PCA practice questions 101–110

1. Question 101 · 335 in bank

   The database administration team has asked you to help them improve the performance of their new database server running on Google Compute Engine. The database is for importing and normalizing their performance statistics and is built with MySQL running on Debian Linux. They have an n1-standard-8 virtual machine with 80 GB of SSD persistent disk. What should they change to get better performance from this system?

   • AIncrease the virtual machine's memory to 64 GB
   • BCreate a new virtual machine running PostgreSQL
   • CDynamically resize the SSD persistent disk to 500 GB
   • DMigrate their performance metrics warehouse to BigQuery
   • EModify all of their batch jobs to use bulk inserts into the database

   Show answer

   Answer: C

   Explanation

   Answer is C because persistent disk performance is based on the total persistent disk capacity attached to an instance and the number of vCPUs that the instance has. Incrementing the persistent disk capacity will increment its throughput and IOPS, which in turn improve the performance of MySQL.

   Source: Adapted from community discussion — shandy

   References

   • Google Cloud documentation

   Next question

2. Question 102 · 335 in bank

   You have a Compute Engine application that you want to autoscale when total memory usage exceeds 80%. You have installed the Cloud Monitoring agent and configured the autoscaling policy as follows: ✑ Metric identifier: agent.googleapis.com/memory/percent_used ✑ Filter: metric.label.state = 'used' ✑ Target utilization level: 80 ✑ Target type: GAUGE You observe that the application does not scale under high load. You want to resolve this. What should you do?

   • AChange the Target type to DELTA_PER_MINUTE.
   • BChange the Metric identifier to agent.googleapis.com/memory/bytes_used.
   • CChange the filter to metric.label.state = 'used' AND metric.label.state = 'buffered' AND metric.label.state = 'cached' AND metric.label.state = 'slab'.
   • DChange the filter to metric.label.state = 'free' and the Target utilization to 20.

   Show answer

   Answer: C

   Explanation

   C is correct answer: A. Change the Target type to DELTA_PER_MINUTE. (in this case the utlization tagret need to be in minutes which is not the case its percentage % and not time based. B. Change the Metric identifier to agent.googleapis.com/memory/bytes_used. (not applicable) C. Change the filter to metric.label.state = 'used' AND metric.label.state = 'buffered' AND metric.label.state = 'cached' AND metric.label.state = 'slab'. (this gives total memory used) D. Change the filter to metric.label.state = 'free' and the Target utilization to 20. (you would still need to change the the percent_used to percent_free) https://stackoverflow.com/questions/69267526/what-is-disk-data-cached-in-the-memory-usage-chart-metrics-of-gcp-compute-in https://cloud.google.com/compute/docs/autoscaler/scaling-cloud-monitoring-metrics

   Source: Adapted from community discussion — Mahmoud_E

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 103 · 335 in bank

   You are deploying an application to Google Cloud. The application is part of a system. The application in Google Cloud must communicate over a private network with applications in a non-Google Cloud environment. The expected average throughput is 200 kbps. The business requires: ✑ as close to 100% system availability as possible ✑ cost optimization You need to design the connectivity between the locations to meet the business requirements. What should you provision?

   • AAn HA Cloud VPN gateway connected with two tunnels to an on-premises VPN gateway
   • BTwo Classic Cloud VPN gateways connected to two on-premises VPN gateways Configure each Classic Cloud VPN gateway to have two tunnels, each connected to different on-premises VPN gateways
   • CTwo HA Cloud VPN gateways connected to two on-premises VPN gateways Configure each HA Cloud VPN gateway to have two tunnels, each connected to different on-premises VPN gateways
   • DA single Cloud VPN gateway connected to an on-premises VPN gateway

   Show answer

   Answer: A

   Explanation

   A is true only if the on-prem (peer) gateway has two separate external P addresses. The HA VPN gateway uses two tunnels, one tunnel to each external IP address on the peer device as described in https://cloud.google.com/network-connectivity/docs/vpn/concepts/topologies#configurations_that_support_9999_availability C is a complete solution that provides full redundancy of the on-prem gateway. This is probably more expensive and having two HA VPN Gateways is an unusual configuration as the online documentation only describes using one HA VPN Gateway A appears to be correct with assumptions...!

