Review Mode Set 1 – Google Certified Professional Cloud Architect

Your company is developing an automated data processing pipeline for marketing campaigns. The pipeline processes data once per day during business hours and then remains idle. For the minimum viable product release, you want to use a managed compute solution that automatically scales to zero after processing the data to save costs during idle times.

What primary compute resource is most suitable for this scenario?

Your company is consolidating multiple data centers and moving the data from an existing object storage service hosted by a third-party provider to a Cloud Storage bucket on Google Cloud. The project involves transferring 15 TB of operational data, and you need to ensure that the migration is cost-effective, quick, and efficient.

What is the most effective way to handle this?

You’re working on a retail business that has recently migrated its on-premises infrastructure to Google Compute Engine as part of a rapid lift and shift strategy. However, you want to modernize your system over the next 6 months by moving to a more cloud-native solution that provides no-ops and auto-scaling capabilities. Your goal is to ensure your online store can handle varying customer loads without manual intervention. Additionally, you want a service that can integrate with cloud-native event-driven workflows to streamline operations further.

Which compute services are the most appropriate for this scenario? (Select TWO.)

Your company is deploying a multi-region application in Google Kubernetes Engine. This application must handle large-scale traffic spikes during peak hours while maintaining consistent service hostnames even after pod scaling and relaunches. The application relies on specific hostnames to route traffic correctly.

Which Kubernetes feature should you implement to meet this requirement?

Your IT infrastructure team will store Cloud Interconnect log data for one year. The logs must be retained securely and accessed when required for compliance audits.

What steps should you take to preserve the logs for the specified duration?

Your company is replicating transactional data from its on-premises network to Google Cloud through a Google Cloud VPN connection. However, the replication process is affected by high latency, causing performance issues. The company needs a solution that can reduce latency and improve the overall stability of the connection for more reliable data replication.

Which solution should be implemented?

Your company is handling sensitive data, and you are tasked with ensuring the integrity of all logging activities. You plan to use Google Cloud Pub/Sub to stream real-time log entries.

The logs must be tamper-proof, and you need a way to verify the authenticity of every log entry to avoid any unauthorized alterations.

What is the most effective method to implement this?

A financial services company stores transaction data in Cloud Bigtable for analysis and reporting purposes. This data includes sensitive personally identifiable information (PII), such as customer names, bank account numbers, and credit card details. The company must ensure that this sensitive information is sanitized automatically before being stored to comply with privacy regulations and safeguard customer data.

Which solution will meet the given requirements?

You are managing a Cloud SQL MySQL second-generation database for an online auction platform that processes business-critical transaction data related to bids, payments, and user activities. You want to minimize the impact of data loss during unplanned downtime.

What features are necessary to implement? (Select TWO.)

You are working as a cloud architect for a distributed team across different time zones. Your team regularly uses BigQuery to analyze large datasets, Bigtable to handle real-time data, and Kubernetes Engine to manage containerized applications. To streamline workflows and avoid the complexity of managing local installations, your team needs to frequently interact with these services using the gcloud CL tool from various locations.

Given the need for consistent access across devices and workstations, you are exploring a solution to eliminate the hassle of managing the gcloud CLI manually.

Which solution is best suited to meet this need?

You work for a healthcare provider that stores patient medical records in Cloud Storage. According to regulatory compliance requirements, these records must remain unchanged and protected from deletion for the next 4 years. Any updates or modifications to the records must be uploaded as new files, with the original records retained and protected.

How can you guarantee these documents remain protected from deletion or modification for the required retention period?

A company has a large dataset of 100 TB stored on-premises and needs to transfer it to Google Cloud Storage. The company is concerned about bandwidth limitations and network costs, as the data transfer would take an excessive amount of time if done over the internet. They are looking for a Google-recommended solution that is both efficient and secure for moving large amounts of data into the cloud.

Which solution should be used to transfer the data to Google Cloud Storage?

A company has a large set of financial data in CSV format stored in Cloud Storage and utilizes Cloud ML Engine for advanced data processing and analysis. The goal is to securely allow specific external partners (who do not have Google Accounts) to download certain sensitive CSV files for analysis. These partners should only be able to access the files for the next 48 hours, after which access should be automatically revoked.

