Month End Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Professional-Cloud-Architect Google Certified Professional - Cloud Architect (GCP) is now Stable and With Pass Result | Test Your Knowledge for Free

Exams4sure Dumps

Professional-Cloud-Architect Practice Questions

Google Certified Professional - Cloud Architect (GCP)

Last Update 2 days ago
Total Questions : 345

Dive into our fully updated and stable Professional-Cloud-Architect practice test platform, featuring all the latest Google Cloud Certified exam questions added this week. Our preparation tool is more than just a Google study aid; it's a strategic advantage.

Our free Google Cloud Certified practice questions crafted to reflect the domains and difficulty of the actual exam. The detailed rationales explain the 'why' behind each answer, reinforcing key concepts about Professional-Cloud-Architect. Use this test to pinpoint which areas you need to focus your study on.

Professional-Cloud-Architect PDF

Professional-Cloud-Architect PDF (Printable)
$46.5
$154.99

Professional-Cloud-Architect Testing Engine

Professional-Cloud-Architect PDF (Printable)
$51
$169.99

Professional-Cloud-Architect PDF + Testing Engine

Professional-Cloud-Architect PDF (Printable)
$63.9
$212.99
Question # 41

For this question, refer to the EHR Healthcare case study. You are responsible for designing the Google Cloud network architecture for Google Kubernetes Engine. You want to follow Google best practices. Considering the EHR Healthcare business and technical requirements, what should you do to reduce the attack surface?

Options:

A.  

Use a private cluster with a private endpoint with master authorized networks configured.

B.  

Use a public cluster with firewall rules and Virtual Private Cloud (VPC) routes.

C.  

Use a private cluster with a public endpoint with master authorized networks configured.

D.  

Use a public cluster with master authorized networks enabled and firewall rules.

Discussion 0
Question # 42

For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for securely deploying workloads to Google Cloud. You also need to ensure that only verified containers are deployed using Google Cloud services. What should you do? (Choose two.)

Options:

A.  

Enable Binary Authorization on GKE, and sign containers as part of a CI/CD pipeline.

B.  

Configure Jenkins to utilize Kritis to cryptographically sign a container as part of a CI/CD pipeline.

C.  

Configure Container Registry to only allow trusted service accounts to create and deploy containers from the registry.

D.  

Configure Container Registry to use vulnerability scanning to confirm that there are no vulnerabilities before deploying the workload.

Discussion 0
Question # 43

For this question, refer to the EHR Healthcare case study. In the past, configuration errors put public IP addresses on backend servers that should not have been accessible from the Internet. You need to ensure that no one can put external IP addresses on backend Compute Engine instances and that external IP addresses can only be configured on frontend Compute Engine instances. What should you do?

Options:

A.  

Create an Organizational Policy with a constraint to allow external IP addresses only on the frontend Compute Engine instances.

B.  

Revoke the compute.networkAdmin role from all users in the project with front end instances.

C.  

Create an Identity and Access Management (IAM) policy that maps the IT staff to the compute.networkAdmin role for the organization.

D.  

Create a custom Identity and Access Management (IAM) role named GCE_FRONTEND with the compute.addresses.create permission.

Discussion 0
Question # 44

For this question, refer to the EHR Healthcare case study. You are responsible for ensuring that EHR ' s use of Google Cloud will pass an upcoming privacy compliance audit. What should you do? (Choose two.)

Options:

A.  

Verify EHR ' s product usage against the list of compliant products on the Google Cloud compliance page.

B.  

Advise EHR to execute a Business Associate Agreement (BAA) with Google Cloud.

C.  

Use Firebase Authentication for EHR ' s user facing applications.

D.  

Implement Prometheus to detect and prevent security breaches on EHR ' s web-based applications.

E.  

Use GKE private clusters for all Kubernetes workloads.

Discussion 0
Question # 45

For this question, refer to the Dress4Win case study.

