Professional-Cloud-Architect Exam PDF [2025] Tests Free Updated Today with Correct 282 Questions [Q158-Q182]

Professional-Cloud-Architect Exam PDF [2025] Tests Free Updated Today with Correct 282 Questions

Google Professional-Cloud-Architect Exam Preparation Guide and PDF Download

Exam Overview

The qualifying test for the Google Professional Cloud Architect certification is 2 hours long. The questions administered during the exam can be presented as multiple-select and multiple-choice items. The test is delivered in English or Japanese and can be taken by the students either online from a remote location or in-person at the authorized testing center. To check the location of the nearest center, you can use the search on the official website. To schedule the exam, each applicant is required to pay the registration fee of $200, plus applicable taxes.

 

NEW QUESTION # 158
Your company plans to migrate a multi-petabyte data set to the cloud. The data set must be available 24hrs a day. Your business analysts have experience only with using a SQL interface. How should you store the data to optimize it for ease of analysis?

• A. Put flat files into Google Cloud Storage.
• B. Load data into Google BigQuery.
• C. Insert data into Google Cloud SQL.
• D. Stream data into Google Cloud Datastore.

Answer: B

Explanation:
BigQuery is Google's serverless, highly scalable, low cost enterprise data warehouse designed to make all your data analysts productive. Because there is no infrastructure to manage, you can focus on analyzing data to find meaningful insights using familiar SQL and you don't need a database administrator.
BigQuery enables you to analyze all your data by creating a logical data warehouse over managed, columnar storage as well as data from object storage, and spreadsheets.
References: https://cloud.google.com/bigquery/
Reference:
Google Big Query is for multi peta byte storage , HA(High availability) which means 24 hours, SQL interface .
https://medium.com/google-cloud/the-12-components-of-google-bigquery-c2b49829a7c7
https://cloud.google.com/solutions/bigquery-data-warehouse
https://cloud.google.com/bigquery/

NEW QUESTION # 159
Auditors visit your teams every 12 months and ask to review all the Google Cloud Identity and Access Management (Cloud IAM) policy changes in the previous 12 months. You want to streamline and expedite the analysis and audit process.
What should you do?

• A. Use cloud functions to transfer log entries to Google Cloud SQL and use ACLs and views to limit an auditor's view
• B. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor
• C. Create custom Google Stackdriver alerts and send them to the auditor
• D. Enable Google Cloud Storage (GCS) log export to audit logs into a GCS bucket and delegate access to the bucket

Answer: D

NEW QUESTION # 160
Case Study: 5 - Dress4win
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model. The application has grown from a few servers in the founder's garage to several hundred servers and appliances in a collocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster.
Dress4Win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is moving their development and test environments. They are also building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location. All servers run Ubuntu LTS v16.04.
Databases:
MySQL. 1 server for user data, inventory, static data:
* - MySQL 5.8
- 8 core CPUs
- 128 GB of RAM
- 2x 5 TB HDD (RAID 1)
Redis 3 server cluster for metadata, social graph, caching. Each server is:
* - Redis 3.2
- 4 core CPUs
- 32GB of RAM
Compute:
40 Web Application servers providing micro-services based APIs and static content.
* - Tomcat - Java
- Nginx
- 4 core CPUs
- 32 GB of RAM
20 Apache Hadoop/Spark servers:
* - Data analysis
- Real-time trending calculations
- 8 core CPUS
- 128 GB of RAM
- 4x 5 TB HDD (RAID 1)
3 RabbitMQ servers for messaging, social notifications, and events:
* - 8 core CPUs
- 32GB of RAM
Miscellaneous servers:
* - Jenkins, monitoring, bastion hosts, security scanners
- 8 core CPUs
- 32GB of RAM
Storage appliances:
iSCSI for VM hosts
* Fiber channel SAN - MySQL databases
* - 1 PB total storage; 400 TB available
NAS - image storage, logs, backups
* - 100 TB total storage; 35 TB available
Business Requirements
Build a reliable and reproducible environment with scaled parity of production.
* Improve security by defining and adhering to a set of security and Identity and Access
* Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
* Analyze and optimize architecture for performance in the cloud.
* Technical Requirements
Easily create non-production environment in the cloud.
* Implement an automation framework for provisioning resources in cloud.
* Implement a continuous deployment process for deploying applications to the on-premises
* datacenter or cloud.
Support failover of the production environment to cloud during an emergency.
* Encrypt data on the wire and at rest.
* Support multiple private connections between the production data center and cloud
* environment.
Executive Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a competitor could use a public cloud platform to offset their up-front investment and free them to focus on developing better features. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years for a public cloud strategy achieves a cost reduction between 30% and 50% over our current model.
For this question, refer to the Dress4Win case study. You are responsible for the security of data stored in Cloud Storage for your company, Dress4Win. You have already created a set of Google Groups and assigned the appropriate users to those groups. You should use Google best practices and implement the simplest design to meet the requirements.
Considering Dress4Win's business and technical requirements, what should you do?

