Get Started: Professional-Cloud-Architect Exam [2023] Dumps Google PDF Questions
Professional-Cloud-Architect Premium Exam Engine pdf Download
NEW QUESTION # 85
A news teed web service has the following code running on Google App Engine. During peak load, users report that they can see news articles they already viewed. What is the most likely cause of this problem?
- A. The HTTP Expires header needs to be set to -1 to stop caching.
- B. The URL of the API needs to be modified to prevent caching.
- C. The session variable is local to just a single instance.
- D. The session variable is being overwritten in Cloud Datastore.
Answer: C
Explanation:
Explanation
https://stackoverflow.com/questions/3164280/google-app-engine-cache-list-in-session-variable?rq=1
NEW QUESTION # 86
Your company runs several databases on a single MySQL instance. They need to take backups of a specific database at regular intervals. The backup activity needs to complete as quickly as possible and cannot be allowed to impact disk performance. How should you configure the storage?
- A. Configure a cron job to use the gcloud tool to take regular backups using persistent disk snapshots.
- B. Mount a Local SSD volume as the backup location. After the backup is complete, use gsutil to move the backup to Google Cloud Storage.
- C. Use gcsfuse to mount a Google Cloud Storage bucket as a volume directly on the instance and write backups to the mounted location using mysqldump
- D. Mount additional persistent disk volumes onto each virtual machine (VM) instance in a RAID10 array and use LVM to create snapshots to send to Cloud Storage.
Answer: B
Explanation:
Reference:
https://cloud.google.com/compute/docs/instances/sql-server/best-practices
NEW QUESTION # 87
For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for securely deploying workloads to Google Cloud. You also need to ensure that only verified containers are deployed using Google Cloud services. What should you do? (Choose two.)
- A. Configure Jenkins to utilize Kritis to cryptographically sign a container as part of a CI/CD pipeline.
- B. Configure Container Registry to use vulnerability scanning to confirm that there are no vulnerabilities before deploying the workload.
- C. Enable Binary Authorization on GKE, and sign containers as part of a CI/CD pipeline.
- D. Configure Container Registry to only allow trusted service accounts to create and deploy containers from the registry.
Answer: C
Explanation:
Binary Authorization to ensure only verified containers are deployed To ensure deployment are secure and and consistent, automatically scan images for vulnerabilities with container analysis (https://cloud.google.com/docs/ci-cd/overview?hl=en&skip_cache=true)
NEW QUESTION # 88
Case Study: 4 - Dress4Win case study
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model.
Company Background
Dress4win's application has grown from a few servers in the founder's garage to several hundred servers and appliances in a colocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster, Dress4win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is considering moving their development and test environments. They are also considering building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location.
Databases:
MySQL - user data, inventory, static data
* Redis - metadata, social graph, caching
* Application servers:
Tomcat - Java micro-services
* Nginx - static content
* Apache Beam - Batch processing
* Storage appliances:
iSCSI for VM hosts
* Fiber channel SAN - MySQL databases
* NAS - image storage, logs, backups
* Apache Hadoop/Spark servers:
Data analysis
* Real-time trending calculations
* MQ servers:
Messaging
* Social notifications
* Events
* Miscellaneous servers:
Jenkins, monitoring, bastion hosts, security scanners
* Business Requirements
* Build a reliable and reproducible environment with scaled parity of production. Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
Analyze and optimize architecture for performance in the cloud. Migrate fully to the cloud if all other requirements are met.
Technical Requirements
Evaluate and choose an automation framework for provisioning resources in cloud. Support failover of the production environment to cloud during an emergency. Identify production services that can migrate to cloud to save capacity.
Use managed services whenever possible.
Encrypt data on the wire and at rest.
Support multiple VPN connections between the production data center and cloud environment.
CEO Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a new competitor could use a public cloud platform to offset their up-front investment and freeing them to focus on developing better features.
CTO Statement
We have invested heavily in the current infrastructure, but much of the equipment is approaching the end of its useful life. We are consistently waiting weeks for new gear to be racked before we can start new projects. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
CFO Statement
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years puts a cloud strategy between 30 to 50% lower than our current model.
For this question, refer to the Dress4Win case study.
Dress4Win has configured a new uptime check with Google Stackdriver for several of their legacy services. The Stackdriver dashboard is not reporting the services as healthy. What should they do?
- A. Install the Stackdriver agent on all of the legacy web servers.
