PCA practice questions 151–160

1. Question 151 · 335 in bank

   Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Google-recommended practices. What should you do?

   • AMove your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.
   • BMove your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.
   • CInstall gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.
   • DInstall gsutil on each server containing data. Use streaming transfers to upload the data into Cloud Storage.

   Show answer

   Answer: A

   Explanation

   It should be 'A' Transfer Appliance lets you quickly and securely transfer large amounts of data to Google Cloud Platform via a high capacity storage server that you lease from Google and ship to our datacenter. Transfer Appliance is recommended for data that exceeds 20 TB or would take more than a week to upload.

   Source: Adapted from community discussion — AshishK

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 152 · 335 in bank

   You have an application deployed on Google Kubernetes Engine using a Deployment named echo-deployment. The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application. What should you do?

   • AUse kubectl set image deployment/echo-deployment <new-image>
   • BUse the rolling update functionality of the Instance Group behind the Kubernetes cluster
   • CUpdate the deployment yaml file with the new container image. Use kubectl delete deployment/echo-deployment and kubectl create ג€"f <yaml-file>
   • DUpdate the service yaml file which the new container image. Use kubectl delete service/echo-service and kubectl create ג€"f <yaml-file>

   Show answer

   Answer: A

   Explanation

   Source: https://kubernetes.io/docs/concepts/workloads/controllers/deployment/#updating-a-deployment Deployment ensures that only a certain number of Pods are down while they are being updated. By default, it ensures that at least 75% of the desired number of Pods are up (25% max unavailable). Deployment also ensures that only a certain number of Pods are created above the desired number of Pods. By default, it ensures that at most 125% of the desired number of Pods are up (25% max surge).

   Source: Adapted from community discussion — RitwickKumar

   References

   • Google Cloud documentation
   • Kubernetes documentation
   • Google Cloud documentation

   Next question

3. Question 153 · 335 in bank

   Your company is using BigQuery as its enterprise data warehouse. Data is distributed over several Google Cloud projects. All queries on BigQuery need to be billed on a single project. You want to make sure that no query costs are incurred on the projects that contain the data. Users should be able to query the datasets, but not edit them. How should you configure users' access roles?

   • AAdd all users to a group. Grant the group the role of BigQuery user on the billing project and BigQuery dataViewer on the projects that contain the data.
   • BAdd all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery user on the projects that contain the data.
   • CAdd all users to a group. Grant the group the roles of BigQuery jobUser on the billing project and BigQuery dataViewer on the projects that contain the data.
   • DAdd all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery jobUser on the projects that contain the data.

   Show answer

   Answer: C

   Explanation

   Both A & C are correct but using the principle of least privileges C is the most appropriate. BigQuery User: (roles/bigquery.user) When applied to a dataset, this role provides the ability to read the dataset's metadata and list tables in the dataset. When applied to a project, this role also provides the ability to run jobs, including queries, within the project. A principal with this role can enumerate their own jobs, cancel their own jobs, and enumerate datasets within a project. Additionally, allows the creation of new datasets within the project; the creator is granted the BigQuery Data Owner role(roles/bigquery.dataOwner) on these new datasets. Lowest-level resources where you can grant this role: Dataset BigQuery Job User: (roles/bigquery.jobUser) Provides permissions to run jobs, including queries, within the project. Lowest-level resources where you can grant this role: Project Source: https://cloud.google.com/bigquery/docs/access-control

   Source: Adapted from community discussion — RitwickKumar

   References

   • Google Cloud documentation

   Next question

4. Question 154 · 335 in bank

   You have developed an application using Cloud ML Engine that recognizes famous paintings from uploaded images. You want to test the application and allow specific people to upload images for the next 24 hours. Not all users have a Google Account. How should you have users upload images?

   • AHave users upload the images to Cloud Storage. Protect the bucket with a password that expires after 24 hours.
   • BHave users upload the images to Cloud Storage using a signed URL that expires after 24 hours.
   • CCreate an App Engine web application where users can upload images. Configure App Engine to disable the application after 24 hours. Authenticate users via Cloud Identity.
   • DCreate an App Engine web application where users can upload images for the next 24 hours. Authenticate users via Cloud Identity.

   Show answer

   Answer: B

   Explanation

   Ans B "When should you use a signed URL? In some scenarios, you might not want to require your users to have a Google account in order to access Cloud Storage" "Signed URLs contain authentication information in their query string, allowing users without credentials to perform specific actions on a resource" https://cloud.google.com/storage/docs/access-control/signed-urls

   Source: Adapted from community discussion — MyPractice

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 155 · 335 in bank

   Your web application must comply with the requirements of the European Union's General Data Protection Regulation (GDPR). You are responsible for the technical architecture of your web application. What should you do?

   • AEnsure that your web application only uses native features and services of Google Cloud Platform, because Google already has various certifications and provides ג€pass-onג€ compliance when you use native features.
   • BEnable the relevant GDPR compliance setting within the GCPConsole for each of the services in use within your application.
   • CEnsure that Cloud Security Scanner is part of your test planning strategy in order to pick up any compliance gaps.
   • DDefine a design for the security of data in your web application that meets GDPR requirements.

   Show answer

   Answer: D

   Explanation

   D - https://cloud.google.com/security/gdpr The GDPR lays out specific requirements for businesses and organizations who are established in Europe or who serve users in Europe. It: Regulates how businesses can collect, use, and store personal data Builds upon current documentation and reporting requirements to increase accountability Authorizes fines on businesses who fail to meet its requirements

   Source: Adapted from community discussion — AshokC

   References

   • Google Cloud documentation
   • Microsoft Learn
   • Google Cloud documentation

   Next question

6. Question 156 · 335 in bank

   Select 2

   You need to reduce the number of unplanned rollbacks of erroneous production deployments in your company's web hosting platform. Improvement to the QA/ Test processes accomplished an 80% reduction. Which additional two approaches can you take to further reduce the rollbacks? (Choose two.)

   • AIntroduce a green-blue deployment model
   • BReplace the QA environment with canary releases
   • CFragment the monolithic platform into microservices
   • DReduce the platform's dependency on relational database systems
   • EReplace the platform's relational database systems with a NoSQL database

   Show answer

   Answer: AC

   Explanation

   D) and E) are pointless in this context. C) is certainly a good practice. Now between A) and B) A) Blue green deployment is an application release model that gradually transfers user traffic from a previous version of an app or microservice to a nearly identical new release—both of which are running in production. c) In software, a canary process is usually the first instance that receives live production traffic about a new configuration update, either a binary or configuration rollout. The new release only goes to the canary at first. The fact that the canary handles real user traffic is key: if it breaks, real users get affected, so canarying should be the first step in your deployment process, as opposed to the last step in testing in production. " While both green-blue and canary releases are useful, B) suggests "replacing QA" with canary releases - which is not good. QA got the issue down by 80%. Hence A) and C)

   Source: Adapted from community discussion — JustJack21

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 157 · 335 in bank

   You need to set up Microsoft SQL Server on GCP. Management requires that there's no downtime in case of a data center outage in any of the zones within a GCP region. What should you do?

   • AConfigure a Cloud SQL instance with high availability enabled.
   • BConfigure a Cloud Spanner instance with a regional instance configuration.
   • CSet up SQL Server on Compute Engine, using Always On Availability Groups using Windows Failover Clustering. Place nodes in different subnets.
   • DSet up SQL Server Always On Availability Groups using Windows Failover Clustering. Place nodes in different zones.

   Show answer

   Answer: D

   Explanation

   A seems correct. "... high availability (HA) configuration for Cloud SQL instances... A Cloud SQL instance configured for HA is also called a regional instance and is located in a primary and secondary zone within the configured region. In the event of an instance or zone failure, this configuration reduces downtime, and your data continues to be available to client applications."

   Source: Adapted from community discussion — learningpv

   References

   • Google Cloud documentation

   Next question

8. Question 158 · 335 in bank

   The development team has provided you with a Kubernetes Deployment file. You have no infrastructure yet and need to deploy the application. What should you do?

   • AUse gcloud to create a Kubernetes cluster. Use Deployment Manager to create the deployment.
   • BUse gcloud to create a Kubernetes cluster. Use kubectl to create the deployment.
   • CUse kubectl to create a Kubernetes cluster. Use Deployment Manager to create the deployment.
   • DUse kubectl to create a Kubernetes cluster. Use kubectl to create the deployment.

   Show answer

   Answer: B

   Explanation

   Deployment Manager is used to automate the process of provisioning infrastructure. Therefore, gcloud and Deployment Manager do the same thing. Meanwhile, kubectl is used to run commands against an already created cluster.

   Source: Adapted from community discussion — ghadxx

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 159 · 335 in bank

   You need to evaluate your team readiness for a new GCP project. You must perform the evaluation and create a skills gap plan which incorporates the business goal of cost optimization. Your team has deployed two GCP projects successfully to date. What should you do?

   • AAllocate budget for team training. Set a deadline for the new GCP project.
   • BAllocate budget for team training. Create a roadmap for your team to achieve Google Cloud certification based on job role.
   • CAllocate budget to hire skilled external consultants. Set a deadline for the new GCP project.
   • DAllocate budget to hire skilled external consultants. Create a roadmap for your team to achieve Google Cloud certification based on job role.

   Show answer

   Answer: B

   Explanation

   I think it's B. "You must perform the evaluation and create a skills gap plan incorporates the business goal of cost optimization." The goal is to cost optimize - they might have deployed 2 projects but are they cost optimized? I think the only way to evaluate the skills gap in cost optimization is to make them get certified and use the results to determine cost optimization skills gap. Quickly pushing another project deadline would not help with cost optimization.

   Source: Adapted from community discussion — mawsman

   References

   • Google Cloud documentation

   Next question

10. Question 160 · 335 in bank

    You are designing an application for use only during business hours. For the minimum viable product release, you'd like to use a managed product that automatically `scales to zero` so you don't incur costs when there is no activity. Which primary compute resource should you choose?

    • ACloud Functions
    • BCompute Engine
    • CGoogle Kubernetes Engine
    • DAppEngine flexible environment

    Show answer

    Answer: A

    Explanation

    A. Cloud Functions - managed service scales down to 0 B. Compute Engine - not a managed service C. Google Kubernetes Engine - not a managed service and wont scale down to 0 D. AppEngine flexible environment - managed service but wont scale down to 0

    Source: Adapted from community discussion — abirroy

    References

    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCA practice, question 151. 335 questions available.