Cloud-Digital-Leaderリアルな試験問題Cloud-Digital-Leader練習問題集
厳密検証されたCloud-Digital-Leader試験問題集と解答で無料提供のCloud-Digital-Leader問題と正解付き
試験は、クラウドコンピューティングの概念、Google Cloud Platformサービス、セキュリティとコンプライアンス、ネットワーキングを含むさまざまなトピックをカバーしています。Google Cloud Platformの知識と理解をテストする包括的な試験です。この試験は挑戦的に設計されていますが、クラウドコンピューティングについてより深い理解を得るための貴重な学習体験にもなります。
質問 # 166
What is the purpose of an application programming interface (API)?
- A. To provide a set of instructions that allow computer programs to communicate with each other
- B. To manage multiple containerized workloads
- C. To connect networks from different cloud providers
- D. To provide cloud plugins for integrated development environments
正解：A
解説：
An Application Programming Interface (API) is a set of protocols, routines, and tools that allow different software applications to communicate with each other. APIs provide the necessary instructions for one program to interact with another, enabling the integration of different systems and the development of new functionalities.
Option D: To provide a set of instructions that allow computer programs to communicate with each other is correct because it accurately describes the fundamental purpose of an API.
Reference:
Google Cloud: Understanding APIs and their Use Cases
Google Cloud API Documentation: API Basics
質問 # 167
Your company needs to segment Google Cloud resources used by each team from the others. The teams' efforts are changing frequently, and you need to reduce operational risk and maintain cost visibility. Which approach does Google recommend?
- A. One top-level folder per team.
- B. One project per team.
- C. One project that contains all of each team's resources.
- D. One organization per team.
正解：B
解説：
Reference: https://cloud.google.com/security/infrastructure/design
The Teams need to segmented to have visibility on the resources each team consumes
質問 # 168
You have experimented with Google Cloud using your own credit card and expensed the costs to your company. Your company wants to streamline the billing process and charge the costs of your projects to their monthly invoice. What should you do?
- A. Create a ticket with Google Billing Support to ask them to send the invoice to your company.
- B. Set up BigQuery billing export and grant your financial department IAM access to query the data.
- C. Grant the financial team the IAM role of Billing Account User on the billing ac-count linked to your credit card.
- D. Change the billing account of your projects to the billing account of your company.
正解：D
解説：
To change the Cloud Billing account for a project, you need to be able to move a project from one Cloud Billing account to another. To accomplish this task, you need permissions adequate to unlink the project from the existing Cloud Billing account AND to link the project to the target Cloud Billing account. Roles with adequate permissions to perform this task: Project Owner or Project Billing Manager on the project, AND Billing Account Administrator or Billing Account User for the target Cloud Billing account
Reference link- https://cloud.google.com/billing/docs/how-to/modify-
質問 # 169
Your customer is moving from AWS to Google Cloud. Data also needs to be moved. There is about 50TB of data. On AWS, the data resides in an S3 bucket. It is going to be moved to Cloud Storage. Data is also being continuously generated on S3 prior to the cutover. It is preferable that this is also periodically transferred.
What is the best way to move the data?
- A. Use the gsutil command-line option
- B. Use the Storage Transfer Service
- C. Use the Google Cloud console to drag and drop the files easily
- D. Use a Transfer Appliance
正解：B
解説：
Explanation
Storage Transfer Service provides options that make data transfers and synchronization easier. We can also schedule one-time transfer operations or recurring transfer operations.
Text Description automatically generated
Reference link- https://cloud.google.com/storage-transfer/docs/overview Reference link-
https://cloud.google.com/architecture/transferring-data-from-amazon-s3-to-cloud-storage-using-vpc-service-con
質問 # 170
Your Google Cloud Platform [GCP] admin has to manage a bunch of API keys for external services that are accessed by different applications, which are used by a few teams. What is the best way to manage them?
- A. Store the information in Kubernetes Secrets and only grant read permissions to users as required.
- B. Share the information in a Github repository and grant access to the repo in IAM as required.
- C. Store the information in Secret Manager and give IAM read permissions as re-quired.
- D. Encrypt the information and store it in Cloud Storage for centralized access. Give the decrypt key only to the users who need to access it.
正解：C
解説：
Store the information in Secret Manager is a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data. Secret Manager provides a central place and single source of truth to manage access, and audit secrets across Google Cloud.
https://cloud.google.com/secret-manager
質問 # 171
Your organization is defining the resource hierarchy for its new application in Google Cloud. You need separate development and production environments. The production environment will be deployed in Compute Engine in two regions. Which structure should your organization choose?
- A. Create a single project for all environments. Use labels to segregate resources by environment.
- B. Create one project for the development environment and one project for the production environment.
- C. Create a single project for all environments. Use tags to segregate resources by environment.
- D. Create two projects for the development environment and two projects for the production environment (one for each region).
正解：B
解説：
Many organizations have separate development and production environments so they can build and test new features without disturbing production traffic. In Optimizely, you can create separate projects for each environment to help with governance.
With separate development and production projects, your organization can safely build and QA experiments and Personalization campaigns in a development environment before deploying to production. This approach allows multiple stakeholders in your organization to act as gatekeepers for running new experiments in production.
Reference link- https://support.optimizely.com/hc/en-us/articles/4410284353805-Set-up-projects-for- development-and-production-environments
質問 # 172
Your organization wants to predict the behavior of visitors to its public website. To do that, you have decided to build a machine learning model. Your team has database-related skills but only basic machine learning skills, and would like to use those database skills.
Which Google Cloud product or feature should your organization choose?
- A. Cloud SQL
- B. TensorFlow
- C. BigQuery ML
- D. LookML
正解：C
解説：
Reference:
質問 # 173
Your organization meant to purchase a 3-year Committed Use Discount, but accidentally purchased a 1-year Committed Use Discount instead. What should your organization do?
- A. Contact your financial institution.
- B. Contact Trust and Safety.
C Contact Cloud Billing Support. - C. Contact Technical Support.
正解：C
解説：
Graphical user interface, text, application Description automatically generated
https://cloud.google.com/compute/docs/instances/signing-up-committed-use-discounts
質問 # 174
If you increase the size of a subnet in a custom VPC network, the IP addresses of virtual machines already on that subnet might be affected. Which options are Correct.
- A. False
- B. True
- C. None of the above
- D. Not Defined by Google Cloud Platform
正解：A
解説：
Explanation
You can dynamically increase the size of a subnet in a custom network by expanding the range of IP addresses allocated to it. Doing that doesn't affect already configured VMs.
質問 # 175
A customer has a tens of applications that are dependent on Oracle databases in their on-premise data centers.
The customer wants to migrate to Google Cloud. Their long term goal is to move to other cloud native database technologies. What options do they have to initially move their data?
- A. Migrate to Cloud SQL.
- B. Since there is no hosted Oracle solution, leave the Oracle data on-premise while doing analytics on Google Cloud.
- C. Migrate to a Bare Metal server.
- D. Containerize Oracle and run it using Cloud Run.
正解：A
解説：
Explanation
The Bare Metal solution is the recommended approach. You can deploy Oracle capabilities like clustered databases, replication, and all performance features at licensing costs that are similar to on-premise systems
https://cloud.google.com/architecture/migrating-bare-metal-workloads
質問 # 176
What are the network requirements for Private Google Access?
- A. Private Google Access automatically enables any API.
- B. None of the Above
- C. Your network must have appropriate routes for the destination IP ranges used by Google APIs and services.
- D. Both A and B
正解：C
解説：
Network requirements for Private Google Access:
- Because Private Google Access is enabled on a per-subnet basis, you must use a VPC network. Legacy networks are not supported because they don't support subnets.
- Private Google Access does not automatically enable any API. You must separately enable the Google APIs you need to use via the APIs & services page in the Google Cloud Console.
- If you use the private.googleapis.com or the restricted.googleapis.com domain names, you'll need to create DNS records to direct traffic to the IP addresses associated with those domains.
- Your network must have appropriate routes for the destination IP ranges used by Google APIs and services.
These routes must use the default internet gateway next hop. If you use the private.googleapis.com or the restricted.googleapis.com domain names, you only need one route (per domain). Otherwise, you'll need to create multiple routes.
- Egress firewalls must permit traffic to the IP address ranges used by Google APIs and services. The implied allow egress firewall rule satisfies this requirement. For other ways to meet the firewall requirement.
質問 # 177
Customers are reporting very high latencies when accessing an application from the United States. The application is currently running in a single region in Europe.
What should the organization do?
- A. Run the application in additional zones in the European region.
- B. Run the application in additional regions in Europe.
- C. Run a replica of the application in a region in the United States.
- D. Set up a new billing account in the United States.
正解：C
解説：
The correct answer is D. Run a replica of the application in a region in the United States. Here's why:
* Context of the Question: The application currently runs in a single region in Europe, and customers in the United States are experiencing high latencies. The organization needs to reduce latencies for these customers.
* Google Cloud Product Relevance:
* Running a replica of the application in a region in the United States would reduce latency by hosting the application closer to the end users. This improves response times and ensures a better user experience for customers in the United States.