As part of Dress4Win ' s plans to migrate to the cloud, they want to be able to set up a managed logging and monitoring system so they can handle spikes in their traffic load. They want to ensure that:

• The infrastructure can be notified when it needs to scale up and down to handle the ebb and flow of usage throughout the day

• Their administrators are notified automatically when their application reports errors.

• They can filter their aggregated logs down in order to debug one piece of the application across many hosts

Which Google StackDriver features should they use?

Options:

A.  

Logging, Alerts, Insights, Debug

B.  

Monitoring, Trace, Debug, Logging

C.  

Monitoring, Logging, Alerts, Error Reporting

D.  

Monitoring, Logging, Debug, Error Report

Discussion 0
Question # 46

For this question, refer to the Dress4Win case study.

Dress4Win has configured a new uptime check with Google Stackdriver for several of their legacy services. The Stackdriver dashboard is not reporting the services as healthy. What should they do?

Options:

A.  

Install the Stackdriver agent on all of the legacy web servers.

B.  

In the Cloud Platform Console download the list of the uptime servers ' IP addresses and create an inbound firewall rule

C.  

Configure their load balancer to pass through the User-Agent HTTP header when the value matches GoogleStackdriverMonitoring-UptimeChecks (https://cloud.google.com/monitoring)

D.  

Configure their legacy web servers to allow requests that contain user-Agent HTTP header when the value matches GoogleStackdriverMonitoring— UptimeChecks (https://cloud.google.com/monitoring)

Discussion 0
Question # 47

For this question, refer to the Dress4Win case study.

You want to ensure Dress4Win ' s sales and tax records remain available for infrequent viewing by auditors for at least 10 years. Cost optimization is your top priority. Which cloud services should you choose?

Options:

A.  

Google Cloud Storage Coldline to store the data, and gsutil to access the data.

B.  

Google Cloud Storage Nearline to store the data, and gsutil to access the data.

C.  

Google Bigtabte with US or EU as location to store the data, and gcloud to access the data.

D.  

BigQuery to store the data, and a web server cluster in a managed instance group to access the data. Google Cloud SQL mirrored across two distinct regions to store the data, and a Redis cluster in a managed instance group to access the data.

Discussion 0
Question # 48

For this question, refer to the Dress4Win case study.

Dress4Win has asked you to recommend machine types they should deploy their application servers to. How should you proceed?

Options:

A.  

Perform a mapping of the on-premises physical hardware cores and RAM to the nearest machine types in the cloud.

B.  

Recommend that Dress4Win deploy application servers to machine types that offer the highest RAM to CPU ratio available.

C.  

Recommend that Dress4Win deploy into production with the smallest instances available, monitor them over time, and scale the machine type up until the desired performance is reached.

D.  

Identify the number of virtual cores and RAM associated with the application server virtual machines align them to a custom machine type in the cloud, monitor performance, and scale the machine types up until the desired performance is reached.

Discussion 0
Question # 49

For this question, refer to the Dress4Win case study.

The Dress4Win security team has disabled external SSH access into production virtual machines (VMs) on Google Cloud Platform (GCP). The operations team needs to remotely manage the VMs, build and push Docker containers, and manage Google Cloud Storage objects. What can they do?

Options:

A.  

Grant the operations engineers access to use Google Cloud Shell.

B.  

Configure a VPN connection to GCP to allow SSH access to the cloud VMs.

C.  

Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.

D.  

Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.

Discussion 0
Question # 50

For this question, refer to the Dress4Win case study.

Dress4Win has end-to-end tests covering 100% of their endpoints. They want to ensure that the move to the cloud does not introduce any new bugs. Which additional testing methods should the developers employ to prevent an outage?

Options:

A.  

They should enable Google Stackdriver Debugger on the application code to show errors in the code.

B.  

They should add additional unit tests and production scale load tests on their cloud staging environment.

C.  

They should run the end-to-end tests in the cloud staging environment to determine if the code is working as intended.

D.  

They should add canary tests so developers can measure how much of an impact the new release causes to latency.

Discussion 0
Get Professional-Cloud-Architect dumps and pass your exam in 24 hours!

Free Exams Sample Questions