2022年最新の本日更新された最新のProfessional-Cloud-ArchitectのPDFにはProfessional-Cloud-Architectテスト限定無料！
完全版最新の問題集PDFで最新Professional-Cloud-Architect試験問題と解答
質問 65
Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Google- recommended practices. What should you do?
- A. Install gsutil on each server containing data. Use streaming transfers to upload the data into Cloud Storage.
- B. Install gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.
- C. Move your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.
- D. Move your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.
正解: B
解説:
Explanation/Reference: https://cloud.google.com/solutions/transferring-big-data-sets-to-gcp
質問 66
Your agricultural division is experimenting with fully autonomous vehicles. You want your architecture to
promote strong security during vehicle operation.
Which two architectures should you consider? (Choose two.)
- A. Use a trusted platform module (TPM) and verify firmware and binaries on boot.
- B. Treat every micro service call between modules on the vehicle as untrusted.
- C. Use a functional programming language to isolate code execution cycles.
- D. Use multiple connectivity subsystems for redundancy.
- E. Enclose the vehicle's drive electronics in a Faraday cage to isolate chips.
- F. Require IPv6 for connectivity to ensure a secure address space.
正解: A,E
質問 67
The application reliability team at your company has added a debug feature to their backend service to send all server events to Google Cloud Storage for eventual analysis. The event records are at least 50 KB and at most 15 MB and are expected to peak at 3,000 events per second. You want to minimize data loss.
Which process should you implement?
- A. Batch every 10,000 events with a single manifest file for metadata.
Compress event files and manifest file into a single archive file.
Name files using serverName-EventSequence.
Create a new bucket if bucket is older than 1 day and save the single archive file to the new bucket. Otherwise, save the single archive file to existing bucket. - B. Compress individual files.
Name files with serverName-EventSequence.
Save files to one bucket
Set custom metadata headers for each object after saving. - C. Append metadata to file body.
Compress individual files.
Name files with a random prefix pattern.
Save files to one bucket - D. Append metadata to file body.
Compress individual files.
Name files with serverName-Timestamp.
Create a new bucket if bucket is older than 1 hour and save individual files to the new bucket.
Otherwise, save files to existing bucket
正解: C
解説:
https://cloud.google.com/storage/docs/request-rate
Use a naming convention that distributes load evenly across key ranges
Auto-scaling of an index range can be slowed when using sequential names, such as object keys based on a sequence of numbers or timestamp. This occurs because requests are constantly shifting to a new index range, making redistributing the load harder and less effective.
In order to maintain a high request rate, avoid using sequential names. Using completely random object names will give you the best load distribution.
質問 68
An application development team believes their current logging tool will not meet their needs for their new cloud-based product. They want a bettor tool to capture errors and help them analyze their historical log data. You want to help them find a solution that meets their needs, what should you do?
- A. Help them define their requirements and assess viable logging tools.
- B. Send them a list of online resources about logging best practices.
- C. Help them upgrade their current tool to take advantage of any new features.
- D. Direct them to download and install the Google StackDriver logging agent.
正解: C
質問 69
You need to develop procedures to verify resilience of disaster recovery for remote recovery using GCP. Your production environment is hosted on-premises. You need to establish a secure, redundant connection between your on premises network and the GCP network.
What should you do?
- A. Verify that Dedicated Interconnect can replicate files to GCP. Verify that direct peering can establish a secure connection between your networks if Dedicated Interconnect fails.
- B. Verify that Dedicated Interconnect can replicate files to GCP. Verify that Cloud VPN can establish a secure connection between your networks if Dedicated Interconnect fails.
- C. Verify that the Transfer Appliance can replicate files to GCP. Verify that direct peering can establish a secure connection between your networks if the Transfer Appliance fails.
- D. Verify that the Transfer Appliance can replicate files to GCP. Verify that Cloud VPN can establish a secure connection between your networks if the Transfer Appliance fails.
正解: B
解説:
Reference:
https://cloud.google.com/interconnect/docs/how-to/direct-peering
質問 70
The database administration team has asked you to help them improve the performance of their new database server running on Google Compute Engine. The database is for importing and normalizing their performance statistics and is built with MySQL running on Debian Linux. They have an n1-standard-8 virtual machine with 80 GB of SSD persistent disk.
What should they change to get better performance from this system?
- A. Modify all of their batch jobs to use bulk inserts into the database
- B. Dynamically resize the SSD persistent disk to 500 GB
- C. Increase the virtual machine's memory to 64 GB
- D. Migrate their performance metrics warehouse to BigQuery
- E. Create a new virtual machine running PostgreSQL
正解: B
質問 71
For this question, refer to the TerramEarth case study.
TerramEarth plans to connect all 20 million vehicles in the field to the cloud. This increases the volume to 20 million 600 byte records a second for 40 TB an hour. How should you design the data ingestion?
- A. Vehicles continue to write data using the existing system (FTP).
- B. Vehicles stream data directly to Google BigQuery.
- C. Vehicles write data directly to GCS.
- D. Vehicles write data directly to Google Cloud Pub/Sub.
正解: B
質問 72
Your organization requires that metrics from all applications be retained for 5 years for future analysis in possible legal proceedings. Which approach should you use?
- A. Grant the security team access to the logs in each Project.
- B. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage.
- C. Configure Stackdriver Monitoring for all Projects with the default retention policies.
- D. Configure Stackdriver Monitoring for all Projects, and export to BigQuery.
正解: B
解説:
Explanation: https://cloud.google.com/monitoring/api/v3/metrics
質問 73
The development team has provided you with a Kubernetes Deployment file. You have no infrastructure yet and need to deploy the application. What should you do?
- A. Use gcloud to create a Kubernetes cluster. Use Deployment Manager to create the deployment.
- B. Use kubectl to create a Kubernetes cluster. Use kubectl to create the deployment.
- C. Use gcloud to create a Kubernetes cluster. Use kubectl to create the deployment.
- D. Use kubectl to create a Kubernetes cluster. Use Deployment Manager to create the deployment.
正解: D
質問 74
Your company has announced that they will be outsourcing operations functions. You want to allow developers to easily stage new versions of a cloud-based application in the production environment and allow the outsourced operations team to autonomously promote staged versions to production. You want to minimize the operational overhead of the solution. Which Google Cloud product should you migrate to?
- A. Google Kubernetes Engine
- B. Compute Engine
- C. GKE On-Prem
- D. App Engine
正解: A
解説:
Reference: https://cloud.google.com/security/compliance/eba-outsourcing-mapping-gcp
質問 75
Case Study: 6 - TerramEarth
Company Overview
TerramEarth manufactures heavy equipment for the mining and agricultural industries. About
80% of their business is from mining and 20% from agriculture. They currently have over 500 dealers and service centers in 100 countries. Their mission is to build products that make their customers more productive.
Solution Concept
There are 20 million TerramEarth vehicles in operation that collect 120 fields of data per second.
Data is stored locally on the vehicle and can be accessed for analysis when a vehicle is serviced.
The data is downloaded via a maintenance port. This same port can be used to adjust operational parameters, allowing the vehicles to be upgraded in the field with new computing modules.
Approximately 200,000 vehicles are connected to a cellular network, allowing TerramEarth to collect data directly. At a rate of 120 fields of data per second with 22 hours of operation per day, TerramEarth collects a total of about 9 TB/day from these connected vehicles.
Existing Technical Environment
TerramEarth's existing architecture is composed of Linux and Windows-based systems that reside in a single U.S. west coast based data center. These systems gzip CSV files from the field and upload via FTP, and place the data in their data warehouse. Because this process takes time, aggregated reports are based on data that is 3 weeks old.
With this data, TerramEarth has been able to preemptively stock replacement parts and reduce unplanned downtime of their vehicles by 60%. However, because the data is stale, some customers are without their vehicles for up to 4 weeks while they wait for replacement parts.
Business Requirements
Decrease unplanned vehicle downtime to less than 1 week.
* Support the dealer network with more data on how their customers use their equipment to better
* position new products and services
Have the ability to partner with different companies - especially with seed and fertilizer suppliers
* in the fast-growing agricultural business - to create compelling joint offerings for their customers.
Technical Requirements
Expand beyond a single datacenter to decrease latency to the American Midwest and east
* coast.
Create a backup strategy.
* Increase security of data transfer from equipment to the datacenter.
* Improve data in the data warehouse.
* Use customer and equipment data to anticipate customer needs.
* Application 1: Data ingest
A custom Python application reads uploaded datafiles from a single server, writes to the data warehouse.
Compute:
Windows Server 2008 R2
* - 16 CPUs
- 128 GB of RAM
- 10 TB local HDD storage
Application 2: Reporting
An off the shelf application that business analysts use to run a daily report to see what equipment needs repair. Only 2 analysts of a team of 10 (5 west coast, 5 east coast) can connect to the reporting application at a time.
Compute:
Off the shelf application. License tied to number of physical CPUs
* - Windows Server 2008 R2
- 16 CPUs
- 32 GB of RAM
- 500 GB HDD
Data warehouse:
A single PostgreSQL server
* - RedHat Linux
- 64 CPUs
- 128 GB of RAM
- 4x 6TB HDD in RAID 0
Executive Statement
Our competitive advantage has always been in the manufacturing process, with our ability to build better vehicles for lower cost than our competitors. However, new products with different approaches are constantly being developed, and I'm concerned that we lack the skills to undergo the next wave of transformations in our industry. My goals are to build our skills while addressing immediate market needs through incremental innovations.
For this question, refer to the TerramEarth case study. TerramEarth has decided to store data files in Cloud Storage. You need to configure Cloud Storage lifecycle rule to store 1 year of data and minimize file storage cost.
Which two actions should you take?
- A. Create a Cloud Storage lifecycle rule with Age: "90", Storage Class: "Standard", and Action: "Set to Nearline", and create a second GCS life-cycle rule with Age: "91", Storage Class: "Nearline", and Action: "Set to Coldline".
- B. Create a Cloud Storage lifecycle rule with Age: "30", Storage Class: "Coldline", and Action: "Set to Nearline", and create a second GCS life-cycle rule with Age: "91", Storage Class: "Coldline", and Action: "Set to Nearline".
- C. Create a Cloud Storage lifecycle rule with Age: "30", Storage Class: "Standard", and Action: "Set to Coldline", and create a second GCS life-cycle rule with Age: "365", Storage Class: "Coldline", and Action: "Delete".
- D. Create a Cloud Storage lifecycle rule with Age: "30", Storage Class: "Standard", and Action: "Set to Coldline", and create a second GCS life-cycle rule with Age: "365", Storage Class: "Nearline", and Action: "Delete".
正解: D
質問 76
For this question, refer to the Dress4Win case study.
Dress4Win has asked you to recommend machine types they should deploy their application servers to.
How should you proceed?
- A. Perform a mapping of the on-premises physical hardware cores and RAM to the nearest machine types in the cloud.
- B. Recommend that Dress4Win deploy application servers to machine types that offer the highest RAM to CPU ratio available.
- C. Recommend that Dress4Win deploy into production with the smallest instances available, monitor them over time, and scale the machine type up until the desired performance is reached.
- D. Identify the number of virtual cores and RAM associated with the application server virtual machines align them to a custom machine type in the cloud, monitor performance, and scale the machine types up until the desired performance is reached.
正解: A
質問 77
You are analyzing and defining business processes to support your startup's trial usage of GCP, and you don't yet know what consumer demand for your product will be. Your manager requires you to minimize GCP service costs and adhere to Google best practices. What should you do?
