PCA practice questions 301–310

1. Question 301 · 335 in bank

   For this question, refer to the Mountkirk Games case study. Which managed storage option meets Mountkirk's technical requirement for storing game activity in a time series database service?

   • ACloud Bigtable
   • BCloud Spanner
   • CBigQuery
   • DCloud Datastore

   Show answer

   Answer: A

   Explanation

   For time series data and analytics purpose we have 2 Options i.e Bigquery and BigTable if we want less latency we need to choose Bigtable over Bigquery if we consider the Business requirement point (low latency) and Bigtable is more suitable for continues or frequent Read/Write operations Bigquery is more suitable in situations like when we have collected the data and need to do scan or learn about it, like in the previous question we are using Bigquery for Historical data I think we need to choose Bigtable (A)

   Source: Adapted from community discussion — kiran28

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 302 · 335 in bank

   You are designing a central, automated infrastructure deployment process for your organization using Terraform and Cloud Build. The security team prohibits the use of long-lived, static service account keys in any CI/CD pipeline. Additionally, while developers can propose infrastructure changes for peer review, they must not have permissions to directly apply changes in the production project. You need to design a secure and automated workflow for applying Terraform changes that meets the security team's requirements and ensures proper governance. What should you do?

   • AConfigure the Cloud Build pipeline to use service account impersonation. Set up a trigger that automatically runs terraform apply when a pull request is merged.
   • BUse service account impersonation in Cloud Build. Configure the pipeline to run terraform plan on pull requests, and require manual approval before running terraform apply.
   • CConfigure the pipeline to only run terraform plan. After a pull request is approved, have an authorized developer run terraform apply from a secured workstation.
   • DCreate a privileged service account and store its JSON key in Secret Manager. Configure the Cloud Build pipeline to fetch this key during execution to authenticate Terraform.

   Show answer

   Answer: B

   Next question

3. Question 303 · 335 in bank

   For this question, refer to the Mountkirk Games case study. You are in charge of the new Game Backend Platform architecture. The game communicates with the backend over a REST API. You want to follow Google-recommended practices. How should you design the backend?

   • ACreate an instance template for the backend. For every region, deploy it on a multi-zone managed instance group. Use an L4 load balancer.
   • BCreate an instance template for the backend. For every region, deploy it on a single-zone managed instance group. Use an L4 load balancer.
   • CCreate an instance template for the backend. For every region, deploy it on a multi-zone managed instance group. Use an L7 load balancer.
   • DCreate an instance template for the backend. For every region, deploy it on a single-zone managed instance group. Use an L7 load balancer.

   Show answer

   Answer: C

   Explanation

   I think answer is C. This game type is mobile. Check this link : https://cloud.google.com/solutions/gaming/cloud-game-infrastructure#dedicated_game_server I recommend this section : ‘Request/response based servers’ explain : In particular, however, mobile game servers, without a critical demand for real-time communication, have adopted HTTP request and response semantics like those used in web hosting. this game use HTTP load balancer. HTTP load balancer is L7.

   Source: Adapted from community discussion — JJu

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 304 · 335 in bank

   You need to optimize batch file transfers into Cloud Storage for Mountkirk Games' new Google Cloud solution. The batch files contain game statistics that need to be staged in Cloud Storage and be processed by an extract transform load (ETL) tool. What should you do?

   • AUse gsutil to batch move files in sequence.
   • BUse gsutil to batch copy the files in parallel.
   • CUse gsutil to extract the files as the first part of ETL.
   • DUse gsutil to load the files as the last part of ETL.

   Show answer

   Answer: B

   Explanation

   Correct Answer: B https://cloud.google.com/storage/docs/gsutil/commands/cp If you have a large number of files to transfer, you can perform a parallel multi-threaded/multi-processing copy using the top-level gsutil -m option (see gsutil help options): gsutil -m cp -r dir gs://my-bucket

   Source: Adapted from community discussion — MaxNRG

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 305 · 335 in bank

   You are implementing Firestore for Mountkirk Games. Mountkirk Games wants to give a new game programmatic access to a legacy game's Firestore database. Access should be as restricted as possible. What should you do?

   • ACreate a service account (SA) in the legacy game's Google Cloud project, add a second SA in the new game's IAM page, and then give the Organization Admin role to both SAs.
   • BCreate a service account (SA) in the legacy game's Google Cloud project, give the SA the Organization Admin role, and then give it the Firebase Admin role in both projects.
   • CCreate a service account (SA) in the legacy game's Google Cloud project, add this SA in the new game's IAM page, and then give it the Firebase Admin role in both projects.
   • DCreate a service account (SA) in the legacy game's Google Cloud project, give it the Firebase Admin role, and then migrate the new game to the legacy game's project.

   Show answer

   Answer: C

   Explanation

   I think it should not simply give out the Organization admin role so A and B is out. We should not migrate the new game to the lagacy game's project and thus D is out. So remain C is the only choice.

