PROFESSIONAL-CLOUD-ARCHITECT Online Practice Questions and Answers

JencoMart has built a version of their application on Google Cloud Platform that serves traffic to Asia. You want to measure success against their business and technical goals.

Which metrics should you track?

A. Error rates for requests from Asia

B. Latency difference between US and Asia

C. Total visits, error rates, and latency from Asia

D. Total visits and average latency for users from Asia

E. The number of character sets present in the database

Your company has an application running on Compute Engine mat allows users to play their favorite music. There are a fixed number of instances Files are stored in Cloud Storage and data is streamed directly to users. Users are reporting that they sometimes need to attempt to play popular songs multiple times before they are successful. You need to improve the performance of the application. What should you do?

A. 1. Copy popular songs into CloudSQL as a blob

2. Update application code to retrieve data from CloudSQL when Cloud Storage is overloaded

B. 1. Create a managed instance group with Compute Engine instances

2. Create a global toad balancer and configure ii with two backbends

*

Managed instance group

*

Cloud Storage bucket

3. Enable Cloud CDN on the bucket backend

C. 1. Mount the Cloud Storage bucket using gcsfuse on all backend Compute Engine instances

2. Serve muse files directly from the backend Compute Engine instance

D. 1. Create a Cloud Filestore NFS volume and attach it to the backend Compute Engine instances

2.

Download popular songs in Cloud Filestore

3.

Serve music Wes directly from the backend Compute Engine instance

Your BigQuery project has several users. For audit purposes, you need to see how many queries each user ran in the last month.

A. Connect Google Data Studio to BigQuery. Create a dimension for the users and a metric for the amount of queries per user.

B. In the BigQuery interface, execute a query on the JOBS table to get the required information.

C. Use `bq show' to list all jobs. Per job, use `bq Is' to list job information and get the required information.

D. Use Cloud Audit Logging to view Cloud Audit Logs, and create a filter on the query operation to get the required information.

You are developing your microservices application on Google Kubernetes Engine. During testing, you want to validate the behavior of your application in case a specific microservice should suddenly crash. What should you do?

A. Add a taint to one of the nodes of the Kubernetes cluster. For the specific microservice, configure a pod anti-affinity label that has the name of the tainted node as a value.

B. Use Istio's fault injection on the particular microservice whose faulty behavior you want to simulate.

C. Destroy one of the nodes of the Kubernetes cluster to observe the behavior.

D. Configure Istio's traffic management features to steer the traffic away from a crashing microservice.

To reduce costs, the Director of Engineering has required all developers to move their development infrastructure resources from on-premises virtual machines (VMs) to Google Cloud Platform. These resources go through multiple start/stop events during the day and require state to persist. You have been asked to design the process of running a development environment in Google Cloud while providing cost visibility to the finance department. Which two steps should you take? Choose 2 answers

A. Use the--no-auto-delete flag on all persistent disks and stop the VM.

B. Use the-auto-delete flag on all persistent disks and terminate the VM.

C. Apply VM CPU utilization label and include it in the BigQuery billing export.

D. Use Google BigQuery billing export and labels to associate cost to groups.

E. Store all state into local SSD, snapshot the persistent disks, and terminate the VM.

F. Store all state in Google Cloud Storage, snapshot the persistent disks, and terminate the VM.

You are managing several projects on Google Cloud and need to interact on a daily basis with BigQuery, Bigtable and Kubernetes Engine using the gcloud CLI tool

You are travelling a lot and work on different workstations during the week

You want to avoid having to manage the gcloud CLI manually

What should you do?

A. Use a package manager to install gcloud on your workstations instead of installing it manually

B. Create a Compute Engine instance and install gcloud on the instance Connect to this instance via SSH to always use the same gcloud installation when interacting with Google Cloud

C. Install gcloud on all of your workstations Run the command gcloud components auto-update on each workstation

D. Use Google Cloud Shell in the Google Cloud Console to interact with Google Cloud

You created a pipeline that can deploy your source code changes to your infrastructure in instance groups for self healing.

One of the changes negatively affects your key performance indicator.

You are not sure how to fix it and investigation could take up to a week.

What should you do

A. Log in to a server, and iterate a fix locally

B. Change the instance group template to the previous one, and delete all instances.

C. Revert the source code change and rerun the deployment pipeline

D. Log into the servers with the bad code change, and swap in the previous code

Your company has an application running on a deployment in a GKE cluster. You have a separate cluster for development, staging and production. You have discovered that the team is able to deploy a Docker image to the production cluster without first testing the deployment in development and then staging. You want to allow the team to have autonomy but want to prevent this from happening. You want a Google Cloud solution that can be implemented quickly with minimal effort. What should you do?

A. Create a Kubernetes admission controller to prevent the container from starting if it is not approved for usage in the given environment

B. Configure a Kubernetes lifecycle hook to prevent the container from starting if it is not approved for usage in the given environment

C. Implement a corporate policy to prevent teams from deploying Docker image to an environment unless the Docker image was tested in an earlier environment

D. Configure the binary authorization policies for the development, staging and production clusters. Create attestations as part of the continuous integration pipeline"

You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy the VPN?

A. Use VPC Network Peering between the VPC and the on-premises network.

B. Expose the VPC to the on-premises network using IAM and VPC Sharing.

C. Create a global Cloud VPN Gateway with VPN tunnels from each region to the on-premises peer gateway.

D. Deploy Cloud VPN Gateway in each region. Ensure that each region has at least one VPN tunnel to the on-premises peer gateway.

You have an application deployed on Kubernetes Engine using a Deployment named echo-deployment. The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application.

What should you do?

A. Use kubect set image deployment/echo-deployment

B. Use the rolling update functionality of the Instance Group behind the Kubernetes cluster

C. Update the deployment yaml file with the new container image. Use kubect1 delete deployment/ echo-deployment and kubect1 create -f

D. Update the service yaml file which the new container image. Use kubect1 delete service/echoservice and kubect1 create -f