Question 1

Your company has multiple internal applications used by your employees. You also have to give access to certain vendors and contractors. What is a good option
for you to adopt?

Accepted Answer

IDaaS - identity providers managed by the company give better control over security and privacy. Security/access can be set granularly, while also being
centralized. You don't have to manage multiple credentials.

Question 2

Your organization needs to allow a production job to have access to a BigQuery dataset. The production job is running on a Compute Engine instance that is part
of an instance group.
What should be included in the IAM Policy on the BigQuery dataset?

Accepted Answer

When an identity calls a Google Cloud API, BigQuery requires that the identity has the appropriate permissions to use the resource. You can grant permissions by
granting roles to a user, a group, or a service account.
Reference link- https://cloud.google.com/bigquery/docs/access-control

Question 3

Your organization needs to minimize how much it pays for data traffic from the Google network to the internet. What should your organization do?

Accepted Answer

Choose the Standard network service tier. While Premium tier is the default for all egress traffic and offers the highest performance, when cost is a consideration.
Standard tier is the more economical.
https://cloud.google.com/blog/products/networking/networking-cost-optimization-best- practices

Question 4

An organization has completely migrated all their infrastructure to the cloud to benefit from its agility. Now they want to innovate faster and achieve a higher return
on investment. What should the organization do?

Accepted Answer

Because this will enable the business to better serve their users.

Question 5

You want to build an application that will allow customers to register and login. It would be great to have the ability to secure it with multi-factor authentication and
the ability to reset credentials. As a small startup, you want to build the main application as quickly as possible and have minimum overhead. Which might be a
suitable option for you on Google Cloud?

Accepted Answer

Cloud Identity Platform
Cloud Identity Platform allows you to manage identity and credentials for your consumer- facing applications. So that's the right one in this case to use. "Identity
Platform is a customer identity and access management (CIAM) platform that helps organizations add identity and access management functionality to their
applications, protect user accounts, and scale with confidence on Google Cloud."
Reference link- https://cloud.google.com/identity-platform

Question 6

Your organization needs to establish private network connectivity between its on-premises network and its workloads running in Google Cloud. You need to be
able to set up the connection as soon as possible.
Which Google Cloud product or feature should you use?

Accepted Answer

Private Google Access for on-premises hosts provides a way for on-premises systems to connect to Google APIs and services by routing traffic through a Cloud
VPN tunnel. Reference: https://cloud.google.com/vpc/docs/configure-private-google-access-hybrid

Question 7

Each of the three cloud service models - infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS) - offers benefits
between flexibility and levels of management by the cloud provider and the customer.
Why would SaaS be the right choice of service model?

Accepted Answer

Benefits of SaaS
The main benefit of SaaS is that it offloads all infrastructure and application management to the SaaS vendor.
Reference: https://www.ibm.com/cloud/learn/iaas-paas-saas

Question 8

Your organization is running all its workloads in a private cloud on top of a hypervisor. Your
organization has decided it wants to move to Google Cloud as quickly as possible. Your organization wants minimal changes to the current environment, while
using the maximim amount of managed services Google offers.
What should your organization do?

Accepted Answer

From SurePassExam
https://www.surepassexam.com/Cloud-Digital-Leader-exam-dumps.html (304 New Questions)
Migrate for Compute Engine enables you to lift and shift workloads at scale to Google Cloud Compute Engine with minimal changes and risk.
Reference: https://dataintegration.info/simplify-vm-migrations-with-migrate-for-compute-engine-as-a-service

Question 9

As your organization increases its release velocity, the VM-based application upgrades take a long time to perform rolling updates due to OS boot times. You need
to make the application deployments faster.
What should your organization do?

Accepted Answer

Correct answer: B

Question 10

Your organization wants to run a container-based application on Google Cloud. This application is expected to increase in complexity. You have a security need for
fine-grained control of traffic between the containers. You also have an operational need to exercise fine-grained control over the application’s scaling policies.
What Google Cloud product or feature should your organization use?

Accepted Answer

Google Kubernetes Engine GKE seems a better fit since the requirement is for "security need for fine-grained control of traffic between the containers" and "finegrained control over scaling policies". Such level of control is easier on GKE that Cloud Run.
Reference link- https://cloud.google.com/blog/products/containers-kubernetes/when-to-use-google-kubernetes-engine-vs-cloud-run-for-containers