Google Google Certifications PROFESSIONAL-CLOUD-ARCHITECT Questions & Answers

• Question 111:

  Your company runs several databases on a single MySQL instance. They need to take backups of a specific database at regular intervals. The backup activity needs to complete as quickly as possible and cannot be allowed to impact disk performance. How should you configure the storage?

  A. Configure a cron job to use the gcloud tool to take regular backups using persistent disk snapshots.

  B. Mount a Local SSD volume as the backup location. After the backup is complete, use gsutil to move the backup to Google Cloud Storage.

  C. Use gcsfuse to mount a Google Cloud Storage bucket as a volume directly on the instance and write backups to the mounted location using mysqldump

  D. Mount additional persistent disk volumes onto each virtual machine (VM) instance in a RAID10 array and use LVM to create snapshots to send to Cloud Storage.

  Correct Answer: B

  https://cloud.google.com/compute/docs/instances/sql-server/best-practices

• Question 112:

  To reduce costs, the Director of Engineering has required all developers to move their development infrastructure resources from on-premises virtual machines (VMs) to Google Cloud Platform. These resources go through multiple start/stop events during the day and require state to persist. You have been asked to design the process of running a development environment in Google Cloud while providing cost visibility to the finance department. Which two steps should you take? Choose 2 answers

  A. Use the--no-auto-delete flag on all persistent disks and stop the VM.

  B. Use the-auto-delete flag on all persistent disks and terminate the VM.

  C. Apply VM CPU utilization label and include it in the BigQuery billing export.

  D. Use Google BigQuery billing export and labels to associate cost to groups.

  E. Store all state into local SSD, snapshot the persistent disks, and terminate the VM.

  F. Store all state in Google Cloud Storage, snapshot the persistent disks, and terminate the VM.

  Correct Answer: AD

  https://cloud.google.com/billing/docs/how-to/export-data-bigquery

• Question 113:

  You need to design a solution for global load balancing based on the URL path being requested. You need to ensure operations reliability and end-to-end in-transit encryption based on Google best practices.

  What should you do?

  A. Create a cross-region load balancer with URL Maps.

  B. Create an HTTPS load balancer with URL maps.

  C. Create appropriate instance groups and instances. Configure SSL proxy load balancing.

  D. Create a global forwarding rule. Configure SSL proxy balancing.

  Correct Answer: B

  Reference https://cloud.google.com/load-balancing/docs/https/url-map

• Question 114:

  You need to upload files from your on-premises environment to Cloud Storage. You want the files to be encrypted on Cloud Storage using customer-supplied encryption keys.

  What should you do?

  A. Supply the encryption key in a .boto configuration file. Use gsutil to upload the files.

  B. Supply the encryption key using gcloud config. Use gsutil to upload the files to that bucket.

  C. Use gsutil to upload the files, and use the flag--encryption-key to supply the encryption key.

  D. Use gsutil to create a bucket, and use the flag--encryption-key to supply the encryption key. Use gsutil to upload the files to that bucket.

  Correct Answer: A

  https://cloud.google.com/storage/docs/encryption/customer-supplied-keys#gsutil

• Question 115:

  Your organization requires that metrics from all applications be retained for 5 years for future analysis in possible legal proceedings. Which approach should you use?

  A. Grant the security team access to the logs in each Project.

  B. Configure Stackdriver Monitoring for all Projects, and export to BigQuery.

  C. Configure Stackdriver Monitoring for all Projects with the default retention policies.

  D. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage.

  Correct Answer: D

  Overview of storage classes, price, and use cases https://cloud.google.com/storage/docs/storage-classes

  Why export logs? https://cloud.google.com/logging/docs/export/

  StackDriver Quotas and Limits for Monitoring https://cloud.google.com/monitoring/quotas

  The BigQuery pricing. https://cloud.google.com/bigquery/pricing

• Question 116:

  Your marketing department wants to send out a promotional email campaign. The development team wants to minimize direct operation management. They project a wide range of possible customer responses, from 100 to 500,000 clickthroughs per day. The link leads to a simple website that explains the promotion and collects user information and preferences. Which infrastructure should you recommend? (CHOOSE TWO)

  A. Use Google App Engine to serve the website and Google Cloud Datastore to store user data.

  B. Use a Google Container Engine cluster to serve the website and store data to persistent disk.

  C. Use a managed instance group to serve the website and Google Cloud Bigtable to store user data.

  D. Use a single compute Engine virtual machine (VM) to host a web server, backed by Google Cloud SQL.

  Correct Answer: AC

  https://cloud.google.com/storage-options/

• Question 117:

  Your company has an application that is running on multiple instances of Compute Engine. It generates 1 TB per day of logs. For compliance reasons, the logs need to be kept for at least two years. The logs need to be available for active query for 30 days. After that, they just need to be retained for audit purposes. You want to implement a storage solution that is compliant, minimizes costs, and follows Google-recommended practices. What should you do?

