Excellent Professional-Cloud-Architect Updated 2022 Dumps With 100% Exam Passing Guarantee
Best way to practice test for Google Professional-Cloud-Architect
NEW QUESTION 42
You deploy your custom java application to google app engine.
It fails to deploy and gives you the following stack trace:
- A. Recompile the CLoakedServlet class using and MD5 hash instead of SHA1
- B. Digitally sign all of your JAR files and redeploy your application.
- C. Upload missing JAR files and redeploy your application
Answer: B
NEW QUESTION 43
Case Study: 5 - Dress4win
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model. The application has grown from a few servers in the founder's garage to several hundred servers and appliances in a collocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster.
Dress4Win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is moving their development and test environments. They are also building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location. All servers run Ubuntu LTS v16.04.
Databases:
MySQL. 1 server for user data, inventory, static data:
* - MySQL 5.8
- 8 core CPUs
- 128 GB of RAM
- 2x 5 TB HDD (RAID 1)
Redis 3 server cluster for metadata, social graph, caching. Each server is:
* - Redis 3.2
- 4 core CPUs
- 32GB of RAM
Compute:
40 Web Application servers providing micro-services based APIs and static content.
* - Tomcat - Java
- Nginx
- 4 core CPUs
- 32 GB of RAM
20 Apache Hadoop/Spark servers:
* - Data analysis
- Real-time trending calculations
- 8 core CPUS
- 128 GB of RAM
- 4x 5 TB HDD (RAID 1)
3 RabbitMQ servers for messaging, social notifications, and events:
* - 8 core CPUs
- 32GB of RAM
Miscellaneous servers:
* - Jenkins, monitoring, bastion hosts, security scanners
- 8 core CPUs
- 32GB of RAM
Storage appliances:
iSCSI for VM hosts
* Fiber channel SAN - MySQL databases
* - 1 PB total storage; 400 TB available
NAS - image storage, logs, backups
* - 100 TB total storage; 35 TB available
Business Requirements
Build a reliable and reproducible environment with scaled parity of production.
* Improve security by defining and adhering to a set of security and Identity and Access
* Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
* Analyze and optimize architecture for performance in the cloud.
* Technical Requirements
Easily create non-production environment in the cloud.
* Implement an automation framework for provisioning resources in cloud.
* Implement a continuous deployment process for deploying applications to the on-premises
* datacenter or cloud.
Support failover of the production environment to cloud during an emergency.
* Encrypt data on the wire and at rest.
* Support multiple private connections between the production data center and cloud
* environment.
Executive Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a competitor could use a public cloud platform to offset their up-front investment and free them to focus on developing better features. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years for a public cloud strategy achieves a cost reduction between 30% and 50% over our current model.
For this question, refer to the Dress4Win case study. You are responsible for the security of data stored in Cloud Storage for your company, Dress4Win. You have already created a set of Google Groups and assigned the appropriate users to those groups. You should use Google best practices and implement the simplest design to meet the requirements.
Considering Dress4Win's business and technical requirements, what should you do?
- A. Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.
Enable default storage encryption before storing files in Cloud Storage. - B. Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.
Encrypt data with a customer-supplied encryption key when storing files in Cloud Storage. - C. Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Utilize Google's default encryption at rest when storing files in Cloud Storage.
- D. Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Ensure that the default Cloud KMS key is set before storing files in Cloud Storage.
Answer: D
NEW QUESTION 44
You need to migrate Hadoop jobs for your company's Data Science team without modifying the underlying infrastructure. You want to minimize costs and infrastructure management effort. What should you do?
- A. Create a Dataproc cluster using preemptible worker instances.
- B. Manually deploy a Hadoop cluster on Compute Engine using preemptible instances.
- C. Manually deploy a Hadoop cluster on Compute Engine using standard instances.
- D. Create a Dataproc cluster using standard worker instances.
Answer: A
NEW QUESTION 45
You want to make a copy of a production Linux virtual machine in the US-Central region. You want to manage and replace the copy easily if there are changes on the production virtual machine. You will deploy the copy as a new instance in a different project in the US-East region.
What steps must you take?
- A. Create an image file from the root disk with Linux dd command, create a new virtual machine instance in the US-East region
- B. Create a snapshot of the root disk, create an image file in Google Cloud Storage from the snapshot, and create a new virtual machine instance in the US-East region using the image file the root disk.
- C. Create a snapshot of the root disk and select the snapshot as the root disk when you create a new virtual machine instance in the US-East region.
- D. Use the Linux dd and netcat commands to copy and stream the root disk contents to a new virtual machine instance in the US-East region.
Answer: B
NEW QUESTION 46
You write a Python script to connect to Google BigQuery from a Google Compute Engine virtual machine.
The script is printing errors that it cannot connect to BigQuery. What should you do to fix the script?
- A. Create a new service account with BigQuery access and execute your script with that user
- B. Install the bq component for gccloud with the command gcloud components install bq.
