Examkin

Question

Difficulty: HardSelecting and Designing Storage and Database Resources

An enterprise financial services organization is designing the data storage architecture for a new regional transaction auditing platform on Google Cloud. The system operates exclusively within a single Google Cloud region (us-east4) and requires a relational database supporting strict ACID transactions, complex SQL queries, and automatic failover across zones. Peak database throughput is estimated at 8,000 queries per second with required latencies under 10 milliseconds. A primary business requirement is to strictly minimize infrastructure costs by avoiding global database overhead. Furthermore, 2 PB of historical audit log files currently stored on-premises must be migrated offline to Cloud Storage, and data security governance mandates protecting Cloud Storage against unauthorized exfiltration by internal service accounts. Which architecture meets all technical and business requirements?

  1. Deploy Cloud SQL for PostgreSQL configured with High Availability (HA) across two zones in us-east4, utilize Google Cloud Transfer Appliance for the offline audit log migration, and enforce a VPC Service Controls perimeter around Cloud Storage.Answer
  2. B
    Deploy Cloud Spanner provisioned with a regional instance configuration in us-east4, utilize Google Cloud Transfer Appliance for the offline audit log migration, and enforce a VPC Service Controls perimeter around Cloud Storage.
  3. C
    Deploy Cloud SQL for PostgreSQL configured with High Availability (HA) across two zones in us-east4, utilize Storage Transfer Service over the existing public internet connection for the offline audit log migration, and enforce a VPC Service Controls perimeter around Cloud Storage.
  4. D
    Deploy Cloud SQL for PostgreSQL configured with High Availability (HA) across two zones in us-east4, utilize Google Cloud Transfer Appliance for the offline audit log migration, and rely exclusively on IAM object-level permissions to protect Cloud Storage buckets.

Answer

Deploy Cloud SQL for PostgreSQL configured with High Availability (HA) across two zones in us-east4, utilize Google Cloud Transfer Appliance for the offline audit log migration, and enforce a VPC Service Controls perimeter around Cloud Storage.
The solution correctly pairs Cloud SQL for PostgreSQL HA for single-region cost-effective relational processing, Transfer Appliance for multi-petabyte offline migration, and VPC Service Controls to prevent exfiltration.

Step-by-Step Solution

1
Evaluate the database tier requirements.
Cloud SQL for PostgreSQL with HA meets single-region ACID relational database needs with high throughput and lower cost than Cloud Spanner.
Cloud Spanner is designed for globally distributed, multi-region database workloads and carries higher baseline costs unnecessary for single-region requirements.
2
Evaluate the data transfer mechanism for 2 PB of historical logs.
Transfer Appliance is required for offline physical data shipment.
Transferring multi-petabyte datasets over internet connections using Storage Transfer Service would take months and saturate network capacity.
3
Evaluate security controls against data exfiltration.
VPC Service Controls must be configured around Cloud Storage resources.
IAM permissions control identity access, but VPC Service Controls define a security perimeter that prevents copying data to external projects or unauthorized storage buckets.

Key Concept

Selecting GCP database and data transfer services based on regional scale, cost optimization, physical migration limits, and security perimeters.
Rate this question

Topics

Selecting and Designing Storage and Database Resources