Top Tips Of Up To The Minute Professional-Cloud-Architect Simulations

NEW QUESTION 1

You want to enable your running Google Kubernetes Engine cluster to scale as demand for your application changes.
What should you do?

• A. Add additional nodes to your Kubernetes Engine cluster using the following command:gcloud container clusters resizeCLUSTER_Name – -size 10
• B. Add a tag to the instances in the cluster with the following command:gcloud compute instances add-tagsINSTANCE - -tags enable-autoscaling max-nodes-10
• C. Update the existing Kubernetes Engine cluster with the following command:gcloud alpha container clustersupdate mycluster - -enable-autoscaling - -min-nodes=1 - -max-nodes=10
• D. Create a new Kubernetes Engine cluster with the following command:gcloud alpha container clusterscreate mycluster - -enable-autoscaling - -min-nodes=1 - -max-nodes=10and redeploy your application

Answer: C

Explanation:
https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-autoscaler To enable autoscaling for an existing node pool, run the following command:
gcloud container clusters update [CLUSTER_NAME] --enable-autoscaling \--min-nodes 1 --max-nodes 10
--zone [COMPUTE_ZONE] --node-pool default-pool

NEW QUESTION 2

You have an application that will run on Compute Engine. You need to design an architecture that takes into account a disaster recovery plan that requires your application to fail over to another region in case of a regional outage. What should you do?

• A. Deploy the application on two Compute Engine instances in the same project but in a different region.Use the first instance to serve traffic, and use the HTTP load balancing service to fail over to the standby instance in case of a disaster.
• B. Deploy the application on a Compute Engine instanc
• C. Use the instance to serve traffic, and use the HTTP load balancing service to fail over to an instance on your premises in case of a disaster.
• D. Deploy the application on two Compute Engine instance groups, each in the same project but in a different regio
• E. Use the first instance group to serve traffic, and use the HTTP load balancing service to fail over to the standby instance group in case of a disaster.
• F. Deploy the application on two Compute Engine instance groups, each in separate project and a different regio
• G. Use the first instance group to server traffic, and use the HTTP load balancing service to fail over to the standby instance in case of a disaster.

Answer: C

NEW QUESTION 3

You have an App Engine application that needs to be updated. You want to test the update with production traffic before replacing the current application version.
What should you do?

• A. Deploy the update using the Instance Group Updater to create a partial rollout, which allows for canary testing.
• B. Deploy the update as a new version in the App Engine application, and split traffic between the new and current versions.
• C. Deploy the update in a new VPC, and use Google’s global HTTP load balancing to split traffic between the update and current applications.
• D. Deploy the update as a new App Engine application, and use Google’s global HTTP load balancing to split traffic between the new and current applications.

Answer: B

Explanation:
https://cloud.google.com/appengine/docs/standard/python/splitting-traffic

NEW QUESTION 4

Your organization wants to control IAM policies for different departments independently, but centrally. Which approach should you take?

• A. Multiple Organizations with multiple Folders
• B. Multiple Organizations, one for each department
• C. A single Organization with Folder for each department
• D. A single Organization with multiple projects, each with a central owner

Answer: C

Explanation:
Folders are nodes in the Cloud Platform Resource Hierarchy. A folder can contain projects, other folders, or a combination of both. You can use folders to group projects under an organization in a hierarchy. For example, your organization might contain multiple departments, each with its own set of GCP resources. Folders allow you to group these resources on a per-department basis. Folders are used to group resources that share common IAM policies. While a folder can contain multiple folders or resources, a given folder or resource can have exactly one parent.
References: https://cloud.google.com/resource-manager/docs/creating-managing-folders

NEW QUESTION 5

Your agricultural division is experimenting with fully autonomous vehicles.
You want your architecture to promote strong security during vehicle operation. Which two architecture should you consider?
Choose 2 answers:

• A. Treat every micro service call between modules on the vehicle as untrusted.
• B. Require IPv6 for connectivity to ensure a secure address space.
• C. Use a trusted platform module (TPM) and verify firmware and binaries on boot.
• D. Use a functional programming language to isolate code execution cycles.
• E. Use multiple connectivity subsystems for redundancy.
• F. Enclose the vehicle's drive electronics in a Faraday cage to isolate chips.

Answer: AC

NEW QUESTION 6

Your company is running a stateless application on a Compute Engine instance. The application is used heavily during regular business hours and lightly outside of business hours. Users are reporting that the application is slow during peak hours. You need to optimize the application’s performance. What should you do?

• A. Create a snapshot of the existing dis
• B. Create an instance template from the snapsho
• C. Create an autoscaled managed instance group from the instance template.
• D. Create a snapshot of the existing dis
• E. Create a custom image from the snapsho
• F. Create an autoscaled managed instance group from the custom image.
• G. Create a custom image from the existing dis
• H. Create an instance template from the custom image.Create an autoscaled managed instance group from the instance template.
• I. Create an instance template from the existing dis
• J. Create a custom image from the instance template.Create an autoscaled managed instance group from the custom image.

