Google Professional Cloud Architect Dumps Questions

dumps2021-12-11T02:57:58+08:00

Google Professional Cloud Architect dumps questions enable organizations to leverage Google Cloud technologies. Each Professional Cloud Architect exam candidate has 2 hours to write all the questions. The available languages are English and Japanese. The exam format is Multiple choice and multiple select, taken remotely or in person at a test center. Free Google Professional Cloud Architect dumps questions are available below.

Page 1 of 9

1. You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address. You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly .

What should you do?

Ensure that a firewall rule exists to allow source traffic on HTTP/HTTPS to reach the load balancer.

Assign a public IP to each instance and configure a firewall rule to allow the load balancer to reach the instance public I

Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.

Create a tag on each instance with the name of the load balancer. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.

2. For this question, refer to the TerramEarth case study.

TerramEarth has equipped unconnected trucks with servers and sensors to collet telemetry data. Next year they want to use the data to train machine learning models. They want to store this data in the cloud while reducing costs .

What should they do?

Have the vehicle’ computer compress the data in hourly snapshots, and store it in a Google Cloud storage (GCS) Nearline bucket.

Push the telemetry data in Real-time to a streaming dataflow job that compresses the data, and store it in Google BigQuery.

Push the telemetry data in real-time to a streaming dataflow job that compresses the data, and store it in Cloud Bigtable.

Have the vehicle's computer compress the data in hourly snapshots, a Store it in a GCS Coldline bucket.

3. Your company is running its application workloads on Compute Engine. The applications have been deployed in production, acceptance, and development environments. The production environment is business-critical and is used 24/7, while the acceptance and development environments are only critical during office hours. Your CFO has asked you to optimize these environments to achieve cost savings during idle times .

What should you do?

Create a shell script that uses the gcloud command to change the machine type of the development and acceptance instances to a smaller machine type outside of office hours. Schedule the shell script on one of the production instances to automate the task.

Use Cloud Scheduler to trigger a Cloud Function that will stop the development and acceptance environments after office hours and start them just before office hours.

Deploy the development and acceptance applications on a managed instance group and enable autoscaling.

Use regular Compute Engine instances for the production environment, and use preemptible VMs for the acceptance and development environments.

4. Topic 2, TerramEarth Case Study

Company Overview

TerramEarth manufactures heavy equipment for the mining and agricultural industries: about 80% of their business is from mining and 20% from agriculture. They currently have over 500 dealers and service centers in 100 countries. Their mission is to build products that make their customers more productive.

Company background

TerramEarth was formed in 1946, when several small, family owned companies combined to retool after World War II. The company cares about their employees and customers and considers them to be extended members of their family.

TerramEarth is proud of their ability to innovate on their core products and find new markets as their customers’ needs change. For the past 20 years, trends in the industry have been largely toward increasing productivity by using larger vehicles with a human operator.

Solution Concept

There are 20 million TerramEarth vehicles in operation that collect 120 fields of data per second. Data is stored locally on the vehicle and can be accessed for analysis when a vehicle is serviced. The data is downloaded via a maintenance port. This same port can be used to adjust operational parameters, allowing the vehicles to be upgraded in the field with new computing modules.

Approximately 200,000 vehicles are connected to a cellular network, allowing TerramEarth to collect data directly. At a rate of 120 fields of data per second with 22 hours of operation per day, Terram Earth collects a total of about 9 TB/day from these connected vehicles.

Existing Technical Environment

TerramEarth’s existing architecture is composed of Linux-based systems that reside in a data center. These systems gzip CSV files from the field and upload via FTP, transform and aggregate them, and place the data in their data warehouse. Because this process takes time, aggregated reports are based on data that is 3 weeks old.

With this data, TerramEarth has been able to preemptively stock replacement parts and reduce unplanned downtime of their vehicles by 60%. However, because the data is stale, some customers are without their vehicles for up to 4 weeks while they wait for replacement parts.

Business Requirements

- Decrease unplanned vehicle downtime to less than 1 week, without increasing the cost of carrying surplus inventory

- Support the dealer network with more data on how their customers use their equipment to better position new products and services

- Have the ability to partner with different companies C especially with seed and fertilizer suppliers in the fast-growing agricultural business C to create compelling joint offerings for their customers.

CEO Statement

We have been successful in capitalizing on the trend toward larger vehicles to increase the productivity of our customers. Technological change is occurring rapidly, and TerramEarth has taken advantage of connected devices technology to provide our customers with better services, such as our intelligent farming equipment. With this technology, we have been able to increase farmers’ yields by 25%, by using past trends to adjust how our vehicles operate. These advances have led to the rapid growth of our agricultural product line, which we expect will generate 50% of our revenues by 2020.

CTO Statement

Our competitive advantage has always been in the manufacturing process, with our ability to build better vehicles for lower cost than our competitors. However, new products with different approaches are constantly being developed, and I’m concerned that we lack the skills to undergo the next wave of transformations in our industry. Unfortunately, our CEO doesn’t take technology obsolescence seriously and he considers the many new companies in our industry to be niche players. My goals are to build our skills while addressing immediate market needs through incremental innovations.

For this question refer to the TerramEarth case study.

Which of TerramEarth's legacy enterprise processes will experience significant change as a result of increased Google Cloud Platform adoption?

Opex/capex allocation, LAN changes, capacity planning

Capacity planning, TCO calculations, opex/capex allocation

Capacity planning, utilization measurement, data center expansion

Data Center expansion, TCO calculations, utilization measurement

5. You need to migrate Hadoop jobs for your company’s Data Science team without modifying the underlying infrastructure. You want to minimize costs and infrastructure management effort .

What should you do?

Create a Dataproc cluster using standard worker instances.

Create a Dataproc cluster using preemptible worker instances.

Manually deploy a Hadoop cluster on Compute Engine using standard instances.

Manually deploy a Hadoop cluster on Compute Engine using preemptible instances.

6. TerramEarth has a legacy web application that you cannot migrate to cloud. However, you still want to build a cloud-native way to monitor the application. If the application goes down, you want the URL to point to a "Site is unavailable" page as soon as possible. You also want your Ops team to receive a notification for the issue. You need to build a reliable solution for minimum cost

What should you do?

Create a scheduled job in Cloud Run to invoke a container every minute. The container will check the application URL If the application is down, switch the URL to the "Site is unavailable" page, and notify the Ops team.

Create a cron job on a Compute Engine VM that runs every minute. The cron job invokes a Python program to check the application URL If the application is down, switch the URL to the "Site is unavailable" page, and notify the Ops team.

Create a Cloud Monitoring uptime check to validate the application URL If it fails, put a message in a Pub/Sub queue that triggers a Cloud Function to switch the URL to the "Site is unavailable" page, and notify the Ops team.

Use Cloud Error Reporting to check the application URL If the application is down, switch the URL to the "Site is unavailable" page, and notify the Ops team.

7. Your team is developing a web application that will be deployed on Google Kubernetes Engine (GKE). Your CTO expects a successful launch and you need to ensure your application can handle the expected load of tens of thousands of users. You want to test the current deployment to ensure the latency of your application stays below a certain threshold .

