Pre-Winter Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Pass the Google Google Cloud Certified Professional-Cloud-Architect Questions and answers with CertsForce

Viewing page 3 out of 7 pages
Viewing questions 21-30 out of questions
Questions # 21:

Your development teams release new versions of games running on Google Kubernetes Engine (GKE) daily.

You want to create service level indicators (SLIs) to evaluate the quality of the new versions from the user’s

perspective. What should you do?

Options:

A.

Create CPU Utilization and Request Latency as service level indicators.


B.

Create GKE CPU Utilization and Memory Utilization as service level indicators.


C.

Create Request Latency and Error Rate as service level indicators.


D.

Create Server Uptime and Error Rate as service level indicators.


Expert Solution
Questions # 22:

You are implementing Firestore for Mountkirk Games. Mountkirk Games wants to give a new game

programmatic access to a legacy game ' s Firestore database. Access should be as restricted as possible. What

should you do?

Options:

A.

Create a service account (SA) in the legacy game ' s Google Cloud project, add this SA in the new game ' s IAM page, and then give it the Firebase Admin role in both projects


B.

Create a service account (SA) in the legacy game ' s Google Cloud project, add a second SA in the new game ' s IAM page, and then give the Organization Admin role to both SAs


C.

Create a service account (SA) in the legacy game ' s Google Cloud project, give it the Firebase Admin role, and then migrate the new game to the legacy game ' s project.


D.

Create a service account (SA) in the lgacy game ' s Google Cloud project, give the SA the Organization Admin rule and then give it the Firebase Admin role in both projects


Expert Solution
Questions # 23:

For this question, refer to the Dress4Win case study. Considering the given business requirements, how would you automate the deployment of web and transactional data layers?

Options:

A.

Deploy Nginx and Tomcat using Cloud Deployment Manager to Compute Engine. Deploy a Cloud SQL server to replace MySQL. Deploy Jenkins using Cloud Deployment Manager.


B.

Deploy Nginx and Tomcat using Cloud Launcher. Deploy a MySQL server using Cloud Launcher. Deploy Jenkins to Compute Engine using Cloud Deployment Manager scripts.


C.

Migrate Nginx and Tomcat to App Engine. Deploy a Cloud Datastore server to replace the MySQL server in a high-availability configuration. Deploy Jenkins to Compute Engine using Cloud Launcher.


D.

Migrate Nginx and Tomcat to App Engine. Deploy a MySQL server using Cloud Launcher. Deploy Jenkins to Compute Engine using Cloud Launcher.


Expert Solution
Questions # 24:

For this question, refer to the Dress4Win case study. You are responsible for the security of data stored in

Cloud Storage for your company, Dress4Win. You have already created a set of Google Groups and assigned the appropriate users to those groups. You should use Google best practices and implement the simplest design to meet the requirements.

Considering Dress4Win’s business and technical requirements, what should you do?

Options:

A.

Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.

Encrypt data with a customer-supplied encryption key when storing files in Cloud Storage.


B.

Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.

Enable default storage encryption before storing files in Cloud Storage.


C.

Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements.

Utilize Google’s default encryption at rest when storing files in Cloud Storage.


D.

Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Ensure that the default Cloud KMS key is set before storing files in Cloud Storage.


Expert Solution
Questions # 25:

For this question, refer to the JencoMart case study.

JencoMart has built a version of their application on Google Cloud Platform that serves traffic to Asia. You want to measure success against their business and technical goals. Which metrics should you track?

Options:

A.

Error rates for requests from Asia


B.

Latency difference between US and Asia


C.

Total visits, error rates, and latency from Asia


D.

Total visits and average latency for users in Asia


E.

The number of character sets present in the database


Expert Solution
Questions # 26:

For this question, refer to the JencoMart case study.

The migration of JencoMart’s application to Google Cloud Platform (GCP) is progressing too slowly. The infrastructure is shown in the diagram. You want to maximize throughput. What are three potential bottlenecks? (Choose 3 answers.)

Options:

A.

A single VPN tunnel, which limits throughput


B.

A tier of Google Cloud Storage that is not suited for this task


C.

A copy command that is not suited to operate over long distances


D.

Fewer virtual machines (VMs) in GCP than on-premises machines


E.

A separate storage layer outside the VMs, which is not suited for this task


F.

Complicated internet connectivity between the on-premises infrastructure and GCP


Expert Solution
Questions # 27:

Your web application uses Google Kubernetes Engine to manage several workloads. One workload requires a consistent set of hostnames even after pod scaling and relaunches.

Which feature of Kubernetes should you use to accomplish this?

Options:

A.

StatefulSets


B.

Role-based access control


C.

Container environment variables


D.

Persistent Volumes


Expert Solution
Questions # 28:

You have found an error in your App Engine application caused by missing Cloud Datastore indexes. You have created a YAML file with the required indexes and want to deploy these new indexes to Cloud Datastore.

What should you do?

Options:

A.

Point gcloud datastore create-indexes to your configuration file


B.

Upload the configuration file the App Engine’s default Cloud Storage bucket, and have App Engine detect the new indexes


C.

In the GCP Console, use Datastore Admin to delete the current indexes and upload the new configuration file


D.

Create an HTTP request to the built-in python module to send the index configuration file to your application


Expert Solution
Questions # 29:

Your company is building a new architecture to support its data-centric business focus. You are responsible for setting up the network. Your company’s mobile and web-facing applications will be deployed on-premises, and all data analysis will be conducted in GCP. The plan is to process and load 7 years of archived .csv files totaling 900 TB of data and then continue loading 10 TB of data daily. You currently have an existing 100-MB internet connection.

What actions will meet your company’s needs?

Options:

A.

Compress and upload both achieved files and files uploaded daily using the qsutil –m option.


B.

Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer

archived data to Cloud Storage. Establish a connection with Google using a Dedicated Interconnect or

Direct Peering connection and use it to upload files daily.


C.

Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer

archived data to Cloud Storage. Establish one Cloud VPN Tunnel to VPC networks over the public internet, and compares and upload files daily using the gsutil –m option.


D.

Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily.


Expert Solution
Questions # 30:

Your company has just recently activated Cloud Identity to manage users. The Google Cloud Organization has been configured as wed. The security learn needs to secure protects that will be part of the Organization. They want to prohibit IAM users outside the domain from gaining permissions from now on. What should they do?

Options:

A.

Configure an organization policy to restrict identities by domain


B.

Configure an organization policy to block creation of service accounts


C.

Configure Cloud Scheduler o trigger a Cloud Function every hour that removes all users that don ' t belong to the Cloud identity domain from all projects.


D.

Create a technical user (e g . crawler@yourdomain com), and give it the protect owner rote at root organization level Write a bash script that

• Lists all me IAM rules of all projects within the organization

• Deletes all users that do not belong to the company domain

Create a Compute Engine instance m a project within the Organization and configure gcloud to be executed with technical user credentials Configure a cron j


Expert Solution
Viewing page 3 out of 7 pages
Viewing questions 21-30 out of questions