Google Certified Professional - Cloud Architect (GCP) - Professional-Cloud-Architect Exam Practice Test

A. Create an Identity and Access Management (IAM) policy that maps the IT staff to the compute.
networkAdmin role for the organization.

B. Create a custom Identity and Access Management (IAM) role named GCE_FRONTEND with the compute.addresses.create permission.

C. Revoke the compute.networkAdmin role from all users in the project with front end instances.

D. Create an Organizational Policy with a constraint to allow external IP addresses only on the frontend Compute Engine instances.

A. Send the data through the processing pipeline, and then store the processed data in a Cloud Storage bucket for reprocessing.

B. Store the data in a BigQuery table. Design the processing pipelines to retrieve the data from the table.

C. Send the data through the processing pipeline, and then store the processed data in a BigQuery table for reprocessing.

D. Store the data in a Cloud Storage bucket. Design the processing pipelines to retrieve the data from the bucket

A. Change the node pool to use spot VMs.

B. Create a second GKE cluster for the batch workloads only. Allocate the 200 original nodes across both clusters.

C. Configure CPU and memory limits on the namespaces in the cluster. Configure all Pods to have a CPU and memory limits.

D. Configure a HorizontalPodAutoscaler for all stateless workloads and for all compatible stateful workloads. Configure the cluster to use node auto scaling.

A. Store static content such as HTML and images in Cloud CDN. Host the APIs on App Engine and store the user data in Cloud SQL.

B. Store static content such as HTML and images in a Cloud Storage bucket. Use Cloud Functions to host the APIs and save the user data in Firestore.

C. Store static content such as HTML and images in Cloud CDN. Use Cloud Run to host the APIs and save the user data in Cloud SQL.

D. Store static content such as HTML and images in a Cloud Storage bucket. Host the APIs on a zonal Google Kubernetes Engine cluster with worker nodes in multiple zones, and save the user data in Cloud Spanner.

A. Create secondary credentials for each dealer that can be given to the trusted third party.

B. Build or leverage an OAuth-compatible access control system.

C. Restrict data access based on the source IP address of the partner systems.

D. Build SAML 2.0 SSO compatibility into your authentication system.

A. Focus on cause-based alerts, creating alerting policies with thresholds for the Compute Engine instances, including CPU utilization, memory usage, disk I/O, and network traffic.

B. Configure alerts based on predictive metrics. Use the instance count of the MIG as the primary metric to trigger an alert.

C. Implement an error budget policy based on the availability of the SLO. Create a " page " alert that triggers only when the rate of burn of the error budget predicts a full exhaustion within the next 24 hours.

D. Create log-based alerts for only the WARN and ERROR log entries generated by the application to ensure that no potential issue is missed.

A. Grant the security team access to the logs in each Project.

B. Configure Stackdriver Monitoring for all Projects, and export to BigQuery.

C. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage.

D. Configure Stackdriver Monitoring for all Projects with the default retention policies.

A. Create an instance template for the backend. For every region, deploy it on a multi-zone managed instance group. Use an L4 load balancer.

B. Create an instance template for the backend. For every region, deploy it on a single-zone managed instance group. Use an L7 load balancer.

C. Create an instance template for the backend. For every region, deploy it on a multi-zone managed instance group. Use an L7 load balancer.

D. Create an instance template for the backend. For every region, deploy it on a single-zone managed instance group. Use an L4 load balancer.

A. Enable Virtual Private Cloud (VPC) flow logging.

B. Verify that your user account is assigned the compute.networkAdmin Identity and Access Management (IAM) role.

C. Enable Firewall Rules Logging for the firewall rules you want to monitor.

D. Install the Google Cloud SDK, and verify that there are no Firewall logs in the command line output.

A. Use gcloud to create a Kubernetes cluster. Use kubect1 to create the deployment.

B. Use gcloud to create a Kubernetes cluster. Use Deployment Manager to create the deployment.

C. Use kubect1 to create a Kubernetes cluster. Use Deployment Manager to create the deployment.

D. Use kubect1 to create a Kubernetes cluster. Use kubect1 to create the deployment.

A. Purchase three-year committed use discounts (CUDs) for the existing n1-standard-4 instances.

B. Re-architect the environments to run on a regional managed instance group (MIG) with autoscaling enabled.

C. Schedule the virtual machines to start and stop to match your team ' s work schedule.

D. Upgrade all instances to the N2 machine series.

A. Create a scheduled job in Cloud Run to invoke a container every minute. The container will check the application URL If the application is down, switch the URL to the " Site is unavailable " page, and notify the Ops team.

B. Use Cloud Error Reporting to check the application URL If the application is down, switch the URL to the " Site is unavailable " page, and notify the Ops team.

C. Create a cron job on a Compute Engine VM that runs every minute. The cron job invokes a Python program to check the application URL If the application is down, switch the URL to the " Site is unavailable " page, and notify the Ops team.

D. Create a Cloud Monitoring uptime check to validate the application URL If it fails, put a message in a Pub/Sub queue that triggers a Cloud Function to switch the URL to the " Site is unavailable " page, and notify the Ops team.