최신 Professional-Cloud-Architect 무료덤프 - Google Certified Professional

문제1

You are deploying an application on App Engine that needs to integrate with an on-premises database. For security purposes, your on-premises database must not be accessible through the public Internet. What should you do?

A. Deploy your application on App Engine flexible environment and use App Engine firewall rules to limit access to the on-premises database.

B. Deploy your application on App Engine flexible environment and use Cloud VPN to limit access to the on-premises database.

C. Deploy your application on App Engine standard environment and use Cloud VPN to limit access to the onpremises database.

D. Deploy your application on App Engine standard environment and use App Engine firewall rules to limit access to the open on-premises database.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Your company is running a stateless application on a Compute Engine instance. The application is used heavily during regular business hours and lightly outside of business hours. Users are reporting that the application is slow during peak hours. You need to optimize the application's performance. What should you do?

A. Create an instance template from the existing disk. Create a custom image from the instance template.Create an autoscaled managed instance group from the custom image.

B. Create a snapshot of the existing disk. Create an instance template from the snapshot. Create an autoscaled managed instance group from the instance template.

C. Create a custom image from the existing disk. Create an instance template from the custom image.
Create an autoscaled managed instance group from the instance template.

D. Create a snapshot of the existing disk. Create a custom image from the snapshot. Create an autoscaled managed instance group from the custom image.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Your company has just recently activated Cloud Identity to manage users. The Google Cloud Organization has been configured as wed. The security learn needs to secure protects that will be part of the Organization.
They want to prohibit IAM users outside the domain from gaining permissions from now on. What should they do?

A. Create a technical user (e g . crawler@yourdomain com), and give it the protect owner rote at root organization level Write a bash script that
* Lists all me IAM rules of all projects within the organization
* Deletes all users that do not belong to the company domain Create a Compute Engine instance m a project within the Organization and configure gcloud to be executed with technical user credentials Configure a cron job that executes the bash script every hour.

B. Configure an organization policy to restrict identities by domain

C. Configure an organization policy to block creation of service accounts

D. Configure Cloud Scheduler o trigger a Cloud Function every hour that removes all users that don't belong to the Cloud identity domain from all projects.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

For this question, refer to the TerramEarth case study. You need to implement a reliable, scalable GCP solution for the data warehouse for your company, TerramEarth. Considering the TerramEarth business and technical requirements, what should you do?

A. Replace the existing data warehouse with BigQuery. Use table partitioning.

B. Replace the existing data warehouse with a Compute Engine instance with 96 CPUs.

C. Replace the existing data warehouse with a Compute Engine instance with 96 CPUs. Add an additional Compute Engine pre-emptible instance with 32 CPUs.

D. Replace the existing data warehouse with BigQuery. Use federated data sources.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

An application development team has come to you for advice.They are planning to write and deploy an HTTP(S) API using Go 1.12. The API will have a very unpredictable workload and must remain reliable during peaks in traffic. They want to minimize operational overhead for this application. What approach should you recommend?

A. Develop the application for App Engine standard environment

B. Use a Managed Instance Group when deploying to Compute Engine

C. Develop an application with containers, and deploy to Google Kubernetes Engine (GKE)

D. Develop the application for App Engine Flexible environment using a custom runtime

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제6

For this question, refer to the TerramEarth case study
Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data. What should you do?

A. Build SAML 2.0 SSO compatibility into your authentication system.

B. Build or leverage an OAuth-compatible access control system.

C. Restrict data access based on the source IP address of the partner systems.

D. Create secondary credentials for each dealer that can be given to the trusted third party.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제7

Your company has a Google Cloud project that uses BigQuery for data warehousing on a pay-per-use basis.
You want to monitor queries in real time to discover the most costly queries and which users spend the most.
What should you do?

A. 1. Create a Cloud Logging sink to export BigQuery data access logs to Cloud Storage. 2. Develop a Dataflow pipeline to compute the cost of queries split by users.

B. 1. Activate billing export into BigQuery.
2. Perform a BigQuery query on the billing table to extract the information you need.

C. 1. Create a Cloud Logging sink to export BigQuery data access logs to BigQuery.
2. Perform a BigQuery query on the generated table to extract the information you need.

