Dec-2024 Free Cloud-Digital-Leader Test Questions Real Practice Test Questions
Cloud-Digital-Leader Dumps Updated Dec 13, 2024 WIith 373 Questions
NEW QUESTION # 207
An employee receives an email from their internet service provider asking for their bank account number and password.
Which cybersecurity threat is this?
- A. Distributed Denial of Service
- B. Ransomware
- C. Spamming
- D. Phishing
Answer: D
Explanation:
The difference between spam and phishing is that, while they both may be inbox-clogging nuisances, only one (phishing) is actively aiming to steal login credentials and other sensitive data. Spam is a tactic for hawking goods and services by sending unsolicited emails to bulk lists
NEW QUESTION # 208
You are leading projects in an IT services company. Your customer's project requires analyzing im-ages.
They have many 10s of 1000s of raw images that they have made available to you. Your small technology team needs to build a machine learning model. The images are unlabeled. You don't have the people or the capacity to label the images. What is your approach?
- A. Look for open-source labeled images that closely resemble the given images.
- B. Hire temporary workers who can quickly label the images.
- C. Request data labeling service from Google.
- D. Tell the customer it is their duty to label the images.
Answer: D
Explanation:
Google's Data Labeling Service lets you work with human labelers to generate highly accurate labels for a collection of data that you can use in machine learning models.
References:
-> https://cloud.google.com/vertex-ai/docs/datasets/data-labeling-job
-> https://cloud.google.com/ai-platform/data-labeling/docs
NEW QUESTION # 209
Your organization needs to minimize how much it pays for data traffic from the Google network to the internet. What should your organization do?
- A. Deploy Cloud VPN.
- B. Deploy Cloud NAT.
- C. Choose the Standard network service tier.
- D. Choose the Premium network service tier.
Answer: C
Explanation:
Explanation
Choose the Standard network service tier. While Premium tier is the default for all egress traffic and offers the highest performance, when cost is a consideration. Standard tier is the more economical.
Text, letter Description automatically generated
https://cloud.google.com/blog/products/networking/networking-cost-optimization-best-practices
NEW QUESTION # 210
An organization wants to measure everything as part of its new DevOps philosophy. What should the organization measure?
- A. The risk and reward of their investments.
- B. The speed of their cloud adoption process.
- C. The reliability and health of their systems.
- D. The satisfaction and happiness of their employees.
Answer: C
Explanation:
https://newrelic.com/devops/measuring-devops#toc-devops-measurments-for-team-health
NEW QUESTION # 211
Your large and frequently changing organization's user information is stored in an on-premises LDAP database. The database includes user passwords and group and organization membership.
How should your organization provision Google accounts and groups to access Google Cloud resources?
- A. Replicate the LDAP infrastructure on Compute Engine
- B. Use Google Cloud Directory Sync to create users
- C. Use the Firebase Authentication REST API to create users
- D. Use the Identity Platform REST API to create users
Answer: B
Explanation:
Explanation
You can run a single instance of Google Cloud Directory Sync to synchronize user accounts and groups to Google Cloud.
Reference: https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction Text Description automatically generated
https://support.google.com/a/answer/106368?hl=en
NEW QUESTION # 212
An organization wants full control of their virtual machine infrastructure for a custom home-grown application with a product that autoscales and automatically updates.
Which Google Cloud product or solution should the organization use?
- A. Compute Engine
- B. Cloud Run
- C. Cloud Build
- D. App Engine
Answer: A
Explanation:
Explanation
Compute Engine will allow you to have full control of their VM infrastructure and you can autoscale and also apply automatic updates.
NEW QUESTION # 213
Which of the following is/are true about Anthos?
- A. All of the Above
- B. Modernizing your security for hybrid and multi-cloud deployments
- C. Enterprise-grade container orchestration and management service.
- D. Fully managed service mesh with built-in visibility
Answer: A
Explanation:
Anthos :
Anthos unifies the management of infrastructure and applications across on-premises, edge, and in multiple public clouds with a Google Cloud-backed control plane for consistent operation at scale.
- Build, deploy, and optimize apps on GKE and VMs anywhere-simply, flexibly, and securely.
- Consistent development and operations experience for hybrid and multi-cloud environments.
Key features:
1. Enterprise-grade container orchestration and management service
2. Automate policy and security at scale
3. Fully managed service mesh with built-in visibility
4. Modernizing your security for hybrid and multi-cloud deployments
NEW QUESTION # 214
Your company is running the majority of its workloads in a co-located data center. The workloads are running on virtual machines (VMs) on top of a hypervisor and use either Linux or Windows server editions. As part of your company's transformation strategy, you need to modernize workloads as much as possible by adopting cloud-native technologies. You need to migrate the workloads into Google Cloud.
What should you do?
