Google Certified Professional - Cloud Architect (GCP) - Professional-Cloud-Architect Free Exam Questions

A. Expose the VPC to the on-premises network using IAM and VPC Sharing.

B. Use VPC Network Peering between the VPC and the on-premises network.

C. Deploy Cloud VPN Gateway in each region. Ensure that each region has at least one VPN tunnel to the on-premises peer gateway.

D. Create a global Cloud VPN Gateway with VPN tunnels from each region to the on-premises peer gateway.

A. Use Cloud Dataproc Hive as the data warehouse. Directly stream data into prtitioned Hive tables. Use Pig scripts to analyze data.

B. Use Cloud Dataproc Hive as the data warehouse. Upload gzip files to a MultiRegional Cloud Storage bucket. Upload this data into BigQuery using gcloud. Use Google data Studio for analysis and reporting.

C. Use BigQuery as the data warehouse. Connect all vehicles to the network and upload gzip files to a Multi-Regional Cloud Storage bucket using gcloud. Use Google Data Studio for analysis and reporting.

D. Use BigQuery as the data warehouse. Connect all vehicles to the network and stream data into BigQuery using Cloud Pub/Sub and Cloud Dataflow. Use Google Data Studio for analysis and reporting.

A. Create a BigQuery time-partitioned table for the European data, and set the partition expiration period to 36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36 months.

B. Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36 months.

C. Create a BigQuery time-partitioned table for the European data, and set the partition period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action with an Age condition of 36 months.

D. Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action when with an Age condition of
36 months.

A. Authenticate the on-premises infrastructure with a user account and provision service account keys for the VMs.

B. Provision service account keys for the on-premises infrastructure and use Google Cloud Platform (GCP) managed keys for the VMs

C. Provision service account keys for the on-premises infrastructure and for the GCE virtual machines (VMs).

D. Deploy a custom authentication service on GCE/Google Container Engine (GKE) for the on-premises infrastructure and use GCP managed keys for the VMs.

A. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage.

B. Configure Stackdriver Monitoring for all Projects with the default retention policies.

C. Configure Stackdriver Monitoring for all Projects, and export to BigQuery.

D. Grant the security team access to the logs in each Project.

A. Configure Identity-Aware Proxy (IAP) for the instance and ensure that you have the role of IAP- secured Tunnel User. Use the gcloud command line tool to ssh into the instance.

B. Create a bastion host in the network to SSH into the bastion host from your office location. From the bastion host, SSH into the desired instance.

C. Configure Cloud NAT on the subnet where the instance is hosted. Create an SSH connection to the Cloud NAT IP address to reach the instance.

D. Add all instances to an unmanaged instance group. Configure TCP Proxy Load Balancing with the instance group as a backend. Connect to the instance using the TCP Proxy IP.

A. Establish a centralized CI/CD pipeline with automated policy and security validation at each stage.Define the VPC Service Controls perimeter in a " dry run " mode in the development environment to audit and test for violations. Turn on VPC Service Controls perimeter for the production environment.

B. Use a single CI/CD pipeline for all business units that deploys directly to a single, shared project. Rely on IAM permissions to isolate workloads within the project. Turn on VPC Service Controls perimeter for the production environment.

C. Implement a centralized CI/CD pipeline that uses pre-approved Infrastructure as Code (IaC) templates.
To maximize agility, allow business units to clone and modify these templates freely, and use a phased rollout for VPC Service Controls.

D. Grant each business unit autonomy to create their own CI/CD pipelines and infrastructure, and conduct periodic security audits to ensure compliance with VPC Service Controls. Enforce IAM inheritance from the folder level.

A. Review the Serial Port logs for each Compute Engine instance that is serving as a node in the cluster.

B. Connect to the cluster using gcloud credentials and connect to a container in one of the pods to read the logs.

C. Review the Stackdriver logs for the specific Kubernetes Engine container that is serving the unresponsive part of the application.

D. Review the Stackdriver logs for each Compute Engine instance that is serving as a node in the cluster.

A. Configure Cloud NAT and select sub b m the NAT mapping section

B. Configure a bastion host instance in sub a to connect to instances in sub-b

C. Enable Identity Aware Proxy for TCP forwarding for instances in sub-b

D. Enable Private Google Access on sub-b

A. Deploy Crossplane for managing cloud resources as Kubernetes objects. FluxCD for GitOps-based configuration synchronization, and Kyverno for policy enforcement.

B. Utilize Config Sync as part of GKE to synchronize configurations from a centralized repository, and utilize Policy Controller to enforce policies using OPA Gatekeeper.

C. Leverage Argo CD for GitOps-based continuous delivery and Open Policy Agent (OPA) for policy enforcement, and develop a controller for multi-cluster configuration management.

D. Deploy Customize for configuration customization. Config Sync with multiple Git repositories, and a script to enforce security policies.