Free Professional-Cloud-Architect – Professional Cloud Architect on Google Cloud Platform Practice Test Question

Select all that apply, then click Submit answer.

• ○

  Verify EHR's product usage against the list of compliant products on the Google Cloud compliance page.

• ○

  Advise EHR to execute a Business Associate Agreement (BAA) with Google Cloud.

• ○

  Use Firebase Authentication for EHR's user facing applications.

• ○

  Implement Prometheus to detect and prevent security breaches on EHR's web-based applications.

• ○

  Use GKE private clusters for all Kubernetes workloads.
  
  

Select all that apply, then click Submit answer.

• ○

  Compute Engine with containers

• ○

  Google Kubernetes Engine with containers

• ○

  Google App Engine Standard Environment

• ○

  Compute Engine with custom instance types

• ○

  Compute Engine with managed instance groups
  
  

Select all that apply, then click Submit answer.

• ○

  A single VPN tunnel, which limits throughput

• ○

  A tier of Google Cloud Storage that is not suited for this task

• ○

  A copy command that is not suited to operate over long distances

• ○

  Fewer virtual machines (VMs) in GCP than on-premises machines

• ○

  A separate storage layer outside the VMs, which is not suited for this task

• ○

  Complicated internet connectivity between the on-premises infrastructure and GCP
  
  

Select all that apply, then click Submit answer.

• ○

  Ensure every code check-in is peer reviewed by a security SME

• ○

  Use source code security analyzers as part of the CI/CD pipeline

• ○

  Ensure you have stubs to unit test all interfaces between components

• ○

  Enable code signing and a trusted binary repository integrated with your CI/CD pipeline

• ○

  Run a vulnerability security scanner as part of your continuous-integration /continuous-delivery (CI/CD) pipeline
  
  

Select all that apply, then click Submit answer.

• ○

  Sharding

• ○

  Read replicas

• ○

  Binary logging

• ○

  Automated backups

• ○

  Semisynchronous replication
  
  

Select all that apply, then click Submit answer.

• ○

  Remove Python after running pip

• ○

  Remove dependencies from requirements.txt

• ○

  Use a slimmed-down base image like Alpine Linux

• ○

  Use larger machine types for your Google Container Engine node pools

• ○

  Copy the source after he package dependencies (Python and pip) are installed
  
  

Select all that apply, then click Submit answer.

• ○

  Cloud Deployment Manager uses Python

• ○

  Cloud Deployment Manager APIs could be deprecated in the future

• ○

  Cloud Deployment Manager is unfamiliar to the company’s engineers

• ○

  Cloud Deployment Manager requires a Google APIs service account to run

• ○

  Cloud Deployment Manager can be used to permanently delete cloud resources

• ○

  Cloud Deployment Manager only supports automation of Google Cloud resources
  
  

Select an option, then click Submit answer.

• ○

  Configure a cron job to use the gcloud tool to take regular backups using persistent disk snapshots.

• ○

  Mount a Local SSD volume as the backup location. After the backup is complete, use gsutil to move the backup to Google Cloud Storage.

• ○

  Use gcsfise to mount a Google Cloud Storage bucket as a volume directly on the instance and write backups to the mounted location using mysqldump.

• ○

  Mount additional persistent disk volumes onto each virtual machine (VM) instance in a RAID10 array and use LVM to create snapshots to send to Cloud Storage
  
  

Select an option, then click Submit answer.

• ○

  • Append metadata to file body
  • Compress individual files
  • Name files with serverName – Timestamp
  • Create a new bucket if bucket is older than 1 hour and save individual files to the new bucket. Otherwise, save files to existing bucket.
   

• ○

  • Batch every 10,000 events with a single manifest file for metadata
  • Compress event files and manifest file into a single archive file
  • Name files using serverName – EventSequence
  • Create a new bucket if bucket is older than 1 day and save the single archive file to the new bucket. Otherwise, save the single archive file to existing bucket.
   

• ○

  • Compress individual files
  • Name files with serverName – EventSequence
  • Save files to one bucket
  • Set custom metadata headers for each object after saving
   

• ○ Append metadata to file body
  Compress individual files
  Name files with a random prefix pattern
  Save files to one bucket

Select an option, then click Submit answer.

• ○

  Configure a HorizontalPodAutoscaler with a target CPU usage. Enable the Cluster Autoscaler from the GCP Console.

• ○

  Configure a HorizontalPodAutoscaler with a target CPU usage. Enable autoscaling on the managed instance group for the cluster using the gcloud command.

• ○

  Create a deployment and set the maxUnavailable and maxSurge properties. Enable the Cluster Autoscaler using the gcloud command.

• ○

  Create a deployment and set the maxUnavailable and maxSurge properties. Enable autoscaling on the cluster managed instance group from the GCP Console.
  
  

Select an option, then click Submit answer.

• ○

  Use BigQuery as the data warehouse. Connect all vehicles to the network and stream data into BigQuery using Cloud Pub/Sub and Cloud Dataflow. Use Google Data Studio for analysis and reporting.

• ○

  Use BigQuery as the data warehouse. Connect all vehicles to the network and upload gzip files to a Multi-Regional Cloud Storage bucket using gcloud. Use Google Data Studio for analysis and reporting.

• ○

  Use Cloud Dataproc Hive as the data warehouse. Upload gzip files to a Multi-Regional Cloud Storage bucket. Upload this data into BigQuery using gcloud. Use Google Data Studio for analysis and reporting.

• ○

  Use Cloud Dataproc Hive as the data warehouse. Directly stream data into partitioned Hive tables. Use Pig scripts to analyze data.
  
  

Select an option, then click Submit answer.

• ○

  Use Explainable AI.

• ○

  Use Vision AI.

• ○

  Use Google Cloud’s operations suite.

• ○

  Use Jupyter Notebooks.
  
  

Select an option, then click Submit answer.

• ○

  Set up a filter in Cloud Logging and a Cloud Storage bucket as an export target for the logs you want to save.

• ○

  Enable the Compute Engine API, and then enable logging on the firewall rules that match the traffic you want to save.

• ○

  Set up a Cloud Logging Dashboard titled Cloud VPN Logs, and then add a chart that queries for the VPN metrics over a one-year time period.

• ○

  Set up a filter in Cloud Logging and a topic in Pub/Sub to publish the logs.
  
  

Select an option, then click Submit answer.

• ○

  Configure Workload Identity and service accounts to be used by the application platform.

• ○

  Use Kubernetes Secrets, which are obfuscated by default. Configure these Secrets to be used by the application platform.

• ○

  Configure Kubernetes Secrets to store the secret, enable Application-Layer Secrets Encryption, and use Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used by the application platform.

• ○

  Configure HashiCorp Vault on Compute Engine, and use customer managed encryption keys and Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used by the application platform.
  
  

Select an option, then click Submit answer.

• ○

  Engage with a security company to run web scrapers that look your for users’ authentication data om malicious websites and notify you if any is found.

• ○

  Deploy intrusion detection software to your virtual machines to detect and log unauthorized access.

• ○

  Schedule a disaster simulation exercise during which you can shut off all VMs in a zone to see how your application behaves.

• ○

  Configure a read replica for your Cloud SQL instance in a different zone than the master, and then manually trigger a failover while monitoring KPIs for our REST API.