Google Cloud Certified Introduction to Google Cloud Certified - Professional Cloud Architect 2 — Questions and Answers
Question 1: Which Google Cloud service provides a fully managed, serverless execution environment for building and connecting cloud services?
- Cloud Run
- Cloud Functions (Correct answer)
- App Engine
- Cloud Build
Correct answer: Cloud Functions
Cloud Functions is Google Cloud's fully managed serverless execution environment designed for event-driven, single-purpose functions.
Question 2: A company needs to store petabytes of unstructured data with infrequent access at the lowest cost. Which Cloud Storage class should they choose?
- Standard
- Nearline
- Coldline
- Archive (Correct answer)
Correct answer: Archive
Archive storage offers the lowest cost per GB for data accessed less than once a year, making it ideal for long-term cold storage.
Question 3: What is the primary purpose of a VPC Shared network in Google Cloud?
- To connect on-premises networks to Google Cloud
- To allow multiple projects to share a single VPC network managed by a host project (Correct answer)
- To peer two separate VPC networks for transitive routing
- To encrypt all traffic between VM instances
Correct answer: To allow multiple projects to share a single VPC network managed by a host project
Shared VPC lets an organization connect resources from multiple projects to a common VPC network hosted in a single host project.
Question 4: Which Google Cloud tool is used to define, preview, and deploy infrastructure as code using declarative configuration files?
- Cloud Composer
- Cloud Deployment Manager (Correct answer)
- Cloud Build
- Config Connector
Correct answer: Cloud Deployment Manager
Cloud Deployment Manager allows you to specify all resources needed for your application in a declarative format using YAML or Python templates.
Question 5: A Professional Cloud Architect needs to ensure VM instances in a project cannot have external IP addresses. What is the most effective control?
- Configure firewall rules to block outbound traffic
- Apply an Organization Policy constraint to restrict external IPs on VMs (Correct answer)
- Use VPC Service Controls around the compute API
- Manually audit VMs daily using Cloud Asset Inventory
Correct answer: Apply an Organization Policy constraint to restrict external IPs on VMs
The Organization Policy constraint `constraints/compute.vmExternalIpAccess` prevents VM instances from being assigned external IP addresses across the organization.
Question 6: Which managed database service should an architect recommend for a globally distributed application requiring strong consistency and horizontal scaling with SQL support?
- Cloud SQL
- Cloud Bigtable
- Cloud Spanner (Correct answer)
- Firestore
Correct answer: Cloud Spanner
Cloud Spanner is Google's globally distributed relational database that provides strong consistency, high availability, and horizontal scalability with SQL support.
Question 7: What does the Google Cloud Professional Cloud Architect certification exam primarily assess?
- Ability to write production-ready code in Go or Python on GCP
- Ability to design, develop, and manage robust, secure, scalable, highly available, and dynamic solutions on Google Cloud (Correct answer)
- Knowledge of Google Cloud pricing and billing optimization only
- Hands-on skills with Kubernetes cluster administration
Correct answer: Ability to design, develop, and manage robust, secure, scalable, highly available, and dynamic solutions on Google Cloud
The Professional Cloud Architect exam evaluates a candidate's ability to design and plan cloud solution architectures and manage and provision cloud infrastructure.
Google Cloud Certified Introduction to Google Cloud Certified - Professional Cloud Architect 2
Which Google Cloud service provides a fully managed, serverless execution environment for building and connecting cloud services?