Professional-Cloud-Architect Practice Test Questions Answers Updated 262 Questions
Professional-Cloud-Architect dumps & Google Cloud Certified Sure Practice with 262 Questions
Exam Overview
The qualifying test for the Google Professional Cloud Architect certification is 2 hours long. The questions administered during the exam can be presented as multiple-select and multiple-choice items. The test is delivered in English or Japanese and can be taken by the students either online from a remote location or in-person at the authorized testing center. To check the location of the nearest center, you can use the search on the official website. To schedule the exam, each applicant is required to pay the registration fee of $200, plus applicable taxes.
NEW QUESTION 61
TerramEarth's 20 million vehicles are scattered around the world. Based on the vehicle's location, its
telemetry data is stored in a Google Cloud Storage (GCS) regional bucket (US, Europe, or Asia). The CTO
has asked you to run a report on the raw telemetry data to determine why vehicles are breaking down after
100 K miles. You want to run this job on all the data.
What is the most cost-effective way to run this job?
- A. Move all the data into 1 region, then launch a Google Cloud Dataproc cluster to run the job
- B. Launch a cluster in each region to preprocess and compress the raw data, then move the data into a
multi-region bucket and use a Dataproc cluster to finish the job - C. Move all the data into 1 zone, then launch a Cloud Dataproc cluster to run the job
- D. Launch a cluster in each region to preprocess and compress the raw data, then move the data into a
region bucket and use a Cloud Dataproc cluster to finish the job
Answer: B
Explanation:
Explanation/Reference:
Explanation:
Storageguarantees 2 replicates which are geo diverse (100 miles apart) which can get better remote
latency and availability.
More importantly, is that multiregional heavily leverages Edge caching and CDNs to provide the content to
the end users.
All this redundancy and caching means that Multiregional comes with overhead to sync and ensure
consistency between geo-diverse areas. As such, it's much better for write-once-read-many scenarios.
This means frequently accessed (e.g. "hot" objects) around the world, such as website content, streaming
videos, gaming or mobile applications.
References: https://medium.com/google-cloud/google-cloud-storage-what-bucket-class-for-the-best-
performance-5c847ac8f9f2
NEW QUESTION 62
For this question, refer to the Mountkirk Games case study.
Mountkirk Games wants to set up a continuous delivery pipeline. Their architecture includes many small services that they want to be able to update and roll back quickly. Mountkirk Games has the following requirements:
* Services are deployed redundantly across multiple regions in the US and Europe.
* Only frontend services are exposed on the public internet.
* They can provide a single frontend IP for their fleet of services.
* Deployment artifacts are immutable.
Which set of products should they use?
- A. Google Cloud Functions, Google Cloud Pub/Sub, Google Cloud Deployment Manager
- B. Google Container Registry, Google Container Engine, Google HTTP(s) Load Balancer
- C. Google Cloud Storage, Google App Engine, Google Network Load Balancer
- D. Google Cloud Storage, Google Cloud Dataflow, Google Compute Engine
Answer: A
Explanation:
Explanation
https://cloud.google.com/load-balancing/
https://cloud.google.com/solutions/ansible-with-spinnaker-tutorial
http://blog.armory.io/what-is-immutable-infrastructure/
https://cloud.google.com/compute/docs/load-balancing/http/
Google Cloud Functions is a serverless environment to build and connect cloud services.
Google Cloud Pub/Sub brings the scalability, flexibility, and reliability of enterprise message-oriented middleware to the cloud. By providing many-to-many, asynchronous messaging that decouples senders and receivers, it allows for secure and highly available communication between independently written applications. Google Cloud Pub/Sub delivers low-latency, durable messaging that helps developers quickly integrate systems hosted on the Google Cloud Platform and externally.
NEW QUESTION 63
Your company acquired a healthcare startup and must retain its customers' medical information for up to 4 more years, depending on when it was created. Your corporate policy is to securely retain this data, and then delete it as soon as regulations allow.
Which approach should you take?
- A. Store the data in Google Drive and manually delete records as they expire.
- B. Store the data in Cloud Storage and run a nightly batch script that deletes all expired datA.
- C. Store the data using the Cloud Storage and use lifecycle management to delete files when they expire.
- D. Anonymize the data using the Cloud Data Loss Prevention API and store it indefinitely.
Answer: C
Explanation:
Reference:
https://cloud.google.com/storage/docs/lifecycle
NEW QUESTION 64
You write a Python script to connect to Google BigQuery from a Google Compute Engine virtual machine.
The script is printing errors that it cannot connect to BigQuery. What should you do to fix the script?
- A. Create a new service account with BigQuery access and execute your script with that user
- B. Install the latest BigQuery API client library for Python
- C. Run your script on a new virtual machine with the BigQuery access scope enabled
- D. Install the bq component for gccloud with the command gcloud components install bq.
Answer: C
Explanation:
Explanation
https://cloud.google.com/compute/docs/access/service-accounts
NEW QUESTION 65
The development team has provided you with a Kubernetes Deployment file. You have no infrastructure yet and need to deploy the application. What should you do?
- A. Use gcloud to create a Kubernetes cluster. Use Deployment Manager to create the deployment.
- B. Use kubectl to create a Kubernetes cluster. Use Deployment Manager to create the deployment.
- C. Use kubectl to create a Kubernetes cluster. Use kubectl to create the deployment.
- D. Use gcloud to create a Kubernetes cluster. Use kubectl to create the deployment.
Answer: B
NEW QUESTION 66
Dress4Win has configured a new uptime check with Google Stackdriver for several of their legacy services.
The Stackdriver dashboard is not reporting the services as healthy.
What should they do?
- A. Configure their load balancer to pass through the User-Agent HTTP header when the value matches GoogleStackdriverMonitoring-UptimeChecks (https://cloud.google.com/monitoring)
- B. In the Cloud Platform Console download the list of the uptime servers' IP addresses and create an inbound firewall rule
- C. Configure their legacy web servers to allow requests that contain user-Agent HTTP header when the value matches GoogleStackdriverMonitoring-UptimeChecks (https://cloud.google.com/monitoring)
- D. Install the Stackdriver agent on all of the legacy web servers.
Answer: B
NEW QUESTION 67
Your office is connected to GCP via a VPN connection. How can you increase the speed of your VPN connection, assuming that your office Internet is not the bottleneck?
- A. Enable high speed routing in your VPN settings
- B. Apply for a dedicated interconnect option
- C. Create an additional VPN tunnel
- D. Submit request to increase bandwidth quota
Answer: C
Explanation:
A - Apply for a dedicated interconnect option. A dedicated interconnect will also increase speeds, however the question asked how to speed up your VPN connection, not create a new type of connection.
C (Correct answer) - Create an additional VPN tunnel. Each VPN tunnel has a max speed of 1.5 Gbps. However, you can create multiple VPN tunnels to increase bandwidth.
Answer B and D either are not applicable or feature doesn't not exist.
NEW QUESTION 68
Your company has announced that they will be outsourcing operations functions. You want to allow developers to easily stage new versions of a cloud-based application in the production environment and allow the outsourced operations team to autonomously promote staged versions to production. You want to minimize the operational overhead of the solution. Which Google Cloud product should you migrate to?
- A. App Engine
- B. Compute Engine
- C. Google Kubernetes Engine
- D. GKE On-Prem
Answer: C
NEW QUESTION 69
You deploy your custom java application to google app engine.
It fails to deploy and gives you the following stack trace:
- A. Digitally sign all of your JAR files and redeploy your application.
- B. Upload missing JAR files and redeploy your application
- C. Recompile the CLoakedServlet class using and MD5 hash instead of SHA1
Answer: A
NEW QUESTION 70
Your company has multiple on-premises systems that serve as sources for reporting. The data has not been maintained well and has become degraded over time. You want to use Google-recommended practices to detect anomalies in your company dat a. What should you do?
- A. Connect Cloud Dataprep to your on-premises systems. Use Cloud Dataprep to explore and clean your
- B. Upload your files into Cloud Storage. Use Cloud Datalab to explore and clean your data.
- C. Connect Cloud Datalab to your on-premises systems. Use Cloud Datalab to explore and clean your data.
- D. Upload your files into Cloud Storage. Use Cloud Dataprep to explore and clean your data.
Answer: D
Explanation:
data.
Reference:
https://cloud.google.com/dataprep/
NEW QUESTION 71
Your company wants to track whether someone is present in a meeting room reserved for a scheduled meeting. There are 1000 meeting rooms across 5 offices on 3 continents. Each room is equipped with a motion sensor that reports its status every second. The data from the motion detector includes only a sensor ID and several different discrete items of information. Analysts will use this data, together with information about account owners and office locations.
Which database type should you use?
- A. Blobstore
- B. Relational
- C. NoSQL
- D. Flat file
Answer: C
Explanation:
Relational databases were not designed to cope with the scale and agility challenges that face modern applications, nor were they built to take advantage of the commodity storage and processing power available today.
NoSQL fits well for:
* Developers are working with applications that create massive volumes of new, rapidly changing data types - structured, semi-structured, unstructured and polymorphic data.
Incorrect Answers:
D: The Blobstore API allows your application to serve data objects, called blobs, that are much larger than the size allowed for objects in the Datastore service. Blobs are useful for serving large files, such as video or image files, and for allowing users to upload large data files.
Reference: https://www.mongodb.com/nosql-explained
NEW QUESTION 72
One of the developers on your team deployed their application In Google Container Engine with the Dockerfile below. They report that their application deployments are taking too long.
You want to optimize this Dockerfile for faster deployment times without adversely affecting the app's functionality. Which two actions should you take? Choose 2 answers
- A. Remove Python after running pip.
- B. Copy the source after the package dependencies (Python and pip) are installed.
- C. Remove dependencies from requirements.txt.
- D. Use a slimmed-down base image like Alpine linux.
- E. Use larger machine types for your Google Container Engine node pools.
Answer: B,D
NEW QUESTION 73
Your company is using BigQuery as its enterprise data warehouse. Data is distributed over several Google Cloud projects. All queries on BigQuery need to be billed on a single project. You want to make sure that no query costs are incurred on the projects that contain the data. Users should be able to query the datasets, but not edit them.
How should you configure users' access roles?
- A. Add all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery user on the projects that contain the data.
- B. Add all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery jobUser on the projects that contain the data.
- C. Add all users to a group. Grant the group the role of BigQuery user on the billing project and BigQuery dataViewer on the projects that contain the data.
- D. Add all users to a group. Grant the group the roles of BigQuery jobUser on the billing project and BigQuery dataViewer on the projects that contain the data.
Answer: C
NEW QUESTION 74
You analyzed TerramEarth's business requirement to reduce downtime, and found that they can achieve a
majority of time saving by reducing customer's wait time for parts. You decided to focus on reduction of the
3 weeks aggregate reporting time.
Which modifications to the company's processes should you recommend?
- A. Increase fleet cellular connectivity to 80%, migrate from FTP to streaming transport, and develop
machine learning analysis of metrics - B. Migrate from CSV to binary format, migrate from FTP to SFTP transport, and develop machine learning
analysis of metrics - C. Migrate from FTP to SFTP transport, develop machine learning analysis of metrics, and increase dealer
local inventory by a fixed factor - D. Migrate from FTP to streaming transport, migrate from CSV to binary format, and develop machine
learning analysis of metrics
Answer: D
Explanation:
Explanation/Reference:
Explanation:
The Avro binary format is the preferred format for loading compressed data. Avro data is faster to load
because the data can be read in parallel, even when the data blocks are compressed.
Cloud Storage supports streaming transfers with the gsutil tool or boto library, based on HTTP chunked
transfer encoding. Streaming data lets you stream data to and from your Cloud Storage account as soon
as it becomes available without requiring that the data be first saved to a separate file. Streaming transfers
are useful if you have a process that generates data and you do not want to buffer it locally before
uploading it, or if you want to send the result from a computational pipeline directly into Cloud Storage.
References: https://cloud.google.com/storage/docs/streaming
https://cloud.google.com/bigquery/docs/loading-data
NEW QUESTION 75
During a high traffic portion of the day, one of your relational databases crashes, but the replica is never promoted to a master. You want to avoid this in the future. What should you do?
- A. Implement routinely scheduled failovers of your databases.
- B. Use a different database.
- C. Choose larger instances for your database.
- D. Create snapshots of your database more regularly.
Answer: A
Explanation:
https://cloud.google.com/solutions/dr-scenarios-planning-guide
NEW QUESTION 76
Your company has decided to build a backup replica of their on-premises user authentication PostgreSQL database on Google Cloud Platform. The database is 4 TB, and large updates are frequent. Replication requires private address space communication. Which networking approach should you use?
- A. A Google Compute Engine instance with a VPN server installed connected to the data center network
- B. Google Cloud VPN connected to the data center network
- C. A NAT and TLS translation gateway installed on-premises
- D. Google Cloud Dedicated Interconnect
Answer: D
Explanation:
Explanation
https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations Google Cloud Dedicated Interconnect provides direct physical connections and RFC 1918 communication between your on-premises network and Google's network. Dedicated Interconnect enables you to transfer large amounts of data between networks, which can be more cost effective than purchasing additional bandwidth over the public Internet or using VPN tunnels.
Benefits:
* Traffic between your on-premises network and your VPC network doesn't traverse the public Internet.
Traffic traverses a dedicated connection with fewer hops, meaning there are less points of failure where traffic might get dropped or disrupted.
* Your VPC network's internal (RFC 1918) IP addresses are directly accessible from your on-premises network. You don't need to use a NAT device or VPN tunnel to reach internal IP addresses. Currently, you can only reach internal IP addresses over a dedicated connection. To reach Google external IP addresses, you must use a separate connection.
* You can scale your connection to Google based on your needs. Connection capacity is delivered over one or more 10 Gbps Ethernet connections, with a maximum of eight connections (80 Gbps total per interconnect).
* The cost of egress traffic from your VPC network to your on-premises network is reduced. A dedicated connection is generally the least expensive method if you have a high-volume of traffic to and from Google's network.
References: https://cloud.google.com/interconnect/docs/details/dedicated
NEW QUESTION 77
For this question, refer to the TerramEarth case study. You are asked to design a new architecture for the ingestion of the data of the 200,000 vehicles that are connected to a cellular network. You want to follow Google-recommended practices.
Considering the technical requirements, which components should you use for the ingestion of the data?
- A. Compute Engine with project-wide SSH keys
- B. Cloud IoT Core with public/private key pairs
- C. Compute Engine with specific SSH keys
- D. Google Kubernetes Engine with an SSL Ingress
Answer: B
Explanation:
Explanation
https://cloud.google.com/solutions/iot-overview
NEW QUESTION 78
For this question, refer to the Mountkirk Games case study. You are in charge of the new Game Backend Platform architecture. The game communicates with the backend over a REST API.
You want to follow Google-recommended practices. How should you design the backend?
- A. Create an instance template for the backend. For every region, deploy it on a multi-zone managed instance group. Use an L7 load balancer.
- B. Create an instance template for the backend. For every region, deploy it on a single-zone managed instance group. Use an L4 load balancer.
- C. Create an instance template for the backend. For every region, deploy it on a multi-zone managed instance group. Use an L4 load balancer.
- D. Create an instance template for the backend. For every region, deploy it on a single-zone managed instance group. Use an L7 load balancer.
Answer: A
Explanation:
https://cloud.google.com/solutions/gaming/cloud-game-infrastructure#dedicated_game_server
NEW QUESTION 79
For this question, refer to the TerramEarth case study.
TerramEarth plans to connect all 20 million vehicles in the field to the cloud. This increases the volume to 20 million 600 byte records a second for 40 TB an hour. How should you design the data ingestion?
- A. Vehicles continue to write data using the existing system (FTP).
- B. Vehicles write data directly to Google Cloud Pub/Sub.
- C. Vehicles write data directly to GCS.
- D. Vehicles stream data directly to Google BigQuery.
Answer: B
Explanation:
https://cloud.google.com/solutions/data-lifecycle-cloud-platform
https://cloud.google.com/solutions/designing-connected-vehicle-platform
NEW QUESTION 80
You company has a Kubernetes application that pulls messages from Pub/Sub and stores them in Firestore. Because the application is simple, it was deployed as a single pod. The infrastructure team has analyzed Pub/Sub metrics and discovered that the application cannot process the messages in real time. Most of them wait for minutes before being processed. You need to scale the elaboration process that is I/O-intensive. What should you do?
- A. Configure a Kubernetes autoscaling based on the subscription/push_request metric.
- B. Configure a Kubernetes autoscaling based on the subscription/num_undelivered message metric.
- C. Use kubectl autoscale deployment APP_NAME -max 6 -min 2 -cpu- percent 50 to configure Kubernetes autoscaling deployment
- D. Use the -enable- autoscaling flag when you create the Kubernetes cluster
Answer: B
Explanation:
https://cloud.google.com/kubernetes-engine/docs/concepts/custom-and-external-metrics#external_metrics
NEW QUESTION 81
For this question, refer to the TerramEarth case study.
TerramEarth's CTO wants to use the raw data from connected vehicles to help identify approximately when a vehicle in the field will have a catastrophic failure. You want to allow analysts to centrally query the vehicle data. Which architecture should you recommend?
- A. Option C
- B. Option B
- C. Option D
- D. Option A
Answer: B
NEW QUESTION 82
For this question, refer to the Dress4Win case study. You are responsible for the security of data stored in Cloud Storage for your company, Dress4Win. You have already created a set of Google Groups and assigned the appropriate users to those groups. You should use Google best practices and implement the simplest design to meet the requirements.
Considering Dress4Win's business and technical requirements, what should you do?
- A. Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.
Enable default storage encryption before storing files in Cloud Storage. - B. Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.
Encrypt data with a customer-supplied encryption key when storing files in Cloud Storage. - C. Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Ensure that the default Cloud KMS key is set before storing files in Cloud Storage.
- D. Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Utilize Google's default encryption at rest when storing files in Cloud Storage.
Answer: D
Explanation:
Explanation/Reference:
Mix Questions
Question Set 1
NEW QUESTION 83
A few days after JencoMart migrates the user credentials database to Google Cloud Platform and shuts down the old server, the new database server stops responding to SSH connections. It is still serving database requests to the application servers correctly.
What three steps should you take to diagnose the problem? Choose 3 answers.
- A. Print the Serial Console output for the instance for troubleshooting, activate the interactive console, and investigate
- B. Delete the instance, attach the disk to a new VM, and investigate
- C. Take a snapshot of the disk and connect to a new machine to investigate
- D. Delete the virtual machine (VM) and disks and create a new one
- E. Check inbound firewall rules for the network the machine is connected to
- F. Connect the machine to another network with very simple firewall rules and investigate
Answer: A,C,E
Explanation:
D: Handling "Unable to connect on port 22" error message
Possible causes include:
* There is no firewall rule allowing SSH access on the port. SSH access on port 22 is enabled on all Compute Engine instances by default. If you have disabled access, SSH from the Browser will not work. If you run sshd on a port other than 22, you need to enable the access to that port with a custom firewall rule.
* The firewall rule allowing SSH access is enabled, but is not configured to allow connections from GCP Console services. Source IP addresses for browser-based SSH sessions are dynamically allocated by GCP Console and can vary from session to session.
F: Handling "Could not connect, retrying..." error
You can verify that the daemon is running by navigating to the serial console output page and looking for output lines prefixed with the accounts-from-metadata: string. If you are using a standard image but you do not see these output prefixes in the serial console output, the daemon might be stopped. Reboot the instance to restart the daemon.
References:
https://cloud.google.com/compute/docs/ssh-in-browser
https://cloud.google.com/compute/docs/ssh-in-browser
NEW QUESTION 84
For this question, refer to the JencoMart case study.
JencoMart has built a version of their application on Google Cloud Platform that serves traffic to Asi a. You want to measure success against their business and technical goals. Which metrics should you track?
- A. Error rates for requests from Asia
- B. Total visits, error rates, and latency from Asia
- C. Latency difference between US and Asia
- D. The number of character sets present in the database
- E. Total visits and average latency for users in Asia
Answer: E
Explanation:
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model.
Company Background
Dress4win's application has grown from a few servers in the founder's garage to several hundred servers and appliances in a colocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster, Dress4win is committing to a full migration to a public cloud.
NEW QUESTION 85
......
New Professional-Cloud-Architect Exam Questions| Real Professional-Cloud-Architect Dumps: https://prepaway.updatedumps.com/Google/Professional-Cloud-Architect-updated-exam-dumps.html