Professional-Cloud-Architect試験無料問題集（282題）「Google Certified Professional

出題：1

Your customer support tool logs all email and chat conversations to Cloud Bigtable for retention and analysis.
What is the recommended approach for sanitizing this data of personally identifiable information or payment card information before initial storage?

A. Hash all data using SHA256

B. Use regular expressions to find and redact phone numbers, email addresses, and credit card numbers

C. Encrypt all data using elliptic curve cryptography

D. De-identify the data with the Cloud Data Loss Prevention API

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Your company is using BigQuery as its enterprise data warehouse. Data is distributed over several Google Cloud projects. All queries on BigQuery need to be billed on a single project. You want to make sure that no query costs are incurred on the projects that contain the data. Users should be able to query the datasets, but not edit them.
How should you configure users' access roles?

A. Add all users to a group. Grant the group the roles of BigQuery jobUser on the billing project and BigQuery dataViewer on the projects that contain the data.

B. Add all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery jobUser on the projects that contain the data.

C. Add all users to a group. Grant the group the role of BigQuery user on the billing project and BigQuery dataViewer on the projects that contain the data.

D. Add all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery user on the projects that contain the data.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

You are responsible for the Google Cloud environment in your company Multiple departments need access to their own projects and the members within each department will have the same project responsibilities You want to structure your Google Cloud environment for minimal maintenance and maximum overview of 1AM permissions as each department's projects start and end You want to follow Google-recommended practices What should you do?

A. Create a folder per department and grant the respective members of the department the required 1AM permissions at the folder level. Structure all projects for each department under the respective folders

B. Grant all department members the required 1AM permissions for their respective projects

C. Create a Google Group per department and add all department members to their respective groups Grant each group the required I AM permissions for their respective projects

D. Create a Google Group per department and add all department members to their respective groups Create a folder per department and grant the respective group the required 1AM permissions at the folder level Add the projects under the respective folders

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for securely deploying workloads to Google Cloud. You also need to ensure that only verified containers are deployed using Google Cloud services. What should you do? (Choose two.)

A. Configure Container Registry to use vulnerability scanning to confirm that there are no vulnerabilities before deploying the workload.

B. Enable Binary Authorization on GKE, and sign containers as part of a CI/CD pipeline.

C. Configure Jenkins to utilize Kritis to cryptographically sign a container as part of a CI/CD pipeline.

D. Configure Container Registry to only allow trusted service accounts to create and deploy containers from the registry.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for hybrid connectivity between EHR's on-premises systems and Google Cloud. You want to follow Google's recommended practices for production-level applications. Considering the EHR Healthcare business and technical requirements, what should you do?

A. Configure two Dedicated Interconnect connections in one metro (City) and two connections in another metro, and make sure the Interconnect connections are placed in different metro zones.

B. Configure Direct Peering between EHR Healthcare and Google Cloud, and make sure you are peering at least two Google locations.

C. Configure two VPN connections from on-premises to Google Cloud, and make sure the VPN devices on-premises are in separate racks.

D. Configure two Partner Interconnect connections in one metro (City), and make sure the Interconnect connections are placed in different metro zones.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

You have deployed an application on Anthos clusters (formerly Anthos GKE). According to the SRE practices at your company you need to be alerted if the request latency is above a certain threshold for a specified amount of time. What should you do?

A. Enable the Cloud Trace API on your project and use Cloud Monitoring Alerts to send an alert based on the Cloud Trace metrics

B. Install Anthos Service Mesh on your cluster. Use the Google Cloud Console to define a Service Level Objective (SLO)

C. Configure Anthos Config Management on your cluster and create a yaml file that defines the SLO and alerting policy you want to deploy in your cluster

D. Use Cloud Profiler to follow up the request latency. Create a custom metric in Cloud Monitoring based on the results of Cloud Profiler, and create an Alerting Policy in case this metric exceeds the threshold

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Googlerecommended practices. What should you do?

A. Move your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.

B. Move your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.

C. Install gsutil on each server containing data. Use streaming transfers to upload the data into Cloud Storage.

D. Install gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Your company has a Google Cloud project that uses BigQuery for data warehousing. The VPN tunnel between the on-premises environment and Google Cloud is configured with Cloud VPN. Your security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing. What should you do?

A. Configure Private Service Connect.

B. Create a service account, grant the BigQuery JobUser role and Storage Object Viewer role to the service account, and remove all other Identity and Access Management (1AM) access from the project.

C. Configure Private Google Access.

D. Configure VPC Service Controls and configure Private Google Access for on-premises hosts.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

You are migrating a Linux-based application from your private data center to Google Cloud. The TerramEarth security team sent you several recent Linux vulnerabilities published by Common Vulnerabilities and Exposures (CVE). You need assistance in understanding how these vulnerabilities could impact your migration. What should you do?

A. Post a question regarding the CVE in Stack Overflow to get an explanation

B. Read the CVEs from the Google Cloud Status Dashboard to understand the impact.

C. Post a question regarding the CVE in a Google Cloud discussion group to get an explanation

D. Open a support case regarding the CVE and chat with the support engineer.

E. Read the CVEs from the Google Cloud Platform Security Bulletins to understand the impact

正解：D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

For this question refer to the TerramEarth case study
Operational parameters such as oil pressure are adjustable on each of TerramEarth's vehicles to increase their efficiency, depending on their environmental conditions. Your primary goal is to increase the operating efficiency of all 20 million cellular and unconnected vehicles in the field How can you accomplish this goal?

A. Have your engineers inspect the data for patterns, and then create an algorithm with rules that make operational adjustments automatically.

B. Capture all operating data, train machine learning models that identify ideal operations, and run locally to make operational adjustments automatically.

