[Aug-2021] Updated Google Cloud Certified Professional-Cloud-Architect Exam Questions BUNDLE PACK

Master The Google Content Professional-Cloud-Architect EXAM DUMPS WITH GUARANTEED SUCCESS!

NEW QUESTION 28
Your company's user-feedback portal comprises a standard LAMP stack replicated across two zones. It is deployed in the us-central1 region and uses autoscaled managed instance groups on all layers, except the database. Currently, only a small group of select customers have access to the portal. The portal meets a 99,99% availability SLA under these conditions. However next quarter, your company will be making the portal available to all users, including unauthenticated users. You need to develop a resiliency testing strategy to ensure the system maintains the SLA once they introduce additional user load.
What should you do?

• A. Create synthetic random user input, replay synthetic load until autoscale logic is triggered on at least one layer, and introduce "chaos" to the system by terminating random resources on both zones
• B. Capture existing users input, and replay captured user load until resource utilization crosses 80%.
  Also, derive estimated number of users based on existing user's usage of the app, and deploy enough resources to handle 200% of expected load
• C. Capture existing users input, and replay captured user load until autoscale is triggered on all layers. At the same time, terminate all resources in one of the zones
• D. Expose the new system to a larger group of users, and increase group size each day until autoscale logic is triggered on all layers. At the same time, terminate random resources on both zones

Answer: B

 

NEW QUESTION 29
For this question, refer to the Dress4Win case study. You want to ensure that your on-premises
architecture meets business requirements before you migrate your solution.
What change in the on-premises architecture should you make?

• A. Resize compute resources to match predefined Compute Engine machine types.
• B. Containerize the micro services and host them in Google Kubernetes Engine.
• C. Downgrade MySQL to v5.7, which is supported by Cloud SQL for MySQL.
• D. Replace RabbitMQ with Google Pub/Sub.

Answer: A

Explanation:
Explanation/Reference:
Question Set 1

 

NEW QUESTION 30
An application development team believes their current logging tool will not meet their needs for their new cloud-based product. They want a bettor tool to capture errors and help them analyze their historical log data.
You want to help them find a solution that meets their needs, what should you do?

• A. Help them upgrade their current tool to take advantage of any new features.
• B. Help them define their requirements and assess viable logging tools.
• C. Direct them to download and install the Google StackDriver logging agent.
• D. Send them a list of online resources about logging best practices.

Answer: B

Explanation:
Explanation
Help them define their requirements and assess viable logging tools. They know the requirements and the existing tools' problems. While it's true StackDriver Logging and Error Reporting possibly meet all their requirements, there might be other tools also meet their need. They need you to provide expertise to make assessment for new tools, specifically, logging tools that can "capture errors and help them analyze their historical log data".
References: https://cloud.google.com/logging/docs/agent/installation

 

NEW QUESTION 31
Your organization requires that metrics from all applications be retained for 5 years for future analysis in possible legal proceedings. Which approach should you use?

• A. Configure Stackdriver Monitoring for all Projects, and export to BigQuery.
• B. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage.
• C. Configure Stackdriver Monitoring for all Projects with the default retention policies.
• D. Grant the security team access to the logs in each Project.

Answer: B

Explanation:
https://cloud.google.com/monitoring/api/v3/metrics

 

NEW QUESTION 32
For this question, refer to the JencoMart case study.
JencoMart wants to move their User Profiles database to Google Cloud Platform. Which Google Database should they use?

• A. Google Cloud SQL
• B. Google Cloud Datastore
• C. Google BigQuery
• D. Cloud Spanner

Answer: B

Explanation:
Common workloads for Google Cloud Datastore:
User profiles
Product catalogs
Game state
References: https://cloud.google.com/storage-options/
https://cloud.google.com/datastore/docs/concepts/overview
Reference:
https://cloud.google.com/datastore/docs/concepts/overview

 

NEW QUESTION 33
For this question, refer to the Helicopter Racing League (HRL) case study. The HRL development team releases a new version of their predictive capability application every Tuesday evening at 3 a.m. UTC to a repository. The security team at HRL has developed an in-house penetration test Cloud Function called Airwolf.
The security team wants to run Airwolf against the predictive capability application as soon as it is released every Tuesday. You need to set up Airwolf to run at the recurring weekly cadence. What should you do?

• A. Set up Identity and Access Management (IAM) and Confidential Computing to trigger a Cloud Function.
• B. Set up a Cloud Logging sink and a Cloud Storage bucket that triggers a Cloud Function.
• C. Configure the deployment job to notify a Pub/Sub queue that triggers a Cloud Function.
• D. Set up Cloud Tasks and a Cloud Storage bucket that triggers a Cloud Function.

Answer: D

 

NEW QUESTION 34
You are deploying an application on App Engine that needs to integrate with an on-premises database. For security purposes, your on-premises database must not be accessible through the public Internet. What should you do?

• A. Deploy your application on App Engine flexible environment and use Cloud VPN to limit access to the onpremises database.
• B. Deploy your application on App Engine standard environment and use Cloud VPN to limit access to the onpremises database.
• C. Deploy your application on App Engine standard environment and use App Engine firewall rules to limit access to the open on-premises database.
• D. Deploy your application on App Engine flexible environment and use App Engine firewall rules to limit access to the on-premises database.

Answer: C

 

NEW QUESTION 35
Your company has decided to make a major revision of their API in order to create better experiences for their developers. They need to keep the old version of the API available and deployable, while allowing new customers and testers to try out the new API. They want to keep the same SSL and DNS records in place to serve both APIs. What should they do?

• A. Use separate backend pools for each API path behind the load balancer.
• B. Have the old API forward traffic to the new API based on the path.
• C. Configure a new load balancer for the new version of the API.
• D. Reconfigure old clients to use a new endpoint for the new API.

Answer: C

 

NEW QUESTION 36
Case Study: 5 - Dress4win
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model. The application has grown from a few servers in the founder's garage to several hundred servers and appliances in a collocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster.
Dress4Win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is moving their development and test environments. They are also building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location. All servers run Ubuntu LTS v16.04.
Databases:
MySQL. 1 server for user data, inventory, static data:
* - MySQL 5.8
- 8 core CPUs
- 128 GB of RAM
- 2x 5 TB HDD (RAID 1)
Redis 3 server cluster for metadata, social graph, caching. Each server is:
* - Redis 3.2
- 4 core CPUs
- 32GB of RAM
Compute:
40 Web Application servers providing micro-services based APIs and static content.
* - Tomcat - Java
- Nginx
- 4 core CPUs
- 32 GB of RAM
20 Apache Hadoop/Spark servers:
* - Data analysis
- Real-time trending calculations
- 8 core CPUS
- 128 GB of RAM
- 4x 5 TB HDD (RAID 1)
3 RabbitMQ servers for messaging, social notifications, and events:
* - 8 core CPUs
- 32GB of RAM
Miscellaneous servers:
* - Jenkins, monitoring, bastion hosts, security scanners
- 8 core CPUs
- 32GB of RAM
Storage appliances:
iSCSI for VM hosts
* Fiber channel SAN - MySQL databases
* - 1 PB total storage; 400 TB available
NAS - image storage, logs, backups
* - 100 TB total storage; 35 TB available
Business Requirements
Build a reliable and reproducible environment with scaled parity of production.
* Improve security by defining and adhering to a set of security and Identity and Access
* Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
* Analyze and optimize architecture for performance in the cloud.
* Technical Requirements
Easily create non-production environment in the cloud.
* Implement an automation framework for provisioning resources in cloud.
* Implement a continuous deployment process for deploying applications to the on-premises
* datacenter or cloud.
Support failover of the production environment to cloud during an emergency.
* Encrypt data on the wire and at rest.
* Support multiple private connections between the production data center and cloud
* environment.
Executive Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a competitor could use a public cloud platform to offset their up-front investment and free them to focus on developing better features. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years for a public cloud strategy achieves a cost reduction between 30% and 50% over our current model.
For this question, refer to the Dress4Win case study. Dress4Win is expected to grow to 10 times its size in 1 year with a corresponding growth in data and traffic that mirrors the existing patterns of usage. The CIO has set the target of migrating production infrastructure to the cloud within the next 6 months. How will you configure the solution to scale for this growth without making major application changes and still maximize the ROI?

• A. Implement managed instance groups for the Tomcat and Nginx. Migrate MySQL to Cloud SQL, RabbitMQ to Cloud Pub/Sub, Hadoop to Cloud Dataproc, and NAS to Cloud Storage.
• B. Migrate RabbitMQ to Cloud Pub/Sub, Hadoop to BigQuery, and NAS to Compute Engine with Persistent Disk storage. Deploy Tomcat, and deploy Nginx using Deployment Manager.
• C. Migrate the web application layer to App Engine, and MySQL to Cloud Datastore, and NAS to Cloud Storage. Deploy RabbitMQ, and deploy Hadoop servers using Deployment Manager.
• D. Implement managed instance groups for Tomcat and Nginx. Migrate MySQL to Cloud SQL, RabbitMQ to Cloud Pub/Sub, Hadoop to Cloud Dataproc, and NAS to Compute Engine with Persistent Disk storage.

Answer: D

 

NEW QUESTION 37
For this question, refer to the Dress4Win case study. To be legally compliant during an audit, Dress4Win must be able to give insights in all administrative actions that modify the configuration or metadata of resources on Google Cloud.
What should you do?

• A. Enable Cloud Identity-Aware Proxy in all projects, and add the group of Administrators as a member.
• B. Use the Activity page in the GCP Console and Stackdriver Logging to provide the required insight.
• C. Use Stackdriver Trace to create a Trace list analysis.
• D. Use Stackdriver Monitoring to create a dashboard on the project's activity.

Answer: B

Explanation:
Explanation

 

NEW QUESTION 38
Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform. Each tier (web, API, and database) scales independently of the others Network traffic should flow through the web to the API tier and then on to the database tier.
Traffic should not flow between the web and the database tier. How should you configure the network?

