PCA practice questions 271–280

1. Question 271 · 335 in bank

   Select 2

   For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for securely deploying workloads to Google Cloud. You also need to ensure that only verified containers are deployed using Google Cloud services. What should you do? (Choose two.)

   • AEnable Binary Authorization on GKE, and sign containers as part of a CI/CD pipeline.
   • BConfigure Jenkins to utilize Kritis to cryptographically sign a container as part of a CI/CD pipeline.
   • CConfigure Container Registry to only allow trusted service accounts to create and deploy containers from the registry.
   • DConfigure Container Registry to use vulnerability scanning to confirm that there are no vulnerabilities before deploying the workload.

   Show answer

   Answer: AD

   Explanation

   A & D Binary Authorization to ensure only verified containers are deployed To ensure deployment are secure and and consistent, automatically scan images for vulnerabilities with container analysis (https://cloud.google.com/docs/ci-cd/overview?hl=en&skip_cache=true)

   Source: Adapted from community discussion — raf2121

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 272 · 335 in bank

   A large healthcare provider's primary electronic health record (EHR) application runs on Compute Engine instances with a Cloud SQL for PostgreSQL database, all located in the us-west1 region. A new regulatory mandate requires you to implement and document a business continuity plan (BCP). This plan must ensure that the EHR application can be fully recovered and operational in a different geographical region with a recovery time objective (RTO) of two hours and a recovery point objective (RPO) of 15 minutes. You need to design a disaster recovery strategy that meets these strict BCP requirements. What should you do?

   • ADeploy active managed instance groups (MIGs) in both us-west1 and us-east1, fronted by a global external HTTP(S) Load Balancer. For the database, use a cross-region read replica in us-east1, and rely on load balancer health checks to automatically fail over all traffic during an outage.
   • BUse Terraform to define the application’s compute infrastructure. During a disaster, configure the Cloud SQL database in us-west1 to use a cross-region read replica in us-east1, build the environment in us-east1, and promote the replica.
   • CTake daily snapshots of the Compute Engine disks and Cloud SQL database. Copy these snapshots to a Cloud Storage bucket in us-east1. During a disaster, manually restore the virtual machines (VMs) and database from the latest snapshots
   • DDeploy a regional MIG in us-west1 for high availability, and rely on the Google Cloud SLA to ensure the region remains online.

   Show answer

   Answer: A

   Next question

3. Question 273 · 335 in bank

   You need to upgrade the EHR connection to comply with their requirements. The new connection design must support business-critical needs and meet the same network and security policy requirements. What should you do?

   • AAdd a new Dedicated Interconnect connection.
   • BUpgrade the bandwidth on the Dedicated Interconnect connection to 100 G.
   • CAdd three new Cloud VPN connections.
   • DAdd a new Carrier Peering connection.

   Show answer

   Answer: A

   Explanation

   I will go A cause note in https://cloud.google.com/network-connectivity/docs/interconnect/how-to/dedicated/modifying-interconnects says " It is not possible to change the link type on an Interconnect connection circuit from 10 Gbps to 100 Gbps. If you want to migrate to 100 Gbps, you must first provision a new 100-Gbps Interconnect connection alongside your existing 10-Gbps connection, and then migrate the traffic onto the 100-Gbps connection."

   Source: Adapted from community discussion — [Removed]

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 274 · 335 in bank

   A financial services company is decommissioning one of its on-premises data centers. As part of this initiative, the company needs to perform a one-time migration of 500 ТВ of historical transaction archives to a Cloud Storage bucket for long-term retention. The data center’s internet egress is 1 Gbps, which is shared with critical business operations. You must complete the secure data transfer within a 60-day window to meet the decommissioning deadline. What should you do?

   • AProvision a Partner Interconnect connection with a 10 Gbps capacity to accelerate the data transfer, and then use Storage Transfer Service.
   • BWrite a script that uses the gcloud storage cp --parallel command to upload the data in chunks over the public internet during off-peak hours.
   • CUse Storage Transfer Service to create an agent-based transfer job that moves the data from the on-premises file servers directly to the Cloud Storage bucket.
   • DOrder a Transfer Appliance, copy the data to the appliance using your high-speed local network, and ship it back to Google to upload the data into your Cloud Storage bucket.

   Show answer

   Answer: D

   Next question

5. Question 275 · 335 in bank

   For this question, refer to the EHR Healthcare case study. You need to define the technical architecture for hybrid connectivity between EHR's on-premises systems and Google Cloud. You want to follow Google's recommended practices for production-level applications. Considering the EHR Healthcare business and technical requirements, what should you do?

   • AConfigure two Partner Interconnect connections in one metro (City), and make sure the Interconnect connections are placed in different metro zones.
   • BConfigure two VPN connections from on-premises to Google Cloud, and make sure the VPN devices on-premises are in separate racks.
   • CConfigure Direct Peering between EHR Healthcare and Google Cloud, and make sure you are peering at least two Google locations.
   • DConfigure two Dedicated Interconnect connections in one metro (City) and two connections in another metro, and make sure the Interconnect connections are placed in different metro zones.

