Quiz
Google Cloud Professional Cloud Architect PT 16
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (21)
1If you have configured Stackdriver Logging to export logs to BigQuery, but logs entries are not getting exported to BigQuery, what is the most likely cause?
- AA. The Cloud Data Transfer Service has not been enabled.
- BB. There isn't a firewall rule allowing traffic between Stackdriver and BigQuery.
- CC. Stackdriver Logging does not have permission to write to the BigQuery dataset.
- DD. The size of the Stackdriver log entries being exported exceeds the maximum capacity of the BigQuery dataset.
2You can use Stackdriver to monitor virtual machines on which cloud platforms?
- AA. Google Cloud Platform, Microsoft Azure
- BB. Google Cloud Platform
- CC. Google Cloud Platform, Microsoft Azure, Amazon Web Services
- DD. Google Cloud Platform, Amazon Web Services
3To minimize the risk of someone changing your log files to hide their activities, which of the following principles would help? (Select 3 answers.)
- AA. Restrict usage of the owner role for projects and log buckets.
- BB. Require two people to inspect the logs.
- CC. Implement object versioning on the log-buckets.
- DD. Encrypt the logs using Cloud KMS.
4If network traffic between one Google Compute Engine instance and another instance is being dropped, what is the most likely cause?
- AA. The instances are on a network with low bandwidth.
- BB. The TCP keep-alive setting is too short.
- CC. The instances are on a default network with no additional firewall rules.
- DD. A firewall rule was deleted.
5Which of the following practices can help you develop more secure software? (Select 3 answers.)
- AA. Penetration tests
- BB. Integrating static code analysis tools into your CI/CD pipeline
- CC. Encrypting your source code
- DD. Peer review of code
6Which two places hold information you can use to monitor the effects of a Cloud Storage lifecycle policy on specific objects? (Select 2 answers.)
- AA. Cloud Storage Lifecycle Monitoring
- BB. Expiration time metadata
- CC. Access logs
- DD. Lifecycle config file
7If you have object versioning enabled on a multi-regional bucket, what will the following lifecycle config file do?
"lifecycle":
"rule": [
"action": "type": "Delete" ,
"condition":
"age": 30,
"isLive": true ,
"action":
"type": "SetStorageClass",
"storageClass": "COLDLINE" ,
"condition":
"age": 365,
"matchesStorageClass": ["MULTI_REGIONAL"] ]- AA. Archive objects older than 30 days (the second rule doesn't do anything)
- BB. Delete objects older than 30 days (the second rule doesn't do anything)
- CC. Archive objects older than 30 days and move objects to Coldline Storage after 365 days
- DD. Delete objects older than 30 days and move objects to Coldline Storage after 365 days
8Which of the following statements about Stackdriver Trace are true? (Select 2 answers.)
- AA. Stackdriver Trace tracks the performance of the virtual machines running the application.
- BB. Stackdriver Trace tracks the latency of incoming requests.
- CC. Applications in App Engine automatically submit traces to Stackdriver Trace. Applications outside of App Engine need to use the Trace SDK or Trace API.
- DD. To make an application work with Stackdriver Trace, you need to add instrumentation code using the Trace SDK or Trace API, even if the application is in App
9For this question, refer to the TerramEarth case study. You start to build a new application that uses a few Cloud Functions for the backend. One use case requires a Cloud Function func_display to invoke another Cloud Function func_query. You want func_query only to accept invocations from func_display. You also want to follow Google's recommended best practices. What should you do?
- AA. Create a token and pass it in as an environment variable to func_display. When invoking func_query, include the token in the request. Pass the same token to func_query and reject the invocation if the tokens are different.
- BB. Make func_query 'Require authentication.' Create a unique service account and associate it to func_display. Grant the service account invoker role for func_query. Create an id token in func_display and include the token to the request when invoking func_query.
- CC. Make func_query 'Require authentication' and only accept internal traffic. Create those two functions in the same VPC. Create an ingress firewall rule for func_query to only allow traffic from func_display.
- DD. Create those two functions in the same project and VPC. Make func_query only accept internal traffic. Create an ingress firewall for func_query to only allow traffic from func_display. Also, make sure both functions use the same service account.
10For this question, refer to the TerramEarth case study. You have broken down a legacy monolithic application into a few containerized RESTful microservices.
