最新的Google Professional-Cloud-Architect免費考試真題

問題1

To improve governance and security, your organization has structured the Google Cloud environment using folders for different business units. Each Business unit folder has subfolders for development, staging, and production environments, which must comply with internal security controls. You need to design a scalable and enforceable model that blocks internet ingress traffic to the production folders while selectively allowing direct HTTPS traffic to the necessary virtual machines. You must also ensure that individual project teams cannot overwrite these controls. What should you do?

A. At each production folder, use an organization policy to block all external IPs and require teams to use external HTTPS load balancers.

B. At each production folder, apply a hierarchical firewall policy to deny all ingress except for HTTPS to tagged VMs.

C. At the organization root, apply a hierarchical firewall policy to deny all ingress except for HTTPS to tagged VMs.

D. Mandate the application teams to deploy a Terraform module to create VPC firewall rules in each project that deny ingress and allow HTTPS.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題2

Your company provides a recommendation engine for retail customers. You are providing retail customers with an API where they can submit a user ID and the API returns a list of recommendations for that user. You are responsible for the API lifecycle and want to ensure stability for your customers in case the API makes backward-incompatible changes. You want to follow Google-recommended practices. What should you do?

A. Use a versioning strategy for the APIs that adds the suffix "DEPRECATED" to the current API version number on every backward-incompatible change. Use the current version number for the new API.

B. Create an automated process to generate API documentation, and update the public API documentation as part of the CI/CD process when deploying an update to the API.

C. Create a distribution list of all customers to inform them of an upcoming backward-incompatible change at least one month before replacing the old API with the new API.

D. Use a versioning strategy for the APIs that increases the version number on every backward- incompatible change.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題3

For this question, refer to the Dress4Win case study.
Dress4Win has end-to-end tests covering 100% of their endpoints. They want to ensure that the move to the cloud does not introduce any new bugs. Which additional testing methods should the developers employ to prevent an outage?

A. They should add additional unit tests and production scale load tests on their cloud staging environment.

B. They should run the end-to-end tests in the cloud staging environment to determine if the code is working as intended.

C. They should add canary tests so developers can measure how much of an impact the new release causes to latency.

D. They should enable Google Stackdriver Debugger on the application code to show errors in the code.

正確答案: A

問題4

A news teed web service has the following code running on Google App Engine. During peak load, users report that they can see news articles they already viewed. What is the most likely cause of this problem?

A. The URL of the API needs to be modified to prevent caching.

B. The HTTP Expires header needs to be set to -1 to stop caching.

C. The session variable is local to just a single instance.

D. The session variable is being overwritten in Cloud Datastore.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題5

Your company pushes batches of sensitive transaction data from its application server VMs to Cloud Pub/Sub for processing and storage. What is the Google-recommended way for your application to authenticate to the required Google Cloud services?

A. Generate an OAuth2 access token for accessing Cloud Pub/Sub, encrypt it, and store it in Cloud Storage for access from each VM.

B. Create a gateway to Cloud Pub/Sub using a Cloud Function, and grant the Cloud Function service account the appropriate Cloud Pub/Sub IAM roles.

C. Ensure that VM service accounts do not have access to Cloud Pub/Sub, and use VM access scopes to grant the appropriate Cloud Pub/Sub IAM roles.

D. Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.

正確答案: D

問題6

You are responsible for the architecture of a critical ecommerce application. The application ' s web frontends run on Compute Engine instances deployed across multiple zones within a single region. The architecture must be highly available and self-healing. If a zone becomes unavailable, the system must automatically recreate the lost capacity in the available zones. To maximize efficiency, you need to ensure that all provisioned compute resources actively serve traffic during normal operations, and user traffic is au tomatically and seamlessly directed away from any failed instance or zone. What should you do?

A. Create a single regional unmanaged instance group spanning all three zones. Place a regional external Application Load Balancer in front of the group, and configure its backend service with a health check.

B. Create a single regional managed instance group (MIG) configured to span all three zones. Place a regional external Application Load Balancer in front of the MIG. And configure its backend service with a health check.

C. Create three separate zonal managed instance groups (MIGs), and use Cloud DNS with weighted routing to distribute traffic across the public IP address of an instance in each MIG.

D. Configure a regional external Application Load Balancer with a primary regional managed instance group (MIG) as its backend service, and configure a second regional MIG as a failover backend.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題7

For this question, refer to the Helicopter Racing League (HRL) case study. HRL wants better prediction accuracy from their ML prediction models. They want you to use Google's AI Platform so HRL can understand and interpret the predictions. What should you do?

