Google Professional-Cloud-Architect Dumps Updated Aug 05, 2022 WIith 262 Questions
View All Professional-Cloud-Architect Actual Free Exam Questions Aug 05, 2022 Updated
NEW QUESTION 143
Your company is forecasting a sharp increase in the number and size of Apache Spark and Hadoop jobs being run on your local datacenter You want to utilize the cloud to help you scale this upcoming demand with the least amount of operations work and code change. Which product should you use?
- A. Google Cloud Dataflow
- B. Google Compute Engine
- C. Google Container Engine
- D. Google Cloud Dataproc
Answer: D
NEW QUESTION 144
Your development teams release new versions of games running on Google Kubernetes Engine (GKE) daily.
You want to create service level indicators (SLIs) to evaluate the quality of the new versions from the user's perspective. What should you do?
- A. Create Request Latency and Error Rate as service level indicators.
- B. Create Server Uptime and Error Rate as service level indicators.
- C. Create CPU Utilization and Request Latency as service level indicators.
- D. Create GKE CPU Utilization and Memory Utilization as service level indicators.
Answer: A
NEW QUESTION 145
Case Study: 6 - TerramEarth
Company Overview
TerramEarth manufactures heavy equipment for the mining and agricultural industries. About
80% of their business is from mining and 20% from agriculture. They currently have over 500 dealers and service centers in 100 countries. Their mission is to build products that make their customers more productive.
Solution Concept
There are 20 million TerramEarth vehicles in operation that collect 120 fields of data per second.
Data is stored locally on the vehicle and can be accessed for analysis when a vehicle is serviced.
The data is downloaded via a maintenance port. This same port can be used to adjust operational parameters, allowing the vehicles to be upgraded in the field with new computing modules.
Approximately 200,000 vehicles are connected to a cellular network, allowing TerramEarth to collect data directly. At a rate of 120 fields of data per second with 22 hours of operation per day, TerramEarth collects a total of about 9 TB/day from these connected vehicles.
Existing Technical Environment
TerramEarth's existing architecture is composed of Linux and Windows-based systems that reside in a single U.S. west coast based data center. These systems gzip CSV files from the field and upload via FTP, and place the data in their data warehouse. Because this process takes time, aggregated reports are based on data that is 3 weeks old.
With this data, TerramEarth has been able to preemptively stock replacement parts and reduce unplanned downtime of their vehicles by 60%. However, because the data is stale, some customers are without their vehicles for up to 4 weeks while they wait for replacement parts.
Business Requirements
Decrease unplanned vehicle downtime to less than 1 week.
Support the dealer network with more data on how their customers use their equipment to better
position new products and services
Have the ability to partner with different companies - especially with seed and fertilizer suppliers
in the fast-growing agricultural business - to create compelling joint offerings for their customers.
Technical Requirements
Expand beyond a single datacenter to decrease latency to the American Midwest and east
coast.
Create a backup strategy.
Increase security of data transfer from equipment to the datacenter.
Improve data in the data warehouse.
Use customer and equipment data to anticipate customer needs.
Application 1: Data ingest
A custom Python application reads uploaded datafiles from a single server, writes to the data warehouse.
Compute:
Windows Server 2008 R2
- 16 CPUs
- 128 GB of RAM
- 10 TB local HDD storage
Application 2: Reporting
An off the shelf application that business analysts use to run a daily report to see what equipment needs repair. Only 2 analysts of a team of 10 (5 west coast, 5 east coast) can connect to the reporting application at a time.
Compute:
Off the shelf application. License tied to number of physical CPUs
- Windows Server 2008 R2
- 16 CPUs
- 32 GB of RAM
- 500 GB HDD
Data warehouse:
A single PostgreSQL server
- RedHat Linux
- 64 CPUs
- 128 GB of RAM
- 4x 6TB HDD in RAID 0
Executive Statement
Our competitive advantage has always been in the manufacturing process, with our ability to build better vehicles for lower cost than our competitors. However, new products with different approaches are constantly being developed, and I'm concerned that we lack the skills to undergo the next wave of transformations in our industry. My goals are to build our skills while addressing immediate market needs through incremental innovations.
For this question, refer to the TerramEarth case study. A new architecture that writes all incoming data to BigQuery has been introduced. You notice that the data is dirty, and want to ensure data quality on an automated daily basis while managing cost.
What should you do?
- A. Set up a streaming Cloud Dataflow job, receiving data by the ingestion process. Clean the data in a Cloud Dataflow pipeline.
- B. Create a SQL statement on the data in BigQuery, and save it as a view. Run the view daily, and save the result to a new table.
- C. Create a Cloud Function that reads data from BigQuery and cleans it. Trigger it. Trigger the Cloud Function from a Compute Engine instance.
