Google Cloud Digital Leader — All Questions

A company moves its workloads from an on-premises data center to Google Cloud and now pays only for the compute it consumes each month, with no upfront hardware purchase. Which financial shift best describes this change?

• a.Shifting from operating expenses (OpEx) to capital expenses (CapEx)
• b.Shifting from capital expenses (CapEx) to operating expenses (OpEx)✓
• c.Eliminating both CapEx and OpEx entirely
• d.Converting all costs into one-time depreciation charges

On-premises hardware requires large upfront purchases, which are capital expenses (CapEx). Cloud usage is billed as you consume resources, turning spending into ongoing operating expenses (OpEx). This pay-as-you-go model is a core cloud benefit, so 'CapEx to OpEx' is correct. Cloud does not eliminate all cost, nor is it a one-time depreciation charge.

Which statement best defines digital transformation in the context of adopting cloud technology?

• a.Buying newer physical servers to replace aging hardware in a private data center
• b.Migrating email from one on-premises server to another for redundancy
• c.Using digital technologies to create new, or change existing, business processes and customer experiences✓
• d.Reducing the number of employees who manage IT infrastructure

Digital transformation means using digital and cloud technologies to fundamentally change how a business operates and delivers value to customers. Simply buying new servers or moving email between servers is a technical upgrade, not transformation. Headcount reduction may be an outcome but is not the definition. The focus is on changing processes and customer experiences.

A security team wants a centralized service to gain visibility into misconfigurations, vulnerabilities, and active threats across all of their Google Cloud resources. Which service is designed for this?

• a.Security Command Center✓
• b.Cloud SQL
• c.Pub/Sub
• d.Compute Engine

Security Command Center provides centralized visibility into an organization's Google Cloud resources, surfacing misconfigurations, vulnerabilities, and threats so teams can find and fix risks. Cloud SQL is a database, Pub/Sub is messaging, and Compute Engine provides virtual machines. Security Command Center is the security posture and threat-visibility tool described here.

An analytics team needs to run fast SQL queries across petabytes of historical sales data without managing servers or clusters. Which Google Cloud service is designed for this?

• a.Cloud SQL
• b.BigQuery✓
• c.Compute Engine
• d.Cloud Storage

BigQuery is a fully managed, serverless data warehouse built for fast SQL analytics over very large datasets, scaling to petabytes without infrastructure management. Cloud SQL is a managed relational database aimed at transactional (OLTP) workloads, not petabyte-scale analytics. Compute Engine is raw VMs, and Cloud Storage is object storage, not a query engine. BigQuery fits analytical querying at scale.

A company needs a fully managed relational database that offers strong consistency and horizontal scalability across multiple regions for a global application. Which service best fits?

• a.BigQuery
• b.Pub/Sub
• c.Cloud Storage
• d.Cloud Spanner✓

Cloud Spanner is a fully managed relational database that combines the structure of SQL with horizontal scalability and strong consistency across regions globally. BigQuery is an analytics warehouse, not an operational transactional database. Pub/Sub is a messaging service, and Cloud Storage is for objects. Spanner is the right choice for a globally scalable, consistent relational database.

Which of the following is the best example of unstructured data?

• a.Customer support call recordings and product photos✓
• b.A table of orders with columns for date, amount, and customer ID
• c.Rows of inventory counts in a relational database
• d.A spreadsheet of employee names and salaries

Unstructured data has no predefined schema or tabular organization, such as audio recordings, images, and free-form text. The other options describe structured data organized into rows and columns with defined fields. Recognizing this distinction matters because structured and unstructured data are stored and processed with different tools. Call recordings and photos are the unstructured example.

A team wants to ingest a real-time stream of events from thousands of IoT sensors and reliably deliver those messages to multiple downstream processing systems. Which Google Cloud service is designed for this messaging pattern?

• a.Cloud SQL
• b.Looker
• c.Pub/Sub✓
• d.BigQuery BI Engine

Pub/Sub is a scalable, asynchronous messaging service that decouples senders (publishers) from receivers (subscribers), making it ideal for ingesting real-time event streams and fanning them out to multiple consumers. Cloud SQL is a database, Looker is a BI platform, and BI Engine accelerates queries. Pub/Sub is the messaging backbone for streaming ingestion.

Business analysts want a governed, self-service platform to explore data, build dashboards, and define consistent business metrics on top of their data warehouse. Which Google Cloud tool is purpose-built for this?

• a.Compute Engine
• b.Looker✓
• c.Cloud Functions
• d.Cloud Spanner

Looker is Google Cloud's business intelligence and data-visualization platform, letting analysts model consistent metrics and build governed self-service dashboards on top of a warehouse like BigQuery. Compute Engine provides VMs, Cloud Functions runs event code, and Spanner is a database. Looker is the BI and semantic-modeling layer described here.

Which sequence best represents a typical data lifecycle in a cloud analytics pipeline?

• a.Analyze, then ingest, then store, then delete
• b.Store, then delete, then ingest, then process
• c.Process, then ingest, then analyze, then store
• d.Ingest, then store, then process, then analyze✓

A common data lifecycle first ingests data from sources, stores it, processes or transforms it, and then analyzes it to generate insights. The other sequences put analysis or deletion before the data has even been collected or prepared, which is not workable. Understanding this ordered flow helps you match the right Google Cloud service to each stage.

A company runs a MySQL database on-premises and wants to move to a fully managed version on Google Cloud with minimal changes to their application. Which service is the most direct fit?

• a.Cloud SQL✓
• b.BigQuery
• c.Pub/Sub
• d.Cloud Storage

Cloud SQL is a fully managed database service that supports MySQL, PostgreSQL, and SQL Server, so an existing MySQL app can migrate with minimal changes. BigQuery is for analytics, not a drop-in transactional MySQL replacement. Pub/Sub is messaging and Cloud Storage is object storage. Cloud SQL best matches a managed MySQL lift.

A developer wants to add image-label detection to an app without collecting training data or building a model. Which Google Cloud option is the fastest path?

• a.Train a custom model from scratch on Compute Engine
• b.Use Cloud Spanner to store and classify images
• c.Call the pre-trained Cloud Vision API✓
• d.Build a data warehouse in BigQuery first

The Cloud Vision API is a pre-trained service that detects objects, labels, text, and more from images with a simple API call, requiring no training data or model building. Training a custom model from scratch is slower and needs data and expertise. Spanner and BigQuery are data services, not vision models. Pre-trained APIs are the quickest route for common tasks.

How are artificial intelligence (AI) and machine learning (ML) best related?

• a.AI and ML are completely unrelated fields
• b.Machine learning is a subset of artificial intelligence✓
• c.Artificial intelligence is a subset of machine learning
• d.ML replaced AI as a newer, unrelated technology

AI is the broad field of building systems that perform tasks requiring human-like intelligence, and machine learning is a subset of AI in which systems learn patterns from data rather than being explicitly programmed. ML is not the larger category, nor is it unrelated to or a replacement for AI. Knowing this hierarchy clarifies where tools like Vertex AI fit.

A data science team wants a single unified platform to build, train, tune, and deploy custom machine learning models, as well as access foundation models. Which Google Cloud product is designed for this?

• a.Vertex AI✓
• b.Cloud SQL
• c.Cloud Run
• d.Pub/Sub

Vertex AI is Google Cloud's unified machine learning platform for building, training, tuning, and deploying custom models, and it also provides access to foundation models like Gemini. Cloud SQL is a database, Cloud Run runs containers, and Pub/Sub is messaging. Vertex AI is the end-to-end ML platform described here.

A global company needs to automatically translate user-generated reviews between dozens of languages in real time. Which pre-trained Google Cloud API is the best fit?

• a.Cloud Vision API
• b.Speech-to-Text API
• c.Natural Language API
• d.Cloud Translation API✓

The Cloud Translation API uses pre-trained models to translate text between many languages, making it ideal for translating reviews on the fly. The Vision API handles images, Speech-to-Text converts audio to text, and the Natural Language API analyzes sentiment and entities. For language-to-language text translation, the Translation API is correct.

An architect designs a system with layered controls, network firewalls, strict identity permissions, and encryption, so that no single failure exposes the whole system. Which security principle does this illustrate?

• a.Single sign-on
• b.Defense in depth✓
• c.Lift-and-shift
• d.Pay-as-you-go pricing

Defense in depth layers multiple, overlapping security controls, such as network, identity, and encryption controls, so that bypassing one does not compromise the system. Single sign-on is an authentication convenience, lift-and-shift is a migration approach, and pay-as-you-go is a pricing model. Layered, redundant protection is precisely defense in depth.

An organization is adopting AI and wants to reduce unfair bias, protect privacy, and keep humans accountable for outcomes. Which concept describes these commitments?

• a.Serverless computing
• b.The shared responsibility model
• c.Responsible AI✓
• d.Infrastructure as a Service

Responsible AI refers to developing and using AI in ways that are fair, safe, privacy-preserving, transparent, and accountable, which matches reducing bias and keeping humans accountable. Serverless computing and IaaS are infrastructure concepts, and the shared responsibility model concerns security duties between provider and customer. Responsible AI is the governing principle for ethical AI use.

A team wants to use a Google multimodal foundation model that can understand and generate text, and also reason across images and other inputs, to power a generative AI assistant. Which model family fits?

• a.Gemini✓
• b.Cloud SQL
• c.Compute Engine
• d.Pub/Sub

Gemini is Google's family of multimodal foundation models capable of understanding and generating text while reasoning across images and other modalities, making it well suited for generative AI assistants. Cloud SQL, Compute Engine, and Pub/Sub are infrastructure and data services, not generative models. Gemini is the correct model family for generative, multimodal AI.

A startup wants to deploy a stateless containerized web service that automatically scales to zero when there is no traffic, with no server management. Which Google Cloud service best fits?

• a.Compute Engine
• b.Cloud SQL
• c.Bare-metal servers
• d.Cloud Run✓

Cloud Run is a fully managed serverless platform for running stateless containers that scales automatically, including down to zero when idle, with no server management. Compute Engine requires managing VMs, Cloud SQL is a database, and bare-metal means managing physical hardware. Cloud Run matches serverless containers that scale to zero.

In the cloud service models, which best describes Software as a Service (SaaS)?

• a.The customer manages the operating system and runtime on rented virtual machines
• b.The provider delivers ready-to-use software over the internet, and the customer just uses the application✓
• c.The customer racks and maintains physical servers in a colocation facility
• d.The provider gives only raw compute, storage, and networking to build on

SaaS delivers fully managed, ready-to-use applications over the internet, so the customer simply uses the software without managing infrastructure or the application stack. Managing the OS and runtime on VMs describes IaaS, and raw compute/storage/networking is also IaaS. Maintaining physical servers is traditional on-premises. SaaS is the fully-managed application model.

A company wants to run and manage containerized applications at scale with automated orchestration, scaling, and self-healing across clusters. Which Google Cloud service is designed for this?

• a.App Engine
• b.Cloud Functions
• c.Google Kubernetes Engine (GKE)✓
• d.Cloud Storage

Google Kubernetes Engine (GKE) is a managed Kubernetes service that orchestrates containerized applications at scale, handling automated scaling, deployment, and self-healing across clusters. App Engine is a PaaS for apps without container orchestration control, Cloud Functions runs small event-driven code, and Cloud Storage holds objects. GKE fits managed container orchestration.

A business migrates its existing virtual machines to Compute Engine with minimal changes to the applications, aiming to move quickly and optimize later. Which migration approach is this?

• a.Lift-and-shift (rehost)✓
• b.Rip-and-replace (rebuild)
• c.Retire the application entirely
• d.Refactor into microservices before moving

Lift-and-shift, also called rehosting, moves workloads to the cloud with minimal changes, which is the fastest path and defers optimization. Rip-and-replace rebuilds an app from scratch using cloud-native services, and refactoring into microservices is a move-and-improve strategy. Retiring means decommissioning. Moving VMs as-is to Compute Engine is a classic lift-and-shift.

Under the cloud shared responsibility model for an IaaS deployment, which of the following is typically the customer's responsibility?

• a.Securing the physical data center facilities
• b.Configuring identity and access controls and securing their own data and applications✓
• c.Maintaining the underlying hardware and hypervisor
• d.Protecting the global network backbone between regions

In the shared responsibility model, Google secures the underlying infrastructure, hardware, and physical facilities, while the customer is responsible for securing their data, applications, and access configuration such as IAM. Physical security, hardware, and the network backbone are Google's duties. Configuring access controls and protecting one's own data is the customer's share.