PCA practice questions 291–300

1. Question 291 · 335 in bank

   Mountkirk Games needs to create a repeatable and configurable mechanism for deploying isolated application environments. Developers and testers can access each other's environments and resources, but they cannot access staging or production resources. The staging environment needs access to some services from production. What should you do to isolate development environments from staging and production?

   • ACreate a project for development and test and another for staging and production
   • BCreate a network for development and test and another for staging and production
   • CCreate one subnetwork for development and another for staging and production
   • DCreate one project for development, a second for staging and a third for production

   Show answer

   Answer: D

   Explanation

   D In the requirement, the staging environment needs access to production, not the other way around. Answer A could allow staging and production to access each other. In answer D, staging and production are in different project, you can limit the access from either side. So D is correct.

   Source: Adapted from community discussion — walkwolf3

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 292 · 335 in bank

   Mountkirk Games wants to set up a real-time analytics platform for their new game. The new platform must meet their technical requirements. Which combination of Google technologies will meet all of their requirements?

   • AKubernetes Engine, Cloud Pub/Sub, and Cloud SQL
   • BCloud Dataflow, Cloud Storage, Cloud Pub/Sub, and BigQuery
   • CCloud SQL, Cloud Storage, Cloud Pub/Sub, and Cloud Dataflow
   • DCloud Dataproc, Cloud Pub/Sub, Cloud SQL, and Cloud Dataflow
   • ECloud Pub/Sub, Compute Engine, Cloud Storage, and Cloud Dataproc

   Show answer

   Answer: B

   Explanation

   Correct Answer B Cloud Dataflow, Cloud Storage, Cloud Pub/Sub, and BigQuery A real time requires Stream / Messaging so Pub/Sub, Analytics by Big Query. Ingest millions of streaming events per second from anywhere in the world with Cloud Pub/Sub, powered by Google's unique, high-speed private network. Process the streams with Cloud Dataflow to ensure reliable, exactly-once, low-latency data transformation. Stream the transformed data into BigQuery, the cloud-native data warehousing service, for immediate analysis via SQL or popular visualization tools

   Source: Adapted from community discussion — sri007

   Next question

3. Question 293 · 335 in bank

   Select 2

   For this question, refer to the Mountkirk Games case study. Mountkirk Games wants to migrate from their current analytics and statistics reporting model to one that meets their technical requirements on Google Cloud Platform. Which two steps should be part of their migration plan? (Choose two.)

   • AEvaluate the impact of migrating their current batch ETL code to Cloud Dataflow.
   • BWrite a schema migration plan to denormalize data for better performance in BigQuery.
   • CDraw an architecture diagram that shows how to move from a single MySQL database to a MySQL cluster.
   • DLoad 10 TB of analytics data from a previous game into a Cloud SQL instance, and run test queries against the full dataset to confirm that they complete successfully.
   • EIntegrate Cloud Armor to defend against possible SQL injection attacks in analytics files uploaded to Cloud Storage.

   Show answer

   Answer: AB

   Explanation

   Correct Answer A, B Evaluate the impact of migrating their current batch ETL code to Cloud Dataflow Write a schema migration plan to denormalize data for better performance in BigQuery. Stream processing (ETL) Dataflow and Reference https://cloud.google.com/bigquery/docs/loading-data#loading_denormalized_nested_and_repeated_data

   Source: Adapted from community discussion — sri007

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 294 · 335 in bank

   For this question, refer to the Mountkirk Games case study. You need to analyze and define the technical architecture for the compute workloads for your company, Mountkirk Games. Considering the Mountkirk Games business and technical requirements, what should you do?

   • ACreate network load balancers. Use preemptible Compute Engine instances.
   • BCreate network load balancers. Use non-preemptible Compute Engine instances.
   • CCreate a global load balancer with managed instance groups and autoscaling policies. Use preemptible Compute Engine instances.
   • DCreate a global load balancer with managed instance groups and autoscaling policies. Use non-preemptible Compute Engine instances.

   Show answer

   Answer: D

   Explanation

   Agree "D". Preemptible VM is suitable for app which is fault-tolerant. Termination of preemptive VM might affect gaming experience, so it is not a good choice.

   Source: Adapted from community discussion — KNG

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 295 · 335 in bank

   Your company has hired an external auditing firm to perform a compliance audit. Your company’s governance policy requires that external auditors be managed in a single Google Group that is granted temporary, read-only access to a Cloud Storage bucket named audit-evidence-bucket. Access must be traceable to the individual auditor's identity and be active only for the duration of the audit engagement, which runs the entire month of October. You need a secure access control strategy that avoids administrative overhead and complies with your company's governance policy. What should you do?

   • AApply an IAM policy binding that grants the roles/storage.objectViewer role to the Google Group. Configure this binding with a time-based IAM Condition that automatically grants access from October 1 to November 1.
   • BCreate a service account, and grant it the roles/storage.objectViewer role on the bucket. Generate and share Signed URLs for each object in the bucket with an expiration date of November 1.
   • CUse Cloud Scheduler to run a Cloud Run functions script that adds the IAM binding of roles/storage.objectViewer to the Google Group on October 1 and another that removes the IAM binding on November 1.
   • DUse Workforce Identity Federation to map the auditors’ group to the Google Group. Bind the roles/storage.objectViewer role to this Google Group. Configure a 1-month session duration on the provider.