• A. Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.
  Enable default storage encryption before storing files in Cloud Storage.
• B. Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.
  Encrypt data with a customer-supplied encryption key when storing files in Cloud Storage.
• C. Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Utilize Google's default encryption at rest when storing files in Cloud Storage.
• D. Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Ensure that the default Cloud KMS key is set before storing files in Cloud Storage.

Answer: D

NEW QUESTION # 161
A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center. He wants to migrate the custom tool to the new cloud environment You want to advocate for the adoption of Google Cloud Deployment Manager What are two business risks of migrating to Cloud Deployment Manager? Choose 2 answers

• A. Cloud Deployment Manager is unfamiliar to the company's engineers.
• B. Cloud Deployment Manager only supports automation of Google Cloud resources.
• C. Cloud Deployment Manager can be used to permanently delete cloud resources.
• D. Cloud Deployment Manager APIs could be deprecated in the future.
• E. Cloud Deployment Manager requires a Google APIs service account to run.
• F. Cloud Deployment Manager uses Python.

Answer: B,D

NEW QUESTION # 162
Your company uses the Firewall Insights feature in the Google Network Intelligence Center. You have several firewall rules applied to Compute Engine instances. You need to evaluate the efficiency of the applied firewall ruleset. When you bring up the Firewall Insights page in the Google Cloud Console, you notice that there are no log rows to display. What should you do to troubleshoot the issue?

• A. Install the Google Cloud SDK, and verify that there are no Firewall logs in the command line output.
• B. Enable Virtual Private Cloud (VPC) flow logging.
• C. Enable Firewall Rules Logging for the firewall rules you want to monitor.
• D. Verify that your user account is assigned the compute.networkAdmin Identity and Access Management (IAM) role.

Answer: C

Explanation:
Reference:
https://cloud.google.com/network-intelligence-center/docs/firewall-insights/how-to/using-firewall- insights

NEW QUESTION # 163
Your company's test suite is a custom C++ application that runs tests throughout each day on Linux virtual machines. The full test suite takes several hours to complete, running on a limited number of on premises servers reserved for testing. Your company wants to move the testing infrastructure to the cloud, to reduce the amount of time it takes to fully test a change to the system, while changing the tests as little as possible. Which cloud infrastructure should you recommend?

• A. Google App Engine with Google Stackdriver for logging
• B. Google Compute Engine unmanaged instance groups and Network Load Balancer
• C. Google Cloud Dataproc to run Apache Hadoop jobs to process each test
• D. Google Compute Engine managed instance groups with auto-scaling

Answer: D

Explanation:
Explanation: https://cloud.google.com/compute/docs/instance-groups/

NEW QUESTION # 164
Mountkirk Games wants to set up a real-time analytics platform for their new game. The new platform must meet their technical requirements.
Which combination of Google technologies will meet all of their requirements?

• A. Cloud Dataproc, Cloud Pub/Sub, Cloud SQL, and Cloud Dataflow
• B. Kubernetes Engine, Cloud Pub/Sub, and Cloud SQL
• C. Cloud SQL, Cloud Storage, Cloud Pub/Sub, and Cloud Dataflow
• D. Cloud Dataflow, Cloud Storage, Cloud Pub/Sub, and BigQuery
• E. Cloud Pub/Sub, Compute Engine, Cloud Storage, and Cloud Dataproc

