All practice questions

An energy utility company is migrating its smart grid analytics and operations workload to Google Cloud. The current environment consists of $3.5\text{ PB}$ of historical smart meter reading archives stored on an on-premises Storage Area Network (SAN) and an active $8\text{ TB}$ operational MySQL database used for billing. The enterprise has a $1\text{ Gbps}$ Dedicated Interconnect link with a policy capping cloud migration bandwidth to $300\text{ Mbps}$. The target architecture requires minimal downtime for the operational database during cutover (under $1\text{ hour}$) and complete data integrity across all systems. In what sequence should the Cloud Architect execute these steps to perform the migration?

A cloud administrator is setting up access controls for a departmental team in Google Cloud across multiple projects inside a designated folder. Which TWO access management strategies follow Google Cloud recommended best practices for resource hierarchy and Identity and Access Management (IAM)?

An industrial equipment manufacturer needs to migrate $50\text{ TB}$ of unstructured binary firmware archives from on-premises network-attached storage (NAS) to Cloud Storage. The company maintains an existing $1\text{ Gbps}$ Dedicated Interconnect connection to Google Cloud, with $700\text{ Mbps}$ of available bandwidth dedicated to the transfer. Corporate security policy dictates that data must be transferred strictly over private networking without traversing the public internet, and the migration must complete in under $8$ days. Which data transfer architecture should you recommend?

An enterprise cloud architect needs to prevent developers from assigning external IP addresses to any new Compute Engine instances created within a specific organizational folder. Which Google Cloud solution should be implemented to enforce this restriction across all projects in the folder?

An online media company is preparing to launch a live video transcoding service using Terraform to provision Compute Engine regional Managed Instance Groups (MIGs). The architecture requires scaling up to 400 N2 vCPUs in the us-central1 region during peak events. However, new GCP projects have a default regional vCPU quota well below this requirement. What architectural action should be taken prior to the initial production deployment to prevent provisioning failures?

A DevOps team is preparing to provision additional Compute Engine instances for a seasonal analytics workload in a newly enabled Google Cloud region. Which action should the team take prior to deployment to prevent provisioning failures caused by resource limits?

A global logistics enterprise needs to connect its primary on-premises data center to a Google Cloud environment containing resources across two regions: us-east1 and europe-west3. The connection requires a guaranteed bandwidth of 8 Gbps to support continuous telemetry processing and sub-50ms latency. The organization does not have a physical presence in a Google colocation facility and must rely on a third-party network service provider. Additionally, on-premises workloads must seamlessly reach resources in both Google Cloud regions over the private connection. Which hybrid connectivity architecture should you implement?

An enterprise organization maintains a Google Cloud VPC network with subnets provisioned in both `us-central1` and `europe-west1`. The organization establishes a Dedicated Interconnect connection attached to a Cloud Router residing in `us-central1` to link their on-premises data center. Virtual machine instances deployed in `europe-west1` must dynamically receive on-premises routes advertised via BGP and route egress traffic to the on-premises network through the `us-central1` Cloud Router without establishing additional physical interconnects or manually managing static routes. Which VPC network routing configuration should you implement to satisfy this requirement?

An organization plans to establish a Dedicated Interconnect connection between its on-premises network and a Google Cloud Virtual Private Cloud (VPC) network. Which TWO configuration steps are required to set up this hybrid connectivity solution? (Select two.)

Match each application workload access pattern and architectural requirement to the most appropriate Google Cloud storage or database service.

A healthcare enterprise is modernizing its telemetry processing service on Google Cloud. The application receives persistent WebSocket connections streaming real-time metric updates from medical IoT devices. The workload is stateless and packaged as a Docker container. During nighttime off-peak hours, device traffic drops to zero, and the platform must automatically scale down to zero active instances to eliminate infrastructure costs. During daytime operational hours, the service experiences sudden traffic spikes and must eliminate cold-start latency for incoming connections while minimizing operational overhead by using a fully managed serverless infrastructure. Which compute architecture should the Lead Cloud Architect recommend?