Answer: B

Explanation:
https://cloud.google.com/compute/docs/instance-templates/create-instance-templates

NEW QUESTION 7

During a high traffic portion of the day, one of your relational databases crashes, but the replica is never promoted to a master. You want to avoid this in the future. What should you do?

• A. Use a different database.
• B. Choose larger instances for your database.
• C. Create snapshots of your database more regularly.
• D. Implement routinely scheduled failovers of your databases.

Answer: D

Explanation:
https://cloud.google.com/solutions/dr-scenarios-planning-guide

NEW QUESTION 8

Your company is building a new architecture to support its data-centric business focus. You are responsible for setting up the network. Your company’s mobile and web-facing applications will be deployed on-premises, and all data analysis will be conducted in GCP. The plan is to process and load 7 years of archived .csv files totaling 900 TB of data and then continue loading 10 TB of data daily. You currently have an existing 100-MB internet connection.
What actions will meet your company’s needs?

• A. Compress and upload both achieved files and files uploaded daily using the qsutil –m option.
• B. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storag
• C. Establish a connection with Google using a Dedicated Interconnect or Direct Peering connection and use it to upload files daily.
• D. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transferarchived data to Cloud Storag
• E. Establish one Cloud VPN Tunnel to VPC networks over the public internet, and compares and upload files daily using the gsutil –m option.
• F. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storag
• G. Establish a Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily.

Answer: B

Explanation:
https://cloud.google.com/interconnect/docs/how-to/direct-peering

NEW QUESTION 9

You deploy your custom java application to google app engine. It fails to deploy and gives you the following stack trace:

• A. Recompile the CLoakedServlet class using and MD5 hash instead of SHA1
• B. Digitally sign all of your JAR files and redeploy your application.
• C. Upload missing JAR files and redeploy your application

Answer: B

NEW QUESTION 10

You are using Cloud Shell and need to install a custom utility for use in a few weeks. Where can you store the file so it is in the default execution path and persists across sessions?

• A. ~/bin
• B. Cloud Storage
• C. /google/scripts
• D. /usr/local/bin

Answer: D

Explanation:
https://medium.com/google-cloud/no-localhost-no-problem-using-google-cloud-shell-as-my-full-time-developm

NEW QUESTION 11

You have an application deployed on Kubernetes Engine using a Deployment named echo-deployment. The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application. What should you do?

• A. Use kubect1 set image deployment/echo-deployment <new-image>
• B. Use the rolling update functionality of the Instance Group behind the Kubernetes cluster
• C. Update the deployment yaml file with the new container imag
• D. Use kubect1 delete deployment/ echo-deployment and kubect1 create –f <yaml-file>
• E. Update the service yaml file which the new container imag
• F. Use kubect1 delete service/echoservice and kubect1 create –f <yaml-file>

Answer: A

Explanation:
https://cloud.google.com/kubernetes-engine/docs/how-to/updating-apps#updating_an_application

NEW QUESTION 12

You need to develop procedures to test a disaster plan for a mission-critical application. You want to use Google-recommended practices and native capabilities within GCP.
What should you do?

• A. Use Deployment Manager to automate service provisionin
• B. Use Activity Logs to monitor and debug your tests.
• C. Use Deployment Manager to automate provisionin
• D. Use Stackdriver to monitor and debug your tests.
• E. Use gcloud scripts to automate service provisionin
• F. Use Activity Logs monitor and debug your tests.
• G. Use automated scripts to automate service provisionin
• H. Use Activity Logs monitor and debug your tests.

Answer: B

Explanation:
https://cloud.google.com/solutions/dr-scenarios-planning-guide

NEW QUESTION 13

Your company runs several databases on a single MySQL instance. They need to take backups of a specific database at regular intervals. The backup activity needs to complete as quickly as possible and cannot be allowed to impact disk performance. How should you configure the storage?

• A. Configure a cron job to use the gcloud tool to take regular backups using persistent disk snapshots.
• B. Mount a Local SSD volume as the backup locatio
• C. After the backup is complete, use gsutil to move the backup to Google Cloud Storage.
• D. Use gcsfuse to mount a Google Cloud Storage bucket as a volume directly on the instance and write backups to the mounted location using mysqldump
• E. Mount additional persistent disk volumes onto each virtual machine (VM) instance in a RAID10 array and use LVM to create snapshots to send to Cloud Storage.

Answer: B

Explanation:
https://cloud.google.com/compute/docs/instances/sql-server/best-practices

NEW QUESTION 14

You are using Cloud CDN to deliver static HTTP(S) website content hosted on a Compute Engine instance group. You want to improve the cache hit ratio.
What should you do?