- A. Export the VMs into VMDK format, and import them into Compute Engine
- B. Migrate the workloads using Migrate for Compute Engine
- C. Migrate the workloads using Migrate for Anthos
- D. Export the VMs into VMDK format, and import them into Google Cloud VMware Engine
Answer: C
Explanation:
Explanation
Anthos: Anthos lets you build, deploy, and manage applications anywhere in a secure, consistent manner. You can modernize existing applications running on virtual machines while deploying cloud-native apps on containers in an increasingly hybrid and multi-cloud world.
NEW QUESTION # 215
Compute Engine provides machine type recommendations to help you optimize the re-source utilization of your virtual machine (VM) instances. What is this capability called?
- A. Recommendation Engine
- B. Rightsizing Recommendations
- C. None of the above
- D. App Engine
Answer: B
Explanation:
Compute Engine provides machine type recommendations to help you optimize the resource utilization of your virtual machine (VM) instances. These recommendations are generated automatically based on system metrics gathered by the Cloud Monitoring service over the previous 8 days. Use these recommendations to resize your instance's machine type to use the instance's resources more efficiently. This feature is also known as rightsizing recommendations Reference link- https://cloud.google.com/compute/docs/instances/apply-machine-type-recommendations-for-instances
NEW QUESTION # 216
Your company security team manages access control to production systems using an LDAP directory group.
How is this access control managed in the Google Cloud production project?
- A. Assign the proper role to the Google Group in the project's IAM Policy.
- B. Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group.
- C. Create the project in a folder with the same name as the LDAP directory group.
- D. Assign the proper role to the Service Account in the project's IAM Policy
Answer: A
Explanation:
Reference:
https://cloud.google.com/blog/products/identity-security/achieving-identity-and-access-governance-on-google-cl Text, letter Description automatically generated
NEW QUESTION # 217
Your company security team manages access control to production systems using an LDAP directory group.
How is this access control managed in the Google Cloud production project?
- A. Assign the proper role to the Google Group in the project's IAM Policy.
- B. Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group.
- C. Create the project in a folder with the same name as the LDAP directory group.
- D. Assign the proper role to the Service Account in the project's IAM Policy
Answer: A
Explanation:
Reference: https://cloud.google.com/blog/products/identity-security/achieving-identity-and-access- governance-on-google-cloud Text, letter Description automatically generated
NEW QUESTION # 218
An organization finds that the amount of cash in their vending machines doesn't match the value of items sold. They have decided to upgrade their vending machines with cloud-based mobile payment systems.
How could the organization benefit from this upgrade?
- A. They could view data history to see transactions.
- B. They could relax data access permissions.
- C. They could reduce their error budget overspend.
- D. They could improve their perimeter security.
Answer: A
NEW QUESTION # 219
Your organization uses Active Directory to authenticate users. Users' Google account access must be removed when their Active Directory account is terminated.
How should your organization meet this requirement?
- A. Configure two-factor authentication in the Google domain
- B. Remove the Google account from all IAM policies
- C. Configure single sign-on in the Google domain
- D. Configure BeyondCorp and Identity-Aware Proxy in the Google domain
Answer: C
Explanation:
Explanation
Configure single sign-on in the Google domain
Single sign-on: Whenever a user needs to authenticate, Google Cloud delegates the authentication to Active Directory by using the Security Assertion Markup Language (SAML) protocol. This delegation ensures that only Active Directory manages user credentials and that any applicable policies or multi-factor authentication (MFA) mechanisms are being enforced. For a sign-on to succeed.
https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction Reference Link- https://cloud.google.com/architecture/identity/single-sign-on
NEW QUESTION # 220
A multinational retail company has approached you to help design its systems. They have millions of transactions at their point of sale systems across the world that need to be captured, stored, and analyzed.
They are seeing more growth and expect to expand into even more geographies. Which database would be appropriate for them?
- A. Cloud SQL
- B. Cloud Spanner
- C. Cloud Datastore
- D. Cloud Storage
Answer: B
Explanation:
Cloud Spanner: "Fully managed relational database with unlimited scale, strong consistency, and up to
99.999% availability."
Reference:- https://cloud.google.com/spanner
NEW QUESTION # 221
Considering Google Cloud Storage different Options which of the following is / are correct on the basis of their real world use cases?
- A. Google Cloud BigTable : AdTech, Financial and IoT Data.
- B. Cloud Storage : Images, Large Media, files , backups.
- C. All of the Above.
- D. Cloud SQL : User Credentials, customer orders.
Answer: C
Explanation:
Explanation
Cloud Datastore is the best for semi-structured application data that is used in app engines' applications.
Bigtable is best for analytical data with heavy read/write events like AdTech, Financial or IoT data. Cloud Storage is best for structured and unstructured, binary or object data like images, large media files and backups. SQL is best for web frameworks and in existing applications like storing user credentials and customer orders. Cloud Spanner is best for large scale database applications that are larger than two terabytes; for example, for financial trading and e-commerce use cases. As I mentioned at the beginning of the module, depending on your application, you might use one or several of these services to get the job done.
NEW QUESTION # 222
......
View All Cloud-Digital-Leader Actual Free Exam Questions Updated: https://passleader.briandumpsprep.com/Cloud-Digital-Leader-prep-exam-braindumps.html
