Amazon
Avaya
Checkpoint
Cisco®
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL®
Juniper
Microsoft
Okta
Palo Alto Networks
Salesforce
All Vendors
  1. Home
  2. Google
  3. CLOUD-DIGITAL-LEADER

Google CLOUD-DIGITAL-LEADER Exam (page: 3)
Google Cloud Digital Leader
Updated on: 25-Dec-2025

Viewing Page 3 of 84
CLOUD-DIGITAL-LEADER PDF 411 Questions

Your organization stores highly sensitive data on-premises that cannot be sent over the public internet. The data must be processed both on-premises and in the cloud.
What should your organization do?

  1. Configure Identity-Aware Proxy (IAP) in your Google Cloud VPC network
  2. Create a Cloud VPN tunnel between Google Cloud and your data center
  3. Order a Partner Interconnect connection with your network provider
  4. Enable Private Google Access in your Google Cloud VPC network

Answer(s): C

Explanation:

After the service provider provisions your connection, you can start passing traffic between your networks by using the service provider's network.


Reference:

https://cloud.google.com/network-connectivity/docs/interconnect/concepts/partner- overview



Your company's development team is building an application that will be deployed on Cloud Run. You are designing a CI/CD pipeline so that any new version of the application can be deployed in the fewest number of steps possible using the CI/CD pipeline you are designing. You need to select a storage location for the images of the application after the CI part of your pipeline has built them.
What should you do?

  1. Create a Compute Engine image containing the application
  2. Store the images in Container Registry
  3. Store the images in Cloud Storage
  4. Create a Compute Engine disk containing the application

Answer(s): B


Reference:

https://cloud.google.com/container-registry/docs/pushing-and-pulling



Each of the three cloud service models - infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS) - offers benefits between flexibility and levels of management by the cloud provider and the customer.
Why would SaaS be the right choice of service model?

  1. You want a balance between flexibility for the customer and the level of management by the cloud provider
  2. You want to minimize the level of management by the customer
  3. You want to maximize flexibility for the customer.
  4. You want to be able to shift your emphasis between flexibility and management by the cloud provider as business needs change

Answer(s): B

Explanation:

Benefits of SaaS
The main benefit of SaaS is that it offloads all infrastructure and application management to the SaaS vendor.


Reference:

https://www.ibm.com/cloud/learn/iaas-paas-saas



As your organization increases its release velocity, the VM-based application upgrades take a long time to perform rolling updates due to OS boot times. You need to make the application deployments faster.

What should your organization do?

  1. Migrate your VMs to the cloud, and add more resources to them
  2. Convert your applications into containers
  3. Increase the resources of your VMs
  4. Automate your upgrade rollouts

Answer(s): B



Your organization uses Active Directory to authenticate users. Users' Google account access must be removed when their Active Directory account is terminated.
How should your organization meet this requirement?

  1. Configure two-factor authentication in the Google domain
  2. Remove the Google account from all IAM policies
  3. Configure BeyondCorp and Identity-Aware Proxy in the Google domain
  4. Configure single sign-on in the Google domain

Answer(s): D

Explanation:

Configure single sign-on in the Google domain

Single sign-on: Whenever a user needs to authenticate, Google Cloud delegates the authentication to Active Directory by using the Security Assertion Markup Language (SAML) protocol. This delegation ensures that only Active Directory manages user credentials and that any applicable policies or multi-factor authentication (MFA) mechanisms are being enforced. For a sign-on to succeed.



https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction

Reference Link- https://cloud.google.com/architecture/identity/single-sign-on



Viewing Page 3 of 84



Share your comments for Google CLOUD-DIGITAL-LEADER exam with other users:

Ranveer 7/26/2023 7:26:00 PM

Pass this exam 3 days ago. The PDF version and the Xengine App is quite useful.
SOUTH AFRICA


Karthik 10/12/2023 10:51:00 AM

nice question
Anonymous


EDITH NCUBE 7/25/2023 7:28:00 AM

answers are correct
SOUTH AFRICA