Google Google Certifications PROFESSIONAL-CLOUD-ARCHITECT Questions & Answers

• Question 1:

  Your company has developed a monolithic, 3-tier application to allow external users to upload and share files. The solution cannot be easily enhanced and lacks reliability. The development team would like to re-architect the application to adopt microservices and a fully managed service approach, but they need to convince their leadership that the effort is worthwhile. Which advantage(s) should they highlight to leadership?

  A. The new approach will be significantly less costly, make it easier to manage the underlying infrastructure, and automatically manage the CI/CD pipelines.

  B. The monolithic solution can be converted to a container with Docker. The generated container can then be deployed into a Kubernetes cluster.

  C. The new approach will make it easier to decouple infrastructure from application, develop and release new features, manage the underlying infrastructure, manage CI/CD pipelines and perform A/B testing, and scale the solution if necessary.

  D. The process can be automated with Migrate for Compute Engine.

  Correct Answer: C

  The new approach will make it easier to decouple infrastructure from an application, develop and release new features, manage the underlying infrastructure, manage CI/CD pipelines and perform A/B testing, and scale the solution if necessary.

• Question 2:

  Your company provides a recommendation engine for retail customers. You are providing retail customers with an API where they can submit a user ID and the API returns a list of recommendations for that user. You are responsible for the API lifecycle and want to ensure stability for your customers in case the API makes backward-incompatible changes. You want to follow Google-recommended practices. What should you do?

  A. Create a distribution list of all customers to inform them of an upcoming backward-incompatible change at least one month before replacing the old API with the new API.

  B. Create an automated process to generate API documentation, and update the public API documentation as part of the CI/CD process when deploying an update to the API.

  C. Use a versioning strategy for the APIs that increases the version number on every backward-incompatible change.

  D. Use a versioning strategy for the APIs that adds the suffix "DEPRECATED" to the current API version number on every backward-incompatible change. Use the current version number for the new API.

  Correct Answer: C

  https://cloud.google.com/apis/design/versioning All Google API interfaces must provide a major version number, which is encoded at the end of the protobuf package, and included as the first part of the URI path for REST APIs. If an API introduces a breaking change, such as removing or renaming a field, it must increment its API version number to ensure that existing user code does not suddenly break.

• Question 3:

  You have an application that makes HTTP requests to Cloud Storage. Occasionally the requests fail with HTTP status codes of 5xx and 429. How should you handle these types of errors?

  A. Use gRPC instead of HTTP for better performance.

  B. Implement retry logic using a truncated exponential backoff strategy.

  C. Make sure the Cloud Storage bucket is multi-regional for geo-redundancy.

  D. Monitor https://status.cloud.google.com/feed.atom and only make requests if Cloud Storage is not reporting an incident.

  Correct Answer: A

  Reference https://cloud.google.com/storage/docs/json_api/v1/status-codes

• Question 4:

  Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Googlerecommended practices. What should you do?

  A. Move your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.

  B. Move your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.

  C. Install gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.

  D. Install gsutil on each server containing data. Use streaming transfers to upload the data into Cloud Storage.

  Correct Answer: A

  https://cloud.google.com/transfer-appliance/docs/2.0/faq

• Question 5:

  You are designing a large distributed application with 30 microservices. Each of your distributed microservices needs to connect to a database back-end. You want to store the credentials securely. Where should you store the credentials?

  A. In the source code

  B. In an environment variable

  C. In a secret management system

  D. In a config file that has restricted access through ACLs

  Correct Answer: C

  https://cloud.google.com/docs/authentication/production#providing_credentials_to_your_ap plication

• Question 6:

  Your company has a project in Google Cloud with three Virtual Private Clouds (VPCs).

  There is a Compute Engine instance on each VPC. Network subnets do not overlap and must remain separated.

  The network configuration is shown below.

  

  Instance #1 is an exception and must communicate directly with both Instance #2 and Instance #3 via internal IPs. How should you accomplish this?

  A. Create a cloud router to advertise subnet #2 and subnet #3 to subnet #1.

  B. Add two additional NICs to Instance #1 with the following configuration: NIC1 VPC: VPC #2 SUBNETWORK: subnet #2 NIC2 VPC: VPC #3 SUBNETWORK: subnet #3 Update firewall rules to enable traffic between instances.

  C. Create two VPN tunnels via CloudVPN: 1 between VPC #1 and VPC #2. 1 between VPC #2 and VPC #3. Update firewall rules to enable traffic between the instances.

  D. Peer all three VPCs: Peer VPC #1 with VPC #2. Peer VPC #2 with VPC #3. Update firewall rules to enable traffic between the instances.

