Real Professional-Cloud-Architect Exam PDF Test Engine Practice Test Questions
Google Professional-Cloud-Architect Real 2023 Braindumps Mock Exam Dumps
The Google Certified Professional-Cloud-Architect (GCP) is a certification exam that is designed to test the knowledge and skills of professionals in the field of cloud architecture. The exam is specifically designed to evaluate a candidate’s ability to design, develop, and manage secure, scalable, and highly available cloud-based solutions using Google Cloud Platform (GCP) technologies.
Difficulty in writing the Google Professional Cloud Architect Exam
Google Professional Cloud Architect Certification is a most privileged achievement one could be graced with. It is one of the highest level of certification in the Google. This Certification consisting of real time scenarios and practical experience which make it difficult for the candidate to get through with the Google Professional Cloud Architect Exam. If the candidates have proper preparation material to pass the Google Professional Cloud Architect exam with good grades. Questions answers and clarifications which are designed in form of Test4Sure exam dumps make sure to cover entire course content. Test4Sure have a brilliant Google Professional Cloud Architect exam dumps with the foremost latest and vital queries and answers in PDF format. Test4Sure is sure about the exactness and legitimacy of Google Professional Cloud Architect exam dumps and in this manner. Candidates can easily pass the Google Professional Cloud Architect exam with genuine Google Professional Cloud Architect exam dumps and get Google Professional Cloud Architect certification skillful surely. These exam dumps are viewed as the best source to understand the Google Professional Cloud Architect Certification well by simply perusing these example questions and answers. if the candidate complete practice the exam with certification Google Professional Cloud Architect exam dumps along with self-assessment to get the proper idea on Google accreditation and to ace the certification exam.
NEW QUESTION # 132
Mountkirk Games wants to set up a continuous delivery pipeline. Their architecture includes many small services that they want to be able to update and roll back quickly. Mountkirk Games has the following requirements:
* Services are deployed redundantly across multiple regions in the US and Europe
* Only frontend services are exposed on the public internet
* They can provide a single frontend IP for their fleet of services
* Deployment artifacts are immutable
Which set of products should they use?
- A. Google Cloud Storage, Google App Engine, Google Network Load Balancer
- B. Google Kubernetes Registry, Google Container Engine, Google HTTP(S) Load Balancer
- C. Google Cloud Functions, Google Cloud Pub/Sub, Google Cloud Deployment Manager
- D. Google Cloud Storage, Google Cloud Dataflow, Google Compute Engine
Answer: B
NEW QUESTION # 133
Your company has sensitive data in Cloud Storage buckets. Data analysts have Identity Access Management (IAM) permissions to read the buckets. You want to prevent data analysts from retrieving the data in the buckets from outside the office network. What should you do?
- A. 1. Create a Cloud VPN to the office network.
2. Configure Private Google Access for on-premises hosts. - B. 1. Create a Cloud Function to remove IAM permissions from the buckets, and another Cloud Function to add IAM permissions to the buckets.
2. Schedule the Cloud Functions with Cloud Scheduler to add permissions at the start of business and remove permissions at the end of business. - C. 1. Create a firewall rule for all instances in the Virtual Private Cloud (VPC) network for source range.
2. Use the Classless Inter-domain Routing (CIDR) of the office network. - D. 1. Create a VPC Service Controls perimeter that includes the projects with the buckets.
2. Create an access level with the CIDR of the office network.
Answer: D
Explanation:
For all Google Cloud services secured with VPC Service Controls, you can ensure that: Resources within a perimeter are accessed only from clients within authorized VPC networks using Private Google Access with either Google Cloud or on-premises. https://cloud.google.com/vpc-service-controls/docs/overview
https://cloud.google.com/vpc-service-controls/docs/overview. You create a service control across your VPC and any cloud bucket or any project resource to restrict access. Anything outside of it can't access the resources within service control perimeter
NEW QUESTION # 134
A few days after JencoMart migrates the user credentials database to Google Cloud Platform and shuts down the old server, the new database server stops responding to SSH connections. It is still serving database requests to the application servers correctly.
What three steps should you take to diagnose the problem? (Choose three.)
- A. Check inbound firewall rules for the network the machine is connected to
- B. Delete the virtual machine (VM) and disks and create a new one
- C. Connect the machine to another network with very simple firewall rules and investigate
- D. Delete the instance, attach the disk to a new VM, and investigate
- E. Take a snapshot of the disk and connect to a new machine to investigate
- F. Print the Serial Console output for the instance for troubleshooting, activate the interactive console, and investigate
Answer: A,E,F
Explanation:
D: Handling "Unable to connect on port 22" error message
Possible causes include:
* There is no firewall rule allowing SSH access on the port. SSH access on port 22 is enabled on all Compute Engine instances by default. If you have disabled access, SSH from the Browser will not work. If you run sshd on a port other than 22, you need to enable the access to that port with a custom firewall rule.
* The firewall rule allowing SSH access is enabled, but is not configured to allow connections from GCP Console services. Source IP addresses for browser-based SSH sessions are dynamically allocated by GCP Console and can vary from session to session.
F: Handling "Could not connect, retrying..." error
You can verify that the daemon is running by navigating to the serial console output page and looking for output lines prefixed with the accounts-from-metadata: string. If you are using a standard image but you do not see these output prefixes in the serial console output, the daemon might be stopped. Reboot the instance to restart the daemon.
Reference:
https://cloud.google.com/compute/docs/ssh-in-browser
https://cloud.google.com/compute/docs/ssh-in-browser
NEW QUESTION # 135
Your architecture calls for the centralized collection of all admin activity and VM system logs within your project.
How should you collect these logs from both VMs and services?
- A. All admin and VM system logs are automatically collected by Stackdriver.
- B. Install the Stackdriver Logging agent on a single compute instance and let it collect all audit and access logs for your environment.
- C. Launch a custom syslogd compute instance and configure your GCP project and VMs to forward all logs to it.
- D. Stackdriver automatically collects admin activity logs for most services. The Stackdriver Logging agent must be installed on each instance to collect system logs.
Answer: D
NEW QUESTION # 136
The operations manager asks you for a list of recommended practices that she should consider when migrating a J2EE application to the cloud. Which three practices should you recommend? Choose 3 answers
- A. Integrate Cloud Dataflow into the application to capture real-time metrics.
- B. Port the application code to run on Google App Engine.
- C. Migrate from MySQL to a managed NoSQL database like Google Cloud Datastore or Bigtable.
- D. Deploy a continuous integration tool with automated testing in a staging environment.
- E. Instrument the application with a monitoring tool like Stackdriver Debugger.
- F. Select an automation framework to reliably provision the cloud infrastructure.
Answer: B,D,F
Explanation:
Explanation
References: https://cloud.google.com/appengine/docs/standard/java/tools/uploadinganapp
https://cloud.google.com/appengine/docs/standard/java/building-app/cloud-sql
NEW QUESTION # 137
For this question, refer to the Mountkirk Games case study.
Mountkirk Games wants to set up a continuous delivery pipeline. Their architecture includes many small services that they want to be able to update and roll back quickly.
Mountkirk Games has the following requirements:
* Services are deployed redundantly across multiple regions in the US and Europe.
* Only frontend services are exposed on the public internet.
* They can provide a single frontend IP for their fleet of services.
* Deployment artifacts are immutable.
Which set of products should they use?
- A. Google Cloud Storage, Google App Engine, Google Network Load Balancer
- B. Google Cloud Functions, Google Cloud Pub/Sub, Google Cloud Deployment Manager
- C. Google Container Registry, Google Container Engine, Google HTTP(s) Load Balancer
- D. Google Cloud Storage, Google Cloud Dataflow, Google Compute Engine
Answer: C
NEW QUESTION # 138
You have an outage in your Compute Engine managed instance group: all instance keep restarting after 5 seconds. You have a health check configured, but autoscaling is disabled. Your colleague, who is a Linux expert, offered to look into the issue. You need to make sure that he can access the VMs. What should you do?
- A. Disable the health check for the instance group. Add his SSH key to the project-wide SSH keys
- B. Disable autoscaling for the instance group. Add his SSH key to the project-wide SSH Keys
- C. Grant your colleague the IAM role of project Viewer
- D. Perform a rolling restart on the instance group
Answer: A
Explanation:
Explanation
https://cloud.google.com/compute/docs/instance-groups/autohealing-instances-in-migs Health checks used for autohealing should be conservative so they don't preemptively delete and recreate your instances. When an autohealer health check is too aggressive, the autohealer might mistake busy instances for failed instances and unnecessarily restart them, reducing availability
NEW QUESTION # 139
You are working at an institution that processes medical dat
a. You are migrating several workloads onto Google Cloud. Company policies require all workloads to run on physically separated hardware, and workloads from different clients must also be separated You created a sole-tenant node group and added a node for each client. You need to deploy the workloads on these dedicated hosts. What should you do?
- A. Add the node group name as a network tag when creating Compute Engine instances in order to host each workload on the correct node group.
- B. Add the node name as a network tag when creating Compute Engine instances in order to host each workload on the correct node.
- C. Use node affinity labels based on the node group name when creating Compute Engine instances in order to host each workload on the correct node group
- D. Use node affinity labels based on the node name when creating Compute Engine instances in order to host each workload on the correct node.
Answer: C
Explanation:
https://cloud.google.com/compute/docs/nodes/provisioning-sole-tenant-vms#provision_a_sole-tenant_vm
https://cloud.google.com/compute/docs/nodes/provisioning-sole-tenant-vms#gcloud_2 When you create a VM, you request sole-tenancy by specifying node affinity or anti-affinity, referencing one or more node affinity labels. You specify custom node affinity labels when you create a node template, and Compute Engine automatically includes some default affinity labels on each node. By specifying affinity when you create a VM, you can schedule VMs together on a specific node or nodes in a node group. By specifying anti-affinity when you create a VM, you can ensure that certain VMs are not scheduled together on the same node or nodes in a node group.
NEW QUESTION # 140
For this question refer to the TerramEarth case study
Operational parameters such as oil pressure are adjustable on each of TerramEarth's vehicles to increase their efficiency, depending on their environmental conditions. Your primary goal is to increase the operating efficiency of all 20 million cellular and unconnected vehicles in the field How can you accomplish this goal?
- A. Capture all operating data, train machine learning models that identify ideal operations, and host in Google Cloud Machine Learning (ML) Platform to make operational adjustments automatically.
- B. Implement a Google Cloud Dataflow streaming job with a sliding window, and use Google Cloud Messaging (GCM) to make operational adjustments automatically.
- C. Capture all operating data, train machine learning models that identify ideal operations, and run locally to make operational adjustments automatically.
- D. Have your engineers inspect the data for patterns, and then create an algorithm with rules that make operational adjustments automatically.
Answer: C
Explanation:
Topic 3, JencoMart Case Study
Company Overview
JencoMart is a global retailer with over 10,000 stores in 16 countries. The stores carry a range of goods, such as groceries, tires, and jewelry. One of the company's core values is excellent customer service. In addition, they recently introduced an environmental policy to reduce their carbon output by 50% over the next 5 years.
Company Background
JencoMart started as a general store in 1931, and has grown into one of the world's leading brands known for great value and customer service. Over time, the company transitioned from only physical stores to a stores and online hybrid model, with 25% of sales online. Currently, JencoMart has little presence in Asia, but considers that market key for future growth.
Solution Concept
JencoMart wants to migrate several critical applications to the cloud but has not completed a technical review to determine their suitability for the cloud and the engineering required for migration. They currently host all of these applications on infrastructure that is at its end of life and is no longer supported.
Existing Technical Environment
JencoMart hosts all of its applications in 4 data centers: 3 in North American and 1 in Europe, most applications are dual-homed.
JencoMart understands the dependencies and resource usage metrics of their on-premises architecture.
Application Customer loyalty portal
LAMP (Linux, Apache, MySQL and PHP) application served from the two JencoMart- owned U.S. data centers.
Database
* Oracle Database stores user profiles
* 20 TB
* Complex table structure
* Well maintained, clean data
* Strong backup strategy
* PostgreSQL database stores user credentials
* Single-homed in US West
No redundancy
Backed up every 12 hours
* 100% uptime service level agreement (SLA)
* Authenticates all users
Compute
* 30 machines in US West Coast, each machine has:
Twin, dual core CPUs
32GB of RAM
* Twin 250 GB HDD (RAID 1)
* 20 machines in US East Coast, each machine has:
Single dual-core CPU
2 4 GB of RAM
* Twin 250 GB HDD (RAID 1)
Storage
* Access to shared 100 TB SAN in each location
* Tape backup every week
Business Requirements
* Optimize for capacity during peak periods and value during off-peak periods
* Guarantee service availably and support
* Reduce on-premises footprint and associated financial and environmental impact.
* Move to outsourcing model to avoid large upfront costs associated with infrastructure purchase
* Expand services into Asia.
Technical Requirements
* Assess key application for cloud suitability.
* Modify application for the cloud.
* Move applications to a new infrastructure.
* Leverage managed services wherever feasible
* Sunset 20% of capacity in existing data centers
* Decrease latency in Asia
CEO Statement
JencoMart will continue to develop personal relationships with our customers as more people access the web. The future of our retail business is in the global market and the connection between online and in-store experiences. As a large global company, we also have a responsibility to the environment through 'green' initiatives and polices.
CTO Statement
The challenges of operating data centers prevents focus on key technologies critical to our long-term success. Migrating our data services to a public cloud infrastructure will allow us to focus on big data and machine learning to improve our service customers.
CFO Statement
Since its founding JencoMart has invested heavily in our data services infrastructure.
However, because of changing market trends, we need to outsource our infrastructure to ensure our long-term success. This model will allow us to respond to increasing customer demand during peak and reduce costs.
NEW QUESTION # 141
You have an application deployed on Kubernetes Engine using a Deployment named echo-deployment. The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application. What should you do?
- A. Update the service yaml file which the new container image. Use kubect1 delete service/echoservice and kubect1 create -f <yaml-file>
- B. Use kubect1 set image deployment/echo-deployment <new-image>
- C. Update the deployment yaml file with the new container image. Use kubect1 delete deployment/ echo-deployment and kubect1 create -f <yaml-file>
- D. Use the rolling update functionality of the Instance Group behind the Kubernetes cluster
Answer: B
Explanation:
Explanation
https://cloud.google.com/kubernetes-engine/docs/how-to/updating-apps#updating_an_application
NEW QUESTION # 142
For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for hybrid connectivity between EHR's on-premises systems and Google Cloud. You want to follow Google's recommended practices for production-level applications. Considering the EHR Healthcare business and technical requirements, what should you do?
- A. Configure two Partner Interconnect connections in one metro (City), and make sure the Interconnect connections are placed in different metro zones.
- B. Configure two VPN connections from on-premises to Google Cloud, and make sure the VPN devices on-premises are in separate racks.
- C. Configure Direct Peering between EHR Healthcare and Google Cloud, and make sure you are peering at least two Google locations.
- D. Configure two Dedicated Interconnect connections in one metro (City) and two connections in another metro, and make sure the Interconnect connections are placed in different metro zones.
Answer: D
Explanation:
based on the requirement of secure and high-performance connection between on-premises systems to Google Cloud
https://cloud.google.com/network-connectivity/docs/interconnect/tutorials/partner-creating-9999-availability
NEW QUESTION # 143
You need to upload files from your on-premises environment to Cloud Storage. You want the files to be encrypted on Cloud Storage using customer-supplied encryption keys. What should you do?
- A. Use gsutil to create a bucket, and use the flag --encryption-key to supply the encryption key. Use gsutil to upload the files to that bucket.
- B. Supply the encryption key in a .boto configuration file. Use gsutil to upload the files.
- C. Supply the encryption key using gcloud config. Use gsutil to upload the files to that bucket.
- D. Use gsutil to upload the files, and use the flag --encryption-key to supply the encryption key.
Answer: B
Explanation:
Explanation
NEW QUESTION # 144
For this question, refer to the TerramEarth case study.
To speed up data retrieval, more vehicles will be upgraded to cellular connections and be able to transmit data to the ETL process. The current FTP process is error-prone and restarts the data transfer from the start of the file when connections fail, which happens often. You want to improve the reliability of the solution and minimize data transfer time on the cellular connections. What should you do?
- A. Use one Google Container Engine cluster of FTP servers. Save the data to a Multi-Regional bucket. Run the ETL process using data in the bucket.
- B. Directly transfer the files to a different Google Cloud Regional Storage bucket location in us, eu, and asia using Google APIs over HTTP(S). Run the ETL process to retrieve the data from each Regional bucket.
- C. Use multiple Google Container Engine clusters running FTP servers located in different regions. Save the data to Multi-Regional buckets in us, eu, and asia. Run the ETL process using the data in the bucket.
- D. Directly transfer the files to different Google Cloud Multi-Regional Storage bucket locations in us, eu, and asia using Google APIs over HTTP(S). Run the ETL process using the data in the bucket.
Answer: B
Explanation:
https://cloud.google.com/storage/docs/locations
NEW QUESTION # 145
You want to automate the creation of a managed instance group. The VMs have many OS package dependencies. You want to minimize the startup time for new VMs in the instance group.
What should you do?
- A. Use Puppet to create the managed instance group and install the OS package dependencies.
- B. Use Deployment Manager to create the managed instance group and Ansible to install the OS package dependencies.
- C. Use Terraform to create the managed instance group and a startup script to install the OS package dependencies.
- D. Create a custom VM image with all OS package dependencies. Use Deployment Manager to create the managed instance group with the VM image.
Answer: D
NEW QUESTION # 146
You have developed an application using Cloud ML Engine that recognizes famous paintings from uploaded images. You want to test the application and allow specific people to upload images for the next 24 hours. Not all users have a Google Account. How should you have users upload images?
- A. Create an App Engine web application where users can upload images. Configure App Engine to disable the application after 24 hours. Authenticate users via Cloud Identity.
- B. Have users upload the images to Cloud Storage using a signed URL that expires after 24 hours.
- C. Create an App Engine web application where users can upload images for the next 24 hours. Authenticate users via Cloud Identity.
- D. Have users upload the images to Cloud Storage. Protect the bucket with a password that expires after 24 hours.
Answer: D
Explanation:
Reference:
https://cloud.google.com/blog/products/storage-data-transfer/uploading-images-directly-to-cloud-storage-by-using-signed-url
NEW QUESTION # 147
A small number of API requests to your microservices-based application take a very long time. You know that each request to the API can traverse many services. You want to know which service takes the longest in those cases. What should you do?
- A. Instrument your application with Stackdnver Trace in order to break down the request latencies at each microservice.
- B. Send custom metrics for each of your requests to Stackdriver Monitoring.
- C. Use Stackdriver Monitoring to look for insights that show when your API latencies are high.
- D. Set timeouts on your application so that you can fail requests faster.
Answer: A
Explanation:
Explanation
https://cloud.google.com/trace/docs/overview
NEW QUESTION # 148
You want to ensure Dress4Win's sales and tax records remain available for infrequent viewing by auditors for at least 10 years.
Cost optimization is your top priority.
Which cloud services should you choose?
- A. Google Cloud Storage Coldline to store the data, and gsutil to access the data.
- B. Google Bigtabte with US or EU as location to store the data, and gcloud to access the data.
- C. Google Cloud Storage Nearline to store the data, and gsutil to access the data.
- D. BigQuery to store the data, and a web server cluster in a managed instance group to access the data.
Google Cloud SQL mirrored across two distinct regions to store the data, and a Redis cluster in a managed instance group to access the data.
Answer: A
Explanation:
Explanation/Reference: https://cloud.google.com/storage/docs/storage-classes
NEW QUESTION # 149
The current Dress4win system architecture has high latency to some customers because it is located in one data center.
As of a future evaluation and optimizing for performance in the cloud, Dresss4win wants to distribute it's system architecture to multiple locations when Google cloud platform.
Which approach should they use?
- A. Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines as part of a separate managed instance groups.
- B. Use regional managed instance groups and a global load balancer to increase reliability by providing automatic failover between zones in different regions.
- C. Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines managed by your operations team.
- D. Use regional managed instance groups and a global load balancer to increase performance because the regional managed instance group can grow instances in each region separately based on traffic.
Answer: A
NEW QUESTION # 150
Your customer is moving their corporate applications to Google Cloud Platform. The security team wants
detailed visibility of all projects in the organization. You provision the Google Cloud Resource Manager and
set up yourself as the org admin.
What Google Cloud Identity and Access Management (Cloud IAM) roles should you give to the security
team?
- A. Org viewer, project owner
- B. Org viewer, project viewer
- C. Project owner, network admin
- D. Org admin, project browser
Answer: B
NEW QUESTION # 151
You want to automate the creation of a managed instance group and a startup script to install the OS package dependencies. You want to minimize the startup time for VMs in the instance group.
What should you do?
- A. Use Puppet to create the managed instance group and install the OS package dependencies.
- B. Use Deployment Manager to create the managed instance group and Ansible to install the OS package dependencies.
- C. Use Terraform to create the managed instance group and a startup script to install the OS package dependencies.
- D. Create a custom VM image with all OS package dependencies. Use Deployment Manager to create the managed instance group with the VM image.
Answer: D
NEW QUESTION # 152
......
Prepare For The Professional-Cloud-Architect Question Papers In Advance: https://www.test4sure.com/Professional-Cloud-Architect-pass4sure-vce.html
Released Google Professional-Cloud-Architect Updated Questions PDF: https://drive.google.com/open?id=19ALFzxkMOHmVnPi0onaSYAJAVIxs-K7i