Oct-2023 New Version Professional-Cloud-Architect Certificate & Helpful Exam Dumps is Online
Professional-Cloud-Architect Free Certification Exam Material with 270 Q&As
Google Professional-Cloud-Architect certification is a highly respected and recognized certification in the cloud computing industry. Passing this certification exam validates the skills and knowledge of cloud architects who can design, develop, and manage solutions on the Google Cloud Platform. It is an excellent way for professionals to enhance their career prospects and demonstrate their commitment to learning and staying up-to-date with the latest cloud computing technologies.
NEW QUESTION # 83
For this question, refer to the TerramEarth case study. You are asked to design a new architecture for the ingestion of the data of the 200,000 vehicles that are connected to a cellular network. You want to follow Google-recommended practices.
Considering the technical requirements, which components should you use for the ingestion of the data?
- A. Compute Engine with specific SSH keys
- B. Google Kubernetes Engine with an SSL Ingress
- C. Compute Engine with project-wide SSH keys
- D. Cloud IoT Core with public/private key pairs
Answer: D
Explanation:
Explanation
https://cloud.google.com/solutions/iot-overview
NEW QUESTION # 84
The application reliability team at your company has added a debug feature to their backend service to send all server events to Google Cloud Storage for eventual analysis. The event records are at least 50 KB and at most 15 MB and are expected to peak at 3,000 events per second. You want to minimize data loss.
Which process should you implement?
- A. Append metadata to file body.
Compress individual files.
Name files with a random prefix pattern.
Save files to one bucket - B. Append metadata to file body.
Compress individual files.
Name files with serverName-Timestamp.
Create a new bucket if bucket is older than 1 hour and save individual files to the new bucket.
Otherwise, save files to existing bucket - C. Batch every 10,000 events with a single manifest file for metadata.
Compress event files and manifest file into a single archive file.
Name files using serverName-EventSequence.
Create a new bucket if bucket is older than 1 day and save the single archive file to the new bucket. Otherwise, save the single archive file to existing bucket. - D. Compress individual files.
Name files with serverName-EventSequence.
Save files to one bucket
Set custom metadata headers for each object after saving.
Answer: C
NEW QUESTION # 85
You are moving an application that uses MySQL from on-premises to Google Cloud. The application will run on Compute Engine and will use Cloud SQL. You want to cut over to the Compute Engine deployment of the application with minimal downtime and no data loss to your customers. You want to migrate the application with minimal modification. You also need to determine the cutover strategy. What should you do?
- A. 1. Set up Cloud SQL proxy and MySQL proxy.
2.Create a mysqldump of the on-premises MySQL server.
3.Upload the dump to a Cloud Storage bucket.
4.Import the dump into Cloud SQL.
5.Stop the on-premises application.
6.Start the Compute Engine application. - B. 1. Set up Cloud VPN to provide private network connectivity between the Compute Engine application and the on-premises MySQL server.
2.Stop the on-premises application.
3.Start the Compute Engine application, configured to read and write to the on-premises MySQL server.
4.Create the replication configuration in Cloud SQL.
5.Configure the source database server to accept connections from the Cloud SQL replica.
6.Finalize the Cloud SQL replica configuration.
7.When replication has been completed, stop the Compute Engine application.
8.Promote the Cloud SQL replica to a standalone instance.
9.Restart the Compute Engine application, configured to read and write to the Cloud SQL standalone instance. - C. 1. Stop the on-premises application.
2.Create a mysqldump of the on-premises MySQL server.
3.Upload the dump to a Cloud Storage bucket.
4.Import the dump into Cloud SQL.
5.Start the application on Compute Engine. - D. 1. Set up Cloud VPN to provide private network connectivity between the Compute Engine application and the on-premises MySQL server.
2.Stop the on-premises application.
3.Create a mysqldump of the on-premises MySQL server.
4.Upload the dump to a Cloud Storage bucket.
5.Import the dump into Cloud SQL.
6.Modify the source code of the application to write queries to both databases and read from its local database.
7.Start the Compute Engine application.
8.Stop the on-premises application.
Answer: D
NEW QUESTION # 86
Your organization requires that metrics from all applications be retained for 5 years for future analysis in possible legal proceedings. Which approach should you use?
- A. Configure Stackdriver Monitoring for all Projects with the default retention policies.
- B. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage.
- C. Grant the security team access to the logs in each Project.
- D. Configure Stackdriver Monitoring for all Projects, and export to BigQuery.