- A. Utilize free tier and sustained use discounts. Provision a staff position for service cost management.
- B. Utilize free tier and sustained use discounts. Provide training to the team about service cost management.
- C. Utilize free tier and committed use discounts. Provision a staff position for service cost management.
- D. Utilize free tier and committed use discounts. Provide training to the team about service cost management.
正解: D
解説:
Reference:
https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#billing_and_management
質問 78
Mountkirk Games wants to set up a real-time analytics platform for their new game. The new platform must
meet their technical requirements.
Which combination of Google technologies will meet all of their requirements?
- A. Cloud SQL, Cloud Storage, Cloud Pub/Sub, and Cloud Dataflow
- B. Cloud Dataproc, Cloud Pub/Sub, Cloud SQL, and Cloud Dataflow
- C. Cloud Pub/Sub, Compute Engine, Cloud Storage, and Cloud Dataproc
- D. Cloud Dataflow, Cloud Storage, Cloud Pub/Sub, and BigQuery
- E. Kubernetes Engine, Cloud Pub/Sub, and Cloud SQL
正解: D
解説:
Explanation/Reference:
Explanation:
Ingest millions of streaming events per second from anywhere in the world with Cloud Pub/Sub, powered
by Google's unique, high-speed private network. Process the streams with Cloud Dataflow to ensure
reliable, exactly-once, low-latency data transformation. Stream the transformed data into BigQuery, the
cloud-native data warehousing service, for immediate analysis via SQL or popular visualization tools.
From scenario: They plan to deploy the game's backend on Google Compute Engine so they can capture
streaming metrics, run intensive analytics.
Requirements for Game Analytics Platform
1. Dynamically scale up or down based on game activity
2. Process incoming data on the fly directly from the game servers
3. Process data that arrives late because of slow mobile networks
4. Allow SQL queries to access at least 10 TB of historical data
5. Process files that are regularly uploaded by users' mobile devices
6. Use only fully managed services
References: https://cloud.google.com/solutions/big-data/stream-analytics/
Testlet 1
Company Overview
Mountkirk Games makes online, session-based, multiplayer games for mobile platforms. They build all of
their games using some server-side integration. Historically, they have used cloud providers to lease
physical servers.
Due to the unexpected popularity of some of their games, they have had problems scaling their global
audience, application servers, MySQL databases, and analytics tools.
Their current model is to write game statistics to files and send them through an ETL tool that loads them
into a centralized MySQL database for reporting.
Solution Concept
Mountkirk Games is building a new game, which they expect to be very popular. They plan to deploy the
game's backend on Google Compute Engine so they can capture streaming metrics, run intensive
analytics, and take advantage of its autoscaling server environment and integrate with a managed NoSQL
database.
Business Requirements
Increase to a global footprint.
Improve uptime - downtime is loss of players.
Increase efficiency of the cloud resources we use.
Reduce latency to all customers.
Technical Requirements
Requirements for Game Backend Platform
Dynamically scale up or down based on game activity.
Connect to a transactional database service to manage user profiles and game state.
Store game activity in a timeseries database service for future analysis.
As the system scales, ensure that data is not lost due to processing backlogs.
Run hardened Linux distro.
Requirements for Game Analytics Platform
Dynamically scale up or down based on game activity
Process incoming data on the fly directly from the game servers
Process data that arrives late because of slow mobile networks
Allow queries to access at least 10 TB of historical data
Process files that are regularly uploaded by users' mobile devices
Executive Statement
Our last successful game did not scale well with our previous cloud provider, resulting in lower user
adoption and affecting the game's reputation. Our investors want more key performance indicators (KPIs)
to evaluate the speed and stability of the game, as well as other metrics that provide deeper insight into
usage patterns so we can adapt the game to target users. Additionally, our current technology stack
cannot provide the scale we need, so we want to replace MySQL and move to an environment that
provides autoscaling, low latency load balancing, and frees us up from managing physical servers.
質問 79
The current Dress4win system architecture has high latency to some customers because it is located in one data center.
As of a future evaluation and optimizing for performance in the cloud, Dresss4win wants to distribute it's system architecture to multiple locations when Google cloud platform.
Which approach should they use?
- A. Use regional managed instance groups and a global load balancer to increase performance because the regional managed instance group can grow instances in each region separately based on traffic.
- B. Use regional managed instance groups and a global load balancer to increase reliability by providing automatic failover between zones in different regions.
- C. Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines as part of a separate managed instance groups.
- D. Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines managed by your operations team.
正解: A
質問 80
Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company's data center. Upon investigation, you discover that some of the RFC 1918 IP ranges being used in the new company's Virtual Private Cloud (VPC) overlap with your data center IP space. What should you do to enable connectivity and make sure that there are no routing conflicts when connectivity is established?
- A. Create a Cloud VPN connection from the new VPC to the data center, and create a Cloud NAT instance to perform NAT on the overlapping IP space.
- B. Create a Cloud VPN connection from the new VPC to the data center, and apply a firewall rule that blocks the overlapping IP space.
- C. Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply a custom route advertisement to block the overlapping IP space.
- D. Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply new IP addresses so there is no overlapping IP space.
正解: A
質問 81
For this question, refer to the Dress4Win case study.
At Dress4Win, an operations engineer wants to create a tow-cost solution to remotely archive copies of database backup files. The database files are compressed tar files stored in their current data center. How should he proceed?
- A. Create a cron script using gsutil to copy the files to a Regional Storage bucket.
- B. Create a cron script using gsutil to copy the files to a Coldline Storage bucket.
- C. Create a Cloud Storage Transfer Service Job to copy the files to a Coldline Storage bucket.
- D. Create a Cloud Storage Transfer Service job to copy the files to a Regional Storage bucket.
正解: B
質問 82
Your company runs several databases on a single MySQL instance. They need to take backups of a specific database at regular intervals. The backup activity needs to complete as quickly as possible and cannot be allowed to impact disk performance.
How should you configure the storage?
- A. Use gcsfise to mount a Google Cloud Storage bucket as a volume directly on the instance and write backups to the mounted location using mysqldump.
- B. Mount additional persistent disk volumes onto each virtual machine (VM) instance in a RAID10 array and use LVM to create snapshots to send to Cloud Storage
- C. Mount a Local SSD volume as the backup location. After the backup is complete, use gsutil to move the backup to Google Cloud Storage.
- D. Configure a cron job to use the gcloud tool to take regular backups using persistent disk snapshots.
正解: A
解説:
Explanation/Reference:
References: https://github.com/mvarrieur/MySQL-backup-to-Google-Cloud-Storage
https://cloud.google.com/storage/docs/gcs-fuse
質問 83
Your company's test suite is a custom C++ application that runs tests throughout each day on Linux virtual machines. The full test suite takes several hours to complete, running on a limited number of on-premises servers reserved for testing. Your company wants to move the testing infrastructure to the cloud, to reduce the amount of time it takes to fully test a change to the system, while changing the tests as little as possible.
Which cloud infrastructure should you recommend?
- A. Google Cloud Dataproc to run Apache Hadoop jobs to process each test
- B. Google App Engine with Google StackDriver for logging
- C. Google Compute Engine unmanaged instance groups and Network Load Balancer
- D. Google Compute Engine managed instance groups with auto-scaling
正解: D
解説:
Explanation/Reference:
Explanation:
Google Compute Engine enables users to launch virtual machines (VMs) on demand. VMs can be launched from the standard images or custom images created by users.
Managed instance groups offer autoscaling capabilities that allow you to automatically add or remove instances from a managed instance group based on increases or decreases in load. Autoscaling helps your applications gracefully handle increases in traffic and reduces cost when the need for resources is lower.