Answer: D

Explanation:
Ingest millions of streaming events per second from anywhere in the world with Cloud Pub/Sub, powered by Google's unique, high-speed private network. Process the streams with Cloud Dataflow to ensure reliable, exactly-once, low-latency data transformation. Stream the transformed data into BigQuery, the cloud-native data warehousing service, for immediate analysis via SQL or popular visualization tools.
From scenario: They plan to deploy the game's backend on Google Compute Engine so they can capture streaming metrics, run intensive analytics.
Requirements for Game Analytics Platform
1. Dynamically scale up or down based on game activity
2. Process incoming data on the fly directly from the game servers
3. Process data that arrives late because of slow mobile networks
4. Allow SQL queries to access at least 10 TB of historical data
5. Process files that are regularly uploaded by users' mobile devices
6. Use only fully managed services
References: https://cloud.google.com/solutions/big-data/stream-analytics/ Mountkirk Games, B Testlet 1 Company Overview Mountkirk Games makes online, session-based, multiplayer games for mobile platforms. They build all of their games using some server-side integration. Historically, they have used cloud providers to lease physical servers.
Due to the unexpected popularity of some of their games, they have had problems scaling their global audience, application servers, MySQL databases, and analytics tools.
Their current model is to write game statistics to files and send them through an ETL tool that loads them into a centralized MySQL database for reporting.
Solution Concept
Mountkirk Games is building a new game, which they expect to be very popular. They plan to deploy the game's backend on Google Compute Engine so they can capture streaming metrics, run intensive analytics, and take advantage of its autoscaling server environment and integrate with a managed NoSQL database.
Business Requirements
* Increase to a global footprint.
* Improve uptime - downtime is loss of players.
* Increase efficiency of the cloud resources we use.
* Reduce latency to all customers.
Technical Requirements
Requirements for Game Backend Platform
* Dynamically scale up or down based on game activity.
* Connect to a transactional database service to manage user profiles and game state.
* Store game activity in a timeseries database service for future analysis.
* As the system scales, ensure that data is not lost due to processing backlogs.
* Run hardened Linux distro.
Requirements for Game Analytics Platform
* Dynamically scale up or down based on game activity
* Process incoming data on the fly directly from the game servers
* Process data that arrives late because of slow mobile networks
* Allow queries to access at least 10 TB of historical data
* Process files that are regularly uploaded by users' mobile devices
Executive Statement
Our last successful game did not scale well with our previous cloud provider, resulting in lower user adoption and affecting the game's reputation. Our investors want more key performance indicators (KPIs) to evaluate the speed and stability of the game, as well as other metrics that provide deeper insight into usage patterns so we can adapt the game to target users. Additionally, our current technology stack cannot provide the scale we need, so we want to replace MySQL and move to an environment that provides autoscaling, low latency load balancing, and frees us up from managing physical servers.

NEW QUESTION # 165
You need to implement a network ingress for a new game that meets the defined business and technical requirements. Mountkirk Games wants each regional game instance to be located in multiple Google Cloud regions. What should you do?

• A. Configure kubemci with a global load balancer and Google Kubernetes Engine.
• B. Configure a global load balancer connected to a managed instance group running Compute Engine instances.
• C. Configure Ingress for Anthos with a global load balancer and Google Kubernetes Engine.
• D. Configure a global load balancer with Google Kubernetes Engine.

Answer: B

NEW QUESTION # 166
An application development team has come to you for advice.They are planning to write and deploy an HTTP(S) API using Go 1.12. The API will have a very unpredictable workload and must remain reliable during peaks in traffic. They want to minimize operational overhead for this application. What approach should you recommend?

• A. Use a Managed Instance Group when deploying to Compute Engine
• B. Develop the application for App Engine Flexible environment using a custom runtime
• C. Develop an application with containers, and deploy to Google Kubernetes Engine (GKE)
• D. Develop the application for App Engine standard environment

Answer: D

NEW QUESTION # 167
You are designing a mobile chat application. You want to ensure people cannot spoof chat messages, by providing a message were sent by a specific user.
What should you do?

• A. Tag messages client side with the originating user identifier and the destination user.
• B. Encrypt the message client side using block-based encryption with a shared key.
• C. Use public key infrastructure (PKI) to encrypt the message client side using the originating user's private key.
• D. Use a trusted certificate authority to enable SSL connectivity between the client application and the server.

Answer: C

Explanation:
Encrypting each block and tagging each message at the client side is an overhead on the application. Best method which has been adopted since years is contacting the SSL provider and use the public certificate to encrypt the traffic between client and the server.

