PCA practice questions 221–230

1. Question 221 · 335 in bank

   You are architecting a new application feature for a healthcare provider based in Qatar. The feature needs to summarize sensitive patient notes that are submitted by clinicians. A critical requirement is that the content of these patient notes must never be processed outside of Qatar's borders. You want to use a powerful, pre-trained generative model for the summarization task while strictly adhering to the data residency constraint. What should you do?

   • AWrite application code that sends the patient notes explicitly to the Gemini API endpoint in Qatar for summarization. Protect the API by VPC-Service Controls.
   • BUse Vertex AI Model Garden to select a Gemma model. Deploy this model to a Vertex AI Endpoint within a Google Cloud region located in Qatar.
   • CUse the Cloud Natural Language API to analyze the text and configure it to generate a summary of the patient notes.
   • DGather a large, anonymized dataset of medical notes. Use Vertex AI Training to train a custom summarization model from scratch, deploying it in a Qatar region.

   Show answer

   Answer: B

   Next question

2. Question 222 · 335 in bank

   As part of Dress4Win's plans to migrate to the cloud, they want to be able to set up a managed logging and monitoring system so they can handle spikes in their traffic load. They want to ensure that: * The infrastructure can be notified when it needs to scale up and down to handle the ebb and flow of usage throughout the day * Their administrators are notified automatically when their application reports errors. * They can filter their aggregated logs down in order to debug one piece of the application across many hosts Which Google StackDriver features should they use?

   • ALogging, Alerts, Insights, Debug
   • BMonitoring, Trace, Debug, Logging
   • CMonitoring, Logging, Alerts, Error Reporting
   • DMonitoring, Logging, Debug, Error Report

   Show answer

   Answer: C

   Explanation

   It is C. With D you cannot achieve "Their administrators are notified automatically when their application reports errors." However with Error Reporting(Log insights) - Notifies you when new errors are detected. So I will go with C

   Source: Adapted from community discussion — AWS56

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 223 · 335 in bank

   You are migrating a critical on-premises inventory management application to Google Cloud. The application is a monolith with a traditional relational database, and the immediate business goal is a rapid data center exit. The monolith is exposing an API to other business critical applications. The long-term vision is to modernize the application into globally distributed, cloud-native services to support the company’s expansion. You need to design the initial cloud architecture to ensure that future modernization causes the least possible disruption to other applications that depend on inventory data. The future modernization might require the API to change structure. What should you do?

   • AUse Service Directory to register the monolith's endpoint, allowing dependent applications to look up its address and connect directly.
   • BImplement a managed API facade with Apigee to handle all requests from dependent applications on behalf of the monolith’s backend.
   • CUse an internal load balancer to provide a stable IP for dependent applications to connect directly to the monolith's native API.
   • DProvide dependent applications with direct database access by creating secured SQL VIEWs on Cloud SQL for them to query.

   Show answer

   Answer: B

   Next question

4. Question 224 · 335 in bank

   Dress4Win would like to become familiar with deploying applications to the cloud by successfully deploying some applications quickly, as is. They have asked for your recommendation. What should you advise?

   • AIdentify self-contained applications with external dependencies as a first move to the cloud.
   • BIdentify enterprise applications with internal dependencies and recommend these as a first move to the cloud.
   • CSuggest moving their in-house databases to the cloud and continue serving requests to on-premise applications.
   • DRecommend moving their message queuing servers to the cloud and continue handling requests to on-premise applications.

   Show answer

   Answer: A

   Explanation

   A for me..Self contained application with no internal dependencies which means it does not need to integrate with any on-premise systems. External dependencies are easier to manage through API based integration in Cloud..Other options have either dependencies, or multiple hops between on-premise/cloud thereby causing latency issues,

   Source: Adapted from community discussion — PRC

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 225 · 335 in bank

   Your organization uses separate Google Cloud projects for shared services, development, testing, and production. • The shared services project hosts your private CI/CD runners and a central Artifact Registry • The development, testing, and production projects host the GKE clusters where applications are deployed. You need to design an architecture that allows the CI/CD runners to connect to the GKE clusters and the clusters to pull images from Artifact Registry, all using private IP addresses. However, direct network traffic between the development, testing, and production environments must be strictly prohibited. What should you do?

   • ACreate a separate VPC in each of the four projects. Connect each environment's VPC to the shared services VPC through VPC Network Peering.
   • BExpose the resources in the shared services project using an external load balancer. Implement a firewall rule to limit access.
   • CCreate a separate VPC in each project. Use VPC Network Peering to create a full mesh, connecting every VPC directly to every other VPC.
   • DConfigure the shared services project as a Shared VPC host. Create a single VPC in this host project and attach the environment projects as service projects.

   Show answer

   Answer: A

   Next question

6. Question 226 · 335 in bank

   Dress4Win has asked you for advice on how to migrate their on-premises MySQL deployment to the cloud. They want to minimize downtime and performance impact to their on-premises solution during the migration. Which approach should you recommend?

   • ACreate a dump of the on-premises MySQL master server, and then shut it down, upload it to the cloud environment, and load into a new MySQL cluster.
   • BSetup a MySQL replica server/slave in the cloud environment, and configure it for asynchronous replication from the MySQL master server on-premises until cutover.
   • CCreate a new MySQL cluster in the cloud, configure applications to begin writing to both on premises and cloud MySQL masters, and destroy the original cluster at cutover.
   • DCreate a dump of the MySQL replica server into the cloud environment, load it into: Google Cloud Datastore, and configure applications to read/write to Cloud Datastore at cutover.

   Show answer

   Answer: B

   Explanation

   I think D it can't be, because you want to load a dump in a Cloud Datastore. If it were a Cloud Storage, it could be, but a Cloud datastore is a nosql. It's true that you hace to use a dump, but to create a replica server/slave to promote to Cloud SLQ. So I think it is B.

   Source: Adapted from community discussion — chiar

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 227 · 335 in bank

   You are designing the network architecture for a public-facing, containerized web application deployed on Cloud Run. All incoming traffic must be inspected by a Cloud Armor web application firewall (WAF) before reaching the application You plan to use an Application Load Balancer, which will have the Cloud Armor policy attached. You must ensure that all public requests pass through the load balancer and any attempt to access the Cloud Run service directly through its default *.run.app URL is blocked. What should you do?

   • AEnable Identity-Aware Proxy (IAP) directly on the Cloud Run service to intercept and validate all incoming requests
   • BCreate a DNS entry to route traffic to Cloud Armor. Configure Cloud Armor to deny traffic from unknown IP addresses
   • CSet the Cloud Run ingress to Allow internal traffic and Cloud Load Balancing, and use a serverless NEG backend on the load balancer
   • DConfigure a VPC firewall rule with a high priority to deny all traffic that does not originate from the load balancer

   Show answer

   Answer: C

   Next question

8. Question 228 · 335 in bank

   Dress4Win has configured a new uptime check with Google Stackdriver for several of their legacy services. The Stackdriver dashboard is not reporting the services as healthy. What should they do?

   • AInstall the Stackdriver agent on all of the legacy web servers.
   • BIn the Cloud Platform Console download the list of the uptime servers' IP addresses and create an inbound firewall rule
   • CConfigure their load balancer to pass through the User-Agent HTTP header when the value matches GoogleStackdriverMonitoring-UptimeChecks (https:// cloud.google.com/monitoring)
   • DConfigure their legacy web servers to allow requests that contain user-Agent HTTP header when the value matches GoogleStackdriverMonitoring- UptimeChecks (https://cloud.google.com/monitoring)

   Show answer

   Answer: B

   Explanation

   It's B. B must be done. For a health check on http (port 80) you don't need to configure nothing in the server (it makes a get o something similar).

   Source: Adapted from community discussion — jcmoranp

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 229 · 335 in bank

   To improve governance and security, your organization has structured the Google Cloud environment using folders for different business units. Each business unit folder has subfolders for development, staging, and production environments, which must comply with internal security controls: • Production workloads must be protected from direct internet ingress by default unless explicitly tagged. • The application must be accessible to customers over HTTPS. You need to design a scalable and enforceable model that blocks internet ingress traffic to the production folders while selectively allowing direct HTTPS traffic to the necessary virtual machines. You must also ensure that individual project teams cannot overwrite these controls once they are implemented for all current and future production projects. What should you do?

   • AAt each production folder, apply a hierarchical firewall policy to deny all ingress except for HTTPS to tagged VMs.
   • BMandate the application teams to deploy a Terraform module to create VPC firewall rules in each project that deny ingress and allow HTTPS.
   • CAt the organization root, apply a hierarchical firewall policy to deny all ingress except for HTTPS to tagged VMs.
   • DAt each production folder, use an organization policy to block all external IPs and require teams to use external HTTPS load balancers.

   Show answer

   Answer: A

   Next question

10. Question 230 · 335 in bank

    As part of their new application experience, Dress4Wm allows customers to upload images of themselves. The customer has exclusive control over who may view these images. Customers should be able to upload images with minimal latency and also be shown their images quickly on the main application page when they log in. Which configuration should Dress4Win use?

    • AStore image files in a Google Cloud Storage bucket. Use Google Cloud Datastore to maintain metadata that maps each customer's ID and their image files.
    • BStore image files in a Google Cloud Storage bucket. Add custom metadata to the uploaded images in Cloud Storage that contains the customer's unique ID.
    • CUse a distributed file system to store customers' images. As storage needs increase, add more persistent disks and/or nodes. Assign each customer a unique ID, which sets each file's owner attribute, ensuring privacy of images.
    • DUse a distributed file system to store customers' images. As storage needs increase, add more persistent disks and/or nodes. Use a Google Cloud SQL database to maintain metadata that maps each customer's ID to their image files.

    Show answer

    Answer: A

    Explanation

    I think it's A, because in the question says "The customer has exclusive control over who may view these images" And I think it is easier to develop this feature having in cloud datastore a NOSQL database where you can manage the control of file's viewer

    Source: Adapted from community discussion — chiar

    References

    • AWS documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCA practice, question 221. 335 questions available.