GCP PCA

You are designing a future-proof hybrid environment that will require network connectivity between Google Cloud and your on-premises environment. You want to ensure that the Google Cloud environment you are designing is compatible with your on-premises networking environment. What should you do?

• A. Use the default VPC in your Google Cloud project. Use a Cloud VPN connection between your on-premises environment and Google Cloud.

• B. Create a custom VPC in Google Cloud in auto mode. Use a Cloud VPN connection between your on-premises environment and Google Cloud.

• C. Create a network plan for your VPC in Google Cloud that uses CIDR ranges that overlap with your on-premises environment. Use a Cloud Interconnect connection between your on-premises environment and Google Cloud.

• D. Create a network plan for your VPC in Google Cloud that uses non-overlapping CIDR ranges with your on-premises environment. Use a Cloud Interconnect connection between your on-premises environment and Google Cloud.

Your company wants to track whether someone is present in a meeting room reserved for a scheduled meeting. There are 1000 meeting rooms across 5 offices on 3 continents. Each room is equipped with a motion sensor that reports its status every second. You want to support the data ingestion needs of this sensor network. The receiving infrastructure needs to account for the possibility that the devices may have inconsistent connectivity. Which solution should you design?

• A. Have each device create a persistent connection to a Compute Engine instance and write messages to a custom application.

• B. Have devices poll for connectivity to Cloud SQL and insert the latest messages on a regular interval to a device specific table.

• C. Have devices poll for connectivity to Pub/Sub and publish the latest messages on a regular interval to a shared topic for all devices.​
  

• D. Have devices create a persistent connection to an App Engine application fronted by Cloud Endpoints, which ingest messages and write them to Datastore.

Your company wants to try out the cloud with low risk. They want to archive approximately 100 TB of their log data to the cloud and test the serverless analytics features available to them there, while also retaining that data as a long-term disaster recovery backup. Which two steps should they take? (Choose two)

• A. Load logs into BigQuery.​
  ​

• B. Load logs into Cloud SQL.​
  ​

• C. Import logs into Cloud Logging.​
  ​

• D. Insert logs into Cloud Bigtable.​
  ​

• E. Upload log files into Cloud Storage.

You set up an autoscaling managed instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address. You have verified that the appropriate web response is coming from each instance using the curl command. You want to ensure that the backend is configured correctly. What should you do?

• A. Ensure that a firewall rule exists to allow source traffic on HTTP/HTTPS to reach the load balancer.​
  ​

• B. Assign a public IP to each instance, and configure a firewall rule to allow the load balancer to reach the instance public IP.​
  ​

• C. Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.​
  ​

• D. Create a tag on each instance with the name of the load balancer. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.

Your organization has a 3-tier web application deployed in the same Google Cloud Virtual Private Cloud (VPC). Each tier (web, API, and database) scales independently of the others. Network traffic should flow through the web to the API tier, and then on to the database tier. Traffic should not flow between the web and the database tier. How should you configure the network with minimal steps?

• A. Add each tier to a different subnetwork.​

• ​
  B. Set up software-based firewalls on individual VMs.​

• ​
  C. Add tags to each tier and set up routes to allow the desired traffic flow.​

• D. Add tags to each tier and set up firewall rules to allow the desired traffic flow.

You are designing a large distributed application with 30 microservices. Each of your distributed microservices needs to connect to a database backend. You want to store the credentials securely. Where should you store the credentials?

• A. In the source code​

• B. In an environment variable​

• ​
  C. In a secret management system​

• D. In a config file that has restricted access through ACLs

Your customer is moving their corporate applications to Google Cloud. The security team wants detailed visibility of all resources in the organization. You use Resource Manager to set yourself up as the Organization Administrator. Which Identity and Access Management (IAM) roles should you give to the security team while following Google recommended practices?

• A. Organization viewer, Project owner​

• B. Organization viewer, Project viewer​

• C. Organization administrator, Project browser​

• D. Project owner, Network administrator

To reduce costs, the Director of Engineering has required all developers to move their development infrastructure resources from on-premises virtual machines (VMs) to Google Cloud. These resources go through multiple start/stop events during the day and require state to persist. You have been asked to design the process of running a development environment in Google Cloud while providing cost visibility to the finance department. Which two steps should you take? (Choose two)

• A. Use persistent disks to store the state. Start and stop the VM as needed.​

• B. Use the "gcloud --auto-delete" flag on all persistent disks before stopping the VM.​

• C. Use BigQuery billing export and labels to relate cost to groups.​

• D. Store all state in a Local SSD, snapshot the persistent disks, and terminate the VM.

The database administration team has asked you to help them improve the performance of their new database server running on Compute Engine. The database is used for importing and normalizing the company’s performance statistics. It is built with MySQL running on Debian Linux. They have an n1-standard-8 virtual machine with 80 GB of SSD zonal persistent disk which they can't restart until the next maintenance event. What should they change to get better performance from this system as soon as possible and in a cost-effective manner?

• A. Increase the virtual machine’s memory to 64 GB.​

• B. Create a new virtual machine running PostgreSQL.​

• C. Dynamically resize the SSD persistent disk to 500 GB.​

• D. Migrate their performance metrics warehouse to BigQuery.

Your company has decided to build a backup replica of their on-premises user authentication PostgreSQL database on Google Cloud Platform. The database is 4​
TB, and large updates are frequent. Replication requires private address space communication.​
Which networking approach should you use?

• A. Google Cloud Dedicated Interconnect​
  ​

• B. Google Cloud VPN connected to the data center network​
  ​

• C. A NAT and TLS translation gateway installed on-premises​
  ​

• D. A Google Compute Engine instance with a VPN server installed connected to the data center network