Which solution will meet this requirement?

You are developing a Cloud-based application using Google Cloud’s App Engine and Cloud Datastore. The application requires retrieving several entities that are identified by their unique keys. These entities are stored as root entities, and you have already obtained their keys. Your goal is to fetch these entities with minimal overhead, ensuring the most efficient use of Datastore’s resources.

Which solution will meet this requirement?

Your organization is building a mobile application designed to allow users across multiple regions to upload and share photos with their chosen contacts. The app is expected to handle a high number of concurrent users simultaneously. Additionally, the organization considers using a managed Kubernetes environment for container orchestration and microservices.

You aim to enable developers to focus solely on writing application code without the need to manage the underlying infrastructure, scaling, or deployment environment.

Which service would be most suitable for deploying the application in this scenario?

You’re working on a large healthcare provider that collects, processes, and stores patient records, sensor data, and system logs. The company must securely archive 1 PB of sensitive log data in the cloud for regulatory compliance, ensuring that the data is retained for long-term disaster recovery backup. Additionally, the logs should be easily accessible for audit purposes and data analysis to identify trends in patient care and system performance. The company is also considering a solution offering secure and fast access to these archived logs for future medical research.

What are the best steps to take? (Select TWO.)

You are testing a microservice deployed on Google Kubernetes Engine (GKE) with Istio enabled.

To assess how upstream services respond to faulty behavior, you want to simulate errors in the microservice. The environment is integrated with Cloud Monitoring.

Which approach meets the requirement?

A large financial services firm is undergoing a cloud transformation initiative and plans to roll out multiple workloads on Google Cloud Platform (GCP), including BigQuery and App Engine applications.

The firm has a strict identity and compliance posture and wants to enforce centralized access policies using its on-premises Active Directory domain controller.

Which solution should be implemented?

A financial analytics firm stores sensitive transaction records from clients in multiple regions.

Due to varying local compliance laws, some records must be retained for 2 years, while others must be kept for 5 years, depending on the region of origin.

The firm’s data governance policy requires that all data be deleted as soon as it is no longer legally required.

Which solution meets these requirements with minimal operational overhead?

You are building a distributed real-time event streaming system for an application that collects telemetry data from various devices across multiple regions. Device data is first collected by edge services and pushed into Cloud IoT Core. The backend system requires that events be processed in the correct order (FIFO), with no data duplication. It must also guarantee the exactly-once delivery of each event.

Which solution will meet the given requirements?

You are tasked with deploying a stateful application on Google Cloud. The application must scale horizontally, with each instance needing to access and modify data from a shared POSIX-compliant filesystem.

The application will experience heavy load, requiring up to 500 MB/s of write throughput. Additionally, you are considering a new service called Cloud Bigtable for its potential storage benefits.

Which of the following solutions should you implement to meet the requirements of this stateful workload?

You’re working at a media analytics company that uses Google Kubernetes Engine (GKE) to deploy a wide range of applications. A single GKE cluster has been provisioned with one node pool of 150 standard VMs, supporting stateless services, stateful applications, and batch workloads.

The company has launched a cost optimization initiative to reduce resource overprovisioning and improve efficiency while maintaining the current cluster architecture, workload availability, and reliability. The infrastructure team has limited engineering capacity and wants to avoid introducing architectural changes, such as creating new node pools or migrating workloads to other platforms.

Which action should you implement to reduce costs within the existing setup without compromising workload availability?

You oversee the optimization and transition of your company’s test infrastructure to the cloud. The company runs its custom C++ test suite on Linux virtual machines hosted on several on-premises servers. Each day, the test suite executes various tests, and it takes several hours to complete because of the constraints on the on-premise resources. These tests are critical for daily development cycles, and your team needs to move the testing infrastructure to the cloud to improve speed and scalability while minimizing the need for significant modifications to the existing tests.

Which cloud solution should you recommend to optimize your testing environment?

