PROFESSIONAL-CLOUD-ARCHITECT Exam Questions
378 real PROFESSIONAL-CLOUD-ARCHITECT exam questions with expert-verified answers and explanations. Page 5 of 8.
- Question #201Ensuring solution and operations reliability
You are implementing a single Cloud SQL MySQL second-generation database that contains business-critical transaction data. You want to ensure that the minimum amount of data is los...
Cloud SQLbinary loggingautomated backupsdata durability - Question #202Designing for security and compliance
You are working at a sports association whose members range in age from 8 to 30. The association collects a large amount of health data, such as sustained injuries. You are storing...
BigQuerydata deletionGDPR complianceright to erasure - Question #203Managing implementation
Your company has announced that they will be outsourcing operations functions. You want to allow developers to easily stage new versions of a cloud-based application in the product...
App Engineversion managementtraffic splittingoperational overhead - Question #204Optimizing technical and business processes
Your company is running its application workloads on Compute Engine. The applications have been deployed in production, acceptance, and development environments. The production env...
Cloud SchedulerCloud Functionscost optimizationCompute Engine - Question #205Managing implementation
You are moving an application that uses MySQL from on-premises to Google Cloud. The application will run on Compute Engine and will use Cloud SQL. You want to cut over to the Compu...
Cloud SQLdatabase migrationminimal downtimecutover strategy - Question #206Designing for security and compliance
Your organization has decided to restrict the use of external IP addresses on instances to only approved instances. You want to enforce this requirement across all of your Virtual...
Organization PolicyExternal IP addressesVM instance securityPolicy enforcement - Question #207Ensuring solution and operations reliability
Your company uses the Firewall Insights feature in the Google Network Intelligence Center. You have several firewall rules applied to Compute Engine instances. You need to evaluate...
Firewall InsightsFirewall Rules LoggingNetwork Intelligence CenterVPC - Question #208Designing for security and compliance
Your company has sensitive data in Cloud Storage buckets. Data analysts have Identity Access Management (IAM) permissions to read the buckets. You want to prevent data analysts fro...
VPC Service ControlsCloud Storagedata exfiltration preventionIAM - Question #209Managing and provisioning cloud solution infrastructure
You have developed a non-critical update to your application that is running in a managed instance group, and have created a new instance template with the update that you want to...
managed instance groupopportunistic updaterolling updateinstance template - Question #210Designing and planning a cloud solution architecture
Your company is designing its application landscape on Compute Engine. Whenever a zonal outage occurs, the application should be restored in another zone as quickly as possible wit...
Compute Enginezonal HAmanaged instance groupsnapshot schedule - Question #211Designing and planning a cloud solution architecture
Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company's data center. Upon investigation, yo...
Cloud VPNRFC 1918 overlapCloud RouterIP routing conflicts - Question #212Managing and provisioning cloud solution infrastructure
You need to migrate Hadoop jobs for your company's Data Science team without modifying the underlying infrastructure. You want to minimize costs and infrastructure management effor...
DataprocHadoop migrationpreemptible instancescost optimization - Question #213Designing and planning a cloud solution architecture
Your company has a project in Google Cloud with three Virtual Private Clouds (VPCs). There is a Compute Engine instance on each VPC. Network subnets do not overlap and must remain...
multiple NICsmulti-VPC networkingCompute Engineinternal IP routing - Question #214Managing and provisioning cloud solution infrastructure
You need to deploy an application on Google Cloud that must run on a Debian Linux environment. The application requires extensive configuration in order to operate correctly. You w...
Compute EngineOS patch managementcustom imageDebian - Question #215Ensuring solution and operations reliability
You have an application that runs in Google Kubernetes Engine (GKE). Over the last 2 weeks, customers have reported that a specific part of the application returns errors very freq...
Cloud Operations for GKEloggingmonitoringminimal disruption - Question #216Designing and planning a cloud solution architecture
You need to deploy a stateful workload on Google Cloud. The workload can scale horizontally, but each instance needs to read and write to the same POSIX filesystem. At high load, t...
