Exams > Google > Professional Cloud Architect: Professional Cloud Architect on Google Cloud Platform
Professional Cloud Architect: Professional Cloud Architect on Google Cloud Platform
Page 6 out of 27 pages Questions 51-60 out of 270 questions
Question#51

All Compute Engine instances in your VPC should be able to connect to an Active Directory server on specific ports. Any other traffic emerging from your instances is not allowed. You want to enforce this using VPC firewall rules.
How should you configure the firewall rules?

  • A. Create an egress rule with priority 1000 to deny all traffic for all instances. Create another egress rule with priority 100 to allow the Active Directory traffic for all instances.
  • B. Create an egress rule with priority 100 to deny all traffic for all instances. Create another egress rule with priority 1000 to allow the Active Directory traffic for all instances.
  • C. Create an egress rule with priority 1000 to allow the Active Directory traffic. Rely on the implied deny egress rule with priority 100 to block all traffic for all instances.
  • D. Create an egress rule with priority 100 to allow the Active Directory traffic. Rely on the implied deny egress rule with priority 1000 to block all traffic for all instances.
Discover Answer Hide Answer

A

Question#52

Your customer runs a web service used by e-commerce sites to offer product recommendations to users. The company has begun experimenting with a machine learning model on Google Cloud Platform to improve the quality of results.
What should the customer do to improve their model's results over time?

  • A. Export Cloud Machine Learning Engine performance metrics from Stackdriver to BigQuery, to be used to analyze the efficiency of the model.
  • B. Build a roadmap to move the machine learning model training from Cloud GPUs to Cloud TPUs, which offer better results.
  • C. Monitor Compute Engine announcements for availability of newer CPU architectures, and deploy the model to them as soon as they are available for additional performance.
  • D. Save a history of recommendations and results of the recommendations in BigQuery, to be used as training data.
Discover Answer Hide Answer

D

Question#53

A development team at your company has created a dockerized HTTPS web application. You need to deploy the application on Google Kubernetes Engine (GKE) and make sure that the application scales automatically.
How should you deploy to GKE?

  • A. Use the Horizontal Pod Autoscaler and enable cluster autoscaling. Use an Ingress resource to load-balance the HTTPS traffic.
  • B. Use the Horizontal Pod Autoscaler and enable cluster autoscaling on the Kubernetes cluster. Use a Service resource of type LoadBalancer to load-balance the HTTPS traffic.
  • C. Enable autoscaling on the Compute Engine instance group. Use an Ingress resource to load-balance the HTTPS traffic.
  • D. Enable autoscaling on the Compute Engine instance group. Use a Service resource of type LoadBalancer to load-balance the HTTPS traffic.
Discover Answer Hide Answer

B
Reference:
https://cloud.google.com/kubernetes-engine/docs/how-to/cluster-autoscaler

Question#54

You need to design a solution for global load balancing based on the URL path being requested. You need to ensure operations reliability and end-to-end in- transit encryption based on Google best practices.
What should you do?

  • A. Create a cross-region load balancer with URL Maps.
  • B. Create an HTTPS load balancer with URL Maps.
  • C. Create appropriate instance groups and instances. Configure SSL proxy load balancing.
  • D. Create a global forwarding rule. Configure SSL proxy load balancing.
Discover Answer Hide Answer

B
Reference:
https://cloud.google.com/load-balancing/docs/https/url-map

Question#55

You have an application that makes HTTP requests to Cloud Storage. Occasionally the requests fail with HTTP status codes of 5xx and 429.
How should you handle these types of errors?

  • A. Use gRPC instead of HTTP for better performance.
  • B. Implement retry logic using a truncated exponential backoff strategy.
  • C. Make sure the Cloud Storage bucket is multi-regional for geo-redundancy.
  • D. Monitor https://status.cloud.google.com/feed.atom and only make requests if Cloud Storage is not reporting an incident.
Discover Answer Hide Answer

B
Reference:
https://cloud.google.com/storage/docs/json_api/v1/status-codes

Question#56

You need to reduce the number of unplanned rollbacks of erroneous production deployments in your company's web hosting platform. Improvement to the QA/
Test processes accomplished an 80% reduction.
Which additional two approaches can you take to further reduce the rollbacks? (Choose two.)

