The Abreast Of The Times Guide To Professional-Cloud-Architect Study Guides

NEW QUESTION 1

Your company is running a stateless application on a Compute Engine instance. The application is used heavily during regular business hours and lightly outside of business hours. Users are reporting that the application is slow during peak hours. You need to optimize the application’s performance. What should you do?

• A. Create a snapshot of the existing dis
• B. Create an instance template from the snapsho
• C. Create an autoscaled managed instance group from the instance template.
• D. Create a snapshot of the existing dis
• E. Create a custom image from the snapsho
• F. Create an autoscaled managed instance group from the custom image.
• G. Create a custom image from the existing dis
• H. Create an instance template from the custom image.Create an autoscaled managed instance group from the instance template.
• I. Create an instance template from the existing dis
• J. Create a custom image from the instance template.Create an autoscaled managed instance group from the custom image.

Answer: B

Explanation:
https://cloud.google.com/compute/docs/instance-templates/create-instance-templates

NEW QUESTION 2

You are designing a large distributed application with 30 microservices. Each of your distributed microservices needs to connect to a database back-end. You want to store the credentials securely. Where should you store the credentials?

• A. In the source code
• B. In an environment variable
• C. In a secret management system
• D. In a config file that has restricted access through ACLs

Answer: C

Explanation:
https://cloud.google.com/docs/authentication/production#providing_credentials_to_your_application

NEW QUESTION 3

Your company places a high value on being responsive and meeting customer needs quickly. Their primary business objectives are release speed and agility. You want to reduce the chance of security errors being accidentally introduced. Which two actions can you take? Choose 2 answers

• A. Ensure every code check-in is peer reviewed by a security SME.
• B. Use source code security analyzers as part of the CI/CD pipeline.
• C. Ensure you have stubs to unit test all interfaces between components.
• D. Enable code signing and a trusted binary repository integrated with your CI/CD pipeline.
• E. Run a vulnerability security scanner as part of your continuous-integration /continuous-delivery (CI/CD) pipeline.

Answer: BE

Explanation:
https://docs.microsoft.com/en-us/vsts/articles/security-validation-cicd-pipeline?view=vsts

NEW QUESTION 4

For this question, refer to the Mountkirk Games case study.
Mountkirk Games has deployed their new backend on Google Cloud Platform (GCP). You want to create a thorough testing process for new versions of the backend before they are released to the public. You want the testing environment to scale in an economical way. How should you design the process?

• A. Create a scalable environment in GCP for simulating production load.
• B. Use the existing infrastructure to test the GCP-based backend at scale.
• C. Build stress tests into each component of your application using resources internal to GCP to simulate load.
• D. Create a set of static environments in GCP to test different levels of load — for example, high, medium, and low.

Answer: A

Explanation:
From scenario: Requirements for Game Backend Platform
Dynamically scale up or down based on game activity
Connect to a managed NoSQL database service
Run customize Linux distro

NEW QUESTION 5

The database administration team has asked you to help them improve the performance of their new database server running on Google Compute Engine. The database is for importing and normalizing their performance statistics and is built with MySQL running on Debian Linux. They have an n1-standard-8 virtual machine with 80 GB of SSD persistent disk. What should they change to get better performance from this system?

• A. Increase the virtual machine's memory to 64 GB.
• B. Create a new virtual machine running PostgreSQL.
• C. Dynamically resize the SSD persistent disk to 500 GB.
• D. Migrate their performance metrics warehouse to BigQuery.
• E. Modify all of their batch jobs to use bulk inserts into the database.

Answer: C

NEW QUESTION 6

Your company is migrating its on-premises data center into the cloud. As part of the migration, you want to integrate Kubernetes Engine for workload orchestration. Parts of your architecture must also be PCI DSScompliant.
Which of the following is most accurate?

• A. App Engine is the only compute platform on GCP that is certified for PCI DSS hosting.
• B. Kubernetes Engine cannot be used under PCI DSS because it is considered shared hosting.
• C. Kubernetes Engine and GCP provide the tools you need to build a PCI DSS-compliant environment.
• D. All Google Cloud services are usable because Google Cloud Platform is certified PCI-compliant.

Answer: D

Explanation:
https://cloud.google.com/security/compliance/pci-dss

NEW QUESTION 7

You need to develop procedures to test a disaster plan for a mission-critical application. You want to use Google-recommended practices and native capabilities within GCP.
What should you do?

• A. Use Deployment Manager to automate service provisionin
• B. Use Activity Logs to monitor and debug your tests.
• C. Use Deployment Manager to automate provisionin
• D. Use Stackdriver to monitor and debug your tests.
• E. Use gcloud scripts to automate service provisionin
• F. Use Activity Logs monitor and debug your tests.
• G. Use automated scripts to automate service provisionin
• H. Use Activity Logs monitor and debug your tests.

