nerdexam
Google

PROFESSIONAL-CLOUD-ARCHITECT · Question #282

Case Study: 11 - TerramEarth Company overview TerramEarth manufactures heavy equipment for the mining and agricultural industries. They currently have over 500 dealers and service centers in 100 count

The correct answer is A. Open a support case regarding the CVE and chat with the support engineer. C. Read the CVEs from the Google Cloud Platform Security Bulletins to understand the impact.. A and C are correct because Google Cloud Platform Security Bulletins is the authoritative source where Google publishes known CVEs affecting GCP services, their impact, and recommended mitigations - making it the right starting point for understanding how a vulnerability affects

Submitted by akirajp· Mar 30, 2026Designing for security and compliance

Question

Case Study: 11 - TerramEarth Company overview TerramEarth manufactures heavy equipment for the mining and agricultural industries. They currently have over 500 dealers and service centers in 100 countries. Their mission is to build products that make their customers more productive. Solution concept There are 2 million TerramEarth vehicles in operation currently, and we see 20% yearly growth. Vehicles collect telemetry data from many sensors during operation. A small subset of critical data is transmitted from the vehicles in real time to facilitate fleet management. The rest of the sensor data is collected, compressed, and uploaded daily when the vehicles return to home base. Each vehicle usually generates 200 to 500 megabytes of data per day. Existing technical environment TerramEarth's vehicle data aggregation and analysis infrastructure resides in Google Cloud and serves clients from all around the world. A growing amount of sensor data is captured from their two main manufacturing plants and sent to private data centers that contain their legacy inventory and logistics management systems. The private data centers have multiple network interconnects configured to Google Cloud. The web frontend for dealers and customers is running in Google Cloud and allows access to stock management and analytics. Business requirements - Predict and detect vehicle malfunction and rapidly ship parts to dealerships for just-in-time repair where possible. - Decrease cloud operational costs and adapt to seasonality. - Increase speed and reliability of development workflow. - Allow remote developers to be productive without compromising code or data security. - Create a flexible and scalable platform for developers to create custom API services for dealers and partners. Technical requirements - Create a new abstraction layer for HTTP API access to their legacy systems to enable a gradual move into the cloud without disrupting operations. - Modernize all CI/CD pipelines to allow developers to deploy container-based workloads in highly scalable environments. - Allow developers to run experiments without compromising security and governance requirements. - Create a self-service portal for internal and partner developers to create new projects, request resources for data analytics jobs, and centrally manage access to the API endpoints. - Use cloud-native solutions for keys and secrets management and optimize for identity-based access. - Improve and standardize tools necessary for application and network monitoring and troubleshooting. Executive statement Our competitive advantage has always been our focus on the customer, with our ability to provide excellent customer service and minimize vehicle downtimes. After moving multiple systems into Google Cloud, we are seeking new ways to provide best-in- class online fleet management services to our customers and improve operations of our dealerships. Our 5-year strategic plan is to create a partner ecosystem of new products by enabling access to our data, increasing autonomous operation capabilities of our vehicles, and creating a path to move the remaining legacy systems to the cloud. You are migrating a Linux-based application from your private data center to Google Cloud. The TerramEarth security team sent you several recent Linux vulnerabilities published by Common Vulnerabilities and Exposures (CVE). You need assistance in understanding how these vulnerabilities could impact your migration. What should you do? (Choose two.)

Options

  • AOpen a support case regarding the CVE and chat with the support engineer.
  • BRead the CVEs from the Google Cloud Status Dashboard to understand the impact.
  • CRead the CVEs from the Google Cloud Platform Security Bulletins to understand the impact.
  • DPost a question regarding the CVE in Stack Overflow to get an explanation.
  • EPost a question regarding the CVE in a Google Cloud discussion group to get an explanation.

How the community answered

(29 responses)
  • A
    90% (26)
  • B
    3% (1)
  • D
    7% (2)

Explanation

A and C are correct because Google Cloud Platform Security Bulletins is the authoritative source where Google publishes known CVEs affecting GCP services, their impact, and recommended mitigations - making it the right starting point for understanding how a vulnerability affects your migration. Opening a support case (A) complements this by giving you access to a Google engineer who can assess the CVE's specific impact on your environment and guide remediation steps tailored to your workload.

B is wrong because the Google Cloud Status Dashboard tracks live service availability and outages - it has nothing to do with security vulnerabilities or CVE disclosures.

D and E are wrong because Stack Overflow and Google Cloud discussion groups are community forums with no authoritative standing on security matters; responses may be inaccurate, outdated, or irrelevant to your specific GCP configuration, and neither is appropriate for handling security-sensitive migration concerns.

Memory tip: For CVEs on GCP, think "Bulletins + Support" - Bulletins give you the what (official documented impact), and Support gives you the so what (personalized guidance for your environment). The Status Dashboard = uptime, not security.

Topics

#Security Vulnerabilities#CVE#Google Cloud Security#Customer Support

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice