Pre-Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Professional-Cloud-Architect Google Certified Professional - Cloud Architect (GCP) is now Stable and With Pass Result | Test Your Knowledge for Free

Exams4sure Dumps

Professional-Cloud-Architect Practice Questions

Google Certified Professional - Cloud Architect (GCP)

Last Update 3 days ago
Total Questions : 333

Dive into our fully updated and stable Professional-Cloud-Architect practice test platform, featuring all the latest Google Cloud Certified exam questions added this week. Our preparation tool is more than just a Google study aid; it's a strategic advantage.

Our free Google Cloud Certified practice questions crafted to reflect the domains and difficulty of the actual exam. The detailed rationales explain the 'why' behind each answer, reinforcing key concepts about Professional-Cloud-Architect. Use this test to pinpoint which areas you need to focus your study on.

Professional-Cloud-Architect PDF

Professional-Cloud-Architect PDF (Printable)
$43.75
$124.99

Professional-Cloud-Architect Testing Engine

Professional-Cloud-Architect PDF (Printable)
$50.75
$144.99

Professional-Cloud-Architect PDF + Testing Engine

Professional-Cloud-Architect PDF (Printable)
$63.7
$181.99
Question # 21

For this question, refer to the TerramEarth case study.

To speed up data retrieval, more vehicles will be upgraded to cellular connections and be able to transmit data to the ETL process. The current FTP process is error-prone and restarts the data transfer from the start of the file when connections fail, which happens often. You want to improve the reliability of the solution and minimize data transfer time on the cellular connections. What should you do?

Options:

A.  

Use one Google Container Engine cluster of FTP servers. Save the data to a Multi-Regional bucket. Run the ETL process using data in the bucket.

B.  

Use multiple Google Container Engine clusters running FTP servers located in different regions. Save the data to Multi-Regional buckets in us, eu, and asia. Run the ETL process using the data in the bucket.

C.  

Directly transfer the files to different Google Cloud Multi-Regional Storage bucket locations in us, eu, and asia using Google APIs over HTTP(S). Run the ETL process using the data in the bucket.

D.  

Directly transfer the files to a different Google Cloud Regional Storage bucket location in us, eu, and asia using Google APIs over HTTP(S). Run the ETL process to retrieve the data from each Regional bucket.

Discussion 0
Question # 22

For this question, refer to the EHR Healthcare case study. EHR has single Dedicated Interconnect

connection between their primary data center and Googles network. This connection satisfies

EHR’s network and security policies:

• On-premises servers without public IP addresses need to connect to cloud resources

without public IP addresses

• Traffic flows from production network mgmt. servers to Compute Engine virtual

machines should never traverse the public internet.

You need to upgrade the EHR connection to comply with their requirements. The new

connection design must support business critical needs and meet the same network and

security policy requirements. What should you do?

Options:

A.  

Add a new Dedicated Interconnect connection

B.  

Upgrade the bandwidth on the Dedicated Interconnect connection to 100 G

C.  

Add three new Cloud VPN connections

D.  

Add a new Carrier Peering connection

Discussion 0
Question # 23

For this question, refer to the EHR Healthcare case study. You are responsible for designing the Google Cloud network architecture for Google Kubernetes Engine. You want to follow Google best practices. Considering the EHR Healthcare business and technical requirements, what should you do to reduce the attack surface?

Options:

A.  

Use a private cluster with a private endpoint with master authorized networks configured.

B.  

Use a public cluster with firewall rules and Virtual Private Cloud (VPC) routes.

C.  

Use a private cluster with a public endpoint with master authorized networks configured.

D.  

Use a public cluster with master authorized networks enabled and firewall rules.

Discussion 0
Question # 24

For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for securely deploying workloads to Google Cloud. You also need to ensure that only verified containers are deployed using Google Cloud services. What should you do? (Choose two.)

Options:

A.  

Enable Binary Authorization on GKE, and sign containers as part of a CI/CD pipeline.

B.  

Configure Jenkins to utilize Kritis to cryptographically sign a container as part of a CI/CD pipeline.

C.  

Configure Container Registry to only allow trusted service accounts to create and deploy containers from the registry.

