Google New 2022 Cloud-Digital-Leader Test Tutorial (Updated 41 Questions)
Cloud-Digital-Leader Exam Questions Dumps, Selling Google Products
Google Cloud-Digital-Leader Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
NEW QUESTION 11
The operating systems of some of your organization's virtual machines may have a security vulnerability.
How can your organization most effectively identify all virtual machines that do not have the latest security update?
- A. View the Compliance Reports Manager to identify and download a recent PCI audit
- B. View the Security Command Center to identify virtual machines running vulnerable disk images
- C. View the Compliance Reports Manager to identify and download a recent SOC 1 audit
- D. View the Security Command Center to identify virtual machines started more than 2 weeks ago
Answer: B
NEW QUESTION 12
Your company's development team is building an application that will be deployed on Cloud Run. You are designing a CI/CD pipeline so that any new version of the application can be deployed in the fewest number of steps possible using the CI/CD pipeline you are designing. You need to select a storage location for the images of the application after the CI part of your pipeline has built them.
What should you do?
- A. Create a Compute Engine disk containing the application
- B. Store the images in Cloud Storage
- C. Store the images in Container Registry
- D. Create a Compute Engine image containing the application
Answer: C
NEW QUESTION 13
Your organization needs to establish private network connectivity between its on-premises network and its workloads running in Google Cloud. You need to be able to set up the connection as soon as possible.
Which Google Cloud product or feature should you use?
- A. Cloud CDN
- B. Cloud Interconnect
- C. Direct Peering
- D. Cloud VPN
Answer: D
Explanation:
Private Google Access for on-premises hosts provides a way for on-premises systems to connect to Google APIs and services by routing traffic through a Cloud VPN tunnel.
NEW QUESTION 14
Your organization stores highly sensitive data on-premises that cannot be sent over the public internet. The data must be processed both on-premises and in the cloud.
What should your organization do?
- A. Order a Partner Interconnect connection with your network provider
- B. Enable Private Google Access in your Google Cloud VPC network
- C. Configure Identity-Aware Proxy (IAP) in your Google Cloud VPC network
- D. Create a Cloud VPN tunnel between Google Cloud and your data center
Answer: A
Explanation:
After the service provider provisions your connection, you can start passing traffic between your networks by using the service provider's network.
NEW QUESTION 15
Your organization needs to restrict access to a Cloud Storage bucket. Only employees who are based in Canada should be allowed to view the contents.
What is the most effective and efficient way to satisfy this requirement?
- A. Deploy the Cloud Storage bucket to a Google Cloud region in Canada
- B. Create a group consisting of all Canada-based employees, and give the group access to the bucket
- C. Give each employee who is based in Canada access to the bucket
- D. Configure Google Cloud Armor to allow access to the bucket only from IP addresses based in Canada
Answer: C
NEW QUESTION 16
Your company is running the majority of its workloads in a co-located data center. The workloads are running on virtual machines (VMs) on top of a hypervisor and use either Linux or Windows server editions. As part of your company's transformation strategy, you need to modernize workloads as much as possible by adopting cloud-native technologies. You need to migrate the workloads into Google Cloud.
What should you do?
- A. Migrate the workloads using Migrate for Compute Engine
- B. Export the VMs into VMDK format, and import them into Google Cloud VMware Engine
- C. Export the VMs into VMDK format, and import them into Compute Engine
- D. Migrate the workloads using Migrate for Anthos
Answer: A
Explanation:
Migrate for Compute Engine is a product for migrating physical servers and virtual machines from on-premises and cloud environments to Google Cloud. Migrate for Compute Engine lets you migrate a virtual machine to Google Cloud in a few minutes, where the data is copied in the background but the virtual machines are completely operational.
NEW QUESTION 17
Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects?
- A. Identity and Access Management
- B. Security Command Center
- C. Cloud Logging
- D. Google Cloud Armor
Answer: A
NEW QUESTION 18
Your organization runs an application on virtual machines in Google Cloud. This application processes incoming images. This activity takes hours to create a result for each image. The workload for this application normally stays at a certain baseline level, but at regular intervals it spikes to a much greater workload. Your organization needs to control the cost to run this application.
What should your organization do?
- A. Purchase committed use discounts for the expected spike load
- B. Leverage sustained use discounts for your virtual machines
- C. Run the workload on preemptible VM instances
- D. Purchase committed use discounts for the baseline load
Answer: B
Explanation:
The idea of the Sustained Use discount is that the longer you run a VM instance in any given month, the bigger discount you will get from the list price.
NEW QUESTION 19
You are migrating workloads to the cloud. The goal of the migration is to serve customers worldwide as quickly as possible According to local regulations, certain data is required to be stored in a specific geographic area, and it can be served worldwide. You need to design the architecture and deployment for your workloads.
What should you do?