* Google Cloud provides services such as Cloud Load Balancing to distribute traffic efficiently between instances in different regions.
* Why Not Other Options:
* A. Set up a new billing account in the United States: Billing accounts do not affect application performance or latency.
* B. Run the application in additional regions in Europe: This would not reduce latencies for users in the United States, as their traffic would still need to travel across the Atlantic.
* C. Run the application in additional zones in the European region: Additional zones in Europe would not help with reducing latency for U.S. customers.
Google Cloud Digital Leader References:
* Refer to Google Cloud's multi-region deployment documentation for more information on deploying applications across multiple regions.
質問 # 178
In Google Cloud IAM: if a policy applied at the project level gives you Owner permissions, your access to an individual resource in that project might be restricted to View permission if someone applies a more restrictive policy directly to that resource. What is correct below the options
- A. Not defined by GCP.
- B. None of the above.
- C. False
- D. True
正解：C
解説：
Policies are a union of those applied to resources themselves and those inherited from higher levels in the hierarchy. If a parent policy is less restrictive, it overrides a more restrictive policy applied to the resource. If a parent policy is more restrictive, it does not override a less restrictive policy applied to the resource. Therefore, access granted at a higher level in the hierarchy cannot be taken away by policies applied at a lower level in the hierarchy.
質問 # 179
Your organization wants to optimize its use of Google Cloud's discounts on virtual machine-based workloads. You plan to use 200 CPUs constantly for the next 3 years, and you forecast that spikes of up to 300 CPUs will occur approximately 30% of the time. What should you choose?
- A. Regular pay-as-you-go pricing
- B. 3-year committed use discount for 200 CPUs
- C. 1-year committed use discount for 200 CPUs
- D. 3-year committed use discount for 300 CPUs
正解：B
解説：
you can get a 57% discount by agreeing to commit to a 3-year contract. Any usage over the commitment will just be billed at the standard rate. Since they only need 300 CPUs 30% of the time, will pick answer C so that we are not paying usage off 300 CPUs all of the time. This gives us a discount of 57% for 200 CPU's, huge cost savings.
質問 # 180
An organization is operating multiple workloads in containers and requires full control of how the workloads are configured. Which Google Cloud service should the organization use?
- A. Cloud Run
- B. Kubernetes Engine
- C. Cloud Functions
- D. Compute Engine
正解：B
解説：
The correct answer is C. Kubernetes Engine. Here's why:
Context of the Questio n : The organization needs to operate multiple workloads in containers with full control over how these workloads are configured.
Google Cloud Product Relevance:
Google Kubernetes Engine (GKE) is a fully managed service that allows organizations to run, deploy, and manage containerized applications using Kubernetes. GKE provides full control over workload configuration, including resource allocation, scaling, networking, and security policies.
With GKE, the organization can use Kubernetes features such as custom resource definitions, namespaces, and pod configurations to achieve the desired level of control over their workloads.
Why Not Other Options:
A . Cloud Functions: Cloud Functions is a serverless compute service for running event-driven functions and does not provide control over containerized workloads.
B . Compute Engine: Compute Engine provides virtual machines (VMs), which are not specific to containerized workloads. It requires more management compared to GKE.
D . Cloud Run: Cloud Run is a managed service for running containers but abstracts much of the configuration details to simplify deployment. It does not offer as much control over workload configuration as GKE.
Google Cloud Digital Leader Reference:
Refer to the Google Kubernetes Engine documentation for more details on managing containerized workloads.
質問 # 181
Your organization runs many workloads in different Google Cloud projects, each linked to the same billing account. Each project's workload costs can vary from month to month, but the overall combined cost of all projects is relatively stable. Your organization needs to optimize its cost.
What should your organization do?
- A. Move all workloads from all different projects into one single consolidated project
- B. Purchase a commitment per project for each project's usual minimum
- C. Create a billing account per project, and link each project to a different billing account
- D. Turn on committed use discount sharing, and create a commitment for the combined usage
正解：D
解説：
Explanation
Turn on committed use discount sharing, and create a commitment for the combined usage Sharing your committed use discounts across all your projects reduces the overhead of managing discounts on a per-project basis, and maximizes your savings by pooling all your discounts across your projects' resource usage. If you have multiple projects that share the same Cloud Billing account, you can enable committed use discount sharing so all of your projects within that Cloud Billing account share all of your committed use discount contracts. Your sustained use discounts are also pooled at the same time. That is, sustained use discounts are calculated using the total resources across these projects, rather than just the resources within a single project.