- C. Run your script on a new virtual machine with the BigQuery access scope enabled
- D. Install the latest BigQuery API client library for Python
Answer: D
Explanation:
Explanation
https://cloud.google.com/bigquery/docs/python-client-migration
Applications that use BigQuery must be associated with a Google Cloud Platform Console project with the BigQuery API enabled.
Reference: https://cloud.google.com/bigquery/create-simple-app-api
NEW QUESTION 47
To reduce costs, the Director of Engineering has required all developers to move their development infrastructure resources from on-premises virtual machines (VMs) to Google Cloud Platform. These resources go through multiple start/stop events during the day and require state to persist. You have been asked to design the process of running a development environment in Google Cloud while providing cost visibility to the finance department.
Which two steps should you take? Choose 2 answers.
- A. Use the - -no-auto-delete flag on all persistent disks and stop the VM
- B. Apply VM CPU utilization label and include it in the BigQuery billing export
- C. Store all state into local SSD, snapshot the persistent disks, and terminate the VM
- D. Use Google BigQuery billing export and labels to associate cost to groups
- E. Store all state in Google Cloud Storage, snapshot the persistent disks, and terminate the VM
- F. Use the - -auto-delete flag on all persistent disks and terminate the VM
Answer: B,C
Explanation:
C: Billing export to BigQuery enables you to export your daily usage and cost estimates automatically throughout the day to a BigQuery dataset you specify.
Labels applied to resources that generate usage metrics are forwarded to the billing system so that you can break down your billing charges based upon label criteria. For example, the Compute Engine service reports metrics on VM instances. If you deploy a project with 2,000 VMs, each of which is labeled distinctly, then only the first 1,000 label maps seen within the 1 hour window will be preserved.
E: You cannot stop an instance that has a local SSD attached. Instead, you must migrate your critical data off of the local SSD to a persistent disk or to another instance before you delete the instance completely.
You can stop an instance temporarily so you can come back to it at a later time. A stopped instance does not incur charges, but all of the resources that are attached to the instance will still be charged. Alternatively, if you are done using an instance, delete the instance and its resources to stop incurring charges.
Reference:
https://cloud.google.com/billing/docs/how-to/export-data-bigquery
https://cloud.google.com/compute/docs/instances/stopping-or-deleting-an-instance
NEW QUESTION 48
Your company sends all Google Cloud logs to Cloud Logging. Your security team wants to monitor the logs. You want to ensure that the security team can react quickly if an anomaly such as an unwanted firewall change or server breach is detected. You want to follow Google-recommended practices. What should you do?
- A. Export logs to a Pub/Sub topic, and trigger Cloud Function with the relevant log events.
- B. Schedule a cron job with Cloud Scheduler. The scheduled job queries the logs every minute for the relevant events.
- C. Export logs to a Cloud Storage bucket, and trigger Cloud Run with the relevant log events.
- D. Export logs to BigQuery, and trigger a query in BigQuery to process the log data for the relevant events.
Answer: A
Explanation:
Reference:
https://cloud.google.com/blog/products/management-tools/automate-your-response-to-a-cloud-logging-event
NEW QUESTION 49
Your solution is producing performance bugs in production that you did not see in staging and test environments. You want to adjust your test and deployment procedures to avoid this problem in the future.
What should you do?
- A. Deploy fewer changes to production.
- B. Deploy smaller changes to production.
- C. Deploy changes to a small subset of users before rolling out to production.
- D. Increase the load on your test and staging environments.
Answer: D
NEW QUESTION 50
Your web application uses Google Kubernetes Engine to manage several workloads. One workload requires a consistent set of hostnames even after pod scaling and relaunches.
Which feature of Kubernetes should you use to accomplish this?
- A. Role-based access control
- B. Container environment variables
- C. Persistent Volumes
- D. StatefulSets
Answer: D
Explanation:
Explanation
https://kubernetes.io/docs/tutorials/stateful-application/basic-stateful-set/
NEW QUESTION 51
Your company operates nationally and plans to use GCP for multiple batch workloads, including some that
are not time-critical. You also need to use GCP services that are HIPAA-certified and manage service
costs.
How should you design to meet Google best practices?
- A. Provision standard VMs to the same region to reduce cost. Disable and then discontinue use of all
GCP services and APIs that are not HIPAA-compliant. - B. Provision standard VMs in the same region to reduce cost. Discontinue use of all GCP services and
APIs that are not HIPAA-compliant. - C. Provisioning preemptible VMs to reduce cost. Disable and then discontinue use of all GCP and APIs
that are not HIPAA-compliant. - D. Provisioning preemptible VMs to reduce cost. Discontinue use of all GCP services and APIs that are
not HIPAA-compliant.
Answer: C
NEW QUESTION 52
You need to deploy a stateful workload on Google Cloud. The workload can scale horizontally, but each instance needs to read and write to the same POSIX filesystem. At high load, the stateful workload needs to support up to 100 MB/s of writes. What should you do?