D.  

Configure Container Registry to use vulnerability scanning to confirm that there are no vulnerabilities before deploying the workload.

Discussion 0
Question # 25

For this question, refer to the EHR Healthcare case study. In the past, configuration errors put public IP addresses on backend servers that should not have been accessible from the Internet. You need to ensure that no one can put external IP addresses on backend Compute Engine instances and that external IP addresses can only be configured on frontend Compute Engine instances. What should you do?

Options:

A.  

Create an Organizational Policy with a constraint to allow external IP addresses only on the frontend Compute Engine instances.

B.  

Revoke the compute.networkAdmin role from all users in the project with front end instances.

C.  

Create an Identity and Access Management (IAM) policy that maps the IT staff to the compute.networkAdmin role for the organization.

D.  

Create a custom Identity and Access Management (IAM) role named GCE_FRONTEND with the compute.addresses.create permission.

Discussion 0
Question # 26

For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for hybrid connectivity between EHR's on-premises systems and Google Cloud. You want to follow Google's recommended practices for production-level applications. Considering the EHR Healthcare business and technical requirements, what should you do?

Options:

A.  

Configure two Partner Interconnect connections in one metro (City), and make sure the Interconnect connections are placed in different metro zones.

B.  

Configure two VPN connections from on-premises to Google Cloud, and make sure the VPN devices on-premises are in separate racks.

C.  

Configure Direct Peering between EHR Healthcare and Google Cloud, and make sure you are peering at least two Google locations.

D.  

Configure two Dedicated Interconnect connections in one metro (City) and two connections in another metro, and make sure the Interconnect connections are placed in different metro zones.

Discussion 0
Question # 27

For this question, refer to the EHR Healthcare case study. You are a developer on the EHR customer portal team. Your team recently migrated the customer portal application to Google Cloud. The load has increased on the application servers, and now the application is logging many timeout errors. You recently incorporated Pub/Sub into the application architecture, and the application is not logging any Pub/Sub publishing errors. You want to improve publishing latency. What should you do?

Options:

A.  

Increase the Pub/Sub Total Timeout retry value.

B.  

Move from a Pub/Sub subscriber pull model to a push model.

C.  

Turn off Pub/Sub message batching.

D.  

Create a backup Pub/Sub message queue.

Discussion 0
Question # 28

You need to upgrade the EHR connection to comply with their requirements. The new connection design must support business-critical needs and meet the same network and security policy requirements. What should you do?

Options:

A.  

Add a new Dedicated Interconnect connection.

B.  

Upgrade the bandwidth on the Dedicated Interconnect connection to 100

G.  

C.  

Add three new Cloud VPN connections.

D.  

Add a new Carrier Peering connection.

Discussion 0
Question # 29

For this question, refer to the EHR Healthcare case study. You are responsible for ensuring that EHR's use of Google Cloud will pass an upcoming privacy compliance audit. What should you do? (Choose two.)

Options:

A.  

Verify EHR's product usage against the list of compliant products on the Google Cloud compliance page.

B.  

Advise EHR to execute a Business Associate Agreement (BAA) with Google Cloud.

C.  

Use Firebase Authentication for EHR's user facing applications.

D.  

Implement Prometheus to detect and prevent security breaches on EHR's web-based applications.

E.  

Use GKE private clusters for all Kubernetes workloads.

Discussion 0
Question # 30

For this question, refer to the Dress4Win case study.

At Dress4Win, an operations engineer wants to create a tow-cost solution to remotely archive copies of database backup files. The database files are compressed tar files stored in their current data center. How should he proceed?

Options:

A.  

Create a cron script using gsutil to copy the files to a Coldline Storage bucket.

B.  

Create a cron script using gsutil to copy the files to a Regional Storage bucket.

C.  

Create a Cloud Storage Transfer Service Job to copy the files to a Coldline Storage bucket.

D.  

Create a Cloud Storage Transfer Service job to copy the files to a Regional Storage bucket.

Discussion 0
Get Professional-Cloud-Architect dumps and pass your exam in 24 hours!

Free Exams Sample Questions