究極のガイド準備Professional-Cloud-Architect認証試験Google Cloud Certifiedは2023年更新
リアルProfessional-Cloud-Architect問題集でGoogle正確なアンサーは最新問題は2023年更新
Professional-Cloud-Architect試験の資格を得るには、候補者はクラウドアーキテクチャで少なくとも3年の経験があり、GCPサービスの深い理解を深める必要があります。また、クラウドの設計パターンやベストプラクティスに精通しているだけでなく、セキュリティとコンプライアンスの要件の経験があるはずです。この試験は、実際のシナリオで候補者をテストするように設計されており、GCPでソリューションを設計、開発、管理する能力を検証することを目的としています。
質問 # 109
Case Study: 4 - Dress4Win
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model.
Company Background
Dress4win's application has grown from a few servers in the founder's garage to several hundred servers and appliances in a colocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster, Dress4win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is considering moving their development and test environments. They are also considering building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location.
Databases:
MySQL - user data, inventory, static data
Redis - metadata, social graph, caching
Application servers:
Tomcat - Java micro-services
Nginx - static content
Apache Beam - Batch processing
Storage appliances:
iSCSI for VM hosts
Fiber channel SAN - MySQL databases
NAS - image storage, logs, backups
Apache Hadoop/Spark servers:
Data analysis
Real-time trending calculations
MQ servers:
Messaging
Social notifications
Events
Miscellaneous servers:
Jenkins, monitoring, bastion hosts, security scanners
Business Requirements
Build a reliable and reproducible environment with scaled parity of production. Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
Analyze and optimize architecture for performance in the cloud. Migrate fully to the cloud if all other requirements are met.
Technical Requirements
Evaluate and choose an automation framework for provisioning resources in cloud. Support failover of the production environment to cloud during an emergency. Identify production services that can migrate to cloud to save capacity.
Use managed services whenever possible.
Encrypt data on the wire and at rest.
Support multiple VPN connections between the production data center and cloud environment.
CEO Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a new competitor could use a public cloud platform to offset their up-front investment and freeing them to focus on developing better features.
CTO Statement
We have invested heavily in the current infrastructure, but much of the equipment is approaching the end of its useful life. We are consistently waiting weeks for new gear to be racked before we can start new projects. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
CFO Statement
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years puts a cloud strategy between 30 to 50% lower than our current model.
You want to ensure Dress4Win's sales and tax records remain available for infrequent viewing by auditors for at least 10 years.
Cost optimization is your top priority.
Which cloud services should you choose?
- A. BigQuery to store the data, and a web server cluster in a managed instance group to access the data.
Google Cloud SQL mirrored across two distinct regions to store the data, and a Redis cluster in a managed instance group to access the data. - B. Google Cloud Storage Coldline to store the data, and gsutil to access the data.
- C. Google Cloud Storage Nearline to store the data, and gsutil to access the data.
- D. Google Bigtabte with US or EU as location to store the data, and gcloud to access the data.
正解：B
解説：
https://cloud.google.com/storage/docs/storage-classes
質問 # 110
A news teed web service has the following code running on Google App Engine. During peak load, users report that they can see news articles they already viewed. What is the most likely cause of this problem?
- A. The URL of the API needs to be modified to prevent caching.
- B. The HTTP Expires header needs to be set to -1 to stop caching.
- C. The session variable is being overwritten in Cloud Datastore.
- D. The session variable is local to just a single instance.
正解：C
解説：
Explanation
https://stackoverflow.com/questions/3164280/google-app-engine-cache-list-in-session-variable?rq=1
質問 # 111
For this question, refer to the TerramEarth case study. You are asked to design a new architecture for the ingestion of the data of the 200,000 vehicles that are connected to a cellular network. You want to follow Google-recommended practices.
Considering the technical requirements, which components should you use for the ingestion of the data?
- A. Compute Engine with specific SSH keys
- B. Compute Engine with project-wide SSH keys
- C. Google Kubernetes Engine with an SSL Ingress
- D. Cloud IoT Core with public/private key pairs
正解：C
解説：
Reference:
https://cloud.google.com/solutions/iot-overview
https://cloud.google.com/iot/quotas
質問 # 112
You are developing an application using different microservices that should remain internal to the cluster. You want to be able to configure each microservice with a specific number of replicas. You also want to be able to address a specific microservice from any other microservice in a uniform way, regardless of the number of replicas the microservice scales to. You need to implement this solution on Google Kubernetes Engine. What should you do?
