PCA practice questions 71–80

1. Question 71 · 335 in bank

   You want to make a copy of a production Linux virtual machine in the US-Central region. You want to manage and replace the copy easily if there are changes on the production virtual machine. You will deploy the copy as a new instance in a different project in the US-East region. What steps must you take?

   • AUse the Linux dd and netcat commands to copy and stream the root disk contents to a new virtual machine instance in the US-East region.
   • BCreate a snapshot of the root disk and select the snapshot as the root disk when you create a new virtual machine instance in the US-East region.
   • CCreate an image file from the root disk with Linux dd command, create a new virtual machine instance in the US-East region
   • DCreate a snapshot of the root disk, create an image file in Google Cloud Storage from the snapshot, and create a new virtual machine instance in the US-East region using the image file the root disk.

   Show answer

   Answer: D

   Explanation

   D is correct. A and B are talking about appending the file system to a new VM, not setting it at the root in a new VM set. Option C is not offered within the GCP because the image must be on the GCP platform to run the gcloud of Google Console instructions to create a VM with the image.

   Source: Adapted from community discussion — Eroc

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

2. Question 72 · 335 in bank

   Your company runs several databases on a single MySQL instance. They need to take backups of a specific database at regular intervals. The backup activity needs to complete as quickly as possible and cannot be allowed to impact disk performance. How should you configure the storage?

   • AConfigure a cron job to use the gcloud tool to take regular backups using persistent disk snapshots.
   • BMount a Local SSD volume as the backup location. After the backup is complete, use gsutil to move the backup to Google Cloud Storage.
   • CUse gcsfise to mount a Google Cloud Storage bucket as a volume directly on the instance and write backups to the mounted location using mysqldump.
   • DMount additional persistent disk volumes onto each virtual machine (VM) instance in a RAID10 array and use LVM to create snapshots to send to Cloud Storage

   Show answer

   Answer: B

   Explanation

   I think it's B. If you use a tool like GCFUSE it will write immediatly to GCS which is a cost benefit because you don't need intermediate storage. In this case however "Quickly as possible" key for understanding. GCFUSE will write to GCS which is much slower than writing directly to an added SSD. During the write to GCS it would also execute reads for a longer period on the production database. Therefor writing to the extra SSD would be my recommended solution. Offloading from the SSD to GCS would not impact the running database because the data is already separated.

   Source: Adapted from community discussion — hannibal1969

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

3. Question 73 · 335 in bank

   Select 3

   You are helping the QA team to roll out a new load-testing tool to test the scalability of your primary cloud services that run on Google Compute Engine with Cloud Bigtable. Which three requirements should they include? (Choose three.)

   • AEnsure that the load tests validate the performance of Cloud Bigtable
   • BCreate a separate Google Cloud project to use for the load-testing environment
   • CSchedule the load-testing tool to regularly run against the production environment
   • DEnsure all third-party systems your services use is capable of handling high load
   • EInstrument the production services to record every transaction for replay by the load-testing tool
   • FInstrument the load-testing tool and the target services with detailed logging and metrics collection

   Show answer

   Answer: ABF

   Explanation

   after reading link: https://cloud.google.com/bigtable/docs/performance A:Run your typical workloads against Bigtable :Always run your own typical workloads against a Bigtable cluster when doing capacity planning, so you can figure out the best resource allocation for your applications. B. Create a separate Google Cloud project to use for the load-testing environment F : The most important/standard factor of testing, you gather logs and metrics in TEST environment for further scaling.

   Source: Adapted from community discussion — rishab86

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 74 · 335 in bank

   Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all projects in the organization. You provision the Google Cloud Resource Manager and set up yourself as the org admin. What Google Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team?

   • AOrg viewer, project owner
   • BOrg viewer, project viewer
   • COrg admin, project browser
   • DProject owner, network admin

   Show answer

   Answer: B

   Explanation

   A is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects. B is correct because:-Org viewer grants the security team permissions to view the organization's display name. -Project viewer grants the security team permissions to see the resources within projects. C is not correct because Org admin is too broad. The security team does not need to be able to make changes to the organization. D is not correct because Project owner is too broad. The security team does not need to be able to make changes to projects.