Cloud Filestoreshared POSIX filesystemstateful workloadhigh throughput - Question #217Ensuring solution and operations reliability
Your company has an application deployed on Anthos clusters (formerly Anthos GKE) that is running multiple microservices. The cluster has both Anthos Service Mesh and Anthos Config...
Anthos Service Meshdistributed tracingmicroservices latencyservice visualization - Question #218Designing for security and compliance
You are working at a financial institution that stores mortgage loan approval documents on Cloud Storage. Any change to these approval documents must be uploaded as a separate appr...
Cloud Storage retention policydata immutabilitycomplianceWORM storage - Question #219Managing implementation
Your team will start developing a new application using microservices architecture on Kubernetes Engine. As part of the development lifecycle, any code change that has been pushed...
Cloud BuildCI/CDGKE deploymentbranch triggers - Question #220Ensuring solution and operations reliability
Your operations team has asked you to help diagnose a performance issue in a production application that runs on Compute Engine. The application is dropping requests that reach it...
AutoscalingCompute EnginePerformance ManagementLoad Balancing - Question #221Designing and planning a cloud solution architecture
You are implementing the infrastructure for a web service on Google Cloud. The web service needs to receive and store the data from 500,000 requests per second. The data will be qu...
Cloud RunCloud Bigtablehigh-throughput ingestioncost optimization - Question #222Managing and provisioning cloud solution infrastructure
You are developing an application using different microservices that should remain internal to the cluster. You want to be able to configure each microservice with a specific numbe...
Kubernetes DeploymentKubernetes Servicemicroservicesinternal cluster networking - Question #223Designing for security and compliance
Your company has a networking team and a development team. The development team runs applications on Compute Engine instances that contain sensitive data. The development team requ...
Shared VPCIAM separationnetwork administrationleast privilege - Question #224Designing and planning a cloud solution architecture
Your company wants you to build a highly reliable web application with a few public APIs as the backend. You don't expect a lot of user traffic, but traffic could spike occasionall...
Cloud Load Balancingstatic contentCloud Storagecost optimization - Question #225Designing for security and compliance
Your company sends all Google Cloud logs to Cloud Logging. Your security team wants to monitor the logs. You want to ensure that the security team can react quickly if an anomaly s...
Cloud LoggingPub/SubCloud Functionsreal-time alerting - Question #226Designing for security and compliance
You have deployed several instances on Compute Engine. As a security requirement, instances cannot have a public IP address. There is no VPN connection between Google Cloud and you...
Identity-Aware ProxySSH accessno public IPCompute Engine - Question #227Designing for security and compliance
Your company is using Google Cloud. You have two folders under the Organization: Finance and Shopping. The members of the development team are in a Google Group. The development te...
IAMResource HierarchyRole InheritanceAccess Control - Question #228Ensuring solution and operations reliability
You are developing your microservices application on Google Kubernetes Engine. During testing, you want to validate the behavior of your application in case a specific microservice...
Istio fault injectionchaos engineeringresilience testingmicroservices - Question #229Designing and planning a cloud solution architecture
Your company is developing a new application that will allow globally distributed users to upload pictures and share them with other selected users. The application will support mi...
ServerlessPaaSScalabilityApplication Deployment - Question #230Managing implementation
Your company provides a recommendation engine for retail customers. You are providing retail customers with an API where they can submit a user ID and the API returns a list of rec...
API versioningbackward compatibilityAPI lifecycle managementversioning strategy - Question #231Designing and planning a cloud solution architecture
Your company has developed a monolithic, 3-tier application to allow external users to upload and share files. The solution cannot be easily enhanced and lacks reliability. The dev...
MicroservicesManaged ServicesApplication ModernizationBusiness Value - Question #232Ensuring solution and operations reliability
Your team is developing a web application that will be deployed on Google Kubernetes Engine (GKE). Your CTO expects a successful launch and you need to ensure your application can...
load testingGKElatency validationperformance testing - Question #233Managing and provisioning cloud solution infrastructure
Your company has a Kubernetes application that pulls messages from Pub/Sub and stores them in Filestore. Because the application is simple, it was deployed as a single pod. The inf...