What should you do?

Use a load testing tool to simulate the expected number of concurrent users and total requests to your application, and inspect the results.

Enable autoscaling on the GKE cluster and enable horizontal pod autoscaling on your application deployments. Send curl requests to your application, and validate if the auto scaling works.

Replicate the application over multiple GKE clusters in every Google Cloud region. Configure a global HTTP (S) load balancer to expose the different clusters over a single global IP address.

Use Cloud Debugger in the development environment to understand the latency between the different microservices.

8. The database administration team has asked you to help them improve the performance of their new database server running on Google Compute Engine. The database is for importing and normalizing their performance statistics and is built with MySQL running on Debian Linux. They have an n1-standard-8 virtual machine with 80 GB of SSD persistent disk .

What should they change to get better performance from this system?

Increase the virtual machine's memory to 64 G

Create a new virtual machine running PostgreSQ

Dynamically resize the SSD persistent disk to 500 G

Migrate their performance metrics warehouse to BigQuery.

Modify all of their batch jobs to use bulk inserts into the database.

9. You want to automate the creation of a managed instance group and a startup script to install the OS package dependencies. You want to minimize the startup time for VMs in the instance group.

What should you do?

Use Terraform to create the managed instance group and a startup script to install the OS package dependencies.

Create a custom VM image with all OS package dependencies. Use Deployment Manager to create the managed instance group with the VM image.

Use Puppet to create the managed instance group and install the OS package dependencies.

Use Deployment Manager to create the managed instance group and Ansible to install the OS package dependencies.

10. Your customer is receiving reports that their recently updated Google App Engine application is taking approximately 30 seconds to load for some of their users. This behavior was not reported before the update .

What strategy should you take?

Work with your ISP to diagnose the problem.

Open a support ticket to ask for network capture and flow data to diagnose the problem, then roll back your application.

Roll back to an earlier known good release initially, then use Stackdriver Trace and logging to diagnose the problem in a development/test/staging environment.

Roll back to an earlier known good release, then push the release again at a quieter period to investigate. Then use Stackdriver Trace and logging to diagnose the problem.

Page 2 of 9

11. Topic 9, Helicopter Racing League Case

Company overview

Helicopter Racing League (HRL) is a global sports league for competitive helicopter racing. Each year HRL holds the world championship and several regional league competitions where teams compete to earn a spot in the world championship. HRL offers a paid service to stream the races all over the world with live telemetry and predictions throughout each race.

Solution concept

HRL wants to migrate their existing service to a new platform to expand their use of managed AI and ML services to facilitate race predictions. Additionally, as new fans engage with the sport, particularly in emerging regions, they want to move the serving of their content, both real-time and recorded, closer to their users.

Existing technical environment

HRL is a public cloud-first company; the core of their mission-critical applications runs on their current public cloud provider. Video recording and editing is performed at the race tracks, and the content is encoded and transcoded, where needed, in the cloud. Enterprise-grade connectivity and local compute is provided by truck-mounted mobile data centers. Their race prediction services are hosted exclusively on their existing public cloud provider.

Their existing technical environment is as follows:

✑ Existing content is stored in an object storage service on their existing public cloud provider.

✑ Video encoding and transcoding is performed on VMs created for each job.

✑ Race predictions are performed using TensorFlow running on VMs in the current public cloud provider.

Business requirements

HRL’s owners want to expand their predictive capabilities and reduce latency for their viewers in emerging markets.

Their requirements are:

✑ Support ability to expose the predictive models to partners.

✑ Increase predictive capabilities during and before races:

Race results

Mechanical failures

Crowd sentiment

✑ Increase telemetry and create additional insights.

✑ Measure fan engagement with new predictions.

✑ Enhance global availability and quality of the broadcasts.

✑ Increase the number of concurrent viewers.

✑ Minimize operational complexity.

✑ Ensure compliance with regulations.

✑ Create a merchandising revenue stream.

Technical requirements

✑ Maintain or increase prediction throughput and accuracy.

✑ Reduce viewer latency.

✑ Increase transcoding performance.

✑ Create real-time analytics of viewer consumption patterns and engagement.

✑ Create a data mart to enable processing of large volumes of race data.

Executive statement

Our CEO, S. Hawke, wants to bring high-adrenaline racing to fans all around the world. We listen to our fans, and they want enhanced video streams that include predictions of events within the race (e.g., overtaking). Our current platform allows us to predict race outcomes but lacks the facility to support real-time predictions during races and the capacity to process season-long results.

For this question, refer to the Helicopter Racing League (HRL) case study. HRL is looking for a cost-effective approach for storing their race data such as telemetry. They want to keep all historical

records, train models using only the previous season's data, and plan for data growth in terms of volume and information collected.

You need to propose a data solution. Considering HRL business requirements and the goals expressed by CEOS. Hawke, what should you do?

Use Firestore for its scalable and flexible document-based database. Use collections to aggregate race data by season and event.

Use Cloud Spanner for its scalability and ability to version schemas with zero downtime. Split race data using season as a primary key.

Use BigQuery for its scalability and ability to add columns to a schema. Partition race data based on season.

Use Cloud SQL for its ability to automatically manage storage increases and compatibility with MySQ

Use separate database instances for each season.

12. For this question, refer to the Dress4Win case study.

You want to ensure Dress4Win's sales and tax records remain available for infrequent viewing by auditors for at least 10 years. Cost optimization is your top priority .

Which cloud services should you choose?

Google Cloud Storage Coldline to store the data, and gsutil to access the data.

Google Cloud Storage Nearline to store the data, and gsutil to access the data.

Google Bigtabte with US or EU as location to store the data, and gcloud to access the data.

BigQuery to store the data, and a web server cluster in a managed instance group to access the data. Google Cloud SQL mirrored across two distinct regions to store the data, and a Redis cluster in a managed instance group to access the data.

13. For this question, refer to the Mountkirk Games case study.

Mountkirk Games wants to set up a real-time analytics platform for their new game. The new platform must meet their technical requirements .

Which combination of Google technologies will meet all of their requirements?

Container Engine, Cloud Pub/Sub, and Cloud SQL

Cloud Dataflow, Cloud Storage, Cloud Pub/Sub, and BigQuery

Cloud SQL, Cloud Storage, Cloud Pub/Sub, and Cloud Dataflow

Cloud Dataproc, Cloud Pub/Sub, Cloud SQL, and Cloud Dataflow

Cloud Pub/Sub, Compute Engine, Cloud Storage, and Cloud Dataproc

14. Your solution is producing performance bugs in production that you did not see in staging and test environments. You want to adjust your test and deployment procedures to avoid this problem in the future .

What should you do?

Deploy fewer changes to production.

Deploy smaller changes to production.

Increase the load on your test and staging environments.

Deploy changes to a small subset of users before rolling out to production.

15. You are developing your microservices application on Google Kubernetes Engine. During testing, you want to validate the behavior of your application in case a specific microservice should suddenly crash .

What should you do?

