ACMP Certified Change Management Professional (CCMP) — Questions and Answers

Question 1: According to Hersey and Blanchard's Situational Leadership model, when should a leader use a 'Directing' style?

When team members have high competence but low confidence
When team members are moderately skilled and need encouragement
When team members have low competence but high commitment (Correct answer)
When team members are highly skilled and motivated

Correct answer: When team members have low competence but high commitment

The Directing style (high task, low relationship) is appropriate for followers who are enthusiastic but lack the skills to perform the task independently.

Question 2: Which of the following BEST describes transformational leadership?

Motivating team members primarily through rewards and punishments
Maintaining strict adherence to established processes and rules
Inspiring team members to exceed their own expectations through a compelling vision and personal development (Correct answer)
Delegating all decisions to team members with minimal leader involvement

Correct answer: Inspiring team members to exceed their own expectations through a compelling vision and personal development

Transformational leaders inspire change by articulating a compelling vision and fostering individual growth, leading teams to perform beyond expected levels.

Question 3: A project manager wants to reduce communication noise when delivering critical updates. What should they do?

Copy all project stakeholders on every message
Attach all supporting documentation to every email
Send the update embedded in a long newsletter
Use clear subject lines and limit the message to key points only (Correct answer)

Correct answer: Use clear subject lines and limit the message to key points only

Clear subject lines and concise content help critical messages stand out and be acted upon.

Question 4: In organizational development, 'force field analysis' is used to:

Assess financial market forces affecting the organization
Identify and weigh driving forces that support change against restraining forces that resist it (Correct answer)
Map information technology dependencies
Analyze supply chain disruption scenarios

Correct answer: Identify and weigh driving forces that support change against restraining forces that resist it

Force field analysis (developed by Lewin) helps change managers visualize and strengthen the forces driving change while reducing the forces blocking it.

Question 5: During project planning, a team identifies a risk with a 40% probability and a $50,000 impact. What is the risk's Expected Monetary Value (EMV)?

$90,000
$50,000
$10,000
$20,000 (Correct answer)

Correct answer: $20,000

EMV is calculated as probability × impact: 0.40 × $50,000 = $20,000.

Question 6: Which of the following BEST describes emotional intelligence (EQ) in a leadership context?

The capacity to recognize, understand, and manage one's own emotions and the emotions of others (Correct answer)
Proficiency in using project management software tools
The ability to solve complex analytical problems quickly
Technical expertise in the project's domain

Correct answer: The capacity to recognize, understand, and manage one's own emotions and the emotions of others

Emotional intelligence enables leaders to build strong relationships, manage conflict, and motivate teams by understanding emotional dynamics.

Question 7: A GCP practice wants to prioritize which quality issues to address first. Which tool is most useful for ranking problems by frequency?

Pareto chart (Correct answer)
SWOT analysis
Fishbone (Ishikawa) diagram
Control chart

Correct answer: Pareto chart

A Pareto chart visualizes the 80/20 rule, helping teams focus on the few issues that cause the majority of problems.

Question 8: During a lessons-learned session, stakeholders provide negative feedback about communication frequency. The BEST follow-up action is:

Discard the feedback as subjective
Document the feedback and update the communication management plan for future projects (Correct answer)
Increase communication frequency on the current project retroactively
Apologize to stakeholders but make no changes

Correct answer: Document the feedback and update the communication management plan for future projects

Documenting lessons learned and updating the plan applies the feedback to improve future project communications.

Question 9: A team member raises an innovative idea that falls outside the current project scope. How should the project manager respond?

Implement the idea immediately to reward innovation
Escalate the idea to the sponsor without discussing it with the team member first
Dismiss the idea immediately to maintain project focus
Acknowledge the idea, document it for future consideration, and explain the current scope constraints (Correct answer)

Correct answer: Acknowledge the idea, document it for future consideration, and explain the current scope constraints

Acknowledging and documenting the idea respects the team member's contribution while maintaining project discipline by deferring out-of-scope items appropriately.

Question 10: A GCP professional discovers their employer is violating Google Cloud's Terms of Service in ways that create legal exposure. What should they do?

Ignore it as long as they are not personally executing the violating actions
Raise the issue internally first, and if unresolved, consider escalation or withdrawal from the engagement (Correct answer)
Assist the employer with the violation to avoid putting their own employment at risk
Immediately report the employer to Google without attempting internal resolution

Correct answer: Raise the issue internally first, and if unresolved, consider escalation or withdrawal from the engagement

Professionals should first seek internal resolution; if the employer refuses to remedy a serious violation, withdrawal or external escalation may be warranted.

Question 11: Which cost allocation strategy lets GCP billing data reflect shared infrastructure costs (like a shared VPC) proportionally across consuming projects?

Cost allocation labels applied to shared resources (Correct answer)
Organization-level budget distribution
Inter-project service account charges
Billing account hierarchy with subaccounts

Correct answer: Cost allocation labels applied to shared resources

Applying consistent resource labels to shared infrastructure enables BigQuery billing queries to allocate shared costs proportionally by label groupings.

Question 12: A team member consistently misses deadlines despite having the necessary skills. Which management approach is MOST appropriate?

Conduct a one-on-one meeting to identify and address underlying barriers (Correct answer)
Immediately place the employee on a performance improvement plan
Remove the team member from critical path tasks without discussion
Publicly announce the missed deadlines to motivate improvement

Correct answer: Conduct a one-on-one meeting to identify and address underlying barriers

A one-on-one conversation helps uncover root causes such as workload, personal issues, or unclear expectations before taking formal action.

Question 13: A company uses 50 n2-standard-4 VMs continuously for a year. Which pricing model would reduce costs the most compared to on-demand pricing?

3-year committed use discounts (Correct answer)
1-year committed use discounts
Preemptible VM instances
Sustained use discounts applied automatically

Correct answer: 3-year committed use discounts

3-year committed use discounts offer up to 70% off on-demand pricing, the highest discount tier for predictable long-term workloads.

Question 14: Which GCP service provides a fully managed, serverless data warehouse optimized for analytics?

BigQuery (Correct answer)
Cloud Spanner
Datastore
Cloud SQL

Correct answer: BigQuery

BigQuery is GCP's fully managed, serverless data warehouse designed for large-scale analytics with built-in ML capabilities.

Question 15: What is the key financial advantage of GCP's sustained use discounts compared to committed use discounts?

Sustained use discounts can be applied retroactively to past months
Sustained use discounts apply to storage as well as compute
Sustained use discounts offer deeper savings
Sustained use discounts require no upfront commitment or contract (Correct answer)

Correct answer: Sustained use discounts require no upfront commitment or contract

Sustained use discounts are applied automatically with no contract or upfront commitment, whereas CUDs require a 1- or 3-year commitment.

Question 16: Which load balancer type in GCP supports HTTP/2 and gRPC protocols globally?

Internal HTTP(S) Load Balancer
Network Load Balancer
TCP/SSL Proxy Load Balancer
External HTTP(S) Load Balancer (Correct answer)

Correct answer: External HTTP(S) Load Balancer

The External HTTP(S) Load Balancer supports HTTP/2 and gRPC globally, distributing traffic across regions using Google's front-end infrastructure.

Question 17: Which GCP feature helps organizations demonstrate compliance by providing audit logs of all API calls and administrative actions?

Cloud Profiler
Cloud Monitoring
Cloud Trace
Cloud Audit Logs (Correct answer)

Correct answer: Cloud Audit Logs

Cloud Audit Logs records administrative activity and data access events, providing an immutable trail needed for compliance audits.

Question 18: A project manager notices that the critical path has shifted after a key deliverable slipped by three days. What is the FIRST action they should take?

Notify the sponsor of the delay
Re-baseline the project schedule
Analyze the impact on the project end date (Correct answer)
Issue a change request immediately

Correct answer: Analyze the impact on the project end date

Analyzing the impact on the project end date allows the PM to understand the full scope of the schedule shift before taking corrective action.

Question 19: Which scheduling method uses a network diagram where all activities are represented as nodes and arrows show dependencies?