- B. In the Cloud Platform Console download the list of the uptime servers' IP addresses and create an inbound firewall rule
- C. Configure their load balancer to pass through the User-Agent HTTP header when the value matches GoogleStackdriverMonitoring-UptimeChecks (https://cloud.google.com/monitoring)
- D. Configure their legacy web servers to allow requests that contain user-Agent HTTP header when the value matches GoogleStackdriverMonitoring-- UptimeChecks (https://cloud.google.com/monitoring)
Answer: B
NEW QUESTION # 89
For this question, refer to the TerramEarth case study. TerramEarth has decided to store data files in
Cloud Storage. You need to configure Cloud Storage lifecycle rule to store 1 year of data and minimize file
storage cost.
Which two actions should you take?
- A. Create a Cloud Storage lifecycle rule with Age: "30", Storage Class: "Standard", and Action: "Set to
Coldline", and create a second GCS life-cycle rule with Age: "365", Storage Class: "Coldline", and
Action: "Delete". - B. Create a Cloud Storage lifecycle rule with Age: "30", Storage Class: "Standard", and Action: "Set to
Coldline", and create a second GCS life-cycle rule with Age: "365", Storage Class: "Nearline", and
Action: "Delete". - C. Create a Cloud Storage lifecycle rule with Age: "90", Storage Class: "Standard", and Action: "Set to
Nearline", and create a second GCS life-cycle rule with Age: "91", Storage Class: "Nearline", and
Action: "Set to Coldline". - D. Create a Cloud Storage lifecycle rule with Age: "30", Storage Class: "Coldline", and Action: "Set to
Nearline", and create a second GCS life-cycle rule with Age: "91", Storage Class: "Coldline", and
Action: "Set to Nearline".
Answer: B
NEW QUESTION # 90
For this question, refer to the TerramEarth case study.
TerramEarth plans to connect all 20 million vehicles in the field to the cloud. This increases the volume to 20 million 600 byte records a second for 40 TB an hour. How should you design the data ingestion?
- A. Vehicles write data directly to GCS.
- B. Vehicles stream data directly to Google BigQuery.
- C. Vehicles continue to write data using the existing system (FTP).
- D. Vehicles write data directly to Google Cloud Pub/Sub.
Answer: D
Explanation:
https://cloud.google.com/solutions/data-lifecycle-cloud-platform
https://cloud.google.com/solutions/designing-connected-vehicle-platform
NEW QUESTION # 91
You need to develop procedures to test a disaster plan for a mission-critical application. You want to use Google-recommended practices and native capabilities within GCP.
What should you do?
- A. Use gcloud scripts to automate service provisioning. Use Stackdriver to monitor and debug your tests.
- B. Use Deployment Manager to automate service provisioning. Use Activity Logs to monitor and debug your tests.
- C. Use Deployment Manager to automate service provisioning. Use Stackdriver to monitor and debug your tests.
- D. Use gcloud scripts to automate service provisioning. Use Activity Logs monitor and debug your tests.
Answer: C
NEW QUESTION # 92
Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable. What should you do?
- A. Make sure the developer is tagging the commits with :latest
- B. Make the container tag match the source code commit hash.
- C. Make sure a developer is adding a comment to the commit that links to the deployment.
- D. Make sure a developer is tagging the code commit with the date and time of commit
Answer: B
NEW QUESTION # 93
You need to set up Microsoft SQL Server on GCP. Management requires that there's no downtime in case of a data center outage in any of the zones within a GCP region. What should you do?
- A. Set up SQL Server Always On Availability Groups using Windows Failover Clustering. Place nodes in different zones.
- B. Configure a Cloud Spanner instance with a regional instance configuration.
- C. Configure a Cloud SQL instance with high availability enabled.
- D. Set up SQL Server on Compute Engine, using Always On Availability Groups using Windows Failover Clustering. Place nodes in different subnets.
Answer: A
Explanation:
https://cloud.google.com/sql/docs/sqlserver/configure-ha
NEW QUESTION # 94
You are creating a solution to remove backup files older than 90 days from your backup Cloud Storage bucket.
You want to optimize ongoing Cloud Storage spend. What should you do?
- A. Schedule a cron script using gsutil is -lr gs://backups/** to find and remove items older than 90 days.
- B. Schedule a cron script using gsutil ls -1 gs://backups/** to find and remove items older than 90 days and schedule it with cron.
- C. Write a lifecycle management rule in JSON and push it to the bucket with gsutil.
- D. Write a lifecycle management rule in XML and push it to the bucket with gsutil.
Answer: C
Explanation:
Explanation
https://cloud.google.com/storage/docs/gsutil/commands/lifecycle
NEW QUESTION # 95
A development manager is building a new application He asks you to review his requirements and identify what cloud technologies he can use to meet them.
The application must:
1. Be based on open-source technology for cloud portability
2. Dynamically scale compute capacity based on demand
3. Support continuous software delivery
4. Run multiple segregated copies of the same application stack
5. Deploy application bundles using dynamic templates
6. Route network traffic to specific services based on URL
Which combination of technologies will meet all of his requirements?
