Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Google Certified Professional - Cloud Architect (GCP) Practice Questions

Question # 41

Your development team has created a mobile game app. You want to test the new mobile app on Android and

iOS devices with a variety of configurations. You need to ensure that testing is efficient and cost-effective. What

should you do?

Options:

A.  

Upload your mobile app to the Firebase Test Lab, and test the mobile app on Android and iOS devices.

B.  

Create Android and iOS VMs on Google Cloud, install the mobile app on the VMs, and test the mobile app.

C.  

Create Android and iOS containers on Google Kubernetes Engine (GKE), install the mobile app on the

containers, and test the mobile app.

D.  

Upload your mobile app with different configurations to Firebase Hosting and test each configuration.

Discussion 0
Question # 42

You need to optimize batch file transfers into Cloud Storage for Mountkirk Games’ new Google Cloud solution.

The batch files contain game statistics that need to be staged in Cloud Storage and be processed by an extract

transform load (ETL) tool. What should you do?

Options:

A.  

Use gsutil to batch move files in sequence.

B.  

Use gsutil to batch copy the files in parallel.

C.  

Use gsutil to extract the files as the first part of ETL.

D.  

Use gsutil to load the files as the last part of ETL.

Discussion 0
Question # 43

Refer to the Altostrat Media case study for the following solution regarding API management and cost control.

Altostrat is using Apigee for API management and wants to ensure their APIs are protected from overuse and abuse. You need to implement an Apigee feature to control the total number of API calls for cost management. What should you do?

Options:

A.  

Set up API key validation.

B.  

Integrate OAuth 2.0 authorization.

C.  

Configure Quota policies.

D.  

Activate XML threat protection.

Discussion 0
Question # 44

Mountkirk Games wants you to secure the connectivity from the new gaming application platform to Google

Cloud. You want to streamline the process and follow Google-recommended practices. What should you do?

Options:

A.  

Configure Workload Identity and service accounts to be used by the application platform.

B.  

Use Kubernetes Secrets, which are obfuscated by default. Configure these Secrets to be used by the

application platform.

C.  

Configure Kubernetes Secrets to store the secret, enable Application-Layer Secrets Encryption, and use

Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to

be used by the application platform.

D.  

Configure HashiCorp Vault on Compute Engine, and use customer managed encryption keys and Cloud

Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used

by the application platform.

Discussion 0
Question # 45

You are implementing Firestore for Mountkirk Games. Mountkirk Games wants to give a new game

programmatic access to a legacy game ' s Firestore database. Access should be as restricted as possible. What

should you do?

Options:

A.  

Create a service account (SA) in the legacy game ' s Google Cloud project, add this SA in the new game ' s IAM page, and then give it the Firebase Admin role in both projects

B.  

Create a service account (SA) in the legacy game ' s Google Cloud project, add a second SA in the new game ' s IAM page, and then give the Organization Admin role to both SAs

C.  

Create a service account (SA) in the legacy game ' s Google Cloud project, give it the Firebase Admin role, and then migrate the new game to the legacy game ' s project.

D.  

Create a service account (SA) in the lgacy game ' s Google Cloud project, give the SA the Organization Admin rule and then give it the Firebase Admin role in both projects

Discussion 0
Question # 46

Mountkirk Games wants to limit the physical location of resources to their operating Google Cloud regions.

What should you do?

Options:

A.  

Configure an organizational policy which constrains where resources can be deployed.

B.  

Configure IAM conditions to limit what resources can be configured.

C.  

Configure the quotas for resources in the regions not being used to 0.

D.  

Configure a custom alert in Cloud Monitoring so you can disable resources as they are created in other

regions.

Discussion 0
Question # 47

For this question, refer to the TerramEarth case study.

You start to build a new application that uses a few Cloud Functions for the backend. One use case requires a Cloud Function func_display to invoke another Cloud Function func_query. You want func_query only to accept invocations from func_display. You also want to follow Google ' s recommended best practices. What should you do?

Options:

A.  

Create a token and pass it in as an environment variable to func_display. When invoking func_query, include the token in the request Pass the same token to func _query and reject the invocation if the tokens are different.

B.  

Make func_query ' Require authentication. ' Create a unique service account and associate it to func_display. Grant the service account invoker role for func_query. Create an id token in func_display and include the token to the request when invoking func_query.

C.  

Make func _query ' Require authentication ' and only accept internal traffic. Create those two functions in the same VP

C.  

Create an ingress firewall rule for func_query to only allow traffic from func_display.

D.  

Create those two functions in the same project and VP

C.  

Make func_query only accept internal traffic. Create an ingress firewall for func_query to only allow traffic from func_display. Also, make sure both functions use the same service account.

Discussion 0
Question # 48

You need to implement a network ingress for a new game that meets the defined business and technical

requirements. Mountkirk Games wants each regional game instance to be located in multiple Google Cloud

regions. What should you do?

Options:

A.  

Configure a global load balancer connected to a managed instance group running Compute Engine

instances.

B.  

Configure kubemci with a global load balancer and Google Kubernetes Engine.

C.  

Configure a global load balancer with Google Kubernetes Engine.

D.  

Configure Ingress for Anthos with a global load balancer and Google Kubernetes Engine.

Discussion 0
Question # 49

Your development teams release new versions of games running on Google Kubernetes Engine (GKE) daily.

You want to create service level indicators (SLIs) to evaluate the quality of the new versions from the user’s

perspective. What should you do?

Options:

A.  

Create CPU Utilization and Request Latency as service level indicators.

B.  

Create GKE CPU Utilization and Memory Utilization as service level indicators.

C.  

Create Request Latency and Error Rate as service level indicators.

D.  

Create Server Uptime and Error Rate as service level indicators.

Discussion 0
Question # 50

You have broken down a legacy monolithic application into a few containerized RESTful microservices. You want to run those microservices on Cloud Run. You also want to make sure the services are highly available with low latency to your customers. What should you do?

Options:

A.  

Deploy Cloud Run services to multiple availability zones. Create Cloud Endpoints that point to the services. Create a global HTIP(S) Load Balancing instance and attach the Cloud Endpoints to its backend.

B.  

Deploy Cloud Run services to multiple regions Create serverless network endpoint groups pointing to the services. Add the serverless NE Gs to a backend service that is used by a global HTIP(S) Load Balancing instance.

C.  

Cloud Run services to multiple regions. In Cloud DNS, create a latency-based DNS name that points to the services.

D.  

Deploy Cloud Run services to multiple availability zones. Create a TCP/IP global load balancer. Add the Cloud Run Endpoints to its backend service.

Discussion 0

Professional-Cloud-Architect PDF

Professional-Cloud-Architect PDF (Printable)
$54.25
$154.99

Professional-Cloud-Architect Testing Engine

Professional-Cloud-Architect PDF (Printable)
$59.5
$169.99

Professional-Cloud-Architect PDF + Testing Engine

Professional-Cloud-Architect PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions