Professional Cloud Architect 시험 - Google실제시험문제와 답 - 168문항

Question No : 1

Your company wants to try out the cloud with low risk. They want to archive approximately 100 TB of their log data to the cloud and test the analytics features available to them there, while also retaining that data as a long-term disaster recovery backup.
Which two steps should they take? Choose 2 answers

A.Load logs into Google BigQuery.
B.Load logs into Google Cloud SQ
C.Import logs into Google Stackdriver.
D.Insert logs into Google Cloud Bigtable.
E.Upload log files into Google Cloud Storage.

정답:

Question No : 2

Your development team has installed a new Linux kernel module on the batch servers in Google Compute Engine (GCE) virtual machines (VMs) to speed up the nightly batch process. Two days after the installation, 50% of web application deployed in the same nightly batch run. You want to collect details on the failure to pass back to the development team.
Which three actions should you take? Choose 3 answers

A.Use Stackdriver Logging to search for the module log entries.
B.Read the debug GCE Activity log using the API or Cloud Console.
C.Use gcloud or Cloud Console to connect to the serial console and observe the logs.
D.Identify whether a live migration event of the failed server occurred, using in the activity log.
E.Adjust the Google Stackdriver timeline to match the failure time, and observe the batch server metrics.
F.Export a debug VM into an image, and run the image on a local server where kernel log messages will be displayed on the native screen.

정답:
Explanation:
https://www.flexera.com/blog/cloud/2013/12/google-compute-engine-live-migration-passes-the-test/
"With live migration, the virtual machines are moved without any downtime or noticeable service degradation"

Question No : 3

You are creating a solution to remove backup files older than 90 days from your backup Cloud Storage bucket. You want to optimize ongoing Cloud Storage spend.
What should you do?

A.Write a lifecycle management rule in XML and push it to the bucket with gsutil.
B.Write a lifecycle management rule in JSON and push it to the bucket with gsutil.
C.Schedule a cron script using gsutil is -lr gs://backups/** to find and remove items older than 90 days.
D.Schedule a cron script using gsutil ls -1 gs://backups/** to find and remove items older than 90 days and schedule it with cron.

정답:
Explanation:
https://cloud.google.com/storage/docs/gsutil/commands/lifecycle

Question No : 4

Your company's user-feedback portal comprises a standard LAMP stack replicated across two zones. It is deployed in the us-central1 region and uses autoscaled managed instance groups on all layers, except the database. Currently, only a small group of select customers have access to the portal. The portal meets a 99.99% availability SLA under these conditions However next quarter, your company will be making the portal available to all users, including unauthenticated users. You need to develop a resiliency testing strategy to ensure the system maintains the SLA once they introduce additional user load.
What should you do?

A.Capture existing users input, and replay captured user load until autoscale is triggered on all layers. At the same time, terminate all resources in one of the zones.
B.Create synthetic random user input, replay synthetic load until autoscale logic is triggered on at least one layer, and introduce "chaos" to the system by terminating random resources on both zones.
C.Expose the new system to a larger group of users, and increase group ' size each day until autoscale logic is tnggered on all layers. At the same time, terminate random resources on both zones.
D.Capture existing users input, and replay captured user load until resource utilization crosses 80%. Also, derive estimated number of users based on existing users usage of the app, and deploy enough resources to handle 200% of expected load.

정답:

Question No : 5

To reduce costs, the Director of Engineering has required all developers to move their development infrastructure resources from on-premises virtual machines (VMs) to Google Cloud Platform. These resources go through multiple start/stop events during the day and require state to persist. You have been asked to design the process of running a development environment in Google Cloud while providing cost visibility to the finance department.
Which two steps should you take? Choose 2 answers

A.Use the --no-auto-delete flag on all persistent disks and stop the V
B.Use the -auto-delete flag on all persistent disks and terminate the V
C.Apply VM CPU utilization label and include it in the BigQuery billing export.
D.Use Google BigQuery billing export and labels to associate cost to groups.
E.Store all state into local SSD, snapshot the persistent disks, and terminate the V
F.Store all state in Google Cloud Storage, snapshot the persistent disks, and terminate the V

정답:
Explanation:
https://cloud.google.com/billing/docs/how-to/export-data-bigquery

Question No : 6

Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform. Each tier (web, API, and database) scales independently of the others Network traffic should flow through the web to the API tier and then on to the database tier. Traffic should not flow between the web and the database tier.
How should you configure the network?

A.Add each tier to a different subnetwork.
B.Set up software based firewalls on individual VMs.
C.Add tags to each tier and set up routes to allow the desired traffic flow.
D.Add tags to each tier and set up firewall rules to allow the desired traffic flow.

정답:
Explanation:
https://aws.amazon.com/blogs/aws/building-three-tier-architectures-with-security-groups/
Google Cloud Platform(GCP) enforces firewall rules through rules and tags. GCP rules and tags can be defined once and used across all regions.
Reference:
https://cloud.google.com/docs/compare/openstack/
https://aws.amazon.com/it/blogs/aws/building-three-tier-architectures-with-security-groups/

Question No : 7

A production database virtual machine on Google Compute Engine has an ext4-formatted persistent disk for data files The database is about to run out of storage space.
How can you remediate the problem with the least amount of downtime?

A.In the Cloud Platform Console, increase the size of the persistent disk and use the resize2fs command in Linux.
B.Shut down the virtual machine, use the Cloud Platform Console to increase the persistent disk size, then restart the virtual machine.
C.In the Cloud Platform Console, increase the size of the persistent disk and verify the new space is ready to use with the fdisk command in Linux.
D.In the Cloud Platform Console, create a new persistent disk attached to the virtual machine, format and mount it, and configure the database service to move the files to the new disk.
E.In the Cloud Platform Console, create a snapshot of the persistent disk, restore the snapshot to a new larger disk, unmount the old disk, mount the new disk, and restart the database service.

정답:
Explanation:
On Linux instances, connect to your instance and manually resize your partitions and file systems to use the additional disk space that you added.
Extend the file system on the disk or the partition to use the added space. If you grew a partition on your disk, specify the partition. If your disk does not have a partition table, specify only the disk ID.
sudo resize2fs /dev/[DISK_ID][PARTITION_NUMBER]
where [DISK_ID] is the device name and [PARTITION_NUMBER] is the partition number for the device where you are resizing the file system.
Reference: https://cloud.google.com/compute/docs/disks/add-persistent-disk

Question No : 8

You have created several preemptible Linux virtual machine instances using Google Compute Engine. You want to properly shut down your application before the virtual machines are preempted.
What should you do?

A.Create a shutdown script named k99.shutdown in the /etc/rc.6.d/ directory.
B.Create a shutdown script registered as a xinetd service in Linux and configure a Stackdnver endpoint check to call the service.
C.Create a shutdown script and use it as the value for a new metadata entry with the key shutdown-script in the Cloud Platform Console when you create the new virtual machine instance.
D.Create a shutdown script, registered as a xinetd service in Linux, and use the gcloud compute instances add-metadata command to specify the service URL as the value for a new metadata entry with the key shutdown-script-url

정답:

Question No : 9

One of your primary business objectives is being able to trust the data stored in your application. You want to log all changes to the application data.
How can you design your logging system to verify authenticity of your logs?

A.Write the log concurrently in the cloud and on premises.
B.Use a SQL database and limit who can modify the log table.
C.Digitally sign each timestamp and log entry and store the signature.
D.Create a JSON dump of each log entry and store it in Google Cloud Storage.

정답:
Explanation:
https://cloud.google.com/storage/docs/access-logs
Reference: https://cloud.google.com/logging/docs/reference/tools/gcloud-logging

Question No : 10

Your marketing department wants to send out a promotional email campaign. The development team wants to minimize direct operation management. They project a wide range of possible customer responses, from 100 to 500,000 click-throughs per day. The link leads to a simple website that explains the promotion and collects user information and preferences.
Which infrastructure should you recommend? (CHOOSE TWO)

A.Use Google App Engine to serve the website and Google Cloud Datastore to store user data.
B.Use a Google Container Engine cluster to serve the website and store data to persistent disk.
C.Use a managed instance group to serve the website and Google Cloud Bigtable to store user data.
D.Use a single compute Engine virtual machine (VM) to host a web server, backed by Google Cloud SQ

정답:
Explanation:
Reference: https://cloud.google.com/storage-options/

Reference: https://cloud.google.com/storage-options/

Question No : 11

Route network traffic to specific services based on URL
Which combination of technologies will meet all of his requirements?