Add a taint to one of the nodes of the Kubernetes cluster. For the specific microservice, configure a pod anti-affinity label that has the name of the tainted node as a value.

Use Istio’s fault injection on the particular microservice whose faulty behavior you want to simulate.

Destroy one of the nodes of the Kubernetes cluster to observe the behavior.

Configure Istio’s traffic management features to steer the traffic away from a crashing microservice.

16. Your company sends all Google Cloud logs to Cloud Logging. Your security team wants to monitor the logs. You want to ensure that the security team can react quickly if an anomaly such as an unwanted firewall change or server breach is detected. You want to follow Google-recommended practices .

What should you do?

Schedule a cron job with Cloud Scheduler. The scheduled job queries the logs every minute for the relevant events.

Export logs to BigQuery, and trigger a query in BigQuery to process the log data for the relevant events.

Export logs to a Pub/Sub topic, and trigger Cloud Function with the relevant log events.

Export logs to a Cloud Storage bucket, and trigger Cloud Run with the relevant log events.

17. Your customer is moving an existing corporate application to Google Cloud Platform from an on-premises data center. The business owners require minimal user disruption. There are strict security team requirements for storing passwords .

What authentication strategy should they use?

Use G Suite Password Sync to replicate passwords into Google.

Federate authentication via SAML 2.0 to the existing Identity Provider.

Provision users in Google using the Google Cloud Directory Sync tool.

Ask users to set their Google password to match their corporate password.

18. You team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines .

What should you do?

Create a Compute Engine instance, and install a NAT Proxy on the instance. Configure all workloads on GKE to pass through this proxy to access third-party services on the Internet

Configure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet

Configure the GKE cluster as a route-based cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)

Configure the GKE cluster as a private cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)

19. You are working in a highly secured environment where public Internet access from the Compute Engine VMs is not allowed. You do not yet have a VPN connection to access an on-premises file server. You need to install specific software on a Compute Engine instance .

How should you install the software?

Upload the required installation files to Cloud Storage. Configure the VM on a subnet with a Private Google Access subnet. Assign only an internal IP address to the V

Download the installation files to the VM using gsutil.

Upload the required installation files to Cloud Storage and use firewall rules to block all traffic except the IP address range for Cloud Storage. Download the files to the VM using gsutil.

Upload the required installation files to Cloud Source Repositories. Configure the VM on a subnet with a Private Google Access subnet. Assign only an internal IP address to the V

Download the installation files to the VM using gcloud.

Upload the required installation files to Cloud Source Repositories and use firewall rules to block all traffic except the IP address range for Cloud Source Repositories. Download the files to the VM using gsutil.

20. Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform. Each tier (web, API, and database) scales independently of the others Network traffic should flow through the web to the API tier and then on to the database tier. Traffic should not flow between the web and the database tier .

How should you configure the network?

Add each tier to a different subnetwork.

Set up software based firewalls on individual VMs.

Add tags to each tier and set up routes to allow the desired traffic flow.

Add tags to each tier and set up firewall rules to allow the desired traffic flow.

Page 3 of 9

21. Your development team has installed a new Linux kernel module on the batch servers in Google Compute Engine (GCE) virtual machines (VMs) to speed up the nightly batch process. Two days after the installation, 50% of web application deployed in the same

nightly batch run. You want to collect details on the failure to pass back to the development team .

Which three actions should you take? Choose 3 answers

Use Stackdriver Logging to search for the module log entries.

Read the debug GCE Activity log using the API or Cloud Console.

Use gcloud or Cloud Console to connect to the serial console and observe the logs.

Identify whether a live migration event of the failed server occurred, using in the activity log.

Adjust the Google Stackdriver timeline to match the failure time, and observe the batch server metrics.

Export a debug VM into an image, and run the image on a local server where kernel log messages will be displayed on the native screen.

22. You are designing an application for use only during business hours. For the minimum viable product release, you’d like to use a managed product that automatically “scales to zero” so you don’t incur costs when there is no activity.

Which primary compute resource should you choose?

Cloud Functions

Compute Engine

Kubernetes Engine

AppEngine flexible environment

23. You have created several preemptible Linux virtual machine instances using Google Compute Engine. You want to properly shut down your application before the virtual machines are preempted .

What should you do?

Create a shutdown script named k99.shutdown in the /etc/rc.6.d/ directory.

Create a shutdown script registered as a xinetd service in Linux and configure a Stackdnver endpoint check to call the service.

Create a shutdown script and use it as the value for a new metadata entry with the key shutdown-script in the Cloud Platform Console when you create the new virtual machine instance.

Create a shutdown script, registered as a xinetd service in Linux, and use the gcloud compute instances add-metadata command to specify the service URL as the value for a new metadata entry with the key shutdown-script-url

24. For this question, refer to the Dress4Win case study.

Considering the given business requirements, how would you automate the deployment of web and transactional data layers?

Deploy Nginx and Tomcat using Cloud Deployment Manager to Compute Engine. Deploy a Cloud SQL server to replace MySQ

Deploy Jenkins using Cloud Deployment Manager.

Deploy Nginx and Tomcat using Cloud Launcher. Deploy a MySQL server using Cloud Launcher. Deploy Jenkins to Compute Engine using Cloud Deployment Manager scripts.

Migrate Nginx and Tomcat to App Engine. Deploy a Cloud Datastore server to replace the MySQL server in a high-availability configuration. Deploy Jenkins to Compute Engine using Cloud Launcher.

Migrate Nginx and Tomcat to App Engine. Deploy a MySQL server using Cloud Launcher. Deploy Jenkins to Compute Engine using Cloud Launcher.

25. You need to deploy an application to Google Cloud. The application receives traffic via TCP and reads and writes data to the filesystem. The application does not support horizontal scaling. The application process requires full control over the data on the file system because concurrent access causes corruption. The business is willing to accept a downtime when an incident occurs, but the application must be available 24/7 to support their business operations. You need to design the architecture of this application on Google Cloud.

What should you do?

Use a managed instance group with instances in multiple zones, use Cloud Filestore, and use an HTTP load balancer in front of the instances.

Use a managed instance group with instances in multiple zones, use Cloud Filestore, and use a network load balancer in front of the instances.

Use an unmanaged instance group with an active and standby instance in different zones, use a regional persistent disk, and use an HTTP load balancer in front of the instances.

Use an unmanaged instance group with an active and standby instance in different zones, use a regional persistent disk, and use a network load balancer in front of the instances.

26. You have developed an application using Cloud ML Engine that recognizes famous paintings from uploaded images. You want to test the application and allow specific people to upload images for the next 24 hours. Not all users have a Google Account .

How should you have users upload images?

Have users upload the images to Cloud Storage. Protect the bucket with a password that expires after 24 hours.

Have users upload the images to Cloud Storage using a signed URL that expires after 24 hours.

Create an App Engine web application where users can upload images. Configure App Engine to disable the application after 24 hours. Authenticate users via Cloud Identity.

Create an App Engine web application where users can upload images for the next 24 hours. Authenticate users via Cloud Identity.