   Source: Adapted from community discussion — shandy

   References

   • Google Cloud documentation

   Next question

5. Question 75 · 335 in bank

   Select 2

   Your company places a high value on being responsive and meeting customer needs quickly. Their primary business objectives are release speed and agility. You want to reduce the chance of security errors being accidentally introduced. Which two actions can you take? (Choose two.)

   • AEnsure every code check-in is peer reviewed by a security SME
   • BUse source code security analyzers as part of the CI/CD pipeline
   • CEnsure you have stubs to unit test all interfaces between components
   • DEnable code signing and a trusted binary repository integrated with your CI/CD pipeline
   • ERun a vulnerability security scanner as part of your continuous-integration /continuous-delivery (CI/CD) pipeline

   Show answer

   Answer: BE

   Explanation

   I will go with B & E B – Static analysis inspects your source code to identify defects, vulnerabilities, and compliance issues as you code without having to run the program. This makes static analysis an essential component of your pipeline. https://www.perforce.com/blog/kw/static-analysis-ci-cd-pipelines E - Container Analysis provides vulnerability scanning and metadata storage for containers through Container Analysis. The scanning service performs vulnerability scans on images in Artifact Registry and Container Registry, then stores the resulting metadata and makes it available for consumption through an API. Metadata storage allows storing information from different sources, including vulnerability scanning, other Cloud services, and third-party providers. https://cloud.google.com/container-registry/docs/container-analysis

   Source: Adapted from community discussion — VishalB

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

6. Question 76 · 335 in bank

   You want to enable your running Google Kubernetes Engine cluster to scale as demand for your application changes. What should you do?

   • AAdd additional nodes to your Kubernetes Engine cluster using the following command: gcloud container clusters resize CLUSTER_Name ג€" -size 10
   • BAdd a tag to the instances in the cluster with the following command: gcloud compute instances add-tags INSTANCE - -tags enable- autoscaling max-nodes-10
   • CUpdate the existing Kubernetes Engine cluster with the following command: gcloud alpha container clusters update mycluster - -enable- autoscaling - -min-nodes=1 - -max-nodes=10
   • DCreate a new Kubernetes Engine cluster with the following command: gcloud alpha container clusters create mycluster - -enable- autoscaling - -min-nodes=1 - -max-nodes=10 and redeploy your application

   Show answer

   Answer: C

   Explanation

   A is incorrect because there is supposed to be two hypens "--" not one before size (https://cloud.google.com/sdk/gcloud/reference/container/clusters/resize). B is incorrect because it just adds a string to the cluster (https://cloud.google.com/sdk/gcloud/reference/compute/instances/add-tags). "C" is just as wrong as "A" because the documentation says it should be "--max-nodes" followed by "--min-nodes" (https://cloud.google.com/sdk/gcloud/reference/alpha/container/clusters/update), also the alpha command no longer works but it used to and is still up on google docs. This goes for "D" as well but D talks about making another, which doesn't have to be done because one it already up. So the debate is between A and C, and C used to work so C was chosen, although C also has spaces which never worked... So this question is an absolute thug tactic by a Google team to steal from the Google kingdom preventing the establishment of their library by failing people that actually know the science behind the technology. When you see this question at a test center I'd select C.

   Source: Adapted from community discussion — Eroc

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

7. Question 77 · 335 in bank

   Select 2

   Your marketing department wants to send out a promotional email campaign. The development team wants to minimize direct operation management. They project a wide range of possible customer responses, from 100 to 500,000 click-through per day. The link leads to a simple website that explains the promotion and collects user information and preferences. Which infrastructure should you recommend? (Choose two.)

   • AUse Google App Engine to serve the website and Google Cloud Datastore to store user data.
   • BUse a Google Container Engine cluster to serve the website and store data to persistent disk.
   • CUse a managed instance group to serve the website and Google Cloud Bigtable to store user data.
   • DUse a single Compute Engine virtual machine (VM) to host a web server, backend by Google Cloud SQL.

   Show answer

   Answer: AC

   Explanation

   A: Google App Engine is a fully managed platform for building and running web applications and APIs. It can automatically scale to meet high traffic demands, making it a good choice for serving the website for the promotional email campaign. Google Cloud Datastore can also scale automatically to meet high traffic demands, making it a good choice for storing user data. C: A managed instance group are managed as a single entity and can automatically scale up or down based on demand. This makes it a good choice for serving the website for the promotional email campaign. Google Cloud Bigtable is a fully managed, high-performance NoSQL database that can store and serve large amounts of structured data with low latency. It is designed to scale horizontally and can handle high traffic demands, making it a good choice for storing user data.

   Source: Adapted from community discussion — omermahgoub

   Next question

8. Question 78 · 335 in bank

   Select 2

   Your company just finished a rapid lift and shift to Google Compute Engine for your compute needs. You have another 9 months to design and deploy a more cloud-native solution. Specifically, you want a system that is no-ops and auto-scaling. Which two compute products should you choose? (Choose two.)

   • ACompute Engine with containers
   • BGoogle Kubernetes Engine with containers
   • CGoogle App Engine Standard Environment
   • DCompute Engine with custom instance types
   • ECompute Engine with managed instance groups

   Show answer

   Answer: BC

   Explanation

   Option B, Google Kubernetes Engine (GKE) with containers, is a managed Kubernetes service that automatically manages and scales containerized applications. GKE handles cluster management tasks like scaling, upgrades, and security patches, allowing you to focus on the application itself. Option C, Google App Engine Standard Environment, is a fully managed platform for building and deploying applications. It automatically scales applications based on demand and provides a no-ops experience. With App Engine Standard Environment, you don't need to worry about infrastructure management, as Google handles it for you.

   Source: Adapted from community discussion — JC0926

   Next question

9. Question 79 · 335 in bank

   You are creating a solution to remove backup files older than 90 days from your backup Cloud Storage bucket. You want to optimize ongoing Cloud Storage spend. What should you do?

   • AWrite a lifecycle management rule in XML and push it to the bucket with gsutil
   • BWrite a lifecycle management rule in JSON and push it to the bucket with gsutil
   • CSchedule a cron script using gsutil ls ג€"lr gs://backups/** to find and remove items older than 90 days
   • DSchedule a cron script using gsutil ls ג€"l gs://backups/** to find and remove items older than 90 days and schedule it with cron

   Show answer

   Answer: B

   Explanation

   gsutil command takes only json as input for lifecycle management. In case of API, both XML and json can be used. https://cloud.google.com/storage/docs/gsutil/commands/lifecycle https://cloud.google.com/storage/docs/xml-api/put-bucket-lifecycle https://cloud.google.com/storage/docs/json_api/v1/buckets/update

   Source: Adapted from community discussion — ghitesh

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

10. Question 80 · 335 in bank

    One of your primary business objectives is being able to trust the data stored in your application. You want to log all changes to the application data. How can you design your logging system to verify authenticity of your logs?

    • AWrite the log concurrently in the cloud and on premises
    • BUse a SQL database and limit who can modify the log table
    • CDigitally sign each timestamp and log entry and store the signature
    • DCreate a JSON dump of each log entry and store it in Google Cloud Storage

    Show answer

    Answer: C

    Explanation

    Correct answer is C (verified from Question Bank in Whizlabs.com) Feedback C (Correct answer) - Digitally sign each timestamp and log entry and store the signature. Answer A, B, and D don’t have any added value to verify the authenticity of your logs. Besides, Logs are mostly suitable for exporting to Cloud storage, BigQuery, and PubSub. SQL database is not the best way to be exported to nor store log data. Simplified Explanation To verify the authenticity of your logs if they are tampered with or forged, you can use a certain algorithm to generate digest by hashing each timestamp or log entry and then digitally sign the digest with a private key to generate a signature. Anybody with your public key can verify that signature to confirm that it was made with your private key and they can tell if the timestamp or log entry was modified. You can put the signature files into a folder separate from the log files. This separation enables you to enforce granular security policies.

    Source: Adapted from community discussion — get2dd

    References

    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation
    • Google Cloud documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCA practice, question 71. 335 questions available.