  • A. Introduce a green-blue deployment model
  • B. Replace the QA environment with canary releases
  • C. Fragment the monolithic platform into microservices
  • D. Reduce the platform's dependency on relational database systems
  • E. Replace the platform's relational database systems with a NoSQL database
Discover Answer Hide Answer

AC

Question#57

To reduce costs, the Director of Engineering has required all developers to move their development infrastructure resources from on-premises virtual machines
(VMs) to Google Cloud Platform. These resources go through multiple start/stop events during the day and require state to persist. You have been asked to design the process of running a development environment in Google Cloud while providing cost visibility to the finance department.
Which two steps should you take? (Choose two.)

  • A. Use the - -no-auto-delete flag on all persistent disks and stop the VM
  • B. Use the - -auto-delete flag on all persistent disks and terminate the VM
  • C. Apply VM CPU utilization label and include it in the BigQuery billing export
  • D. Use Google BigQuery billing export and labels to associate cost to groups
  • E. Store all state into local SSD, snapshot the persistent disks, and terminate the VM
  • F. Store all state in Google Cloud Storage, snapshot the persistent disks, and terminate the VM
Discover Answer Hide Answer

AD

Question#58

Your company wants to track whether someone is present in a meeting room reserved for a scheduled meeting. There are 1000 meeting rooms across 5 offices on 3 continents. Each room is equipped with a motion sensor that reports its status every second. The data from the motion detector includes only a sensor ID and several different discrete items of information. Analysts will use this data, together with information about account owners and office locations.
Which database type should you use?

  • A. Flat file
  • B. NoSQL
  • C. Relational
  • D. Blobstore
Discover Answer Hide Answer

B
Relational databases were not designed to cope with the scale and agility challenges that face modern applications, nor were they built to take advantage of the commodity storage and processing power available today.
NoSQL fits well for:
✑ Developers are working with applications that create massive volumes of new, rapidly changing data types ג€" structured, semi-structured, unstructured and polymorphic data.
Incorrect Answers:
D: The Blobstore API allows your application to serve data objects, called blobs, that are much larger than the size allowed for objects in the Datastore service.
Blobs are useful for serving large files, such as video or image files, and for allowing users to upload large data files.
Reference:
https://www.mongodb.com/nosql-explained

Question#59

You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address.
You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly.
What should you do?

  • A. Ensure that a firewall rules exists to allow source traffic on HTTP/HTTPS to reach the load balancer.
  • B. Assign a public IP to each instance and configure a firewall rule to allow the load balancer to reach the instance public IP.
  • C. Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.
  • D. Create a tag on each instance with the name of the load balancer. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.
Discover Answer Hide Answer

C
The best practice when configuration a health check is to check health and serve traffic on the same port. However, it is possible to perform health checks on one port, but serve traffic on another. If you do use two different ports, ensure that firewall rules and services running on instances are configured appropriately. If you run health checks and serve traffic on the same port, but decide to switch ports at some point, be sure to update both the backend service and the health check.
Backend services that do not have a valid global forwarding rule referencing it will not be health checked and will have no health status.
Reference:
https://cloud.google.com/compute/docs/load-balancing/http/backend-service

Question#60

You write a Python script to connect to Google BigQuery from a Google Compute Engine virtual machine. The script is printing errors that it cannot connect to
BigQuery.
What should you do to fix the script?

  • A. Install the latest BigQuery API client library for Python
  • B. Run your script on a new virtual machine with the BigQuery access scope enabled
  • C. Create a new service account with BigQuery access and execute your script with that user
  • D. Install the bq component for gcloud with the command gcloud components install bq.
Discover Answer Hide Answer

B

chevron rightPrevious Nextchevron right