최신 Professional-Cloud-Architect 무료덤프 - Google Certified Professional

문제1

Your web application uses Google Kubernetes Engine to manage several workloads. One workload requires a consistent set of hostnames even after pod scaling and relaunches.
Which feature of Kubernetes should you use to accomplish this?

A. StatefulSets

B. Persistent Volumes

C. Role-based access control

D. Container environment variables

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제2

For this question, refer to the Mountkirk Games case study.
Mountkirk Games wants to set up a real-time analytics platform for their new game. The new platform must meet their technical requirements. Which combination of Google technologies will meet all of their requirements?

A. Cloud Pub/Sub, Compute Engine, Cloud Storage, and Cloud Dataproc

B. Container Engine, Cloud Pub/Sub, and Cloud SQL

C. Cloud Dataproc, Cloud Pub/Sub, Cloud SQL, and Cloud Dataflow

D. Cloud Dataflow, Cloud Storage, Cloud Pub/Sub, and BigQuery

E. Cloud SQL, Cloud Storage, Cloud Pub/Sub, and Cloud Dataflow

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Your company is building a new architecture to support its data-centric business focus. You are responsible for setting up the network. Your company's mobile and web-facing applications will be deployed on-premises, and all data analysis will be conducted in GCP. The plan is to process and load 7 years of archived .csv files totaling 900 TB of data and then continue loading 10 TB of data daily. You currently have an existing 100-MB internet connection.
What actions will meet your company's needs?

A. Compress and upload both achieved files and files uploaded daily using the qsutil -m option.

B. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish one Cloud VPN Tunnel to VPC networks over the public internet, and compares and upload files daily using the gsutil -m option.

C. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish a connection with Google using a Dedicated Interconnect or Direct Peering connection and use it to upload files daily.

D. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제4

You need to deploy an application on Google Cloud that must run on a Debian Linux environment. The application requires extensive configuration in order to operate correctly. You want to ensure that you can install Debian distribution updates with minimal manual intervention whenever they become available. What should you do?

A. Create a Compute Engine instance template using the most recent Debian image. Create an instance from this template, and install and configure the application as part of the startup script. Repeat this process whenever a new Google-managed Debian image becomes available.

B. Create an instance with the latest available Debian image. Connect to the instance via SSH, and install and configure the application on the instance. Repeat this process whenever a new Google-managed Debian image becomes available.

C. Create a Debian-based Compute Engine instance, install and configure the application, and use OS patch management to install available updates.

D. Create a Docker container with Debian as the base image. Install and configure the application as part of the Docker image creation process. Host the container on Google Kubernetes Engine and restart the container whenever a new update is available.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제5

You are using Cloud SQL as the database backend for a large CRM deployment. You want to scale as usage increases and ensure that you don't run out of storage, maintain 75% CPU usage cores, and keep replication lag below 60 seconds. What are the correct steps to meet your requirements?

A. 1) Enable automatic storage increase for the instance.
2) Change the instance type to a 32-core machine type to keep CPU usage below 75%.
3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.

B. 1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on the instance to create more space.
2) Deploy memcached to reduce CPU load.
3) Change the instance type to a 32-core machine type to reduce replication lag.

C. 1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on the instance to create more space.
2) Deploy memcached to reduce CPU load.
3) Create a Stackdriver alert for replication lag, and change the instance type to a 32-core machine type to reduce replication lag.

D. 1) Enable automatic storage increase for the instance.
2) Create a Stackdriver alert when CPU usage exceeds 75%, and change the instance type to reduce CPU usage.
3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.

정답: D

문제6

Your company acquired a healthcare startup and must retain its customers' medical information for up to 4 more years, depending on when it was created. Your corporate policy is to securely retain this data, and then delete it as soon as regulations allow.
Which approach should you take?

A. Anonymize the data using the Cloud Data Loss Prevention API and store it indefinitely.

B. Store the data in Google Drive and manually delete records as they expire.

C. Store the data in Cloud Storage and run a nightly batch script that deletes all expired datA.

D. Store the data using the Cloud Storage and use lifecycle management to delete files when they expire.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제7

For this question, refer to the Helicopter Racing League (HRL) case study. HRL wants better prediction accuracy from their ML prediction models. They want you to use Google's AI Platform so HRL can understand and interpret the predictions. What should you do?

A. Use Google Cloud's operations suite.

B. Use Explainable AI.

C. Use Vision AI.

D. Use Jupyter Notebooks.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제8

Your company has sensitive data in Cloud Storage buckets. Data analysts have Identity Access Management (IAM) permissions to read the buckets. You want to prevent data analysts from retrieving the data in the buckets from outside the office network. What should you do?

A. 1. Create a VPC Service Controls perimeter that includes the projects with the buckets.
2. Create an access level with the CIDR of the office network.

B. 1. Create a Cloud VPN to the office network.
2. Configure Private Google Access for on-premises hosts.

C. 1. Create a firewall rule for all instances in the Virtual Private Cloud (VPC) network for source range.
2. Use the Classless Inter-domain Routing (CIDR) of the office network.