- A. Deploy each microservice as a Pod. Expose the Pod in the cluster using a Service, and use the Service DNS name to address the microservice from other microservices within the cluster.
- B. Deploy each microservice as a Pod. Expose the Pod in the cluster using an Ingress, and use the Ingress IP address name to address the Pod from other microservices within the cluster.
- C. Deploy each microservice as a Deployment. Expose the Deployment in the cluster using an Ingress, and use the Ingress IP address to address the Deployment from other microservices within the cluster.
- D. Deploy each microservice as a Deployment. Expose the Deployment in the cluster using a Service, and use the Service DNS name to address it from other microservices within the cluster.
正解：D
解説：
https://kubernetes.io/docs/concepts/services-networking/ingress/
質問 # 113
You want to make a copy of a production Linux virtual machine in the US-Central region. You want to manage and replace the copy easily if there are changes on the production virtual machine. You will deploy the copy as a new instances in a different project in the US-East region. What steps must you take?
- A. Create a snapshot of the root disk and select the snapshot as the root disk when you create a new virtual machine instance in the US-East region.
- B. Use the Linux dd and netcat command to copy and stream the root disk contents to a new virtual machine instance in the US-East region.
- C. Create an image file from the root disk with Linux dd command, create a new disk from the image file, and use it to create a new virtual machine instance in the US-East region
- D. Create a snapshot of the root disk, create an image file in Google Cloud Storage from the snapshot, and create a new virtual machine instance in the US-East region using the image file for the root disk.
正解：D
解説：
Reference:
https://stackoverflow.com/questions/36441423/migrate-google-compute-engine-instance-to-a-different-region
質問 # 114
For this question, refer to the JencoMart case study.
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources. What Google domain and project structure should you recommend?
- A. Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.
- B. Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.
- C. Create a single G Suite account to manage users with each stage of each application in its own project.
- D. Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.
正解：B
解説：
Note: The principle of least privilege and separation of duties are concepts that, although semantically different, are intrinsically related from the standpoint of security. The intent behind both is to prevent people from having higher privilege levels than they actually need
* Principle of Least Privilege: Users should only have the least amount of privileges required to perform their job and no more. This reduces authorization exploitation by limiting access to resources such as targets, jobs, or monitoring templates for which they are not authorized.
* Separation of Duties: Beyond limiting user privilege level, you also limit user duties, or the specific jobs they can perform. No user should be given responsibility for more than one related function. This limits the ability of a user to perform a malicious action and then cover up that action.
References:
https://cloud.google.com/kms/docs/separation-of-duties
Topic 4, Dress4Win case study
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model.
Company Background
Dress4win's application has grown from a few servers in the founder's garage to several hundred servers and appliances in a colocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster, Dress4win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is considering moving their development and test environments. They are also considering building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location.
* Databases:
* MySQL - user data, inventory, static data
* Redis - metadata, social graph, caching
* Application servers:
* Tomcat - Java micro-services
* Nginx - static content
* Apache Beam - Batch processing
* Storage appliances:
* iSCSI for VM hosts
* Fiber channel SAN - MySQL databases
* NAS - image storage, logs, backups
* Apache Hadoop/Spark servers:
* Data analysis
* Real-time trending calculations
* MQ servers:
* Messaging
* Social notifications
* Events
* Miscellaneous servers:
* Jenkins, monitoring, bastion hosts, security scanners
Business Requirements
* Build a reliable and reproducible environment with scaled parity of production.
* Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
* Improve business agility and speed of innovation through rapid provisioning of new resources.
* Analyze and optimize architecture for performance in the cloud.
* Migrate fully to the cloud if all other requirements are met.
Technical Requirements
* Evaluate and choose an automation framework for provisioning resources in cloud.
* Support failover of the production environment to cloud during an emergency.
* Identify production services that can migrate to cloud to save capacity.
* Use managed services whenever possible.
* Encrypt data on the wire and at rest.
* Support multiple VPN connections between the production data center and cloud environment.
CEO Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a new competitor could use a public cloud platform to offset their up-front investment and freeing them to focus on developing better features.
