Professional-Cloud-Architect valid exam preparation

QUESTION 153
Your web application must comply with the requirements of the European Union’s General Data Protection Regulation (GDPR). You are responsible for the technical architecture of your web application. What should you do?

Ensure that your web application only uses native features and services of Google Cloud Platform, because Google already has various certifications and provides “pass-on” compliance when you use native features.

Enable the relevant GDPR compliance setting within the GCPConsole for each of the services in use within your application.

Ensure that Cloud Security Scanner is part of your test planning strategy in order to pick up any compliance gaps.

Define a design for the security of data in your web application that meets GDPR requirements.

QUESTION 154
You need to evaluate your team readiness for a new GCP project. You must perform the evaluation and create a skills gap plan incorporates the business goal of cost optimization. Your team has deployed two GCP projects successfully to date. What should you do?

Allocate budget for team training. Set a deadline for the new GCP project.

Allocate budget for team training. Create a roadmap for your team to achieve Google Cloud certification based on job role.

Allocate budget to hire skilled external consultants. Set a deadline for the new GCP project.

Allocate budget to hire skilled external consultants. Create a roadmap for your team to achieve Google Cloud certification based on job role.

QUESTION 155
You have been asked to select the storage system for the click-data of your company’s large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute, with bursts of up to 8,500 clicks per second. It must been stored for future analysis by your data science and user experience teams. Which storage infrastructure should you choose?

Google Cloud SQL

Google Cloud Bigtable

Google Cloud Storage

Google cloud Datastore

QUESTION 156
You need to set up Microsoft SQL Server on GCP. Management requires that there’s no downtime in case of a data center outage in any of the zones within a GCP region. What should you do?

Configure a Cloud SQL instance with high availability enabled.

Configure a Cloud Spanner instance with a regional instance configuration.

Set up SQL Server on Compute Engine, using Always On Availability Groups using Windows Failover Clustering. Place nodes in different subnets.

Set up SQL Server Always On Availability Groups using Windows Failover Clustering. Place nodes in different zones.

QUESTION 157
For this question, refer to the TerramEarth case study. To be compliant with European GDPR regulation, TerramEarth is required to delete data generated from its European customers after a period of 36 months when it contains personal dat a. In the new architecture, this data will be stored in both Cloud Storage and BigQuery. What should you do?

Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36 months.

Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action when with an Age condition of 36 months.

Create a BigQuery time-partitioned table for the European data, and set the partition expiration period to 36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36 months.

Create a BigQuery time-partitioned table for the European data, and set the partition period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action with an Age condition of 36 months.

QUESTION 158
Your company acquired a healthcare startup and must retain its customers’ medical information for up to 4 more years, depending on when it was created. Your corporate policy is to securely retain this data, and then delete it as soon as regulations allow.
Which approach should you take?

Store the data in Google Drive and manually delete records as they expire.

Anonymize the data using the Cloud Data Loss Prevention API and store it indefinitely.

Store the data using the Cloud Storage and use lifecycle management to delete files when they expire.

Store the data in Cloud Storage and run a nightly batch script that deletes all expired datA.

QUESTION 159
Case Study: 4 – Dress4Win case study
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model.
Company Background
Dress4win’s application has grown from a few servers in the founder’s garage to several hundred servers and appliances in a colocated data center. However, the capacity of their infrastructure is now insufficient for the application’s rapid growth. Because of this growth and the company’s desire to innovate faster, Dress4win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is considering moving their development and test environments. They are also considering building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location.
Databases:
MySQL – user data, inventory, static data
* Redis – metadata, social graph, caching
* Application servers:
Tomcat – Java micro-services
* Nginx – static content
* Apache Beam – Batch processing
* Storage appliances:
iSCSI for VM hosts
* Fiber channel SAN – MySQL databases
* NAS – image storage, logs, backups
* Apache Hadoop/Spark servers:
Data analysis
* Real-time trending calculations
* MQ servers:
Messaging
* Social notifications
* Events
* Miscellaneous servers:
Jenkins, monitoring, bastion hosts, security scanners
* Business Requirements
* Build a reliable and reproducible environment with scaled parity of production. Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
Analyze and optimize architecture for performance in the cloud. Migrate fully to the cloud if all other requirements are met.
Technical Requirements
Evaluate and choose an automation framework for provisioning resources in cloud. Support failover of the production environment to cloud during an emergency. Identify production services that can migrate to cloud to save capacity.
Use managed services whenever possible.
Encrypt data on the wire and at rest.
Support multiple VPN connections between the production data center and cloud environment.
CEO Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a new competitor could use a public cloud platform to offset their up-front investment and freeing them to focus on developing better features.
CTO Statement
We have invested heavily in the current infrastructure, but much of the equipment is approaching the end of its useful life. We are consistently waiting weeks for new gear to be racked before we can start new projects. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
CFO Statement
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years puts a cloud strategy between 30 to 50% lower than our current model.
For this question, refer to the Dress4Win case study.
As part of Dress4Win’s plans to migrate to the cloud, they want to be able to set up a managed logging and monitoring system so they can handle spikes in their traffic load. They want to ensure that:
– The infrastructure can be notified when it needs to scale up and down to handle the ebb and flow of usage throughout the day
– Their administrators are notified automatically when their
application reports errors.
– They can filter their aggregated logs down in order to debug one
piece of the application across many hosts
Which Google StackDriver features should they use?

