Text preview & study summary

Google Cloud CDL and ACE - All Domains Compute Storage Networking IAM Operations

A free sample of 5 questions from this quiz, shown in full with answer choices and explanations. No interactivity — everything is visible on this page for study and review.

Want to test your knowledge? Launch the Interactive Exam Simulator

Question 1

A company's GCP environment has multiple teams sharing projects. Which GCP feature allows them to organize projects hierarchically and apply organization-wide IAM policies?

Answer choices

  • A. GCP Billing Subaccounts

  • B. Resource Manager with Organization, Folders, and Projects hierarchy (Correct)

  • C. Cloud Identity Groups

  • D. VPC Shared Networks

Explanation

GCP Resource Manager hierarchy: Organization (root, linked to Google Workspace/Cloud Identity domain) → Folders (departments, teams, environments) → Projects (resource containers). IAM policies set at higher levels (Organization, Folder) are inherited by all resources below. This enables: department-level policy enforcement, environment separation (dev/staging/prod), and delegated administration. Cloud Identity Groups manage user groups. Billing subaccounts manage costs. Shared VPC provides cross-project networking. Resource Manager hierarchy is the organizational structure.

Question 2

A cloud architect needs to connect an on-premises data center to GCP with high bandwidth (10 Gbps), low latency, and a private connection (no internet traversal). Which service provides this?

Answer choices

  • A. Cloud VPN

  • B. Cloud Interconnect (Dedicated Interconnect) (Correct)

  • C. Cloud NAT

  • D. Partner Interconnect

Explanation

Dedicated Interconnect provides a direct physical connection from on-premises to a Google colocation facility — no internet traversal, SLA-backed, available in 10 Gbps or 100 Gbps circuits. Partner Interconnect uses a service provider to connect to Google (for locations without Google colocation, or smaller bandwidth needs). Cloud VPN creates encrypted tunnels over the internet (internet traversal, lower bandwidth). Cloud NAT enables outbound internet access for VMs. For 10 Gbps + private + no internet, Dedicated Interconnect is the answer.

Question 3

Which GCP service provides a fully managed message queue and task distribution for asynchronous application processing between services?

Answer choices

  • A. Cloud Pub/Sub

  • B. Cloud Tasks

  • C. Cloud Dataflow

  • D. Both A and B, serving different use cases (Correct)

Explanation

Both are messaging services but serve different purposes: Cloud Pub/Sub — a high-throughput, real-time messaging system for event-driven architectures, fan-out to multiple subscribers, streaming data. It's "fire and forget" with no built-in task execution semantics. Cloud Tasks — manages explicit task queues with scheduling, retry logic, deduplication, and rate limiting. Better for job queues where you need control over execution timing and retry behavior. Use Pub/Sub for event streaming/fan-out; use Cloud Tasks for task queues with scheduling control.

Question 4

An organization uses Google Cloud and needs to ensure that all API calls to GCP services are logged for compliance. Which service captures these audit logs?

Answer choices

  • A. Cloud Monitoring (formerly Stackdriver Monitoring)

  • B. Cloud Trace

  • C. Cloud Audit Logs (Admin Activity, Data Access, System Event logs) (Correct)

  • D. Cloud Profiler

Explanation

Cloud Audit Logs records all API activity against GCP resources: (1) Admin Activity logs — resource configuration/metadata changes (always enabled, free). (2) Data Access logs — API calls that read/write user data (must be enabled, billable). (3) System Event logs — GCP internal operations. (4) Policy Denied logs — access denied by security policies. These logs are stored in Cloud Logging and can be exported to BigQuery, Cloud Storage, or Pub/Sub for compliance. Cloud Monitoring collects metrics. Cloud Trace analyzes request latency. Cloud Profiler analyzes application performance.

Question 5

A company uses multiple GCP projects and wants a consolidated bill with budget alerts. Which GCP billing feature allows centralizing costs across projects?

Answer choices

  • A. Billing Accounts with Project linking (Correct)

  • B. Resource Manager with folders

  • C. Cost allocation with labels

  • D. Committed Use Discounts

Explanation

GCP Billing Accounts aggregate costs from multiple linked projects into a single billing relationship. A billing account receives all charges from linked projects. Budget alerts can be set at the billing account level (or per-project). The billing account is linked to a payment method. Organizations can have multiple billing accounts (e.g., for different departments). Resource Manager/Folders provide organizational hierarchy. Cost allocation tags (labels) allow cost attribution within a billing account. CUDs are discount mechanisms, not billing consolidation.