Renovate Google Certified Professional - Cloud Architect (GCP) Professional-Cloud-Architect Test Preparation

NEW QUESTION 1

Your marketing department wants to send out a promotional email campaign. The development team wants to minimize direct operation management. They project a wide range of possible customer responses, from 100 to 500,000 click-throughs per day. The link leads to a simple website that explains the promotion and collects user information and preferences. Which infrastructure should you recommend? (CHOOSE TWO)

• A. Use Google App Engine to serve the website and Google Cloud Datastore to store user data.
• B. Use a Google Container Engine cluster to serve the website and store data to persistent disk.
• C. Use a managed instance group to serve the website and Google Cloud Bigtable to store user data.
• D. Use a single compute Engine virtual machine (VM) to host a web server, backed by Google Cloud SQL.

Answer: AC

Explanation:
Reference: https://cloud.google.com/storage-options/ References: https://cloud.google.com/storage-options/

NEW QUESTION 2

You are designing an application for use only during business hours. For the minimum viable product release, you’d like to use a managed product that automatically “scales to zero” so you don’t incur costs when there is no activity.
Which primary compute resource should you choose?

• A. Cloud Functions
• B. Compute Engine
• C. Kubernetes Engine
• D. AppEngine flexible environment

Answer: A

Explanation:
https://cloud.google.com/serverless-options

NEW QUESTION 3

Your company acquired a healthcare startup and must retain its customers’ medical information for up to 4 more years, depending on when it was created. Your corporate policy is to securely retain this data, and then delete it as soon as regulations allow.
Which approach should you take?

• A. Store the data in Google Drive and manually delete records as they expire.
• B. Anonymize the data using the Cloud Data Loss Prevention API and store it indefinitely.
• C. Store the data using the Cloud Storage and use lifecycle management to delete files when they expire.
• D. Store the data in Cloud Storage and run a nightly batch script that deletes all expired datA.

Answer: C

Explanation:
https://cloud.google.com/storage/docs/lifecycle

NEW QUESTION 4

An application development team believes their current logging tool will not meet their needs for their new cloud-based product. They want a bettor tool to capture errors and help them analyze their historical log data. You want to help them find a solution that meets their needs, what should you do?

• A. Direct them to download and install the Google StackDriver logging agent.
• B. Send them a list of online resources about logging best practices.
• C. Help them define their requirements and assess viable logging tools.
• D. Help them upgrade their current tool to take advantage of any new features.

Answer: C

Explanation:
Help them define their requirements and assess viable logging tools. They know the requirements and the existing tools' problems. While it's true StackDriver Logging and Error Reporting possibly meet all their requirements, there might be other tools also meet their need. They need you to provide expertise to make assessment for new tools, specifically, logging tools that can "capture errors and help them analyze their historical log data".
References: https://cloud.google.com/logging/docs/agent/installation

NEW QUESTION 5

Your organization requires that metrics from all applications be retained for 5 years for future analysis in possible legal proceedings. Which approach should you use?

• A. Grant the security team access to the logs in each Project.
• B. Configure Stackdriver Monitoring for all Projects, and export to BigQuery.
• C. Configure Stackdriver Monitoring for all Projects with the default retention policies.
• D. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage.

Answer: D

Explanation:
Overview of storage classes, price, and use cases https://cloud.google.com/storage/docs/storage-classes Why export logs? https://cloud.google.com/logging/docs/export/
StackDriver Quotas and Limits for Monitoring https://cloud.google.com/monitoring/quotas The BigQuery pricing. https://cloud.google.com/bigquery/pricing

NEW QUESTION 6

You are helping the QA team to roll out a new load-testing tool to test the scalability of your primary cloud services that run on Google Compute Engine with Cloud Bigtable. Which three requirements should they include? Choose 3 answers

• A. Ensure that the load tests validate the performance of Cloud Bigtable.
• B. Create a separate Google Cloud project to use for the load-testing environment.
• C. Schedule the load-testing tool to regularly run against the production environment.
• D. Ensure all third-party systems your services use are capable of handling high load.
• E. Instrument the production services to record every transaction for replay by the load-testing tool.
• F. Instrument the load-testing tool and the target services with detailed logging and metrics collection.