A. Use Vision AI.

B. Use Google Cloud's operations suite.

C. Use Explainable AI.

D. Use Jupyter Notebooks.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題8

You are deploying a critical application with a stateless, containerized (rented on Cloud Run and a Cloud SQL tor PostgreSQL backend The application experiences unpredictable traffic spikes, and the business requires the ability to immediately roll back a failed deployment to the last known good state You need to apply a deployment strategy that aligns with Site Reliability Engineering (SRE) principles for both the application code and the database schema updates, while meeting the business ' s requirements What should you do?

A. Use a single CI/CD pipeline that first applies database schema changes and then deploys the new Cloud Run revision

B. Separate CI/CD pipelines for database schema migrations from application deployments When deploying a new Cloud Run revision, use gradual traffic split.

C. Package the database schema migration script within the container to be executed on every container startup before the application process begins.

D. Configure the CI/CD pipeline to use the: latest Last container tag for deployments, with database schema changes applied manually as needed.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題9

Your company has an application running on multiple Compute Engine instances. You need to ensure that the application can communicate with an on-premises service that requires high throughput via internal IPs, while minimizing latency. What should you do?

A. Configure a direct peering connection between the on-premises environment and Google Cloud.

B. Configure a Cloud Dedicated Interconnect connection between the on-premises environment and Google Cloud.

C. Use Cloud VPN to configure a VPN tunnel between the on-premises environment and Google Cloud.

D. Use OpenVPN to configure a VPN tunnel between the on-premises environment and Google Cloud.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題10

Your company has a Google Cloud project that uses BigQuery for data warehousing on a pay-per-use basis.
You want to monitor queries in real time to discover the most costly queries and which users spend the most.
What should you do?

A. 1. Activate billing export into BigQuery.
2. Perform a BigQuery query on the billing table to extract the information you need.

B. 1. Create a Cloud Logging sink to export BigQuery data access logs to Cloud Storage. 2. Develop a Dataflow pipeline to compute the cost of queries split by users.

C. 1. In the BigQuery dataset that contains all the tables to be queried, add a label for each user that can launch a query.
2. Open the Billing page of the project.
3. Select Reports.
4. Select BigQuery as the product and filter by the user you want to check.

D. 1. Create a Cloud Logging sink to export BigQuery data access logs to BigQuery.
2. Perform a BigQuery query on the generated table to extract the information you need.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題11

You need to migrate Hadoop jobs for your company's Data Science team without modifying the underlying infrastructure. You want to minimize costs and infrastructure management effort. What should you do?

A. Manually deploy a Hadoop cluster on Compute Engine using preemptible instances.

B. Create a Dataproc cluster using standard worker instances.

C. Manually deploy a Hadoop cluster on Compute Engine using standard instances.

D. Create a Dataproc cluster using spot worker instances.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題12

You company has a Kubernetes application that pulls messages from Pub/Sub and stores them in Firestore.
Because the application is simple, it was deployed as a single pod. The infrastructure team has analyzed Pub
/Sub metrics and discovered that the application cannot process the messages in real time. Most of them wait for minutes before being processed. You need to scale the elaboration process that is I/O-intensive. What should you do?

A. Use the -enable- autoscaling flag when you create the Kubernetes cluster

B. Configure a Kubernetes autoscaling based on the subscription/push_request metric.

C. Use kubectl autoscale deployment APP_NAME -max 6 -min 2 -cpu- percent 50 to configure Kubernetes autoscaling deployment

D. Configure a Kubernetes autoscaling based on the subscription/num_undelivered message metric.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題13

Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable. What should you do?

A. Make the container tag match the source code commit hash.

B. Make sure a developer is tagging the code commit with the date and time of commit

C. Make sure the developer is tagging the commits with :latest

D. Make sure a developer is adding a comment to the commit that links to the deployment.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題14

Your applications will be writing their logs to BigQuery for analysis. Each application should have its own table.
Any logs older than 45 days should be removed. You want to optimize storage and follow Google recommended practices. What should you do?

A. Rely on BigQuery's default behavior to prune application logs older than 45 days

B. Make the tables time-partitioned, and configure the partition expiration at 45 days

C. Create a script that uses the BigQuery command line tool (bq) to remove records older than 45 days

D. Configure the expiration time for your tables at 45 days

正確答案: B

說明：（僅 Fast2test 成員可見）

最新的Google Certified Professional - Cloud Architect (GCP) - Professional-Cloud-Architect免費考試真題

聯系我們

站內鏈接

最新更新