You are responsible for managing the cloud infrastructure supporting your company’s ticketing system, which is built on App Engine Standard. The application interacts with a database located in the company’s on-premises environment. The App Engine application is already connected to the company’s Virtual Private Cloud (VPC), which is linked to the on-premises environment via a Cloud VPN tunnel.

The task is to ensure the App Engine application can securely and privately access the on-premises database while minimizing infrastructure changes. You must choose the most suitable Google Cloud service to enable this secure communication.

Which cloud solution should you choose?

A company operates a high-performance application on multiple VM instances hosted on Google Cloud. The application requires frequent communication with a critical on-premises database that handles large amounts of data. The on-premises database must be accessed using internal IPs for security and performance reasons. The communication must support high throughput to handle large data transfers and minimize latency to ensure the application performs optimally.

Which solution should be implemented?

You are responsible for managing a fleet of virtual machines (VMs) running in Google Cloud Compute Engine. Your primary goal is to ensure quick incident detection and resolution to minimize downtime. You need to implement a monitoring solution that enables rapid triage of system performance issues and provides notifications when critical events occur.

Which solution will best meet this requirement?

A healthcare provider is storing patient medical records in a Google Cloud Storage service. These records must remain intact and unaltered for a period of 7 years due to regulatory requirements. The healthcare provider wants to ensure that no records are deleted or modified during this period. The solution must prevent accidental or malicious deletion of files, and it should be impossible to modify or remove the retention policy once it is applied.

What is the best solution to meet this requirement?

You are responsible for migrating the Hadoop jobs of your organization’s Analytics team to Google Cloud

The goal is to minimize costs and management overhead while maintaining the flexibility to handle large-scale data processing. You prefer not to make any changes to the current infrastructure setup. Additionally, you are exploring using Google Cloud Storage Nearline to store temporary data.

Which approach would be most effective in meeting these goals?

You manage a cloud application that interacts with Cloud Storage via HTTP requests.

The application encounters errors with 5xx and 408 HTTP status codes. As part of a recent update, the application now uses a service called Google Cloud AutoML to process incoming data before storing it in Cloud Storage.

What should you implement to handle these error responses effectively?

You are responsible for designing a global load balancing solution to route traffic based on URL paths, ensuring high availability and encryption in transit across regions based on Google-recommended practices. You also consider using Google Cloud Armor to protect the system from threats.

Which solution should you implement?

Your company’s web application is hosted on Google Cloud using Compute Engine instances. Recently, during periods of high user activity, the application has been experiencing significant delays, and some users’ requests are not being processed. Upon investigation, you find that one of the primary application processes is utilizing 100% of the available CPU, leading to the system’s inability to process further requests. The autoscaling feature of your Compute Engine deployment is already active, but it has reached its maximum instance count, and no further scaling is occurring. The database and other backend services are not affected by this issue.

To ensure that users can access the application again promptly, which solution should be implemented?

A growing e-commerce platform is preparing to launch a new web service that will handle a significant number of requests during peak shopping periods. The service must capture large amounts of transactional data and allow it to be queried in real-time based on a specific set of attributes, such as product ID, user ID, and transaction time. Given that the platform may experience periods with no activity, the infrastructure must be flexible enough to scale down to save costs during downtime.

Which combination of Google Cloud services would be most appropriate to meet the requirements? (Select TWO.)

A company intends to migrate a 300-terabyte dataset from its on-premises infrastructure to Google Cloud Storage. However, their network bandwidth to Google Cloud is limited to 100 Mbps, posing a challenge for timely data transfer. The migration must be completed quickly, with minimal disruption to on-premises operations, while optimizing costs.

What is the most efficient and cost-effective method for performing this data migration?

A logistics company is developing a real-time vehicle tracking system to optimize fleet management. The system collects data from 10,000 GPS sensors installed in delivery trucks, each transmitting 5 readings per minute. Each data point includes a timestamp along with sensor readings, such as GPS coordinates, speed, and vehicle status. To enhance data storage and enable analysis, the company is also exploring the use of Google Cloud Dataflow for real-time processing and transformation of incoming data.

Where should the company store the data to ensure high performance and efficient processing?

A streaming platform relies on a microservices-based application to process user requests, like retrieving video metadata and playback details. At times, a few API requests experience significant delays. These requests may traverse through several microservices, such as user authentication, content fetching, and recommendation systems.

The platform uses Google Cloud Pub/Sub to distribute messages across services. However, the team needs to determine which service is responsible for the slowdown during these delayed requests.

What should the team do to identify the slowest service?

An international organization focused on environmental monitoring relies on Google Cloud to collect and process information from a wide network of IoT-enabled weather stations. These devices are globally distributed, operating across various climates and regions, and continuously send environmental readings like temperature, humidity, and air pressure.

Sensor readings are ingested through Pub/Sub and streamed in real-time into a Cloud Bigtable cluster using a Dataflow pipeline. To oversee system performance and reliability, the organization uses Cloud Monitoring. Recently, the operations team observed a hotspot forming within the Bigtable cluster, causing queries to experience increased latency. This slowdown is hindering the timely delivery of weather analysis.

What actions should be taken to prevent further delays?

A logistics company named TD Express is rapidly expanding its delivery network across Southeast Asia. To stay competitive, the company values being responsive and staying aligned with evolving customer expectations. Their primary business objectives emphasize rapid update deployments and operational flexibility, allowing them to roll out new features and improvements to their management application quickly. They use Google Cloud Build to automate their CI/CD pipeline, ensuring fast and reliable software releases.

However, frequent software deployments increase the risk of security errors inadvertently entering the codebase. The development team has been tasked with adopting practices to minimize this risk while maintaining the desired speed and adaptability.

Which two actions should the team take to achieve this objective? (Select TWO.)

A financial services company operates a real-time transaction processing application on Google Cloud. The application collects transaction data from thousands of point-of-sale (POS) terminals located in different branches and processes the data using Google Cloud Dataflow. The system performs well in both staging and testing environments. However, once it is deployed to production, the operations team begins to notice serious performance bugs not seen earlier.

What approach should be taken to prevent similar issues in future deployments?

A financial services company is implementing a cloud-based monitoring solution to track application performance log and metrics. The company plans to use Google Cloud Logging to manage and archive log data efficiently. Due to regulatory requirements, the company must retain metrics generated by every application for a duration of five years to ensure compliance in the event of potential legal actions.

What method should the company implement?

You manage a Google Cloud project named prj-research that hosts virtual machines within a Virtual Private Cloud named vpc-research to process and analyze scientific data. Your organization’s data science team operates a separate Google Cloud project named prj-analysis within another organization, utilizing a different Virtual Private Cloud named vpc-analysis to perform machine learning and data visualization tasks. Each VPC contains multiple instances handling large volumes of data. Subnets in both VPCs are non-overlapping.

The organization recently started using Google Cloud Monitoring to track the performance of these instances and ensure optimal data processing. You need to ensure that instances from both projects can communicate using internal IPs, minimizing latency and maximizing throughput. Additionally, the communication should support high availability and redundancy for continuous data analysis..

Which solution should be implemented?

You manage a critical e-commerce application running as a Deployment within a Google Kubernetes Engine (GKE) cluster. To keep the service up-to-date, your team frequently performs rolling deployments to release new features and updates. Recently, during these deployments, the application experienced outages caused by incorrect environment variable configurations, specifically for the production environment. These misconfigurations led to service disruptions, impacting customer transactions.

Your team recently started using Google Cloud Operations Suite to track application performance and log errors to improve monitoring and observability. However, you still need to implement preventive measures to ensure that new application versions are thoroughly checked before receiving production traffic, minimizing the risk of future outages.

Which solution will best address this requirement?

You are in charge of managing the infrastructure for an online learning platform hosted on Google Cloud. Recently, your security team reported that a new network has been created within your GCP project, and a Google Compute Engine (GCE) instance within this network has its SSH port publicly open. This configuration poses a potential security risk, as it may expose the instance to unauthorized access.

Your team recently started using Google Cloud Asset Inventory to track resources and their configurations. You need to trace the network’s origin to determine how the instance was created and who performed the action.

How can you accurately determine the origin of this network?