Quiz
Google Cloud Professional Cloud Architect PT 15
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (21)
1Which of the following is not a best practice for mitigating Denial of Service attacks on your Google Cloud infrastructure?
- AA. Block SYN floods using Cloud Router
- BB. Isolate your internal traffic from the external world
- CC. Scale to absorb the attack
- DD. Reduce the attack surface for your GCE deployment
2Which is the fastest instance storage option that will still be available when an instance is stopped?
- AA. Local SSD
- BB. Standard Persistent Disk
- CC. SSD Persistent Disk
- DD. RAM disk
3Which of these statements about Microsoft licenses is true?
- AA. You can migrate your existing Microsoft application licenses to Compute Engine instances, but not your Microsoft Windows licenses.
- BB. You can migrate your existing Microsoft Windows and Microsoft application licenses to Compute Engine instances.
- CC. You cannot migrate your existing Microsoft Windows or Microsoft application licenses to Compute Engine instances.
- DD. You can migrate your existing Microsoft Windows licenses to Compute Engine instances, but not your Microsoft application licenses.
4Which database services support standard SQL queries?
- AA. Cloud Bigtable and Cloud SQL
- BB. Cloud Spanner and Cloud SQL
- CC. Cloud SQL and Cloud Datastore
- DD. Cloud SQL
5Which statement about IP addresses is false?
- AA. You are charged for a static external IP address for every hour it is in use.
- BB. You are not charged for ephemeral IP addresses.
- CC. Google Cloud Engine supports only IPv4 addresses, not IPv6.
- DD. You are charged for a static external IP address when it is assigned but unused
6Which Google Cloud Platform service requires the least management because it takes care of the underlying infrastructure for you?
- AA. Container Engine
- BB. Cloud Engine
- CC. App Engine
- DD. Docker containers running on Cloud Engine
7To ensure that your application will handle the load even if an entire zone fails, what should you do?
- AA. Don't select the "Multizone" option when creating your managed instance group.
- BB. Spread your managed instance group over two zones and overprovision by 100%.
- CC. Create a regional unmanaged instance group and spread your instances across multiple zones.
- DD. Overprovision your regional managed instance group by at least 50%.
8If you do not grant a user named Bob permission to access a Cloud Storage bucket, but then use an ACL to grant access to an object inside that bucket to Bob, what will happen?
- AA. Bob will be able to access all of the objects inside the bucket because he was granted access to at least one object in the bucket.
- BB. Bob will be able to access the object because bucket and object ACLs are independent of each other.
- CC. Bob will not be able to access the object because he does not have access to the bucket.
- DD. It is not possible to grant access to an object when it is inside a bucket for which a user does not have access
9To set up a virtual private network between your office network and Google Cloud Platform and have the routes automatically updated when the network topology changes, what is the minimal number of each type of component you need to implement?
- AA. 2 Cloud VPN Gateways and 1 Peer Gateway
- BB. 1 Cloud VPN Gateway, 1 Peer Gateway, and 1 Cloud Router
- CC. 2 Peer Gateways and 1 Cloud Router
- DD. 2 Cloud VPN Gateways and 1 Cloud Router
10Which of the following statements about encryption on GCP is not true?
- AA. Google Cloud Platform encrypts customer data stored at rest by default.
- BB. Each encryption key is itself encrypted with a set of master keys.
- CC. If you want to manage your own encryption keys for data on Google Cloud Storage, the only option is Customer-Managed Encryption Keys (CMEK) using Cloud KMS.
- DD. Data in Google Cloud Platform is broken into subfile chunks for storage, and each chunk is encrypted at the storage level with an individual encryption key.
11Which database service requires that you configure a failover replica to make it highly available?
- AA. Cloud Spanner
- BB. Cloud SQL
- CC. BigQuery
- DD. Cloud Datastore
12Which of these is not a principle you should apply when setting roles and permissions?
- AA. Whenever possible, assign roles to groups instead of to individuals.
- BB. Grant users the appropriate permissions to facilitate least privilege
- CC. Whenever possible, assign primitive roles rather than predefined roles.
- DD. Audit all policy changes by checking the Cloud Audit Logs.
13Which of these is not a recommended method of authenticating an application with a Google Cloud service?
- AA. Use the gcloud and/or gsutil commands.
- BB. Request an OAuth2 access token and use it directly.
- CC. Embed the service account's credentials in the application's source code.
- DD. Use one of the Google Cloud Client Libraries.
14What are two different features that fully isolate groups of VM instances?
- AA. Firewall rules and subnetworks
- BB. Networks and subnetworks
- CC. Subnetworks and projects
- DD. Projects and networks
15Suppose you have a web server that is working properly, but you can't connect to its instance VM over SSH. Which of these troubleshooting methods can you use without disrupting production traffic? (Select 3 answers.)
- AA. Create a snapshot of the disk and use it to create a new disk; then attach the new disk to a new instance
- BB. Use netcat to try to connect to port 22
- CC. Access the serial console output
- DD. Create a startup script to collect information.
16To configure Stackdriver to monitor a web server and let you know if it goes down, what steps do you need to take? (Select 2 answers.)
- AA. Install the Stackdriver Logging Agent on the web server
- BB. Create an alerting policy
- CC. Install the Stackdriver Monitoring Agent on the web server
- DD. Create an uptime check
17Which of these tools can you use to copy data from AWS S3 to Cloud Storage? (Select 2 answers.)
- AA. Cloud Storage Transfer Service
- BB. S3 Storage Transfer Service
- CC. Cloud Storage Console
- DD. gsutil
18What are two of the actions you can take to troubleshoot a virtual machine instance that won't start up at all? (Select 2 answers.)
- AA. Increase the CPU and memory on the instance by changing the machine type.
- BB. Validate that your disk has a valid file system.
- CC. Examine your virtual machine instance's serial port output.
- DD. Connect to your virtual machine instance using SSH
19Which statements about application load testing are true? (Select 2 answers.)
- AA. You should test at the maximum load that you expect to encounter.
- BB. You should test at 50% more than the maximum load that you expect to encounter.
- CC. It is not necessary to test sudden increases in traffic since GCP scales seamlessly.
- DD. Your load tests should include testing sudden increases in traffic.
20Which of these statements about resilience testing are true? (Select 2 answers.)
- AA. In a resilience test, your application should keep running with little or no downtime.
- BB. To test the resilience of an autoscaling instance group, you can terminate a random instance within that group.
- CC. In order for an application to survive instance failures, it should not be stateless.
- DD. Resilience testing is the same as disaster recovery testing.
21Which combination of Stackdriver services will alert you about errors generated by your applications and help you locate the root cause in the code?
- AA. Monitoring, Trace, and Debugger
- BB. Monitoring and Error Reporting
- CC. Debugger and Error Reporting
- DD. Alerts and Debugger
Information
- Description
- Curso Interno de Empresa Google Cloud Professional Cloud Architect Quiz on Google Cloud Professional Cloud Architect PT 15, created by Emmanuel Jimenez on 26/04/2024.
- Author
- Emmanuel Jimenez
- Language
- English
- Views
- 3
- Tags
- Rating
- No ratings yet Rate this quiz