A.Google Container Engine, Jenkins, and Helm
B.Google Container Engine and Cloud Load Balancing
C.Google Compute Engine and Cloud Deployment Manager
D.Google Compute Engine, Jenkins, and Cloud Load Balancing

정답:
Explanation:
Helm for managing Kubernetes
Kubernetes can base on the URL to route traffic to different location (path)
https://cloud.google.com/kubernetes-engine/docs/tutorials/http-balancer eg.apiVersion: networking.k8s.io/v1beta1 kind: Ingress
metadata:
name: fanout-ingress
spec:
rules:
- http:
paths:
- path: /* backend: serviceName: web servicePort: 8080
- path: /v2/* backend: serviceName: web2 servicePort: 8080

Question No : 12

Your company just finished a rapid lift and shift to Google Compute Engine for your compute needs.
You have another 9 months to design and deploy a more cloud-native solution. Specifically, you want a system that is no-ops and auto-scaling.
Which two compute products should you choose? Choose 2 answers

A.Compute Engine with containers
B.Google Kubernetes Engine with containers
C.Google App Engine Standard Environment
D.Compute Engine with custom instance types
E.Compute Engine with managed instance groups

정답:
Explanation:
B: With Container Engine, Google will automatically deploy your cluster for you, update, patch, secure the nodes.
Kubernetes Engine's cluster autoscaler automatically resizes clusters based on the demands of the workloads you want to run.
C: Solutions like Datastore, BigQuery, AppEngine, etc are truly NoOps.
App Engine by default scales the number of instances running up and down to match the load, thus providing consistent performance for your app at all times while minimizing idle instances and thus reducing cost.
Note: At a high level, NoOps means that there is no infrastructure to build out and manage during usage of the platform. Typically, the compromise you make with NoOps is that you lose control of the underlying infrastructure.
Reference: https://www.quora.com/How-well-does-Google-Container-Engine-support-Google-Cloud-Platform%E2%80%99s-NoOps-claim

Question No : 13

You write a Python script to connect to Google BigQuery from a Google Compute Engine virtual machine. The script is printing errors that it cannot connect to BigQuery.
What should you do to fix the script?

A.Install the latest BigQuery API client library for Python
B.Run your script on a new virtual machine with the BigQuery access scope enabled
C.Create a new service account with BigQuery access and execute your script with that user
D.Install the bq component for gccloud with the command gcloud components install bq.

정답:
Explanation:
The error is most like caused by the access scope issue. When create new instance, you have the default Compute engine default service account but most serves access including BigQuery is not enable. Create an instance Most access are not enabled by default You have default service account but don't have the permission (scope) you can stop the instance, edit, change scope and restart it to enable the scope access. Of course, if you Run your script on a new virtual machine with the BigQuery access scope enabled, it also works
https://cloud.google.com/compute/docs/access/service-accounts

Question No : 14

A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center. He wants to migrate the custom tool to the new cloud environment. You want to advocate for the adoption of Google Cloud Deployment Manager.
What are two business risks of migrating to Cloud Deployment Manager? Choose 2 answers

A.Cloud Deployment Manager uses Python.
B.Cloud Deployment Manager APIs could be deprecated in the future.
C.Cloud Deployment Manager is unfamiliar to the company's engineers.
D.Cloud Deployment Manager requires a Google APIs service account to run.
E.Cloud Deployment Manager can be used to permanently delete cloud resources.
F.Cloud Deployment Manager only supports automation of Google Cloud resources.

정답:
Explanation:
https://cloud.google.com/deployment-manager/docs/deployments/deleting-deployments

Question No : 15

You want to enable your running Google Kubernetes Engine cluster to scale as demand for your application changes.
What should you do?

A.Add additional nodes to your Kubernetes Engine cluster using the following command:gcloud container clusters resizeCLUSTER_Name C -size 10
B.Add a tag to the instances in the cluster with the following command:gcloud compute instances add-tagsINSTANCE - -tags enable-autoscaling max-nodes-10
C.Update the existing Kubernetes Engine cluster with the following command:gcloud alpha container clustersupdate mycluster - -enable-autoscaling - -min-nodes=1 - -max-nodes=10
D.Create a new Kubernetes Engine cluster with the following command:gcloud alpha container clusterscreate mycluster - -enable-autoscaling - -min-nodes=1 - -max-nodes=10and redeploy your application

정답:
Explanation:
https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-autoscaler
To enable autoscaling for an existing node pool, run the following command:
gcloud container clusters update [CLUSTER_NAME] --enable-autoscaling \
--min-nodes 1 --max-nodes 10 --zone [COMPUTE_ZONE] --node-pool default-pool

Google Professional Cloud Architect 시험