Google Professional-Cloud-Architect Exam Dumps

Question # 1

Your company has a support ticketing solution that uses App Engine Standard. The projectthat contains the App Engine application already has a Virtual Private Cloud(VPC) networkfullyconnected to the company’s on-premises environment through a Cloud VPN tunnel. Youwant to enable App Engine application to communicate with a database that is running in the company’s on-premises environment. What should you do?

A. Configure private services access
B. Configure private Google access for on-premises hosts only
C. Configure serverless VPC access
D. Configure private Google access

  Show Answer

Question # 2

Your company is using Google Cloud. You have two folders under the Organization:Finance and Shopping. The members of the development team are in a Google Group.The development team group has been assigned the Project Owner role on the Organization. You want to prevent the development team from creating resources inprojects in the Finance folder. What should you do?

A. Assign the development team group the Project Viewer role on the Finance folder, andassign the development team group the Project Owner role on the Shopping folder.
B. Assign the development team group only the Project Viewer role on the Finance folder.
C. Assign the development team group the Project Owner role on the Shopping folder, andremove the development team group Project Owner role from the Organization.
D. Assign the development team group only the Project Owner role on the Shopping folder.

  Show Answer

Question # 3

Your company uses the Firewall Insights feature in the Google Network Intelligence Center.You have several firewall rules applied to Compute Engine instances. You need to evaluatethe efficiency of the applied firewall ruleset. When you bring up the Firewall Insights page inthe Google Cloud Console, you notice that there are no log rows to display. What shouldyou do to troubleshoot the issue?

A. Enable Virtual Private Cloud (VPC) flow logging.
B. Enable Firewall Rules Logging for the firewall rules you want to monitor.C. Verify that your user account is assigned the compute.networkAdmin Identity andAccess Management (IAM) role.
D. Install the Google Cloud SDK, and verify that there are no Firewall logs in the commandline output.

  Show Answer

Question # 4

Your company is running its application workloads on Compute Engine. The applicationshave been deployed in production, acceptance, and development environments. Theproduction environment is business-critical and is used 24/7, while the acceptance anddevelopment environments are only critical during office hours. Your CFO has asked you tooptimize these environments to achieve cost savings during idle times. What should youdo?

A. Create a shell script that uses the gcloud command to change the machine type of the development and acceptance instances to a smaller machine type outside of office hours.Schedule the shell script on one of the production instances to automate the task.
B. Use Cloud Scheduler to trigger a Cloud Function that will stop the development andacceptance environments after office hours and start them just before office hours.
C. Deploy the development and acceptance applications on a managed instance group andenable autoscaling.
D. Use regular Compute Engine instances for the production environment, and usepreemptible VMs for the acceptance and development environments.

  Show Answer

Question # 5

You are implementing the infrastructure for a web service on Google Cloud. The webservice needs to receive and store the data from 500,000 requests per second. The datawill be queried later in real time, based on exact matches of a known set of attributes.There will be periods where the web service will not receive any requests. The businesswants to keep costs low. Which web service platform and database should you use for theapplication?

A. Cloud Run and BigQuery
B. Cloud Run and Cloud Bigtable
C. A Compute Engine autoscaling managed instance group and BigQuery
D. A Compute Engine autoscaling managed instance group and Cloud Bigtable

  Show Answer

Question # 6

Your company has a Google Workspace account and Google Cloud Organization Somedevelopers in the company have created Google Cloud projects outside of the GoogleCloud OrganizationYou want to create an Organization structure that allows developers to create projects, butprevents them from modifying production projects You want to manage policies for allprojects centrally and be able to set more restrictive policies for production projectsYou want to minimize disruption to users and developers when business needs change inthe future You want to follow Google-recommended practices How should you design theOrganization structure?

A. 1 Create a second Google Workspace account and Organization2 Grant all developers the Project Creator IAM role on the new Organization3 Move the developer projects into the new Organization4 Set the policies for all projects on both Organizations.5 Additionally set the production policies on the original Organization
B. 1 Create a folder under the Organization resource named "Production '2 Grant all developers the Project Creator IAM role on the Organization 3. Move thedeveloper projects into the Organization4 Set the policies for all projects on the Organization5 Additionally set the production policies on the 'Production" folder
C. 1 Create folders under the Organization resource named "Development" andProduction'2 Grant all developers the Project Creator IAM role on the ""Development1 folder 3. Movethe developer projects into the "Development" folder 4 Set the policies for all projects on the Organization5 Additionally set the production policies on the "Production" folder
D. 1 Designate the Organization for production projects only2 Ensure that developers do not have the Project Creator IAM role on the Organization3 Create development projects outside of the Organization using the developer GoogleWorkspace accounts4 Set the policies for all projects on the Organization5 Additionally set the production policies on the individual production projects

  Show Answer

Question # 7

You are managing several projects on Google Cloud and need to interact on a daily basiswith BigQuery, Bigtable and Kubernetes Engine using the gcloud CLI tool You aretravelling a lot and work on different workstations during the week You want to avoid havingto manage the gcloud CLI manually What should you do?

A. Use a package manager to install gcloud on your workstations instead of installing itmanually
B. Create a Compute Engine instance and install gcloud on the instance Connect to thisinstance via SSH to always use the samegcloud installation when interacting with Google Cloud
C. Install gcloud on all of your workstations Run the command gcloud components autoupdateon each workstation
D. Use Google Cloud Shell in the Google Cloud Console to interact with Google Cloud

  Show Answer

Question # 8

Your company has developed a monolithic, 3-tier application to allow external users toupload and share files. The solution cannot be easily enhanced and lacks reliability. Thedevelopment team would like to re-architect the application to adopt microservices and afully managed service approach, but they need to convince their leadership that the effort isworthwhile. Which advantage(s) should they highlight to leadership?

