최신 Professional-Cloud-Architect 무료덤프 - Google Certified Professional

문제1

You have developed a non-critical update to your application that is running in a managed instance group, and have created a new instance template with the update that you want to release. To prevent any possible impact to the application, you don't want to update any running instances. You want any new instances that are created by the managed instance group to contain the new update. What should you do?

A. Start a new rolling replace operation.

B. Start a new rolling restart operation.

C. Start a new rolling update. Select the Opportunistic update mode.

D. Start a new rolling update. Select the Proactive update mode.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Your company has just recently activated Cloud Identity to manage users. The Google Cloud Organization has been configured as wed. The security learn needs to secure protects that will be part of the Organization.
They want to prohibit IAM users outside the domain from gaining permissions from now on. What should they do?

A. Create a technical user (e g . crawler@yourdomain com), and give it the protect owner rote at root organization level Write a bash script that
* Lists all me IAM rules of all projects within the organization
* Deletes all users that do not belong to the company domain Create a Compute Engine instance m a project within the Organization and configure gcloud to be executed with technical user credentials Configure a cron job that executes the bash script every hour.

B. Configure an organization policy to restrict identities by domain

C. Configure an organization policy to block creation of service accounts

D. Configure Cloud Scheduler o trigger a Cloud Function every hour that removes all users that don't belong to the Cloud identity domain from all projects.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

For this question, refer to the TerramEarth case study. You need to implement a reliable, scalable GCP solution for the data warehouse for your company, TerramEarth. Considering the TerramEarth business and technical requirements, what should you do?

A. Replace the existing data warehouse with BigQuery. Use table partitioning.

B. Replace the existing data warehouse with a Compute Engine instance with 96 CPUs.

C. Replace the existing data warehouse with a Compute Engine instance with 96 CPUs. Add an additional Compute Engine pre-emptible instance with 32 CPUs.

D. Replace the existing data warehouse with BigQuery. Use federated data sources.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

You are implementing the infrastructure for a web service on Google Cloud. The web service needs to receive and store the data from 500,000 requests per second. The data will be queried later in real time, based on exact matches of a known set of attributes. There will be periods where the web service will not receive any requests. The business wants to keep costs low. Which web service platform and database should you use for the application?

A. A Compute Engine autoscaling managed instance group and Cloud Bigtable

B. A Compute Engine autoscaling managed instance group and BigQuery

C. Cloud Run and Cloud Bigtable

D. Cloud Run and BigQuery

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Your web application must comply with the requirements of the European Union's General Data Protection Regulation (GDPR). You are responsible for the technical architecture of your web application. What should you do?

A. Ensure that your web application only uses native features and services of Google Cloud Platform, because Google already has various certifications and provides "pass-on" compliance when you use native features.

B. Define a design for the security of data in your web application that meets GDPR requirements.

C. Ensure that Cloud Security Scanner is part of your test planning strategy in order to pick up any compliance gaps.

D. Enable the relevant GDPR compliance setting within the GCPConsole for each of the services in use within your application.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Your company has a Google Workspace account and Google Cloud Organization Some developers in the company have created Google Cloud projects outside of the Google Cloud Organization You want to create an Organization structure that allows developers to create projects, but prevents them from modifying production projects You want to manage policies for all projects centrally and be able to set more restrictive policies for production projects You want to minimize disruption to users and developers when business needs change in the future You want to follow Google-recommended practices How should you design the Organization structure?

A. 1 Create folders under the Organization resource named "Development" and Production'
2 Grant all developers the Project Creator IAM role on the ""Development1 folder 3. Move the developer projects into the "Development" folder
4 Set the policies for all projects on the Organization
5 Additionally set the production policies on the "Production" folder

B. 1 Create a second Google Workspace account and Organization
2 Grant all developers the Project Creator IAM role on the new Organization
3 Move the developer projects into the new Organization
4 Set the policies for all projects on both Organizations.
5 Additionally set the production policies on the original Organization

C. 1 Designate the Organization for production projects only
2 Ensure that developers do not have the Project Creator IAM role on the Organization
3 Create development projects outside of the Organization using the developer Google Workspace accounts
4 Set the policies for all projects on the Organization
5 Additionally set the production policies on the individual production projects

D. 1 Create a folder under the Organization resource named "Production '
2 Grant all developers the Project Creator IAM role on the Organization 3. Move the developer projects into the Organization
4 Set the policies for all projects on the Organization
5 Additionally set the production policies on the 'Production" folder

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제7

You have found an error in your App Engine application caused by missing Cloud Datastore indexes. You have created a YAML file with the required indexes and want to deploy these new indexes to Cloud Datastore.
What should you do?

A. Create an HTTP request to the built-in python module to send the index configuration file to your application

B. Point gcloud datastore create-indexes to your configuration file

C. Upload the configuration file the App Engine's default Cloud Storage bucket, and have App Engine detect the new indexes

D. In the GCP Console, use Datastore Admin to delete the current indexes and upload the new configuration file

정답: B

문제8

You have a Python web application with many dependencies that requires 0.1 CPU cores and 128 MB of memory to operate in production. You want to monitor and maximize machine utilization. You also to reliably deploy new versions of the application. Which set of steps should you take?

A. Perform the following:
1) Create a managed instance group with n1-standard-1 type machines.
2) Build a Compute Engine image from the production branch that contains all of the dependencies and automatically starts the Python app.
3) Rebuild the Compute Engine image, and update the instance template to deploy new production releases.

B. Perform the following:
1) Create a managed instance group with f1-micro type machines.
2) Use a startup script to clone the repository, check out the production branch, install the dependencies, and start the Python app.
3) Restart the instances to automatically deploy new production releases.

C. Perform the following:
1) Create a Kubernetes Engine (GKE) cluster with n1-standard-4 type machines.
2) Build a Docker image from the master branch will all of the dependencies, and tag it with "latest".
3) Create a Kubernetes Deployment in the default namespace with the imagePullPolicy set to
"Always".
Restart the pods to automatically deploy new production releases.

D. Perform the following:
1) Create a Kubernetes Engine cluster with n1-standard-1 type machines.
2) Build a Docker image from the production branch with all of the dependencies, and tag it with the version number.
3) Create a Kubernetes Deployment with the imagePullPolicy set to "IfNotPresent" in the staging namespace, and then promote it to the production namespace after testing.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제9

Your customer wants to do resilience testing of their authentication layer. This consists of a regional managed instance group serving a public REST API that reads from and writes to a Cloud SQL instance.
What should you do?

A. Deploy intrusion detection software to your virtual machines to detect and log unauthorized access.

B. Schedule a disaster simulation exercise during which you can shut off all VMs in a zone to see how your application behaves.

C. Engage with a security company to run web scrapes that look your users' authentication data om malicious websites and notify you if any if found.

D. Configure a red replica for your Cloud SQL instance in a different zone than the master, and then manually trigger a failover while monitoring KPIs for our REST API.

정답: B

문제10

Your company captures all web traffic data in Google Analytics 260 and stores it in BigQuery. Each country has its own dataset. Each dataset has multiple tables. You want analysts from each country to be able to see and query only the data for their respective countries.
How should you configure the access rights?

A. Create a group per country. Add analysts to their respective country-groups. Create a single group
'all_analysts', and add all country-groups as members. Grant the 'all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate dataset with view access with each respective analyst country-group.

B. Create a group per country. Add analysts to their respective country-groups. Create a single group
'all_analysts', and add all country-groups as members. Grant the 'all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group.

C. Create a group per country. Add analysts to their respective country-groups. Create a single group
'all_analysts', and add all country-groups as members. Grant the 'all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate table with view access with each respective analyst countrygroup.

D. Create a group per country. Add analysts to their respective country-groups. Create a single group
'all_analysts', and add all country-groups as members. Grant the 'all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate tables with view access with each respective analyst countrygroup.

정답: B

문제11

For this question, refer to the Helicopter Racing League (HRL) case study. The HRL development team releases a new version of their predictive capability application every Tuesday evening at 3 a.m. UTC to a repository. The security team at HRL has developed an in-house penetration test Cloud Function called Airwolf.
The security team wants to run Airwolf against the predictive capability application as soon as it is released every Tuesday. You need to set up Airwolf to run at the recurring weekly cadence. What should you do?

A. Set up a Cloud Logging sink and a Cloud Storage bucket that triggers a Cloud Function.

B. Configure the deployment job to notify a Pub/Sub queue that triggers a Cloud Function.

C. Set up Identity and Access Management (IAM) and Confidential Computing to trigger a Cloud Function.

D. Set up Cloud Tasks and a Cloud Storage bucket that triggers a Cloud Function.

정답: D

문제12

One of your primary business objectives is being able to trust the data stored in your application. You want to log all changes to the application data. How can you design your logging system to verify authenticity of your logs?

A. Digitally sign each timestamp and log entry and store the signature.

B. Write the log concurrently in the cloud and on premises.

C. Create a JSON dump of each log entry and store it in Google Cloud Storage.

D. Use a SQL database and limit who can modify the log table.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제13

For this question, refer to the EHR Healthcare case study. In the past, configuration errors put public IP addresses on backend servers that should not have been accessible from the Internet. You need to ensure that no one can put external IP addresses on backend Compute Engine instances and that external IP addresses can only be configured on frontend Compute Engine instances. What should you do?

A. Revoke the compute.networkAdmin role from all users in the project with front end instances.

B. Create a custom Identity and Access Management (IAM) role named GCE_FRONTEND with the compute.addresses.create permission.