Gantt chart
Precedence Diagramming Method (PDM) (Correct answer)
Critical Path Method (CPM)
Program Evaluation and Review Technique (PERT)

Correct answer: Precedence Diagramming Method (PDM)

PDM (also called Activity on Node) represents activities as boxes/nodes with arrows showing the logical relationships between them.

Question 20: What does residual risk mean in GCP risk management?

The remaining risk after all control measures have been implemented (Correct answer)
The risk of a project going over budget
The initial risk before any assessment is performed
Risk that only affects residual materials or waste

Correct answer: The remaining risk after all control measures have been implemented

Residual risk is the level of risk that remains after all practical control measures have been applied. Some residual risk is usually accepted as it may not be feasible to eliminate all risk entirely.

Question 21: A Cloud Run service experiences unpredictable traffic spikes. Which cost optimization strategy is most appropriate for this serverless workload?

Switch to Compute Engine for better pricing
Purchase 3-year committed use discounts
Set maximum instance limits to cap costs while accepting some request rejection (Correct answer)
Use minimum instance settings only for peak hours

Correct answer: Set maximum instance limits to cap costs while accepting some request rejection

Setting maximum instance limits on Cloud Run caps your cost exposure by bounding autoscaling, though it may cause request throttling at extreme load.

Question 22: A project manager is leading a global virtual team across six time zones. What is the MOST important communication strategy to implement?

Hold all meetings during the PM's local business hours
Require all team members to work the same core hours
Establish clear communication protocols and norms upfront (Correct answer)
Rely exclusively on email for all communications

Correct answer: Establish clear communication protocols and norms upfront

Establishing communication protocols and norms at project initiation ensures all virtual team members have clarity on how, when, and through which channels to communicate.

Question 23: What are the five process groups in GCP project management?

Designing, Building, Testing, Deploying, and Supporting
Hiring, Training, Working, Evaluating, and Terminating
Researching, Proposing, Funding, Implementing, and Reporting
Initiating, Planning, Executing, Monitoring & Controlling, and Closing (Correct answer)

Correct answer: Initiating, Planning, Executing, Monitoring & Controlling, and Closing

The five process groups provide a framework for managing any project: Initiating (defining the project), Planning (establishing scope and approach), Executing (doing the work), Monitoring & Controlling (tracking progress), and Closing (formal completion).

Question 24: What is the professional obligation when a cloud engineer suspects a colleague is accessing client data without authorization?

Report the suspected misconduct through appropriate internal or external channels (Correct answer)
Take no action unless you have definitive forensic proof
Secretly monitor the colleague's activities for 30 days to build a case
Confront the colleague privately and accept their explanation

Correct answer: Report the suspected misconduct through appropriate internal or external channels

Suspected misconduct involving unauthorized data access must be reported through proper channels; self-investigation or inaction is inappropriate.

Question 25: Which GCP tool provides a unified interface for applying policies, configurations, and security controls across hybrid and multi-cloud environments?

Cloud Deployment Manager
Cloud Asset Inventory
Policy Intelligence
Anthos Config Management (Correct answer)

Correct answer: Anthos Config Management

Anthos Config Management enables centralized policy and configuration management across GKE clusters, on-premises, and other cloud environments.

Question 26: A project manager consistently tells team members exactly how to perform every task. This behavior is MOST associated with which leadership style?

Transformational
Coaching
Micromanagement (Correct answer)
Delegating

Correct answer: Micromanagement

Micromanagement involves excessive control over team members' work, which typically reduces autonomy, trust, and morale.

Question 27: What is the purpose of a communication plan in GCP project management?

To eliminate the need for meetings entirely
To define what information is shared, with whom, when, and through which channels (Correct answer)
To reduce the total amount of communication within a team
To ensure only managers can communicate project status

Correct answer: To define what information is shared, with whom, when, and through which channels

A communication plan establishes a structured approach to information sharing, defining the content, audience, frequency, channels, and responsible parties for each type of project communication.

Question 28: During a GCP project, two departments disagree on data access requirements. What should the project manager do?

Facilitate a joint requirements session with both stakeholders (Correct answer)
Escalate to the CIO without additional context
Let the departments resolve it independently
Choose one department's requirements and document the decision

Correct answer: Facilitate a joint requirements session with both stakeholders

Facilitating a joint session surfaces conflicting needs and drives consensus among affected parties.

Question 29: Which stakeholder engagement level is represented when a stakeholder understands the project and is willing to contribute to its success?

Supportive (Correct answer)
Unaware
Resistant
Leading

Correct answer: Supportive

A Supportive stakeholder understands the project and actively assists its success without driving it.

Question 30: A project sponsor asks why management reserves are NOT included in the project's cost baseline. What is the BEST explanation?

Management reserves are part of the contingency reserve
Management reserves are only used after project closure
Management reserves cover unknown-unknown risks and are controlled by management, not included in the baseline (Correct answer)
Management reserves are funded by vendors

Correct answer: Management reserves cover unknown-unknown risks and are controlled by management, not included in the baseline

Management reserves address unforeseen, unknown-unknown events and sit outside the cost baseline, accessible only with management approval.

Question 31: What is the key characteristic of Anthos in GCP?

A managed Hadoop service for big data processing
A platform for managing and deploying applications across multi-cloud and on-premises environments (Correct answer)
A managed graph database service
A serverless event-driven compute service

Correct answer: A platform for managing and deploying applications across multi-cloud and on-premises environments

Anthos is GCP's hybrid and multi-cloud application management platform that lets you run Kubernetes-based workloads consistently across GCP, other clouds, and on-premises.

Question 32: Which feature of Cloud Run allows it to automatically scale down to zero instances when there is no traffic?

Cloud Run's always-on minimum instance setting
Serverless autoscaling with concurrency-based request buffering (Correct answer)
Cloud Armor's traffic shaping rules
Cloud Endpoints rate limiting

Correct answer: Serverless autoscaling with concurrency-based request buffering

Cloud Run uses serverless autoscaling that scales to zero instances during idle periods and buffers incoming requests while new instances start.

Question 33: A project manager identifies that a key vendor may go out of business before delivering critical software. What type of risk response is BEST suited for this scenario?

Transfer the risk to the vendor via contract penalties
Accept the risk and document it
Avoid the risk by canceling the project
Mitigate by qualifying an alternative vendor (Correct answer)

Correct answer: Mitigate by qualifying an alternative vendor

Mitigation reduces probability or impact; qualifying an alternate vendor reduces the impact if the primary vendor fails.

Question 34: What is the primary goal of regulatory compliance in GCP practice?

Ensuring adherence to laws and standards that govern professional practice (Correct answer)
Limiting professional creativity and innovation
Increasing operational costs for the organization
Creating unnecessary bureaucratic processes

Correct answer: Ensuring adherence to laws and standards that govern professional practice

Regulatory compliance ensures professionals and organizations follow applicable laws, industry regulations, and professional standards to protect public safety and maintain quality.

Question 35: Which statement about GCP Committed Use Discounts (CUDs) is correct?

CUDs can be canceled within 30 days for a full refund
CUDs apply only to the specific VM instance they were purchased for
CUDs apply automatically without any configuration
CUDs are flexible and apply to any matching resource usage across a project or billing account (Correct answer)

Correct answer: CUDs are flexible and apply to any matching resource usage across a project or billing account

Resource-based CUDs apply to any usage matching the committed resource type within the project or billing account, not to specific VM instances.

Question 36: A cloud engineer accidentally gains read access to another customer's data due to a provider misconfiguration. What should they do?

Immediately report it to the cloud provider and cease all access (Correct answer)
Wait for the provider to discover and correct the misconfiguration
Use the data to benchmark their own systems' performance
Review the data to understand the full scope of the exposure

Correct answer: Immediately report it to the cloud provider and cease all access

Accessing another customer's data — even accidentally — must be stopped immediately and reported to the provider for proper incident handling.

Question 37: A picture from a Compute Engine needs to be encrypted. What must you accomplish?

