CDL practice questions 221–230

1. Question 221 · 288 in bank

   Your organization needs to restrict access to a Cloud Storage bucket. Only employees who are based in Canada should be allowed to view the contents. What is the most effective and efficient way to satisfy this requirement?

   • ADeploy the Cloud Storage bucket to a Google Cloud region in Canada
   • BConfigure Google Cloud Armor to allow access to the bucket only from IP addresses based in Canada
   • CGive each employee who is based in Canada access to the bucket
   • DCreate a group consisting of all Canada-based employees, and give the group access to the bucket

   Show answer

   Answer: D

   Explanation

   Correct answer is D. Question is tricky, but it says "based" in Canada. That is not the same as restricting access to "from Canada". An employee can for instance be based in Canada, but access the services while on business trip to Singapore.

   Source: Adapted from community discussion — Halimb

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 222 · 288 in bank

   The operating systems of some of your organization's virtual machines may have a security vulnerability. How can your organization most effectively identify all virtual machines that do not have the latest security update?

   • AView the Security Command Center to identify virtual machines running vulnerable disk images
   • BView the Compliance Reports Manager to identify and download a recent PCI audit
   • CView the Security Command Center to identify virtual machines started more than 2 weeks ago
   • DView the Compliance Reports Manager to identify and download a recent SOC 1 audit

   Show answer

   Answer: A

   Explanation

   Security Command Center is a security management and threat detection service provided by Google Cloud Platform (GCP). It offers centralized visibility into the security posture of your GCP resources, helping you identify, understand, and mitigate potential security risks.

   Source: Adapted from community discussion — cookieMr

   References

   • Google Cloud documentation

   Next question

3. Question 223 · 288 in bank

   Your organization is moving an application to Google Cloud. As part of that effort, it needs to migrate the application's working database from another cloud provider to Cloud SQL. The database runs on the MySQL engine. The migration must cause minimal disruption to users. Data must be secured while in transit. Which should your organization use?

   • ABigQuery Data Transfer Service
   • BMySQL batch insert
   • CDatabase Migration Service
   • DCloud Composer

   Show answer

   Answer: C

   Explanation

   Database Migration Service Can be used only to perform the migration of PostgreSQL and MySQL databases. SQL Server database migration is currently not supported and is coming soon.

   Source: Adapted from community discussion — albert_kuo

   References

   • Google Cloud documentation

   Next question

4. Question 224 · 288 in bank

   Your organization is developing and deploying an application on Google Cloud. Tracking your Google Cloud spending needs to stay as simple as possible. What should you do to ensure that workloads in the development environment are fully isolated from production workloads?

   • AApply a unique tag to development resources
   • BAssociate the development resources with their own network
   • CAssociate the development resources with their own billing account
   • DPut the development resources in their own project

   Show answer

   Answer: D

   Explanation

   The correct answer is D. Put the development resources in their own project because Google Cloud projects provide full isolation of resources, including billing, permissions, and quotas, ensuring clear separation between development and production environments. Why not the other options? A. Apply a unique tag to development resources – Tags help with organization and access control but do not fully isolate resources, billing, or permissions. B. Associate the development resources with their own network – While separate networks can help with security and traffic isolation, they do not provide full workload isolation in terms of billing and access. C. Associate the development resources with their own billing account – While this isolates costs, it does not provide complete resource separation for security, permissions, and quota management.

   Source: Adapted from community discussion — ddeveloperr

   Next question

5. Question 225 · 288 in bank

   Your company is running the majority of its workloads in a co-located data center. The workloads are running on virtual machines (VMs) on top of a hypervisor and use either Linux or Windows server editions. As part of your company's transformation strategy, you need to modernize workloads as much as possible by adopting cloud-native technologies. You need to migrate the workloads into Google Cloud. What should you do?

   • AExport the VMs into VMDK format, and import them into Compute Engine
   • BExport the VMs into VMDK format, and import them into Google Cloud VMware Engine
   • CMigrate the workloads using Migrate for Compute Engine
   • DMigrate the workloads using Migrate for Anthos

   Show answer

   Answer: D

   Explanation

   Agree with C, Compute Engine. From GCP documentation "For the workloads that will benefit from containers, Migrate for Anthos and GKE delivers a fast, smooth path to modernization. For other workloads that are better suited as a VM, simply move them as is with Migrate for Compute Engine "

   Source: Adapted from community discussion — fpreli

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

6. Question 226 · 288 in bank

   Your organization is running all its workloads in a private cloud on top of a hypervisor. Your organization has decided it wants to move to Google Cloud as quickly as possible. Your organization wants minimal changes to the current environment, while using the maximum amount of managed services Google offers. What should your organization do?