A financial software firm uses Google Cloud Deploy to automate releases across multiple staging and production Kubernetes clusters. To meet strict regulatory auditing standards, all deployment target definitions and pipeline release manifests must be immutably tracked and automatically applied without manual interventions. However, an operator recently modified target cluster endpoints directly using the gcloud CLI to resolve an emergency outage, causing subsequent automated pipeline runs to fail due to state inconsistency. Which architectural practice should the Cloud Architect implement to eliminate configuration drift and ensure compliant pipeline provisioning?

An operations engineering team is setting up real-time operational monitoring for a web application hosted on Google Cloud. The team needs to track HTTP 500 internal server error occurrences logged by the web server and automatically trigger incident alerts whenever the error count exceeds 50 occurrences within a 5-minute rolling window. Which TWO actions must be configured to achieve this operational observability setup? (Select TWO.)

An enterprise software team is provisioning a private Google Kubernetes Engine (GKE) cluster in Google Cloud to process internal HR data. The cluster control plane must be isolated from public network access, allowing administrative gcloud and kubectl commands strictly from designated on-premise management subnet ranges via Cloud VPN. Additionally, automated deployment pipelines provisioning the node pools must adhere to the principle of least privilege when configuring service account bindings. Which TWO actions should you take to provision this cluster environment securely?

A cloud administrator is provisioning database and storage resources for a regional web application. The application requires a standard relational database to support regional OLTP operations, and organization policies mandate that encryption key management must be handled within Google Cloud without requiring administrators to store or pass raw key material. Which of the following provisioning decisions should be implemented? (Select TWO.)

A fintech company is designing the architecture for a multi-tenant payment platform on Google Cloud. The application architecture consists of two distinct workloads:

1. A stateless HTTP microservice that receives incoming webhook events from payment gateways, experiences unpredictable bursty traffic patterns, and must automatically scale down to zero when idle to minimize costs.
2. A stateful financial transaction streaming engine that maintains persistent TCP/WebSocket connections, requires low-level Linux kernel parameter tuning (`sysctl`), and relies on local state storage across connections.

Which TWO compute platform architectural choices should the cloud architect recommend to satisfy the technical requirements of both workloads while minimizing operational overhead?

An enterprise architecture team is designing governance and billing controls for a multi-project GCP organization running large-scale, intermittent batch processing workloads across multiple regions. The team needs to establish proactive quota management to prevent capacity exhaustion and implement automated cost controls without risking hard cut-offs of critical production data pipelines. Which TWO architectural actions should the Cloud Architect recommend?

An enterprise organization enforces strict data residency rules across its Google Cloud environment. The lead cloud architect applies an Organization Policy list constraint (`constraints/gcp.resourceLocations`) at the Production Folder level, restricting resource creation strictly to `us-central1` and `us-east1`. A project team managing an isolated application inside this Production Folder requires deploying Compute Engine instances in `europe-west1` to satisfy European regulatory requirements. How should the architect configure Google Cloud governance to permit `europe-west1` deployment for this specific project while maintaining the folder-level policy for all other projects?

A digital media organization is provisioning a private Google Kubernetes Engine (GKE) cluster in a dedicated Virtual Private Cloud (VPC) to run containerized video processing microservices. To comply with strict corporate governance, administrative access to the cluster control plane must be restricted exclusively to a specified corporate network CIDR block ($172.16.50.0/24$). Additionally, automated continuous integration/continuous delivery (CI/CD) worker virtual machines running in Compute Engine must be permitted to attach a dedicated service account to workloads without having privileges to alter service account IAM policies. Which combination of configuration steps should the cloud architect perform to provision this environment correctly?

A healthcare organization is migrating its electronic health record (EHR) system to Google Cloud. The architecture team requires a hybrid network solution connecting their on-premises data centers to a Virtual Private Cloud (VPC) network. To support continuous data replication, the architecture must deliver at least 20 Gbps of bandwidth and satisfy Google Cloud's 99.99% uptime Service Level Agreement (SLA) for Dedicated Interconnect. Which two architectural configurations must be implemented to achieve this SLA requirement? (Select TWO.)