Get Instant Access of 100% REAL Professional-Cloud-Architect DUMP Pass Your Exam Easily
Professional-Cloud-Architect Free Exam Questions with Quality Guaranteed
NEW QUESTION # 137
Dress4win has end to end tests covering 100% of their endpoints.
They want to ensure that the move of cloud does not introduce any new bugs.
Which additional testing methods should the developers employ to prevent an outage?
- A. They should add additional unit tests and production scale load tests on their cloud staging environment.
- B. They should enable google stack driver debugger on the application code to show errors in the code
- C. They should add canary tests so developers can measure how much of an impact the new release causes to latency
- D. They should run the end to end tests in the cloud staging environment to determine if the code is working as intended.
Answer: B
NEW QUESTION # 138
You have an outage in your Compute Engine managed instance group: all instance keep restarting after 5 seconds. You have a health check configured, but autoscaling is disabled. Your colleague, who is a Linux expert, offered to look into the issue. You need to make sure that he can access the VMs. What should you do?
- A. Grant your colleague the IAM role of project Viewer
- B. Disable autoscaling for the instance group. Add his SSH key to the project-wide SSH Keys
- C. Disable the health check for the instance group. Add his SSH key to the project-wide SSH keys
- D. Perform a rolling restart on the instance group
Answer: C
Explanation:
Explanation
https://cloud.google.com/compute/docs/instance-groups/autohealing-instances-in-migs Health checks used for autohealing should be conservative so they don't preemptively delete and recreate your instances. When an autohealer health check is too aggressive, the autohealer might mistake busy instances for failed instances and unnecessarily restart them, reducing availability
NEW QUESTION # 139
You have an application that runs in Google Kubernetes Engine (GKE). Over the last 2 weeks, customers have reported that a specific part of the application returns errors very frequently. You currently have no logging or monitoring solution enabled on your GKE cluster. You want to diagnose the problem, but you have not been able to replicate the issue. You want to cause minimal disruption to the application. What should you do?
- A. 1. Create a new GKE cluster with Cloud Operations for GKE enabled.
2. Migrate the affected Pods to the new cluster, and redirect traffic for those Pods to the new cluster.
3. Use the GKE Monitoring dashboard to investigate logs from affected Pods. - B. 1. Update your GKE cluster to use Cloud Operations for GKE.
2. Use the GKE Monitoring dashboard to investigate logs from affected Pods. - C. 1. Create a new GKE cluster with Cloud Operations for GKE enabled, and deploy Prometheus.
2. Migrate the affected Pods to the new cluster, and redirect traffic for those Pods to the new cluster.
3. Set an alert to trigger whenever the application returns an error. - D. 1. Update your GKE cluster to use Cloud Operations for GKE, and deploy Prometheus.
2. Set an alert to trigger whenever the application returns an error.
Answer: B
NEW QUESTION # 140
Case Study: 5 - Dress4win
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model. The application has grown from a few servers in the founder's garage to several hundred servers and appliances in a collocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster.
Dress4Win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is moving their development and test environments. They are also building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location. All servers run Ubuntu LTS v16.04.
Databases:
MySQL. 1 server for user data, inventory, static data:
- MySQL 5.8
- 8 core CPUs
- 128 GB of RAM
- 2x 5 TB HDD (RAID 1)
Redis 3 server cluster for metadata, social graph, caching. Each server is:
- Redis 3.2
- 4 core CPUs
- 32GB of RAM
Compute:
40 Web Application servers providing micro-services based APIs and static content.
- Tomcat - Java
- Nginx
- 4 core CPUs
- 32 GB of RAM
20 Apache Hadoop/Spark servers:
- Data analysis
- Real-time trending calculations
- 8 core CPUS
- 128 GB of RAM
- 4x 5 TB HDD (RAID 1)
3 RabbitMQ servers for messaging, social notifications, and events:
- 8 core CPUs
- 32GB of RAM
Miscellaneous servers:
- Jenkins, monitoring, bastion hosts, security scanners
- 8 core CPUs
- 32GB of RAM
Storage appliances:
iSCSI for VM hosts
Fiber channel SAN - MySQL databases
- 1 PB total storage; 400 TB available
NAS - image storage, logs, backups
- 100 TB total storage; 35 TB available
Business Requirements
Build a reliable and reproducible environment with scaled parity of production.
Improve security by defining and adhering to a set of security and Identity and Access
Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
Analyze and optimize architecture for performance in the cloud.
Technical Requirements
Easily create non-production environment in the cloud.
Implement an automation framework for provisioning resources in cloud.
Implement a continuous deployment process for deploying applications to the on-premises
datacenter or cloud.