• A. Add tags to each tier and set up routes to allow the desired traffic flow.
• B. Add each tier to a different subnetwork.
• C. Add tags to each tier and set up firewall rules to allow the desired traffic flow.
• D. Set up software based firewalls on individual VMs.

Answer: C

 

NEW QUESTION 39
You write a Python script to connect to Google BigQuery from a Google Compute Engine virtual machine.
The script is printing errors that it cannot connect to BigQuery.
What should you do to fix the script?

• A. Install the latest BigQuery API client library for Python
• B. Run your script on a new virtual machine with the BigQuery access scope enabled
• C. Install the bq component for gcloud with the command gcloud components install bq.
• D. Create a new service account with BigQuery access and execute your script with that user

Answer: B

 

NEW QUESTION 40
You want to enable your running Google Container Engine cluster to scale as demand for your application changes. What should you do?

• A. Option D
• B. Option C
• C. Option A
• D. Option B

Answer: B

Explanation:
Explanation
https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-autoscaler To enable autoscaling for an existing node pool, run the following command:
gcloud container clusters update [CLUSTER_NAME] --enable-autoscaling \--min-nodes 1 --max-nodes 10
--zone [COMPUTE_ZONE] --node-pool default-pool

 

NEW QUESTION 41
For this question, refer to the JencoMart case study.
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources. What Google domain and project structure should you recommend?

• A. Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.
• B. Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.
• C. Create a single G Suite account to manage users with each stage of each application in its own project.
• D. Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.

Answer: B

Explanation:
Note: The principle of least privilege and separation of duties are concepts that, although semantically different, are intrinsically related from the standpoint of security. The intent behind both is to prevent people from having higher privilege levels than they actually need
* Principle of Least Privilege: Users should only have the least amount of privileges required to perform their job and no more. This reduces authorization exploitation by limiting access to resources such as targets, jobs, or monitoring templates for which they are not authorized.
* Separation of Duties: Beyond limiting user privilege level, you also limit user duties, or the specific jobs they can perform. No user should be given responsibility for more than one related function. This limits the ability of a user to perform a malicious action and then cover up that action.
References:
https://cloud.google.com/kms/docs/separation-of-duties
Topic 4, Dress4Win case study
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model.
Company Background
Dress4win's application has grown from a few servers in the founder's garage to several hundred servers and appliances in a colocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster, Dress4win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is considering moving their development and test environments. They are also considering building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location.
* Databases:
* MySQL - user data, inventory, static data
* Redis - metadata, social graph, caching
* Application servers:
* Tomcat - Java micro-services
* Nginx - static content
* Apache Beam - Batch processing
* Storage appliances:
* iSCSI for VM hosts
* Fiber channel SAN - MySQL databases
* NAS - image storage, logs, backups
* Apache Hadoop/Spark servers:
* Data analysis
* Real-time trending calculations
* MQ servers:
* Messaging
* Social notifications
* Events
* Miscellaneous servers:
* Jenkins, monitoring, bastion hosts, security scanners
Business Requirements
* Build a reliable and reproducible environment with scaled parity of production.
* Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
* Improve business agility and speed of innovation through rapid provisioning of new resources.
* Analyze and optimize architecture for performance in the cloud.
* Migrate fully to the cloud if all other requirements are met.
Technical Requirements
* Evaluate and choose an automation framework for provisioning resources in cloud.
* Support failover of the production environment to cloud during an emergency.
* Identify production services that can migrate to cloud to save capacity.
* Use managed services whenever possible.
* Encrypt data on the wire and at rest.
* Support multiple VPN connections between the production data center and cloud environment.
CEO Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a new competitor could use a public cloud platform to offset their up-front investment and freeing them to focus on developing better features.
CTO Statement
We have invested heavily in the current infrastructure, but much of the equipment is approaching the end of its useful life. We are consistently waiting weeks for new gear to be racked before we can start new projects. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
CFO Statement
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years puts a cloud strategy between 30 to 50% lower than our current model.

 

NEW QUESTION 42
Your company has multiple on-premises systems that serve as sources for reporting. The data has not been maintained well and has become degraded over time. You want to use Google-recommended practices to detect anomalies in your company data. What should you do?

• A. Connect Cloud Dataprep to your on-premises systems. Use Cloud Dataprep to explore and clean your data.
• B. Connect Cloud Datalab to your on-premises systems. Use Cloud Datalab to explore and clean your data.
• C. Upload your files into Cloud Storage. Use Cloud Datalab to explore and clean your data.
• D. Upload your files into Cloud Storage. Use Cloud Dataprep to explore and clean your data.

Answer: D

Explanation:
Explanation
https://cloud.google.com/dataprep/

 

NEW QUESTION 43
......

Pass Google Professional-Cloud-Architect Exam – Experts Are Here To Help You: https://www.testsimulate.com/Professional-Cloud-Architect-study-materials.html