Google Cloud Digital Leader 练习

Digital Leader validates a broad understanding of Google Cloud products, use cases, and how they support digital transformation. It is not a coding, networking, or sales-only credential.

A cloud service provider delivers compute, storage, networking, and other services on demand. It is not a physical server, application, or browser.

A project groups resources and settings, including permissions and billing. VMs, DNS zones, and support tickets are separate objects.

A region is a geographic area containing multiple zones. Zones are isolated locations within a region.

A zone is an isolated data center location inside a region. Distributing workloads across zones improves availability.

Scalability lets systems add or remove capacity to match demand. Fixed servers, backups, and firewalls are not scalability.

Reliability means systems continue operating when components fail. Cloud platforms use redundancy and automatic recovery to improve reliability.

TCO analysis includes hardware, software, staff, power, and maintenance costs. It helps organizations choose the most economical option.

Digital transformation uses technology to improve operations, customer experience, and innovation. It is not about replacing people or simply buying hardware.

On-demand provisioning gives organizations resources instantly and charges for actual usage. It avoids long procurement cycles and unused capacity.

A virtual machine emulates a computer with CPU, memory, and storage in the cloud. It is not a router, table, or phone.

Cloud computing offers scalability, usage-based pricing, and global reach. Fixed capacity is an on-premises limitation, not a cloud benefit.

Compute Engine provides virtual machines with configurable CPU and memory. Cloud Storage, BigQuery, and Cloud DNS are separate services.

GKE runs and manages Kubernetes clusters for containerized applications. It is not a spreadsheet, load balancer, or database.

Cloud Run runs containers in a serverless environment and scales automatically. It is not VMs, billing, or support.

Cloud Functions runs single-purpose code in response to events. It is not a database, firewall, or bucket.

App Engine is a PaaS that runs applications without managing servers. CDN, KMS, and physical servers are different.

Cloud Storage stores objects such as files, images, and backups. Cloud SQL is relational, VMs are compute, and Pub/Sub is messaging.

Cloud SQL provides managed MySQL, PostgreSQL, and SQL Server databases. It is not object storage, a warehouse, or containers.

A VPC provides isolated networking for cloud resources. It is not a VM, billing account, or support tier.

Cloud CDN caches content close to users to reduce latency and cost. It is not a database, scanner, or warehouse.

Cloud VPN securely connects on-premises networks to Google Cloud through the internet. CDN, VMs, and monitoring are different.

Anthos lets organizations run applications consistently across on-premises, Google Cloud, and other clouds. It is not billing, spreadsheets, or DNS.

Common migration strategies include rehost, replatform, and refactor. Reprint is not a recognized migration strategy.

BigQuery is a serverless data warehouse for analytics on large datasets. It is not compute, DNS, or key management.

A data warehouse stores and organizes data for analysis and reporting. It is not a backup, switch, or app.

Looker helps organizations explore, analyze, and share data. It is not compute, security, or DNS.

Vertex AI provides tools to build, train, and deploy machine learning models. It is not a spreadsheet, database, or CDN.

A model is trained on data to recognize patterns and make predictions. It is not a table, VM, or support plan.

Predictions are model outputs for new inputs. Storage classes, invoices, and routes are unrelated.

Structured data fits into tables with rows and columns. Images, audio, and free text are unstructured.

Unstructured data such as images, video, and text has no fixed row-and-column format. Spreadsheets, SQL tables, and CSV files are structured.

Data governance defines who can use data and how it is managed, protected, and used ethically. It is not deletion, ML, or networking.

Pub/Sub delivers messages between services for event-driven architectures. It is not a database, VM, or ticket.

Dataflow processes data in streams or batches. Cloud Storage stores objects, and DNS and firewalls are networking.

Machine learning can use structured, unstructured, and semi-structured data such as text, images, and audio.

IAM controls who can access resources and what they can do. The other expansions are not official.

A principal is an identity that can be granted permissions. Firewall rules, storage classes, and budgets are not identities.

A role bundles permissions that can be granted to principals. It is not a VM, subnet, or support tier.

Encryption transforms data so unauthorized parties cannot read it. It is not deletion, copying, or sorting.

Data at rest is stored data, such as files in buckets or rows in databases. Data in transit is moving across networks.

Data in transit is being transmitted between systems and is protected with protocols such as TLS. Stored data is at rest.

Zero trust assumes no implicit trust and verifies identity, context, and device for every request. It does not remove passwords or block all traffic.

Cloud Armor protects applications from DDoS attacks and common web threats. It is not compute, analytics, or monitoring.

Cloud KMS manages cryptographic keys. CDN, billing, and databases are separate services.

Compliance frameworks define requirements for data protection and privacy. Machine types, storage classes, and protocols are not frameworks.

Security keys provide phishing-resistant multi-factor authentication. They are not indexes, firewall rules, or tickets.

Zero trust verifies identity and context for every request instead of trusting internal networks automatically.

Cloud Monitoring tracks metrics and alerts on resource health. Databases, DNS, and billing reports are separate.

Cloud Logging stores and searches platform and application logs. It is not compute, security, or support.

An SLO sets a measurable reliability target, such as 99.9% availability. It is not a ticket, VM, or bucket.

Cost management helps organizations monitor usage, set budgets, and reduce waste. It is not deletion, hardware, or ignoring reports.

Budget alerts notify teams when cloud costs approach or exceed a limit. They are not security, database, or compute objects.

The hierarchy is organization, folders, projects, and resources. Regions, zones, support, and buckets are different concepts.

Support tiers offer different response times and services. Machine types, storage classes, and routes are not support.

Cloud sustainability means designing efficient systems, using renewable energy, and reducing waste. It is not buying more hardware or ignoring energy.

A runbook records repeatable operational steps. It is not an invoice, VM, or table.

An incident is an unplanned disruption that affects users. Backups, feature requests, and reports are normal operations.

A postmortem analyzes what happened, why, and how to improve. It is not a checklist, dispute, or ticket.

BigQuery is a data warehouse, Cloud Storage stores objects, Compute Engine provides VMs, and Cloud Monitoring tracks metrics and alerts.