Google Cloud Certified MCQ 4

Question 1

A company wants to ensure that Cloud Storage buckets never have public access enabled, even if a developer accidentally sets it. What is the most preventive control?

Accepted Answer

Enable the constraints/storage.publicAccessPrevention organization policy

Answer

The storage.publicAccessPrevention organization policy proactively blocks public access configuration at the API level, preventing the misconfiguration before it occurs.

Question 2

An e-commerce platform needs to process payment events in strict order per customer ID, with exactly-once semantics. Which Pub/Sub feature enables this?

Accepted Answer

Pub/Sub with message ordering enabled and an ordering key set to customer ID

Answer

Pub/Sub ordering keys guarantee that messages with the same key are delivered in order to a single subscriber, enabling per-customer ordered processing.

Question 3

A startup wants to run a containerized web app that scales to zero when unused to minimize costs. Which compute option is most appropriate?

Accepted Answer

Cloud Run (fully managed) with minimum instances set to 0

Answer

Cloud Run (fully managed) with min-instances=0 scales down completely when idle, incurring no compute cost between requests.

Question 4

You need to migrate a stateful legacy application that uses local disk storage to Google Cloud with minimal code changes. Which approach preserves the local disk behavior?

Accepted Answer

Lift-and-shift to Compute Engine VM with a Persistent Disk attached

Answer

A Compute Engine VM with Persistent Disk provides a standard block device that behaves identically to on-premises local disk, requiring no application code changes.

Question 5

A data engineering team needs to detect anomalies in streaming sensor data in real-time and alert within 30 seconds. Which architecture is best?

Accepted Answer

Ingest via Pub/Sub, process with Dataflow streaming using windowing and anomaly detection, alert via Pub/Sub/Cloud Monitoring

Answer

Pub/Sub ingestion with a Dataflow streaming pipeline supports sub-minute latency windowing and can publish anomaly events immediately for alerting.

Google Cloud Certified - Professional Cloud Architect Practice Test

Google Cloud Certified - Professional Cloud Architect Practice Test

Google Cloud Certified MCQ 4