CTO Statement
We have invested heavily in the current infrastructure, but much of the equipment is approaching the end of its useful life. We are consistently waiting weeks for new gear to be racked before we can start new projects. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
CFO Statement
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years puts a cloud strategy between 30 to 50% lower than our current model.
質問 # 115
You have an application that makes HTTP requests to Cloud Storage. Occasionally the requests fail with HTTP status codes of 5xx and 429.
How should you handle these types of errors?
- A. Implement retry logic using a truncated exponential backoff strategy.
- B. Monitor https://status.cloud.google.com/feed.atom and only make requests if Cloud Storage is not reporting an incident.
- C. Use gRPC instead of HTTP for better performance.
- D. Make sure the Cloud Storage bucket is multi-regional for geo-redundancy.
正解：A
解説：
Explanation
Reference https://cloud.google.com/storage/docs/json_api/v1/status-codes
質問 # 116
You are designing a mobile chat application. You want to ensure people cannot spoof chat messages, by providing a message were sent by a specific user.
What should you do
- A. Tag messages client side with the originating user identifier and the destination user.
- B. Encrypt the message client side using block-based encryption with a shared key.
- C. Use public key infrastructure (PKI) to encrypt the message client side using the originating user's private key.
- D. Use a trusted certificate authority to enable SSL connectivity between the client application and the server.
正解：D
解説：
Explanation
Encrypting each block and tagging each message at the client side is an overhead on the application. Best method which has been adopted since years is contacting the SSL provider and use the public certificate to encrypt the traffic between client and the server.
質問 # 117
Case Study: 4 - Dress4Win case study
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model.
Company Background
Dress4win's application has grown from a few servers in the founder's garage to several hundred servers and appliances in a colocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster, Dress4win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is considering moving their development and test environments. They are also considering building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location.
Databases:
MySQL - user data, inventory, static data
* Redis - metadata, social graph, caching
* Application servers:
Tomcat - Java micro-services
* Nginx - static content
* Apache Beam - Batch processing
* Storage appliances:
iSCSI for VM hosts
* Fiber channel SAN - MySQL databases
* NAS - image storage, logs, backups
* Apache Hadoop/Spark servers:
Data analysis
* Real-time trending calculations
* MQ servers:
Messaging
* Social notifications
* Events
* Miscellaneous servers:
Jenkins, monitoring, bastion hosts, security scanners
* Business Requirements
* Build a reliable and reproducible environment with scaled parity of production. Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
Analyze and optimize architecture for performance in the cloud. Migrate fully to the cloud if all other requirements are met.
Technical Requirements
Evaluate and choose an automation framework for provisioning resources in cloud. Support failover of the production environment to cloud during an emergency. Identify production services that can migrate to cloud to save capacity.
Use managed services whenever possible.
Encrypt data on the wire and at rest.
Support multiple VPN connections between the production data center and cloud environment.
CEO Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a new competitor could use a public cloud platform to offset their up-front investment and freeing them to focus on developing better features.
CTO Statement
We have invested heavily in the current infrastructure, but much of the equipment is approaching the end of its useful life. We are consistently waiting weeks for new gear to be racked before we can start new projects. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
CFO Statement
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years puts a cloud strategy between 30 to 50% lower than our current model.
For this question, refer to the Dress4Win case study.
The Dress4Win security team has disabled external SSH access into production virtual machines (VMs) on Google Cloud Platform (GCP). The operations team needs to remotely manage the VMs, build and push Docker containers, and manage Google Cloud Storage objects. What can they do?
- A. Have the development team build an API service that allows the operations team to execute specific remote procedure calls to accomplish their tasks.
- B. Develop a new access request process that grants temporary SSH access to cloud VMs when an operations engineer needs to perform a task.
- C. Configure a VPN connection to GCP to allow SSH access to the cloud VMs.
- D. Grant the operations engineers access to use Google Cloud Shell.
正解：C
質問 # 118
Your architecture calls for the centralized collection of all admin activity and VM system logs within your project.
How should you collect these logs from both VMs and services?
- A. All admin and VM system logs are automatically collected by Stackdriver.
- B. Install the Stackdriver Logging agent on a single compute instance and let it collect all audit and access logs for your environment.
- C. Stackdriver automatically collects admin activity logs for most services. The Stackdriver Logging agent must be installed on each instance to collect system logs.
