PCA practice questions 61–70

1. Question 61 · 335 in bank

   You have deployed an application on Anthos clusters (formerly Anthos GKE). According to the SRE practices at your company, you need to be alerted if request latency is above a certain threshold for a specified amount of time. What should you do?

   • AInstall Anthos Service Mesh on your cluster. Use the Google Cloud Console to define a Service Level Objective (SLO), and create an alerting policy based on this SLO.
   • BEnable the Cloud Trace API on your project, and use Cloud Monitoring Alerts to send an alert based on the Cloud Trace metrics.
   • CUse Cloud Profiler to follow up the request latency. Create a custom metric in Cloud Monitoring based on the results of Cloud Profiler, and create an Alerting policy in case this metric exceeds the threshold.
   • DConfigure Anthos Config Management on your cluster, and create a yaml file that defines the SLO and alerting policy you want to deploy in your cluster.

   Show answer

   Answer: A

   Explanation

   Cloud Monitoring can trigger an alert when a Service is on track to violate an SLO. You can create an alerting policy based on the rate of consumption of your error budget. All alerts on error budgets have the same basic condition: a specified percentage of the error budget for the compliance period is consumed in a lookback period, which is a time period, such as the previous 60 minutes. When you create the alerting policy, Anthos Service Mesh automatically sets most of the conditions for the alert based on the settings in the SLO. You specify the lookback period and the consumption percentage. https://cloud.google.com/service-mesh/docs/observability/alert-policy-slo

   Source: Adapted from community discussion — examch

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 62 · 335 in bank

   Your company has a stateless web API that performs scientific calculations. The web API runs on a single Google Kubernetes Engine (GKE) cluster. The cluster is currently deployed in us-central1. Your company has expanded to offer your API to customers in Asia. You want to reduce the latency for users in Asia. What should you do?

   • ACreate a second GKE cluster in asia-southeast1, and expose both APIs using a Service of type LoadBalancer. Add the public IPs to the Cloud DNS zone.
   • BUse a global HTTP(s) load balancer with Cloud CDN enabled.
   • CCreate a second GKE cluster in asia-southeast1, and use kubemci to create a global HTTP(s) load balancer.
   • DIncrease the memory and CPU allocated to the application in the cluster.

   Show answer

   Answer: C

   Explanation

   Problem with A is that a service load bancer is not l7 https. The question is outdated, the answer will have been C. Now it would be Anthos multi cluster ingress -https://cloud.google.com/kubernetes-engine/docs/concepts/multi-cluster-ingress

   Source: Adapted from community discussion — Rzla

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 63 · 335 in bank

   You are migrating third-party applications from optimized on-premises virtual machines to Google Cloud. You are unsure about the optimum CPU and memory options. The applications have a consistent usage pattern across multiple weeks. You want to optimize resource usage for the lowest cost. What should you do?

   • ACreate an instance template with the smallest available machine type, and use an image of the third-party application taken from a current on-premises virtual machine. Create a managed instance group that uses average CPU utilization to autoscale the number of instances in the group. Modify the average CPU utilization threshold to optimize the number of instances running.
   • BCreate an App Engine flexible environment, and deploy the third-party application using a Dockerfile and a custom runtime. Set CPU and memory options similar to your application's current on-premises virtual machine in the app.yaml file.
   • CCreate multiple Compute Engine instances with varying CPU and memory options. Install the Cloud Monitoring agent, and deploy the third-party application on each of them. Run a load test with high traffic levels on the application, and use the results to determine the optimal settings.
   • DCreate a Compute Engine instance with CPU and memory options similar to your application's current on-premises virtual machine. Install the Cloud Monitoring agent, and deploy the third-party application. Run a load test with normal traffic levels on the application, and follow the Rightsizing Recommendations in the Cloud Console.

   Show answer

   Answer: D

   Explanation

   Answer is D. https://cloud.google.com/migrate/compute-engine/docs/4.9/concepts/planning-a-migration/cloud-instance-rightsizing?hl=en "Rightsizing provides two types of recommendations: 1. Performance-based recommendations: Recommends Compute Engine instances based on the CPU and RAM currently allocated to the on-premises VM. This recommendation is the default. 2. Cost-based recommendations: Recommends Compute Engine instances based on: - The current CPU and RAM configuration of the on-premises VM. - The average usage of this VM during a given period. To use this option, you must activate rightsizing monitoring with vSphere for this group of VMs and allow time for Migrate for Compute Engine to analyze usage.