   Show answer

   Answer: A

   Next question

6. Question 296 · 335 in bank

   Select 2

   For this question, refer to the Mountkirk Games case study. Mountkirk Games wants to design their solution for the future in order to take advantage of cloud and technology improvements as they become available. Which two steps should they take? (Choose two.)

   • AStore as much analytics and game activity data as financially feasible today so it can be used to train machine learning models to predict user behavior in the future.
   • BBegin packaging their game backend artifacts in container images and running them on Google Kubernetes Engine to improve the ability to scale up or down based on game activity.
   • CSet up a CI/CD pipeline using Jenkins and Spinnaker to automate canary deployments and improve development velocity.
   • DAdopt a schema versioning tool to reduce downtime when adding new game features that require storing additional player data in the database.
   • EImplement a weekly rolling maintenance process for the Linux virtual machines so they can apply critical kernel patches and package updates and reduce the risk of 0-day vulnerabilities.

   Show answer

   Answer: AB

   Explanation

   A+B) =>as well as other metrics that provide deeper insight into usage patterns so we can adapt the game to target users. environment that provides autoscaling, low latency load balancing, and frees us up from managing physical servers.

   Source: Adapted from community discussion — dabrat

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 297 · 335 in bank

   You are using a GitHub repository for your application’s source code. You want to set up an efficient and secure continuous deployment process to automatically build and deploy the application to Cloud Run whenever a pull request is merged. What should you do?

   • ACreate a GitHub webhook trigger in Cloud Build. Once a pull request is merged, trigger Cloud Build to build a container image and save it in Artifact Registry. Use Config Sync to deploy the application to Cloud Run.
   • BCreate a workflow using GitHub Actions to build and deploy the application to Cloud Run once a pull request is merged. The workflow will use a service account key checked in with your source code for deployment permission.
   • CCreate a GitHub Enterprise trigger in Cloud Build. Once a pull request is merged, trigger Cloud Build to build and deploy the application to Cloud Run. Save the deployment credential to Secret Manager.
   • DConnect your repository using the Cloud Build GitHub app. Create a trigger in Cloud Build. Once a pull request is merged, trigger Cloud Build to build and deploy the application to Cloud Run.

   Show answer

   Answer: D

   Next question

8. Question 298 · 335 in bank

   For this question, refer to the Mountkirk Games case study. Mountkirk Games wants you to design a way to test the analytics platform's resilience to changes in mobile network latency. What should you do?

   • ADeploy failure injection software to the game analytics platform that can inject additional latency to mobile client analytics traffic.
   • BBuild a test client that can be run from a mobile phone emulator on a Compute Engine virtual machine, and run multiple copies in Google Cloud Platform regions all over the world to generate realistic traffic.
   • CAdd the ability to introduce a random amount of delay before beginning to process analytics files uploaded from mobile devices.
   • DCreate an opt-in beta of the game that runs on players' mobile devices and collects response times from analytics endpoints running in Google Cloud Platform regions all over the world.

   Show answer

   Answer: A

   Explanation

   The answer is A. The question asks - test the analytics platform's resilience to changes in mobile network latency. Only A adds latency to mobile network. C - adds delay at beginning of file processing. does not add delay/latency in mobile network. One of the lines in the requirements for analytics: Process data that arrives late because of slow mobile networks

   Source: Adapted from community discussion — a66030

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 299 · 335 in bank

   You are deploying a highly confidential data processing workload on Google Cloud. Your company’s compliance framework mandates that cryptographic keys used for encrypting data at rest must be generated and stored exclusively within a validated Hardware Security Module (HSM). You want to use a fully integrated Google Cloud managed service to handle the lifecycle and usage of these keys. What should you do?

   • AUse Customer-Supplied Encryption Keys (CSEK) by providing your on-premises generated key with each API request.
   • BImport your on-premises HSM key material into a Cloud KMS key with the SOFTWARE protection level.
   • CCreate a new key in Cloud Key Management Service (Cloud KMS) with the HSM protection level.
   • DConfigure Cloud External Key Manager (Cloud EKM) to connect to your on-premises HSM.

   Show answer

   Answer: C

   Next question

10. Question 300 · 335 in bank

    For this question, refer to the Mountkirk Games case study. You need to analyze and define the technical architecture for the database workloads for your company, Mountkirk Games. Considering the business and technical requirements, what should you do?

    • AUse Cloud SQL for time series data, and use Cloud Bigtable for historical data queries.
    • BUse Cloud SQL to replace MySQL, and use Cloud Spanner for historical data queries.
    • CUse Cloud Bigtable to replace MySQL, and use BigQuery for historical data queries.
    • DUse Cloud Bigtable for time series data, use Cloud Spanner for transactional data, and use BigQuery for historical data queries.

    Show answer

    Answer: D

    Explanation

    For the people who say it's C in Linux Academy, did you see the Technical requirements there? The old Technical Requirements have the line "Connect to a managed NoSQL database service" but in the Technical Requirements in Google official site and in this question the line is replaced if the following 2 lines "Connect to a transactional database service to manage user profiles and game state Store game activity in a timeseries database service for future analysis". And for them definitely D is the answer!

    Source: Adapted from community discussion — misho

    References

    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCA practice, question 291. 335 questions available.