C. Implement a Google Cloud Dataflow streaming job with a sliding window, and use Google Cloud Messaging (GCM) to make operational adjustments automatically.

D. Capture all operating data, train machine learning models that identify ideal operations, and host in Google Cloud Machine Learning (ML) Platform to make operational adjustments automatically.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

Your application needs to process credit card transactions. You want the smallest scope of Payment Card Industry (PCI) compliance without compromising the ability to analyze transactional data and trends relating to which payment methods are used. How should you design your architecture?

A. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor.

B. Create separate projects that only process credit card data.

C. Create separate subnetworks and isolate the components that process credit card data.

D. Create a tokenizer service and store only tokenized data.

E. Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI data.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

For this question, refer to the Dress4Win case study. Considering the given business requirements, how would you automate the deployment of web and transactional data layers?

A. Deploy Nginx and Tomcat using Cloud Deployment Manager to Compute Engine. Deploy a Cloud SQL server to replace MySQL. Deploy Jenkins using Cloud Deployment Manager.

B. Deploy Nginx and Tomcat using Cloud Launcher. Deploy a MySQL server using Cloud Launcher.
Deploy Jenkins to Compute Engine using Cloud Deployment Manager scripts.

C. Migrate Nginx and Tomcat to App Engine. Deploy a MySQL server using Cloud Launcher. Deploy Jenkins to Compute Engine using Cloud Launcher.

D. Migrate Nginx and Tomcat to App Engine. Deploy a Cloud Datastore server to replace the MySQL server in a high-availability configuration. Deploy Jenkins to Compute Engine using Cloud Launcher.

正解：A 解答を投票する

出題：13

You need to deploy a stateful workload on Google Cloud. The workload can scale horizontally, but each instance needs to read and write to the same POSIX filesystem. At high load, the stateful workload needs to support up to 100 MB/s of writes. What should you do?

A. Use a persistent disk for each instance.

B. Create a Cloud Filestore instance and mount it in each instance.

C. Use a regional persistent disk for each instance.

D. Create a Cloud Storage bucket and mount it in each instance using gcsfuse.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：14

Your company has a Google Cloud project that uses BigQuery for data warehousing on a pay-per-use basis.
You want to monitor queries in real time to discover the most costly queries and which users spend the most.
What should you do?

A. 1. Activate billing export into BigQuery.
2. Perform a BigQuery query on the billing table to extract the information you need.

B. 1. In the BigQuery dataset that contains all the tables to be queried, add a label for each user that can launch a query.
2. Open the Billing page of the project.
3. Select Reports.
4. Select BigQuery as the product and filter by the user you want to check.

C. 1. Create a Cloud Logging sink to export BigQuery data access logs to Cloud Storage. 2. Develop a Dataflow pipeline to compute the cost of queries split by users.

D. 1. Create a Cloud Logging sink to export BigQuery data access logs to BigQuery.
2. Perform a BigQuery query on the generated table to extract the information you need.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：15

For this question, refer to the Dress4Win case study. To be legally compliant during an audit, Dress4Win must be able to give insights in all administrative actions that modify the configuration or metadata of resources on Google Cloud.
What should you do?

A. Enable Cloud Identity-Aware Proxy in all projects, and add the group of Administrators as a member.

B. Use the Activity page in the GCP Console and Stackdriver Logging to provide the required insight.

C. Use Stackdriver Monitoring to create a dashboard on the project's activity.

D. Use Stackdriver Trace to create a trace list analysis.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：16

A production database virtual machine on Google Compute Engine has an ext4-formatted persistent disk for data files The database is about to run out of storage space How can you remediate the problem with the least amount of downtime?

A. Shut down the virtual machine, use the Cloud Platform Console to increase the persistent disk size, then restart the virtual machine.

B. In the Cloud Platform Console, create a snapshot of the persistent disk, restore the snapshot to a new larger disk, unmount the old disk, mount the new disk, and restart the database service.

C. In the Cloud Platform Console, increase the size of the persistent disk and verify the new space is ready to use with the fdisk command in Linux.

D. In the Cloud Platform Console, increase the size of the persistent disk and use the resize2fs command in Linux.

E. In the Cloud Platform Console, create a new persistent disk attached to the virtual machine, format and mount it, and configure the database service to move the files to the new disk.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：17

You are designing an application for use only during business hours. For the minimum viable product release, you'd like to use a managed product that automatically "scales to zero" so you don't incur costs when there is no activity.
Which primary compute resource should you choose?

A. Cloud Functions

B. AppEngine flexible environment

C. Compute Engine

D. Kubernetes Engine

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：18

Your company has an enterprise application running on Compute Engine that requires high availability and high performance. The application has been deployed on two instances in two zones in the same region m active passive mode. The application writes data to a persistent disk in the case of a single zone outage that data should be immediately made available to the other instance in the other zone. You want to maximize performance while minimizing downtime and data loss. What should you do?

A. 1 Attach a local SSD lo the first instance disk
2. Execute an rsync command every hour where the target is a persistent SSD disk attached to the second instance
3. In case of a zone outage, use the second instance

B. 1. Attach a regional SSD persistent Ask to the first instance
2. In case of a zone outage, force-attach the disk to the other instance

C. 1. Attach a persistent SSD disk to the first instance
2. Create a snapshot every hour
3. In case of a zone outage, recreate a persistent SSD disk in the second instance where data is coming from the created snapshot

D. 1 Create a Cloud Storage bucket
2. Mount the bucket into the first instance with gcs-fuse
3. In case of a zone outage, mount the Cloud Storage bucket to the second instance with gcs-fuse

正解：B 解答を投票する

Professional-Cloud-Architect試験無料問題集「Google Certified Professional - Cloud Architect (GCP) 認定」