Introduction to Google Cloud Certified - Professional Cloud Architect Flashcards

Your company wants to introduce a number of microservices to help its system handle varying demands. A distinct version of software libraries is used by each microservice. You want to make it possible for their developers to maintain compatibility between their development environment and the numerous production services. What kind of technology should you pick?

Answer: Containers

Explanation: By abstracting away system OS environments with containers, development, test, and production deployments can all use the same host OS image. A copy-on-write filesystem is used to record changes made during development, and teams may easily publish updated versions of the microservices in a repository.

Your business needs to monitor who is present in a space that has been designated for a scheduled meeting. 1000 conference rooms are distributed among 5 offices on 3 continents. A motion sensor is installed in each room, and it updates the system every second. Supporting this sensor network's data upload and collection requirements is important. The receiving infrastructure must take into account the likelihood that the devices' connectivity may be erratic. Which approach ought you to take?

Answer: Have devices check for Cloud Pub/Sub connectivity, and then periodically broadcast the newest messages to a topic that is accessible to all devices.

Explanation: The periodicity of this data can be handled by Cloud Pub/Sub, and users of the data can retrieve it from the shared topic for additional processing.

Your business wants to test out the cloud safely. They wish to test the analytics features offered by the cloud and archive about 100 TB of their log data there, as well as keeping that data as a long-term backup for disaster recovery. Which two actions ought they to take?

Answer: Load logs into BigQuery

Explanation: BigQuery is a fully managed cloud data warehouse that satisfies the needs of analytics.

For a forthcoming launch, you set up an autoscaling instance group to handle web traffic. Virtual machine (VM) instances are being terminated and re-launched every minute once the instance group is configured as a backend service to an HTTP(S) load balancer. The instances lack a publicly accessible IP address. Using the curl command, you have confirmed that each instance is sending the correct web response. Making sure the backend is correctly configured is important. What ought you to do?

Answer: Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.

Explanation: Failures of a health check result in a VM being labeled as unhealthy and, if the health check keeps failing, termination. The next step would be to identify why the health check keeps failing given that you have already confirmed that the instances are operating properly.

On Google Cloud Platform, your company has a 3-tier web application installed on the same network. The web, API, and database tiers can scale separately from one another. The web should be the conduit for network traffic that travels to the API tier and ultimately to the database tier. The database and web tiers shouldn't be in communication with one another. How should the network be configured?

Answer: Add tags to each tier and set up firewall rules to allow the desired traffic flow

Explanation: Each instance will have the same tag to identify the tier as it grows. Since tags can be used for both the target and the source, firewall rules can make use of them to allow or restrict traffic as needed.

Five TB of confidential data are on the premises of your company. To store the data on the cloud, you must migrate the data. Increasing data transfer speed is a priority. In what manner should the data be moved?

Answer: Use gsutil

Explanation: You can access Cloud Storage and write data there using gsutil.

You are creating a conversation app for mobile devices. By demonstrating that a message was delivered by a certain user, you may prevent chat messages from being spoofed. What ought you to do?

Answer: Use public key infrastructure (PKI) to encrypt the message client-side using the originating user’s private key.

Explanation: PKI mandates that the server and client both possess signed certificates that validate both the server and the client.