   Source: Adapted from community discussion — minmin2020

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 104 · 335 in bank

   Your company has an application running on App Engine that allows users to upload music files and share them with other people. You want to allow users to upload files directly into Cloud Storage from their browser session. The payload should not be passed through the backend. What should you do?

   • A1. Set a CORS configuration in the target Cloud Storage bucket where the base URL of the App Engine application is an allowed origin. 2. Use the Cloud Storage Signed URL feature to generate a POST URL.
   • B1. Set a CORS configuration in the target Cloud Storage bucket where the base URL of the App Engine application is an allowed origin. 2. Assign the Cloud Storage WRITER role to users who upload files.
   • C1. Use the Cloud Storage Signed URL feature to generate a POST URL. 2. Use App Engine default credentials to sign requests against Cloud Storage.
   • D1. Assign the Cloud Storage WRITER role to users who upload files. 2. Use App Engine default credentials to sign requests against Cloud Storage.

   Show answer

   Answer: A

   Explanation

   It should be A. Since it is stated that the payload should not passed from the backend and be send directly to the bucket, then a CORS configuration should be set to the bucket.

   Source: Adapted from community discussion — mmathiou

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 105 · 335 in bank

   You are configuring the cloud network architecture for a newly created project in Google Cloud that will host applications in Compute Engine. Compute Engine virtual machine instances will be created in two different subnets (sub-a and sub-b) within a single region: • Instances in sub-a will have public IP addresses. • Instances in sub-b will have only private IP addresses. To download updated packages, instances must connect to a public repository outside the boundaries of Google Cloud. You need to allow sub-b to access the external repository. What should you do?

   • AEnable Private Google Access on sub-b.
   • BConfigure Cloud NAT and select sub-b in the NAT mapping section.
   • CConfigure a bastion host instance in sub-a to connect to instances in sub-b.
   • DEnable Identity-Aware Proxy for TCP forwarding for instances in sub-b.

   Show answer

   Answer: B

   Explanation

   IMHO A -> It doesn't make sense, Public Google Access allows you to access Google APIs without an external IP, which doesnt solve the problem C -> Bastion host is for the opposite purpose; accessing a machine administratively from the outside without an external IP, not a machine without an external IP accessing the outside. D -> It doesn't make sense. B -> It's the recommended solution for GCP

   Source: Adapted from community discussion — cchiaramelli

   Next question

6. Question 106 · 335 in bank

   Your company is planning to migrate their Windows Server 2022 from their on-premises data center to Google Cloud. You need to bring the licenses that are currently in use in on-premises virtual machines into the target cloud environment. What should you do?

   • A1. Create an image of the on-premises virtual machines and upload into Cloud Storage. 2. Import the image as a virtual disk on Compute Engine.
   • B1. Create standard instances on Compute Engine. 2. Select as the OS the same Microsoft Windows version that is currently in use in the on-premises environment.
   • C1. Create an image of the on-premises virtual machine. 2. Import the image as a virtual disk on Compute Engine. 3. Create a standard instance on Compute Engine, selecting as the OS the same Microsoft Windows version that is currently in use in the on-premises environment. 4. Attach a data disk that includes data that matches the created image.
   • D1. Create an image of the on-premises virtual machines. 2. Import the image as a virtual disk on Compute Engine using --os=windows-2022-dc-v. 3. Create a sole-tenancy instance on Compute Engine that uses the imported disk as a boot disk.