Nothing. Images are encrypted by default with a customer-managed key
Associate your image with the default Google-managed key to encrypt it
Associate your image with a customer-managed key to encrypt it (Correct answer)
Nothing. Images are encrypted by default with a Google – managed key

Correct answer: Associate your image with a customer-managed key to encrypt it

Unless you provide the key, Google cannot access your protected data. Google does not store your keys on its systems. Additionally, this implies that if you need to remember or misplace your key, neither Google nor any encrypted data can be recovered.

Question 38: A project manager wants to improve team accountability. Which practice is MOST effective?

Co-create clear, measurable goals with the team and establish regular check-in processes (Correct answer)
Monitor every team member's work daily and report findings to management
Only hold senior team members accountable for outcomes
Implement punitive measures for any missed targets

Correct answer: Co-create clear, measurable goals with the team and establish regular check-in processes

Co-creating goals builds ownership and clarity, while regular check-ins create structured opportunities to address issues before they escalate.

Question 39: What is the primary purpose of a Data Processing Agreement (DPA) between a cloud customer and a cloud provider?

To define cloud resource pricing and billing terms
To establish SLA performance benchmarks for database operations
To legally govern how the processor handles personal data on behalf of the controller (Correct answer)
To specify technical data formats for interoperability

Correct answer: To legally govern how the processor handles personal data on behalf of the controller

A DPA is a legally binding contract that defines the processor's obligations and restrictions when handling the controller's personal data.

Question 40: Under the Computer Fraud and Abuse Act (CFAA), which activity constitutes unauthorized access?

Accessing systems or data beyond the scope of your granted permissions (Correct answer)
Performing penetration testing under a signed rules-of-engagement agreement
Testing your own production systems with proper written authorization
Reviewing publicly documented APIs as part of integration work

Correct answer: Accessing systems or data beyond the scope of your granted permissions

The CFAA prohibits accessing computer systems in ways that exceed authorized permissions, regardless of intent.

Question 41: What is a key advantage of using Committed Use Discounts (CUDs) in GCP Compute Engine?

You receive up to 57% discount by committing to use specific resources for 1 or 3 years (Correct answer)
Your VMs cannot be preempted during the commitment period
Resources are guaranteed even during high-demand periods with no cost
You pay only for actual usage with no minimum spend

Correct answer: You receive up to 57% discount by committing to use specific resources for 1 or 3 years

Committed Use Discounts offer up to 57% discount over on-demand pricing in exchange for committing to a specific amount of vCPUs and memory for 1 or 3 years.

Question 42: A GCP professional discovers a zero-day vulnerability in a widely used open-source library. What is the ethical course of action?

Ignore it since it is not their library to maintain
Follow responsible disclosure practices and notify the maintainers privately (Correct answer)
Immediately post full exploit details publicly to maximize awareness
Exploit it internally to gain competitive advantage

Correct answer: Follow responsible disclosure practices and notify the maintainers privately

Responsible disclosure requires privately notifying the affected vendor or maintainer first, giving them time to patch before public disclosure.

Question 43: During project execution, a key team member resigns unexpectedly. What should the project manager do FIRST?

Immediately recruit an external replacement
Redistribute all tasks equally among the remaining team
Assess the impact on the project schedule and identify knowledge transfer needs (Correct answer)
Delay the project until a replacement is hired

Correct answer: Assess the impact on the project schedule and identify knowledge transfer needs

Assessing the impact and knowledge transfer needs allows the project manager to make an informed plan rather than reacting impulsively.

Question 44: Which Looker Studio chart type is best suited for showing the composition of a whole across multiple categories?

Line chart
Scatter plot
Pie chart (Correct answer)
Bullet chart

Correct answer: Pie chart

A pie chart is designed to show part-to-whole relationships, displaying how each category contributes to the total.

Question 45: Which action violates a cloud professional's confidentiality obligations to their clients?

Discussing project challenges using fully anonymized examples in an internal training
Storing client documents in encrypted, access-controlled cloud storage
Sharing specific client architecture details with a competitor while exploring new employment (Correct answer)
Requiring subcontractors to sign non-disclosure agreements before engagement

Correct answer: Sharing specific client architecture details with a competitor while exploring new employment

Disclosing identifiable client information to competitors — regardless of employment context — is a direct breach of confidentiality obligations.

Question 46: What does the principle of data minimization require?

Replicating data across multiple geographic regions
Collecting only the data necessary for the specified, legitimate purpose (Correct answer)
Encrypting all data at rest and in transit
Storing all collected data indefinitely for future analytics

Correct answer: Collecting only the data necessary for the specified, legitimate purpose

Data minimization means limiting personal data collection to what is strictly necessary for the stated purpose.

Question 47: What is the professional obligation of a GCP certified practitioner regarding continuing education as cloud technologies evolve?

Certifications obtained once are valid and sufficient throughout an entire career
Attending one industry conference per year fulfills all professional development requirements
Professionals should continuously maintain and update their knowledge as the field evolves (Correct answer)
Only mandatory employer-sponsored training constitutes a professional obligation

Correct answer: Professionals should continuously maintain and update their knowledge as the field evolves

Cloud technology evolves rapidly, and professionals have an ongoing duty to keep their knowledge and skills current.

Question 48: According to Tuckman's model of team development, what stage follows 'Storming'?

Norming (Correct answer)
Performing
Forming
Adjourning

Correct answer: Norming

After the conflict and competition of the Storming stage, teams enter Norming, where they establish cohesion, roles, and working agreements.

Question 49: Which motivation theory suggests that employees are motivated by a hierarchy of needs, from basic physiological needs to self-actualization?

Vroom's Expectancy Theory
Herzberg's Two-Factor Theory
McGregor's Theory X and Y
Maslow's Hierarchy of Needs (Correct answer)

Correct answer: Maslow's Hierarchy of Needs

Maslow's Hierarchy of Needs proposes that lower-order needs (physiological, safety) must be met before higher-order needs (esteem, self-actualization) can motivate behavior.

Question 50: What is scope creep in GCP project management?

Uncontrolled expansion of project scope without corresponding adjustments to time, cost, and resources (Correct answer)
The natural growth of a project within planned parameters
A technique for incrementally adding features
The process of reducing project deliverables

Correct answer: Uncontrolled expansion of project scope without corresponding adjustments to time, cost, and resources

Scope creep occurs when new requirements or features are added without formal evaluation and approval, leading to schedule delays, budget overruns, and resource strain.

Question 51: A project manager is using a responsibility assignment matrix (RAM). In a RACI chart, what does the 'C' stand for?

Completed
Controlled
Consulted (Correct answer)
Committed

Correct answer: Consulted

In RACI, 'C' stands for Consulted, meaning those whose input is sought and with whom there is two-way communication.

Question 52: What is the primary advantage of using a RACI matrix in team management?

It documents the communication plan for external stakeholders
It measures individual team member performance on a numerical scale
It clarifies roles and responsibilities by defining who is Responsible, Accountable, Consulted, and Informed for each task (Correct answer)
It tracks the project budget allocation across team members

Correct answer: It clarifies roles and responsibilities by defining who is Responsible, Accountable, Consulted, and Informed for each task

A RACI matrix eliminates ambiguity about roles by explicitly assigning responsibility levels for every task, reducing duplication and gaps in accountability.

Question 53: Which document records the results of risk analysis and risk response planning and is updated throughout the project?

Stakeholder register
Issue log
Risk register (Correct answer)
Project charter

Correct answer: Risk register

The risk register is the central repository for all risk identification, analysis, response, and monitoring information.

Question 54: What is a GCP Organization resource primarily used for?

Billing account management only
Managing service account permissions
Grouping Cloud Storage buckets
Root node for GCP resource hierarchy enabling centralized governance (Correct answer)

Correct answer: Root node for GCP resource hierarchy enabling centralized governance

The Organization resource is the root node of the GCP resource hierarchy, providing centralized visibility and control over all projects and resources.

Question 55: A GCP organization has 20 projects across 3 departments. Which approach best ensures each department is accountable for its own cloud spending?

Use folders with IAM restrictions per department
Assign all spending to one cost center manually
Create separate billing accounts per department (Correct answer)
Use a single billing account with labels and export to BigQuery

Correct answer: Create separate billing accounts per department

Separate billing accounts per department provide clean financial boundaries, independent invoices, and clear accountability for each team's spending.