   Show answer

   Answer: D

   Explanation

   If we notice this line in question - "Google's recommended practices for production-level applications" and then see overview of these 2 pages- https://cloud.google.com/network-connectivity/docs/interconnect/tutorials/production-level-overview and https://cloud.google.com/network-connectivity/docs/interconnect/tutorials/non-critical-overview. It is clear answer should be D , which is topology for production level applications recommended by Google

   Source: Adapted from community discussion — jask

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

6. Question 276 · 335 in bank

   Your company wants to optimize Google Cloud costs for their development and staging environments. These environments are workstations used by developers Monday through Friday, 9:00 AM to 6:00 PM local time. Currently, the environments run on a fleet of nl-standard-4 Compute Engine instances that operate 24/7, leading to a high monthly cost for resources that are idle more than 70% of the time. You need to implement a solution that significantly reduces the monthly cost of these non-production environments without impacting the development team's productivity during work hours. What should you do?

   • ASchedule the virtual machines to start and stop to match your team’s work schedule.
   • BPurchase three-year committed use discounts (CUDs) for the existing nl-standard-4 instances.
   • CUpgrade all instances to the N2 machine series.
   • DRe-architect the environments to run on a regional managed instance group (MIG) with autoscaling enabled.

   Show answer

   Answer: A

   Next question

7. Question 277 · 335 in bank

   For this question, refer to the EHR Healthcare case study. You are a developer on the EHR customer portal team. Your team recently migrated the customer portal application to Google Cloud. The load has increased on the application servers, and now the application is logging many timeout errors. You recently incorporated Pub/Sub into the application architecture, and the application is not logging any Pub/Sub publishing errors. You want to improve publishing latency. What should you do?

   • AIncrease the Pub/Sub Total Timeout retry value.
   • BMove from a Pub/Sub subscriber pull model to a push model.
   • CTurn off Pub/Sub message batching.
   • DCreate a backup Pub/Sub message queue.

   Show answer

   Answer: C

   Explanation

   Answer : C (https://cloud.google.com/pubsub/docs/publisher?hl=en#batching) Cost of Batching is latency for individual messages,. To minimize latency batching should be turned off

   Source: Adapted from community discussion — raf2121

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

8. Question 278 · 335 in bank

   A retail company s most critical application is its online payment processing system. The business has a requirement that the system must be able to survive a complete zonal outage while minimizing cost. You need a design solution that can handle a zonal failure. What should you do?

   • ADeploy the application in an active-active configuration using managed instance groups (MIGs) in two different regions, fronted by a global external HTTP(S) Load Balancer and backed by a multi-regional database like Spanner.
   • BDeploy the application on a regional MIG to provide high availability across multiple zones in the primary region.
   • CConfigure the regional MIG to use only Spot VMs to aggressively minimize operational costs while maintaining high availability.
   • DDeploy the application on Compute Engine instances across multiple regions, and rely on daily snapshots for recovery to achieve the lowest possible cost.

   Show answer

   Answer: B

   Next question

9. Question 279 · 335 in bank

   For this question, refer to the EHR Healthcare case study. In the past, configuration errors put public IP addresses on backend servers that should not have been accessible from the Internet. You need to ensure that no one can put external IP addresses on backend Compute Engine instances and that external IP addresses can only be configured on frontend Compute Engine instances. What should you do?

   • ACreate an Organizational Policy with a constraint to allow external IP addresses only on the frontend Compute Engine instances.
   • BRevoke the compute.networkAdmin role from all users in the project with front end instances.
   • CCreate an Identity and Access Management (IAM) policy that maps the IT staff to the compute.networkAdmin role for the organization.
   • DCreate a custom Identity and Access Management (IAM) role named GCE_FRONTEND with the compute.addresses.create permission.

   Show answer

   Answer: A

   Explanation

   It's A. Following is from Google page: "Using an Organization Policy, you can restrict external IP addresses to specific VMs with constraints to control use of external IP addresses for your VM instances within an organization or a project."

   Source: Adapted from community discussion — Snowball998877

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

10. Question 280 · 335 in bank

    Select 2

    Your company is a global financial services provider that processes and analyzes a high volume of credit card transactions in real time for fraud detection. Your analytics team must run complex batch queries on the same transaction data for daily reporting. You need to design a data processing solution that can handle both real-time and batch processing of the transaction data while minimizing operational overhead and infrastructure management. What should you do?

    • AUse Dataprep to ingest the transactions.
    • BUse Dataflow to process the streaming data.
    • CUse a Dataproc cluster for both the streaming and batch workloads.
    • DUse BigQuery for the batch analytics reports.
    • EUse Firestore to store and analyze the transaction data.

    Show answer

    Answer: BD

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCA practice, question 271. 335 questions available.