• A. Customize the cache keys to omit the protocol from the key.
• B. Shorten the expiration time of the cached objects.
• C. Make sure the HTTP(S) header “Cache-Region” points to the closest region of your users.
• D. Replicate the static content in a Cloud Storage bucke
• E. Point CloudCDN toward a load balancer on that bucket.

Answer: A

Explanation:
Reference https://cloud.google.com/cdn/docs/bestpractices#using_custom_cache_keys_to_improve_cache_hit_ratio

NEW QUESTION 15

Your company acquired a healthcare startup and must retain its customers’ medical information for up to 4 more years, depending on when it was created. Your corporate policy is to securely retain this data, and then delete it as soon as regulations allow.
Which approach should you take?

• A. Store the data in Google Drive and manually delete records as they expire.
• B. Anonymize the data using the Cloud Data Loss Prevention API and store it indefinitely.
• C. Store the data using the Cloud Storage and use lifecycle management to delete files when they expire.
• D. Store the data in Cloud Storage and run a nightly batch script that deletes all expired datA.

Answer: C

Explanation:
https://cloud.google.com/storage/docs/lifecycle

NEW QUESTION 16

You want to enable your running Google Container Engine cluster to scale as demand for your application changes.
What should you do?

• A. Add additional nodes to your Container Engine cluster using the following command: gcloud container clusters resize CLUSTER_NAME --size 10
• B. Add a tag to the instances in the cluster with the following command:gcloud compute instances add-tags INSTANCE --tags enable --autoscaling max-nodes-10
• C. Update the existing Container Engine cluster with the following command:gcloud alpha container clusters update mycluster --enable-autoscaling --min-nodes=1 --max-nodes=10
• D. Create a new Container Engine cluster with the following command:gcloud alpha container clusters create mycluster --enable-autocaling --min-nodes=1 --max-nodes=10 and redeploy your application.

Answer: B

Explanation:
https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-autoscaler Cluster autoscaling
--enable-autoscaling
Enables autoscaling for a node pool.
Enables autoscaling in the node pool specified by --node-pool or the default node pool if --node-pool is not provided.
Where:
--max-nodes=MAX_NODES
Maximum number of nodes in the node pool.
Maximum number of nodes to which the node pool specified by --node-pool (or default node pool if unspecified) can scale.

NEW QUESTION 17

You are deploying a PHP App Engine Standard service with SQL as the backend. You want to minimize the number of queries to the database.
What should you do?

• A. Set the memcache service level to dedicate
• B. Create a key from the hash of the query, and return database values from memcache before issuing a query to Cloud SQL.
• C. Set the memcache service level to dedicate
• D. Create a cron task that runs every minute to populate the cache with keys containing query results.
• E. Set the memcache service level to share
• F. Create a cron task that runs every minute to save all expected queries to a key called “cached-queries”.
• G. Set the memcache service level to share
• H. Create a key called “cached-queries”, and return database values from the key before using a query to Cloud SQL.

Answer: A

Explanation:
https://cloud.google.com/appengine/docs/standard/php/memcache/using

NEW QUESTION 18

You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address. You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly. What should you do?

• A. Ensure that a firewall rule exists to allow source traffic on HTTP/HTTPS to reach the load balancer.
• B. Assign a public IP to each instance and configure a firewall rule to allow the load balancer to reach the instance public IP.
• C. Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.
• D. Create a tag on each instance with the name of the load balance
• E. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.

Answer: C

Explanation:
https://cloud.google.com/vpc/docs/using-firewalls
The best practice when configuration a health check is to check health and serve traffic on the same port. However, it is possible to perform health checks on one port, but serve traffic on another. If you do use two different ports, ensure that firewall rules and services running on instances are configured appropriately. If you run health checks and serve traffic on the same port, but decide to switch ports at some point, be sure to update both the backend service and the health check.
Backend services that do not have a valid global forwarding rule referencing it will not be health checked and will have no health status.
References: https://cloud.google.com/compute/docs/load-balancing/http/backend-service

NEW QUESTION 19

The development team has provided you with a Kubernetes Deployment file. You have no infrastructure yet and need to deploy the application. What should you do?

• A. Use gcloud to create a Kubernetes cluste
• B. Use Deployment Manager to create the deployment.
• C. Use gcloud to create a Kubernetes cluste
• D. Use kubect1 to create the deployment.
• E. Use kubect1 to create a Kubernetes cluste
• F. Use Deployment Manager to create the deployment.
• G. Use kubect1 to create a Kubernetes cluste
• H. Use kubect1 to create the deployment.

Answer: B

Explanation:
https://cloud.google.com/kubernetes-engine/docs/how-to/creating-a-cluster

NEW QUESTION 20
......