Question 56: In Cloud Functions (2nd gen), what is the maximum allowed memory per function instance?

16 GB (Correct answer)
2 GB
512 MB
8 GB

Correct answer: 16 GB

Cloud Functions 2nd gen supports up to 16 GB of memory per instance, a significant increase over 1st gen's 8 GB limit.

Question 57: Which planning document defines the rules for how changes will be identified, documented, approved, and controlled throughout the project?

Project charter
Change management plan (Correct answer)
Risk register
Stakeholder engagement plan

Correct answer: Change management plan

The change management plan establishes the processes and authorities for evaluating and approving project changes.

Question 58: Which compliance framework is specifically designed to govern the security of payment card data?

PCI DSS (Correct answer)
FedRAMP
HIPAA
SOC 2 Type II

Correct answer: PCI DSS

PCI DSS (Payment Card Industry Data Security Standard) specifically governs the handling and security of cardholder data.

Question 59: What does IAM (Identity and Access Management) enforce in Google Cloud?

Data encryption policies for Cloud Storage
Network firewall rules between VPCs
Who (identity) can do what (role) on which resource (Correct answer)
Uptime SLAs for GCP services

Correct answer: Who (identity) can do what (role) on which resource

Cloud IAM enforces authorization by defining which principals have which permissions on which GCP resources through a policy model.

Question 60: You want to analyze GCP spending at the resource tag level across multiple projects. What is the best approach?

Use Cloud Monitoring dashboards
Export billing data to BigQuery and query by labels (Correct answer)
Create separate billing accounts per tag
Use the Billing console spending breakdown

Correct answer: Export billing data to BigQuery and query by labels

Exporting billing data to BigQuery allows querying cost data by resource labels, enabling granular cross-project analysis.

Question 61: Why is written communication important in GCP practice?

Written records are only needed for legal disputes
It is less effective than verbal communication in all situations
It creates a permanent record, ensures clarity, and provides reference for future actions (Correct answer)
Modern technology has eliminated the need for written communication

Correct answer: It creates a permanent record, ensures clarity, and provides reference for future actions

Written communication creates documented records, provides clarity through careful word choice, allows review before sending, and serves as reference material for decisions and future actions.

Question 62: Which GCP service is designed for storing and querying large volumes of semi-structured time-series or IoT data?

Cloud SQL
BigQuery
Bigtable (Correct answer)
Firestore

Correct answer: Bigtable

Bigtable is a fully managed, scalable NoSQL database service designed for high-throughput workloads like time-series, IoT, and analytics data.

Question 63: Which GCP load balancer type operates at Layer 7 and supports content-based routing?

HTTP(S) Load Balancer (Correct answer)
Network Load Balancer
Internal TCP/UDP Load Balancer
SSL Proxy Load Balancer

Correct answer: HTTP(S) Load Balancer

The HTTP(S) Load Balancer operates at Layer 7 and supports URL-based routing, host-based routing, and advanced traffic management.

Question 64: What is change management in GCP technology operations?

Making any changes immediately without review or documentation
A method for changing employee passwords monthly
A process for replacing all legacy systems at once
A structured process for evaluating, approving, and implementing changes to minimize risk (Correct answer)

Correct answer: A structured process for evaluating, approving, and implementing changes to minimize risk

IT change management ensures that all changes to systems and infrastructure are evaluated for risk, properly approved, tested, documented, and implemented in a controlled manner to minimize service disruption.

Question 65: When building a high-performing team, what is the PRIMARY purpose of establishing a team charter?

To create a formal organizational hierarchy for the project
To assign individual performance ratings to team members
To document the project budget and timeline
To define team values, working agreements, and ground rules for collaboration (Correct answer)

Correct answer: To define team values, working agreements, and ground rules for collaboration

A team charter sets shared expectations for behavior and collaboration, creating a foundation for trust and accountability within the team.

Question 66: Which GCP service is specifically designed to help organizations meet HIPAA compliance for health data workloads?

Cloud Healthcare API with a signed Business Associate Agreement (Correct answer)
Cloud Spanner with default settings
BigQuery without additional configuration
Cloud Functions without encryption

Correct answer: Cloud Healthcare API with a signed Business Associate Agreement

Cloud Healthcare API supports HIPAA workloads when paired with a signed BAA from Google.

Question 67: A project team creates contingency reserves. What is the PRIMARY purpose of these reserves?

To cover unknown-unknown risks
To offset scope changes approved by the change control board
To fund management's discretionary spending
To cover known-unknown risks identified in the risk register (Correct answer)

Correct answer: To cover known-unknown risks identified in the risk register

Contingency reserves are allocated to address identified (known-unknown) risks if their triggers occur.

Question 68: An organization wants to enforce that no GCP resource is created in regions outside North America to control data transfer costs. Which tool enforces this?

Cloud Billing budgets
VPC firewall rules
Cloud Armor policies
Organization Policy Service resource location constraints (Correct answer)

Correct answer: Organization Policy Service resource location constraints

Organization Policy Service allows enforcing resource location constraints that prevent resource creation in unapproved regions across the entire organization.

Question 69: What is the function of Cloud Armor in Google Cloud Platform?

Network traffic routing
Encrypting data at rest
Managing SSL certificates
DDoS protection and web application firewall (WAF) (Correct answer)

Correct answer: DDoS protection and web application firewall (WAF)

Cloud Armor provides DDoS protection and web application firewall (WAF) capabilities to defend applications from attacks.

Question 70: What is the PRIMARY purpose of a RACI chart in stakeholder communication?

Define project budget responsibilities
Schedule stakeholder review meetings
Track issue resolution timelines
Clarify roles and responsibilities for project activities (Correct answer)

Correct answer: Clarify roles and responsibilities for project activities

A RACI chart identifies who is Responsible, Accountable, Consulted, and Informed for each task, reducing ambiguity.

Question 71: A 'readiness assessment' conducted before a change initiative helps organizations:

Finalize the project budget and timeline
Identify gaps in capability, culture, and commitment that must be addressed for the change to succeed (Correct answer)
Select the change management consulting firm
Draft the communications plan

Correct answer: Identify gaps in capability, culture, and commitment that must be addressed for the change to succeed

Readiness assessments diagnose the organization's current state versus the desired state, revealing barriers that must be addressed before implementation.

Question 72: Under responsible AI principles, what should an organization do when an AI system begins producing harmful or discriminatory outputs in production?

Continue operating until the next quarterly model review cycle
Delete all training data and retrain the model from scratch before investigating
Attribute the harm to end users who submitted the inputs that triggered the outputs
Immediately investigate, pause the system if necessary, and implement corrective measures (Correct answer)

Correct answer: Immediately investigate, pause the system if necessary, and implement corrective measures

Responsible AI practice requires halting harm promptly, investigating root causes, and implementing fixes rather than waiting for scheduled reviews.

Question 73: Which GCP service provides a unified view of costs, usage trends, and cost recommendations across your entire organization?

Cloud Monitoring
Cloud Asset Inventory
Active Assist Recommender
Cloud Billing Reports (Correct answer)

Correct answer: Cloud Billing Reports

Cloud Billing Reports in the GCP Console provide organization-wide cost visualization, trend analysis, and filtering by project, service, and label.

Question 74: A project manager identifies that a key stakeholder has low interest but high power. The BEST engagement strategy is:

Transfer their authority to a more engaged stakeholder
Involve them in all project decisions and daily updates
Keep them satisfied with high-level updates and consult them on major decisions (Correct answer)
Ignore them since they show low interest

Correct answer: Keep them satisfied with high-level updates and consult them on major decisions

High-power, low-interest stakeholders should be kept satisfied without overwhelming them with detail.

Question 75: Your team accidentally left a large Persistent Disk snapshot unneeded for 6 months. Which cost management practice would have prevented this?

Implementing lifecycle policies and regular cost reviews (Correct answer)
Enabling sustained use discounts
Using committed use discounts on storage
Migrating to Cloud Spanner instead

Correct answer: Implementing lifecycle policies and regular cost reviews

Regular cost reviews and automated lifecycle policies help identify and clean up unused resources like orphaned snapshots.