   Source: Adapted from community discussion — pr2web

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 64 · 335 in bank

   Your company has a Google Cloud project that uses BigQuery for data warehousing. They have a VPN tunnel between the on-premises environment and Google Cloud that is configured with Cloud VPN. The security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing. What should they do?

   • AConfigure Private Google Access for on-premises only.
   • BPerform the following tasks: 1. Create a service account. 2. Give the BigQuery JobUser role and Storage Reader role to the service account. 3. Remove all other IAM access from the project.
   • CConfigure VPC Service Controls and configure Private Google Access.
   • DConfigure Private Google Access.

   Show answer

   Answer: C

   Explanation

   1) Ignore the default answer 2) Go through the discussions 3) Validate the most probable answer against google docs and your own studies.

   Source: Adapted from community discussion — JustJack21

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 65 · 335 in bank

   You are working at an institution that processes medical data. You are migrating several workloads onto Google Cloud. Company policies require all workloads to run on physically separated hardware, and workloads from different clients must also be separated. You created a sole-tenant node group and added a node for each client. You need to deploy the workloads on these dedicated hosts. What should you do?

   • AAdd the node group name as a network tag when creating Compute Engine instances in order to host each workload on the correct node group.
   • BAdd the node name as a network tag when creating Compute Engine instances in order to host each workload on the correct node.
   • CUse node affinity labels based on the node group name when creating Compute Engine instances in order to host each workload on the correct node group.
   • DUse node affinity labels based on the node name when creating Compute Engine instances in order to host each workload on the correct node.

   Show answer

   Answer: D

   Explanation

   Answer is D. Y'all not reading the fine details. The question is about aligning EACH client to their dedicated nodes (D), not to a node group (C). https://cloud.google.com/compute/docs/nodes/sole-tenant-nodes#default_affinity_labels The above reference clearly articulates the default affinity label for node group and node name. Unless we're thinking about growing each client to their own dedicated node groups (not in the current requirement), then the answer is not C, rather D. Compute Engine assigns two default affinity labels to each node: A label for the node group name: Key: compute.googleapis.com/node-group-name Value: Name of the node group. A label for the node name: Key: compute.googleapis.com/node-name Value: Name of the individual node.

   Source: Adapted from community discussion — pr2web

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

6. Question 66 · 335 in bank

   Your company's test suite is a custom C++ application that runs tests throughout each day on Linux virtual machines. The full test suite takes several hours to complete, running on a limited number of on-premises servers reserved for testing. Your company wants to move the testing infrastructure to the cloud, to reduce the amount of time it takes to fully test a change to the system, while changing the tests as little as possible. Which cloud infrastructure should you recommend?

   • AGoogle Compute Engine unmanaged instance groups and Network Load Balancer
   • BGoogle Compute Engine managed instance groups with auto-scaling
   • CGoogle Cloud Dataproc to run Apache Hadoop jobs to process each test
   • DGoogle App Engine with Google StackDriver for logging

   Show answer

   Answer: B

   Explanation

   New Question Your company has a Kubernetes application that pulls messages from Pub/Sub and stores them in Filestore. Because the application is simple, it was deployed as a single pod. The infrastructure team has analyzed Pub/Sub metrics and discovered that the application cannot process the messages in real time. Most of them wait for minutes before being processed. You need to scale the elaboration process that is 1/0-intensive. What should you do? A. Usekubectl autoscale deployment APP_NAME --max 6 --min 2 --cpu-percent 50 to configure Kubernetes autoscaling deployment. B. Configure a Kubemetes autoscaling deployment based on the subscription/push_request_latencies metric. C. Use the --enable-autoscaling flag when you create the Kubernetes cluster. D. Configure a Kubernetes autoscaling deployment based on the subscription/num_undelivered_messages metric.

   Source: Adapted from community discussion — Cloudguy123

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 67 · 335 in bank

   A lead software engineer tells you that his new application design uses websockets and HTTP sessions that are not distributed across the web servers. You want to help him ensure his application will run properly on Google Cloud Platform. What should you do?

   • AHelp the engineer to convert his websocket code to use HTTP streaming
   • BReview the encryption requirements for websocket connections with the security team
   • CMeet with the cloud operations team and the engineer to discuss load balancer options
   • DHelp the engineer redesign the application to use a distributed user session service that does not rely on websockets and HTTP sessions.

   Show answer

   Answer: C

   Explanation

   IMO C is ok. Beside the reasons mentioned above regarding why A, B and D are wrong, there are also: A and D are wrong because are abot changing the app - whereas in the task "You want to help him ensure his application will run properly on GCP" (not REDESIGN/CHANGE). B is wrong because you don't have to "Review the encryption requirements for websocket connections with the security team"...

   Source: Adapted from community discussion — lynx256

   References

   • Google Cloud documentation

   Next question

8. Question 68 · 335 in bank

   You have been asked to select the storage system for the click-data of your company's large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute. With bursts of up to 8,500 clicks per second. It must have been stored for future analysis by your data science and user experience teams. Which storage infrastructure should you choose?

   • AGoogle Cloud SQL
   • BGoogle Cloud Bigtable
   • CGoogle Cloud Storage
   • DGoogle Cloud Datastore

   Show answer

   Answer: B

   Explanation

   B is right. C is wrong, because Cloud Storage has IO write limits of 1000 writes / second. See source: https://cloud.google.com/storage/docs/request-rate#auto-scaling

   Source: Adapted from community discussion — Jambalaja

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

9. Question 69 · 335 in bank

   The application reliability team at your company this added a debug feature to their backend service to send all server events to Google Cloud Storage for eventual analysis. The event records are at least 50 KB and at most 15 MB and are expected to peak at 3,000 events per second. You want to minimize data loss. Which process should you implement?

   • Aג€¢ Append metadata to file body ג€¢ Compress individual files ג€¢ Name files with serverName ג€" Timestamp ג€¢ Create a new bucket if bucket is older than 1 hour and save individual files to the new bucket. Otherwise, save files to existing bucket.
   • Bג€¢ Batch every 10,000 events with a single manifest file for metadata ג€¢ Compress event files and manifest file into a single archive file ג€¢ Name files using serverName ג€" EventSequence ג€¢ Create a new bucket if bucket is older than 1 day and save the single archive file to the new bucket. Otherwise, save the single archive file to existing bucket.
   • Cג€¢ Compress individual files ג€¢ Name files with serverName ג€" EventSequence ג€¢ Save files to one bucket ג€¢ Set custom metadata headers for each object after saving
   • Dג€¢ Append metadata to file body ג€¢ Compress individual files ג€¢ Name files with a random prefix pattern ג€¢ Save files to one bucket

   Show answer

   Answer: D

   Explanation

   answer is definitely D https://cloud.google.com/storage/docs/request-rate#naming-convention "A longer randomized prefix provides more effective auto-scaling when ramping to very high read and write rates. For example, a 1-character prefix using a random hex value provides effective auto-scaling from the initial 5000/1000 reads/writes per second up to roughly 80000/16000 reads/writes per second, because the prefix has 16 potential values. If your use case does not need higher rates than this, a 1-character randomized prefix is just as effective at ramping up request rates as a 2-character or longer randomized prefix." Example: my-bucket/2fa764-2016-05-10-12-00-00/file1 my-bucket/5ca42c-2016-05-10-12-00-00/file2 my-bucket/6e9b84-2016-05-10-12-00-01/file3

   Source: Adapted from community discussion — rishab86

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

10. Question 70 · 335 in bank

    A recent audit revealed that a new network was created in your GCP project. In this network, a GCE instance has an SSH port open to the world. You want to discover this network's origin. What should you do?

    • ASearch for Create VM entry in the Stackdriver alerting console
    • BNavigate to the Activity page in the Home section. Set category to Data Access and search for Create VM entry
    • CIn the Logging section of the console, specify GCE Network as the logging section. Search for the Create Insert entry
    • DConnect to the GCE instance using project SSH keys. Identify previous logins in system logs, and match these with the project owners list

    Show answer

    Answer: C

    Explanation

    I am going to go with C. Answer A doesn't seem to fit because the matter of when a VM was created. Answer B focuses on Data Access logs which doesn't seem to fit since the matter of creating a network firewall rule is an Admin activity, not a data access activity. D focuses on who logged in which is good to know but doesn't answer the question of how the network was created. C focuses on logging, the selection of network events, and the Create/Insert entry.

    Source: Adapted from community discussion — clouddude

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCA practice, question 61. 335 questions available.