Answer: ABF

NEW QUESTION 7

You have an outage in your Compute Engine managed instance group: all instance keep restarting after 5 seconds. You have a health check configured, but autoscaling is disabled. Your colleague, who is a Linux expert, offered to look into the issue. You need to make sure that he can access the VMs. What should you do?

• A. Grant your colleague the IAM role of project Viewer
• B. Perform a rolling restart on the instance group
• C. Disable the health check for the instance grou
• D. Add his SSH key to the project-wide SSH keys
• E. Disable autoscaling for the instance grou
• F. Add his SSH key to the project-wide SSH Keys

Answer: C

Explanation:
https://cloud.google.com/compute/docs/instance-groups/autohealing-instances-in-migs
Health checks used for autohealing should be conservative so they don't preemptively delete and recreate your instances. When an autohealer health check is too aggressive, the autohealer might mistake busy instances for failed instances and unnecessarily restart them, reducing availability

NEW QUESTION 8

You are analyzing and defining business processes to support your startup’s trial usage of GCP, and you don’t yet know what consumer demand for your product will be. Your manager requires you to minimize GCP service costs and adhere to Google best practices. What should you do?

• A. Utilize free tier and sustained use discount
• B. Provision a staff position for service cost management.
• C. Utilize free tier and sustained use discount
• D. Provide training to the team about service cost management.
• E. Utilize free tier and committed use discount
• F. Provision a staff position for service cost management.
• G. Utilize free tier and committed use discount
• H. Provide training to the team about service cost management.

Answer: D

Explanation:
https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#billing_and_management

NEW QUESTION 9

Your BigQuery project has several users. For audit purposes, you need to see how many queries each user ran in the last month.

• A. Connect Google Data Studio to BigQuer
• B. Create a dimension for the users and a metric for the amount of queries per user.
• C. In the BigQuery interface, execute a query on the JOBS table to get the required information.
• D. Use ‘bq show’ to list all job
• E. Per job, use ‘bq Is’ to list job information and get the required information.
• F. Use Cloud Audit Logging to view Cloud Audit Logs, and create a filter on the query operation to get the required information.

Answer: C

Explanation:
https://cloud.google.com/bigquery/docs/managing-jobs

NEW QUESTION 10

Your development team has installed a new Linux kernel module on the batch servers in Google Compute Engine (GCE) virtual machines (VMs) to speed up the nightly batch process. Two days after the installation, 50% of web application deployed in the same
nightly batch run. You want to collect details on the failure to pass back to the development team. Which three actions should you take? Choose 3 answers

• A. Use Stackdriver Logging to search for the module log entries.
• B. Read the debug GCE Activity log using the API or Cloud Console.
• C. Use gcloud or Cloud Console to connect to the serial console and observe the logs.
• D. Identify whether a live migration event of the failed server occurred, using in the activity log.
• E. Adjust the Google Stackdriver timeline to match the failure time, and observe the batch server metrics.
• F. Export a debug VM into an image, and run the image on a local server where kernel log messages will be displayed on the native screen.

Answer: ACE

Explanation:
https://www.flexera.com/blog/cloud/2013/12/google-compute-engine-live-migration-passes-the-test/ "With live migration, the virtual machines are moved without any downtime or noticeable service
degradation"

NEW QUESTION 11

You need to design a solution for global load balancing based on the URL path being requested. You need to ensure operations reliability and end-to-end in-transit encryption based on Google best practices.
What should you do?

• A. Create a cross-region load balancer with URL Maps.
• B. Create an HTTPS load balancer with URL maps.
• C. Create appropriate instance groups and instance
• D. Configure SSL proxy load balancing.
• E. Create a global forwarding rul
• F. Configure SSL proxy balancing.

Answer: B

Explanation:
Reference https://cloud.google.com/load-balancing/docs/https/url-map

NEW QUESTION 12

For this question, refer to the Mountkirk Games case study.
Mountkirk Games has deployed their new backend on Google Cloud Platform (GCP). You want to create a thorough testing process for new versions of the backend before they are released to the public. You want the testing environment to scale in an economical way. How should you design the process?