Answer: D
Explanation:
Explanation
https://cloud.google.com/monitoring/api/v3/metrics
Stackdriver Logging provides you with the ability to filter, search, and view logs from your cloud and open source application services. Allows you to define metrics based on log contents that are incorporated into dashboards and alerts. Enables you to export logs to BigQuery, Google Cloud Storage, and Pub/Sub.
References: https://cloud.google.com/stackdriver/
NEW QUESTION # 87
You are designing an application for use only during business hours. For the minimum viable product release, you'd like to use a managed product that automatically "scales to zero" so you don't incur costs when there is no activity.
Which primary compute resource should you choose?
- A. Compute Engine
- B. Cloud Functions
- C. AppEngine flexible environment
- D. Google Kubernetes Engine
Answer: B
NEW QUESTION # 88
For this question, refer to the JencoMart case study.
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources. What Google domain and project structure should you recommend?
- A. Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.
- B. Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.
- C. Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.
- D. Create a single G Suite account to manage users with each stage of each application in its own project.
Answer: B
Explanation:
Note: The principle of least privilege and separation of duties are concepts that, although semantically different, are intrinsically related from the standpoint of security. The intent behind both is to prevent people from having higher privilege levels than they actually need Principle of Least Privilege: Users should only have the least amount of privileges required to perform their job and no more. This reduces authorization exploitation by limiting access to resources such as targets, jobs, or monitoring templates for which they are not authorized.
Separation of Duties: Beyond limiting user privilege level, you also limit user duties, or the specific jobs they can perform. No user should be given responsibility for more than one related function. This limits the ability of a user to perform a malicious action and then cover up that action.
References: https://cloud.google.com/kms/docs/separation-of-duties
NEW QUESTION # 89
You have been asked to select the storage system for the click-data of your company's large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute, with bursts of up to 8,500 clicks per second. It must been stored for future analysis by your data science and user experience teams. Which storage infrastructure should you choose?
- A. Google cloud Datastore
- B. Google Cloud Bigtable
- C. Google Cloud SQL
- D. Google Cloud Storage
Answer: D
NEW QUESTION # 90
Your organization has stored sensitive data in a Cloud Storage bucket. For regulatory reasons, your company must be able to rotate the encryption key used to encrypt the data in the bucket. The data will be processed in Dataproc. You want to follow Google-recommended practices for security What should you do?
- A. Generate a GPG key pair. Encrypt the data using the GPG key. Upload the encrypted data to the bucket.
- B. Create a key with Cloud Key Management Service (KMS). Set the encryption key on the bucket to the Cloud KMS key.
- C. Create a key with Cloud Key Management Service (KMS) Encrypt the data using the encrypt method of Cloud KMS.
- D. Generate an AES-256 encryption key. Encrypt the data in the bucket using the customer-supplied encryption keys feature.
Answer: B
Explanation:
https://cloud.google.com/storage/docs/encryption/using-customer-managed-keys#add-object-key
NEW QUESTION # 91
You deploy your custom Java application to Google App Engine.
It fails to deploy and gives you the following stack trace.
What should you do?
- A. Digitally sign all of your JAR files and redeploy your application
- B. Upload missing JAR files and redeploy your application.
- C. Recompile the CLoakedServlet class using and MD5 hash instead of SHA1
Answer: A
NEW QUESTION # 92
You are creating a solution to remove backup files older than 90 days from your backup Cloud Storage bucket. You want to optimize ongoing Cloud Storage spend. What should you do?
- A. Write a lifecycle management rule in XML and push it to the bucket with gsutil.
- B. Schedule a cron script using gsutil ls -1 gs://backups/** to find and remove items older than
90 days and schedule it with cron. - C. Write a lifecycle management rule in JSON and push it to the bucket with gsutil.
- D. Schedule a cron script using gsutil is -lr gs://backups/** to find and remove items older than
90 days.
Answer: C
Explanation:
https://cloud.google.com/storage/docs/gsutil/commands/lifecycle
NEW QUESTION # 93
For this question, refer to the Dress4Win case study.
Dress4Win has asked you to recommend machine types they should deploy their application servers to. How should you proceed?
- A. Identify the number of virtual cores and RAM associated with the application server virtual machines align them to a custom machine type in the cloud, monitor performance, and scale the machine types up until the desired performance is reached.
- B. Recommend that Dress4Win deploy application servers to machine types that offer the highest RAM to CPU ratio available.
- C. Perform a mapping of the on-premises physical hardware cores and RAM to the nearest machine types in the cloud.
- D. Recommend that Dress4Win deploy into production with the smallest instances available, monitor them over time, and scale the machine type up until the desired performance is reached.
Answer: A
NEW QUESTION # 94
You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address. You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly. What should you do?
- A. Create a tag on each instance with the name of the load balancer. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.
- B. Assign a public IP to each instance and configure a firewall rule to allow the load balancer to reach the instance public IP.
- C. Ensure that a firewall rule exists to allow source traffic on HTTP/HTTPS to reach the load balancer.
- D. Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.
Answer: D
Explanation:
https://cloud.google.com/vpc/docs/using-firewalls
NEW QUESTION # 95
You want to automate the creation of a managed instance group. The VMs have many OS package dependencies. You want to minimize the startup time for new VMs in the instance group.
What should you do?
- A. Create a custom VM image with all OS package dependencies. Use Deployment Manager to create the managed instance group with the VM image.
- B. Use Puppet to create the managed instance group and install the OS package dependencies.
- C. Use Terraform to create the managed instance group and a startup script to install the OS package dependencies.
- D. Use Deployment Manager to create the managed instance group and Ansible to install the OS package dependencies.
Answer: A
NEW QUESTION # 96
You are working in a highly secured environment where public Internet access from the Compute Engine VMs is not allowed. You do not yet have a VPN connection to access an on-premises file server. You need to install specific software on a Compute Engine instance. How should you install the software?
- A. Upload the required installation files to Cloud Source Repositories. Configure the VM on a subnet with a Private Google Access subnet. Assign only an internal IP address to the VM. Download the installation files to the VM using gcloud.
- B. Upload the required installation files to Cloud Storage. Configure the VM on a subnet with a Private Google Access subnet. Assign only an internal IP address to the VM. Download the installation files to the VM using gsutil.
- C. Upload the required installation files to Cloud Storage and use firewall rules to block all traffic except the IP address range for Cloud Storage. Download the files to the VM using gsutil.
- D. Upload the required installation files to Cloud Source Repositories and use firewall rules to block all traffic except the IP address range for Cloud Source Repositories. Download the files to the VM using gsutil.
Answer: B
Explanation:
https://cloud.google.com/vpc/docs/private-access-options#pga-supported
NEW QUESTION # 97
For this question, refer to the Mountkirk Games case study. Mountkirk Games wants to migrate from their current analytics and statistics reporting model to one that meets their technical requirements on Google Cloud Platform.
Which two steps should be part of their migration plan? (Choose two.)
- A. Load 10 TB of analytics data from a previous game into a Cloud SQL instance, and run test queries against the full dataset to confirm that they complete successfully.
- B. Integrate Cloud Armor to defend against possible SQL injection attacks in analytics files uploaded to Cloud Storage.
- C. Draw an architecture diagram that shows how to move from a single MySQL database to a MySQL cluster.
- D. Write a schema migration plan to denormalize data for better performance in BigQuery.
- E. Evaluate the impact of migrating their current batch ETL code to Cloud Dataflow.
Answer: D,E
Explanation:
Explanation
https://cloud.google.com/bigquery/docs/loading-data#loading_denormalized_nested_and_repeated_data
NEW QUESTION # 98
You are working in a highly secured environment where public Internet access from the Compute Engine VMs is not allowed. You do not yet have a VPN connection to access an on-premises file server. You need to install specific software on a Compute Engine instance. How should you install the software?
- A. Upload the required installation files to Cloud Source Repositories. Configure the VM on a subnet with a Private Google Access subnet. Assign only an internal IP address to the VM. Download the installation files to the VM using gcloud.
- B. Upload the required installation files to Cloud Storage. Configure the VM on a subnet with a Private Google Access subnet. Assign only an internal IP address to the VM. Download the installation files to the VM using gsutil.
- C. Upload the required installation files to Cloud Storage and use firewall rules to block all traffic except the IP address range for Cloud Storage. Download the files to the VM using gsutil.
- D. Upload the required installation files to Cloud Source Repositories and use firewall rules to block all traffic except the IP address range for Cloud Source Repositories. Download the files to the VM using gsutil.
Answer: B
NEW QUESTION # 99
Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company's data center. Upon investigation, you discover that some of the RFC
1918 IP ranges being used in the new company's Virtual Private Cloud (VPC) overlap with your data center IP space. What should you do to enable connectivity and make sure that there are no routing conflicts when connectivity is established?
- A. Create a Cloud VPN connection from the new VPC to the data center, and create a Cloud NAT instance to perform NAT on the overlapping IP space.
- B. Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply new IP addresses so there is no overlapping IP space.
- C. Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply a custom route advertisement to block the overlapping IP space.
- D. Create a Cloud VPN connection from the new VPC to the data center, and apply a firewall rule that blocks the overlapping IP space.
Answer: B
NEW QUESTION # 100
Your organization wants to control IAM policies for different departments independently, but centrally.
Which approach should you take?
- A. A single Organization with Folder for each department
- B. A single Organization with multiple projects, each with a central owner
- C. Multiple Organizations, one for each department
- D. Multiple Organizations with multiple Folders
Answer: A
NEW QUESTION # 101
Your company is building a new architecture to support its data-centric business focus. You are responsible for setting up the network. Your company's mobile and web-facing applications will be deployed on-premises, and all data analysis will be conducted in GCP. The plan is to process and load 7 years of archived .csv files totaling 900 TB of data and then continue loading 10 TB of data daily. You currently have an existing 100-MB internet connection.
What actions will meet your company's needs?
- A. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish a connection with Google using a Dedicated Interconnect or Direct Peering connection and use it to upload files daily.
- B. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily.
- C. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish one Cloud VPN Tunnel to VPC networks over the public internet, and compares and upload files daily using the gsutil -m option.
- D. Compress and upload both achieved files and files uploaded daily using the qsutil -m option.
Answer: A
Explanation:
Reference:
https://cloud.google.com/interconnect/docs/how-to/direct-peering
NEW QUESTION # 102
You need to implement a network ingress for a new game that meets the defined business and technical requirements. Mountkirk Games wants each regional game instance to be located in multiple Google Cloud regions. What should you do?
- A. Configure a global load balancer with Google Kubernetes Engine.
- B. Configure a global load balancer connected to a managed instance group running Compute Engine instances.
- C. Configure Ingress for Anthos with a global load balancer and Google Kubernetes Engine.
- D. Configure kubemci with a global load balancer and Google Kubernetes Engine.
Answer: B
Explanation:
Topic 9, Helicopter Racing League Case
Company overview
Helicopter Racing League (HRL) is a global sports league for competitive helicopter racing. Each year HRL holds the world championship and several regional league competitions where teams compete to earn a spot in the world championship. HRL offers a paid service to stream the races all over the world with live telemetry and predictions throughout each race.
Solution concept
HRL wants to migrate their existing service to a new platform to expand their use of managed AI and ML services to facilitate race predictions. Additionally, as new fans engage with the sport, particularly in emerging regions, they want to move the serving of their content, both real-time and recorded, closer to their users.
Existing technical environment
HRL is a public cloud-first company; the core of their mission-critical applications runs on their current public cloud provider. Video recording and editing is performed at the race tracks, and the content is encoded and transcoded, where needed, in the cloud. Enterprise-grade connectivity and local compute is provided by truck-mounted mobile data centers. Their race prediction services are hosted exclusively on their existing public cloud provider. Their existing technical environment is as follows:
Existing content is stored in an object storage service on their existing public cloud provider.
Video encoding and transcoding is performed on VMs created for each job.
Race predictions are performed using TensorFlow running on VMs in the current public cloud provider.
Business requirements
HRL's owners want to expand their predictive capabilities and reduce latency for their viewers in emerging markets. Their requirements are:
Support ability to expose the predictive models to partners.
Increase predictive capabilities during and before races:
* Race results
* Mechanical failures
* Crowd sentiment
Increase telemetry and create additional insights.
Measure fan engagement with new predictions.
Enhance global availability and quality of the broadcasts.
Increase the number of concurrent viewers.
Minimize operational complexity.
Ensure compliance with regulations.
Create a merchandising revenue stream.
Technical requirements
Maintain or increase prediction throughput and accuracy.
Reduce viewer latency.
Increase transcoding performance.
Create real-time analytics of viewer consumption patterns and engagement.
Create a data mart to enable processing of large volumes of race data.
Executive statement
Our CEO, S. Hawke, wants to bring high-adrenaline racing to fans all around the world. We listen to our fans, and they want enhanced video streams that include predictions of events within the race (e.g., overtaking). Our current platform allows us to predict race outcomes but lacks the facility to support real-time predictions during races and the capacity to process season-long results.
NEW QUESTION # 103
......
Google Professional-Cloud-Architect certification exam is designed to validate the skills and knowledge required for individuals to design, develop, and manage secure, scalable, and reliable cloud solutions using Google Cloud Platform. It is an advanced-level certification that demonstrates the ability to provide cloud architecture and design solutions to meet business and technical requirements.
Get The Important Preparation Guide With Professional-Cloud-Architect Dumps: https://www.torrentvce.com/Professional-Cloud-Architect-valid-vce-collection.html
UPDATED Professional-Cloud-Architect Exam Questions Certification Test Engine to PDF: https://drive.google.com/open?id=11hAzbZ4mmz4M6W9dqSq1GxCaEnz6jptQ