- A. Google Container Engine and Cloud Load Balancing
- B. Google Compute Engine, Jenkins, and Cloud Load Balancing
- C. Google Container Engine, Jenkins, and Helm
- D. Google Compute Engine and Cloud Deployment Manager
Answer: B
Explanation:
Jenkins is an open-source automation server that lets you flexibly orchestrate your build, test, and deployment pipelines. Kubernetes Engine is a hosted version of Kubernetes, a powerful cluster manager and orchestration system for containers.
When you need to set up a continuous delivery (CD) pipeline, deploying Jenkins on Kubernetes Engine provides important benefits over a standard VM-based deployment Incorrect Answers:
A: Helm is a tool for managing Kubernetes charts. Charts are packages of pre-configured Kubernetes resources.
Use Helm to:
Find and use popular software packaged as Kubernetes charts
Share your own applications as Kubernetes charts
Create reproducible builds of your Kubernetes applications
Intelligently manage your Kubernetes manifest files
Manage releases of Helm packages
References: https://cloud.google.com/solutions/jenkins-on-kubernetes-engine
NEW QUESTION # 96
For this question, refer to the Mountkirk Games case study. You need to analyze and define the technical architecture for the compute workloads for your company, Mountkirk Games. Considering the Mountkirk Games business and technical requirements, what should you do?
- A. Create a global load balancer with managed instance groups and autoscaling policies. Use non-preemptible Compute Engine instances.
- B. Create network load balancers. Use preemptible Compute Engine instances.
- C. Create network load balancers. Use non-preemptible Compute Engine instances.
- D. Create a global load balancer with managed instance groups and autoscaling policies. Use preemptible Compute Engine instances.
Answer: A
NEW QUESTION # 97
Your application needs to process credit card transactions. You want the smallest scope of Payment Card Industry (PCI) compliance without compromising the ability to analyze transactional data and trends relating to which payment methods are used. How should you design your architecture?
- A. Create separate subnetworks and isolate the components that process credit card data.
- B. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor.
- C. Create separate projects that only process credit card data.
- D. Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI data.
- E. Create a tokenizer service and store only tokenized data.
Answer: E
Explanation:
https://cloud.google.com/solutions/pci-dss-compliance-in-gcp
NEW QUESTION # 98
Your company captures all web traffic data in Google Analytics 360 and stores it in BigQuery. Each country has its own dataset. Each dataset has multiple tables. You want analysts from each country to be able to see and query only the data for their respective countries.
How should you configure the access rights?
- A. Create a group per country. Add analysts to their respective country-groups. Create a single group
'all_analysts', and add all country-groups as members. Grant the 'all-analysts' group the IAM role of BigQuery dataViewer. Share the appropriate dataset with view access with each respective analyst country- group. - B. Create a group per country. Add analysts to their respective country-groups. Create a single group
'all_analysts', and add all country-groups as members. Grant the 'all-analysts' group the IAM role of BigQuery jobUser. Share the appropriate tables with view access with each respective analyst country- group. - C. Create a group per country. Add analysts to their respective country-groups. Create a single group
'all_analysts', and add all country-groups as members. Grant the 'all-analysts' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country- group. - D. Create a group per country. Add analysts to their respective country-groups. Create a single group
'all_analysts', and add all country-groups as members. Grant the 'all-analysts' group the IAM role of BigQuery dataViewer. Share the appropriate table with view access with each respective analyst country- group.
Answer: C
NEW QUESTION # 99
As part of their new application experience, Dress4Wm allows customers to upload images of themselves.
The customer has exclusive control over who may view these images.
Customers should be able to upload images with minimal latency and also be shown their images quickly
on the main application page when they log in.
Which configuration should Dress4Win use?
- A. Store image files in a Google Cloud Storage bucket. Add custom metadata to the uploaded images in
Cloud Storage that contains the customer's unique ID. - B. Use a distributed file system to store customers' images. As storage needs increase, add more
persistent disks and/or nodes. Assign each customer a unique ID, which sets each file's owner
attribute, ensuring privacy of images. - C. Store image files in a Google Cloud Storage bucket. Use Google Cloud Datastore to maintain metadata
that maps each customer's ID and their image files. - D. Use a distributed file system to store customers' images. As storage needs increase, add more
persistent disks and/or nodes. Use a Google Cloud SQL database to maintain metadata that maps
each customer's ID to their image files.
Answer: C
NEW QUESTION # 100
......
Pass Your Google Exam with Professional-Cloud-Architect Exam Dumps: https://exams4sure.pass4sures.top/Google-Cloud-Certified/Professional-Cloud-Architect-testking-braindumps.html