D. 1. In the BigQuery dataset that contains all the tables to be queried, add a label for each user that can launch a query.
2. Open the Billing page of the project.
3. Select Reports.
4. Select BigQuery as the product and filter by the user you want to check.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제8

For this question, refer to the TerramEarth case study. A new architecture that writes all incoming data to BigQuery has been introduced. You notice that the data is dirty, and want to ensure data quality on an automated daily basis while managing cost.
What should you do?

A. Create a SQL statement on the data in BigQuery, and save it as a view. Run the view daily, and save the result to a new table.

B. Create a Cloud Function that reads data from BigQuery and cleans it. Trigger it. Trigger the Cloud Function from a Compute Engine instance.

C. Use Cloud Dataprep and configure the BigQuery tables as the source. Schedule a daily job to clean the data.

D. Set up a streaming Cloud Dataflow job, receiving data by the ingestion process. Clean the data in a Cloud Dataflow pipeline.

정답: D

문제9

Your company has an application running on a deployment in a GKE cluster. You have a separate cluster for development, staging and production. You have discovered that the team is able to deploy a Docker image to the production cluster without first testing the deployment in development and then staging. You want to allow the team to have autonomy but want to prevent this from happening. You want a Google Cloud solution that can be implemented quickly with minimal effort. What should you do?

A. Configure a Kubernetes lifecycle hook to prevent the container from starting if it is not approved for usage in the given environment

B. Implement a corporate policy to prevent teams from deploying Docker image to an environment unless the Docker image was tested in an earlier environment

C. Create a Kubernetes admission controller to prevent the container from starting if it is not approved for usage in the given environment

D. Configure the binary authorization policies for the development, staging and production clusters.Create attestations as part of the continuous integration pipeline"

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제10

A development manager is building a new application He asks you to review his requirements and identify what cloud technologies he can use to meet them. The application must
1. Be based on open-source technology for cloud portability
2. Dynamically scale compute capacity based on demand
3. Support continuous software delivery
4. Run multiple segregated copies of the same application stack
5. Deploy application bundles using dynamic templates
6. Route network traffic to specific services based on URL
Which combination of technologies will meet all of his requirements?

A. Google Container Engine, Jenkins, and Helm

B. Google Container Engine and Cloud Load Balancing

C. Google Compute Engine and Cloud Deployment Manager

D. Google Compute Engine, Jenkins, and Cloud Load Balancing

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제11

Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Googlerecommended practices. What should you do?

A. Move your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.

B. Move your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.

C. Install gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.

D. Install gsutil on each server containing data. Use streaming transfers to upload the data into Cloud Storage.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제12

For this question, refer to the Dress4Win case study.
Dress4Win has configured a new uptime check with Google Stackdriver for several of their legacy services.
The Stackdriver dashboard is not reporting the services as healthy. What should they do?

A. Configure their legacy web servers to allow requests that contain user-Agent HTTP header when the value matches GoogleStackdriverMonitoring- UptimeChecks (https://cloud.google.com/monitoring)

B. Configure their load balancer to pass through the User-Agent HTTP header when the value matches GoogleStackdriverMonitoring-UptimeChecks (https://cloud.google.com/monitoring)

C. In the Cloud Platform Console download the list of the uptime servers' IP addresses and create an inbound firewall rule

D. Install the Stackdriver agent on all of the legacy web servers.

정답: C

문제13

You have an application that will run on Compute Engine. You need to design an architecture that takes into account a disaster recovery plan that requires your application to fail over to another region in case of a regional outage. What should you do?

A. Deploy the application on a Compute Engine instance. Use the instance to serve traffic, and use the HTTP load balancing service to fail over to an instance on your premises in case of a disaster.

B. Deploy the application on two Compute Engine instance groups, each in the same project but in a different region. Use the first instance group to serve traffic, and use the HTTP load balancing service to fail over to the standby instance group in case of a disaster.

C. Deploy the application on two Compute Engine instance groups, each in separate project and a different region. Use the first instance group to server traffic, and use the HTTP load balancing service to fail over to the standby instance in case of a disaster.

D. Deploy the application on two Compute Engine instances in the same project but in a different region.
Use the first instance to serve traffic, and use the HTTP load balancing service to fail over to the standby instance in case of a disaster.

