表示モード
画像位置
文字位置
理解度の自動記録
Q1Google Cloud Digital Leader
Q1. A company is designing a resource hierarchy for a new application it is developing on Google Cloud.
The development and production environments must be kept separate.
The production environment is planned to be deployed across two regions on Compute Engine.
Which configuration should the company choose?
Show answer
Correct answer: C. Create one project each for the development environment and the production environment.
A project is the fundamental unit of isolation and management in the Google Cloud resource hierarchy.Separating the development and production environments at the project level is the best practice, as it lets you manage IAM, billing, quotas, and policies independently while limiting the blast radius of any mistaken operation.
Even though the production environment spans two regions, you can simply place resources from multiple regions within a single project, so there is no need to split projects by region.
Labels and tags are merely management metadata and are insufficient as a boundary for environment separation.
Google Cloud resource hierarchy | Resource Manager documentation
Q2Google Cloud Digital Leader
Q2. Some of a company’s virtual machines may have security vulnerabilities in their operating systems.
What is the most effective way to identify virtual machines that have not had the latest security updates applied?
Show answer
Correct answer: A. Review Security Command Center and identify virtual machines that are running vulnerable disk images.
Security Command Center (SCC) is what handles vulnerability detection and centralized visibility.Security Health Analytics and Web Security Scanner detect vulnerabilities and help identify VMs that are using vulnerable disk images.
Compliance Reports Manager is a feature for downloading audit reports such as PCI and SOC 1, and cannot be used to identify vulnerabilities on individual VMs.
The time of startup, “more than two weeks ago,” has no direct relationship to whether a vulnerability exists, so that option is incorrect.
Vulnerability findings | Security Command Center documentation
Q3Google Cloud Digital Leader
Q3. A company is increasing its release frequency, but VM-based application updates are taking a long time to roll out because OS boot time has become a bottleneck for rolling updates.
The company needs to make application deployments faster.
What should the company do?
Show answer
Correct answer: B. Convert the application into containers.
Containers do not require an OS boot, so they are lightweight and start quickly.When OS boot time is the deployment bottleneck, containerizing the application is the most effective solution, greatly speeding up startup and deployment.
Increasing VM resources (C) or migrating to the cloud and adding resources (A) does not reduce boot time itself.
Automating the rollout (D) automates the procedure but does not shorten OS startup time.
What are containers | Google Cloud
[Outdated question] Q4. Which of the following statements about Preemptible VMs is correct?
Show answer
Correct answer: C. None of the above is correct.
Preemptible VMs are offered at a fixed low price, up to about 80% cheaper than standard instances.Therefore, Option A, which says they do not have a fixed price, is incorrect.
They are in fact well suited to fault-tolerant processing such as HPC, big data, CI/CD, rendering, and testing, so Option D is also incorrect.
Since no correct statement exists, C is the correct answer.
Note that the newer Spot VMs are now recommended as the successor, with improvements such as no limit on maximum runtime before preemption.
Spot VMs | Compute Engine documentation
[Outdated question] Q5. How do Migrate for Compute Engine and Migrate for Anthos differ?
Show answer
Correct answer: D. Migrate for Anthos migrates to containers, whereas Migrate for Compute Engine migrates to virtual machines.
The essential difference between the two is whether the migration target is a container or a virtual machine.Migrate for Anthos (now Migrate to Containers) migrates workloads to containers, while Migrate for Compute Engine (now Migrate to Virtual Machines) migrates them to VMs.
Therefore, D is correct.
The statement that limits the source to VMware vSphere (A), the open-source/closed-source distinction (C), and the difference in ingress charges (B) are all incorrect.
Migrate to Containers overview | Google Cloud documentation
Q6Google Cloud Digital Leader
Q6. Which Google Cloud service or feature lets you build machine learning models using standard SQL and data already in your data warehouse?
Show answer
Correct answer: A. BigQuery ML
BigQuery ML is a feature that lets you create and run machine learning models using only standard SQL within BigQuery, a data warehouse.Its greatest advantage is that you can build models with familiar SQL without moving the data to a separate environment.
TensorFlow is an ML framework that requires writing code, AutoML Tables is a no-code ML offering for structured data (now integrated into Vertex AI), and there is no product called Cloud Bigtable ML.
Introduction to BigQuery ML | BigQuery documentation
Q7Google Cloud Digital Leader
Q7. A company needs to restrict access to a Cloud Storage bucket.
It wants only employees based in Canada to be able to view the contents.
Which is the most effective and efficient way to meet this requirement?
Show answer
Correct answer: D. Create a group consisting of all employees based in Canada and grant that group access to the bucket.
Grouping users together and granting access to the group is the most efficient and manageable approach.By creating a group of Canada-based employees and granting that group access to the bucket, you can meet the requirement while keeping operational overhead low.
Placing the bucket in a Canadian region (A) only determines where the data is stored and does not provide access control.
Cloud Armor (B) is a protection feature for HTTP(S) load balancers and is not suitable for directly controlling Cloud Storage, while granting access individually (C) becomes less efficient as the number of people grows.
Overview of access control | Cloud Storage documentation
[Outdated question] Q8. A development team is building an application to deploy on Cloud Run.
You are designing a CI/CD pipeline so that new versions of the application can be deployed in as few steps as possible.
You need to choose where to store the application image built in the CI part.
What should you do?
Show answer
Correct answer: B. Store the image in Container Registry.
Storing container images in a dedicated container registry is the optimal way to deploy to Cloud Run in the fewest steps.At the time this question was written, Container Registry was the correct answer, but Container Registry was shut down in March 2025, and Artifact Registry is now the recommended successor service.
Compute Engine images and disks (A and D) are for VMs, and Cloud Storage (C) is general-purpose object storage; none of them are optimized for managing container images.
Artifact Registry overview | Google Cloud documentation
Q9Google Cloud Digital Leader
Q9. A company is developing a mobile app and wants to select a feature-rich, cloud-based computing platform for it.
Which Google Cloud product or feature should the company use?
Show answer
Correct answer: B. Firebase
Firebase is Google’s app development platform for quickly building and scaling mobile and web apps.It comprehensively provides the features needed for mobile app development, such as authentication, databases, hosting, analytics, and push notifications.
GKE (A), Cloud Functions (C), and App Engine (D) can also serve as compute foundations, but the most feature-rich and integrated option for mobile apps is Firebase.
Firebase | Google’s app development platform
Q10Google Cloud Digital Leader
Q10. A company is at a critical stage with a recently developed application and plans to go into production in one month.
It expects millions of users to use the new application.
The company wants to minimize disruptions when going live, and when problems occur it needs to respond within minutes and resolve them as quickly as possible.
Which support package should it choose?
Show answer
Correct answer: D. Premium Support
Premium Support is the top-tier plan, offering a response time of within 15 minutes and 24/7 support for the highest-priority (P1) issues.For a production application with millions of users where failures must be resolved quickly within minutes, Premium Support is the best fit.
Basic (free and not intended for production), Standard, and Enhanced have longer response times and are insufficient for immediate, mission-critical response.
Note that response times and offering details should be confirmed against the official information at the time of contract.
Google Cloud Customer Care (Support)