[Sep-2024] Verified Google Professional-Cloud-Architect Bundle Real Exam Dumps PDF [Q138-Q156]

4/5 - (1 vote)

[Sep-2024] Verified Google Professional-Cloud-Architect Bundle Real Exam Dumps PDF

Professional-Cloud-Architect Dumps PDF New [2024] Ultimate Study Guide

Google Professional-Cloud-Architect certification is a valuable certification for professionals who work with GCP. Google Certified Professional – Cloud Architect (GCP) certification is designed to test the candidate’s knowledge and skills in designing, developing, and managing secure, scalable, and reliable solutions on the GCP. Google Certified Professional – Cloud Architect (GCP) certification is highly regarded in the industry and is recognized by many organizations. Passing the certification exam is a testament to the candidate’s expertise in GCP and their ability to design and implement solutions that meet the needs of organizations.

QUESTION 138
Your company has sensitive data in Cloud Storage buckets. Data analysts have Identity Access Management (IAM) permissions to read the buckets. You want to prevent data analysts from retrieving the data in the buckets from outside the office network. What should you do?

1. Create a VPC Service Controls perimeter that includes the projects with the buckets.
2. Create an access level with the CIDR of the office network.

1. Create a firewall rule for all instances in the Virtual Private Cloud (VPC) network for source range.
2. Use the Classless Inter-domain Routing (CIDR) of the office network.

1. Create a Cloud Function to remove IAM permissions from the buckets, and another Cloud Function to add IAM permissions to the buckets.
2. Schedule the Cloud Functions with Cloud Scheduler to add permissions at the start of business and remove permissions at the end of business.

1. Create a Cloud VPN to the office network.
2. Configure Private Google Access for on-premises hosts.

QUESTION 139
You are deploying an application on App Engine that needs to integrate with an on-premises database. For security purposes, your on-premises database must not be accessible through the public Internet. What should you do?

Deploy your application on App Engine standard environment and use App Engine firewall rules to limit access to the open on-premises database.

Deploy your application on App Engine standard environment and use Cloud VPN to limit access to the onpremises database.

Deploy your application on App Engine flexible environment and use App Engine firewall rules to limit access to the on-premises database.

Deploy your application on App Engine flexible environment and use Cloud VPN to limit access to the onpremises database.

QUESTION 140
You are designing a large distributed application with 30 microservices. Each of your distributed microservices needs to connect to a database back-end. You want to store the credentials securely. Where should you store the credentials?

In the source code

In an environment variable

In a secret management system

In a config file that has restricted access through ACLs

QUESTION 141
For this question, refer to the Mountkirk Games case study. Which managed storage option meets Mountkirk’s technical requirement for storing game activity in a time series database service?

Cloud Bigtable

Cloud Spanner

BigQuery

Cloud Datastore

QUESTION 142
Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?

Use the Admin Directory API to authenticate against the Active Directory domain controller.

Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities and configure SAML SSO.

Use Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain controller as an identity provider.

Use Compute Engine to create an Active Directory (AD) domain controller that is a replica of the onpremises AD domain controller using Google Cloud Directory Sync.

QUESTION 143
For this question, refer to the TerramEarth case study.
The TerramEarth development team wants to create an API to meet the company’s business requirements. You want the development team to focus their development effort on business value versus creating a custom framework. Which method should they use?

Use Google App Engine with Google Cloud Endpoints. Focus on an API for dealers and partners.

Use Google App Engine with a JAX-RS Jersey Java-based framework. Focus on an API for the public.

Use Google App Engine with the Swagger (open API Specification) framework. Focus on an API for the public.

Use Google Container Engine with a Django Python container. Focus on an API for the public.

Use Google Container Engine with a Tomcat container with the Swagger (Open API Specification) framework. Focus on an API for dealers and partners.

QUESTION 144
For this question, refer to the EHR Healthcare case study. You are responsible for ensuring that EHR’s use of Google Cloud will pass an upcoming privacy compliance audit. What should you do? (Choose two.)

Verify EHR’s product usage against the list of compliant products on the Google Cloud compliance page.

Advise EHR to execute a Business Associate Agreement (BAA) with Google Cloud.

Use Firebase Authentication for EHR’s user facing applications.

Implement Prometheus to detect and prevent security breaches on EHR’s web-based applications.

Use GKE private clusters for all Kubernetes workloads.

QUESTION 145
You are implementing Firestore for Mountkirk Games. Mountkirk Games wants to give a new game programmatic access to a legacy game’s Firestore database. Access should be as restricted as possible. What should you do?

Create a service account (SA) in the legacy game’s Google Cloud project, add this SA in the new game’s IAM page, and then give it the Firebase Admin role in both projects

Create a service account (SA) in the legacy game’s Google Cloud project, add a second SA in the new game’s IAM page, and then give the Organization Admin role to both SAs

Create a service account (SA) in the legacy game’s Google Cloud project, give it the Firebase Admin role, and then migrate the new game to the legacy game’s project.

Create a service account (SA) in the lgacy game’s Google Cloud project, give the SA the Organization Admin rule and then give it the Firebase Admin role in both projects

QUESTION 146
You have an application that makes HTTP requests to Cloud Storage. Occasionally the requests fail with HTTP status codes of 5xx and 429.
How should you handle these types of errors?

Use gRPC instead of HTTP for better performance.

Implement retry logic using a truncated exponential backoff strategy.

Make sure the Cloud Storage bucket is multi-regional for geo-redundancy.

Monitor https://status.cloud.google.com/feed.atom and only make requests if Cloud Storage is not reporting an incident.