Logging, Alerts, Insights, Debug

Monitoring, Trace, Debug, Logging

Monitoring, Logging, Alerts, Error Reporting

Monitoring, Logging, Debug, Error Report

QUESTION 160
You want to enable your running Google Container Engine cluster to scale as demand for your application changes.
What should you do?

Add additional nodes to your Container Engine cluster using the following command:
gcloud container clusters resize CLUSTER_NAME –size 10

Add a tag to the instances in the cluster with the following command:
gcloud compute instances add-tags INSTANCE –tags enable –autoscaling max-nodes-10

Update the existing Container Engine cluster with the following command:
gcloud alpha container clusters update mycluster –enable-autoscaling –min-nodes=1 –max-nodes=10

Create a new Container Engine cluster with the following command:
gcloud alpha container clusters create mycluster –enable-autocaling –min-nodes=1 –max-nodes=10 and redeploy your application.

QUESTION 161
TerramEarth’s 20 million vehicles are scattered around the world. Based on the vehicle’s location, its
telemetry data is stored in a Google Cloud Storage (GCS) regional bucket (US, Europe, or Asia). The CTO
has asked you to run a report on the raw telemetry data to determine why vehicles are breaking down after
100 K miles. You want to run this job on all the data.
What is the most cost-effective way to run this job?

Move all the data into 1 zone, then launch a Cloud Dataproc cluster to run the job

Move all the data into 1 region, then launch a Google Cloud Dataproc cluster to run the job

Launch a cluster in each region to preprocess and compress the raw data, then move the data into a
multi-region bucket and use a Dataproc cluster to finish the job

Launch a cluster in each region to preprocess and compress the raw data, then move the data into a
region bucket and use a Cloud Dataproc cluster to finish the job

QUESTION 162
Case Study: 3 – JencoMart Case Study
Company Overview
JencoMart is a global retailer with over 10,000 stores in 16 countries. The stores carry a range of goods, such as groceries, tires, and jewelry. One of the company’s core values is excellent customer service. In addition, they recently introduced an environmental policy to reduce their carbon output by 50% over the next 5 years.
Company Background
JencoMart started as a general store in 1931, and has grown into one of the world’s leading brands known for great value and customer service. Over time, the company transitioned from only physical stores to a stores and online hybrid model, with 25% of sales online. Currently, JencoMart has little presence in Asia, but considers that market key for future growth.
Solution Concept
JencoMart wants to migrate several critical applications to the cloud but has not completed a technical review to determine their suitability for the cloud and the engineering required for migration. They currently host all of these applications on infrastructure that is at its end of life and is no longer supported.
Existing Technical Environment
JencoMart hosts all of its applications in 4 data centers: 3 in North American and 1 in Europe, most applications are dual-homed.
JencoMart understands the dependencies and resource usage metrics of their on-premises architecture.
Application Customer loyalty portal
LAMP (Linux, Apache, MySQL and PHP) application served from the two JencoMart-owned U.S.
data centers.
Database
* Oracle Database stores user profiles

* PostgreSQL database stores user credentials
-homed in US West

Authenticates all users
Compute
* 30 machines in US West Coast, each machine has:

* 20 machines in US East Coast, each machine has:
-core CPU

RAID 1)

Storage
* Access to shared 100 TB SAN in each location
* Tape backup every week
Business Requirements
* Optimize for capacity during peak periods and value during off-peak periods
* Guarantee service availably and support
* Reduce on-premises footprint and associated financial and environmental impact.
* Move to outsourcing model to avoid large upfront costs associated with infrastructure purchase
* Expand services into Asia.
Technical Requirements
* Assess key application for cloud suitability.
* Modify application for the cloud.
* Move applications to a new infrastructure.
* Leverage managed services wherever feasible
* Sunset 20% of capacity in existing data centers
* Decrease latency in Asia
CEO Statement
JencoMart will continue to develop personal relationships with our customers as more people access the web. The future of our retail business is in the global market and the connection between online and in-store experiences. As a large global company, we also have a responsibility to the environment through ‘green’ initiatives and polices.
CTO Statement
The challenges of operating data centers prevents focus on key technologies critical to our long- term success. Migrating our data services to a public cloud infrastructure will allow us to focus on big data and machine learning to improve our service customers.
CFO Statement
Since its founding JencoMart has invested heavily in our data services infrastructure. However, because of changing market trends, we need to outsource our infrastructure to ensure our long- term success. This model will allow us to respond to increasing customer demand during peak and reduce costs.
For this question, refer to the JencoMart case study.
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources. What Google domain and project structure should you recommend?

Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.

Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.

Create a single G Suite account to manage users with each stage of each application in its own project.

Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.

QUESTION 163
You are tasked with building an online analytical processing (OLAP) marketing analytics and reporting tool.
This requires a relational database that can operate on hundreds of terabytes of dat a. What is the Google recommended tool for such applications?

Cloud Spanner, because it is globally distributed

Cloud SQL, because it is a fully managed relational database

Cloud Firestore, because it offers real-time synchronization across devices

BigQuery, because it is designed for large-scale processing of tabular data

QUESTION 164
You need to evaluate your team readiness for a new GCP project. You must perform the evaluation and create a skills gap plan incorporates the business goal of cost optimization. Your team has deployed two GCP projects successfully to date. What should you do?

Allocate budget for team training. Set a deadline for the new GCP project.

Allocate budget for team training. Create a roadmap for your team to achieve Google Cloud certification based on job role.

Allocate budget to hire skilled external consultants. Set a deadline for the new GCP project.

Allocate budget to hire skilled external consultants. Create a roadmap for your team to achieve Google Cloud certification based on job role.

QUESTION 165
Your company and one of its partners each nave a Google Cloud protect in separate organizations. Your company s protect (prj-a) runs in Virtual Private Cloud (vpc-a). The partner’s project (prj-b) runs in vpc-b.
There are two instances running on vpc-a and one instance running on vpc-b Subnets denned in both VPCs are not overlapping. You need to ensure that all instances communicate with each other via internal IPs minimizing latency and maximizing throughput. What should you do?

Set up a network peering between vpc-a and vpc-b

Set up a VPN between vpc-a and vpc-b using Cloud VPN

Configure IAP TCP forwarding on the instance in vpc b and then launch the following gcloud command from one of the instance in vpc-gcloud:

1. Create an additional instance in vpc-a
2. Create an additional instance n vpc-b
3. Instal OpenVPN in newly created instances
4. Configure a VPN tunnel between vpc-a and vpc-b with the help of OpenVPN

QUESTION 166
One of the developers on your team deployed their application in Google Container Engine with the Dockerfile below. They report that their application deployments are taking too long.

You want to optimize this Dockerfile for faster deployment times without adversely affecting the app’s functionality.
Which two actions should you take? Choose 2 answers.

Remove Python after running pip.

Remove dependencies from requirements.txt.

Use a slimmed-down base image like Alpine linux.

Use larger machine types for your Google Container Engine node pools.

Copy the source after the package dependencies (Python and pip) are installed.

QUESTION 167
For this question, refer to the JencoMart case study.
JencoMart has decided to migrate user profile storage to Google Cloud Datastore and the application servers to Google Compute Engine (GCE). During the migration, the existing infrastructure will need access to Datastore to upload the data. What service account key- management strategy should you recommend?

Provision service account keys for the on-premises infrastructure and for the GCE virtual machines (VMs).

Authenticate the on-premises infrastructure with a user account and provision service account keys for the VMs.

Provision service account keys for the on-premises infrastructure and use Google Cloud Platform (GCP) managed keys for the VMs

Deploy a custom authentication service on GCE/Google Container Engine (GKE) for the on-premises infrastructure and use GCP managed keys for the VMs.

QUESTION 168
All compute Engine instances in your VPC should be able to connect to an Active Directory server on
specific ports. Any other traffic emerging from your instances is not allowed. You want to enforce this using
VPC firewall rules.
How should you configure the firewall rules?

Create an egress rule with priority 1000 to deny all traffic for all instances. Create another egress rule
with priority 100 to allow the Active Directory traffic for all instances.

Create an egress rule with priority 100 to deny all traffic for all instances. Create another egress rule
with priority 1000 to allow the Active Directory traffic for all instances.

Create an egress rule with priority 1000 to allow the Active Directory traffic. Rely on the implied deny
egress rule with priority 100 to block all traffic for all instances.

Create an egress rule with priority 100 to allow the Active Directory traffic. Rely on the implied deny
egress rule with priority 1000 to block all traffic for all instances.

QUESTION 169
A recent audit that a new network was created in Your GCP project. In this network, a GCE instance has an SSH port open the world. You want to discover this network’s origin. What should you do?