- A. Select a public cloud provider that is only active in the required geographic area
- B. Select a private cloud provider that globally replicates data storage for fast data access
- C. Select a private cloud provider that is only active in the required geographic area
- D. Select a public cloud provider that guarantees data location in the required geographic area
Answer: C
Explanation:
Many companies choose private cloud over public cloud because private cloud is an easier way (or the only way) to meet their regulatory compliance requirements. Others choose private cloud because their workloads deal with confidential documents, intellectual property, personally identifiable information (PII), medical records, financial data, or other sensitive data.
NEW QUESTION 20
You are currently managing workloads running on Windows Server for which your company owns the licenses. Your workloads are only needed during working hours, which allows you to shut down the instances during the weekend. Your Windows Server licenses are up for renewal in a month, and you want to optimize your license cost.
What should you do?
- A. Migrate the workloads to Compute Engine with a pay-as-you-go (PAYG) model
- B. Migrate the workloads to Compute Engine with a bring-your-own-license (BYOL) model
- C. Renew your licenses for an additional period of 3 years. Renew your licenses for an additional period of 3 years. Negotiate a cost reduction with your current hosting provider wherein infrastructure cost is reduced when workloads are not in use
- D. Renew your licenses for an additional period of 2 years. Negotiate a cost reduction by committing to an automatic renewal of the licenses at the end of the 2 year period
Answer: B
NEW QUESTION 21
Your large and frequently changing organization's user information is stored in an on-premises LDAP database. The database includes user passwords and group and organization membership.
How should your organization provision Google accounts and groups to access Google Cloud resources?
- A. Use the Identity Platform REST API to create users
- B. Replicate the LDAP infrastructure on Compute Engine
- C. Use Google Cloud Directory Sync to create users
- D. Use the Firebase Authentication REST API to create users
Answer: C
Explanation:
You can run a single instance of Google Cloud Directory Sync to synchronize user accounts and groups to Google Cloud.
NEW QUESTION 22
Your organization uses Active Directory to authenticate users. Users' Google account access must be removed when their Active Directory account is terminated.
How should your organization meet this requirement?
- A. Configure single sign-on in the Google domain
- B. Configure BeyondCorp and Identity-Aware Proxy in the Google domain
- C. Remove the Google account from all IAM policies
- D. Configure two-factor authentication in the Google domain
Answer: A
NEW QUESTION 23
Your organization offers public mobile apps and websites. You want to migrate to a Google Cloud-based solution for checking and maintaining your users' usernames and passwords and controlling their access to different resources based on their identity.
Which should your organization choose?
- A. Identity Platform
- B. Compute Engine firewall rules
- C. VPN tunnels
- D. Private Google Access
Answer: A
Explanation:
An identity platform is a modern solution for managing the identities of users and devices in a centralized fashion.
NEW QUESTION 24
Your organization is releasing its first publicly available application in Google Cloud. The application is critical to your business and customers and requires a 2-hour SLA.
How should your organization set up support to minimize costs?
- A. Enroll in Enhanced Support
- B. Enroll in Premium Support
- C. Enroll in Standard Support
- D. Enroll in Basic Support
Answer: A
NEW QUESTION 25
You are a program manager within a Software as a Service (SaaS) company that offers rendering software for animation studios. Your team needs the ability to allow scenes to be scheduled at will and to be interrupted at any time to restart later. Any individual scene rendering takes less than 12 hours to complete, and there is no service-level agreement (SLA) for the completion time for all scenes. Results will be stored in a global Cloud Storage bucket. The compute resources are not bound to any single geographical location. This software needs to run on Google Cloud in a cost-optimized way.
What should you do?
- A. Develop the application so it can run in an unmanaged instance group
- B. Deploy the application on Compute Engine using preemptible instances
- C. Start more instances with fewer virtual centralized processing units (vCPUs) instead of fewer instances with more vCPUs
- D. Create a reservation for the minimum number of Compute Engine instances you will use
Answer: B
NEW QUESTION 26
Your organization runs a distributed application in the Compute Engine virtual machines. Your organization needs redundancy, but it also needs extremely fast communication (less than 10 milliseconds) between the parts of the application in different virtual machines.
Where should your organization locate this virtual machines?
- A. In different zones within a single region
- B. In multiple regions, using multiple zones per region
- C. In multiple regions, using one zone per region
- D. In a single zone within a single region
Answer: D
NEW QUESTION 27
......
Cloud-Digital-Leader Cert Guide PDF 100% Cover Real Exam Questions: https://www.itexamdownload.com/Cloud-Digital-Leader-valid-questions.html
Pass Cloud-Digital-Leader Review Guide, Reliable Cloud-Digital-Leader Test Engine: https://drive.google.com/open?id=1zqv8EDsb4mTRHHWkVsSIWEPJ2rUe1RUy