  A. 1. Install the Cloud Ops agent on all instances.

  2.

  Create a sink to export logs into a partitioned BigQuery table.

  3.

  Set a time_partitioning_expiration of 30 days.

  B. 1. Install the Cloud Ops agent on all instances.

  2.

  Create a sink to export logs into a regional Cloud Storage bucket.

  3.

  Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.

  4.

  Configure a retention policy at the bucket level to create a lock.

  C. 1. Create a daily cron job, running on all instances, that uploads logs into a partitioned BigQuery table.

  2. Set a time_partitioning_expiration of 30 days.

  D. 1. Write a daily cron job, running on all instances, that uploads logs into a Cloud Storage bucket.

  2.

  Create a sink to export logs into a regional Cloud Storage bucket.

  3.

  Create an Object Lifecycle rule to move files into a Coldline Cloud Storage bucket after one month.

  Correct Answer: B

  The practice for managing logs generated on Compute Engine on Google Cloud is to install the Cloud Logging agent and send them to Cloud Logging.

  The sent logs will be aggregated into a Cloud Logging sink and exported to Cloud Storage. The reason for using Cloud Storage as the destination for the logs is that the requirement in question requires setting up a lifecycle based on the storage period. In this case, the log will be used for active queries for 30 days after it is saved, but after that, it needs to be stored for a longer period of time for auditing purposes.

  If the data is to be used for active queries, we can use BigQuery's Cloud Storage data query feature and move the data past 30 days to Coldline to build a cost-optimal solution.

  Therefore, the correct answer is as follows:

  1.

  Install the Cloud Logging agent on all instances.

  2.

  Create a sync that exports the logs to the region's Cloud Storage bucket.

  3.

  Create an Object Lifecycle rule to move the files to the Coldline Cloud Storage bucket after one month.

  4.

  set up a bucket-level retention policy using bucket locking."

• Question 118:

  Your operations team has asked you to help diagnose a performance issue in a production application that runs on Compute Engine. The application is dropping requests that reach it when under heavy load. The process list for affected instances shows a single application process that is consuming all available CPU, and autoscaling has reached the upper limit of instances. There is no abnormal load on any other related systems, including the database. You want to allow production traffic to be served again as quickly as possible.

  Which action should you recommend?

  A. Change the autoscaling metric to agent.googleapis.com/memory/percent_used.

  B. Restart the affected instances on a staggered schedule.

  C. SSH to each instance and restart the application process.

  D. Increase the maximum number of instances in the autoscaling group.

  Correct Answer: D

  Reference: https://cloud.google.com/blog/products/sap-google-cloud/best-practices-for-sap-app-server-autoscaling-on-google-cloud

• Question 119:

  You are deploying an application on App Engine that needs to integrate with an on-premises database. For security purposes, your on-premises database must not be accessible through the public Internet. What should you do?

  A. Deploy your application on App Engine standard environment and use App Engine firewall rules to limit access to the open on-premises database.

  B. Deploy your application on App Engine standard environment and use Cloud VPN to limit access to the onpremises database.

  C. Deploy your application on App Engine flexible environment and use App Engine firewall rules to limit access to the on-premises database.

  D. Deploy your application on App Engine flexible environment and use Cloud VPN to limit access to the on-premises database.

  Correct Answer: D

  https://cloud.google.com/appengine/docs/flexible/python/using-third-party-databases

• Question 120:

  One of the developers on your team deployed their application in Google Container Engine with the Dockerfile below. They report that their application deployments are taking too long.

  

  You want to optimize this Dockerfile for faster deployment times without adversely affecting the app's functionality. Which two actions should you take? Choose 2 answers.

  A. Remove Python after running pip.

  B. Remove dependencies from requirements.txt.

  C. Use a slimmed-down base image like Alpine linux.

  D. Use larger machine types for your Google Container Engine node pools.

  E. Copy the source after the package dependencies (Python and pip) are installed.

  Correct Answer: CE

  The speed of deployment can be changed by limiting the size of the uploaded app, limiting the complexity of the build necessary in the Dockerfile, if present, and by ensuring a fast and reliable internet connection.

  Note: Alpine Linux is built around musl libc and busybox. This makes it smaller and more resource efficient than traditional GNU/Linux distributions. A container requires no more than 8 MB and a minimal installation to disk requires around

  130 MB of storage. Not only do you get a fully-fledged Linux environment but a large selection of packages from the repository.

  References: https://groups.google.com/forum/#!topic/google-appengine/hZMEkmmObDU https://www.alpinelinux.org/about/