NEW QUESTION # 168
For this question, refer to the TerramEarth case study.
TerramEarth's 20 million vehicles are scattered around the world. Based on the vehicle's location its telemetry data is stored in a Google Cloud Storage (GCS) regional bucket (US. Europe, or Asia). The CTO has asked you to run a report on the raw telemetry data to determine why vehicles are breaking down after 100 K miles. You want to run this job on all the data. What is the most cost-effective way to run this job?

• A. Move all the data into 1 region, then launch a Google Cloud Dataproc cluster to run the job.
• B. Move all the data into 1 zone, then launch a Cloud Dataproc cluster to run the job.
• C. Launch a cluster in each region to preprocess and compress the raw data, then move the data into a regional bucket and use a Cloud Dataproc cluster .....
• D. Launch a cluster in each region to preprocess and compress the raw data, then move the data into a multi region bucket and use a Dataproc cluster to finish the job.

Answer: C

NEW QUESTION # 169
You have an application deployed on Kubernetes Engine using a Deployment named echo-deployment. The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application. What should you do?

• A. Use the rolling update functionality of the Instance Group behind the Kubernetes cluster
• B. Use kubect1 set image deployment/echo-deployment <new-image>
• C. Update the deployment yaml file with the new container image. Use kubect1 delete deployment/ echo-deployment and kubect1 create -f <yaml-file>
• D. Update the service yaml file which the new container image. Use kubect1 delete service/echoservice and kubect1 create -f <yaml-file>

Answer: B

Explanation:
Explanation
https://cloud.google.com/kubernetes-engine/docs/how-to/updating-apps#updating_an_application

NEW QUESTION # 170
Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Googlerecommended practices. What should you do?

• A. Install gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.
• B. Install gsutil on each server containing data. Use streaming transfers to upload the data into Cloud Storage.
• C. Move your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.
• D. Move your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.

Answer: D

Explanation:
https://cloud.google.com/transfer-appliance/docs/2.0/faq

NEW QUESTION # 171
Your company is building a new architecture to support its data-centric business focus. You are responsible for setting up the network. Your company's mobile and web-facing applications will be deployed on-premises, and all data analysis will be conducted in GCP. The plan is to process and load 7 years of archived .csv files totaling
900 TB of data and then continue loading 10 TB of data daily. You currently have an existing 100-MB internet connection.
What actions will meet your company's needs?

• A. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily.
• B. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish a connection with Google using a Dedicated Interconnect or Direct Peering connection and use it to upload files daily.
• C. Compress and upload both archived files and files uploaded daily using the qsutil -moption.
• D. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish one Cloud VPN Tunnel to VPC networks over the public internet, and compares and upload files daily using the gsutil-m option.

Answer: C

Explanation:
Explanation/Reference:

NEW QUESTION # 172
Your company's user-feedback portal comprises a standard LAMP stack replicated across two zones. It is deployed in the us-central1 region and uses autoscaled managed instance groups on all layers, except the database. Currently, only a small group of select customers have access to the portal. The portal meets a
99.99% availability SLA under these conditions However next quarter, your company will be making the portal available to all users, including unauthenticated users. You need to develop a resiliency testing strategy to ensure the system maintains the SLA once they introduce additional user load. What should you do?

• A. Capture existing users input, and replay captured user load until resource utilization crosses 80%. Also, derive estimated number of users based on existing users usage of the app, and deploy enough resources to handle 200% of expected load.
• B. Create synthetic random user input, replay synthetic load until autoscale logic is triggered on at least one layer, and introduce "chaos" to the system by terminating random resources on both zones.
• C. Capture existing users input, and replay captured user load until autoscale is triggered on all layers. At the same time, terminate all resources in one of the zones.
• D. Expose the new system to a larger group of users, and increase group ' size each day until autoscale logic is tnggered on all layers. At the same time, terminate random resources on both zones.

Answer: C

NEW QUESTION # 173
You are using Cloud Shell and need to install a custom utility for use in a few weeks. Where can you store the file so it is in the default execution path and persists across sessions?

• A. /google/scripts
• B. Cloud Storage
• C. /usr/local/bin
• D. ~/bin

Answer: C

Explanation:
https://medium.com/google-cloud/no-localhost-no-problem-using-google-cloud-shell-as-my-full-time-developm

NEW QUESTION # 174
You have been engaged by your client to lead the migration of their application infrastructure to GCP. One of their current problems is that the on-premises high performance SAN is requiring frequent and expensive upgrades to keep up with the variety of workloads that are identified as follows: 20TB of log archives retained for legal reasons; 500 GB of VM boot/data volumes and templates; 500 GB of image thumbnails;
200 GB of customer session state data that allows customers to restart sessions even if off-line for several days.
Which of the following best reflects your recommendations for a cost-effective storage allocation?

• A. Local SSD for customer session state datA. Lifecycle-managed Cloud Storage for log archives, thumbnails, and VM boot/data volumes.
• B. Memcache backed by Cloud SQL for customer session state datA. Assorted local SSD-backed instances for VM boot/data volumes. Cloud Storage for log archives and thumbnails.
• C. Memcache backed by Persistent Disk SSD storage for customer session state datA. Assorted local SSDbacked instances for VM boot/data volumes. Cloud Storage for log archives and thumbnails.
• D. Memcache backed by Cloud Datastore for the customer session state datA. Lifecycle- managed Cloud Storage for log archives, thumbnails, and VM boot/data volumes.

Answer: C

Explanation:
https://cloud.google.com/compute/docs/disks

NEW QUESTION # 175
For this question, refer to the EHR Healthcare case study. You are responsible for ensuring that EHR's use of Google Cloud will pass an upcoming privacy compliance audit. What should you do? (Choose two.)

• A. Verify EHR's product usage against the list of compliant products on the Google Cloud compliance page.
• B. Implement Prometheus to detect and prevent security breaches on EHR's web-based applications.
• C. Use GKE private clusters for all Kubernetes workloads.
• D. Use Firebase Authentication for EHR's user facing applications.
• E. Advise EHR to execute a Business Associate Agreement (BAA) with Google Cloud.

Answer: A,E

Explanation:
Reference:
https://cloud.google.com/security/compliance/hipaa

NEW QUESTION # 176
Your company has announced that they will be outsourcing operations functions. You want to allow developers to easily stage new versions of a cloud-based application in the production environment and allow the outsourced operations team to autonomously promote staged versions to production. You want to minimize the operational overhead of the solution. Which Google Cloud product should you migrate to?

• A. App Engine
• B. Google Kubernetes Engine
• C. Compute Engine
• D. GKE On-Prem

Answer: B

Explanation:
Reference: https://cloud.google.com/security/compliance/eba-outsourcing-mapping-gcp

NEW QUESTION # 177
You have an App Engine application that needs to be updated. You want to test the update with production traffic before replacing the current application version.
What should you do?

• A. Deploy the update using the Instance Group Updater to create a partial rollout, which allows for canary testing.
• B. Deploy the update as a new version in the App Engine application, and split traffic between the new and current versions.
• C. Deploy the update in a new VPC, and use Google's global HTTP load balancing to split traffic between the update and current applications.
• D. Deploy the update as a new App Engine application, and use Google's global HTTP load balancing to split traffic between the new and current applications.

Answer: B

Explanation:
Reference:
https://cloud.google.com/appengine/docs/standard/python/splitting-traffic

NEW QUESTION # 178
You deploy your custom java application to google app engine.
It fails to deploy and gives you the following stack trace:

• A. Digitally sign all of your JAR files and redeploy your application.
• B. Upload missing JAR files and redeploy your application
• C. Recompile the CLoakedServlet class using and MD5 hash instead of SHA1

Answer: A

NEW QUESTION # 179
You want to make a copy of a production Linux virtual machine in the US-Central region. You want to manage and replace the copy easily if there are changes on the production virtual machine. You will deploy the copy as a new instances in a different project in the US-East region. What steps must you take?

• A. Use the Linux dd and netcat command to copy and stream the root disk contents to a new virtual machine instance in the US-East region.
• B. Create an image file from the root disk with Linux dd command, create a new disk from the image file, and use it to create a new virtual machine instance in the US-East region
• C. Create a snapshot of the root disk, create an image file in Google Cloud Storage from the snapshot, and create a new virtual machine instance in the US-East region using the image file for the root disk.
• D. Create a snapshot of the root disk and select the snapshot as the root disk when you create a new virtual machine instance in the US-East region.

Answer: C

Explanation:
Explanation
https://stackoverflow.com/questions/36441423/migrate-google-compute-engine-instance-to-a-different-region
Topic 5, Dress4Win Case 2
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model. The application has grown from a few servers in the founder's garage to several hundred servers and appliances in a collocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster. Dress4Win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is moving their development and test environments. They are also building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location. All servers run Ubuntu LTS v16.04.
Databases:
MySQL. 1 server for user data, inventory, static data:
- MySQL 5.8
- 8 core CPUs
- 128 GB of RAM
- 2x 5 TB HDD (RAID 1)
Redis 3 server cluster for metadata, social graph, caching. Each server is:
- Redis 3.2
- 4 core CPUs
- 32GB of RAM
Compute:
40 Web Application servers providing micro-services based APIs and static content.
- Tomcat - Java
- Nginx
- 4 core CPUs
- 32 GB of RAM
20 Apache Hadoop/Spark servers:
- Data analysis
- Real-time trending calculations
- 8 core CPUS
- 128 GB of RAM
- 4x 5 TB HDD (RAID 1)
3 RabbitMQ servers for messaging, social notifications, and events:
- 8 core CPUs
- 32GB of RAM
Miscellaneous servers:
- Jenkins, monitoring, bastion hosts, security scanners
- 8 core CPUs
- 32GB of RAM
Storage appliances:
iSCSI for VM hosts
Fiber channel SAN - MySQL databases
- 1 PB total storage; 400 TB available
NAS - image storage, logs, backups
- 100 TB total storage; 35 TB available
Business Requirements
Build a reliable and reproducible environment with scaled parity of production.
Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
Analyze and optimize architecture for performance in the cloud.
Technical Requirements
Easily create non-production environment in the cloud.
Implement an automation framework for provisioning resources in cloud.
Implement a continuous deployment process for deploying applications to the on-premises datacenter or cloud.
Support failover of the production environment to cloud during an emergency.
Encrypt data on the wire and at rest.
Support multiple private connections between the production data center and cloud environment.
Executive Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a competitor could use a public cloud platform to offset their up-front investment and free them to focus on developing better features. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years for a public cloud strategy achieves a cost reduction between 30% and 50% over our current model.

NEW QUESTION # 180
Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?

• A. The effective policy is the policy set at the node and restricted by the policies of its ancestors
• B. The effective policy is the union of the policy set at the node and policies inherited from its ancestors
• C. The effective policy is determined only by the policy set at the node
• D. The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors

Answer: B

Explanation:
https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy

NEW QUESTION # 181
You are working with a data warehousing team that performs data analysis. The team needs to process data from external partners, but the data contains personally identifiable information (PlI). You need to process and store the data without storing any of the Pll data. What should you do?

• A. Ask the external partners to import ail data in your BigQuery dataset Create a dataflow pipeline to copy the data into a new table As part of the Dataflow bucket skip all data in columns that have Pll data
• B. Ask the external partners to upload an data on Cloud Storage Configure Bucket Lock for the bucket Create a Dataflow pipeline to read the data from the bucket As part of the pipeline, use the Cloud Data Loss Prevention (Cloud DIP) API to remove any Pll data Store the result in BigQuery
• C. Create a Dataflow pipeline to retrieve the data from the external sources. As part of the pipeline store all non-PII data in BigQuery and store all Pll data in a Cloud Storage bucket that has a retention policy set.
• D. Create a Dataflow pipeline to retrieve the data from the external sources. As part of the pipeline use the Cloud Data Loss Prevention (Cloud DLP) API to remove any Pll data Store the result in BigQuery

Answer: C

Explanation:
Create a Dataflow pipeline to retrieve the data from the external sources, he did not specify the way he is going to create it, it might be a pub/sub or external table or whatever.

NEW QUESTION # 182
......

Verified & Correct Professional-Cloud-Architect Practice Test Reliable Source Apr 06, 2025 Updated: https://www.test4sure.com/Professional-Cloud-Architect-pass4sure-vce.html

Free Google Professional-Cloud-Architect Exam Files Downloaded Instantly: https://drive.google.com/open?id=17G-zTso9DGivY4CaQT12Vuhl30BBKC3i