A. The new approach will be significantly less costly, make it easier to manage theunderlying infrastructure, and automatically manage the CI/CD pipelines.
B. The monolithic solution can be converted to a container with Docker. The generatedcontainer can then be deployed into a Kubernetes cluster.
C. The new approach will make it easier to decouple infrastructure from application,develop and release new features, manage the underlying infrastructure, manage CI/CDpipelines and perform A/B testing, and scale the solution if necessary.
D. The process can be automated with Migrate for Compute Engine.

  Show Answer

Question # 9

You need to migrate Hadoop jobs for your company’s Data Science team without modifyingthe underlying infrastructure. You want to minimize costs and infrastructure managementeffort. What should you do?

A. Create a Dataproc cluster using standard worker instances.
B. Create a Dataproc cluster using preemptible worker instances.
C. Manually deploy a Hadoop cluster on Compute Engine using standard instances.
D. Manually deploy a Hadoop cluster on Compute Engine using preemptible instances.

  Show Answer

Question # 10

Your organization has decided to restrict the use of external IP addresses on instances toonly approved instances. You want to enforce this requirement across all of your VirtualPrivate Clouds (VPCs). What should you do?

A. Remove the default route on all VPCs. Move all approved instances into a new subnetthat has a default route to an internet gateway.
B. Create a new VPC in custom mode. Create a new subnet for the approved instances,and set a default route to the internet gateway on this new subnet.
C. Implement a Cloud NAT solution to remove the need for external IP addresses entirely.
D. Set an Organization Policy with a constraint onconstraints/compute.vmExternalIpAccess. List the approved instances in theallowedValues list.

  Show Answer

Question # 11

You are managing an application deployed on Cloud Run for Anthos, and you need todefine a strategy for deploying new versions of the application. You want to evaluate thenew code with a subset of production traffic to decide whether to proceed with the rollout.What should you do?

A. Deploy a new revision to Cloud Run with the new version. Configure traffic percentagebetween revisions.
B. Deploy a new service to Cloud Run with the new version. Add a Cloud Load Balancinginstance in front of both services.
C. In the Google Cloud Console page for Cloud Run, set up continuous deployment usingCloud Build for the development branch. As part of the Cloud Build trigger, configure thesubstitution variable TRAFFIC_PERCENTAGE with the percentage of traffic you wantdirected to a new version.
D. In the Google Cloud Console, configure Traffic Director with a new Service that points tothe new version of the application on Cloud Run. Configure Traffic Director to send a smallpercentage of traffic to the new version of the application.

  Show Answer

Question # 12

Your company has an application running as a Deployment in a Google Kubernetes Engine(GKE) cluster When releasing new versions of the application via a rolling deployment, theteam has been causing outages The root cause of the outages is misconfigurations withparameters that are only used in production You want to put preventive measures for this inthe platform to prevent outages What should you do?

A. Configure liveness and readiness probes in the Pod specification
B. Configure an uptime alert in Cloud Monitoring
C. Create a Scheduled Task to check whether the application is available
D. Configure health checks on the managed instance group

  Show Answer

Question # 13

Your company has just recently activated Cloud Identity to manage users. The GoogleCloud Organization has been configured as wed. The security learn needs to secureprotects that will be part of the Organization. They want to prohibit IAM users outside thedomain from gaining permissions from now on. What should they do?

A. Configure an organization policy to restrict identities by domain
B. Configure an organization policy to block creation of service accounts
C. Configure Cloud Scheduler o trigger a Cloud Function every hour that removes all usersthat don't belong to the Cloud identity domain from all projects.
D. Create a technical user (e g . crawler@yourdomain com), and give it the protect ownerrote at root organization level Write a bash script that• Lists all me IAM rules of all projects within the organization• Deletes all users that do not belong to the company domainCreate a Compute Engine instance m a project within the Organization and configuregcloud to be executed with technical user credentials Configure a cron job that executesthe bash script every hour.

  Show Answer

Question # 14

Your company has an application deployed on Anthos clusters (formerly Anthos GKE) thatis running multiple microservices. The cluster has both Anthos Service Mesh and AnthosConfig Management configured. End users inform you that the application is respondingvery slowly. You want to identify the microservice that is causing the delay. What shouldyou do?

A. Use the Service Mesh visualization in the Cloud Console to inspect the telemetrybetween the microservices.
B. Use Anthos Config Management to create a ClusterSelector selecting the relevantcluster. On the Google Cloud Console page for Google Kubernetes Engine, view theWorkloads and filter on the cluster. Inspect the configurations of the filtered workloads.
C. Use Anthos Config Management to create a namespaceSelector selecting the relevantcluster namespace. On the Google Cloud Console page for Google Kubernetes Engine,visit the workloads and filter on the namespace. Inspect the configurations of the filteredworkloads.
D. Reinstall istio using the default istio profile in order to collect request latency. Evaluatethe telemetry between the microservices in the Cloud Console.

  Show Answer

Question # 15

You want to store critical business information in Cloud Storage buckets. The information isregularly changed but previous versions need to be referenced on a regular basis. Youwant to ensure that there is a record of all changes to any information in these buckets.You want to ensure that accidental edits or deletions can be easily roiled back. Whichfeature should you enable?

A. Bucket Lock
B. Object Versioning
C. Object change notification
D. Object Lifecycle Management

  Show Answer