Incorrect Answers:
B: There is no mention of incoming IP data traffic for the custom C++ applications.
C: Apache Hadoop is not fit for testing C++ applications. Apache Hadoop is an open-source software framework used for distributed storage and processing of datasets of big data using the MapReduce programming model.
D: Google App Engine is intended to be used for web applications.
Google App Engine (often referred to as GAE or simply App Engine) is a web framework and cloud computing platform for developing and hosting web applications in Google-managed data centers.
References: https://cloud.google.com/compute/docs/autoscaler/
質問 84
For this question, refer to the JencoMart case study.
JencoMart has decided to migrate user profile storage to Google Cloud Datastore and the application servers to Google Compute Engine (GCE). During the migration, the existing infrastructure will need access to Datastore to upload the data. What service account key-management strategy should you recommend?
- A. Provision service account keys for the on-premises infrastructure and use Google Cloud Platform (GCP) managed keys for the VMs
- B. Authenticate the on-premises infrastructure with a user account and provision service account keys for the VMs.
- C. Deploy a custom authentication service on GCE/Google Container Engine (GKE) for the on-premises infrastructure and use GCP managed keys for the VMs.
- D. Provision service account keys for the on-premises infrastructure and for the GCE virtual machines (VMs).
正解: A
解説:
Explanation
https://cloud.google.com/iam/docs/understanding-service-accounts
Migrating data to Google Cloud Platform
Let's say that you have some data processing that happens on another cloud provider and you want to transfer the processed data to Google Cloud Platform. You can use a service account from the virtual machines on the external cloud to push the data to Google Cloud Platform. To do this, you must create and download a service account key when you create the service account and then use that key from the external process to call the Cloud Platform APIs.
References:
https://cloud.google.com/iam/docs/understanding-service-accounts#migrating_data_to_google_cloud_platform
質問 85
Case Study: 3 - JencoMart Case Study
Company Overview
JencoMart is a global retailer with over 10,000 stores in 16 countries. The stores carry a range of goods, such as groceries, tires, and jewelry. One of the company's core values is excellent customer service. In addition, they recently introduced an environmental policy to reduce their carbon output by 50% over the next 5 years.
Company Background
JencoMart started as a general store in 1931, and has grown into one of the world's leading brands known for great value and customer service. Over time, the company transitioned from only physical stores to a stores and online hybrid model, with 25% of sales online. Currently, JencoMart has little presence in Asia, but considers that market key for future growth.
Solution Concept
JencoMart wants to migrate several critical applications to the cloud but has not completed a technical review to determine their suitability for the cloud and the engineering required for migration. They currently host all of these applications on infrastructure that is at its end of life and is no longer supported.
Existing Technical Environment
JencoMart hosts all of its applications in 4 data centers: 3 in North American and 1 in Europe, most applications are dual-homed.
JencoMart understands the dependencies and resource usage metrics of their on-premises architecture.
Application Customer loyalty portal
LAMP (Linux, Apache, MySQL and PHP) application served from the two JencoMart-owned U.S.
data centers.
Database
* Oracle Database stores user profiles
* PostgreSQL database stores user credentials
-homed in US West
Authenticates all users
Compute
* 30 machines in US West Coast, each machine has:
* 20 machines in US East Coast, each machine has:
-core CPU
RAID 1)
Storage
* Access to shared 100 TB SAN in each location
* Tape backup every week
Business Requirements
* Optimize for capacity during peak periods and value during off-peak periods
* Guarantee service availably and support
* Reduce on-premises footprint and associated financial and environmental impact.
* Move to outsourcing model to avoid large upfront costs associated with infrastructure purchase
* Expand services into Asia.
Technical Requirements
* Assess key application for cloud suitability.
* Modify application for the cloud.
* Move applications to a new infrastructure.