  Correct Answer: B

  As per GCP documentation: "By default, every instance in a VPC network has a single network interface. Use these instructions to create additional network interfaces. Each interface is attached to a different VPC network, giving that instance access to different VPC networks in Google Cloud. You cannot attach multiple network interfaces to the same VPC network." Refer to: https://cloud.google.com/vpc/docs/create-use-multiple-interfaces https://cloud.google.com/vpc/docs/create-use-multiple-interfaces#i_am_not_able_to_connect_to_secondary_interfaces_internal_ip

• Question 7:

  A production database virtual machine on Google Compute Engine has an ext4-formatted persistent disk for data files

  The database is about to run out of storage space

  How can you remediate the problem with the least amount of downtime?

  A. In the Cloud Platform Console, increase the size of the persistent disk and use the resize2fs command in Linux.

  B. Shut down the virtual machine, use the Cloud Platform Console to increase the persistent disk size, then restart the virtual machine.

  C. In the Cloud Platform Console, increase the size of the persistent disk and verify the new space is ready to use with the fdisk command in Linux.

  D. In the Cloud Platform Console, create a new persistent disk attached to the virtual machine, format and mount it, and configure the database service to move the files to the new disk.

  E. In the Cloud Platform Console, create a snapshot of the persistent disk, restore the snapshot to a new larger disk, unmount the old disk, mount the new disk, and restart the database service.

  Correct Answer: A

  On Linux instances, connect to your instance and manually resize your partitions and file systems to use the additional disk space that you added. Extend the file system on the disk or the partition to use the added space. If you grew a

  partition on your disk, specify the partition. If your disk does not have a partition table, specify only the disk ID.

  sudo resize2fs /dev/[DISK_ID][PARTITION_NUMBER] where [DISK_ID] is the device name and [PARTITION_NUMBER] is the partition number for the device where you are resizing the file system.

  References: https://cloud.google.com/compute/docs/disks/add-persistent-disk

• Question 8:

  You want your Google Kubernetes Engine cluster to automatically add or remove nodes based on CPUload. What should you do?

  A. Configure a HorizontalPodAutoscaler with a target CPU usage. Enable the Cluster Autoscaler from the GCP Console.

  B. Configure a HorizontalPodAutoscaler with a target CPU usage. Enable autoscaling on the managed instance group for the cluster using the gcloud command.

  C. Create a deployment and set the maxUnavailable and maxSurge properties. Enable the Cluster Autoscaler using the gcloud command.

  D. Create a deployment and set the maxUnavailable and maxSurge properties. Enable autoscaling on the cluster managed instance group from the GCP Console.

  Correct Answer: B

• Question 9:

  You are using Cloud SQL as the database backend for a large CRM deployment. You want to scale as usage increases and ensure that you don't run out of storage, maintain 75% CPU usage cores, and keep replication lag below 60 seconds. What are the correct steps to meet your requirements?

  A. 1) Enable automatic storage increase for the instance. 2) Create a Stackdriver alert when CPU usage exceeds 75%, and change the instance type to reduce CPU usage. 3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.

  B. 1) Enable automatic storage increase for the instance. 2) Change the instance type to a 32-core machine type to keep CPU usage below 75%. 3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.

  C. 1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on the instance to create more space. 2) Deploy memcached to reduce CPU load. 3) Change the instance type to a 32-core machine type to reduce replication lag.

  D. 1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on the instance to create more space. 2) Deploy memcached to reduce CPU load. 3) Create a Stackdriver alert for replication lag, and change the instance type to a 32-core machine type to reduce replication lag.

  Correct Answer: A

• Question 10:

  Your company wants to migrate their 10-TB on-premises database export into Cloud Storage

  You want to minimize the time it takes to complete this activity, the overall cost and database load

  The bandwidth between the on-premises environment and Google Cloud is 1 Gbps

  You want to follow Google-recommended practices

  What should you do?

  A. Use the Data Transfer appliance to perform an offline migration

  B. Use a commercial partner ETL solution to extract the data from the on-premises database and upload it into Cloud Storage

  C. Develop a Dataflow job to read data directly from the database and write it into Cloud Storage

  D. Compress the data and upload it with gsutii-m to enable multi-threaded copy

  Correct Answer: A

  The Data Transfer appliance is a Google-provided hardware device that can be used to transfer large amounts of data from on-premises environments to Cloud Storage. It is suitable for scenarios where the bandwidth between the on-premises environment and Google Cloud is low or insufficient, and the data size is large. The Data Transfer appliance can minimize the time it takes to complete the migration, the overall cost and database load, by avoiding network bottlenecks and reducing bandwidth consumption. The Data Transfer appliance also encrypts the data at rest and in transit, ensuring data security and privacy. The other options are not optimal for this scenario, because they either require a high-bandwidth network connection (B, C, D), or incur additional costs and complexity (B, C).

  https://cloud.google.com/data-transfer-appliance/docs/overview https://cloud.google.com/blog/products/storage-data-transfer/introducing-storage-transfer-service-for-on-premises-data