27. Mountkirk Games wants to limit the physical location of resources to their operating Google Cloud regions.

What should you do?

Configure an organizational policy which constrains where resources can be deployed.

Configure IAM conditions to limit what resources can be configured.

Configure the quotas for resources in the regions not being used to 0.

Configure a custom alert in Cloud Monitoring so you can disable resources as they are created in other regions.

28. You are using Cloud Shell and need to install a custom utility for use in a few weeks.

Where can you store the file so it is in the default execution path and persists across sessions?

~/bin

Cloud Storage

/google/scripts

/usr/local/bin

29. For this question, refer to the Mountkirk Games case study.

Mountkirk Games has deployed their new backend on Google Cloud Platform (GCP). You want to create a thorough testing process for new versions of the backend before they are released to the public. You want the testing environment to scale in an economical way .

How should you design the process?

Create a scalable environment in GCP for simulating production load.

Use the existing infrastructure to test the GCP-based backend at scale.

Build stress tests into each component of your application using resources internal to GCP to simulate load.

Create a set of static environments in GCP to test different levels of load ― for example, high, medium, and low.

30. For this question, refer to the JencoMart case study.

The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources .

What Google domain and project structure should you recommend?

Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.

Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.

Create a single G Suite account to manage users with each stage of each application in its own project.

Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.

Page 4 of 9

31. Your company has developed a monolithic, 3-tier application to allow external users to upload and share files. The solution cannot be easily enhanced and lacks reliability. The development team would like to re-architect the application to adopt microservices and a fully managed service approach, but they need to convince their leadership that the effort is worthwhile .

Which advantage(s) should they highlight to leadership?

The new approach will be significantly less costly, make it easier to manage the underlying infrastructure, and automatically manage the CI/CD pipelines.

The monolithic solution can be converted to a container with Docker. The generated container can then be deployed into a Kubernetes cluster.

The new approach will make it easier to decouple infrastructure from application, develop and release new features, manage the underlying infrastructure, manage CI/CD pipelines and perform A/B testing, and scale the solution if necessary.

The process can be automated with Migrate for Compute Engine.

32. Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?

The effective policy is determined only by the policy set at the node

The effective policy is the policy set at the node and restricted by the policies of its ancestors

The effective policy is the union of the policy set at the node and policies inherited from its ancestors

The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors

33. You have an outage in your Compute Engine managed instance group: all instance keep restarting after 5 seconds. You have a health check configured, but autoscaling is disabled. Your colleague, who is a Linux expert, offered to look into the issue. You need to make sure that he can access the VMs .

What should you do?

Grant your colleague the IAM role of project Viewer

Perform a rolling restart on the instance group

Disable the health check for the instance group. Add his SSH key to the project-wide SSH keys

Disable autoscaling for the instance group. Add his SSH key to the project-wide SSH Keys

34. You have broken down a legacy monolithic application into a few containerized RESTful microservices. You want to run those microservices on Cloud Run. You also want to make sure the services are highly available with low latency to your customers .

What should you do?

Deploy Cloud Run services to multiple availability zones. Create Cloud Endpoints that point to the services. Create a global HTIP(S) Load Balancing instance and attach the Cloud Endpoints to its backend.

Deploy Cloud Run services to multiple regions Create serverless network endpoint groups pointing to the services. Add the serverless NE Gs to a backend service that is used by a global HTIP(S) Load Balancing instance.

Cloud Run services to multiple regions. In Cloud DNS, create a latency-based DNS name that points to the services.

Deploy Cloud Run services to multiple availability zones. Create a TCP/IP global load balancer. Add the Cloud Run Endpoints to its backend service.

35. Your company has an application running on a deployment in a GKE cluster. You have a separate cluster for development, staging and production. You have discovered that the team is able to deploy a Docker image to the production cluster without first testing the deployment in development and then staging. You want to allow the team to have autonomy but want to prevent this from happening. You want a Google Cloud solution that can be implemented quickly with minimal effort .

What should you do?

Create a Kubernetes admission controller to prevent the container from starting if it is not approved for usage in the given environment

Configure a Kubernetes lifecycle hook to prevent the container from starting if it is not approved for usage in the given environment

Implement a corporate policy to prevent teams from deploying Docker image to an environment unless the Docker image was tested in an earlier environment

Configure the binary authorization policies for the development, staging and production clusters. Create attestations as part of the continuous integration pipeline”

36. You need to upgrade the EHR connection to comply with their requirements. The new connection design must support business-critical needs and meet the same network and security policy requirements .

What should you do?

Add a new Dedicated Interconnect connection.

Upgrade the bandwidth on the Dedicated Interconnect connection to 100

Add three new Cloud VPN connections.

Add a new Carrier Peering connection.

37. You are deploying a PHP App Engine Standard service with SQL as the backend. You want to minimize the number of queries to the database.

What should you do?

Set the memcache service level to dedicated. Create a key from the hash of the query, and return database values from memcache before issuing a query to Cloud SQ

Set the memcache service level to dedicated. Create a cron task that runs every minute to populate the cache with keys containing query results.

Set the memcache service level to shared. Create a cron task that runs every minute to save all expected queries to a key called “cached-queries”.

Set the memcache service level to shared. Create a key called “cached-queries”, and return database values from the key before using a query to Cloud SQ

38. The operations manager asks you for a list of recommended practices that she should consider when migrating a J2EE application to the cloud .

Which three practices should you recommend? Choose 3 answers

Port the application code to run on Google App Engine.

Integrate Cloud Dataflow into the application to capture real-time metrics.

Instrument the application with a monitoring tool like Stackdriver Debugger.

Select an automation framework to reliably provision the cloud infrastructure.

Deploy a continuous integration tool with automated testing in a staging environment.

Migrate from MySQL to a managed NoSQL database like Google Cloud Datastore or Bigtable.

39. Your company has an application deployed on Anthos clusters (formerly Anthos GKE) that is running multiple microservices. The cluster has both Anthos Service Mesh and Anthos Config Management configured. End users inform you that the application is responding very slowly. You want to identify the microservice that is causing the delay .

What should you do?

Use the Service Mesh visualization in the Cloud Console to inspect the telemetry between the microservices.

Use Anthos Config Management to create a ClusterSelector selecting the relevant cluster. On the Google Cloud Console page for Google Kubernetes Engine, view the Workloads and filter on the cluster. Inspect the configurations of the filtered workloads.

Use Anthos Config Management to create a namespaceSelector selecting the relevant cluster namespace. On the Google Cloud Console page for Google Kubernetes Engine, visit the workloads and filter on the namespace. Inspect the configurations of the filtered workloads.

Reinstall istio using the default istio profile in order to collect request latency. Evaluate the telemetry between the microservices in the Cloud Console.

40. Configure Private Google Access for on-premises hosts.

Page 5 of 9

41. For this question, refer to the Mountkirk Games case study. Mountkirk Games wants you to design a way to test the analytics platform’s resilience to changes in mobile network latency .

What should you do?

Deploy failure injection software to the game analytics platform that can inject additional latency to mobile client analytics traffic.