   Source: Adapted from community discussion — WFCheong

   Next question

6. Question 306 · 335 in bank

   Mountkirk Games wants to limit the physical location of resources to their operating Google Cloud regions. What should you do?

   • AConfigure an organizational policy which constrains where resources can be deployed.
   • BConfigure IAM conditions to limit what resources can be configured.
   • CConfigure the quotas for resources in the regions not being used to 0.
   • DConfigure a custom alert in Cloud Monitoring so you can disable resources as they are created in other regions.

   Show answer

   Answer: A

   Explanation

   A is correct . You can limit the physical location of a new resource with the Organization Policy Service resource locations constraint. You can use the location property of a resource to identify where it is deployed and maintained by the service. For data-containing resources of some Google Cloud services, this property also reflects the location where data is stored. This constraint allows you to define the allowed Google Cloud locations where the resources for supported services in your hierarchy can be created. After you define resource locations, this limitation will apply only to newly-created resources. Resources you created before setting the resource locations constraint will continue to exist and perform their function. https://cloud.google.com/resource-manager/docs/organization-policy/defining-locations

   Source: Adapted from community discussion — muhasinem

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 307 · 335 in bank

   You need to implement a network ingress for a new game that meets the defined business and technical requirements. Mountkirk Games wants each regional game instance to be located in multiple Google Cloud regions. What should you do?

   • AConfigure a global load balancer connected to a managed instance group running Compute Engine instances.
   • BConfigure kubemci with a global load balancer and Google Kubernetes Engine.
   • CConfigure a global load balancer with Google Kubernetes Engine.
   • DConfigure Ingress for Anthos with a global load balancer and Google Kubernetes Engine.

   Show answer

   Answer: D

   Explanation

   IMHO d) is the correct answer, not a) The game fulfills the business requirements as well as the technical requirements - so it is build upon an architecture that is multi regional. https://cloud.google.com/kubernetes-engine/docs/concepts/multi-cluster-ingress

   Source: Adapted from community discussion — XDevX

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

8. Question 308 · 335 in bank

   Your company is expanding its AI-powered operations nationwide and has chosen accelerator-based compute for the AI workloads. The batch image processing workloads are not time-sensitive and can tolerate interruptions. You need to rapidly deploy cost-effective accelerator nodes for these batch tasks, ensuring rapid deployment and data persistence when necessary. What should you do?

   • ADeploy standard VMs with configured accelerators and attached persistent disks.
   • BDeploy spot VMs with attached persistent disks and implement checkpoint mechanisms.
   • CDeploy spot VMs with local SSD to reduce time for bursty workloads
   • DDeploy Cloud Run functions with ephemeral local SSD.

   Show answer

   Answer: B

   Next question

9. Question 309 · 335 in bank

   Your development teams release new versions of games running on Google Kubernetes Engine (GKE) daily. You want to create service level indicators (SLIs) to evaluate the quality of the new versions from the user's perspective. What should you do?

   • ACreate CPU Utilization and Request Latency as service level indicators.
   • BCreate GKE CPU Utilization and Memory Utilization as service level indicators.
   • CCreate Request Latency and Error Rate as service level indicators.
   • DCreate Server Uptime and Error Rate as service level indicators.

   Show answer

   Answer: C

   Explanation

   IMHO c) is the correct answer, not a). Reason is, that we have to take the users perspective (according to the given question and also to understand what the user expects from us). The question might be whether to choose c) or d). Considering that our requirement is to minimize the latency, we have to choose c) - that means we are striving for no downtime of the service.

   Source: Adapted from community discussion — XDevX

   Next question

10. Question 310 · 335 in bank

    A large, multinational corporation is migrating to Google Cloud. The company has several distinct business units: Finance, Marketing, and Research and Development (R&D). The central security team has mandated governance requirements for each business unit: • Finance: Must be restricted to deploying resources only in specific, compliant regions (us-central1 and europe-west2). Access to their projects must be tightly controlled by a dedicated finance-admins group. • Marketing: Needs separate environments for production and development, with different teams managing each environment. • R&D: Requires maximum flexibility to experiment with new services but must be completely isolated to prevent any impact on production systems. • Global Auditing: A central compliance team requires read-only access to view all resources across the entire company for auditing purposes. You need to design a resource hierarchy that enforces these security policies at scale according to the Google Cloud Well-Architected Framework while providing the correct level of autonomy for each business unit. What should you do?

    • ACreate a folder for each department under the root Organization node. Apply the resource location Organization Policy on the Finance folder. Within the Marketing folder, create separate projects for mktg-prod and mktg-dev. Grant the compliance team the roles/viewer role at the Organization level.
    • BPlace all projects directly under the Organization node. Use network tags and service accounts to enforce security boundaries between the different department workloads. Apply the resource location Organization Policy on the Finance project.
    • CCreate separate Google Cloud Organizations for each department (Finance, Marketing, and R&D). Grant the compliance team the roles/viewer role for each organization.
    • DCreate a single project for each department. Apply the resource location policy directly to the Finance project. Grant the compliance team the roles/browser role on each project individually.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCA practice, question 301. 335 questions available.