- D. Use Cloud Dataprep and configure the BigQuery tables as the source. Schedule a daily job to clean the data.
Answer: D
NEW QUESTION 146
Your customer runs a web service used by e-commerce sites to offer product recommendations to users. The company has begun experimenting with a machine learning model on Google Cloud Platform to improve the quality of results.
What should the customer do to improve their model's results over time?
- A. Save a history of recommendations and results of the recommendations in BigQuery, to be used as training data.
- B. Build a roadmap to move the machine learning model training from Cloud GPUs to Cloud TPUs, which offer better results.
- C. Monitor Compute Engine announcements for availability of newer CPU architectures, and deploy the model to them as soon as they are available for additional performance.
- D. Export Cloud Machine Learning Engine performance metrics from Stackdriver to BigQuery, to be used to analyze the efficiency of the model.
Answer: A
Explanation:
Reference:
https://cloud.google.com/solutions/building-a-serverless-ml-model
NEW QUESTION 147
You have an application that makes HTTP requests to Cloud Storage. Occasionally the requests fail with HTTP status codes of 5xx and 429.
How should you handle these types of errors?
- A. Make sure the Cloud Storage bucket is multi-regional for geo-redundancy.
- B. Monitor https://status.cloud.google.com/feed.atom and only make requests if Cloud Storage is not reporting
- C. Use gRPC instead of HTTP for better performance.
- D. Implement retry logic using a truncated exponential backoff strategy.
Answer: C
Explanation:
an incident.
Explanation:
Reference https://cloud.google.com/storage/docs/json_api/v1/status-codes
NEW QUESTION 148
For this question, refer to the Dress4Win case study.
You want to ensure Dress4Win's sales and tax records remain available for infrequent viewing by auditors for at least 10 years. Cost optimization is your top priority. Which cloud services should you choose?
- A. Google Cloud Storage Coldline to store the data, and gsutil to access the data.
- B. BigQuery to store the data, and a web server cluster in a managed instance group to access the data.
Google Cloud SQL mirrored across two distinct regions to store the data, and a Redis cluster in a managed instance group to access the data. - C. Google Cloud Storage Nearline to store the data, and gsutil to access the data.
- D. Google Bigtabte with US or EU as location to store the data, and gcloud to access the data.
Answer: A
Explanation:
Explanation
References: https://cloud.google.com/storage/docs/storage-classes
NEW QUESTION 149
For this question, refer to the JencoMart case study.
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources. What Google domain and project structure should you recommend?
- A. Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.
- B. Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.
- C. Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.
- D. Create a single G Suite account to manage users with each stage of each application in its own project.
Answer: B
Explanation:
Note: The principle of least privilege and separation of duties are concepts that, although semantically different, are intrinsically related from the standpoint of security. The intent behind both is to prevent people from having higher privilege levels than they actually need
* Principle of Least Privilege: Users should only have the least amount of privileges required to perform their job and no more. This reduces authorization exploitation by limiting access to resources such as targets, jobs, or monitoring templates for which they are not authorized.
* Separation of Duties: Beyond limiting user privilege level, you also limit user duties, or the specific jobs they can perform. No user should be given responsibility for more than one related function. This limits the ability of a user to perform a malicious action and then cover up that action.
References:
https://cloud.google.com/kms/docs/separation-of-duties
Topic 4, Dress4Win case study
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model.
Company Background
Dress4win's application has grown from a few servers in the founder's garage to several hundred servers and appliances in a colocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster, Dress4win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is considering moving their development and test environments. They are also considering building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location.
* Databases:
* MySQL - user data, inventory, static data
* Redis - metadata, social graph, caching
* Application servers:
* Tomcat - Java micro-services
* Nginx - static content
* Apache Beam - Batch processing
* Storage appliances:
* iSCSI for VM hosts
* Fiber channel SAN - MySQL databases
* NAS - image storage, logs, backups
* Apache Hadoop/Spark servers:
* Data analysis
* Real-time trending calculations
* MQ servers:
* Messaging
* Social notifications
* Events
* Miscellaneous servers:
* Jenkins, monitoring, bastion hosts, security scanners
Business Requirements
* Build a reliable and reproducible environment with scaled parity of production.
* Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
* Improve business agility and speed of innovation through rapid provisioning of new resources.
* Analyze and optimize architecture for performance in the cloud.
* Migrate fully to the cloud if all other requirements are met.
Technical Requirements
* Evaluate and choose an automation framework for provisioning resources in cloud.
* Support failover of the production environment to cloud during an emergency.
* Identify production services that can migrate to cloud to save capacity.
* Use managed services whenever possible.
* Encrypt data on the wire and at rest.
* Support multiple VPN connections between the production data center and cloud environment.
CEO Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a new competitor could use a public cloud platform to offset their up-front investment and freeing them to focus on developing better features.
CTO Statement
We have invested heavily in the current infrastructure, but much of the equipment is approaching the end of its useful life. We are consistently waiting weeks for new gear to be racked before we can start new projects. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
CFO Statement
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years puts a cloud strategy between 30 to 50% lower than our current model.
NEW QUESTION 150
You have an application that makes HTTP requests to Cloud Storage. Occasionally the requests fail with HTTP status codes of 5xx and 429.
How should you handle these types of errors?
- A. Make sure the Cloud Storage bucket is multi-regional for geo-redundancy.
- B. Implement retry logic using a truncated exponential backoff strategy.
- C. Monitor https://status.cloud.google.com/feed.atom and only make requests if Cloud Storage is not reporting an incident.
- D. Use gRPC instead of HTTP for better performance.
Answer: B
Explanation:
Explanation/Reference: https://cloud.google.com/storage/docs/json_api/v1/status-codes
NEW QUESTION 151
TerramEarth plans to connect all 20 million vehicles in the field to the cloud. This increases the volume to 20 million 600 byte records a second for 40 TB an hour.
How should you design the data ingestion?
- A. Vehicles stream data directly to Google BigQuery
- B. Vehicles write data directly to GCS
- C. Vehicles continue to write data using the existing system (FTP)
- D. Vehicles write data directly to Google Cloud Pub/Sub
Answer: A
Explanation:
Streamed data is available for real-time analysis within a few seconds of the first streaming insertion into a table.
Instead of using a job to load data into BigQuery, you can choose to stream your data into BigQuery one record at a time by using the tabledata().insertAll() method. This approach enables querying data without the delay of running a load job.
Reference: https://cloud.google.com/bigquery/streaming-data-into-bigquery
NEW QUESTION 152
Your company captures all web traffic data in Google Analytics 260 and stores it in BigQuery.
Each country has its own dataset. Each dataset has multiple tables. You want analysts from each country to be able to see and query only the data for their respective countries.
How should you configure the access rights?
- A. Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate table with view access with each respective analyst country-group.
- B. Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate tables with view access with each respective analyst country- group.
- C. Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate dataset with view access with each respective analyst country-group.
- D. Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group.
Answer: D
NEW QUESTION 153
Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform. Each tier (web, API, and database) scales independently of the others Network traffic should flow through the web to the API tier and then on to the database tier. Traffic should not flow between the web and the database tier. How should you configure the network?
- A. Add tags to each tier and set up firewall rules to allow the desired traffic flow.
- B. Add tags to each tier and set up routes to allow the desired traffic flow.
- C. Set up software based firewalls on individual VMs.
- D. Add each tier to a different subnetwork.
Answer: A
Explanation:
Google Cloud Platform(GCP) enforces firewall rules through rules and tags. GCP rules and tags can be defined once and used across all regions.
References: https://cloud.google.com/docs/compare/openstack/
https://aws.amazon.com/it/blogs/aws/building-three-tier-architectures-with-security-groups/ Reference:
https://aws.amazon.com/blogs/aws/building-three-tier-architectures-with-security-groups/
NEW QUESTION 154
Your company provides a recommendation engine for retail customers. You are providing retail customers with an API where they can submit a user ID and the API returns a list of recommendations for that user. You are responsible for the API lifecycle and want to ensure stability for your customers in case the API makes backward-incompatible changes. You want to follow Google-recommended practices. What should you do?
- A. Use a versioning strategy for the APIs that adds the suffix "DEPRECATED" to the current API version number on every backward-incompatible change. Use the current version number for the new API.
- B. Create an automated process to generate API documentation, and update the public API documentation as part of the CI/CD process when deploying an update to the API.
- C. Use a versioning strategy for the APIs that increases the version number on every backward-incompatible change.
- D. Create a distribution list of all customers to inform them of an upcoming backward-incompatible change at least one month before replacing the old API with the new API.
Answer: C
Explanation:
https://cloud.google.com/apis/design/versioning
All Google API interfaces must provide a major version number, which is encoded at the end of the protobuf package, and included as the first part of the URI path for REST APIs. If an API introduces a breaking change, such as removing or renaming a field, it must increment its API version number to ensure that existing user code does not suddenly break.
NEW QUESTION 155
You need to set up Microsoft SQL Server on GCP. Management requires that there's no downtime in case of a data center outage in any of the zones within a GCP region. What should you do?
- A. Set up SQL Server Always On Availability Groups using Windows Failover Clustering. Place nodes in different zones.
- B. Configure a Cloud Spanner instance with a regional instance configuration.
- C. Configure a Cloud SQL instance with high availability enabled.