Build a test client that can be run from a mobile phone emulator on a Compute Engine virtual machine, and run multiple copies in Google Cloud Platform regions all over the world to generate realistic traffic.

Add the ability to introduce a random amount of delay before beginning to process analytics files uploaded from mobile devices.

Create an opt-in beta of the game that runs on players' mobile devices and collects response times from analytics endpoints running in Google Cloud Platform regions all over the world.

42. You have been asked to select the storage system for the click-data of your company's large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute, with bursts of up to 8,500 clicks per second. It must been stored for future analysis by your data science and user experience

teams .

Which storage infrastructure should you choose?

Google Cloud SQL

Google Cloud Bigtable

Google Cloud Storage

Google cloud Datastore

43. Your company places a high value on being responsive and meeting customer needs quickly. Their primary business objectives are release speed and agility. You want to reduce the chance of security errors being accidentally introduced .

Which two actions can you take? Choose 2 answers

Ensure every code check-in is peer reviewed by a security SM

Use source code security analyzers as part of the CI/CD pipeline.

Ensure you have stubs to unit test all interfaces between components.

Enable code signing and a trusted binary repository integrated with your CI/CD pipeline.

Run a vulnerability security scanner as part of your continuous-integration /continuous-delivery (CI/CD) pipeline.

44. A recent audit that a new network was created in Your GCP project. In this network, a GCE instance has an SSH port open the world. You want to discover this network's origin .

What should you do?

Search for Create VM entry in the Stackdriver alerting console.

Navigate to the Activity page in the Home section. Set category to Data Access and search for Create VM entry.

In the logging section of the console, specify GCE Network as the logging section. Search for the Create Insert entry.

Connect to the GCE instance using project SSH Keys. Identify previous logins in system logs, and match these with the project owners list.

45. You need to deploy an application on Google Cloud that must run on a Debian Linux environment. The application requires extensive configuration in order to operate correctly. You want to ensure that you can install Debian distribution updates with minimal manual intervention whenever they become available .

What should you do?

Create a Compute Engine instance template using the most recent Debian image. Create an instance from this template, and install and configure the application as part of the startup script. Repeat this process whenever a new Google-managed Debian image becomes available.

Create a Debian-based Compute Engine instance, install and configure the application, and use OS patch management to install available updates.

Create an instance with the latest available Debian image. Connect to the instance via SSH, and install and configure the application on the instance. Repeat this process whenever a new Google-managed Debian image becomes available.

Create a Docker container with Debian as the base image. Install and configure the application as part of the Docker image creation process. Host the container on Google Kubernetes Engine and restart the container whenever a new update is available.

46. For this question, refer to the Dress4Win case study.

Dress4Win has asked you for advice on how to migrate their on-premises MySQL

deployment to the cloud. They want to minimize downtime and performance impact to their on-premises solution during the migration .

Which approach should you recommend?

Create a dump of the on-premises MySQL master server, and then shut it down, upload it to the cloud environment, and load into a new MySQL cluster.

Setup a MySQL replica server/slave in the cloud environment, and configure it for asynchronous replication from the MySQL master server on-premises until cutover.

Create a new MySQL cluster in the cloud, configure applications to begin writing to both on-premises and cloud MySQL masters, and destroy the original cluster at cutover.

Create a dump of the MySQL replica server into the cloud environment, load it into: Google Cloud Datastore, and configure applications to read/write to Cloud Datastore at cutover.

47. Your company is using BigQuery as its enterprise data warehouse. Data is distributed over several Google Cloud projects. All queries on BigQuery need to be billed on a single project. You want to make sure that no query costs are incurred on the projects that contain the data. Users should be able to query the datasets, but not edit them.

How should you configure users’ access roles?

Add all users to a group. Grant the group the role of BigQuery user on the billing project and BigQuery dataViewer on the projects that contain the data.

Add all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery user on the projects that contain the data.

Add all users to a group. Grant the group the roles of BigQuery jobUser on the billing project and BigQuery dataViewer on the projects that contain the data.

Add all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery jobUser on the projects that contain the data.

48. Your company wants to try out the cloud with low risk. They want to archive approximately 100 TB of their log data to the cloud and test the analytics features available to them there, while also retaining that data as a long-term disaster recovery backup .

Which two steps should they take? Choose 2 answers

Load logs into Google BigQuery.

Load logs into Google Cloud SQ

Import logs into Google Stackdriver.

Insert logs into Google Cloud Bigtable.

Upload log files into Google Cloud Storage.

49. All compute Engine instances in your VPC should be able to connect to an Active Directory server on specific ports. Any other traffic emerging from your instances is not allowed. You want to enforce this using VPC firewall rules.

How should you configure the firewall rules?

Create an egress rule with priority 1000 to deny all traffic for all instances. Create another egress rule with priority 100 to allow the Active Directory traffic for all instances.

Create an egress rule with priority 100 to deny all traffic for all instances. Create another egress rule with priority 1000 to allow the Active Directory traffic for all instances.

Create an egress rule with priority 1000 to allow the Active Directory traffic. Rely on the implied deny egress rule with priority 100 to block all traffic for all instances.

Create an egress rule with priority 100 to allow the Active Directory traffic. Rely on the implied deny egress rule with priority 1000 to block all traffic for all instances.

50. Topic 6, Dress4Win Case 2

Company Overview

Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model. The application has grown from a few servers in the founder’s garage to several hundred servers and appliances in a collocated data center. However, the capacity of their infrastructure is now insufficient for the application’s rapid growth. Because of this growth and the company’s desire to innovate faster. Dress4Win is committing to a full migration to a public cloud.

Solution Concept

For the first phase of their migration to the cloud, Dress4win is moving their development and test environments. They are also building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.

Existing Technical Environment

The Dress4win application is served out of a single data center location. All servers run Ubuntu LTS v16.04.

Databases:

- MySQL. 1 server for user data, inventory, static data:

- MySQL 5.8

- 8 core CPUs

- 128 GB of RAM

- 2x 5 TB HDD (RAID 1)

- Redis 3 server cluster for metadata, social graph, caching. Each server is:

- Redis 3.2

- 4 core CPUs

- 32GB of RAM

Compute:

- 40 Web Application servers providing micro-services based APIs and static content.

- Tomcat - Java

- Nginx

- 4 core CPUs

- 32 GB of RAM

- 20 Apache Hadoop/Spark servers:

- Data analysis

- Real-time trending calculations

- 8 core CPUS

- 128 GB of RAM

- 4x 5 TB HDD (RAID 1)

- 3 RabbitMQ servers for messaging, social notifications, and events:

- 8 core CPUs

- 32GB of RAM

- Miscellaneous servers:

- Jenkins, monitoring, bastion hosts, security scanners

- 8 core CPUs

- 32GB of RAM

Storage appliances:

- iSCSI for VM hosts

- Fiber channel SAN C MySQL databases

- 1 PB total storage; 400 TB available

- NAS C image storage, logs, backups

- 100 TB total storage; 35 TB available

Business Requirements

- Build a reliable and reproducible environment with scaled parity of production.

- Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.

- Improve business agility and speed of innovation through rapid provisioning of new resources.

- Analyze and optimize architecture for performance in the cloud.

Technical Requirements

- Easily create non-production environment in the cloud.

- Implement an automation framework for provisioning resources in cloud.

- Implement a continuous deployment process for deploying applications to the on-premises datacenter or cloud.

- Support failover of the production environment to cloud during an emergency.

- Encrypt data on the wire and at rest.

- Support multiple private connections between the production data center and cloud environment.

Executive Statement

Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a competitor could use a public cloud platform to offset their up-front investment and free them to focus on developing better features. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.

Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years for a public cloud strategy achieves a cost reduction between 30% and 50% over our current model.

For this question, refer to the Dress4Win case study. You are responsible for the security of data stored in

Cloud Storage for your company, Dress4Win. You have already created a set of Google Groups and assigned the appropriate users to those groups. You should use Google best practices and implement the simplest design to meet the requirements.

Considering Dress4Win’s business and technical requirements, what should you do?

Assign custom IAM roles to the Google Groups you created in order to enforce security requirements. Encrypt data with a customer-supplied encryption key when storing files in Cloud Storage.

Assign custom IAM roles to the Google Groups you created in order to enforce security requirements. Enable default storage encryption before storing files in Cloud Storage.

Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Utilize Google’s default encryption at rest when storing files in Cloud Storage.

Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Ensure that the default Cloud KMS key is set before storing files in Cloud Storage.

Page 6 of 9

51. Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable .

What should you do?

Make sure a developer is tagging the code commit with the date and time of commit

Make sure a developer is adding a comment to the commit that links to the deployment.

Make the container tag match the source code commit hash.

Make sure the developer is tagging the commits with: latest

52. For this question, refer to the Helicopter Racing League (HRL) case study. HRL wants better prediction accuracy from their ML prediction models. They want you to use Google’s AI Platform so HRL can understand and interpret the predictions .

What should you do?

Use Explainable A

Use Vision A

Use Google Cloud’s operations suite.

Use Jupyter Notebooks.

53. Your company is building a new architecture to support its data-centric business focus. You are responsible for setting up the network. Your company’s mobile and web-facing applications will be deployed on-premises, and all data analysis will be conducted in GCP. The plan is to process and load 7 years of archived .csv files totaling 900 TB of data and then continue loading 10 TB of data daily. You currently have an existing 100-MB internet connection.

What actions will meet your company’s needs?

Compress and upload both achieved files and files uploaded daily using the qsutil Cm option.

Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish a connection with Google using a Dedicated Interconnect or Direct Peering connection and use it to upload files daily.

Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish one Cloud VPN Tunnel to VPC networks over the public internet, and compares and upload files daily using the gsutil Cm option.

Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily.

54. Your BigQuery project has several users. For audit purposes, you need to see how many queries each user ran in the last month.

Connect Google Data Studio to BigQuery. Create a dimension for the users and a metric for the amount of queries per user.

In the BigQuery interface, execute a query on the JOBS table to get the required information.

Use ‘bq show’ to list all jobs. Per job, use ‘bq Is’ to list job information and get the required information.

Use Cloud Audit Logging to view Cloud Audit Logs, and create a filter on the query operation to get the required information.

55. You are migrating third-party applications from optimized on-premises virtual machines to Google Cloud. You are unsure about the optimum CPU and memory options. The application have a consistent usage patterns across multiple weeks. You want to optimize resource usage for the lowest cost .

What should you do?

Create a Compute engine instance with CPU and Memory options similar to your application’s current on-premises virtual machine. Install the cloud monitoring agent, and deploy the third party application. Run a load with normal traffic levels on third party application and follow the Rightsizing Recommendations in the Cloud Console

Create an App Engine flexible environment, and deploy the third party application using a Docker file and a custom runtime. Set CPU and memory options similar to your application’s current on-premises virtual machine in the app.yaml file.

Create an instance template with the smallest available machine type, and use an image of the third party application taken from the current on-premises virtual machine. Create a managed instance group that uses average CPU to autoscale the number of instances in the group. Modify the average CPU utilization threshold to optimize the number of instances running.

Create multiple Compute Engine instances with varying CPU and memory options. Install the cloud monitoring agent and deploy the third-party application on each of them. Run a load test with high traffic levels on the application and use the results to determine the optimal settings.

56. You are using Cloud SQL as the database backend for a large CRM deployment. You want to scale as usage increases and ensure that you don’t run out of storage, maintain 75%

CPU usage cores, and keep replication lag below 60 seconds .

What are the correct steps to meet your requirements?

1) Enable automatic storage increase for the instance. 2) Create a Stackdriver alert when CPU usage exceeds 75%, and change the instance type to reduce CPU usage. 3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.

1) Enable automatic storage increase for the instance. 2) Change the instance type to a 32-core machine type to keep CPU usage below 75%. 3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.

1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on the instance to create more space. 2) Deploy memcached to reduce CPU load. 3) Change the instance type to a 32-core machine type to reduce replication lag.

1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on the instance to create more space. 2) Deploy memcached to reduce CPU load. 3) Create a Stackdriver alert for replication lag, and change the instance type to a 32-core machine type to reduce replication lag.

57. Your company runs several databases on a single MySQL instance. They need to take backups of a specific database at regular intervals. The backup activity needs to complete as quickly as possible and cannot be allowed to impact disk performance .

How should you configure the storage?

Configure a cron job to use the gcloud tool to take regular backups using persistent disk snapshots.

Mount a Local SSD volume as the backup location. After the backup is complete, use gsutil to move the backup to Google Cloud Storage.

Use gcsfuse to mount a Google Cloud Storage bucket as a volume directly on the instance and write backups to the mounted location using mysqldump

Mount additional persistent disk volumes onto each virtual machine (VM) instance in a RAID10 array and use LVM to create snapshots to send to Cloud Storage.

58. A lead software engineer tells you that his new application design uses websockets and HTTP sessions that are not distributed across the web servers. You want to help him ensure his application will run property on Google Cloud Platform .

What should you do?

Help the engineer to convert his websocket code to use HTTP streaming.

Review the encryption requirements for websocket connections with the security team.

Meet with the cloud operations team and the engineer to discuss load balancer options.

Help the engineer redesign the application to use a distributed user session service that does not rely on websockets and HTTP sessions.

59. A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center. He wants to migrate the custom tool to the new cloud environment You want to advocate for the adoption of Google Cloud Deployment Manager.

What are two business risks of migrating to Cloud Deployment Manager? Choose 2 answers

Cloud Deployment Manager uses Python.

Cloud Deployment Manager APIs could be deprecated in the future.

Cloud Deployment Manager is unfamiliar to the company's engineers.

Cloud Deployment Manager requires a Google APIs service account to run.

Cloud Deployment Manager can be used to permanently delete cloud resources.

Cloud Deployment Manager only supports automation of Google Cloud resources.

60. Create a Kubernetes Deployment in the default namespace with the imagePullPolicy set to “Always”. Restart the pods to automatically deploy new production releases.