You want to run those microservices on Cloud Run. You also want to make sure the services are highly available with low latency to your customers. What should you do?- AA. Deploy Cloud Run services to multiple availability zones. Create Cloud Endpoints that point to the services. Create a global HTTP(S) Load Balancing instance and attach the Cloud Endpoints to its backend.
- BB. Deploy Cloud Run services to multiple regions. Create serverless network endpoint groups pointing to the services. Add the serverless NEGs to a backend service that is used by a global HTTP(S) Load Balancing instance.
- CC. Deploy Cloud Run services to multiple regions. In Cloud DNS, create a latency-based DNS name that points to the services.
- DD. Deploy Cloud Run services to multiple availability zones. Create a TCP/IP global load balancer. Add the Cloud Run Endpoints to its backend service.
11For this question, refer to the TerramEarth case study. You are migrating a Linux-based application from your private data center to Google Cloud. The TerramEarth security team sent you several recent Linux vulnerabilities published by Common Vulnerabilities and Exposures (CVE). You need assistance in understanding how these vulnerabilities could impact your migration.
What should you do? (Choose two.)- AA. Open a support case regarding the CVE and chat with the support engineer.
- BB. Read the CVEs from the Google Cloud Status Dashboard to understand the impact.
- CC. Read the CVEs from the Google Cloud Platform Security Bulletins to understand the impact.
- DD. Post a question regarding the CVE in Stack Overflow to get an explanation.
- EE. Post a question regarding the CVE in a Google Cloud discussion group to get an explanation.
12For this question, refer to the TerramEarth case study. TerramEarth has a legacy web application that you cannot migrate to cloud. However, you still want to build a cloud-native way to monitor the application. If the application goes down, you want the URL to point to a "Site is unavailable" page as soon as possible. You also want your Ops team to receive a notification for the issue. You need to build a reliable solution for minimum cost. What should you do?
- AA. Create a scheduled job in Cloud Run to invoke a container every minute. The container will check the application URL. If the application is down, switch the URL to the "Site is unavailable" page, and notify the Ops team.
- BB. Create a cron job on a Compute Engine VM that runs every minute. The cron job invokes a Python program to check the application URL. If the application is down, switch the URL to the "Site is unavailable" page, and notify the Ops team.
- CC. Create a Cloud Monitoring uptime check to validate the application URL. If it fails, put a message in a Pub/Sub queue that triggers a Cloud Function to switch the URL to the "Site is unavailable" page, and notify the Ops team.
- DD. Use Cloud Error Reporting to check the application URL. If the application is down, switch the URL to the "Site is unavailable" page, and notify the Ops team.
13For this question, refer to the TerramEarth case study. You are building a microservice-based application for TerramEarth. The application is based on Docker containers. You want to follow Google-recommended practices to build the application continuously and store the build artifacts. What should you do?
- AA. Configure a trigger in Cloud Build for new source changes. Invoke Cloud Build to build container images for each microservice, and tag them using the code commit hash. Push the images to the Container Registry.
- BB. Configure a trigger in Cloud Build for new source changes. The trigger invokes build jobs and build container images for the microservices. Tag the images with a version number, and push them to Cloud Storage.
- CC. Create a Scheduler job to check the repo every minute. For any new change, invoke Cloud Build to build container images for the microservices. Tag the images using the current timestamp, and push them to the Container Registry.
- DD. Configure a trigger in Cloud Build for new source changes. Invoke Cloud Build to build one container image, and tag the image with the label 'latest.' Push the image to the Container Registry
14For this question, refer to the TerramEarth case study. TerramEarth has about 1 petabyte (PB) of vehicle testing data in a private data center. You want to move the data to Cloud Storage for your machine learning team.
Currently, a 1-Gbps interconnect link is available for you. The machine learning team wants to start using the data in a month. What should you do?- AA. Request Transfer Appliances from Google Cloud, export the data to appliances, and return the appliances to Google Cloud.
- BB. Configure the Storage Transfer service from Google Cloud to send the data from your data center to Cloud Storage.
- CC. Make sure there are no other users consuming the 1Gbps link, and use multi-thread transfer to upload the data to Cloud Storage.
- DD. Export files to an encrypted USB device, send the device to Google Cloud, and request an import of the data to Cloud Storage
15The operations team needs to remotely manage the VMs, build and push Docker containers, and manage Google Cloud Storage objects.
What can they do?- AA.Grant the operations engineer access to use Google Cloud Shell.
