Examkin

Question

Difficulty: MediumCreating Conceptual, Logical, and Physical Architectures

A semiconductor manufacturing enterprise is translating its conceptual cloud architecture for a real-time wafer defect analysis platform into logical and physical architectures on Google Cloud. The conceptual model establishes three requirements: 1) high-throughput ingestion and low-latency storage of high-frequency sensor telemetry, 2) large-scale analytical processing for yield optimization, and 3) strict data isolation controls preventing data exfiltration to external projects. Which TWO architectural decisions correctly map these conceptual requirements to physical Google Cloud components and controls? (Select TWO)

  1. Provision Cloud Pub/Sub for telemetry ingestion, Cloud Bigtable for storing low-latency time-series data, and BigQuery for yield analytics.Answer
  2. Implement VPC Service Controls around the Google Cloud project resources to prevent exfiltration of sensitive telemetry data to unauthorized external projects.Answer
  3. C
    Provision a multi-region Cloud Spanner instance as the primary storage layer for raw time-series sensor telemetry and operational metrics.
  4. D
    Rely strictly on granular IAM roles granted to service accounts to guarantee that internal users cannot copy data to external Cloud Storage buckets.
  5. E
    Deploy a multi-zone Google Kubernetes Engine (GKE) cluster dedicated solely to hosting a single stateless payload parsing microservice.

Answer

The platform should utilize Cloud Pub/Sub, Cloud Bigtable, and BigQuery for the telemetry ingestion, time-series storage, and analytics pipeline, alongside VPC Service Controls to prevent data exfiltration across the perimeter.
The combination of Cloud Pub/Sub, Cloud Bigtable, and BigQuery correctly satisfies the ingestion, low-latency operational storage, and yield analytical requirements of the platform. Additionally, VPC Service Controls enforce a perimeter around the project, preventing network and API-based data exfiltration to unauthorized external destinations.

Step-by-Step Solution

1
Evaluate data ingestion and storage requirements against GCP physical services.
Cloud Pub/Sub absorbs stream spikes, Cloud Bigtable provides sub-10ms writes for time-series sensor telemetry, and BigQuery supports SQL analytics for yield optimization.
This combination fulfills both operational write throughput and analytical query needs cost-effectively.
2
Evaluate security perimeter and data exfiltration requirements.
VPC Service Controls establish network and API-level boundaries preventing copying data outside approved projects.
IAM credentials alone cannot block exfiltration by authorized identities.

Key Concept

Mapping conceptual business requirements to physical GCP services and network security boundaries
Rate this question

Topics

Creating Conceptual, Logical, and Physical Architectures