Examkin

Soru

Zorluk: OrtaCreating Conceptual, Logical, and Physical Architectures

An enterprise automotive manufacturer is finalizing the cloud architecture for a global connected vehicle diagnostic platform. The conceptual architecture defines four primary logical requirements: (1) asynchronous ingestion of high-volume telemetry from millions of vehicles, (2) low-latency read/write access for time-series vehicle health metrics, (3) cost-effective long-term archival of raw diagnostic logs for safety compliance, and (4) perimeter isolation to prevent authorized users from exfiltrating data to external Google Cloud projects. Which set of Google Cloud physical services correctly implements this logical design?

  1. Cloud Pub/Sub for telemetry ingestion, Cloud Bigtable for time-series health metrics, Cloud Storage for raw diagnostic log archival, and VPC Service Controls for perimeter exfiltration protection.Cevap
  2. B
    Cloud Pub/Sub for telemetry ingestion, Cloud Spanner for time-series health metrics, Cloud Storage for raw diagnostic log archival, and VPC Service Controls for perimeter exfiltration protection.
  3. C
    Cloud Pub/Sub for telemetry ingestion, Cloud Bigtable for time-series health metrics, Cloud Storage for raw diagnostic log archival, and IAM fine-grained custom roles for perimeter exfiltration protection.
  4. D
    A self-managed Apache Kafka cluster on Google Kubernetes Engine (GKE) for telemetry ingestion, Cloud Bigtable for time-series health metrics, Cloud Storage for raw diagnostic log archival, and VPC Service Controls for perimeter exfiltration protection.

Cevap

The physical architecture utilizing Cloud Pub/Sub for ingestion, Cloud Bigtable for time-series metrics, Cloud Storage for archival, and VPC Service Controls for perimeter protection correctly satisfies all conceptual and logical requirements.
The solution accurately maps each logical requirement to its optimal physical service: Cloud Pub/Sub for streaming ingestion, Cloud Bigtable for time-series telemetry metrics, Cloud Storage for compliance archives, and VPC Service Controls to prevent exfiltration across perimeter boundaries.

Adım Adım Çözüm

1
Map ingestion and time-series operational tier requirements to physical services
Cloud Pub/Sub provides scalable serverless message ingestion. Cloud Bigtable delivers low-latency, high-throughput time-series storage optimized for vehicle metrics.
Matching logical data access patterns to specialized native GCP storage engines minimizes latency and operational complexity.
2
Identify the long-term compliance log storage component
Cloud Storage provides durable, cost-effective object storage classes suitable for raw diagnostic payload archives.
Archival data requires high durability and flexible storage tiers without requiring database indexing.
3
Select security components to satisfy exfiltration boundary limits
VPC Service Controls restricts service communication and data movement across perimeter boundaries, preventing unauthorized data copy actions even by valid IAM identities.
Logical security boundaries aiming to block data exfiltration require network/service perimeters in addition to identity permissions.

Anahtar Kavram

Mapping logical architecture requirements to GCP physical services and security controls
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Creating Conceptual, Logical, and Physical Architectures