Free Introduction to Google Cloud Certified - Professional Cloud Architect Questions and Answers — Questions and Answers
Question 1: Your company wants to introduce a number of microservices to help its system handle varying demands. A distinct version of software libraries is used by each microservice. You want to make it possible for their developers to maintain compatibility between their development environment and the numerous production services. What kind of technology should you pick?
- Containers (Correct answer)
- Virtual machines
- RPM/DEB
- Chef/Puppet
Correct answer: Containers
Explanation: <br> By abstracting away system OS environments with containers, development, test, and production deployments can all use the same host OS image. A copy-on-write filesystem is used to record changes made during development, and teams may easily publish updated versions of the microservices in a repository.
Question 2: Your business needs to monitor who is present in a space that has been designated for a scheduled meeting. 1000 conference rooms are distributed among 5 offices on 3 continents. A motion sensor is installed in each room, and it updates the system every second. Supporting this sensor network's data upload and collection requirements is important. The receiving infrastructure must take into account the likelihood that the devices' connectivity may be erratic. Which approach ought you to take?
- Establish a persistent connection between the devices and the App Engine application, which is fronted by Cloud Endpoints and receives messages and writes them to Cloud Datastore.
- Create persistent connections between each device and a Compute Engine instance, and instruct them to send messages to a certain application.
- Have devices check for Cloud SQL connectivity and periodically put the most recent messages into a table specific to the device.
- Have devices check for Cloud Pub/Sub connectivity, and then periodically broadcast the newest messages to a topic that is accessible to all devices. (Correct answer)
Correct answer: Have devices check for Cloud Pub/Sub connectivity, and then periodically broadcast the newest messages to a topic that is accessible to all devices.
Explanation: <br> The periodicity of this data can be handled by Cloud Pub/Sub, and users of the data can retrieve it from the shared topic for additional processing.
Question 3: Your business wants to test out the cloud safely. They wish to test the analytics features offered by the cloud and archive about 100 TB of their log data there, as well as keeping that data as a long-term backup for disaster recovery. Which two actions ought they to take?
- Import logs into Stackdriver
- Load logs into BigQuery (Correct answer)
- Insert logs into Cloud Bigtable
- Load logs into Cloud SQL
Correct answer: Load logs into BigQuery
Explanation: <br> BigQuery is a fully managed cloud data warehouse that satisfies the needs of analytics.
Question 4: For a forthcoming launch, you set up an autoscaling instance group to handle web traffic. Virtual machine (VM) instances are being terminated and re-launched every minute once the instance group is configured as a backend service to an HTTP(S) load balancer. The instances lack a publicly accessible IP address. Using the curl command, you have confirmed that each instance is sending the correct web response. Making sure the backend is correctly configured is important. What ought you to do?
- Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group. (Correct answer)
- Ensure that a firewall rule exists to allow source traffic on HTTP/HTTPS to reach the load balancer.
- Each instance should have a tag with the load balancer's name on it. Create a firewall rule with the instance tag as the destination and the load balancer's name as the source.
- Assign a public IP to each instance, and configure a firewall rule to allow the load balancer to reach the instance public IP.
Correct answer: Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.
Explanation: <br> Failures of a health check result in a VM being labeled as unhealthy and, if the health check keeps failing, termination. The next step would be to identify why the health check keeps failing given that you have already confirmed that the instances are operating properly.
Question 5: On Google Cloud Platform, your company has a 3-tier web application installed on the same network. The web, API, and database tiers can scale separately from one another. The web should be the conduit for network traffic that travels to the API tier and ultimately to the database tier. The database and web tiers shouldn't be in communication with one another. How should the network be configured?
- Set up software-based firewalls on individual VMs
- Add each tier to a different subnetwork.
- Add tags to each tier and set up firewall rules to allow the desired traffic flow (Correct answer)
- Add tags to each tier and set up routes to allow the desired traffic flow
Correct answer: Add tags to each tier and set up firewall rules to allow the desired traffic flow
Explanation: <br> Each instance will have the same tag to identify the tier as it grows. Since tags can be used for both the target and the source, firewall rules can make use of them to allow or restrict traffic as needed.
Question 6: Five TB of confidential data are on the premises of your company. To store the data on the cloud, you must migrate the data. Increasing data transfer speed is a priority. In what manner should the data be moved?
- Use gcloud
- Use Storage Transfer Service
- Use gsutil (Correct answer)
- Use GCS REST API
Correct answer: Use gsutil
Explanation: <br> You can access Cloud Storage and write data there using gsutil.
Question 7: You are creating a conversation app for mobile devices. By demonstrating that a message was delivered by a certain user, you may prevent chat messages from being spoofed. What ought you to do?
- Use public key infrastructure (PKI) to encrypt the message client-side using the originating user’s private key. (Correct answer)
- Encrypt the message client-side using block-based encryption with a shared key.
- Tag messages client-side with the originating user identifier and the destination user.
- Use a trusted certificate authority to enable SSL connectivity between the client application and the server.
Correct answer: Use public key infrastructure (PKI) to encrypt the message client-side using the originating user’s private key.
Explanation: <br> PKI mandates that the server and client both possess signed certificates that validate both the server and the client.
Free Introduction to Google Cloud Certified - Professional Cloud Architect Questions and Answers
Your company wants to introduce a number of microservices to help its system handle varying demands.
A distinct version of software libraries is used by each microservice.
You want to make it possible for their developers to maintain compatibility between their development environment and the numerous production services.
What kind of technology should you pick?