QUESTION 147
Your company is running its application workloads on Compute Engine. The applications have been deployed in production, acceptance, and development environments. The production environment is business-critical and is used 24/7, while the acceptance and development environments are only critical during office hours.
Your CFO has asked you to optimize these environments to achieve cost savings during idle times. What should you do?

Create a shell script that uses the gcloud command to change the machine type of the development and acceptance instances to a smaller machine type outside of office hours. Schedule the shell script on one of the production instances to automate the task.

Use Cloud Scheduler to trigger a Cloud Function that will stop the development and acceptance environments after office hours and start them just before office hours.

Deploy the development and acceptance applications on a managed instance group and enable autoscaling.

Use regular Compute Engine instances for the production environment, and use preemptible VMs for the acceptance and development environments.

QUESTION 148
For this question, refer to the JencoMart case study.
JencoMart wants to move their User Profiles database to Google Cloud Platform. Which Google Database should they use?

Cloud Spanner

Google BigQuery

Google Cloud SQL

Google Cloud Datastore

QUESTION 149
You need to reduce the number of unplanned rollbacks of erroneous production deployments in your company’s web hosting platform. Improvement to the QA/Test processes accomplished an 80% reduction. Which additional two approaches can you take to further reduce the rollbacks? Choose 2 answers

Introduce a green-blue deployment model.

Replace the QA environment with canary releases.

Fragment the monolithic platform into microservices.

Reduce the platform’s dependency on relational database systems.

Replace the platform’s relational database systems with a NoSQL database.

QUESTION 150
You are creating an App Engine application that uses Cloud Datastore as its persistence layer. You need to retrieve several root entities for which you have the identifiers. You want to minimize the overhead in operations performed by Cloud Datastore. What should you do?

Create the Key object for each Entity and run a batch get operation

Create the Key object for each Entity and run multiple get operations, one operation for each entity

Use the identifiers to create a query filter and run a batch query operation

Use the identifiers to create a query filter and run multiple query operations, one operation for each entity

QUESTION 151
You want your Google Kubernetes Engine cluster to automatically add or remove nodes based on CPUload.
What should you do?

Configure a HorizontalPodAutoscaler with a target CPU usage. Enable the Cluster Autoscaler from the GCP Console.

Configure a HorizontalPodAutoscaler with a target CPU usage. Enable autoscaling on the managed instance group for the cluster using the gcloud command.

Create a deployment and set the maxUnavailable and maxSurge properties. Enable the Cluster Autoscaler using the gcloud command.

Create a deployment and set the maxUnavailable and maxSurge properties. Enable autoscaling on the cluster managed instance group from the GCP Console.

QUESTION 152
You want to enable your running Google Kubernetes Engine cluster to scale as demand for your application changes.
What should you do?

Add additional nodes to your Kubernetes Engine cluster using the following command:
gcloud container clusters resize
CLUSTER_Name – -size 10

Add a tag to the instances in the cluster with the following command:
gcloud compute instances add-tags
INSTANCE – -tags enable-
autoscaling max-nodes-10

Update the existing Kubernetes Engine cluster with the following command:
gcloud alpha container clusters
update mycluster – -enable-
autoscaling – -min-nodes=1 – -max-nodes=10

Create a new Kubernetes Engine cluster with the following command:
gcloud alpha container clusters
create mycluster – -enable-
autoscaling – -min-nodes=1 – -max-nodes=10
and redeploy your application

QUESTION 153
You have created several preemptible Linux virtual machine instances using Google Compute Engine. You want to properly shut down your application before the virtual machines are preempted. What should you do?

Create a shutdown script named k99.shutdown in the /etc/rc.6.d/ directory.

Create a shutdown script registered as a xinetd service in Linux and configure a Stackdnver endpoint check to call the service.

Create a shutdown script and use it as the value for a new metadata entry with the key shutdown-script in the Cloud Platform Console when you create the new virtual machine instance.

Create a shutdown script, registered as a xinetd service in Linux, and use the gcloud compute instances add-metadata command to specify the service URL as the value for a new metadata entry with the key shutdown-script-url

QUESTION 154
You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address. You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly. What should you do?

Ensure that a firewall rule exists to allow source traffic on HTTP/HTTPS to reach the load balancer.

Assign a public IP to each instance and configure a firewall rule to allow the load balancer to reach the instance public IP.

Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.

Create a tag on each instance with the name of the load balancer. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.

QUESTION 155
For this question, refer to the EHR Healthcare case study. You are responsible for designing the Google Cloud network architecture for Google Kubernetes Engine. You want to follow Google best practices. Considering the EHR Healthcare business and technical requirements, what should you do to reduce the attack surface?

Use a private cluster with a private endpoint with master authorized networks configured.

Use a public cluster with firewall rules and Virtual Private Cloud (VPC) routes.

Use a private cluster with a public endpoint with master authorized networks configured.

Use a public cluster with master authorized networks enabled and firewall rules.

QUESTION 156
You are managing an application deployed on Cloud Run for Anthos, and you need to define a strategy for deploying new versions of the application. You want to evaluate the new code with a subset of production traffic to decide whether to proceed with the rollout. What should you do?

Deploy a new revision to Cloud Run with the new version. Configure traffic percentage between revisions.

Deploy a new service to Cloud Run with the new version. Add a Cloud Load Balancing instance in front of both services.

In the Google Cloud Console page for Cloud Run, set up continuous deployment using Cloud Build for the development branch. As part of the Cloud Build trigger, configure the substitution variable TRAFFIC_PERCENTAGE with the percentage of traffic you want directed to a new version.

In the Google Cloud Console, configure Traffic Director with a new Service that points to the new version of the application on Cloud Run. Configure Traffic Director to send a small percentage of traffic to the new version of the application.