Support failover of the production environment to cloud during an emergency.
Encrypt data on the wire and at rest.
Support multiple private connections between the production data center and cloud
environment.
Executive Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a competitor could use a public cloud platform to offset their up-front investment and free them to focus on developing better features. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years for a public cloud strategy achieves a cost reduction between 30% and 50% over our current model.
For this question, refer to the Dress4Win case study. You want to ensure that your on-premises architecture meets business requirements before you migrate your solution.
What change in the on-premises architecture should you make?
- A. Downgrade MySQL to v5.7, which is supported by Cloud SQL for MySQL.
- B. Containerize the micro services and host them in Google Kubernetes Engine.
- C. Replace RabbitMQ with Google Pub/Sub.
- D. Resize compute resources to match predefined Compute Engine machine types.
Answer: A
NEW QUESTION # 141
An application development team believes their current logging tool will not meet their needs for their new cloud-based product. They want a bettor tool to capture errors and help them analyze their historical log data. You want to help them find a solution that meets their needs, what should you do?
- A. Help them upgrade their current tool to take advantage of any new features.
- B. Help them define their requirements and assess viable logging tools.
- C. Direct them to download and install the Google StackDriver logging agent.
- D. Send them a list of online resources about logging best practices.
Answer: C
NEW QUESTION # 142
You need to develop procedures to test a disaster plan for a mission-critical application. You want to use Google-recommended practices and native capabilities within GCP.
What should you do?
- A. Use Deployment Manager to automate service provisioning. Use Activity Logs to monitor and debug your tests.
- B. Use gcloud scripts to automate service provisioning. Use Stackdriver to monitor and debug your tests.
- C. Use Deployment Manager to automate provisioning. Use Stackdriver to monitor and debug your tests.
- D. Use gcloud scripts to automate service provisioning. Use Activity Logs monitor and debug your tests.
Answer: A
NEW QUESTION # 143
A news feed web service has the following code running on Google App Engine. During peak load, users report that they can see news articles they already viewed.
What is the most likely cause of this problem?
- A. The URL of the API needs to be modified to prevent caching
- B. The HTTP Expires header needs to be set to -1 stop caching
- C. The session variable is local to just a single instance
- D. The session variable is being overwritten in Cloud Datastore
Answer: D
Explanation:
Explanation/Reference: https://stackoverflow.com/questions/3164280/google-app-engine-cache-list-in-session-variable?
rq=1
NEW QUESTION # 144
You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address. You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly. What should you do?
- A. Assign a public IP to each instance and configure a firewall rule to allow the load balancer to reach the instance public IP.
- B. Create a tag on each instance with the name of the load balancer. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.
- C. Ensure that a firewall rule exists to allow source traffic on HTTP/HTTPS to reach the load balancer.
- D. Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.
Answer: D
Explanation:
https://cloud.google.com/vpc/docs/using-firewalls
The best practice when configuration a health check is to check health and serve traffic on the same port. However, it is possible to perform health checks on one port, but serve traffic on another. If you do use two different ports, ensure that firewall rules and services running on instances are configured appropriately. If you run health checks and serve traffic on the same port, but decide to switch ports at some point, be sure to update both the backend service and the health check.
Backend services that do not have a valid global forwarding rule referencing it will not be health checked and will have no health status.
References: https://cloud.google.com/compute/docs/load-balancing/http/backend-service
NEW QUESTION # 145
Case Study: 3 - JencoMart Case Study
Company Overview
JencoMart is a global retailer with over 10,000 stores in 16 countries. The stores carry a range of goods, such as groceries, tires, and jewelry. One of the company's core values is excellent customer service. In addition, they recently introduced an environmental policy to reduce their carbon output by 50% over the next 5 years.
Company Background
JencoMart started as a general store in 1931, and has grown into one of the world's leading brands known for great value and customer service. Over time, the company transitioned from only physical stores to a stores and online hybrid model, with 25% of sales online. Currently, JencoMart has little presence in Asia, but considers that market key for future growth.
Solution Concept
JencoMart wants to migrate several critical applications to the cloud but has not completed a technical review to determine their suitability for the cloud and the engineering required for migration. They currently host all of these applications on infrastructure that is at its end of life and is no longer supported.
Existing Technical Environment
JencoMart hosts all of its applications in 4 data centers: 3 in North American and 1 in Europe, most applications are dual-homed.
JencoMart understands the dependencies and resource usage metrics of their on-premises architecture.
Application Customer loyalty portal
LAMP (Linux, Apache, MySQL and PHP) application served from the two JencoMart-owned U.S.
data centers.