Kubernetes HPAPub/Sub backlog metricsI/O-bound autoscalingcustom metrics - Question #234Managing implementation
Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable. What should you do?
container taggingcommit hashdeployment auditabilityCI/CD traceability - Question #235Designing and planning a cloud solution architecture
An application development team has come to you for advice. They are planning to write and deploy an HTTP(S) API using Go 1.12. The API will have a very unpredictable workload and...
App Engine standardserverlessunpredictable workloadoperational overhead - Question #236Designing and planning a cloud solution architecture
Your company is designing its data lake on Google Cloud and wants to develop different ingestion pipelines to collect unstructured data from different sources. After the data is st...
data lakeCloud Storageraw data ingestionschema-on-read - Question #237Designing for security and compliance
You are responsible for the Google Cloud environment in your company. Multiple departments need access to their own projects, and the members within each department will have the s...
Google GroupsIAMorganizational hierarchyaccess management - Question #238Managing implementation
Your company has an application running as a Deployment in a Google Kubernetes Engine (GKE) cluster. You have separate clusters for development, staging, and production. You have d...
Binary AuthorizationGKEdeployment policy enforcementCI/CD governance - Question #239Designing and planning a cloud solution architecture
Your company wants to migrate their 10-TB on-premises database export into Cloud Storage. You want to minimize the time it takes to complete this activity, the overall cost, and da...
Data MigrationCloud StorageData Transfer Optimizationgsutil - Question #240Designing and planning a cloud solution architecture
Your company has an enterprise application running on Compute Engine that requires high availability and high performance. The application has been deployed on two instances in two...
regional persistent diskhigh availabilityzonal failoverCompute Engine storage - Question #241Designing for security and compliance
You are designing a Data Warehouse on Google Cloud and want to store sensitive data in BigQuery. Your company requires you to generate the encryption keys outside of Google Cloud....
customer-supplied encryption keysBigQuery encryptionCloud KMSkey management - Question #242Designing for security and compliance
Your organization has stored sensitive data in a Cloud Storage bucket. For regulatory reasons, your company must be able to rotate the encryption key used to encrypt the data in th...
CMEKkey rotationCloud KMSCloud Storage encryption - Question #243Managing and provisioning cloud solution infrastructure
Your team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does...
GKE private clusterCloud NATprivate networkingoutbound internet access - Question #244Managing and provisioning cloud solution infrastructure
Your company has a support ticketing solution that uses App Engine Standard. The project that contains the App Engine application already has a Virtual Private Cloud (VPC) network...
Serverless VPC AccessApp Engine Standardon-premises connectivityVPN - Question #245Managing implementation
Your company is planning to upload several important files to Cloud Storage. After the upload is completed, they want to verify that the uploaded content is identical to what they...
gsutilfile integrity verificationCloud Storage uploadchecksum - Question #246Ensuring solution and operations reliability
You have deployed an application on Anthos clusters (formerly Anthos GKE). According to the SRE practices at your company, you need to be alerted if request latency is above a cert...
Anthos Service MeshSLO alertingrequest latencyCloud Monitoring - Question #247Designing and planning a cloud solution architecture
Your company has a stateless web API that performs scientific calculations. The web API runs on a single Google Kubernetes Engine (GKE) cluster. The cluster is currently deployed i...
GKE multi-clusterglobal HTTP load balancerkubemcilatency optimization - Question #248Optimizing technical and business processes
You are migrating third-party applications from optimized on-premises virtual machines to Google Cloud. You are unsure about the optimum CPU and memory options. The applications ha...
VM rightsizingRecommendercost optimizationworkload migration - Question #249Designing for security and compliance
Your company has a Google Cloud project that uses BigQuery for data warehousing. They have a VPN tunnel between the on-premises environment and Google Cloud that is configured with...
VPC Service Controlsdata exfiltration preventionBigQuery securityPrivate Google Access - Question #250Managing and provisioning cloud solution infrastructure
You are working at an institution that processes medical data. You are migrating several workloads onto Google Cloud. Company policies require all workloads to run on physically se...
sole-tenant nodesnode affinity labelsworkload isolationphysical separation