Answer: B

Explanation:
https://cloud.google.com/solutions/dr-scenarios-planning-guide

NEW QUESTION 8

You want to automate the creation of a managed instance group and a startup script to install the OS package dependencies. You want to minimize the startup time for VMs in the instance group.
What should you do?

• A. Use Terraform to create the managed instance group and a startup script to install the OS package dependencies.
• B. Create a custom VM image with all OS package dependencie
• C. Use Deployment Manager to create the managed instance group with the VM image.
• D. Use Puppet to create the managed instance group and install the OS package dependencies.
• E. Use Deployment Manager to create the managed instance group and Ansible to install the OS package dependencies.

Answer: B

Explanation:
"Custom images are more deterministic and start more quickly than instances with startup scripts. However, startup scripts are more flexible and let you update the apps and settings in your instances more easily." https://cloud.google.com/compute/docs/instance-templates/create-instance-templates#using_custom_or_public_i

NEW QUESTION 9

Your applications will be writing their logs to BigQuery for analysis. Each application should have its own table.
Any logs older than 45 days should be removed. You want to optimize storage and follow Google recommended practices. What should you do?

• A. Configure the expiration time for your tables at 45 days
• B. Make the tables time-partitioned, and configure the partition expiration at 45 days
• C. Rely on BigQuery’s default behavior to prune application logs older than 45 days
• D. Create a script that uses the BigQuery command line tool (bq) to remove records older than 45 days

Answer: B

Explanation:
https://cloud.google.com/bigquery/docs/managing-partitioned-tables

NEW QUESTION 10

For this question, refer to the Mountkirk Games case study
Mountkirk Games needs to create a repeatable and configurable mechanism for deploying isolated application environments. Developers and testers can access each other's environments and resources, but they cannot access staging or production resources. The staging environment needs access to some services from production.
What should you do to isolate development environments from staging and production?

• A. Create a project for development and test and another for staging and production.
• B. Create a network for development and test and another for staging and production.
• C. Create one subnetwork for development and another for staging and production.
• D. Create one project for development, a second for staging and a third for production.

Answer: D

NEW QUESTION 11

You have been engaged by your client to lead the migration of their application infrastructure to GCP. One of their current problems is that the on-premises high performance SAN is requiring frequent and expensive upgrades to keep up with the variety of workloads that are identified as follows: 20TB of log archives retained for legal reasons; 500 GB of VM boot/data volumes and templates; 500 GB of image thumbnails; 200 GB of customer session state data that allows customers to restart sessions even if off-line for several days.
Which of the following best reflects your recommendations for a cost-effective storage allocation?

• A. Local SSD for customer session state dat
• B. Lifecycle-managed Cloud Storage for log archives, thumbnails, and VM boot/data volumes.
• C. Memcache backed by Cloud Datastore for the customer session state dat
• D. Lifecycle- managed Cloud Storage for log archives, thumbnails, and VM boot/data volumes.
• E. Memcache backed by Cloud SQL for customer session state dat
• F. Assorted local SSD-backed instances for VM boot/data volume
• G. Cloud Storage for log archives and thumbnails.
• H. Memcache backed by Persistent Disk SSD storage for customer session state dat
• I. Assorted local SSDbacked instances for VM boot/data volume
• J. Cloud Storage for log archives and thumbnails.

Answer: D

Explanation:
https://cloud.google.com/compute/docs/disks

NEW QUESTION 12

Your company acquired a healthcare startup and must retain its customers’ medical information for up to 4 more years, depending on when it was created. Your corporate policy is to securely retain this data, and then delete it as soon as regulations allow.
Which approach should you take?

• A. Store the data in Google Drive and manually delete records as they expire.
• B. Anonymize the data using the Cloud Data Loss Prevention API and store it indefinitely.
• C. Store the data using the Cloud Storage and use lifecycle management to delete files when they expire.
• D. Store the data in Cloud Storage and run a nightly batch script that deletes all expired datA.

Answer: C

Explanation:
https://cloud.google.com/storage/docs/lifecycle

NEW QUESTION 13

An application development team believes their current logging tool will not meet their needs for their new cloud-based product. They want a bettor tool to capture errors and help them analyze their historical log data. You want to help them find a solution that meets their needs, what should you do?

• A. Direct them to download and install the Google StackDriver logging agent.
• B. Send them a list of online resources about logging best practices.
• C. Help them define their requirements and assess viable logging tools.
• D. Help them upgrade their current tool to take advantage of any new features.