- D. Set up SQL Server on Compute Engine, using Always On Availability Groups using Windows Failover Clustering. Place nodes in different subnets.
Answer: D
Explanation:
Reference: https://cloud.google.com/solutions/sql-server-always-on-compute-engine
NEW QUESTION 156
Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all projects in the organization. You provision the Google Cloud Resource Manager and set up yourself as the org admin.
What Google Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team?
- A. Project owner, network admin
- B. Org viewer, project viewer
- C. Org admin, project browser
- D. Org viewer, project owner
Answer: B
NEW QUESTION 157
For this question, refer to the TerramEarth case study. Considering the technical requirements, how should
you reduce the unplanned vehicle downtime in GCP?
- A. Use Cloud Dataproc Hive as the data warehouse. Directly stream data into prtitioned Hive tables. Use
Pig scripts to analyze data. - B. Use Cloud Dataproc Hive as the data warehouse. Upload gzip files to a MultiRegional Cloud Storage
bucket. Upload this data into BigQuery using gcloud. Use Google data Studio for analysis and
reporting. - C. Use BigQuery as the data warehouse. Connect all vehicles to the network and upload gzip files to a
Multi-Regional Cloud Storage bucket using gcloud. Use Google Data Studio for analysis and reporting. - D. Use BigQuery as the data warehouse. Connect all vehicles to the network and stream data into
BigQuery using Cloud Pub/Sub and Cloud Dataflow. Use Google Data Studio for analysis and
reporting.
Answer: D
NEW QUESTION 158
You have an application deployed on Kubernetes Engine using a Deployment named echo- deployment. The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application. What should you do?
- A. Use the rolling update functionality of the Instance Group behind the Kubernetes cluster
- B. Use kubectl set image deployment/echo-deployment <new-image>
- C. Update the service yaml file which the new container image. Use kubectl delete service/ echo- service and kubectl create <yaml-file>
- D. Update the deployment yaml file with the new container image. Use kubectl delete deployment/echo-deployment and kubectl create <yaml-file>
Answer: A
NEW QUESTION 159
Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all projects in the organization. You provision the Google Cloud Resource Manager and set up yourself as the org admin. What Google Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team'?
- A. Project owner, network admin
- B. Org viewer, project viewer
- C. Org admin, project browser
- D. Org viewer, project owner
Answer: B
NEW QUESTION 160
You are deploying a PHP App Engine Standard service with SQL as the backend. You want to minimize the number of queries to the database.
What should you do?
- A. Set the memcache service level to dedicated. Create a cron task that runs every minute to populate the cache with keys containing query results.
- B. Set the memcache service level to dedicated. Create a key from the hash of the query, and return database values from memcache before issuing a query to Cloud SQL.
- C. Set the memcache service level to shared. Create a cron task that runs every minute to save all expected queries to a key called "cached-queries".
- D. Set the memcache service level to shared. Create a key called "cached-queries", and return database values from the key before using a query to Cloud SQL.
Answer: B
Explanation:
Reference:
https://cloud.google.com/appengine/docs/standard/php/memcache/using
NEW QUESTION 161
You have an App Engine application that needs to be updated. You want to test the update with production traffic before replacing the current application version.
What should you do?
- A. Deploy the update using the Instance Group Updater to create a partial rollout, which allows for canary testing.
- B. Deploy the update as a new version in the App Engine application, and split traffic between the new and current versions.
- C. Deploy the update in a new VPC, and use Google's global HTTP load balancing to split traffic between the update and current applications.
- D. Deploy the update as a new App Engine application, and use Google's global HTTP load balancing to split traffic between the new and current applications.
Answer: B
Explanation:
Explanation
NEW QUESTION 162
For this question, refer to the Dress4Win case study. To be legally compliant during an audit, Dress4Win must be able to give insights in all administrative actions that modify the configuration or metadata of resources on Google Cloud.
What should you do?
- A. Use Stackdriver Trace to create a trace list analysis.
- B. Use the Activity page in the GCP Console and Stackdriver Logging to provide the required insight.
- C. Use Stackdriver Monitoring to create a dashboard on the project's activity.
- D. Enable Cloud Identity-Aware Proxy in all projects, and add the group of Administrators as a member.
Answer: A
Explanation:
https://cloud.google.com/logging/docs/audit/
NEW QUESTION 163
......
New Professional-Cloud-Architect Exam Questions Real Google Dumps: https://www.vceengine.com/Professional-Cloud-Architect-vce-test-engine.html
Pass Authentic Google Professional-Cloud-Architect with Free Practice Tests and Exam Dumps: https://drive.google.com/open?id=1E3mZMUvgl0cWzSReyyLj_uRTNgdV6-bf