Question 76: What is 'data poisoning' as an attack against ML systems?

Removing personally identifiable information from datasets before training
Encrypting training datasets to prevent unauthorized access
Compressing training data to reduce cloud storage costs
Deliberately corrupting training data to cause a model to learn incorrect or harmful behaviors (Correct answer)

Correct answer: Deliberately corrupting training data to cause a model to learn incorrect or harmful behaviors

Data poisoning involves injecting malicious or misleading examples into training data to manipulate the model's learned behavior.

Question 77: In Cloud IAM, what is the difference between a 'role' and a 'permission'?

Roles are collections of permissions; permissions are individual API actions (Correct answer)
Permissions are hierarchical; roles are flat
Permissions are assigned to users; roles are assigned to resources
Roles apply at project level; permissions apply at resource level

Correct answer: Roles are collections of permissions; permissions are individual API actions

A role is a named collection of permissions (e.g., roles/storage.objectViewer), while a permission is an individual action like storage.objects.get.

Question 78: An organization must comply with the Sarbanes-Oxley Act (SOX). Which GCP capability is most directly relevant to meeting SOX's internal control requirements for financial reporting?

Cloud CDN
Immutable Cloud Audit Logs with access controls (Correct answer)
Cloud Load Balancing
Managed Instance Groups

Correct answer: Immutable Cloud Audit Logs with access controls

SOX Section 302 and 404 require reliable audit trails and internal controls; immutable audit logs with strict access controls provide evidence of those controls for financial systems.

Question 79: What is a budget variance analysis in GCP financial management?

Counting physical cash in the office
Comparing actual spending against budgeted amounts to identify and explain differences (Correct answer)
Reviewing employee expense reports for errors
Creating next year's budget from scratch

Correct answer: Comparing actual spending against budgeted amounts to identify and explain differences

Budget variance analysis compares actual financial results against budgeted amounts, calculating the differences (variances) and investigating the causes to improve future budgeting accuracy and cost control.

Question 80: What is the first step in GCP risk assessment?

Assigning blame for past incidents
Ignoring minor risks to focus on major ones
Purchasing insurance coverage immediately
Identifying potential hazards and threats relevant to the activity or project (Correct answer)

Correct answer: Identifying potential hazards and threats relevant to the activity or project

Risk assessment begins with systematic identification of all potential hazards and threats, as you cannot manage risks you haven't identified. This foundation supports all subsequent analysis and mitigation.

Question 81: What is a milestone in GCP project management?

A daily task that must be completed by each team member
An optional checkpoint that can be skipped if needed
A significant event or deliverable marking progress at a key point in the project timeline (Correct answer)
A physical marker at a construction site every mile

Correct answer: A significant event or deliverable marking progress at a key point in the project timeline

Milestones are significant checkpoints or achievements in a project timeline that mark the completion of major deliverables, phase transitions, or critical decision points.

Question 82: Which approach BEST ensures stakeholder sign-off is meaningful rather than perfunctory?

Send deliverables with a deadline and auto-approve if no response
Walk stakeholders through key aspects of the deliverable before requesting approval (Correct answer)
Obtain verbal approval only and proceed without documentation
Request sign-off via a mass email to all project stakeholders

Correct answer: Walk stakeholders through key aspects of the deliverable before requesting approval

Walking stakeholders through key aspects ensures informed consent rather than superficial rubber-stamping.

Question 83: Which conflict resolution strategy involves both parties making concessions to reach a mutually acceptable solution?

Compromising (Correct answer)
Forcing
Avoiding
Smoothing

Correct answer: Compromising

Compromising requires each party to give up something to reach a middle-ground solution, making it useful when a quick resolution is needed and both parties have equal power.

Question 84: An organization must implement controls to comply with CJIS (Criminal Justice Information Services) Security Policy when accessing FBI criminal justice data in GCP. Which requirement is unique to CJIS compared to general cloud security standards?

Mandatory background checks and security awareness training for personnel with access to CJI (Correct answer)
Using multi-factor authentication for admin accounts
Requiring TLS 1.2 or higher for data in transit
Encrypting data at rest using AES-256

Correct answer: Mandatory background checks and security awareness training for personnel with access to CJI

CJIS uniquely requires that personnel with access to Criminal Justice Information (CJI) pass FBI-approved background checks and complete CJIS security awareness training.

Question 85: A healthcare SaaS provider uses GCP to process PHI. To comply with HIPAA, the provider must ensure GCP has signed a:

Data Classification Contract
Business Associate Agreement (BAA) (Correct answer)
Data Sharing Agreement
Privacy Shield certification

Correct answer: Business Associate Agreement (BAA)

HIPAA requires a signed Business Associate Agreement between covered entities or business associates and any cloud service provider that creates, receives, maintains, or transmits PHI on their behalf.

Question 86: Which element distinguishes formal communication from informal communication on a project?

Formal communication is faster than informal
Informal communication is reserved for senior stakeholders
Formal communication follows established channels and is documented; informal does not (Correct answer)
Formal communication is always written; informal is always verbal

Correct answer: Formal communication follows established channels and is documented; informal does not

Formal communication uses defined channels and creates records, while informal communication is spontaneous and undocumented.

Question 87: Which contract type places the most cost risk on the government?

Firm-Fixed-Price (FFP)
Cost-Plus-Fixed-Fee (CPFF) (Correct answer)
Fixed-Price-Incentive (FPI)
Time and Materials (T&M)

Correct answer: Cost-Plus-Fixed-Fee (CPFF)

Cost-Plus-Fixed-Fee contracts reimburse all allowable costs plus a fixed fee, placing maximum cost risk on the government.

Question 88: What is the primary objective of a post-award conference with a newly awarded contractor?

Ensure mutual understanding of contract terms, roles, and responsibilities (Correct answer)
Evaluate the contractor's financial stability
Conduct source selection for option periods
Renegotiate contract pricing

Correct answer: Ensure mutual understanding of contract terms, roles, and responsibilities

A post-award conference aligns the government and contractor on contract requirements, administrative procedures, and key personnel roles to prevent misunderstandings.

Question 89: Which scenario represents a communication 'blocker' in stakeholder management?

A team member sends status reports ahead of schedule
A stakeholder approves a deliverable quickly
Cultural differences cause misinterpretation of project status messages (Correct answer)
A stakeholder requests more frequent updates

Correct answer: Cultural differences cause misinterpretation of project status messages

Cultural differences can lead to misinterpretation of tone, urgency, or content, blocking effective communication.

Question 90: A product that the service provider controls and maintains.

Platform as a service
Software as a service (Correct answer)
Infrastructure as a service
Cloud-based application

Correct answer: Software as a service

Software as a Service (SaaS) is a product delivery model in cloud computing where a software application is hosted and managed by a service provider. In this model, users can access and use the software application over the internet without needing to install or maintain the underlying infrastructure or software components.

Question 91: A project manager wants to delegate a complex task to a team member. Which factor is MOST critical when making this delegation decision?

Whether the team member has the skills and capacity to complete the task (Correct answer)
The proximity of the team member's desk to the project manager
The team member's seniority in the organization
The team member's personal relationship with the project manager

Correct answer: Whether the team member has the skills and capacity to complete the task

Effective delegation requires matching the task to a team member who has both the required skills and available capacity to succeed.

Question 92: During a penetration test, you discover evidence of a prior unauthorized intrusion by an external attacker. What is the correct professional response?

Immediately stop, preserve evidence, and notify the client (Correct answer)
Continue the pentest and include the finding in the final report
Remediate the breach yourself before informing the client
Use the existing access pathway to test deeper systems

Correct answer: Immediately stop, preserve evidence, and notify the client

Discovering a real breach requires halting the engagement to protect evidence integrity and notifying the client so they can activate incident response.

Question 93: A company operating in multiple states must comply with various U.S. state privacy laws. Which state law is considered the most influential model for other state privacy legislation?

