Examkin

Question

Difficulty: Very hardDesigning Infrastructure for Technical Requirements and High Availability

A healthcare analytics enterprise is designing a mission-critical patient monitoring architecture on Google Cloud. The system ingests continuous asynchronous event streams with highly variable memory demands and persists high-throughput transactional records. The solution must guarantee zero Recovery Point Objective (RPO=0) and under 30 seconds Recovery Time Objective (RTO) across full regional infrastructure failures. Furthermore, the architecture must minimize operational management overhead for stateless compute containers while strictly preventing authorized internal users from exfiltrating sensitive patient dataset records to external Cloud Storage buckets outside the organization. Which combination of GCP architectural components and security controls fulfills all technical and high availability requirements?

  1. Deploy Cloud Spanner across a multi-region configuration for transactional data, host stateless event microservices on Cloud Run with memory-based autoscaling, and establish VPC Service Controls around the storage and database resource perimeters.Answer
  2. B
    Deploy Cloud SQL for PostgreSQL in a High Availability regional configuration with cross-region asynchronous read replicas, host stateless event microservices on Cloud Run with memory-based autoscaling, and establish VPC Service Controls around the storage and database resource perimeters.
  3. C
    Deploy Cloud Spanner across a multi-region configuration for transactional data, host stateless event microservices on a dedicated regional Google Kubernetes Engine (GKE) cluster with Node Auto-provisioning, and establish VPC Service Controls around the storage and database resource perimeters.
  4. D
    Deploy Cloud Spanner across a multi-region configuration for transactional data, host stateless event microservices on Cloud Run with memory-based autoscaling, and rely exclusively on fine-grained IAM roles without VPC Service Controls to prevent external bucket access.

Answer

Deploy Cloud Spanner across a multi-region instance configuration, host stateless event microservices on Cloud Run, and establish VPC Service Controls around the storage and database perimeters.
The correct strategy combines multi-region Cloud Spanner for zero-RPO database replication, Cloud Run for zero-management serverless microservice execution, and VPC Service Controls to establish network-level perimeter boundaries preventing data exfiltration to unauthorized buckets.

Step-by-Step Solution

1
Evaluate multi-region data storage for RPO=0 requirements.
Cloud Spanner multi-region configurations utilize synchronous Paxos consensus across multi-region zones, guaranteeing RPO=0 and seamless failover within RTO limits.
Regional database solutions like Cloud SQL rely on asynchronous cross-region replication, which violates the strict zero RPO requirement during regional disasters.
2
Select the optimal compute abstraction for stateless event processing with minimal management overhead.
Cloud Run offers fully managed serverless execution for stateless containerized microservices, eliminating cluster administration.
GKE requires ongoing node management, control plane configuration, and capacity planning, which introduces unnecessary operational overhead for stateless microservice workloads.
3
Determine perimeter security mechanism against data exfiltration.
VPC Service Controls form a security perimeter restricting data movement to authorized GCP project boundaries.
IAM alone cannot stop authorized identities from transferring data to external, unauthorized storage buckets outside the security boundary.

Key Concept

Designing Multi-Region High Availability Architectures with Serverless Compute and Data Exfiltration Security
Estimated Time:3m 0s
Rate this question

Topics

Designing Infrastructure for Technical Requirements and High Availability