정답: B

문제14

A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center. He wants to migrate the custom tool to the new cloud environment You want to advocate for the adoption of Google Cloud Deployment Manager What are two business risks of migrating to Cloud Deployment Manager?
Choose 2 answers

A. Cloud Deployment Manager can be used to permanently delete cloud resources.

B. Cloud Deployment Manager requires a Google APIs service account to run.

C. Cloud Deployment Manager APIs could be deprecated in the future.

D. Cloud Deployment Manager is unfamiliar to the company's engineers.

E. Cloud Deployment Manager uses Python.

F. Cloud Deployment Manager only supports automation of Google Cloud resources.

정답: D,F

설명: (DumpTOP 회원만 볼 수 있음)

문제15

For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for securely deploying workloads to Google Cloud. You also need to ensure that only verified containers are deployed using Google Cloud services. What should you do? (Choose two.)

A. Configure Container Registry to only allow trusted service accounts to create and deploy containers from the registry.

B. Configure Container Registry to use vulnerability scanning to confirm that there are no vulnerabilities before deploying the workload.

C. Configure Jenkins to utilize Kritis to cryptographically sign a container as part of a CI/CD pipeline.

D. Enable Binary Authorization on GKE, and sign containers as part of a CI/CD pipeline.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제16

For this question, refer to the TerramEarth case study.
The TerramEarth development team wants to create an API to meet the company's business requirements.
You want the development team to focus their development effort on business value versus creating a custom framework. Which method should they use?

A. Use Google App Engine with Google Cloud Endpoints. Focus on an API for dealers and partners.

B. Use Google Container Engine with a Tomcat container with the Swagger (Open API Specification) framework. Focus on an API for dealers and partners.

C. Use Google Container Engine with a Django Python container. Focus on an API for the public.

D. Use Google App Engine with the Swagger (open API Specification) framework. Focus on an API for the public.

E. Use Google App Engine with a JAX-RS Jersey Java-based framework. Focus on an API for the public.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제17

For this question, refer to the TerramEarth case study.
TerramEarth's 20 million vehicles are scattered around the world. Based on the vehicle's location its telemetry data is stored in a Google Cloud Storage (GCS) regional bucket (US. Europe, or Asia). The CTO has asked you to run a report on the raw telemetry data to determine why vehicles are breaking down after
100 K miles. You want to run this job on all the data. What is the most cost-effective way to run this job?

A. Move all the data into 1 zone, then launch a Cloud Dataproc cluster to run the job.

B. Launch a cluster in each region to preprocess and compress the raw data, then move the data into a region bucket and use a Cloud Dataproc cluster to finish the jo

C. Launch a cluster in each region to preprocess and compress the raw data, then move the data into a multi region bucket and use a Dataproc cluster to finish the job.

D. Move all the data into 1 region, then launch a Google Cloud Dataproc cluster to run the job.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제18

You want your Google Kubernetes Engine cluster to automatically add or remove nodes based on CPUload.
What should you do?

A. Create a deployment and set the maxUnavailable and maxSurge properties. Enable the Cluster Autoscaler using the gcloud command.

B. Configure a HorizontalPodAutoscaler with a target CPU usage. Enable autoscaling on the managed instance group for the cluster using the gcloud command.

C. Configure a HorizontalPodAutoscaler with a target CPU usage. Enable the Cluster Autoscaler from the GCP Console.

D. Create a deployment and set the maxUnavailable and maxSurge properties. Enable autoscaling on the cluster managed instance group from the GCP Console.

정답: B

문제19

Your customer support tool logs all email and chat conversations to Cloud Bigtable for retention and analysis.
What is the recommended approach for sanitizing this data of personally identifiable information or payment card information before initial storage?

A. De-identify the data with the Cloud Data Loss Prevention API

B. Use regular expressions to find and redact phone numbers, email addresses, and credit card numbers

C. Encrypt all data using elliptic curve cryptography

D. Hash all data using SHA256

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

최신 Professional-Cloud-Architect 무료덤프 - Google Certified Professional - Cloud Architect (GCP)

우리와 연락하기

유용한 링크

최신 업데이트