Page 7 of 9

61. You have been engaged by your client to lead the migration of their application infrastructure to GCP. One of their current problems is that the on-premises high performance SAN is requiring frequent and expensive upgrades to keep up with the variety of workloads that are identified as follows: 20TB of log archives retained for legal reasons; 500 GB of VM boot/data volumes and templates; 500 GB of image thumbnails; 200 GB of customer session state data that allows customers to restart sessions even if off-line for several days.

Which of the following best reflects your recommendations for a cost-effective storage allocation?

Local SSD for customer session state dat

Lifecycle-managed Cloud Storage for log archives, thumbnails, and VM boot/data volumes.

Memcache backed by Cloud Datastore for the customer session state dat

Lifecycle-managed Cloud Storage for log archives, thumbnails, and VM boot/data volumes.

Memcache backed by Cloud SQL for customer session state dat

Assorted local SSD-backed instances for VM boot/data volumes. Cloud Storage for log archives and thumbnails.

Memcache backed by Persistent Disk SSD storage for customer session state dat

Assorted local SSDbacked instances for VM boot/data volumes. Cloud Storage for log archives and thumbnails.

62. Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company’s data center. Upon investigation, you discover that some of the RFC 1918 IP ranges being used in the new company’s Virtual Private Cloud (VPC) overlap with your data center IP space .

What should you do to enable connectivity and make sure that there are no routing conflicts when connectivity is established?

Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply new IP addresses so there is no overlapping IP space.

Create a Cloud VPN connection from the new VPC to the data center, and create a Cloud NAT instance to perform NAT on the overlapping IP space.

Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply a custom route advertisement to block the overlapping IP space.

Create a Cloud VPN connection from the new VPC to the data center, and apply a firewall rule that blocks the overlapping IP space.

63. You are migrating your on-premises solution to Google Cloud in several phases. You will use Cloud VPN to maintain a connection between your on-premises systems and Google Cloud until the migration is completed.

You want to make sure all your on-premises systems remain reachable during this period .

How should you organize your networking in Google Cloud?

Use the same IP range on Google Cloud as you use on-premises

Use the same IP range on Google Cloud as you use on-premises for your primary IP range and use a secondary range that does not overlap with the range you use on-premises

Use an IP range on Google Cloud that does not overlap with the range you use on-premises

Use an IP range on Google Cloud that does not overlap with the range you use on-premises you’re your primary IP range and use a secondary range with the same IP range as you use on-premises

64. For this question, refer to the JencoMart case study.

JencoMart has decided to migrate user profile storage to Google Cloud Datastore and the application servers to Google Compute Engine (GCE). During the migration, the existing infrastructure will need access to Datastore to upload the data .

What service account key-management strategy should you recommend?

Provision service account keys for the on-premises infrastructure and for the GCE virtual machines (VMs).

Authenticate the on-premises infrastructure with a user account and provision service account keys for the VMs.

Provision service account keys for the on-premises infrastructure and use Google Cloud Platform (GCP) managed keys for the VMs

Deploy a custom authentication service on GCE/Google Container Engine (GKE) for the on-premises infrastructure and use GCP managed keys for the VMs.

65. Your company has an application running on multiple Compute Engine instances. You need to ensure that the application can communicate with an on-premises service that requires high throughput via internal IPs, while minimizing latency .

What should you do?

Use OpenVPN to configure a VPN tunnel between the on-premises environment and Google Cloud.

Configure a direct peering connection between the on-premises environment and Google Cloud.

Use Cloud VPN to configure a VPN tunnel between the on-premises environment and Google Cloud.

Configure a Cloud Dedicated Interconnect connection between the on-premises environment and Google Cloud.

66. Your company has a support ticketing solution that uses App Engine Standard. The project that contains the App Engine application already has a Virtual Private Cloud (VPC) network fully connected to the company’s on-premises environment through a Cloud VPN tunnel. You want to enable App Engine application to communicate with a database that is running in the company’s on-premises environment .

What should you do?

Configure private services access

Configure private Google access for on-premises hosts only

Configure serverless VPC access

Configure private Google access

67. For this question refer to the TerramEarth case study

Operational parameters such as oil pressure are adjustable on each of TerramEarth's vehicles to increase their efficiency, depending on their environmental conditions. Your primary goal is to increase the operating efficiency of all 20 million cellular and unconnected vehicles in the field How can you accomplish this goal?

Have your engineers inspect the data for patterns, and then create an algorithm with rules that make operational adjustments automatically.

Capture all operating data, train machine learning models that identify ideal operations, and run locally to make operational adjustments automatically.

Implement a Google Cloud Dataflow streaming job with a sliding window, and use Google Cloud Messaging (GCM) to make operational adjustments automatically.

Capture all operating data, train machine learning models that identify ideal operations, and host in Google Cloud Machine Learning (ML) Platform to make operational adjustments automatically.

68. Your company acquired a healthcare startup and must retain its customers’ medical information for up to 4 more years, depending on when it was created. Your corporate policy is to securely retain this data, and then delete it as soon as regulations allow.

Which approach should you take?

Store the data in Google Drive and manually delete records as they expire.

Anonymize the data using the Cloud Data Loss Prevention API and store it indefinitely.

Store the data using the Cloud Storage and use lifecycle management to delete files when they expire.

Store the data in Cloud Storage and run a nightly batch script that deletes all expired dat

69. Topic 5, Misc Questions

Your company has a Google Cloud project that uses BigQuery for data warehousing They

have a VPN tunnel between the on-premises environment and Google Cloud that is configured with Cloud VPN. The security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing .

What should they do?

Configure Private Google Access for on-premises only.

Perform the following tasks: 1) Create a service account. 2) Give the BigQuery JobUser role and Storage Reader role to the service account. 3) Remove all other IAM access from the project.

Configure VPC Service Controls and configure Private Google Access.

Configure Private Google Access.

70. You are designing a Data Warehouse on Google Cloud and want to store sensitive data in BigQuery. Your company requires you to generate encryption keys outside of Google Cloud. You need to implement a solution .

What should you do?

Generate a new key in Cloud Key Management Service (Cloud KMS). Store all data in Cloud Storage using the customer-managed key option and select the created key. Set up a Dataflow pipeline to decrypt the data and to store it in a BigQuery dataset.

Generate a new key in Cloud Key Management Service (Cloud KMS). Create a dataset in BigQuery using the customer-managed key option and select the created key

Import a key in Cloud KM

Store all data in Cloud Storage using the customer-managed key option and select the created key. Set up a Dataflow pipeline to decrypt the data and to store it in a new BigQuery dataset.

Import a key in Cloud KM

Create a dataset in BigQuery using the customer-supplied key option and select the created key.

Page 8 of 9

71. Your company is migrating its on-premises data center into the cloud. As part of the migration, you want to integrate Kubernetes Engine for workload orchestration. Parts of your architecture must also be PCI DSScompliant.

Which of the following is most accurate?

App Engine is the only compute platform on GCP that is certified for PCI DSS hosting.

Kubernetes Engine cannot be used under PCI DSS because it is considered shared hosting.