Search for Create VM entry in the Stackdriver alerting console.

Navigate to the Activity page in the Home section. Set category to Data Access and search for Create VM entry.

In the logging section of the console, specify GCE Network as the logging section. Search for the Create Insert entry.

Connect to the GCE instance using project SSH Keys. Identify previous logins in system logs, and match these with the project owners list.

QUESTION 170
TerramEarth has a legacy web application that you cannot migrate to cloud. However, you still want to build a cloud-native way to monitor the application. If the application goes down, you want the URL to point to a
“Site is unavailable” page as soon as possible. You also want your Ops team to receive a notification for the issue. You need to build a reliable solution for minimum cost What should you do?

Create a scheduled job in Cloud Run to invoke a container every minute. The container will check the application URL If the application is down, switch the URL to the “Site is unavailable” page, and notify the Ops team.

Create a cron job on a Compute Engine VM that runs every minute. The cron job invokes a Python program to check the application URL If the application is down, switch the URL to the “Site is unavailable” page, and notify the Ops team.

Create a Cloud Monitoring uptime check to validate the application URL If it fails, put a message in a Pub/Sub queue that triggers a Cloud Function to switch the URL to the “Site is unavailable” page, and notify the Ops team.

Use Cloud Error Reporting to check the application URL If the application is down, switch the URL to the “Site is unavailable” page, and notify the Ops team.

QUESTION 171
For this question, refer to the JencoMart case study.
JencoMart has built a version of their application on Google Cloud Platform that serves traffic to Asia. You want to measure success against their business and technical goals. Which metrics should you track?

Error rates for requests from Asia

Latency difference between US and Asia

Total visits, error rates, and latency from Asia

Total visits and average latency for users in Asia

The number of character sets present in the database

QUESTION 172
Your company has an application running on Compute Engine mat allows users to play their favorite music. There are a fixed number of instances Files are stored in Cloud Storage and data is streamed directly to users. Users are reporting that they sometimes need to attempt to play popular songs multiple times before they are successful. You need to improve the performance of the application. What should you do?

1. Copy popular songs into CloudSQL as a blob
2. Update application code to retrieve data from CloudSQL when Cloud Storage is overloaded

1. Create a managed instance group with Compute Engine instances
2. Create a global toad balancer and configure ii with two backbends
* Managed instance group
* Cloud Storage bucket
3. Enable Cloud CDN on the bucket backend

1. Mount the Cloud Storage bucket using gcsfuse on all backend Compute Engine instances
2. Serve muse files directly from the backend Compute Engine instance

1. Create a Cloud Filestore NFS volume and attach it to the backend Compute Engine instances
2. Download popular songs in Cloud Filestore
3. Serve music Wes directly from the backend Compute Engine instance

QUESTION 173
Your company plans to migrate a multi-petabyte data set to the cloud. The data set must be available 24hrs a day. Your business analysts have experience only with using a SQL interface. How should you store the data to optimize it for ease of analysis?

Load data into Google BigQuery.

Insert data into Google Cloud SQL.

Put flat files into Google Cloud Storage.

Stream data into Google Cloud Datastore.

QUESTION 174
TerramEarth’s CTO wants to use the raw data from connected vehicles to help identify approximately when a vehicle in the field will have a catastrophic failure. You want to allow analysts to centrally query the vehicle data.
Which architecture should you recommend?

QUESTION 175
Your company has a networking team and a development team. The development team runs applications on Compute Engine instances that contain sensitive dat a. The development team requires administrative permissions for Compute Engine. Your company requires all network resources to be managed by the networking team. The development team does not want the networking team to have access to the sensitive data on the instances. What should you do?

1. Create a project with a standalone VPC and assign the Network Admin role to the networking team.
2. Create a second project with a standalone VPC and assign the Compute Admin role to the development team.
3. Use Cloud VPN to join the two VPCs.

1. Create a project with a standalone Virtual Private Cloud (VPC), assign the Network Admin role to the networking team, and assign the Compute Admin role to the development team.

1. Create a project with a Shared VPC and assign the Network Admin role to the networking team.
2. Create a second project without a VPC, configure it as a Shared VPC service project, and assign the Compute Admin role to the development team.

1. Create a project with a standalone VPC and assign the Network Admin role to the networking team.
2. Create a second project with a standalone VPC and assign the Compute Admin role to the development team.
3. Use VPC Peering to join the two VPCs.

Prepaway Exam Dumps

Tag: Professional-Cloud-Architect valid exam preparation

PDF (New 2024) Actual Google Professional-Cloud-Architect Exam Questions [Q153-Q175]

Tag Archives: Professional-Cloud-Architect valid exam preparation