GCP Cloud Digital Leader Practice Questions¶

40 scenario-based questions weighted by exam domain.

Exam Domain Breakdown¶

Cert page: exams/gcp/cloud-digital-leader/

Domain 1: Digital Transformation with Google Cloud (Questions 1-7)¶

Question 1¶

Scenario: A traditional retail company wants to digitally transform their business. Currently, they use on-premises servers that require significant capital expenditure and long procurement cycles. What is a key benefit of moving to cloud computing for their digital transformation?

A. Shifting from CapEx to OpEx with pay-as-you-go pricing and rapid scalability B. Higher upfront capital costs for reserved hardware C. Reduced access to global markets, because workloads must stay in the one region closest to the company's head office D. Longer deployment cycles, because each new environment still needs the same procurement approval as a physical server

Question 2¶

Scenario: A company's leadership team is concerned about lock-in when adopting cloud services. They want flexibility to use multiple cloud providers and avoid dependency on a single vendor. What Google Cloud capability addresses this concern?

A. Open source technologies such as Kubernetes and TensorFlow, and multi-cloud support through GKE on AWS and Azure and attached clusters B. Contracts requiring single-cloud usage, with committed spend tied to Google Cloud C. Proprietary services only, since closed interfaces let Google guarantee behavior D. Data formats that only work on Google Cloud

Question 3¶

Scenario: A hospital network wants to use cloud computing but is concerned about regulatory compliance for patient data, particularly around data residency and privacy requirements. How does Google Cloud help address these concerns?

A. Compliance is the customer's sole responsibility, as the provider only supplies hardware and does not offer certifications B. Store all data in any region without controls C. Data residency controls, compliance certifications such as HIPAA and FedRAMP, and Assured Workloads D. Ignore compliance requirements until after migration

Question 4¶

Scenario: A manufacturing company has factories in remote locations with limited internet connectivity. They want to use cloud analytics while keeping some processing local for low latency and reliability. What Google Cloud approach supports this hybrid requirement?

A. Cloud-only with no local processing, relying on the factory's internet link B. Edge computing with Google Distributed Cloud connected, running GKE clusters on Google-certified hardware at each factory C. Require high-bandwidth connections and dedicated fiber to each factory D. On-premises only without cloud, running all the analytics at each factory

Question 5¶

Scenario: An executive asks: "Why should we transform our business with cloud rather than just upgrading our existing data center?" What is the most compelling business argument for cloud transformation?

A. Cloud eliminates all IT jobs, since the provider takes over every task that the in-house team performs today B. Cloud is always cheaper for all workloads, so the migration pays for itself in the first quarter after the move C. Cloud enables business agility - faster innovation, global scale, and focus on core business rather than infrastructure management D. Cloud requires no changes to processes, since existing teams can keep working exactly as they do now

Question 6¶

Scenario: A startup wants to build their application on Google Cloud but is concerned about costs as they're uncertain about their traffic patterns. They might have very low usage initially but could scale rapidly if successful. What pricing model helps address this concern?

A. No cost control options exist, so a startup must size for best-case traffic B. Pay-as-you-go with automatic scaling, plus sustained and committed use discounts as usage becomes predictable C. Fixed annual contracts regardless of usage, with a minimum yearly spend D. Upfront payment for maximum anticipated capacity, with unused capacity refunded

Question 7¶

Scenario: A company wants to understand the environmental impact of their IT infrastructure. They're considering cloud migration partly for sustainability reasons. How does Google Cloud support sustainability goals?

A. Carbon-neutral operations since 2007, 100% renewable energy matching, and carbon footprint reporting B. Higher energy consumption than on-premises, because large data centers use more power per workload than a small server room C. No sustainability initiatives, as the provider leaves energy sourcing to the data center landlords it rents space from D. Sustainability is not a consideration for cloud workloads, since emissions are the provider's concern and not reported to customers

Domain 2: Innovating with Data and Google Cloud (Questions 8-16)¶

Question 8¶

Scenario: A retail company wants to analyze their sales data to identify trends and make data-driven decisions. They have 10TB of historical data and want to run complex analytical queries. They don't want to manage infrastructure. Which Google Cloud service is best suited for this?