Colorado Privacy Act (CPA)
Texas Data Privacy and Security Act (TDPSA)
California Consumer Privacy Act (CCPA) and its CPRA amendment (Correct answer)
Virginia Consumer Data Protection Act (VCDPA)

Correct answer: California Consumer Privacy Act (CCPA) and its CPRA amendment

The CCPA and its amendment, the CPRA, are the most influential U.S. state privacy laws, establishing many rights and obligations that other states have since modeled.

Question 94: A stakeholder requests a change that is outside the project scope. The BEST response is to:

Tell the stakeholder to submit the request after project completion
Document the request and route it through the change control process (Correct answer)
Implement the change to maintain the relationship
Reject the request without explanation

Correct answer: Document the request and route it through the change control process

The change control process ensures all scope changes are evaluated for impact before approval.

Question 95: What is the primary goal of a 'sustainment plan' following a change implementation?

Embed the change into daily operations so that new behaviors become the new norm (Correct answer)
Document lessons learned for the project closeout report
Plan the next change initiative
Evaluate contractor performance

Correct answer: Embed the change into daily operations so that new behaviors become the new norm

A sustainment plan ensures the change sticks by reinforcing new behaviors through performance management, coaching, and ongoing communication after go-live.

Question 96: Why would a GCP client use resources spread across numerous regional zones?

For improved fault tolerance (Correct answer)
For better performance

Correct answer: For improved fault tolerance

A GCP (Google Cloud Platform) customer might use resources in several zones within a region primarily for improved fault tolerance.

Question 97: The NIST Cybersecurity Framework (CSF) organizes security activities into five core functions. Which function focuses on detecting the occurrence of a cybersecurity event?

Respond
Identify
Protect
Detect (Correct answer)

Correct answer: Detect

The 'Detect' function of the NIST CSF encompasses activities that enable timely discovery of cybersecurity events through continuous monitoring and anomaly detection.

Question 98: What is the key difference between a manager and a leader in a project context?

Managers motivate teams while leaders handle administrative tasks
Managers have higher authority than leaders in the organizational hierarchy
Leaders are responsible for budgets while managers handle personnel
Leaders focus on inspiring vision and change while managers focus on planning and controlling processes (Correct answer)

Correct answer: Leaders focus on inspiring vision and change while managers focus on planning and controlling processes

Leadership is about setting direction and inspiring people toward a vision, while management involves organizing, planning, and controlling to achieve defined objectives.

Question 99: How do regulations differ from industry standards in GCP practice?

Standards are always stricter than regulations
They are exactly the same thing in all contexts
Regulations are legally binding; standards are typically voluntary guidelines (Correct answer)
Regulations apply only to individuals, not organizations

Correct answer: Regulations are legally binding; standards are typically voluntary guidelines

Regulations are legally enforceable rules from government agencies, while standards are developed by industry bodies and are typically voluntary, though they may become requirements through regulatory adoption.

Question 100: A project's Planned Value (PV) is $120,000 and its Earned Value (EV) is $100,000. What is the Schedule Variance (SV)?

+$20,000
$220,000
-$20,000 (Correct answer)
$0

Correct answer: -$20,000

Schedule Variance = EV − PV = $100,000 − $120,000 = −$20,000, indicating the project is behind schedule.

Question 101: What is the purpose of a GCP 'Service Account'?

A billing account for services that auto-charge usage
A shared login for multiple developers on a team
An administrative account with owner-level privileges
An identity used by applications and services to authenticate to GCP APIs (Correct answer)

Correct answer: An identity used by applications and services to authenticate to GCP APIs

A Service Account is a special identity assigned to applications, VMs, or services so they can authenticate and call GCP APIs without using personal credentials.

Question 102: Which conflict resolution technique results in a win-lose outcome and is generally the LEAST effective for long-term relationships?

Force/direct (Correct answer)
Compromise
Smooth/accommodate
Collaborate

Correct answer: Force/direct

Forcing uses power to override others' concerns, producing a win-lose outcome that can damage team relationships over time.

Question 103: A project manager receives feedback that their communication style is creating confusion among team members. What is the BEST corrective action?

Solicit specific examples of the confusion and adjust communication methods accordingly (Correct answer)
Delegate all communication tasks to a team lead
Issue all communications in writing only to avoid misunderstandings
Continue the same approach and ask team members to adapt

Correct answer: Solicit specific examples of the confusion and adjust communication methods accordingly

Gathering specific examples of the confusion allows the manager to identify patterns and make targeted improvements to their communication style.

Question 104: Which GCP tool helps you understand and optimize your cloud spending by providing cost allocation, budgets, and recommendations?

Cloud Billing Budget API only
Active Assist Recommender
Cloud Cost Management (formerly Cost Optimization Hub)
Cloud Billing Reports with Cost Table (Correct answer)

Correct answer: Cloud Billing Reports with Cost Table

Cloud Billing Reports with Cost Table provides detailed cost allocation, filtering, and grouping to understand and optimize GCP spending.

Question 105: Which GCP pricing concept describes the automatic cost reduction that applies when you use a Compute Engine VM for a significant portion of a billing month?

Committed Use Discount
Spot VM pricing
Preemptible discount
Sustained Use Discount (Correct answer)

Correct answer: Sustained Use Discount

Sustained Use Discounts automatically reduce the effective hourly rate for VMs used more than 25% of a month, with no commitment required.

Question 106: A team is evaluating whether to use Cloud SQL or BigQuery for storing and querying financial transaction records. From a cost perspective, BigQuery is more economical when:

Transactions are written and read thousands of times per second
Data is large and analytical queries scan it infrequently (Correct answer)
Data volume is small (under 10 GB) and queries are frequent
Low-latency transactional inserts are the primary workload

Correct answer: Data is large and analytical queries scan it infrequently

BigQuery's query-on-demand pricing is cost-effective for large datasets with infrequent analytical scans, while frequent small queries can become expensive.

Question 107: Which GCP service enables secure, private connectivity between your on-premises network and GCP without using the public internet?

Cloud NAT
Cloud Interconnect (Correct answer)
Cloud DNS
Cloud VPN

Correct answer: Cloud Interconnect

Cloud Interconnect provides dedicated, high-bandwidth connectivity between your on-premises network and Google Cloud, bypassing the public internet.

Question 108: A project manager has a Cost Variance (CV) of −$15,000 and a Schedule Variance (SV) of +$8,000. How should this project status be described?

Under budget and behind schedule
Over budget and behind schedule
Over budget and ahead of schedule (Correct answer)
Under budget and ahead of schedule

Correct answer: Over budget and ahead of schedule

A negative CV indicates the project is over budget, while a positive SV indicates the project is ahead of schedule.

Question 109: What does 'customer-managed encryption keys' (CMEK) allow in GCP?

All data is encrypted client-side before being sent to GCP
Customers control their own encryption keys stored in Cloud KMS instead of Google-managed keys (Correct answer)
Encryption is disabled for services that need raw performance
GCP automatically rotates encryption keys on a 90-day schedule

Correct answer: Customers control their own encryption keys stored in Cloud KMS instead of Google-managed keys

CMEK lets you provision and manage your own encryption keys in Cloud KMS, giving you control over key rotation, access, and revocation for GCP services.

Question 110: In Looker Studio, what does 'blending' data sources allow you to do?

Schedule email delivery of reports
Combine data from multiple sources into a single chart (Correct answer)
Export data to BigQuery automatically
Apply machine learning models to your data

Correct answer: Combine data from multiple sources into a single chart

Data blending in Looker Studio joins data from different sources (e.g., Google Analytics + BigQuery) within a single visualization using a common join key.

Question 111: A project manager is planning communication for a project with 8 stakeholders. How many potential communication channels exist?

56
28 (Correct answer)
8
16

Correct answer: 28

Communication channels = n(n−1)/2 = 8×7/2 = 28, where n is the number of stakeholders.

Question 112: What is the triple constraint in GCP project management?

The requirement for three project team members minimum
Three mandatory project approvals from management
Three phases that every project must complete
The interdependent relationship between scope, time, and cost (Correct answer)

Correct answer: The interdependent relationship between scope, time, and cost

The triple constraint recognizes that scope, time, and cost are interdependent: changing one necessarily affects the others. Project managers must balance all three to deliver successful outcomes.