C. Create an Identity and Access Management (IAM) policy that maps the IT staff to the compute.networkAdmin role for the organization.

D. Create an Organizational Policy with a constraint to allow external IP addresses only on the frontend Compute Engine instances.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제14

Your company has a project in Google Cloud with three Virtual Private Clouds (VPCs). There is a Compute Engine instance on each VPC. Network subnets do not overlap and must remain separated. The network configuration is shown below.

Instance #1 is an exception and must communicate directly with both Instance #2 and Instance #3 via internal IPs. How should you accomplish this?

A. Peer all three VPCs:
*Peer VPC #1 with VPC #2.
*Peer VPC #2 with VPC #3.
Update firewall rules to enable traffic between the instances.

B. Add two additional NICs to Instance #1 with the following configuration:
*NIC1
VPC: VPC #2
SUBNETWORK: subnet #2
*NIC2
VPC: VPC #3
SUBNETWORK: subnet #3
Update firewall rules to enable traffic between instances.

C. Create two VPN tunnels via CloudVPN:
*1 between VPC #1 and VPC #2.
*1 between VPC #2 and VPC #3.
Update firewall rules to enable traffic between the instances.

D. Create a cloud router to advertise subnet #2 and subnet #3 to subnet #1.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제15

Your company wants to track whether someone is present in a meeting room reserved for a scheduled meeting. There are 1000 meeting rooms across 5 offices on 3 continents. Each room is equipped with a motion sensor that reports its status every second. The data from the motion detector includes only a sensor ID and several different discrete items of information. Analysts will use this data, together with information about account owners and office locations. Which database type should you use?

A. Flat file

B. Blobstore

C. Relational

D. NoSQL

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제16

Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable. What should you do?

A. Make sure the developer is tagging the commits with :latest

B. Make sure a developer is adding a comment to the commit that links to the deployment.

C. Make the container tag match the source code commit hash.

D. Make sure a developer is tagging the code commit with the date and time of commit

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제17

You want to enable your running Google Container Engine cluster to scale as demand for your application changes.
What should you do?

A. Update the existing Container Engine cluster with the following command:
gcloud alpha container clusters update mycluster --enable-autoscaling --min-nodes=1 --max-nodes=10

B. Create a new Container Engine cluster with the following command:gcloud alpha container clusters create mycluster --enable-autocaling --min-nodes=1 --max-nodes=10 and redeploy your application.

C. Add additional nodes to your Container Engine cluster using the following command:
gcloud container clusters resize CLUSTER_NAME --size 10

D. Add a tag to the instances in the cluster with the following command:
gcloud compute instances add-tags INSTANCE --tags enable --autoscaling max-nodes-10

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제18

You are developing your microservices application on Google Kubernetes Engine. During testing, you want to validate the behavior of your application in case a specific microservice should suddenly crash. What should you do?

A. Add a taint to one of the nodes of the Kubernetes cluster. For the specific microservice, configure a pod anti-affinity label that has the name of the tainted node as a value.

B. Configure Istio's traffic management features to steer the traffic away from a crashing microservice.

C. Destroy one of the nodes of the Kubernetes cluster to observe the behavior.

D. Use Istio's fault injection on the particular microservice whose faulty behavior you want to simulate.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제19

Your company has an application running on multiple Compute Engine instances. You need to ensure that the application can communicate with an on-premises service that requires high throughput via internal IPs, while minimizing latency. What should you do?

A. Use Cloud VPN to configure a VPN tunnel between the on-premises environment and Google Cloud.

B. Use OpenVPN to configure a VPN tunnel between the on-premises environment and Google Cloud.

C. Configure a direct peering connection between the on-premises environment and Google Cloud.

D. Configure a Cloud Dedicated Interconnect connection between the on-premises environment and Google Cloud.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제20

For this question, refer to the TerramEarth case study
You analyzed TerramEarth's business requirement to reduce downtime, and found that they can achieve a majority of time saving by reducing customers' wait time for parts You decided to focus on reduction of the 3 weeks aggregate reporting time Which modifications to the company's processes should you recommend?

A. Migrate from FTP to streaming transport, migrate from CSV to binary format, and develop machine learning analysis of metrics.

B. Migrate from FTP to SFTP transport, develop machine learning analysis of metrics, and increase dealer local inventory by a fixed factor.

C. Migrate from CSV to binary format, migrate from FTP to SFTP transport, and develop machine learning analysis of metrics.

D. Increase fleet cellular connectivity to 80%, migrate from FTP to streaming transport, and develop machine learning analysis of metrics.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

최신 Professional-Cloud-Architect 무료덤프 - Google Certified Professional - Cloud Architect (GCP)

우리와 연락하기

유용한 링크

최신 업데이트