A. Compute Engine with a self-managed database, which gives full control of the engine, the indexes and the storage layout B. BigQuery, a serverless data warehouse for analytics at scale C. Cloud SQL, a managed relational database that can scale vertically to handle large analytical queries over 10 TB of history D. Cloud Storage alone, which holds the 10 TB cheaply and lets analysts run SQL directly over the objects it stores

Question 9¶

Scenario: A media company wants to automatically categorize and tag millions of images in their content library. They don't have machine learning expertise in-house. What Google Cloud capability enables this?

A. Build custom models from scratch, training a classifier on a labeled sample B. Hire ML engineers first, then wait for the team to collect training data C. Manual image tagging only, by a team of editors who review each image and add the keywords by hand, one image after another D. Vision AI pre-trained models that identify objects, text and categories without custom ML development

Question 10¶

Scenario: A financial services company needs to process and analyze real-time stock market data feeds. They need to detect anomalies and alert traders within seconds. What Google Cloud services support this real-time analytics requirement?

A. Pub/Sub for streaming ingestion with Dataflow or BigQuery streaming for real-time analysis B. Batch processing with nightly reports, using Dataflow batch jobs that load the day's feed into BigQuery after the close C. Manual monitoring, with analysts watching dashboards of the feed and phoning traders when a price looks unusual D. Weekly data imports from the exchange into Cloud Storage, followed by queries run on the loaded files each Monday

Question 11¶

Scenario: A healthcare organization wants to use AI to help radiologists detect potential abnormalities in X-ray images. They have strict accuracy requirements and need to understand how the AI makes decisions. What approach should they consider?

A. Use AI without explanation capabilities, relying on the model's accuracy score on its test set to build trust B. Replace radiologists with AI, since a model with high accuracy no longer needs a clinician to review its output C. Avoid AI in healthcare entirely D. Agent Platform (formerly Vertex AI) with Explainable AI, which gives insight into model predictions

Question 12¶

Scenario: A company has data in multiple systems - CRM, ERP, and various databases. They want to create a unified view of their data and enable self-service analytics for business users. What Google Cloud capability helps achieve this?

A. Manual data integration, with analysts exporting from each system and joining the files in spreadsheets B. A single monolithic database that replaces the CRM and ERP, which the business users then query C. Dataplex for data management across lakes, warehouses and marts with unified governance D. Keep data siloed in separate systems and give each business unit its own reports from the system it owns

Question 13¶

Scenario: A e-commerce company wants to provide personalized product recommendations to customers. They have purchase history data but no data science team. What Google Cloud service can help them implement recommendations quickly?

A. Show random products to every visitor and keep the best sellers B. Recommendations AI, retail-specific personalization needing little ML expertise C. Build custom ML models from scratch on Agent Platform, using the purchase history and a newly hired team D. Manual curation only, with merchandisers choosing the products

Question 14¶

Scenario: A logistics company wants to optimize their delivery routes using AI. They have historical delivery data and want to reduce fuel costs and improve delivery times. What type of AI/ML approach is most relevant?

A. Speech recognition, which converts drivers' spoken reports into text B. Image recognition, which reads photos of road conditions and package labels C. Optimization algorithms plus machine learning, using traffic, distance and delivery windows D. Natural language processing, which analyses customer messages

Question 15¶

Scenario: A call center wants to automatically transcribe and analyze customer calls to identify common issues and sentiment. What Google Cloud AI services support this use case?

A. Video analysis only, using the Video Intelligence API to detect the speakers and the sentiment in recordings B. Manual call listening by a quality team that samples a few calls each week and writes a summary of them C. Image recognition, applied to waveform images of the recordings D. Speech-to-Text for transcription plus the Natural Language API for sentiment and entities

Question 16¶

Scenario: A company wants to ensure their data analytics practices comply with data governance requirements. They need to track data lineage (where data comes from), ensure data quality, and manage access. What Google Cloud service provides these capabilities?

