Halloween Sale Special - 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 75epass

Exact2Pass Menu

Google Certified Professional - Cloud Architect (GCP)

Last Update 12 hours ago Total Questions : 347

The Google Certified Professional - Cloud Architect (GCP) content is now fully updated, with all current exam questions added 12 hours ago. Deciding to include Professional-Cloud-Architect practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our Professional-Cloud-Architect exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these Professional-Cloud-Architect sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Google Certified Professional - Cloud Architect (GCP) practice test comfortably within the allotted time.

Question # 61

For this question, refer to the Dress4Win case study.

Dress4Win has asked you to recommend machine types they should deploy their application servers to. How should you proceed?

A.

Perform a mapping of the on-premises physical hardware cores and RAM to the nearest machine types in the cloud.

B.

Recommend that Dress4Win deploy application servers to machine types that offer the highest RAM to CPU ratio available.

C.

Recommend that Dress4Win deploy into production with the smallest instances available, monitor them over time, and scale the machine type up until the desired performance is reached.

D.

Identify the number of virtual cores and RAM associated with the application server virtual machines align them to a custom machine type in the cloud, monitor performance, and scale the machine types up until the desired performance is reached.

Question # 62

For this question, refer to the Dress4Win case study.

The Dress4Win security team has disabled external SSH access into production virtual machines (VMs) on Google Cloud Platform (GCP). The operations team needs to remotely manage the VMs, build and push Docker containers, and manage Google Cloud Storage objects. What can they do?

A.

Grant the operations engineers access to use Google Cloud Shell.

B.

Configure a VPN connection to GCP to allow SSH access to the cloud VMs.

C.

Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.

D.

Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.

Question # 63

For this question, refer to the Dress4Win case study.

At Dress4Win, an operations engineer wants to create a tow-cost solution to remotely archive copies of database backup files. The database files are compressed tar files stored in their current data center. How should he proceed?

A.

Create a cron script using gsutil to copy the files to a Coldline Storage bucket.

B.

Create a cron script using gsutil to copy the files to a Regional Storage bucket.

C.

Create a Cloud Storage Transfer Service Job to copy the files to a Coldline Storage bucket.

D.

Create a Cloud Storage Transfer Service job to copy the files to a Regional Storage bucket.

Question # 64

Your company has hired an external auditing firm to perform a compliance audit. Your company ' s governance policy requires that external auditors be managed in a single Google Group that is granted temporary, read-only access to a Cloud Storage bucket named audit-evidence-bucket. Access must be traceable to the individual auditor ' s identity and be active only for the duration of the audit engagement, which runs the entire month of October. You need a secure access control strategy that avoids administrative overhead and complies with your company ' s governance policy. What should you do?

A.

Use Workforce Identity Federation to map the auditors ' group to the Google Group. Bind the roles/storage.objectViewer role to this Google Group. Configure a 1-month session duration on the provider.

B.

Use Cloud Scheduler to run a Cloud Run functions script that adds the IAM binding of roles/storage.objectViewer to the Google Group on October 1 and another that removes the IAM binding on November 1.

C.

Create a service account, and grant it the roles/storage.objectViewer role on the bucket. Generate and share Signed URLs for each object in the bucket with an expiration date of November 1.

D.

Apply an IAM policy binding that grants the roles/storage.objectViewer role to the Google Group. Configure this binding with a time-based IAM Condition that automatically grants access from October 1 to November 1.

Question # 65

You are deploying a highly confidential data processing workload on Google Cloud. Your company ' s compliance framework mandates that cryptographic keys used for encrypting data at rest must be generated and stored exclusively within a validated Hardware Security Module (HSM). You want to use a fully integrated Google Cloud managed service to handle the lifecycle and usage of these keys. What should you do?

A.

Create a new key in Cloud Key Management Service (Cloud KMS) with the HSM protection level.

B.

Use Customer-Supplied Encryption Keys (CSEK) by providing your on-premises generated key with each API request.

C.

Configure Cloud External Key Manager (Cloud EKM) to connect to your on-premises HSM.

D.

Import your on-premises HSM key material into a Cloud KMS key with the SOFTWARE protection level.

Question # 66

Your company has just recently activated Cloud Identity to manage users. The Google Cloud Organization has been configured as wed. The security learn needs to secure protects that will be part of the Organization. They want to prohibit IAM users outside the domain from gaining permissions from now on. What should they do?

A.

Configure an organization policy to restrict identities by domain

B.

Configure an organization policy to block creation of service accounts

C.

Configure Cloud Scheduler to trigger a Cloud Function every hour that removes all users that don ' t belong to the Cloud identity domain from all projects.

Question # 67

Your marketing department wants to send out a promotional email campaign. The development team wants to minimize direct operation management. They project a wide range of possible customer responses, from 100 to 500,000 click-throughs per day. The link leads to a simple website that explains the promotion and collects user information and preferences. Which infrastructure should you recommend? (CHOOSE TWO)

A.

Use Google App Engine to serve the website and Google Cloud Datastore to store user data.

B.

Use a Google Container Engine cluster to serve the website and store data to persistent disk.

C.

Use a managed instance group to serve the website and Google Cloud Bigtable to store user data.

D.

Use a single compute Engine virtual machine (VM) to host a web server, backed by Google Cloud SQL.

Question # 68

You are developing your microservices application on Google Kubernetes Engine. During testing, you want to validate the behavior of your application in case a specific microservice should suddenly crash. What should you do?

A.

Add a taint to one of the nodes of the Kubernetes cluster. For the specific microservice, configure a pod anti-affinity label that has the name of the tainted node as a value.

B.

Use Istio’s fault injection on the particular microservice whose faulty behavior you want to simulate.

C.

Destroy one of the nodes of the Kubernetes cluster to observe the behavior.

D.

Configure Istio’s traffic management features to steer the traffic away from a crashing microservice.

Question # 69

You deploy your custom Java application to Google App Engine. It fails to deploy and gives you the following stack trace.

What should you do?

A.

Upload missing JAR files and redeploy your application.

B.

Digitally sign all of your JAR files and redeploy your application

C.

Recompile the CLoakedServlet class using and MD5 hash instead of SHA1

Question # 70

Your company has a support ticketing solution that uses App Engine Standard. The project that contains the App Engine application already has a Virtual Private Cloud(VPC) network fully

connected to the company’s on-premises environment through a Cloud VPN tunnel. You want to enable App Engine application to communicate with a database that is running in the company’s on-premises environment. What should you do?

A.

Configure private services access

B.

Configure private Google access for on-premises hosts only

C.

Configure serverless VPC access

D.

Configure private Google access

Go to page: