Google Google Certifications PROFESSIONAL-CLOUD-ARCHITECT Questions & Answers

• Question 51:

  A recent audit that a new network was created in Your GCP project. In this network, a GCE instance has an SSH port open the world. You want to discover this network's origin. What should you do?

  A. Search for Create VM entry in the Stackdriver alerting console.

  B. Navigate to the Activity page in the Home section. Set category to Data Access and search for Create VM entry.

  C. In the logging section of the console, specify GCE Network as the logging section. Search for the Create Insert entry.

  D. Connect to the GCE instance using project SSH Keys. Identify previous logins in system logs, and match these with the project owners list.

  Correct Answer: C

• Question 52:

  You need to evaluate your team readiness for a new GCP project. You must perform the evaluation and create a skills gap plan incorporates the business goal of cost optimization. Your team has deployed two GCP projects successfully to date. What should you do?

  A. Allocate budget for team training. Set a deadline for the new GCP project.

  B. Allocate budget for team training. Create a roadmap for your team to achieve Google Cloud certification based on job role.

  C. Allocate budget to hire skilled external consultants. Set a deadline for the new GCP project.

  D. Allocate budget to hire skilled external consultants. Create a roadmap for your team to achieve Google Cloud certification based on job role.

  Correct Answer: B

  https://services.google.com/fh/files/misc/cloud_center_of_excellence.pdf

• Question 53:

  Your company has an application deployed on Anthos clusters (formerly Anthos GKE) that is running multiple microservices. The cluster has both Anthos Service Mesh and Anthos Config Management configured. End users inform you that the application is responding very slowly. You want to identify the microservice that is causing the delay. What should you do?

  A. Use the Service Mesh visualization in the Cloud Console to inspect the telemetry between the microservices.

  B. Use Anthos Config Management to create a ClusterSelector selecting the relevant cluster. On the Google Cloud Console page for Google Kubernetes Engine, view the Workloads and filter on the cluster. Inspect the configurations of the filtered workloads.

  C. Use Anthos Config Management to create a namespaceSelector selecting the relevant cluster namespace. On the Google Cloud Console page for Google Kubernetes Engine, visit the workloads and filter on the namespace. Inspect the configurations of the filtered workloads.

  D. Reinstall istio using the default istio profile in order to collect request latency. Evaluate the telemetry between the microservices in the Cloud Console.

  Correct Answer: A

  The Anthos Service Mesh pages in the Google Cloud Console provide both summary and in-depth metrics, charts, and graphs that enable you to observe service behavior. You can monitor the overall health of your services, or drill down on a specific service to set a service level objective (SLO) or troubleshoot an issue. https://cloud.google.com/service-mesh/docs/observability/explore-dashboard https://cloud.google.com/anthos/service-mesh

• Question 54:

  Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?

  A. Use the Admin Directory API to authenticate against the Active Directory domain controller.

  B. Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities and configure SAML SSO.

  C. Use Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain controller as an identity provider.

  D. Use Compute Engine to create an Active Directory (AD) domain controller that is a replica of the onpremises AD domain controller using Google Cloud Directory Sync.

  Correct Answer: B

  https://cloud.google.com/solutions/federating-gcp-with-active-directory-introduction#implementing_federation

• Question 55:

  You need to deploy an application on Google Cloud that must run on a Debian Linux environment. The application requires extensive configuration in order to operate correctly. You want to ensure that you can install Debian distribution updates with minimal manual intervention whenever they become available. What should you do?

  A. Create a Compute Engine instance template using the most recent Debian image.Create an instance from this template, and install and configure the application as part of the startup script. Repeat this process whenever a new Google-managed Debian image becomes available.

  B. Create a Debian-based Compute Engine instance, install and configure the application, and use OS patch management to install available updates.

  C. Create an instance with the latest available Debian image. Connect to the instance via SSH, and install and configure the application on the instance. Repeat this process whenever a new Google-managed Debian image becomes available.

  D. Create a Docker container with Debian as the base image. Install and configure the application as part of the Docker image creation process. Host the container on Google Kubernetes Engine and restart the container whenever a new update is available.

  Correct Answer: B

  Reference: https://cloud.google.com/compute/docs/os-patch-management

• Question 56:

  You created a pipeline that can deploy your source code changes to your infrastructure in instance groups for self healing.

  One of the changes negatively affects your key performance indicator.

  You are not sure how to fix it and investigation could take up to a week.

  What should you do

  A. Log in to a server, and iterate a fix locally

  B. Change the instance group template to the previous one, and delete all instances.

  C. Revert the source code change and rerun the deployment pipeline

  D. Log into the servers with the bad code change, and swap in the previous code

  Correct Answer: C

• Question 57:

  An application development team believes their current logging tool will not meet their needs for their new cloud-based product. They want a bettor tool to capture errors and help them analyze their historical log data. You want to help them find a solution that meets their needs, what should you do?

  A. Direct them to download and install the Google StackDriver logging agent.

  B. Send them a list of online resources about logging best practices.

  C. Help them define their requirements and assess viable logging tools.

  D. Help them upgrade their current tool to take advantage of any new features.

  Correct Answer: C

  Help them define their requirements and assess viable logging tools. They know the requirements and the existing tools' problems. While it's true StackDriver Logging and Error Reporting possibly meet all their requirements, there might be other tools also meet their need. They need you to provide expertise to make assessment for new tools, specifically, logging tools that can "capture errors and help them analyze their historical log data".

  References: https://cloud.google.com/logging/docs/agent/installation

• Question 58:

  You have an App Engine application that needs to be updated. You want to test the update with production traffic before replacing the current application version.

  What should you do?

  A. Deploy the update using the Instance Group Updater to create a partial rollout, which allows for canary testing.

  B. Deploy the update as a new version in the App Engine application, and split traffic between the new and current versions.

  C. Deploy the update in a new VPC, and use Google's global HTTP load balancing to split traffic between the update and current applications.

  D. Deploy the update as a new App Engine application, and use Google's global HTTP load balancing to split traffic between the new and current applications.

  Correct Answer: B

  https://cloud.google.com/appengine/docs/standard/python/splitting-traffic

• Question 59:

  You want to automate the creation of a managed instance group and a startup script to install the OS package dependencies. You want to minimize the startup time for VMs in the instance group. What should you do?

  A. Use Terraform to create the managed instance group and a startup script to install the OS package dependencies.

  B. Create a custom VM image with all OS package dependencies. Use Deployment Manager to create the managed instance group with the VM image.

  C. Use Puppet to create the managed instance group and install the OS package dependencies.

  D. Use Deployment Manager to create the managed instance group and Ansible to install the OS package dependencies.

  Correct Answer: B

  "Custom images are more deterministic and start more quickly than instances with startup scripts. However, startup scripts are more flexible and let you update the apps and settings in your instances more easily." https://cloud.google.com/compute/docs/instance-templates/create-instance-templates#using_custom_or_public_images_in_your_instance_templates

• Question 60:

  A news teed web service has the following code running on Google App Engine. During peak load, users report that they can see news articles they already viewed.

  

  What is the most likely cause of this problem?

  A. The session variable is local to just a single instance.

  B. The session variable is being overwritten in Cloud Datastore.

  C. The URL of the API needs to be modified to prevent caching.

  D. The HTTP Expires header needs to be set to-1 to stop caching.

  Correct Answer: A

  https://stackoverflow.com/questions/3164280/google-app-engine-cache-list-in-session-variable?rq=1