• A. Create a scalable environment in GCP for simulating production load.
• B. Use the existing infrastructure to test the GCP-based backend at scale.
• C. Build stress tests into each component of your application using resources internal to GCP to simulate load.
• D. Create a set of static environments in GCP to test different levels of load — for example, high, medium, and low.

Answer: A

Explanation:
From scenario: Requirements for Game Backend Platform
Dynamically scale up or down based on game activity
Connect to a managed NoSQL database service
Run customize Linux distro

NEW QUESTION 13

You created a pipeline that can deploy your source code changes to your infrastructure in instance groups for self healing.
One of the changes negatively affects your key performance indicator. You are not sure how to fix it and investigation could take up to a week. What should you do

• A. Log in to a server, and iterate a fix locally
• B. Change the instance group template to the previous one, and delete all instances.
• C. Revert the source code change and rerun the deployment pipeline
• D. Log into the servers with the bad code change, and swap in the previous code

Answer: C

NEW QUESTION 14

Your application needs to process credit card transactions. You want the smallest scope of Payment Card Industry (PCI) compliance without compromising the ability to analyze transactional data and trends relating to which payment methods are used. How should you design your architecture?

• A. Create a tokenizer service and store only tokenized data.
• B. Create separate projects that only process credit card data.
• C. Create separate subnetworks and isolate the components that process credit card data.
• D. Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI data.
• E. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor.

Answer: A

Explanation:
https://cloud.google.com/solutions/pci-dss-compliance-in-gcp

NEW QUESTION 15

Your company creates rendering software which users can download from the company website. Your company has customers all over the world. You want to minimize latency for all your customers. You want to follow Google-recommended practices.
How should you store the files?

• A. Save the files in a Multi-Regional Cloud Storage bucket.
• B. Save the files in a Regional Cloud Storage bucket, one bucket per zone of the region.
• C. Save the files in multiple Regional Cloud Storage buckets, one bucket per zone per region.
• D. Save the files in multiple Multi-Regional Cloud Storage buckets, one bucket per multi-region.

Answer: A

Explanation:
https://cloud.google.com/storage/docs/locations#location-mr

NEW QUESTION 16

For this question, refer to the Mountkirk Games case study
Mountkirk Games needs to create a repeatable and configurable mechanism for deploying isolated application environments. Developers and testers can access each other's environments and resources, but they cannot access staging or production resources. The staging environment needs access to some services from production.
What should you do to isolate development environments from staging and production?

• A. Create a project for development and test and another for staging and production.
• B. Create a network for development and test and another for staging and production.
• C. Create one subnetwork for development and another for staging and production.
• D. Create one project for development, a second for staging and a third for production.

Answer: D

NEW QUESTION 17

You are using a single Cloud SQL instance to serve your application from a specific zone. You want to introduce high availability. What should you do?

• A. Create a read replica instance in a different region
• B. Create a failover replica instance in a different region
• C. Create a read replica instance in the same region, but in a different zone
• D. Create a failover replica instance in the same region, but in a different zone

Answer: B

Explanation:
https://cloud.google.com/sql/docs/mysql/high-availability

NEW QUESTION 18

Your company wants to try out the cloud with low risk. They want to archive approximately 100 TB of their log data to the cloud and test the analytics features available to them there, while also retaining that data as a long-term disaster recovery backup. Which two steps should they take? Choose 2 answers

• A. Load logs into Google BigQuery.
• B. Load logs into Google Cloud SQL.
• C. Import logs into Google Stackdriver.
• D. Insert logs into Google Cloud Bigtable.
• E. Upload log files into Google Cloud Storage.

Answer: AE

NEW QUESTION 19

You have deployed an application to Kubernetes Engine, and are using the Cloud SQL proxy container to make the Cloud SQL database available to the services running on Kubernetes. You are notified that the application is reporting database connection issues. Your company policies require a post-mortem. What
should you do?

• A. Use gcloud sql instances restart.
• B. Validate that the Service Account used by the Cloud SQL proxy container still has the Cloud Build Editor role.
• C. In the GCP Console, navigate to Stackdriver Loggin
• D. Consult logs for Kubernetes Engine and Cloud SQL.
• E. In the GCP Console, navigate to Cloud SQ
• F. Restore the latest backu
• G. Use kubect1 to restart all pods.

Answer: C

NEW QUESTION 20
......