Answer: C

Explanation:
Help them define their requirements and assess viable logging tools. They know the requirements and the existing tools' problems. While it's true StackDriver Logging and Error Reporting possibly meet all their requirements, there might be other tools also meet their need. They need you to provide expertise to make assessment for new tools, specifically, logging tools that can "capture errors and help them analyze their historical log data".
References: https://cloud.google.com/logging/docs/agent/installation

NEW QUESTION 14

You are using Cloud SQL as the database backend for a large CRM deployment. You want to scale as usage increases and ensure that you don’t run out of storage, maintain 75% CPU usage cores, and keep replication lag below 60 seconds. What are the correct steps to meet your requirements?

• A. 1) Enable automatic storage increase for the instance.2) Create a Stackdriver alert when CPU usage exceeds 75%, and change the instance type to reduce CPU usage.3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.
• B. 1) Enable automatic storage increase for the instance.2) Change the instance type to a 32-core machine type to keep CPU usage below 75%.3) Create a Stackdriver alert for replication lag, and shard the database to reduce replication time.
• C. 1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on the instance to create more space.2) Deploy memcached to reduce CPU load.3) Change the instance type to a 32-core machine type to reduce replication lag.
• D. 1) Create a Stackdriver alert when storage exceeds 75%, and increase the available storage on the instance to create more space.2) Deploy memcached to reduce CPU load.3) Create a Stackdriver alert for replication lag, and change the instance type to a 32-core machine typeto reduce replication lag.

Answer: A

NEW QUESTION 15

You have an application deployed on Kubernetes Engine using a Deployment named echo-deployment. The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application. What should you do?

• A. Use kubect1 set image deployment/echo-deployment <new-image>
• B. Use the rolling update functionality of the Instance Group behind the Kubernetes cluster
• C. Update the deployment yaml file with the new container imag
• D. Use kubect1 delete deployment/ echo-deployment and kubect1 create –f <yaml-file>
• E. Update the service yaml file which the new container imag
• F. Use kubect1 delete service/echoservice and kubect1 create –f <yaml-file>

Answer: A

Explanation:
https://cloud.google.com/kubernetes-engine/docs/how-to/updating-apps#updating_an_application

NEW QUESTION 16

Your company's user-feedback portal comprises a standard LAMP stack replicated across two zones. It is deployed in the us-central1 region and uses autoscaled managed instance groups on all layers, except the database. Currently, only a small group of select customers have access to the portal. The portal meets a 99.99% availability SLA under these conditions However next quarter, your company will be making the portal available to all users, including unauthenticated users. You need to develop a resiliency testing strategy to ensure the system maintains the SLA once they introduce additional user load. What should you do?

• A. Capture existing users input, and replay captured user load until autoscale is triggered on all layer
• B. At the same time, terminate all resources in one of the zones.
• C. Create synthetic random user input, replay synthetic load until autoscale logic is triggered on at least one layer, and introduce "chaos" to the system by terminating random resources on both zones.
• D. Expose the new system to a larger group of users, and increase group ' size each day until autoscale logic is tnggered on all layer
• E. At the same time, terminate random resources on both zones.
• F. Capture existing users input, and replay captured user load until resource utilization crosses 80%. Also,derive estimated number of users based on existing users usage of the app, and deploy enough resources to handle 200% of expected load.

Answer: A

NEW QUESTION 17

Your customer runs a web service used by e-commerce sites to offer product recommendations to users. The company has begun experimenting with a machine learning model on Google Cloud Platform to improve the quality of results.
What should the customer do to improve their model’s results over time?

• A. Export Cloud Machine Learning Engine performance metrics from Stackdriver to BigQuery, to be used to analyze the efficiency of the model.
• B. Build a roadmap to move the machine learning model training from Cloud GPUs to Cloud TPUs, which offer better results.
• C. Monitor Compute Engine announcements for availability of newer CPU architectures, and deploy the model to them as soon as they are available for additional performance.
• D. Save a history of recommendations and results of the recommendations in BigQuery, to be used as training data.

Answer: D

Explanation:
https://cloud.google.com/solutions/building-a-serverless-ml-model

NEW QUESTION 18

You have an application that will run on Compute Engine. You need to design an architecture that takes into account a disaster recovery plan that requires your application to fail over to another region in case of a regional outage. What should you do?

• A. Deploy the application on two Compute Engine instances in the same project but in a different region.Use the first instance to serve traffic, and use the HTTP load balancing service to fail over to the standby instance in case of a disaster.
• B. Deploy the application on a Compute Engine instanc
• C. Use the instance to serve traffic, and use the HTTP load balancing service to fail over to an instance on your premises in case of a disaster.
• D. Deploy the application on two Compute Engine instance groups, each in the same project but in a different regio
• E. Use the first instance group to serve traffic, and use the HTTP load balancing service to fail over to the standby instance group in case of a disaster.
• F. Deploy the application on two Compute Engine instance groups, each in separate project and a different regio
• G. Use the first instance group to server traffic, and use the HTTP load balancing service to fail over to the standby instance in case of a disaster.

Answer: C

NEW QUESTION 19
......