* Leverage managed services wherever feasible
* Sunset 20% of capacity in existing data centers
* Decrease latency in Asia
CEO Statement
JencoMart will continue to develop personal relationships with our customers as more people access the web. The future of our retail business is in the global market and the connection between online and in-store experiences. As a large global company, we also have a responsibility to the environment through 'green' initiatives and polices.
CTO Statement
The challenges of operating data centers prevents focus on key technologies critical to our long- term success. Migrating our data services to a public cloud infrastructure will allow us to focus on big data and machine learning to improve our service customers.
CFO Statement
Since its founding JencoMart has invested heavily in our data services infrastructure. However, because of changing market trends, we need to outsource our infrastructure to ensure our long- term success. This model will allow us to respond to increasing customer demand during peak and reduce costs.
For this question, refer to the JencoMart case study.
JencoMart has built a version of their application on Google Cloud Platform that serves traffic to Asia. You want to measure success against their business and technical goals. Which metrics should you track?
- A. The number of character sets present in the database
- B. Total visits, error rates, and latency from Asia
- C. Error rates for requests from Asia
- D. Latency difference between US and Asia
- E. Total visits and average latency for users in Asia
正解: E
解説:
From scenario:
Business Requirements include: Expand services into Asia
Technical Requirements include: Decrease latency in Asia
質問 86
You need to develop procedures to verify resilience of disaster recovery for remote recovery using GCP. Your production environment is hosted on-premises. You need to establish a secure, redundant connection between your on premises network and the GCP network.
What should you do?
- A. Verify that Dedicated Interconnect can replicate files to GCP. Verify that direct peering can establish a secure connection between your networks if Dedicated Interconnect fails.
- B. Verify that Dedicated Interconnect can replicate files to GCP. Verify that Cloud VPN can establish a secure connection between your networks if Dedicated Interconnect fails.
- C. Verify that the Transfer Appliance can replicate files to GCP. Verify that direct peering can establish a secure connection between your networks if the Transfer Appliance fails.
- D. Verify that the Transfer Appliance can replicate files to GCP. Verify that Cloud VPN can establish a secure connection between your networks if the Transfer Appliance fails.
正解: B
解説:
https://cloud.google.com/interconnect/docs/how-to/direct-peering
質問 87
Case Study: 3 - JencoMart Case Study
Company Overview
JencoMart is a global retailer with over 10,000 stores in 16 countries. The stores carry a range of goods, such as groceries, tires, and jewelry. One of the company's core values is excellent customer service. In addition, they recently introduced an environmental policy to reduce their carbon output by 50% over the next 5 years.
Company Background
JencoMart started as a general store in 1931, and has grown into one of the world's leading brands known for great value and customer service. Over time, the company transitioned from only physical stores to a stores and online hybrid model, with 25% of sales online. Currently, JencoMart has little presence in Asia, but considers that market key for future growth.
Solution Concept
JencoMart wants to migrate several critical applications to the cloud but has not completed a technical review to determine their suitability for the cloud and the engineering required for migration. They currently host all of these applications on infrastructure that is at its end of life and is no longer supported.
Existing Technical Environment
JencoMart hosts all of its applications in 4 data centers: 3 in North American and 1 in Europe, most applications are dual-homed.
JencoMart understands the dependencies and resource usage metrics of their on-premises architecture.
Application Customer loyalty portal
LAMP (Linux, Apache, MySQL and PHP) application served from the two JencoMart-owned U.S.
data centers.
Database
* Oracle Database stores user profiles
structure
* PostgreSQL database stores user credentials
-homed in US West
Authenticates all users
Compute
* 30 machines in US West Coast, each machine has:
* 20 machines in US East Coast, each machine has:
-core CPU
Storage
* Access to shared 100 TB SAN in each location
* Tape backup every week
Business Requirements
* Optimize for capacity during peak periods and value during off-peak periods
* Guarantee service availably and support
* Reduce on-premises footprint and associated financial and environmental impact.