Question 113: Which security principle holds that controls should be proportional to the value of the asset being protected and the cost of protection?

Defense in depth
Principle of least privilege
Risk-based security (Correct answer)
Zero trust architecture

Correct answer: Risk-based security

Risk-based security prioritizes protection efforts and spending based on asset value, threat likelihood, and the cost of controls.

Question 114: What does the concept of 'servant leadership' primarily emphasize?

Rewarding high performers with financial incentives
Maintaining strict hierarchy to ensure accountability
The leader's authority to direct team activities without input
Prioritizing the needs of team members to enable their best performance (Correct answer)

Correct answer: Prioritizing the needs of team members to enable their best performance

Servant leadership focuses on supporting and developing team members so they can perform effectively and grow professionally.

Question 115: Which GCP service provides a managed Hardware Security Module (HSM) environment to help organizations meet FIPS 140-2 Level 3 compliance for key management?

Cloud KMS
Cloud HSM (Correct answer)
Certificate Manager
Secret Manager

Correct answer: Cloud HSM

Cloud HSM is a managed service that hosts cryptographic keys in FIPS 140-2 Level 3 certified hardware security modules within Google's data centers.

Question 116: Under GDPR, what is the maximum fine for the most serious violations?

2% of annual global turnover or €10 million
1% of annual global turnover or €5 million
4% of annual global turnover or €20 million (Correct answer)
5% of annual global turnover or €25 million

Correct answer: 4% of annual global turnover or €20 million

GDPR's highest tier penalty is 4% of annual global turnover or €20 million, whichever is greater.

Question 117: An organization requires that all GCP resources be created only in specific geographic regions. Which control enforces this?

IAM conditions on location attributes
VPC firewall rules restricted to region CIDRs
Cloud Armor geo-restriction policies
Organization Policy constraints/gcp.resourceLocations (Correct answer)

Correct answer: Organization Policy constraints/gcp.resourceLocations

The Organization Policy constraint `constraints/gcp.resourceLocations` restricts resource creation to a defined list of allowed regions or multi-regions.

Question 118: Which GCP service provides a managed relational database compatible with MySQL and PostgreSQL?

Bigtable
Cloud Spanner
Cloud SQL (Correct answer)
Firestore

Correct answer: Cloud SQL

Cloud SQL is a fully managed relational database service supporting MySQL, PostgreSQL, and SQL Server.

Question 119: What is the principle of least privilege in GCP technology management?

All users should have full administrator access to all systems
Access privileges should be based on employee seniority
Everyone should share a single set of login credentials
Users should only have the minimum access rights necessary for their job functions (Correct answer)

Correct answer: Users should only have the minimum access rights necessary for their job functions

The principle of least privilege limits each user's access to only what is strictly necessary for their role, reducing potential damage from errors, insider threats, or compromised accounts.

Question 120: What is active listening in GCP professional communication?

Waiting for your turn to speak without processing content
Hearing words while multitasking on other activities
Taking notes without making any eye contact
Fully concentrating on the speaker, understanding their message, and providing thoughtful feedback (Correct answer)

Correct answer: Fully concentrating on the speaker, understanding their message, and providing thoughtful feedback

Active listening involves fully focusing on the speaker, processing their message, asking clarifying questions, and providing thoughtful responses that demonstrate understanding and engagement.

Question 121: At project closure, what is the PRIMARY purpose of conducting a lessons learned session?

To validate the project deliverables with the customer
To assign blame for project failures
To capture knowledge that can improve future projects (Correct answer)
To update the team's performance reviews

Correct answer: To capture knowledge that can improve future projects

Lessons learned sessions capture insights on what worked and what didn't to improve processes and outcomes on future projects.

Question 122: Which type of dependency occurs when one activity cannot start until another has finished, regardless of any other constraints?

Discretionary dependency
Mandatory dependency (Correct answer)
Preferential dependency
External dependency

Correct answer: Mandatory dependency

Mandatory dependencies are contractually or physically required relationships between activities and cannot be changed by the project team.

Question 123: An engineer notices that egress charges are unexpectedly high. Which action would most directly identify the source of excessive network costs?

Use BigQuery billing export filtered by SKU containing 'Egress' (Correct answer)
Check Cloud Monitoring VM CPU metrics
Review IAM access logs
Review Cloud Logging audit logs

Correct answer: Use BigQuery billing export filtered by SKU containing 'Egress'

Querying BigQuery billing export data filtered by network egress SKUs pinpoints which projects and resources are generating the most outbound traffic charges.

Question 124: Which leadership style involves sharing decision-making authority with team members and encouraging participation in goal-setting?

Autocratic
Laissez-faire
Transactional
Participative (Democratic) (Correct answer)

Correct answer: Participative (Democratic)

Participative or democratic leadership involves team members in the decision-making process, increasing buy-in and morale.

Question 125: How should GCP professionals handle difficult conversations?

Prepare key points, remain calm and objective, focus on facts, and seek mutually beneficial outcomes (Correct answer)
Delegate all difficult conversations to management
Avoid the conversation entirely to prevent conflict
Use aggressive language to assert dominance quickly

Correct answer: Prepare key points, remain calm and objective, focus on facts, and seek mutually beneficial outcomes

Difficult conversations require preparation, emotional control, fact-based discussion, active listening, and a collaborative approach focused on finding solutions rather than assigning blame.

Question 126: A project team is geographically distributed across multiple time zones. What is the MOST important practice to maintain team cohesion?

Assign a single time zone as standard and require all others to adjust
Require all team members to work the same hours regardless of time zone
Limit communication to email only to avoid scheduling conflicts
Establish regular virtual meetings with clear agendas and rotating schedules to accommodate different zones (Correct answer)

Correct answer: Establish regular virtual meetings with clear agendas and rotating schedules to accommodate different zones

Regular virtual meetings with structured agendas and rotating schedules demonstrate respect for all team members' time while maintaining connection and alignment.

Question 127: What does a risk breakdown structure (RBS) help a project team accomplish?

Calculate the probability of each risk
Identify stakeholders responsible for risks
Categorize and organize risks by source or type (Correct answer)
Assign budget to risk responses

Correct answer: Categorize and organize risks by source or type

The RBS organizes risks into hierarchical categories, helping ensure comprehensive coverage of risk sources.

Question 128: What is the role of Workload Identity Federation in GCP?

Provides single sign-on for Google Workspace users
Federates on-premises Active Directory with Cloud IAM
Allows external identities to access GCP resources without service account keys (Correct answer)
Manages workload scheduling across multi-region clusters

Correct answer: Allows external identities to access GCP resources without service account keys

Workload Identity Federation lets external workloads (AWS, Azure, on-prem) authenticate to GCP using their existing identity providers, eliminating the need for service account keys.

Question 129: A stakeholder engagement assessment matrix is PRIMARILY used to:

Assign tasks to stakeholders
Track budget allocations per stakeholder
Document stakeholder contact information
Compare current vs. desired stakeholder engagement levels (Correct answer)

Correct answer: Compare current vs. desired stakeholder engagement levels

The matrix maps each stakeholder's current engagement level against the desired level to identify gaps.

Question 130: Which GCP service would you use to run containerized workloads without managing the underlying cluster infrastructure?

Compute Engine
App Engine Flexible
Cloud Run (Correct answer)
Google Kubernetes Engine (GKE)

Correct answer: Cloud Run

Cloud Run is a fully managed serverless platform that runs stateless containers without requiring you to manage clusters or nodes.

Question 131: Which U.S. federal law governs the privacy and security of student education records stored in cloud systems?

GLBA
CCPA
COPPA
FERPA (Correct answer)

Correct answer: FERPA

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records and restricts their disclosure without consent.

Question 132: What is a work breakdown structure (WBS) in GCP practice?

A list of all project team members and their roles
A hierarchical decomposition of project deliverables into smaller, manageable work packages (Correct answer)
A diagram of the organizational reporting structure
A report showing employee work schedules and shifts

Correct answer: A hierarchical decomposition of project deliverables into smaller, manageable work packages

A WBS breaks down the total scope of work into progressively smaller, more manageable components, making it easier to estimate, schedule, assign, and track all project work.