- D. Launch a custom syslogd compute instance and configure your GCP project and VMs to forward all logs to it.
正解：B
解説：
Explanation/Reference: https://cloud.google.com/logging/docs/agent/
質問 # 119
Your customer is receiving reports that their recently updated Google App Engine application is taking approximately 30 seconds to load for some of their users. This behavior was not reported before the update. What strategy should you take?
- A. Roll back to an earlier known good release, then push the release again at a quieter period to investigate. Then use Stackdriver Trace and logging to diagnose the problem.
- B. Work with your ISP to diagnose the problem.
- C. Open a support ticket to ask for network capture and flow data to diagnose the problem, then roll back your application.
- D. Roll back to an earlier known good release initially, then use Stackdriver Trace and logging to diagnose the problem in a development/test/staging environment.
正解：C
質問 # 120
Case Study: 7 - Mountkirk Games
Company Overview
Mountkirk Games makes online, session-based, multiplayer games for mobile platforms. They build all of their games using some server-side integration. Historically, they have used cloud providers to lease physical servers.
Due to the unexpected popularity of some of their games, they have had problems scaling their global audience, application servers, MySQL databases, and analytics tools.
Their current model is to write game statistics to files and send them through an ETL tool that loads them into a centralized MySQL database for reporting.
Solution Concept
Mountkirk Games is building a new game, which they expect to be very popular. They plan to deploy the game's backend on Google Compute Engine so they can capture streaming metrics, run intensive analytics, and take advantage of its autoscaling server environment and integrate with a managed NoSQL database.
Business Requirements
Increase to a global footprint.
* Improve uptime - downtime is loss of players.
* Increase efficiency of the cloud resources we use.
* Reduce latency to all customers.
* Technical Requirements
Requirements for Game Backend Platform
Dynamically scale up or down based on game activity.
* Connect to a transactional database service to manage user profiles and game state.
* Store game activity in a timeseries database service for future analysis.
* As the system scales, ensure that data is not lost due to processing backlogs.
* Run hardened Linux distro.
* Requirements for Game Analytics Platform
Dynamically scale up or down based on game activity
* Process incoming data on the fly directly from the game servers
* Process data that arrives late because of slow mobile networks
* Allow queries to access at least 10 TB of historical data
* Process files that are regularly uploaded by users' mobile devices
* Executive Statement
Our last successful game did not scale well with our previous cloud provider, resulting in lower user adoption and affecting the game's reputation. Our investors want more key performance indicators (KPIs) to evaluate the speed and stability of the game, as well as other metrics that provide deeper insight into usage patterns so we can adapt the game to target users.
Additionally, our current technology stack cannot provide the scale we need, so we want to replace MySQL and move to an environment that provides autoscaling, low latency load balancing, and frees us up from managing physical servers.
For this question, refer to the Mountkirk Games case study. Mountkirk Games wants you to design a way to test the analytics platform's resilience to changes in mobile network latency.
What should you do?
- A. Build a test client that can be run from a mobile phone emulator on a Compute Engine virtual machine, and run multiple copies in Google Cloud Platform regions all over the world to generate realistic traffic.
- B. Deploy failure injection software to the game analytics platform that can inject additional latency to mobile client analytics traffic.
- C. Create an opt-in beta of the game that runs on players' mobile devices and collects response times from analytics endpoints running in Google Cloud Platform regions all over the world.
- D. Add the ability to introduce a random amount of delay before beginning to process analytics files uploaded from mobile devices.
正解：C
質問 # 121
The current Dress4win system architecture has high latency to some customers because it is located in one data center.
As of a future evaluation and optimizing for performance in the cloud, Dresss4win wants to distribute it's system architecture to multiple locations when Google cloud platform.
Which approach should they use?
- A. Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines managed by your operations team.
- B. Use regional managed instance groups and a global load balancer to increase reliability by providing automatic failover between zones in different regions.
- C. Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines as part of a separate managed instance groups.
- D. Use regional managed instance groups and a global load balancer to increase performance because the regional managed instance group can grow instances in each region separately based on traffic.
正解：C
質問 # 122
You are designing a large distributed application with 30 microservices. Each of your distributed microservices needs to connect to a database back-end. You want to store the credentials securely.
Where should you store the credentials?
