An enterprise logistics company is designing a new data architecture on Google Cloud for two distinct workloads running within a single GCP region:
1. A transactional order-processing engine requiring standard ANSI SQL support, single-region high availability with automatic zonal failover, and key governance managed via Cloud KMS.
2. A real-time audit logging component receiving thousands of append-only time-series events per second, requiring sub-10ms key-value write latencies and time-range scan capabilities.
Which TWO architectural storage and database service selections should the Cloud Architect make to fulfill these requirements with optimal cost and performance? (Select TWO)
- Provision Cloud SQL for PostgreSQL configured with High Availability (HA) across zones and Customer-Managed Encryption Keys (CMEK) for the transactional order-processing engine.Answer
- BProvision Cloud Spanner as the transactional engine to achieve multi-zone consistency within the single region.
- Provision Cloud Bigtable as the database engine for the high-throughput time-series audit logging component.Answer
- DImplement Customer-Supplied Encryption Keys (CSEK) managed directly within application code to encrypt the transactional database storage.
Answer
The architect should choose Cloud SQL for PostgreSQL configured with High Availability (HA) and Customer-Managed Encryption Keys (CMEK) for the transactional engine, and Cloud Bigtable for the high-throughput time-series audit logging component.
For single-region relational workloads requiring SQL compliance, automatic zonal failover, and key management integration, Cloud SQL configured with HA and CMEK is the cost-effective solution. For high-volume append-only time-series data needing low-latency writes and range queries, Cloud Bigtable provides optimized NoSQL performance.
Step-by-Step Solution
Key Concept
Selecting optimal Google Cloud storage and database services based on data access patterns, scalability needs, and enterprise encryption requirements.