   Show answer

   Answer: D

   Explanation

   Well, yes, you actually need a sole-tenant instance to install a windows server with your licence. A lot of links were pasted here, but after reading a lot of them, I reached this one who explicitly states: 'To create a VM instance that uses the custom BYOL image, you must provision the VM instance on a sole-tenant node.' https://cloud.google.com/compute/docs/images/creating-custom-windows-byol-images#use_the_custom_image

   Source: Adapted from community discussion — e5019c6

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 107 · 335 in bank

   You are deploying an application to Google Cloud. The application is part of a system. The application in Google Cloud must communicate over a private network with applications in a non-Google Cloud environment. The expected average throughput is 200 kbps. The business requires: • 99.99% system availability • cost optimization You need to design the connectivity between the locations to meet the business requirements. What should you provision?

   • AAn HA Cloud VPN gateway connected with two tunnels to an on-premises VPN gateway.
   • BA Classic Cloud VPN gateway connected with two tunnels to an on-premises VPN gateway.
   • CTwo HA Cloud VPN gateways connected to two on-premises VPN gateways. Configure each HA Cloud VPN gateway to have two tunnels, each connected to different on-premises VPN gateways.
   • DA Classic Cloud VPN gateway connected with one tunnel to an on-premises VPN gateway.

   Show answer

   Answer: A

   Next question

8. Question 108 · 335 in bank

   Your company wants to migrate their 10-TB on-premises database export into Cloud Storage. You want to minimize the time it takes to complete this activity and the overall cost. The bandwidth between the on-premises environment and Google Cloud is 1 Gbps. You want to follow Google-recommended practices. What should you do?

   • ADevelop a Dataflow job to read data directly from the database and write it into Cloud Storage.
   • BUse the Data Transfer appliance to perform an offline migration.
   • CUse a commercial partner ETL solution to extract the data from the on-premises database and upload it into Cloud Storage.
   • DUpload the data with gcloud storage cp.

   Show answer

   Answer: D

   Explanation

   This Transfer Appliance docs says it is suitable when "It would take more than one week to upload your data over the network" Since 10TB would take way less than a week for that bandwidth, I would go for D https://cloud.google.com/transfer-appliance/docs/4.0/overview#suitability

   Source: Adapted from community discussion — cchiaramelli

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 109 · 335 in bank

   You are working at a financial institution that stores mortgage loan approval documents on Cloud Storage. Any change to these approval documents must be uploaded as a separate approval file. You need to ensure that these documents cannot be deleted or overwritten for the next 5 years. What should you do?

   • ACreate a retention policy on the bucket for the duration of 5 years. Create a lock on the retention policy.
   • BCreate a retention policy organizational constraint constraints/storage.retentionPolicySeconds at the organization level. Set the duration to 5 years.
   • CUse a customer-managed key for the encryption of the bucket. Rotate the key after 5 years.
   • DCreate a retention policy organizational constraint constraints/storage.retentionPolicySeconds at the project level. Set the duration to 5 years.

   Show answer

   Answer: A

   Explanation

   A is correct. - retention policy must be locked - the is now need for retention policy for all buckets in organization or all buckets in the project

   Source: Adapted from community discussion — Gino17m

   Next question

10. Question 110 · 335 in bank

    You have a Compute Engine application that you want to autoscale when total memory usage exceeds 80%. You have installed the Cloud Monitoring agent and configured the autoscaling policy as follows:

    

    You observe that the application does not scale under high load. You want to resolve this. What should you do?

    • AChange the Target type to DELTA_PER_MINUTE.
    • BChange the Metric identifier to agent.googleapis.com/memory/bytes_used.
    • CChange the filter to metric.label.state = ‘used’.
    • DChange the filter to metric.label.state = ‘free’ and the Target utilization to 20.

    Show answer

    Answer: C

    Explanation

    C. Change the filter to metric.label.state = ‘used’. The current filter is set up with multiple AND conditions, which means it's looking for a metric that simultaneously has all these states: 'used', 'buffered', 'cached', and 'slab'. This is logically impossible, as a memory location can't be in multiple states at once. Therefore, the filter will never match any metrics, and the autoscaling policy won't trigger.

    Source: Adapted from community discussion — JamesKarianis

    References

    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCA practice, question 101. 335 questions available.