D. 1. Create a Cloud Function to remove IAM permissions from the buckets, and another Cloud Function to add IAM permissions to the buckets.
2. Schedule the Cloud Functions with Cloud Scheduler to add permissions at the start of business and remove permissions at the end of business.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제9

For this question, refer to the Mountkirk Games case study
Mountkirk Games needs to create a repeatable and configurable mechanism for deploying isolated application environments. Developers and testers can access each other's environments and resources, but they cannot access staging or production resources. The staging environment needs access to some services from production.
What should you do to isolate development environments from staging and production?

A. Create one subnetwork for development and another for staging and production.

B. Create a project for development and test and another for staging and production.

C. Create one project for development, a second for staging and a third for production.

D. Create a network for development and test and another for staging and production.

정답: C

문제10

You are managing an application deployed on Cloud Run for Anthos, and you need to define a strategy for deploying new versions of the application. You want to evaluate the new code with a subset of production traffic to decide whether to proceed with the rollout. What should you do?

A. In the Google Cloud Console page for Cloud Run, set up continuous deployment using Cloud Build for the development branch. As part of the Cloud Build trigger, configure the substitution variable TRAFFIC_PERCENTAGE with the percentage of traffic you want directed to a new version.

B. In the Google Cloud Console, configure Traffic Director with a new Service that points to the new version of the application on Cloud Run. Configure Traffic Director to send a small percentage of traffic to the new version of the application.

C. Deploy a new revision to Cloud Run with the new version. Configure traffic percentage between revisions.

D. Deploy a new service to Cloud Run with the new version. Add a Cloud Load Balancing instance in front of both services.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제11

Your company has developed a monolithic, 3-tier application to allow external users to upload and share files. The solution cannot be easily enhanced and lacks reliability. The development team would like to re-architect the application to adopt microservices and a fully managed service approach, but they need to convince their leadership that the effort is worthwhile. Which advantage(s) should they highlight to leadership?

A. The new approach will make it easier to decouple infrastructure from application, develop and release new features, manage the underlying infrastructure, manage CI/CD pipelines and perform A/B testing, and scale the solution if necessary.

B. The new approach will be significantly less costly, make it easier to manage the underlying infrastructure, and automatically manage the CI/CD pipelines.

C. The monolithic solution can be converted to a container with Docker. The generated container can then be deployed into a Kubernetes cluster.

D. The process can be automated with Migrate for Compute Engine.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제12

You are monitoring Google Kubernetes Engine (GKE) clusters in a Cloud Monitoring workspace. As a Site Reliability Engineer (SRE), you need to triage incidents quickly. What should you do?

A. Navigate the predefined dashboards in the Cloud Monitoring workspace, create custom metrics, and install alerting software on a Compute Engine instance.

B. Create a custom dashboard in the Cloud Monitoring workspace for each incident, and then add metrics and create alert policies.

C. Write a shell script that gathers metrics from GKE nodes, publish these metrics to a Pub/Sub topic, export the data to BigQuery, and make a Data Studio dashboard.

D. Navigate the predefined dashboards in the Cloud Monitoring workspace, and then add metrics and create alert policies.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제13

A development team at your company has created a dockerized HTTPS web application. You need to deploy the application on Google Kubernetes Engine (GKE) and make sure that the application scales automatically.
How should you deploy to GKE?

A. Enable autoscaling on the Compute Engine instance group. Use an Ingress resource to load balance the HTTPS traffic.

B. Enable autoscaling on the Compute Engine instance group. Use a Service resource of type LoadBalancer to load-balance the HTTPS traffic.

C. Use the Horizontal Pod Autoscaler and enable cluster autoscaling. Use an Ingress resource to loadbalance the HTTPS traffic.

D. Use the Horizontal Pod Autoscaler and enable cluster autoscaling on the Kubernetes cluster. Use a Service resource of type LoadBalancer to load-balance the HTTPS traffic.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제14

Your agricultural division is experimenting with fully autonomous vehicles.
You want your architecture to promote strong security during vehicle operation.
Which two architecture should you consider?
Choose 2 answers:

A. Enclose the vehicle's drive electronics in a Faraday cage to isolate chips.

B. Use multiple connectivity subsystems for redundancy.

C. Use a trusted platform module (TPM) and verify firmware and binaries on boot.

D. Require IPv6 for connectivity to ensure a secure address space.

E. Treat every micro service call between modules on the vehicle as untrusted.

F. Use a functional programming language to isolate code execution cycles.

정답: C,E

문제15

Your company has a Google Cloud project that uses BigQuery for data warehousing. The VPN tunnel between the on-premises environment and Google Cloud is configured with Cloud VPN. Your security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing. What should you do?

A. Configure VPC Service Controls and configure Private Google Access for on-premises hosts.

B. Configure Private Service Connect.

C. Create a service account, grant the BigQuery JobUser role and Storage Object Viewer role to the service account, and remove all other Identity and Access Management (1AM) access from the project.

D. Configure Private Google Access.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

최신 Professional-Cloud-Architect 무료덤프 - Google Certified Professional - Cloud Architect (GCP)

우리와 연락하기

유용한 링크

최신 업데이트