A. Manual documentation kept in a wiki, with each team recording where its data came from and who is allowed to see it B. Spreadsheet tracking of every dataset's owner, source and quality checks, updated by the data stewards each quarter C. Dataplex for governance, including lineage, quality rules and access management across distributed data D. No data governance tools exist on Google Cloud

Domain 3: Infrastructure and Application Modernization (Questions 17-25)¶

Question 17¶

Scenario: A company has a legacy monolithic application running on physical servers. They want to move to the cloud quickly with minimal changes as a first step. What migration approach is this?

A. Build a new application from scratch on cloud-native services B. Complete application rewrite into microservices before moving, so the first deployment is already cloud-native C. Lift and shift (rehost) - moving the application to cloud VMs with minimal modifications D. Stay on-premises and add more physical servers

Question 18¶

Scenario: A development team wants to deploy their application without managing servers, patches, or scaling. They want to focus purely on writing code. What Google Cloud compute option provides this experience?

A. Compute Engine, where the team creates VMs, applies patches and sets up autoscaling groups for the traffic B. Self-managed Kubernetes on VMs, where the team still upgrades nodes C. Physical servers in Google data centers, dedicated to the team D. Cloud Run or Cloud Functions, serverless platforms that handle infrastructure automatically

Question 19¶

Scenario: A company wants to run their containerized applications with full control over the Kubernetes cluster configuration, including node types and networking. They have DevOps expertise. What Google Cloud service provides managed Kubernetes with this control?

A. App Engine, which runs containers with the node types and cluster networking set by the platform for you B. Google Kubernetes Engine (GKE), managed Kubernetes with control over cluster configuration C. Cloud Run (fully serverless), where the team chooses node types and the networking of the underlying cluster D. Compute Engine only, installing Kubernetes on the VMs by hand and running the control plane themselves

Question 20¶

Scenario: A traditional company has applications running in their data center. They want to start using Google Cloud but need connectivity between their data center and Google Cloud that doesn't go over the public internet. What connectivity option provides this?

A. Cloud Interconnect (Dedicated or Partner) for private connectivity that bypasses the public internet B. Public internet only, with TLS on every application connection C. No hybrid connectivity options exist, so each application must be rebuilt in Google Cloud before it can talk to it D. Cloud CDN, which caches the data center's content at Google's edge locations

Question 21¶

Scenario: A company wants to modernize their application by breaking it into smaller, independently deployable services. Each service should be developed by different teams and communicate via APIs. What architecture pattern is this?

A. Single large application, deployed as one unit and owned by a central team that coordinates every release B. Mainframe computing, where the services share one central system and a common batch scheduler C. Microservices architecture - small, loosely coupled services D. Monolithic architecture, in which every feature is in one codebase but teams still release changes independently

Question 22¶

Scenario: A development team wants to automate their build, test, and deployment process. When code is committed, it should automatically be tested and deployed to production if tests pass. What practice and Google Cloud tools support this?

A. Deploy directly without testing, using a script on the developer's laptop that copies the build to production B. CI/CD (Continuous Integration/Continuous Deployment) using Cloud Build for builds and Cloud Deploy for deployments C. Weekly manual releases, in which a release manager runs the tests and deploys the approved changes by hand D. Manual deployments only, with a runbook that each engineer follows when the code is ready to go live

Question 23¶

Scenario: A company has APIs that different applications and partners need to access. They want to manage API access, monitor usage, rate limit abusive clients, and monetize API access. What Google Cloud service provides these API management capabilities?

A. Block all external API access B. Apigee API Management for securing, analyzing and monetizing APIs C. Direct API access without management, since the backend services can enforce their own rate limits D. Manual tracking of API usage in a spreadsheet, with developers contacting abusive clients one by one

Question 24¶

Scenario: A company has virtual machines on another cloud provider. They want to migrate these VMs to Google Cloud. What tool helps assess and execute this migration?

A. Start from scratch in Google Cloud, rebuilding each server from its documented configuration B. Migrate to Virtual Machines, to migrate VMs and disks from AWS, Azure, and VMware to Google Cloud C. No migration tools are available for VMs that run on another cloud provider, only for on-premises servers and physical machines D. Manual VM recreation, exporting each disk image and importing it to Compute Engine one machine at a time by hand

Question 25¶

Scenario: A company wants to ensure their applications are resilient - if one data center fails, their application should continue running. What Google Cloud concept supports this high availability requirement?

A. Multi-zone or multi-region deployments with load balancing for automatic failover to healthy instances B. Single zone deployment only, with a larger machine type C. Accept downtime during failures, restoring from the last snapshot D. No redundancy options exist, so a failed data center always means the application is down until Google repairs it

Domain 4: Google Cloud Security and Operations (Questions 26-33)¶

Question 26¶

Scenario: A security team wants to ensure that users can only access the Google Cloud resources they need for their job - no more, no less. What Google Cloud concept enables this principle of least privilege?

A. Give everyone admin access, then remove roles from those who say they do not need them B. No access controls inside the project, relying on the network firewall C. Shared passwords for each team, kept in a vault D. IAM with predefined and custom roles granting specific permissions at the narrowest suitable scope

Question 27¶

Scenario: A company stores sensitive customer data in Google Cloud. They want to ensure data is encrypted and they control the encryption keys. What options does Google Cloud provide for encryption key management?

A. No encryption options for stored data, so customers must encrypt it themselves B. Only unencrypted storage is available by default C. Google-managed keys (default), customer-managed keys in Cloud KMS, or customer-supplied keys D. Customers must build their own encryption, since the platform does not encrypt data at rest and offers no key service

Question 28¶

Scenario: An organization wants to detect security threats in their Google Cloud environment - unauthorized access, malware, data exfiltration attempts. What Google Cloud service provides threat detection?

A. Security Command Center, providing security posture management and threat detection B. No threat detection services are available on Google Cloud C. Manual log review only, by the security team each morning D. Third-party tools are required for any attack detection

Question 29¶

Scenario: A company needs to comply with industry regulations and wants to verify that their Google Cloud infrastructure meets compliance standards (PCI DSS, HIPAA, etc.). How does Google Cloud support compliance requirements?

A. No compliance support is offered, so regulated customers must stay in a private data center B. Automatic compliance without effort, because using a certified provider makes every customer workload compliant from day one C. Compliance is entirely the customer's burden, since the provider does not publish audit reports or certifications to anyone D. Compliance certifications (SOC, ISO, PCI, HIPAA), shared responsibility, and compliance reports for customers

Question 30¶

Scenario: A company wants to ensure their employees can only access Google Cloud from corporate networks or approved devices, not from personal devices or public networks. What Google Cloud feature enables this?

A. Allow access from anywhere, with a strong password policy and multi-factor authentication for every user B. BeyondCorp Enterprise and Access Context Manager for device trust and network-based access controls C. A VPN only approach, in which all staff connect to the corporate network and Google Cloud accepts that traffic D. No device or network restrictions are possible, since access control in Google Cloud is based on identity alone

Question 31¶

Scenario: A security incident occurred and the team needs to investigate what happened. They need to see who accessed what resources, when, and what actions they took. Where should they look?

A. No audit capabilities exist on the platform B. Cloud Audit Logs capturing admin activity, data access and system events, with who, what and when C. Ask users what they did, then check their answers against the IAM policy D. Manual observation only, with an engineer watching the Cloud console

Question 32¶

Scenario: A company wants to prevent sensitive data from leaving their Google Cloud environment, even if an attacker gains access credentials. What Google Cloud feature provides this data loss prevention at the network perimeter?

A. Trust all authenticated users, since valid credentials show that the request comes from someone who is allowed B. No perimeter data loss prevention is available, only per file C. Firewall rules only, denying egress to all but approved addresses D. VPC Service Controls creating security perimeters that prevent data exfiltration from protected services

Question 33¶

Scenario: A company wants to understand the security posture of their Google Cloud environment at a glance. They need to see vulnerabilities, misconfigurations, and compliance status in one place. What provides this unified view?

