[Jul 08, 2023] Verified Professional-Cloud-Architect dumps and 262 unique questions [Q37-Q54]

5/5 - (4 votes)

[Jul 08, 2023] Verified Professional-Cloud-Architect dumps and 262 unique questions

Professional-Cloud-Architect Dumps for Pass Guaranteed – Pass Professional-Cloud-Architect Exam 2023

Career Opportunities

Building a career in the field of IT requires some level of commitment. One of the areas where this commitment is required is obtaining the certifications. With an IT certificate, you can increase your access to numerous career opportunities and earn attractive remuneration. For the holders of the Google Professional Cloud Architect certification, there are many job roles that they can take up. Some of them include a Google Cloud Architect, a Technical Cloud Architect, a Google Cloud Platform Delivery Architect, a Google Cloud Data Architect, and an Enterprise Architect. These positions come with attractive salaries averaging $120,000 per annum. The specialists with some years of experience can get as much as $180,000.

Designing for Compliance and Security

Design for security: the learners need to gain knowledge of penetration testing; identity and access management; resource hierarchy; separation of duties; security control; data security; customer-managed encryption key management with Cloud KMS;
Design for compliance: this covers one’s knowledge of legislation (health record privacy, data privacy, ownership, and children’s privacy); commercial (sensitive data handling and personally identifiable information); industry certifications (SOC 2); audits (such as logs).

NO.37 Your company creates rendering software which users can download from the company website. Your
company has customers all over the world. You want to minimize latency for all your customers. You want
to follow Google-recommended practices.
How should you store the files?

Save the files in a Multi-Regional Cloud Storage bucket.

Save the files in a Regional Cloud Storage bucket, one bucket per zone of the region.

Save the files in multiple Regional Cloud Storage buckets, one bucket per zone per region.

Save the files in multiple Multi-Regional Cloud Storage buckets, one bucket per multi-region.

NO.38 You deploy your custom java application to google app engine.
It fails to deploy and gives you the following stack trace:

Recompile the CLoakedServlet class using and MD5 hash instead of SHA1

Digitally sign all of your JAR files and redeploy your application.

Upload missing JAR files and redeploy your application

NO.39 Your customer wants to do resilience testing of their authentication layer. This consists of a regional managed instance group serving a public REST API that reads from and writes to a Cloud SQL instance.
What should you do?

Engage with a security company to run web scrapers that look your users’ authentication data om malicious websites and notify you if any if found.

Deploy intrusion detection software to your virtual machines to detect and log unauthorized access.

Schedule a disaster simulation exercise during which you can shut off all VMs in a zone to see how your application behaves.

Configure a read replica for your Cloud SQL instance in a different zone than the master, and then manually trigger a failover while monitoring KPIs for our REST API.

NO.40 You want to create a private connection between your instances on Compute Engine and your on-premises data center. You require a connection of at least 20 Gbps. You want to follow Google-recommended practices.
How should you set up the connection?

Create a VPC and connect it to your on-premises data center using Dedicated Interconnect.

Create a VPC and connect it to your on-premises data center using a single Cloud VPN.

Create a Cloud Content Delivery Network (Cloud CDN) and connect it to your on-premises data center using Dedicated Interconnect.

Create a Cloud Content Delivery Network (Cloud CDN) and connect it to your on-premises datacenter using a single Cloud VPN.

NO.41 Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data.
What should you do?

Build or leverage an OAuth-compatible access control system

Build SAML 2.0 SSO compatibility into your authentication system

Restrict data access based on the source IP address of the partner systems

Create secondary credentials for each dealer that can be given to the trusted third party

NO.42 Case Study: 5 – Dress4win
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model. The application has grown from a few servers in the founder’s garage to several hundred servers and appliances in a collocated data center. However, the capacity of their infrastructure is now insufficient for the application’s rapid growth. Because of this growth and the company’s desire to innovate faster.
Dress4Win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is moving their development and test environments. They are also building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location. All servers run Ubuntu LTS v16.04.
Databases:
MySQL. 1 server for user data, inventory, static data:

– MySQL 5.8
– 8 core CPUs
– 128 GB of RAM
– 2x 5 TB HDD (RAID 1)
Redis 3 server cluster for metadata, social graph, caching. Each server is:

– Redis 3.2
– 4 core CPUs
– 32GB of RAM
Compute:
40 Web Application servers providing micro-services based APIs and static content.

