Cloud Digital Leader

Last checked October 22, 2026 against the official Google Cloud exam page.

1. Question 1Exploring data transformation with Google Cloud

   A retailer collects point-of-sale events from thousands of stores and needs them available for analytics within seconds. Which Google Cloud service is the best fit for ingesting these events?

   1. ACloud SQL with a read replica in each store region for reporting queries
   2. BPub/Sub, to ingest the store events as messages and deliver them asynchronously to consumers
   3. CCloud Storage Transfer Service, scheduled to copy batch files each night
   4. DDataproc, configured to run a weekly Spark job against cluster-local disks
   Show answer and explanationHide answer

   Correct answer: B

   Pub/Sub is the managed messaging service built to ingest high-volume streaming events and fan them out to downstream consumers. Storage Transfer Service suits scheduled bulk copies rather than continuous events. Cloud SQL and Dataproc store or process data, but neither is the ingestion layer for real-time event streams.

2. Question 2Digital transformation with Google Cloud

   A logistics company wants its engineering teams to release application changes weekly instead of quarterly, without adding operations headcount. Which change most directly supports this goal?

   1. ARoute all capacity requests through a monthly hardware procurement cycle to keep spending predictable
   2. BStandardise on one large virtual machine per application so patching happens in a single window
   3. CAutomate build, test and deployment with managed pipelines such as Cloud Build and Cloud Deploy
   4. DKeep a manual change-approval board that reviews each release tier before deployment
   Show answer and explanationHide answer

   Correct answer: C

   Cloud Build and Cloud Deploy automate the build and delivery path, which removes manual hand-offs and supports frequent releases. A manual approval board keeps the quarterly cadence, and a single large VM does not speed up release frequency. Monthly procurement is the opposite of the elastic model the company is trying to adopt.

3. Question 3Innovating with Google Cloud artificial intelligence

   A healthcare provider wants to extract structured fields such as patient names and visit dates from scanned insurance forms. Which Google Cloud service is the most appropriate?

   1. ASpeech-to-Text, which transcribes recorded audio into written text with speaker labels and word timestamps
   2. BCloud Natural Language, which analyses sentiment and entities in plain text
   3. CCloud Translation, which converts text between languages in real time
   4. DDocument AI, which uses pre-trained and custom processors to extract structured data from documents
   Show answer and explanationHide answer

   Correct answer: D

   Document AI provides processors that read forms and scanned documents and return structured fields, which fits the provider's need. Translation and Speech-to-Text handle different input types. Natural Language analyses text that is already digital rather than extracting fields from scanned images, so it would not produce the structured output required.

4. Question 4Modernizing infrastructure and applications with Google Cloud

   A company runs a containerised web API with unpredictable traffic and wants to avoid managing any cluster nodes. Which compute option best fits this requirement?

   1. ACloud Run, a serverless platform that runs containers and scales to zero when idle
   2. BGoogle Kubernetes Engine Standard with a fixed node pool sized for peak traffic
   3. CCompute Engine instances with a manually configured autoscaler and operating system patching
   4. DBare-metal servers in a colocation facility with a hardware load balancer
   Show answer and explanationHide answer

   Correct answer: A

   Cloud Run runs containers without node management, scales with request volume and can scale to zero. Compute Engine and GKE Standard both leave the team managing machines or node pools. Bare-metal hosting is the most operationally demanding of the four options.

5. Question 5Trust and security with Google Cloud

   A company wants only its managed devices and verified employees to reach an internal web application hosted on Google Cloud, without requiring a VPN. Which approach best meets this requirement?

   1. AIdentity-Aware Proxy with context-aware access policies based on user identity and device posture
   2. BCreate a firewall rule that allows traffic from the corporate office subnet only
   3. CPublish the application on a public IP with a long, randomly generated URL path
   4. DOpen the application to the internet and rely on a strong password policy for employees
   Show answer and explanationHide answer

   Correct answer: D

   Identity-Aware Proxy places access control in front of the application and can apply context-aware policies that check identity and device state, so no VPN is needed. A password policy does not verify the device, and an office subnet rule fails once employees work remotely. A secret URL path provides obscurity, not access control.