Examkin

Question

Difficulty: MediumCreating Conceptual, Logical, and Physical Architectures

An international agricultural technology company is defining the architectural components for an enterprise smart-farming telemetry platform on Google Cloud. The conceptual design requires decoupling high-throughput sensor data streams from downstream analytics services while establishing a strict security boundary to protect proprietary farm yield data against unauthorized exfiltration. When translating these conceptual and logical requirements into a physical architecture on Google Cloud, which TWO architectural decisions should the cloud architect implement? (Select TWO options.)

  1. Provision Cloud Pub/Sub topics as the physical messaging middleware to asynchronously ingest telemetry streams before triggering Dataflow processing jobs.Answer
  2. Configure VPC Service Controls around BigQuery and Cloud Storage resource boundaries to prevent authorized users from exfiltrating data to external GCP projects.Answer
  3. C
    Deploy a multi-region Cloud Spanner cluster to store standard operational relational metadata that is accessed primarily within a single geographic region.
  4. D
    Provision a Google Kubernetes Engine (GKE) Autopilot cluster to run lightweight, stateless HTTP API proxy endpoints.
  5. E
    Rely exclusively on fine-grained IAM roles to prevent internal users with valid credentials from exporting dataset objects to public Cloud Storage buckets.

Answer

The optimal physical architecture requires provisioning Cloud Pub/Sub as the asynchronous messaging ingestion layer and establishing VPC Service Controls around storage and analytics services to enforce security boundaries.
The correct choices properly translate high-level conceptual requirements into concrete physical GCP services. Cloud Pub/Sub satisfies the logical decoupling requirement for high-throughput stream ingestion. VPC Service Controls satisfy the physical security requirement by preventing data exfiltration across resource perimeters.

Step-by-Step Solution

1
Translate the conceptual requirement of decoupling high-volume ingestion streams into a physical GCP compute and messaging design.
Cloud Pub/Sub acts as the scalable physical buffer between ingestion sources and analytical processing pipelines.
Asynchronous messaging ensures system resiliency and temporal decoupling.
2
Translate the security requirement of preventing data exfiltration into a physical network and resource perimeter design.
VPC Service Controls define a security perimeter around sensitive data stores like BigQuery and Cloud Storage.
Identity and Access Management controls authorization, but VPC Service Controls physically block data movement across perimeter boundaries.

Key Concept

Mapping Conceptual and Logical Cloud Architectures to Physical GCP Resources
Rate this question

Topics

Creating Conceptual, Logical, and Physical Architectures