– Tomcat – Java
– Nginx
– 4 core CPUs
– 32 GB of RAM
20 Apache Hadoop/Spark servers:

– Data analysis
– Real-time trending calculations
– 8 core CPUS
– 128 GB of RAM
– 4x 5 TB HDD (RAID 1)
3 RabbitMQ servers for messaging, social notifications, and events:

– 8 core CPUs
– 32GB of RAM
Miscellaneous servers:

– Jenkins, monitoring, bastion hosts, security scanners
– 8 core CPUs
– 32GB of RAM
Storage appliances:
iSCSI for VM hosts

Fiber channel SAN – MySQL databases

– 1 PB total storage; 400 TB available
NAS – image storage, logs, backups

– 100 TB total storage; 35 TB available
Business Requirements
Build a reliable and reproducible environment with scaled parity of production.

Improve security by defining and adhering to a set of security and Identity and Access

Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.

Analyze and optimize architecture for performance in the cloud.

Technical Requirements
Easily create non-production environment in the cloud.

Implement an automation framework for provisioning resources in cloud.

Implement a continuous deployment process for deploying applications to the on-premises

datacenter or cloud.
Support failover of the production environment to cloud during an emergency.

Encrypt data on the wire and at rest.

Support multiple private connections between the production data center and cloud

environment.
Executive Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a competitor could use a public cloud platform to offset their up-front investment and free them to focus on developing better features. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years for a public cloud strategy achieves a cost reduction between 30% and 50% over our current model.
For this question, refer to the Dress4Win case study. You want to ensure that your on-premises architecture meets business requirements before you migrate your solution.
What change in the on-premises architecture should you make?

Replace RabbitMQ with Google Pub/Sub.

Downgrade MySQL to v5.7, which is supported by Cloud SQL for MySQL.

Resize compute resources to match predefined Compute Engine machine types.

Containerize the micro services and host them in Google Kubernetes Engine.

NO.43 For this question, refer to the Dress4Win case study. You want to ensure that your on-premises architecture meets business requirements before you migrate your solution.
What change in the on-premises architecture should you make?

Replace RabbitMQ with Google Pub/Sub.

Downgrade MySQL to v5.7, which is supported by Cloud SQL for MySQL.

Resize compute resources to match predefined Compute Engine machine types.

Containerize the micro services and host them in Google Kubernetes Engine.

NO.44 For this question, refer to the TerramEarth case study. You need to implement a reliable, scalable GCP solution for the data warehouse for your company, TerramEarth. Considering the TerramEarth business and technical requirements, what should you do?

Replace the existing data warehouse with BigQuery. Use table partitioning.

Replace the existing data warehouse with a Compute Engine instance with 96 CPUs.

Replace the existing data warehouse with BigQuery. Use federated data sources.

Replace the existing data warehouse with a Compute Engine instance with 96 CPUs. Add an additional Compute Engine pre-emptible instance with 32 CPUs.

NO.45 Your company creates rendering software which users can download from the company website.
Your company has customers all over the world. You want to minimize latency for all your customers. You want to follow Google-recommended practices.
How should you store the files?

Save the files in a Multi-Regional Cloud Storage bucket.

Save the files in a Regional Cloud Storage bucket, one bucket per zone of the region.

Save the files in multiple Regional Cloud Storage buckets, one bucket per zone per region.

Save the files in multiple Multi-Regional Cloud Storage buckets, one bucket per multi-region.

NO.46 Your customer is moving an existing corporate application to Google Cloud Platform from an on-premises data center. The business owners require minimal user disruption. There are strict security team requirements for storing passwords.
What authentication strategy should they use?

Use G Suite Password Sync to replicate passwords into Google

Federate authentication via SAML 2.0 to the existing Identity Provider

Provision users in Google using the Google Cloud Directory Sync tool

Ask users to set their Google password to match their corporate password

NO.47 The operations manager asks you for a list of recommended practices that she should consider when migrating a J2EE application to the cloud. Which three practices should you recommend? Choose 3 answers

Port the application code to run on Google App Engine.

Integrate Cloud Dataflow into the application to capture real-time metrics.

Instrument the application with a monitoring tool like Stackdriver Debugger.

Select an automation framework to reliably provision the cloud infrastructure.

Deploy a continuous integration tool with automated testing in a staging environment.

Migrate from MySQL to a managed NoSQL database like Google Cloud Datastore or Bigtable.

NO.48 For this question, refer to the Dress4Win case study.
At Dress4Win, an operations engineer wants to create a tow-cost solution to remotely archive copies of database backup files. The database files are compressed tar files stored in their current data center. How should he proceed?

Create a cron script using gsutil to copy the files to a Coldline Storage bucket.

Create a cron script using gsutil to copy the files to a Regional Storage bucket.

Create a Cloud Storage Transfer Service Job to copy the files to a Coldline Storage bucket.

Create a Cloud Storage Transfer Service job to copy the files to a Regional Storage bucket.

NO.49 For this question, refer to the TerramEarth case study
Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data. What should you do?

Build or leverage an OAuth-compatible access control system.

Build SAML 2.0 SSO compatibility into your authentication system.

Restrict data access based on the source IP address of the partner systems.

Create secondary credentials for each dealer that can be given to the trusted third party.

NO.50 Your architecture calls for the centralized collection of all admin activity and VM system logs within your project.
How should you collect these logs from both VMs and services?

All admin and VM system logs are automatically collected by Stackdriver.

Stackdriver automatically collects admin activity logs for most services. The Stackdriver Logging agent must be installed on each instance to collect system logs.

Launch a custom syslogd compute instance and configure your GCP project and VMs to forward all logs to it.

Install the Stackdriver Logging agent on a single compute instance and let it collect all audit and access logs for your environment.

NO.51 Your company wants to try out the cloud with low risk. They want to archive approximately
100 TB of their log data to the cloud and test the analytics features available to them there, while also retaining that data as a long-term disaster recovery backup. Which two steps should they take? Choose 2 answers

Load logs into Google BigQuery.

Load logs into Google Cloud SQL.

Import logs into Google Stackdriver.

Insert logs into Google Cloud Bigtable.

Upload log files into Google Cloud Storage.

NO.52 Your operations team currently stores 10 TB of data m an object storage service from a third-party provider. They want to move this data to a Cloud Storage bucket as quickly as possible, following Google-recommended practices. They want to minimize the cost of this data migration. When approach should they use?

Use the gsutil mv command lo move the data

Use the Storage Transfer Service to move the data

Download the data to a Transfer Appliance and ship it to Google

Download the data to the on-premises data center and upload it to the Cloud Storage bucket

NO.53 The application reliability team at your company has added a debug feature to their backend service to send all server events to Google Cloud Storage for eventual analysis. The event records are at least 50 KB and at most
15 MB and are expected to peak at 3,000 events per second. You want to minimize data loss.
Which process should you implement?

* Append metadata to file body.
* Compress individual files.
* Name files with serverName-Timestamp.
* Create a new bucket if bucket is older than 1 hour and save individual files to the new bucket.
Otherwise, save files to existing bucket

* Batch every 10,000 events with a single manifest file for metadata.
* Compress event files and manifest file into a single archive file.
* Name files using serverName-EventSequence.
* Create a new bucket if bucket is older than 1 day and save the single archive file to the new bucket.
Otherwise, save the single archive file to existing bucket.

* Compress individual files.
* Name files with serverName-EventSequence.
* Save files to one bucket
* Set custom metadata headers for each object after saving.

* Append metadata to file body.
* Compress individual files.
* Name files with a random prefix pattern.
* Save files to one bucket

NO.54 For this question, refer to the TerramEarth case study. TerramEarth has decided to store data files in Cloud Storage. You need to configure Cloud Storage lifecycle rule to store 1 year of data and minimize file storage cost.
Which two actions should you take?

Create a Cloud Storage lifecycle rule with Age: “30”, Storage Class: “Standard”, and Action: “Set to Coldline”, and create a second GCS life-cycle rule with Age: “365”, Storage Class: “Coldline”, and Action: “Delete”.

Create a Cloud Storage lifecycle rule with Age: “30”, Storage Class: “Coldline”, and Action: “Set to Nearline”, and create a second GCS life-cycle rule with Age: “91”, Storage Class: “Coldline”, and Action:
“Set to Nearline”.

Create a Cloud Storage lifecycle rule with Age: “90”, Storage Class: “Standard”, and Action: “Set to Nearline”, and create a second GCS life-cycle rule with Age: “91”, Storage Class: “Nearline”, and Action:
“Set to Coldline”.

Latest 100% Passing Guarantee – Brilliant Professional-Cloud-Architect Exam Questions PDF: https://www.actualtorrent.com/Professional-Cloud-Architect-questions-answers.html

[Jul 08, 2023] Verified Professional-Cloud-Architect dumps and 262 unique questions [Q37-Q54]

Career Opportunities

Designing for Compliance and Security

Be the first to reply

Leave a Reply Cancel reply

Career Opportunities

Designing for Compliance and Security