Text Description automatically generated
Reference link
- https://cloud.google.com/compute/docs/instances/signing-up-committed-use-discounts#sharing_committed_use
質問 # 182
What are the different storage & database services in GCP? Which is Google cloud storage and da-tabase below the option
- A. Cloud Spanner
- B. Cloud Bigtable
- C. Persistent Disk
- D. All of the Above
- E. Cloud SQL.
正解：D
解説：
Explanation
Graphical user interface, text, application Description automatically generated
質問 # 183
Your organization is developing an application that will manage payments and online bank accounts located around the world. The most critical requirement for your database is that each transaction is handled consistently. Your organization anticipates almost unlimited growth in the amount of data stored.
Which Google Cloud product should your organization choose?
- A. Cloud SQL
- B. Cloud Spanner
- C. Firestore
- D. Cloud Storage
正解：B
解説：
Explanation
Features of Cloud Spanner
Reference: https://k21academy.com/google-cloud/cloud-sql-vs-cloud-spanner/ Text Description automatically generated
質問 # 184
With respect to the Core Feature of Standby Instances of Cloud SQL which one of the options is correct.?
- A. None of the Above.
- B. The standby instance is used in high availability to replace the primary instance when failover occurs.
The standby instance appears in the Google Cloud Console but does not get billed. When failover occurs, connections to the primary instance are automatically transferred to the standby instance. - C. The standby instance is used in high availability to replace the primary instance when failover occurs.
The standby instance appears in the Google Cloud Console but does not get billed. When failover occurs, connections to the primary instance need to be manually transferred to the standby instance. - D. The standby instance is used in high availability to replace the primary instance when failover occurs.
The standby instance doesn't appear in the Google Cloud Console. When failover occurs, connections to the primary instance are automati-cally transferred to the standby instance.
正解：D
解説：
Explanation
The standby instance is used in high availability to replace the primary instance when failover occurs. The standby instance doesn't appear in the Google Cloud Console. When failover occurs, connections to the primary instance are automatically transferred to the standby instance.
Cloud SQL Key Terms:
Cloud SQL instance
A Cloud SQL instance corresponds to one virtual machine (VM). The VM includes the database instance and accompanying software containers to keep the database instance up and running.
Database instance
A database instance is the set of software and files that operate the databases: MySQL, PostgreSQL or SQL Server.
High availability
Cloud SQL instances using high availability (HA) provide greater reliability than non-HA instances.
HA in Cloud SQL works by having two synchronized instances: a primary instance and a standby instance.
Each instance has exactly one VM. Each instance is in a different zone in the same region.
Failover
A failover is when Cloud SQL switches serving from the original primary instance to the standby instance.
Autofailover is a mechanism that automatically triggers failover when a Cloud SQL instance didn't issue a heartbeat in the previous interval.
Standby instances
The standby instance is used in high availability to replace the primary instance when failover occurs. The standby instance doesn't appear in the Google Cloud Console. When failover occurs, connections to the primary instance are automatically transferred to the standby instance.
Clone
When you clone a Cloud SQL instance, you create a new instance that is a copy of the source instance, but is completely independent. After cloning is complete, changes to the source instance are not reflected in the clone, and changes in the clone are not reflected in the source instance.
Replication
Replication is the ability to create copies of a Cloud SQL instance or an on-premises database, and offload work to the copies. The main reason for using replication is to scale the use of data in a database without degrading performance on the primary instance.
Read replica
The read replica is an exact copy of the primary instance. Data and other changes on the primary instance are updated in almost real time on the read replica. Send your write transactions to the primary instance, and your read requests to the read replica. The read replica processes queries, read requests, and analytics traffic, thus reducing the load on the primary instance.
Source server
Replication copies transactions from a primary instance to one or more read replicas. The primary instance is also called the source server. The source server can be a Cloud SQL primary instance, or a server outside of Google Cloud, such as an on-premises server or a server running in a different cloud. If the source server is outside of Google Cloud, we call it Replication from an external server.
Cloud SQL Auth proxy client
The Cloud SQL Auth proxy client is open source software maintained by Cloud SQL. It connects to a companion process, the Cloud SQL Auth proxy server, running on your Cloud SQL instance. You run the Cloud SQL Auth proxy client on your own servers. The Cloud SQL Auth proxy client can be used to establish a secure SSL/TLS connection to the database instance, and/or to avoid having to open the firewall.
Authentication is done through Identity and Access Management (IAM).
質問 # 185
An organization needs to store daily transactional data such as customer records and purchase history. The data follows a consistent schema and is cross-referenced. Which type of service should the organization use?