* Move to outsourcing model to avoid large upfront costs associated with infrastructure purchase
* Expand services into Asia.
Technical Requirements
* Assess key application for cloud suitability.
* Modify application for the cloud.
* Move applications to a new infrastructure.
* Leverage managed services wherever feasible
* Sunset 20% of capacity in existing data centers
* Decrease latency in Asia
CEO Statement
JencoMart will continue to develop personal relationships with our customers as more people access the web. The future of our retail business is in the global market and the connection between online and in-store experiences. As a large global company, we also have a responsibility to the environment through 'green' initiatives and polices.
CTO Statement
The challenges of operating data centers prevents focus on key technologies critical to our long- term success. Migrating our data services to a public cloud infrastructure will allow us to focus on big data and machine learning to improve our service customers.
CFO Statement
Since its founding JencoMart has invested heavily in our data services infrastructure. However, because of changing market trends, we need to outsource our infrastructure to ensure our long- term success. This model will allow us to respond to increasing customer demand during peak and reduce costs.
For this question, refer to the JencoMart case study.
JencoMart has built a version of their application on Google Cloud Platform that serves traffic to Asia. You want to measure success against their business and technical goals. Which metrics should you track?
- A. The number of character sets present in the database
- B. Total visits, error rates, and latency from Asia
- C. Error rates for requests from Asia
- D. Latency difference between US and Asia
- E. Total visits and average latency for users in Asia
正解: E
解説:
From scenario:
Business Requirements include: Expand services into Asia
Technical Requirements include: Decrease latency in Asia
質問 88
You are developing your microservices application on Google Kubernetes Engine. During testing, you want to validate the behavior of your application in case a specific microservice should suddenly crash. What should you do?
- A. Configure Istio's traffic management features to steer the traffic away from a crashing microservice.
- B. Destroy one of the nodes of the Kubernetes cluster to observe the behavior.
- C. Add a taint to one of the nodes of the Kubernetes cluster. For the specific microservice, configure a pod anti-affinity label that has the name of the tainted node as a value.
- D. Use Istio's fault injection on the particular microservice whose faulty behavior you want to simulate.
正解: B
質問 89
Your customer is moving an existing corporate application to Google Cloud Platform from an on-premises data center. The business owners require minimal user disruption. There are strict security team requirements for storing passwords.
What authentication strategy should they use?
- A. Ask users to set their Google password to match their corporate password
- B. Federate authentication via SAML 2.0 to the existing Identity Provider
- C. Provision users in Google using the Google Cloud Directory Sync tool
- D. Use G Suite Password Sync to replicate passwords into Google
正解: C
解説:
Provision users to Google's directory
The global Directory is available to both Cloud Platform and G Suite resources and can be provisioned by a number of means. Provisioned users can take advantage of rich authentication features including single sign- on (SSO), OAuth, and two-factor verification.
You can provision users automatically using one of the following tools and services:
Google Cloud Directory Sync (GCDS)
Google Admin SDK
A third-party connector
GCDS is a connector that can provision users and groups on your behalf for both Cloud Platform and G Suite.
Using GCDS, you can automate the addition, modification, and deletion of users, groups, and non-employee contacts. You can synchronize the data from your LDAP directory server to your Cloud Platform domain by using LDAP queries. This synchronization is one-way: the data in your LDAP directory server is never modified.
References: https://cloud.google.com/docs/enterprise/best-practices-for-enterprise- organizations#authentication-and-identity
質問 90
......
無料Professional-Cloud-Architect試験問題Professional-Cloud-Architect実際の無料試験問題：https://www.goshiken.com/Google/Professional-Cloud-Architect-mondaishu.html
無料Professional-Cloud-Architect試験を簡単に100%合格できる試験問題集：https://drive.google.com/open?id=12T5mIsrSxefBtSJf5LVmHH5D_RAHYWn0