- A. In the source code
- B. In a secret management system
- C. In an environment variable
- D. In a config file that has restricted access through ACLs
正解：B
解説：
Explanation/Reference: https://cloud.google.com/kms/docs/secret-management
質問 # 123
Your company is designing its application landscape on Compute Engine. Whenever a zonal outage occurs, the application should be restored in another zone as quickly as possible with the latest application dat a. You need to design the solution to meet this requirement. What should you do?
- A. Create a snapshot schedule for the disk containing the application data. Whenever a zonal outage occurs, use the latest snapshot to restore the disk in the same zone.
- B. Create a snapshot schedule for the disk containing the application data. Whenever a zonal outage occurs, use the latest snapshot to restore the disk in another zone within the same region.
- C. Configure the Compute Engine instances with an instance template for the application, and use a regional persistent disk for the application data. Whenever a zonal outage occurs, use the instance template to spin up the application in another zone in the same region. Use the regional persistent disk for the application data.
- D. Configure the Compute Engine instances with an instance template for the application, and use a regional persistent disk for the application data. Whenever a zonal outage occurs, use the instance template to spin up the application in another region. Use the regional persistent disk for the application data,
正解：C
質問 # 124
You have been asked to select the storage system for the click-data of your company's large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute, with bursts of up to 8,500 clicks per second. It must been stored for future analysis by your data science and user experience teams. Which storage infrastructure should you choose?
- A. Google cloud Datastore
- B. Google Cloud Bigtable
- C. Google Cloud SQL
- D. Google Cloud Storage
正解：D
解説：
Explanation
https://cloud.google.com/bigquery/docs/loading-data-cloud-storage
質問 # 125
For this question, refer to the TerramEarth case study.
To speed up data retrieval, more vehicles will be upgraded to cellular connections and be able to transmit data to the ETL process. The current FTP process is error-prone and restarts the data transfer from the start of the file when connections fail, which happens often. You want to improve the reliability of the solution and minimize data transfer time on the cellular connections. What should you do?
- A. Use one Google Container Engine cluster of FTP servers. Save the data to a Multi-Regional bucket. Run the ETL process using data in the bucket.
- B. Directly transfer the files to different Google Cloud Multi-Regional Storage bucket locations in us, eu, and asia using Google APIs over HTTP(S). Run the ETL process using the data in the bucket.
- C. Use multiple Google Container Engine clusters running FTP servers located in different regions. Save the data to Multi-Regional buckets in us, eu, and asia. Run the ETL process using the data in the bucket.
- D. Directly transfer the files to a different Google Cloud Regional Storage bucket location in us, eu, and asia using Google APIs over HTTP(S). Run the ETL process to retrieve the data from each Regional bucket.
正解：D
解説：
Explanation
https://cloud.google.com/storage/docs/locations
質問 # 126
During a high traffic portion of the day, one of your relational databases crashes, but the replica is never promoted to a master. You want to avoid this in the future. What should you do?
- A. Implement routinely scheduled failovers of your databases.
- B. Choose larger instances for your database.
- C. Create snapshots of your database more regularly.
- D. Use a different database.
正解：A
解説：
https://cloud.google.com/solutions/disaster-recovery-cookbook
質問 # 127
......
Google Professional-Cloud-Architect試験に合格するためには、受験者はクラウドアーキテクチャのさまざまな側面に関する熟練度を示す必要があります。例えば、クラウドソリューションアーキテクチャの設計や計画、クラウドインフラストラクチャの管理やプロビジョニング、クラウドソリューションの最適化やセキュリティ、信頼性やスケーラビリティの設計などです。試験は50問の多肢選択問題で構成されており、受験者は2時間以内に試験を受ける必要があります。受験者は少なくとも70％のスコアを取得して試験に合格し、Google Certified Professional - Cloud Architect（GCP）の認定資格を取得する必要があります。認定資格の有効期限は2年間であり、その後、受験者は再認定を行う必要があります。
Google Cloud Certified Professional-Cloud-Architect試験練習問題集：https://www.goshiken.com/Google/Professional-Cloud-Architect-mondaishu.html
Professional-Cloud-Architectプレミアム資料テストPDFで無料問題集お試しセット：https://drive.google.com/open?id=1oUq2sHHN3JbBwTpnnsqhpLDeL9vT3Tca