   • AMigrate the workloads to Google Cloud VMware Engine
   • BMigrate the workloads to Compute Engine
   • CMigrate the workloads to Bare Metal Solution
   • DMigrate the workloads to Google Kubernetes Engine

   Show answer

   Answer: B

   Explanation

   Google Cloud VMware Engine is a fully managed service that enables organizations to run their VMware workloads on Google Cloud with minimal changes to the current environment. It allows you to move your VMware vSphere-based workloads to the cloud, so you can continue to use familiar tools and processes while taking advantage of the scalability, security, and cost benefits of Google Cloud. This service can help you move your workloads to Google Cloud as quickly as possible, while providing a high level of compatibility with your current environment and taking advantage of managed services offered by Google Cloud. Migrating the workloads to Compute Engine, Bare Metal Solution or Google Kubernetes Engine will require more changes to the current environment, and it may require re-architecting the application to work with the new infrastructure. These solutions are suitable for organizations that are looking to modernize their workloads, but they may not be the best option if the organization wants minimal changes to the current environment.

   Source: Adapted from community discussion — JudgeLI

   References

   • Google Cloud documentation

   Next question

7. Question 227 · 288 in bank

   Your organization is releasing its first publicly available application in Google Cloud. The application is critical to your business and customers and requires a 2- hour SLA. How should your organization set up support to minimize costs?

   • AEnroll in Premium Support
   • BEnroll in Enhanced Support
   • CEnroll in Standard Support
   • DEnroll in Basic Support

   Show answer

   Answer: B

   Explanation

   Enhanced Support offers P1 - 1 hour Initial response time. (while Basic offers P2 - 4hr & Premium offers P1 - 15mins Initial Response time) link: https://cloud.google.com/support

   Source: Adapted from community discussion — VenRam

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

8. Question 228 · 288 in bank

   Your organization offers public mobile apps and websites. You want to migrate to a Google Cloud-based solution for checking and maintaining your users' usernames and passwords and controlling their access to different resources based on their identity. Which should your organization choose?

   • AVPN tunnels
   • BIdentity Platform
   • CCompute Engine firewall rules
   • DPrivate Google Access

   Show answer

   Answer: B

   Explanation

   Answer: B https://cloud.google.com/identity-platform Identity Platform is a customer identity and access management (CIAM) platform that helps organizations add identity and access management functionality to their applications, protect user accounts, and scale with confidence on Google Cloud.

   Source: Adapted from community discussion — desertlotus1211

   References

   • Google Cloud documentation

   Next question

9. Question 229 · 288 in bank

   Which Google Cloud service or feature lets you build machine learning models using Standard SQL and data in a data warehouse?

   • ABigQuery ML
   • BTensorFlow
   • CAutoML Tables
   • DCloud Bigtable ML

   Show answer

   Answer: A

   Explanation

   BigQuery ML is a powerful tool within Google BigQuery that enables you to create and execute machine learning models directly using SQL queries. It allows you to build and train models using familiar SQL syntax and leverage the data stored in BigQuery for training and prediction. By using BigQuery ML, you can leverage the power of SQL and the scalability of Google BigQuery to build and deploy machine learning models directly on your data warehouse, without the need for complex data transformations or separate ML platforms.

   Source: Adapted from community discussion — cookieMr

   References

   • Google Cloud documentation

   Next question

10. Question 230 · 288 in bank

    Your organization runs an application on virtual machines in Google Cloud. This application processes incoming images. This activity takes hours to create a result for each image. The workload for this application normally stays at a certain baseline level, but at regular intervals it spikes to a much greater workload. Your organization needs to control the cost to run this application. What should your organization do?

    • APurchase committed use discounts for the baseline load
    • BPurchase committed use discounts for the expected spike load
    • CLeverage sustained use discounts for your virtual machines
    • DRun the workload on preemptible VM instances

    Show answer

    Answer: C

    Explanation

    A for me, with CUD you get a greater discount and it makes totally sense to buy a CUD for the baseline traffic since it will always be consumed

    Source: Adapted from community discussion — fpreli

    References

    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

CDL practice, question 221. 288 questions available.