Google Cloud-Digital-Leader - Google Cloud Digital Leader exam

Collect all weather data evenly across all cities. Mainly because it seems that the emphasis for data collection for ML is to make sure there are no holes in your data collection.

The correct answer is C. Firewall rules. Here's why:

Context of the Question: The organization wants to control what types of network traffic are allowed to enter and leave its network and access its applications.

Google Cloud Product Relevance:

Firewall rules are security settings used to control the flow of traffic to and from instances or resources in a network. They define which traffic is allowed or denied based on parameters such as IP address, protocol, and port.

Firewall rules are essential for protecting applications from unauthorized access and for ensuring that only trusted traffic is permitted.

Why Not Other Options:

A. Encryption keys: Encryption keys are used for data protection and encryption but do not control network traffic.

B. 2-Step Verification: This enhances account security by requiring a second form of authentication but does not control network traffic.

D. Privileged access: This refers to managing access rights for administrative tasks and is not related to controlling network traffic.

Google Cloud Digital Leader References:

Refer to Google Cloud VPC firewall documentation to understand how firewall rules are used to control network traffic.

The correct answer is B. The policy will be inherited by the projects and their resources within the folder. Here's why:

Context of the Question: The organization is deciding on the layout of their resource hierarchy in Google Cloud and wants to understand the impact of applying user access policies at the folder level.

Google Cloud Product Relevance:

In Google Cloud, policies applied at a higher level in the resource hierarchy (like an organization or folder) are inherited by all lower-level resources (such as projects and resources within those projects). Therefore, if a policy is applied to a folder, it will be inherited by all projects and their resources under that folder.

This is a core concept in Google Cloud's Identity and Access Management (IAM) system, which ensures that permissions and policies are consistently applied throughout the resource hierarchy.

Why Not Other Options:

A. The policy applies to the folder only, and will not be inherited by any projects: This is incorrect because IAM policies are inherited down the resource hierarchy.

C. The policy will be applied to all folders within the organization: This is incorrect because the policy applies only to the specific folder and its contents, not to other folders.

D. The policy will be inherited by the projects in the folder but will not affect their resources: This is incorrect because policies inherited by projects also apply to the resources within those projects.

Google Cloud Digital Leader References:

Refer to Google Cloud IAM documentation to understand how IAM policies are inherited in a resource hierarchy.