- BB.Configure a VPN connection to GCP to allow SSH access to the cloud VMs.
- CC.Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.
- DD.Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.
16The database files are compressed tar files stored in their current data center.
How should he proceed?- AA.Create a cron script using gsutil to copy the files to a Coldline Storage bucket.
- BB.Create a cron script using gsutil to copy the files to a Regional Storage bucket.
- CC.Create a Cloud Storage Transfer Service Job to copy the files to a Coldline Storage bucket.
- DD.Create a Cloud Storage Transfer Service job to copy the files to a Regional Storage bucket.
17The customer has exclusive control over who may view these images.
Customers should be able to upload images with minimal latency and also be shown their images quickly on the main application page when they log in.
Which configuration should Dress4Win use?- AA.Store image files in a Google Cloud Storage bucket. Use Google Cloud Datastore to maintain metadata that maps each customer's ID and their image files.
- BB.Store image files in a Google Cloud Storage bucket. Add custom metadata to the uploaded images in Cloud Storage that contains the customer's unique ID.
- CC.Use a distributed file system to store customers' images. As storage needs increase, add more persistent disks and/or nodes. Assign each customer a unique ID, which sets each file's owner attribute, ensuring privacy of images.
- DD.Use a distributed file system to store customers' images. As storage needs increase, add more persistent disks and/or nodes. Use a Google Cloud SQL database to maintain metadata that maps each customer's ID to their image files.
18They want to ensure that the move to the cloud does not introduce any new bugs.
Which additional testing methods should the developers employ to prevent an outage?- AA.They should enable Google Stackdriver Debugger on the application code to show errors in the code.
- BB.They should add additional unit tests and production scale load tests on their cloud staging environment.
- CC.They should run the end-to-end tests in the cloud staging environment to determine if the code is working as intended.
- DD.They should add canary tests so developers can measure how much of an impact the new release causes to latency.
19Cost optimization is your top priority.
Which cloud services should you choose?- AA.Google Cloud Storage Coldline to store the data, and gsutil to access the data.
- BB.Google Cloud Storage Nearline to store the data, and gsutil to access the data.
- CC.Google Bigtabte with US or EU as location to store the data, and gcloud to access the data.
- DD.BigQuery to store the data, and a web server cluster in a managed instance group to access the data. Google Cloud SQL mirrored across two distinct regions to store the data, and a Redis cluster in a managed instance group to access the data.
20As of a future evaluation and optimizing for performance in the cloud, Dresss4Win wants to distribute its system architecture to multiple locations when Google cloud platform.
Which approach should they use?- AA.Use regional managed instance groups and a global load balancer to increase performance because the regional managed instance group can grow instances in each region separately based on traffic.
- BB.Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines managed by your operations team.
- CC.Use regional managed instance groups and a global load balancer to increase reliability by providing automatic failover between zones in different regions.
- DD.Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines as part of a separate managed instance groups.
21The CIO has set the target of migrating production infrastructure to the cloud within
the next 6 months. How will you configure the solution to scale for this growth without making major application changes and still maximize the ROI?- AA.Migrate the web application layer to App Engine, and MySQL to Cloud Datastore, and NAS to Cloud Storage. Deploy RabbitMQ, and deploy Hadoop servers using Deployment Manager.
- BB.Migrate RabbitMQ to Cloud Pub/Sub, Hadoop to BigQuery, and NAS to Compute Engine with Persistent Disk storage. Deploy Tomcat, and deploy Nginx using Deployment Manager.
- CC.Implement managed instance groups for Tomcat and Nginx. Migrate MySQL to Cloud SQL, RabbitMQ to Cloud Pub/Sub, Hadoop to Cloud Dataproc, and NAS to Compute Engine with Persistent Disk storage.
- DD.Implement managed instance groups for the Tomcat and Nginx. Migrate MySQL to Cloud SQL, RabbitMQ to Cloud Pub/Sub, Hadoop to Cloud Dataproc, and NAS to Cloud Storage.
Information
- Description
- Curso Interno de Empresa Google Cloud Professional Cloud Architect Quiz on Google Cloud Professional Cloud Architect PT 16, created by Emmanuel Jimenez on 26/04/2024.
- Author
- Emmanuel Jimenez
- Language
- English
- Views
- 2
- Tags
- Rating
- No ratings yet Rate this quiz