- A. Use a persistent disk for each instance.
- B. Use a regional persistent disk for each instance.
- C. Create a Cloud Filestore instance and mount it in each instance.
- D. Create a Cloud Storage bucket and mount it in each instance using gcsfuse.
Answer: D
Explanation:
Reference: https://cloud.google.com/storage/docs/gcs-fuse
NEW QUESTION 53
You need to set up Microsoft SQL Server on GCP. Management requires that there's no downtime in case of a data center outage in any of the zones within a GCP region. What should you do?
- A. Configure a Cloud SQL instance with high availability enabled.
- B. Set up SQL Server Always On Availability Groups using Windows Failover Clustering. Place nodes in different zones.
- C. Configure a Cloud Spanner instance with a regional instance configuration.
- D. Set up SQL Server on Compute Engine, using Always On Availability Groups using Windows Failover Clustering. Place nodes in different subnets.
Answer: B
Explanation:
Explanation
https://cloud.google.com/vpc/docs/vpc
NEW QUESTION 54
Your development team has installed a new Linux kernel module on the batch servers in Google Compute Engine (GCE) virtual machines (VMs) to speed up the nightly batch process. Two days after the installation,
50% of the batch servers failed the nightly batch run. You want to collect details on the failure to pass back to the development team.
Which three actions should you take? Choose 3 answers.
- A. Export a debug VM into an image, and run the image on a local server where kernel log messages will be displayed on the native screen
- B. Use gcloud or Cloud Console to connect to the serial console and observe the logs
- C. Read the debug GCE Activity log using the API or Cloud Console
- D. Use Stackdriver Logging to search for the module log entries
- E. Identify whether a live migration event of the failed server occurred, using in the activity log
- F. Adjust the Google Stackdriver timeline to match the failure time, and observe the batch server metrics
Answer: B,D,F
NEW QUESTION 55
For this question, refer to the Mountkirk Games case study. Which managed storage option meets Mountkirk's technical requirement for storing game activity in a time series database service?
- A. BigQuery
- B. Cloud Spanner
- C. Cloud Datastore
- D. Cloud Bigtable
Answer: D
NEW QUESTION 56
Your company is building a new architecture to support its data-centric business focus. You are responsible for setting up the network. Your company's mobile and web-facing applications will be deployed on- premises, and all data analysis will be conducted in GCP. The plan is to process and load 7 years of archived .csv files totaling 900 TB of data and then continue loading 10 TB of data daily. You currently have an existing 100-MB internet connection.
What actions will meet your company's needs?
- A. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily.
- B. Compress and upload both archived files and files uploaded daily using the gsutil -moption.
- C. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a connection with Google using a Dedicated Interconnect or Direct Peering connection and use it to upload files daily.
- D. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish one Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily using the gsutil-m option.
Answer: C
Explanation:
Explanation/Reference:
NEW QUESTION 57
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources.
What Google domain and project structure should you recommend?
- A. Create two G Suite accounts to manage users: one for development/test/staging and one for production.
Each account should contain one project for every application - B. Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment
- C. Create a single G Suite account to manage users with each stage of each application in its own project
- D. Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications
Answer: B
Explanation:
Note: The principle of least privilege and separation of duties are concepts that, although semantically different, are intrinsically related from the standpoint of security. The intent behind both is to prevent people from having higher privilege levels than they actually need
* Principle of Least Privilege: Users should only have the least amount of privileges required to perform their job and no more. This reduces authorization exploitation by limiting access to resources such as targets, jobs, or monitoring templates for which they are not authorized.
* Separation of Duties: Beyond limiting user privilege level, you also limit user duties, or the specific jobs they can perform. No user should be given responsibility for more than one related function. This limits the ability of a user to perform a malicious action and then cover up that action.
Reference: https://cloud.google.com/kms/docs/separation-of-duties
NEW QUESTION 58
Your applications will be writing their logs to BigQuery for analysis. Each application should have its own table. Any logs older than 45 days should be removed. You want to optimize storage and follow Google- recommended practices. What should you do?
- A. Rely on BigQuery's default behavior to prune application logs older than 45 days
- B. Make the tables time-partitioned, and configure the partition expiration at 45 days
- C. Configure the expiration time for your tables at 45 days
- D. Create a script that uses the BigQuery command line tool (bq) to remove records older than 45 days
Answer: B
NEW QUESTION 59
......
Google Certified Professional - Cloud Architect (GCP) Certification Sample Questions and Practice Exam: https://www.prep4away.com/Google-certification/braindumps.Professional-Cloud-Architect.ete.file.html
Real Exam Questions & Answers - Google Professional-Cloud-Architect Dump is Ready: https://drive.google.com/open?id=1eWdDBvN1KzwVbSE1F5sO0y_JmnDbHsJY