Question 133: What is the foundation of informed consent in GCP professional practice?

Having clients sign documents without detailed explanation
Getting consent from a third party on the client's behalf
Obtaining verbal agreement with no written documentation
Providing complete information about services, risks, and alternatives for voluntary decisions (Correct answer)

Correct answer: Providing complete information about services, risks, and alternatives for voluntary decisions

Informed consent requires clear, complete information about proposed services, potential risks, expected outcomes, and alternatives so clients can make voluntary, knowledgeable decisions.

Question 134: What is the purpose of a Past Performance Information Retrieval System (PPIRS) or its successor CPARS?

Recording and retrieving contractor performance evaluations for use in source selection (Correct answer)
Tracking contractor invoice submissions
Managing government property assigned to contractors
Documenting contractor labor categories

Correct answer: Recording and retrieving contractor performance evaluations for use in source selection

CPARS (Contractor Performance Assessment Reporting System) records past performance evaluations that are used to assess contractors in future source selections.

Question 135: Which BigQuery function would you use to calculate a 7-day moving average of daily sales?

DATE_DIFF
ARRAY_AGG
AVG() OVER (ORDER BY date ROWS BETWEEN 6 PRECEDING AND CURRENT ROW) (Correct answer)
COUNTIF

Correct answer: AVG() OVER (ORDER BY date ROWS BETWEEN 6 PRECEDING AND CURRENT ROW)

Window functions with AVG() and a frame clause (ROWS BETWEEN 6 PRECEDING AND CURRENT ROW) compute a rolling average over the specified window.

Question 136: During project execution, a new regulatory stakeholder is identified. The FIRST action the project manager should take is:

Wait until the next planning phase to engage them
Assess their influence, interests, and communication needs (Correct answer)
Request the sponsor handle all communications with them
Add them to all existing distribution lists immediately

Correct answer: Assess their influence, interests, and communication needs

Assessing a new stakeholder's influence and needs allows the PM to tailor an appropriate engagement strategy.

Question 137: During execution, the project team discovers a previously unidentified risk. Where should this risk be documented?

Lessons learned register
Assumption log
Issue log
Risk register (Correct answer)

Correct answer: Risk register

All identified risks, including those discovered during execution, are documented in the risk register for tracking and response planning.

Question 138: Which approach is MOST effective for providing constructive feedback to an underperforming team member?

Use the SBI model (Situation, Behavior, Impact) to frame feedback specifically and objectively (Correct answer)
Deliver feedback publicly to signal the importance of high standards
Wait until the annual performance review to address performance issues
Focus feedback exclusively on the team member's personal traits

Correct answer: Use the SBI model (Situation, Behavior, Impact) to frame feedback specifically and objectively

The SBI model provides clear, objective feedback by describing the specific situation, the observable behavior, and its impact, making it actionable and non-threatening.

Question 139: What is the purpose of financial forecasting in GCP practice?

To predict future financial conditions based on historical data and current trends (Correct answer)
To document past financial transactions only
To guarantee exact future financial outcomes
To determine current employee compensation levels

Correct answer: To predict future financial conditions based on historical data and current trends

Financial forecasting uses historical data, current trends, and assumptions to project future revenues, expenses, and financial position, supporting strategic planning and resource allocation decisions.

Question 140: A project has a Schedule Performance Index (SPI) of 0.85. What does this indicate?

The project is behind schedule (Correct answer)
The project is under budget
The project is ahead of schedule
The project is over budget

Correct answer: The project is behind schedule

An SPI below 1.0 means the project is accomplishing less work than planned, indicating it is behind schedule.

Question 141: When decomposing a project into a Work Breakdown Structure (WBS), what is the lowest level of the WBS called?

Task list
Work package (Correct answer)
Milestone
Activity

Correct answer: Work package

The work package is the lowest level of the WBS and represents deliverables that can be scheduled, cost-estimated, and assigned.

Question 142: In GCP practice, what constitutes a conflict of interest?

A difference in opinion about project timelines
A disagreement between colleagues about work procedures
A situation where personal interests could compromise professional judgment (Correct answer)
A scheduling conflict between meetings

Correct answer: A situation where personal interests could compromise professional judgment

A conflict of interest occurs when personal, financial, or other interests could potentially influence or appear to influence professional judgment and decisions.

Question 143: What is the minimum number of hours a Preemptible VM (now Spot VM) must run before it can be preempted by GCP?

1 hour
There is no guaranteed minimum runtime (Correct answer)
24 hours
30 minutes

Correct answer: There is no guaranteed minimum runtime

Spot VMs can be preempted at any time with a 30-second notice; GCP provides no guaranteed minimum runtime before preemption.

Question 144: A residual risk is BEST described as:

A risk with a probability rating of zero
The risk that remains after a risk response has been implemented (Correct answer)
A newly identified risk after project closure
A risk that has been transferred to a vendor

Correct answer: The risk that remains after a risk response has been implemented

Residual risks are the remaining exposure after responses are applied and must continue to be monitored.

Question 145: Which technique involves gathering SME opinions anonymously in multiple rounds to build consensus on estimates or forecasts?

Nominal group technique
Delphi technique (Correct answer)
Affinity diagram
Brainstorming

Correct answer: Delphi technique

The Delphi technique uses iterative anonymous questionnaires reviewed by a facilitator to reach group consensus while minimizing individual bias.

Question 146: A project manager notices that two team members have a recurring conflict that is affecting team morale and productivity. What is the MOST appropriate first step?

Report the conflict to senior management immediately
Facilitate a private meeting with both parties to address the conflict directly (Correct answer)
Reassign one team member to a different project
Ignore the conflict and hope it resolves on its own

Correct answer: Facilitate a private meeting with both parties to address the conflict directly

Facilitating a private meeting allows the manager to understand both perspectives and mediate a resolution before escalating the issue.

Question 147: Which GCP product would you use to orchestrate data pipelines and workflows across multiple services?

Cloud Tasks
Cloud Scheduler
Cloud Dataflow
Cloud Composer (Correct answer)

Correct answer: Cloud Composer

Cloud Composer is a fully managed workflow orchestration service built on Apache Airflow for authoring, scheduling, and monitoring pipelines.

Question 148: During project execution, a team member consistently delivers work that does not meet quality standards. What should the project manager do FIRST?

Escalate to the functional manager
Identify the root cause and provide coaching or training (Correct answer)
Replace the team member immediately
Document the issue in the risk register

Correct answer: Identify the root cause and provide coaching or training

Identifying the root cause and providing coaching addresses the underlying issue and supports the team member before escalating.

Question 149: What does 'active listening' require a project manager to do during stakeholder conversations?

Wait silently until the stakeholder finishes speaking
Agree with all stakeholder statements to build rapport
Take detailed notes without making eye contact
Paraphrase and confirm understanding of what was said (Correct answer)

Correct answer: Paraphrase and confirm understanding of what was said

Paraphrasing and confirming understanding demonstrates engagement and reduces miscommunication.

Question 150: A project manager is using three-point estimating. The optimistic estimate is 4 days, the most likely is 7 days, and the pessimistic is 16 days. Using PERT, what is the expected duration?

6 days
9 days
7 days
8 days (Correct answer)

Correct answer: 8 days

PERT expected duration = (O + 4M + P) / 6 = (4 + 28 + 16) / 6 = 48 / 6 = 8 days.

Question 151: A project manager is performing Estimate at Completion (EAC) using actual performance to date. Which formula assumes future work will proceed at the current CPI?

EAC = AC + ETC
EAC = AC + (BAC − EV)
EAC = AC + (BAC − EV) / CPI
EAC = BAC / CPI (Correct answer)

Correct answer: EAC = BAC / CPI

EAC = BAC / CPI is the formula used when future work is expected to continue at the same cost efficiency as to date.

ACMP Certified Change Management Professional (CCMP)

The CCMP is the premier change management certification from the Association of Change Management Professionals (ACMP), assessing knowledge of the ACMP Standard for Change Management across evaluating readiness, formulating strategy, developing and executing plans, and closing change efforts.

150

Questions

180 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds