PROFESSIONAL-CLOUD-ARCHITECT Exam Questions
378 real PROFESSIONAL-CLOUD-ARCHITECT exam questions with expert-verified answers and explanations. Page 3 of 8.
- Question #101Managing and provisioning cloud solution infrastructure
You are using Cloud Shell and need to install a custom utility for use in a few weeks. Where can you store the file so it is in the default execution path and persists across sessi...
Cloud Shellpersistent storagehome directoryexecution path - Question #102Designing and planning a cloud solution architecture
You want to create a private connection between your instances on Compute Engine and your on- premises data center. You require a connection of at least 20 Gbps. You want to follow...
Dedicated Interconnecthybrid connectivitynetwork bandwidthVPC - Question #103Optimizing technical and business processes
You are analyzing and defining business processes to support your startup's trial usage of GCP, and you don't yet know what consumer demand for your product will be. Your manager r...
cost optimizationfree tiersustained use discountsGCP billing - Question #104Managing implementation
You are building a continuous deployment pipeline for a project stored in a Git source repository and want to ensure that code changes can be verified before deploying to productio...
CI/CD pipelineJenkinsstaging environmentdeployment strategy - Question #105Ensuring solution and operations reliability
You have an outage in your Compute Engine managed instance group: all instance keep restarting after 5 seconds. You have a health check configured, but autoscaling is disabled. You...
managed instance grouphealth checkSSH accesstroubleshooting - Question #106Designing for security and compliance
Your company is migrating its on-premises data center into the cloud. As part of the migration, you want to integrate Google Kubernetes Engine (GKE) for workload orchestration. Par...
GKEPCI DSScomplianceshared responsibility - Question #107Optimizing technical and business processes
Your company has multiple on-premises systems that serve as sources for reporting. The data has not been maintained well and has become degraded over time. You want to use Google-...
Cloud Dataprepdata cleaninganomaly detectionCloud Storage - Question #108Designing for security and compliance
Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these differ...
IAM policiesresource hierarchypolicy inheritanceorganizations - Question #109Managing and provisioning cloud solution infrastructure
You are migrating your on-premises solution to Google Cloud in several phases. You will use Cloud VPN to maintain a connection between your on-premises systems and Google Cloud unt...
Cloud VPNIP addressinghybrid networkingon-premises migration - Question #110Managing implementation
You have found an error in your App Engine application caused by missing Cloud Datastore indexes. You have created a YAML file with the required indexes and want to deploy these ne...
Cloud Datastoregcloud CLIindex deploymentYAML configuration - Question #111Designing and planning a cloud solution architecture
You have an application that will run on Compute Engine. You need to design an architecture that takes into account a disaster recovery plan that requires your application to fail...
disaster recoveryregional failoverinstance groupsCompute Engine - Question #112Designing for security and compliance
You are deploying an application on App Engine that needs to integrate with an on-premises database. For security purposes, your on-premises database must not be accessible through...
App Engine flexibleCloud VPNon-premises connectivitynetwork security - Question #113Managing and provisioning cloud solution infrastructure
You are working in a highly secured environment where public Internet access from the Compute Engine VMs is not allowed. You do not yet have a VPN connection to access an on-premis...
Private Google AccessCloud Storageair-gapped environmentVPC subnet - Question #114Managing implementation
Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Google-recommended practices. What should you do?
Transfer Appliancedata migrationCloud Storagelarge-scale transfer - Question #115Managing implementation
You have an application deployed on Kubernetes Engine using a Deployment named echo- deployment. The deployment is exposed using a Service called echo-service. You need to perform...
Kubernetesrolling updatekubectlzero-downtime deployment - Question #116Designing for security and compliance
Your company is using BigQuery as its enterprise data warehouse. Data is distributed over several Google Cloud projects. All queries on BigQuery need to be billed on a single proje...
BigQuery IAMjobUser roledataViewer rolebilling project - Question #117Designing for security and compliance
You have developed an application using Cloud ML Engine that recognizes famous paintings from uploaded images. You want to test the application and allow specific people to upload...
signed URLsCloud Storagetemporary accessunauthenticated users - Question #118Designing for security and compliance
Your web application must comply with the requirements of the European Union's General Data Protection Regulation (GDPR). You are responsible for the technical architecture of your...
GDPRdata privacy compliancesecurity designregulatory requirements - Question #119Designing and planning a cloud solution architecture
You need to set up Microsoft SQL Server on GCP. Management requires that there's no downtime in case of a data center outage in any of the zones within a GCP region. What should yo...
Cloud SQLhigh availabilitySQL Serverzonal failover - Question #120Managing implementation
The development team has provided you with a Kubernetes Deployment file. You have no infrastructure yet and need to deploy the application. What should you do?
GKEkubectlgcloudKubernetes deployment - Question #121Optimizing technical and business processes
You need to evaluate your team readiness for a new GCP project. You must perform the evaluation and create a skills gap plan incorporates the business goal of cost optimization. Yo...
skills gap planningcost optimizationteam readinesscloud certification - Question #122Designing and planning a cloud solution architecture
You are designing an application for use only during business hours. For the minimum viable product release, you'd like to use a managed product that automatically "scales to zero"...
Cloud Functionsserverlessscale to zerocost optimization - Question #123Optimizing technical and business processes
You are creating an App Engine application that uses Cloud Datastore as its persistence layer. You need to retrieve several root entities for which you have the identifiers. You wa...
Cloud Datastorebatch getentity keysperformance optimization - Question #124Designing for security and compliance
You need to upload files from your on-premises environment to Cloud Storage. You want the files to be encrypted on Cloud Storage using customer-supplied encryption keys. What shoul...
customer-supplied encryption keysCloud Storagegsutil.boto configuration - Question #125Ensuring solution and operations reliability
You are using a single Cloud SQL instance to serve your application from a specific zone. You want to introduce high availability. What should you do?
Cloud SQLhigh availabilityfailover replicazone redundancy - Question #126Ensuring solution and operations reliability
Your company is running a stateless application on a Compute Engine instance. The application is used heavily during regular business hours and lightly outside of business hours. U...
managed instance groupautoscalingcustom imageinstance template - Question #127Designing for security and compliance
Your web application has several VM instances running within a VPC. You want to restrict communications between instances to only the paths and ports you authorize, but you don't w...
firewall rulesnetwork tagsVPCdynamic autoscaling security - Question #128Ensuring solution and operations reliability
You are using Cloud SQL as the database backend for a large CRM deployment. You want to scale as usage increases and ensure that you don't run out of storage, maintain 75% CPU usag...
Cloud SQLautomatic storage increaseCPU monitoringreplication lag - Question #129Designing and planning a cloud solution architecture
You are tasked with building an online analytical processing (OLAP) marketing analytics and reporting tool. This requires a relational database that can operate on hundreds of tera...
BigQueryOLAPpetabyte-scale analyticsdatabase selection - Question #130Ensuring solution and operations reliability
You have deployed an application to Kubernetes Engine, and are using the Cloud SQL proxy container to make the Cloud SQL database available to the services running on Kubernetes. Y...
Stackdriver LoggingCloud SQL proxyKubernetes troubleshootingpost-mortem - Question #131Designing for security and compliance
Your company pushes batches of sensitive transaction data from its application server VMs to Cloud Pub/ Sub for processing and storage. What is the Google-recommended way for your...
service accountsCloud Pub/SubIAM rolesVM authentication - Question #132Designing and planning a cloud solution architecture
You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy th...
Cloud VPNmulti-region VPCVPN gatewayhybrid connectivity - Question #133Managing and provisioning cloud solution infrastructure
Your applications will be writing their logs to BigQuery for analysis. Each application should have its own table. Any logs older than 45 days should be removed. You want to optimi...
BigQuerytime-partitioned tablespartition expirationlog management - Question #134Optimizing technical and business processes
You work as an architect in a company that develops statistical studies on big data and produces reports for its customers. Analysts often allocate VMs to process data with ad hoc...
Recommender APIidle VM detectioncost optimizationCompute Engine - Question #135Designing and planning a cloud solution architecture
Your company processes high volumes of IoT data that are time-stamped. The total data volume can be several petabytes. The data needs to be written and changed at a high speed. You...
Cloud BigtableIoT time-series datahigh-throughput writesstorage selection - Question #136Designing and planning a cloud solution architecture
You work in a multinational company that is migrating to Google Cloud. The head office has the largest data center and manages a connection network to offices in various countries...
Shared VPCmulti-project networkingVPC organizationmultinational architecture - Question #137Ensuring solution and operations reliability
Your customer wants to capture multiple GBs of aggregate real-time key performance indicators (KPIs) from their game servers running on Google Cloud Platform and monitor the KPIs w...
custom metricsStackdriver Monitoringreal-time KPIsgame server observability - Question #138Managing implementation
You have a Python web application with many dependencies that requires 0.1 CPU cores and 128 MB of memory to operate in production. You want to monitor and maximize machine utiliza...
containerizationGKE deploymentresource limitsrolling updates - Question #139Designing for security and compliance
Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?
Cloud Directory SyncActive Directory federationhybrid identitySSO - Question #140Ensuring solution and operations reliability
You are running a cluster on Kubernetes Engine to serve a web application. Users are reporting that a specific part of the application is not responding anymore. You notice that al...
GKE pod logsStackdriver Loggingcontainer debuggingpod crash loop - Question #141Ensuring solution and operations reliability
You need to develop procedures to verify resilience of disaster recovery for remote recovery using GCP. Your production environment is hosted on-premises. You need to establish a s...
Dedicated Interconnectdisaster recoveryredundant connectivityhybrid networking - Question #142Designing for security and compliance
Your company operates nationally and plans to use GCP for multiple batch workloads, including some that are not time-critical. You also need to use GCP services that are HIPAA-cert...
HIPAA compliancepreemptible VMsbatch workloadscost and compliance - Question #143Ensuring solution and operations reliability
Your customer wants to do resilience testing of their authentication layer. This consists of a regional managed instance group serving a public REST API that reads from and writes...
resilience testingzone failure simulationmanaged instance groupsdisaster simulation - Question #144Designing for security and compliance
Your BigQuery project has several users. For audit purposes, you need to see how many queries each user ran in the last month. What should you do?
Cloud Audit LogsBigQuery auditingquery historyuser activity tracking - Question #145Managing and provisioning cloud solution infrastructure
You want to automate the creation of a managed instance group. The VMs have many OS package dependencies. You want to minimize the startup time for new VMs in the instance group. W...
custom VM imagesmanaged instance groupsstartup time optimizationimage baking - Question #146Designing for security and compliance
Your company captures all web traffic data in Google Analytics 260 and stores it in BigQuery. Each country has its own dataset. Each dataset has multiple tables. You want analysts...
BigQuery IAMdataset-level access controlgroup-based permissionsdata governance - Question #147Designing and planning a cloud solution architecture
You have been engaged by your client to lead the migration of their application infrastructure to GCP. One of their current problems is that the on-premises high performance SAN is...
storage selectionMemcacheCloud Datastorelifecycle-managed Cloud Storage - Question #148Managing implementation
Your web application uses Google Kubernetes Engine to manage several workloads. One workload requires a consistent set of hostnames even after pod scaling and relaunches. Which fea...
StatefulSetsKubernetes pod identitystable hostnamesworkload identity - Question #149Optimizing technical and business processes
You are using Cloud CDN to deliver static HTTP(S) website content hosted on a Compute Engine instance group. You want to improve the cache hit ratio. What should you do?
Cloud CDNcache hit ratiocache key customizationCDN optimization - Question #150Ensuring solution and operations reliability
Your architecture calls for the centralized collection of all admin activity and VM system logs within your project. How should you collect these logs from both VMs and services?
Stackdriver Loggingadmin activity logsLogging agentVM log collection