Database
* Oracle Database stores user profiles
* PostgreSQL database stores user credentials
-homed in US West
Authenticates all users
Compute
* 30 machines in US West Coast, each machine has:
* 20 machines in US East Coast, each machine has:
-core CPU
Storage
* Access to shared 100 TB SAN in each location
* Tape backup every week
Business Requirements
* Optimize for capacity during peak periods and value during off-peak periods
* Guarantee service availably and support
* Reduce on-premises footprint and associated financial and environmental impact.
* Move to outsourcing model to avoid large upfront costs associated with infrastructure purchase
* Expand services into Asia.
Technical Requirements
* Assess key application for cloud suitability.
* Modify application for the cloud.
* Move applications to a new infrastructure.
* Leverage managed services wherever feasible
* Sunset 20% of capacity in existing data centers
* Decrease latency in Asia
CEO Statement
JencoMart will continue to develop personal relationships with our customers as more people access the web. The future of our retail business is in the global market and the connection between online and in-store experiences. As a large global company, we also have a responsibility to the environment through 'green' initiatives and polices.
CTO Statement
The challenges of operating data centers prevents focus on key technologies critical to our long- term success. Migrating our data services to a public cloud infrastructure will allow us to focus on big data and machine learning to improve our service customers.
CFO Statement
Since its founding JencoMart has invested heavily in our data services infrastructure. However, because of changing market trends, we need to outsource our infrastructure to ensure our long- term success. This model will allow us to respond to increasing customer demand during peak and reduce costs.
For this question, refer to the JencoMart case study.
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources. What Google domain and project structure should you recommend?
- A. Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.
- B. Create a single G Suite account to manage users with each stage of each application in its own project.
- C. Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.
- D. Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.
Answer: C
Explanation:
Note: The principle of least privilege and separation of duties are concepts that, although semantically different, are intrinsically related from the standpoint of security. The intent behind both is to prevent people from having higher privilege levels than they actually need Principle of Least Privilege: Users should only have the least amount of privileges required to
* perform their job and no more. This reduces authorization exploitation by limiting access to resources such as targets, jobs, or monitoring templates for which they are not authorized.
Separation of Duties: Beyond limiting user privilege level, you also limit user duties, or the
* specific jobs they can perform. No user should be given responsibility for more than one related function. This limits the ability of a user to perform a malicious action and then cover up that action.
References: https://cloud.google.com/kms/docs/separation-of-duties
NEW QUESTION # 146
The operations manager asks you for a list of recommended practices that she should consider when migrating a J2EE application to the cloud. Which three practices should you recommend? Choose 3 answers
- A. Select an automation framework to reliably provision the cloud infrastructure.
- B. Instrument the application with a monitoring tool like Stackdriver Debugger.
- C. Deploy a continuous integration tool with automated testing in a staging environment.
- D. Port the application code to run on Google App Engine.
- E. Migrate from MySQL to a managed NoSQL database like Google Cloud Datastore or Bigtable.
- F. Integrate Cloud Dataflow into the application to capture real-time metrics.
Answer: C,D,E
Explanation:
References:
https://cloud.google.com/appengine/docs/standard/java/tools/uploadinganapp
https://cloud.google.com/appengine/docs/standard/java/building-app/cloud-sql
NEW QUESTION # 147
Your company's user-feedback portal comprises a standard LAMP stack replicated across two zones. It is deployed in the us-central1 region and uses autoscaled managed instance groups on all layers, except the database. Currently, only a small group of select customers have access to the portal. The portal meets a 99.99% availability SLA under these conditions However next quarter, your company will be making the portal available to all users, including unauthenticated users. You need to develop a resiliency testing strategy to ensure the system maintains the SLA once they introduce additional user load. What should you do?
- A. Expose the new system to a larger group of users, and increase group ' size each day until autoscale logic is tnggered on all layers. At the same time, terminate random resources on both zones.
- B. Capture existing users input, and replay captured user load until autoscale is triggered on all layers. At the same time, terminate all resources in one of the zones.
- C. Capture existing users input, and replay captured user load until resource utilization crosses 80%.
Also, derive estimated number of users based on existing users usage of the app, and deploy enough resources to handle 200% of expected load. - D. Create synthetic random user input, replay synthetic load until autoscale logic is triggered on at least one layer, and introduce "chaos" to the system by terminating random resources on both zones.
Answer: C
NEW QUESTION # 148
Your company sends all Google Cloud logs to Cloud Logging. Your security team wants to monitor the logs. You want to ensure that the security team can react quickly if an anomaly such as an unwanted firewall change or server breach is detected. You want to follow Google-recommended practices. What should you do?
- A. Schedule a cron job with Cloud Scheduler. The scheduled job queries the logs every minute for the relevant events.
- B. Export logs to BigQuery, and trigger a query in BigQuery to process the log data for the relevant events.
- C. Export logs to a Pub/Sub topic, and trigger Cloud Function with the relevant log events.
- D. Export logs to a Cloud Storage bucket, and trigger Cloud Run with the relevant log events.
Answer: C
Explanation:
https://cloud.google.com/blog/products/management-tools/automate-your-response-to-a-cloud-logging-event
NEW QUESTION # 149
You have found an error in your App Engine application caused by missing Cloud Datastore indexes. You have created a YAML file with the required indexes and want to deploy these new indexes to Cloud Datastore. What should you do?
- A. Create an HTTP request to the built-in python module to send the index configuration file to your application
- B. In the GCP Console, use Datastore Admin to delete the current indexes and upload the new configuration file
- C. Upload the configuration file the App Engine's default Cloud Storage bucket, and have App Engine detect the new indexes
- D. Point gcloud datastore create-indexes to your configuration file
Answer: D
NEW QUESTION # 150
For this question, refer to the TerramEarth case study.
TerramEarth has equipped unconnected trucks with servers and sensors to collet telemetry data. Next year they want to use the data to train machine learning models. They want to store this data in the cloud while reducing costs. What should they do?
- A. Push the telemetry data in real-time to a streaming dataflow job that compresses the data, and store it in Cloud Bigtable.
- B. Push the telemetry data in Real-time to a streaming dataflow job that compresses the data, and store it in Google BigQuery.
- C. Have the vehicle's computer compress the data in hourly snapshots, a Store it in a GCS Coldline bucket.
- D. Have the vehicle' computer compress the data in hourly snapshots, and store it in a Google Cloud storage (GCS) Nearline bucket.
Answer: C
NEW QUESTION # 151
You need to deploy an application on Google Cloud that must run on a Debian Linux environment. The application requires extensive configuration in order to operate correctly. You want to ensure that you can install Debian distribution updates with minimal manual intervention whenever they become available. What should you do?
- A. Create an instance with the latest available Debian image. Connect to the instance via SSH, and install and configure the application on the instance. Repeat this process whenever a new Google-managed Debian image becomes available.
- B. Create a Debian-based Compute Engine instance, install and configure the application, and use OS patch management to install available updates.
- C. Create a Compute Engine instance template using the most recent Debian image. Create an instance from this template, and install and configure the application as part of the startup script. Repeat this process whenever a new Google-managed Debian image becomes available.
- D. Create a Docker container with Debian as the base image. Install and configure the application as part of the Docker image creation process. Host the container on Google Kubernetes Engine and restart the container whenever a new update is available.
Answer: B
Explanation:
Reference: https://cloud.google.com/compute/docs/os-patch-management
NEW QUESTION # 152
The application reliability team at your company has added a debug feature to their backend service to send all server events to Google Cloud Storage for eventual analysis. The event records are at least 50 KB and at most 15 MB and are expected to peak at 3,000 events per second. You want to minimize data loss.
Which process should you implement?
- A. Batch every 10,000 events with a single manifest file for metadata.
Compress event files and manifest file into a single archive file.
Name files using serverName-EventSequence.
Create a new bucket if bucket is older than 1 day and save the single archive file to the new bucket. Otherwise, save the single archive file to existing bucket. - B. Compress individual files.
Name files with serverName-EventSequence.
Save files to one bucket
Set custom metadata headers for each object after saving. - C. Append metadata to file body.
Compress individual files.
Name files with a random prefix pattern.
Save files to one bucket - D. Append metadata to file body.
Compress individual files.
Name files with serverName-Timestamp.
Create a new bucket if bucket is older than 1 hour and save individual files to the new bucket.
Otherwise, save files to existing bucket
Answer: D
NEW QUESTION # 153
......
Exam Target Audience
The specialists with this sought-after Google Professional Cloud Architect certificate have an in-depth understanding of Cloud architecture & Google Cloud Platform that enables them to create, develop, and operate highly available, secure, robust, scalable, and highly dynamic solutions in compliance with the business objectives of the organizations. With some relevant experience in the industry as well as familiarity with the products within the Google Cloud sphere, it is easier to comprehend the required test domains.
Professional-Cloud-Architect Free Exam Files Downloaded Instantly: https://www.actual4dump.com/Google/Professional-Cloud-Architect-actualtests-dumps.html
Practice Exams and Training Solutions for Certifications: https://drive.google.com/open?id=1re8vVU_3D1q52ZsQGmoOqMSIa7k59CH_