Kubernetes Engine and GCP provide the tools you need to build a PCI DSS-compliant environment.

All Google Cloud services are usable because Google Cloud Platform is certified PCI-compliant.

72. You want your Google Kubernetes Engine cluster to automatically add or remove nodes based on CPUload .

What should you do?

Configure a HorizontalPodAutoscaler with a target CPU usage. Enable the Cluster Autoscaler from the GCP Console.

Configure a HorizontalPodAutoscaler with a target CPU usage. Enable autoscaling on the managed instance group for the cluster using the gcloud command.

Create a deployment and set the maxUnavailable and maxSurge properties. Enable the Cluster Autoscaler using the gcloud command.

Create a deployment and set the maxUnavailable and maxSurge properties. Enable autoscaling on the cluster managed instance group from the GCP Console.

73. For this question, refer to the Mountkirk Games case study.

Mountkirk Games wants to set up a continuous delivery pipeline. Their architecture includes many small services that they want to be able to update and roll back quickly.

Mountkirk Games has the following requirements:

• Services are deployed redundantly across multiple regions in the US and Europe.

• Only frontend services are exposed on the public internet.

• They can provide a single frontend IP for their fleet of services.

• Deployment artifacts are immutable.

Which set of products should they use?

Google Cloud Storage, Google Cloud Dataflow, Google Compute Engine

Google Cloud Storage, Google App Engine, Google Network Load Balancer

Google Kubernetes Registry, Google Container Engine, Google HTTP(S) Load Balancer

Google Cloud Functions, Google Cloud Pub/Sub, Google Cloud Deployment Manager

74. You are using Cloud CDN to deliver static HTTP(S) website content hosted on a Compute Engine instance group. You want to improve the cache hit ratio.

What should you do?

Customize the cache keys to omit the protocol from the key.

Shorten the expiration time of the cached objects.

Make sure the HTTP(S) header “Cache-Region” points to the closest region of your users.

Replicate the static content in a Cloud Storage bucket. Point CloudCDN toward a load balancer on that bucket.

75. You are monitoring Google Kubernetes Engine (GKE) clusters in a Cloud Monitoring workspace. As a Site Reliability Engineer (SRE), you need to triage incidents quickly .

What should you do?

Navigate the predefined dashboards in the Cloud Monitoring workspace, and then add metrics and create alert policies.

Navigate the predefined dashboards in the Cloud Monitoring workspace, create custom metrics, and install alerting software on a Compute Engine instance.

Write a shell script that gathers metrics from GKE nodes, publish these metrics to a Pub/Sub topic, export the data to BigQuery, and make a Data Studio dashboard.

Create a custom dashboard in the Cloud Monitoring workspace for each incident, and then add metrics and create alert policies.

76. You are working at a sports association whose members range in age from 8 to 30. The association collects a large amount of health data, such as sustained injuries. You are storing this data in BigQuery. Current legislation requires you to delete such information upon request of the subject. You want to design a solution that can accommodate such a request .

What should you do?

Use a unique identifier for each individual. Upon a deletion request, delete all rows from BigQuery with this identifier.

When ingesting new data in BigQuery, run the data through the Data Loss Prevention (DLP) API to identify any personal information. As part of the DLP scan, save the result to Data Catalog. Upon a deletion request, query Data Catalog to find the column with personal information.

Create a BigQuery view over the table that contains all data. Upon a deletion request, exclude the rows that affect the subject’s data from this view. Use this view instead of the source table for all analysis tasks.

Use a unique identifier for each individual. Upon a deletion request, overwrite the column with the unique identifier with a salted SHA256 of its value.

77. For this question, refer to the Dress4Win case study.

Dress4Win would like to become familiar with deploying applications to the cloud by successfully deploying some applications quickly, as is. They have asked for your recommendation .

What should you advise?

Identify self-contained applications with external dependencies as a first move to the cloud.

Identify enterprise applications with internal dependencies and recommend these as a first move to the cloud.

Suggest moving their in-house databases to the cloud and continue serving requests to on-premise applications.

Recommend moving their message queuing servers to the cloud and continue handling requests to on-premise applications.

78. You deploy your custom Java application to Google App Engine. It fails to deploy and gives you the following stack trace.

What should you do?

Upload missing JAR files and redeploy your application.

Digitally sign all of your JAR files and redeploy your application

Recompile the CLoakedServlet class using and MD5 hash instead of SHA1

79. For this question, refer to the JencoMart case study

A few days after JencoMart migrates the user credentials database to Google Cloud Platform and shuts down the old server, the new database server stops responding to SSH connections. It is still serving database requests to the application servers correctly .

What three steps should you take to diagnose the problem? Choose 3 answers

Delete the virtual machine (VM) and disks and create a new one.

Delete the instance, attach the disk to a new VM, and investigate.

Take a snapshot of the disk and connect to a new machine to investigate.

Check inbound firewall rules for the network the machine is connected to.

Connect the machine to another network with very simple firewall rules and investigate.

Print the Serial Console output for the instance for troubleshooting, activate the interactive console, and investigate.

80. Your web application must comply with the requirements of the European Union’s General Data Protection Regulation (GDPR). You are responsible for the technical architecture of your web application .

What should you do?

Ensure that your web application only uses native features and services of Google Cloud Platform, because Google already has various certifications and provides “pass-on” compliance when you use native features.

Enable the relevant GDPR compliance setting within the GCPConsole for each of the services in use within your application.

Ensure that Cloud Security Scanner is part of your test planning strategy in order to pick up any compliance gaps.

Define a design for the security of data in your web application that meets GDPR requirements.

Page 9 of 9

81. Your company uses the Firewall Insights feature in the Google Network Intelligence Center. You have several firewall rules applied to Compute Engine instances. You need to evaluate the efficiency of the applied firewall ruleset. When you bring up the Firewall Insights page in the Google Cloud Console, you notice that there are no log rows to display .

What should you do to troubleshoot the issue?

Enable Virtual Private Cloud (VPC) flow logging.

Enable Firewall Rules Logging for the firewall rules you want to monitor.

Verify that your user account is assigned the compute.networkAdmin Identity and Access Management (IAM) role.

Install the Google Cloud SDK, and verify that there are no Firewall logs in the command line output.

82. For this question, refer to the TerramEarth case study

You analyzed TerramEarth's business requirement to reduce downtime, and found that they can achieve a majority of time saving by reducing customers' wait time for parts You decided to focus on reduction of the 3 weeks aggregate reporting time.

Which modifications to the company's processes should you recommend?

Migrate from CSV to binary format, migrate from FTP to SFTP transport, and develop machine learning analysis of metrics.

Migrate from FTP to streaming transport, migrate from CSV to binary format, and develop machine learning analysis of metrics.

Increase fleet cellular connectivity to 80%, migrate from FTP to streaming transport, and develop machine learning analysis of metrics.

Migrate from FTP to SFTP transport, develop machine learning analysis of metrics, and increase dealer local inventory by a fixed factor.

Google Professional Cloud Architect Dumps Questions