- A. Non-relational database
- B. Relational database
- C. Data lake
- D. Data warehouse
正解：B
解説：
Relational databases are ideal for storing transactional data that follows a consistent schema and requires cross-referencing (e.g., customer records and purchase history). They provide ACID (Atomicity, Consistency, Isolation, Durability) compliance, which is essential for reliable transaction processing.
Option C: Relational database is correct because it is specifically designed for structured data with a consistent schema and supports complex queries and cross-referencing of data, which is essential for transactional systems.
References:
Google Cloud: Cloud SQL and Cloud Spanner (Relational Database Services) Google Cloud Database Solutions: Selecting the Right Database
質問 # 186
Which Google Cloud product or feature makes specific recommendations based on security risks and compliance violations?
- A. Cloud Deployment Manager
- B. Google Cloud Armor
- C. Google Cloud firewalls
- D. Security Command Center
正解：D
解説：
Reference:
Security Command Center is Security and risk management platform for Google Cloud.
Reference link- https://cloud.google.com/security-command-center
質問 # 187
An organization has an ecommerce application that requires a cost-effective, transactional database. The application will only serve customers in a single region. Which service should they use?
- A. BigQuery
- B. Cloud Spanner
- C. Cloud Bigtable
- D. Cloud SQL
正解：D
質問 # 188
An organization wants to introduce a new image recognition login system What should the organization do to follow SRE principles?
- A. Roll out the new system to a subset of employees to test it out
- B. Avoid rolling out the new system because it may violate privacy policy
- C. Avoid rolling out the new system because it may have security flaws
- D. Roll out the new system to all employees to collect as much data as possible
正解：A
解説：
To follow Site Reliability Engineering (SRE) principles, the recommended approach when introducing a new system, like an image recognition login system, is to minimize risk and test in a controlled environment. SRE emphasizes progressive rollouts and monitoring to ensure reliability, stability, and security.
Option A: Roll out the new system to a subset of employees to test it out is the correct answer because this aligns with SRE practices, such as:
* Canary Releases: Deploying a new feature to a small group of users (subset of employees) allows the organization to test the system in a real-world environment with minimal risk. This practice helps identify any potential issues, gather feedback, and monitor system behavior without impacting the entire organization.
* Gradual Rollouts: SRE encourages gradual rollouts to detect and mitigate any failures early, reducing the blast radius in case of a malfunction or security issue. This ensures the reliability of the system while maintaining service quality.
* Monitoring and Observability: Rolling out to a subset allows for comprehensive monitoring and collection of metrics to ensure the system performs as expected. If issues arise, they can be quickly identified and resolved before a wider deployment.
Option B: Roll out the new system to all employees to collect as much data as possible is not advisable under SRE principles because it poses a higher risk of widespread failure or security issues.
Option C: Avoid rolling out the new system because it may have security flaws and Option D: Avoid rolling out the new system because it may violate privacy policy are also incorrect in the context of SRE.
While security and privacy are crucial, outright avoidance does not align with SRE practices. Instead, risk is managed through controlled rollouts, testing, and monitoring.
:
Google Cloud SRE Workbook: Canarying Releases
Google Cloud SRE Principles: Monitoring, Progressive Rollouts
Google Cloud Architect's Guide: Reliability and Risk Management
質問 # 189
You are working in a company that provides different services to its customer. Now it also wants to offer some paid API services to its B2B customers for e.g. google provides google maps API, cloud vision API, and language translation API. You need to figure out the best solution for the service.
- A. Java Programming Spring Boot Framework for to solve the problem of APIs man-agement.
- B. Apigee API Management
- C. Frontend & Backend Development with NodeJs and angular etc.
- D. Cloud Functions with Firestore and payment gateways integration development.
正解：B
解説：
Explanation
A top-level idea about Apigee API Management and its offered features can help you solve all questions related to Apigee in Cloud Digital Leader Practice Exam.
Apigee is a platform for developing and managing APIs. By fronting services with a proxy layer, Apigee provides an abstraction or facade for your backend service APIs and provides security, rate limiting, quotas, analytics, and more.
Apigee services: The APIs that you use to create, manage, and deploy your API proxies.
Apigee runtime: A set of containerized runtime services in a Kubernetes cluster that Google maintains. All API traffic passes through and is processed by these services.
質問 # 190
......
無料でゲット！高評価Google Cloud-Digital-Leader試験問題集を今すぐダウンロード！：https://www.passtest.jp/Google/Cloud-Digital-Leader-shiken.html
あなたを合格させるCloud-Digital-Leader無料最新問題集でGoogle練習テストしよう：https://drive.google.com/open?id=1lMS-yYWqic6vLgicjt-yCtHLxwCfDlQg