

Question 43Cloud Security, Risk and Compliance

What is the role of Cloud Identity in Google Cloud's security framework?

  1. It encrypts data in transit
  2. It provides identity management, including user provisioning, multi-factor authentication, and device management Correct answer.
  3. It monitors network traffic for threats
  4. It manages billing accounts

Explanation

Cloud Identity is Google Cloud's identity-as-a-service (IDaaS) solution that provides user identity management, single sign-on, multi-factor authentication, and device management. It serves as the foundation for managing who has access to cloud resources.

Question 44Cloud Security, Risk and Compliance

What is the purpose of Google Cloud's Sensitive Data Protection (formerly Cloud DLP)?

  1. To accelerate database queries
  2. To discover, classify, and protect sensitive data like PII across cloud services Correct answer.
  3. To manage billing alerts
  4. To deploy machine learning models

Explanation

Sensitive Data Protection (formerly Cloud DLP) helps organizations discover, classify, and protect sensitive data such as personally identifiable information (PII), credit card numbers, and health records across Google Cloud services. It can de-identify, redact, or mask sensitive data automatically.

Question 45Cloud Security, Risk and Compliance

What is the purpose of Google Cloud's organization policy service?

  1. To create virtual machines
  2. To define centralized constraints and guardrails across the organization's cloud resources Correct answer.
  3. To serve as a content delivery network
  4. To manage DNS records

Explanation

The Organization Policy Service allows administrators to define centralized constraints (guardrails) that apply across the organization's Google Cloud resources. Policies can restrict resource locations, control which services can be used, and enforce security requirements at scale.

Question 46Cloud Security, Risk and Compliance

What is the purpose of Google Cloud's Cloud Key Management Service (Cloud KMS)?

  1. To manage user identities and authentication
  2. To create, manage, and rotate encryption keys used to protect data Correct answer.
  3. To monitor application performance
  4. To deploy containerized applications

Explanation

Cloud KMS allows organizations to create, use, rotate, and destroy encryption keys that protect data stored in Google Cloud. It supports both symmetric and asymmetric keys, integrates with other Google Cloud services, and provides centralized key management with audit logging.

Question 47Cloud Security, Risk and Compliance

What does the principle of 'data sovereignty' refer to in cloud computing?

  1. The cloud provider owns all customer data
  2. Data is subject to the laws and governance of the country or region where it is stored Correct answer.
  3. Data can be freely moved between any jurisdiction
  4. Data sovereignty only applies to government data

Explanation

Data sovereignty concerns the legal and governance authority affecting data. Storage location is relevant, but applicable jurisdiction can also depend on the provider, parties, processing and other facts; a region selection alone does not settle every obligation.

Question 48Cloud Security, Risk and Compliance

Which Google Cloud feature allows you to audit and track who accessed what resources and when?

  1. Cloud Audit Logs Correct answer.
  2. Cloud CDN
  3. Cloud NAT
  4. Cloud Router

Explanation

Cloud Audit Logs provide a record of administrative activities, data access, and system events within your Google Cloud environment. They track who did what, when, and where, enabling security auditing, compliance reporting, and forensic investigation.

Question 49Cloud Security, Risk and Compliance

An enterprise wants to ensure that only authorized container images are deployed to their production GKE clusters. Which Google Cloud security feature should they use?

  1. Cloud Armor
  2. Binary Authorization Correct answer.
  3. Cloud CDN
  4. Cloud NAT

Explanation

Binary Authorization is a Google Cloud security control that ensures only trusted container images are deployed to GKE. It works with container image signing and attestation to enforce deploy-time policies, preventing unauthorized or unverified images from running in production.

Question 50Cloud Operations and Management

Which Google Cloud tool helps organizations monitor and control their cloud spending by setting budgets and alerts?

  1. Cloud Monitoring
  2. Cloud Billing budgets and alerts Correct answer.
  3. Cloud Trace
  4. Cloud Profiler

Explanation

Google Cloud Billing provides budget management capabilities that allow organizations to set spending thresholds and receive alerts when costs approach or exceed those thresholds. This helps organizations maintain financial governance over their cloud spending.