A. Security Command Center dashboard of findings, vulnerabilities and compliance status B. No unified security view exists, so each team keeps its own list of findings in its own tool C. Third-party tools only, which gather findings from each service by API and show them in one place D. Check each service individually, by opening its console page and reading the warnings it shows

Domain 5: Scaling with Google Cloud Operations (Questions 34-40)¶

Question 34¶

Scenario: A company's application is running on Google Cloud and they need to ensure it's performing well. They want to monitor response times, error rates, and resource utilization. What Google Cloud service provides this monitoring capability?

A. Third-party tools are required, since Google Cloud does not collect metrics from the services it runs B. No monitoring is available for response times and error rates, only for the state of the virtual machines C. Manual observation only, with engineers refreshing the application and noting how long each page takes D. Cloud Monitoring, providing metrics, dashboards and alerting for resources and applications

Question 35¶

Scenario: A development team is troubleshooting application issues. They need to see application logs from multiple services and correlate them to understand a transaction flow. What Google Cloud service helps with this?

A. Print statements only, written to the console of each server and read by the developer who has access to it B. No logging support is offered for applications across several services C. Cloud Logging with centralized logs, log-based metrics, and correlation with Cloud Trace for tracing D. Logs on individual servers only, copied to a shared folder when needed

Question 36¶

Scenario: A company's website traffic varies dramatically - low during off-hours and spikes during marketing campaigns. They want their infrastructure to automatically adjust to demand without manual intervention. What capability provides this?

A. Fixed capacity regardless of demand, chosen as the average of the quiet and busy periods B. Over-provision for peak always, so the busiest campaign day never meets any shortage of capacity, whatever it costs C. Autoscaling that automatically adds/removes resources based on metrics like CPU utilization or request count D. Manual scaling only, with an engineer adding servers whenever a campaign is announced and removing them again later

Question 37¶

Scenario: A company wants to get recommendations on how to optimize their Google Cloud costs - identifying idle resources, rightsizing VMs, and taking advantage of discounts. What Google Cloud capability provides these insights?

A. Active Assist, giving recommendations on cost, VM rightsizing and committed use discounts B. No cost optimization support is available, so customers review each invoice by hand each month C. Overpay and don't optimize, since discounts are applied automatically and no further saving is possible D. Manual cost analysis only, comparing each VM's usage in the console with the machine types in the price list

Question 38¶

Scenario: A company wants to define their infrastructure (networks, VMs, databases) as code so it can be version-controlled, reviewed, and consistently deployed. What approach and tools support this?

A. Infrastructure as Code (IaC) using Terraform or Infrastructure Manager for declarative infrastructure definition B. Scripts without version control, stored on an engineer's laptop and run when a new environment is needed, then fixed by hand C. Undocumented manual changes, made in the console by whoever is on call when something has to be fixed in a hurry overnight D. Manual configuration through the console, followed by a screenshot of each setting for the records

Question 39¶

Scenario: A global company wants to ensure their application is highly available and provides good performance for users worldwide. If one region fails, users should be automatically redirected to healthy regions. What Google Cloud feature enables this?

A. Accept regional outages, with a status page that tells users when the region is expected to recover B. Manual DNS changes during outages C. Single region deployment with extra zones, which protects against a zone failure but not a regional one D. Global HTTP(S) Load Balancing, routing users to the nearest healthy backend across regions

Question 40¶

Scenario: A finance team wants to track and allocate Google Cloud costs across different departments and projects. They need detailed billing reports showing which teams are spending what. What Google Cloud features support this cost management need?

A. No cost breakdown is available, so the finance team must divide the bill by headcount in each department B. A single undifferentiated bill for the whole organization, with no way to attribute spend to a project C. Estimate costs without tracking, using the pricing calculator once a year to forecast each team's spend D. Billing accounts with projects, labels for cost allocation, and detailed billing reports/exports to BigQuery for analysis