Examkin

Soru

Zorluk: OrtaCreating Conceptual, Logical, and Physical Architectures

An online gaming studio is defining the cloud architecture for a global multiplayer leaderboard and user session state service. The conceptual architecture specifies three functional tiers: 1) a high-throughput event ingestion tier for real-time match telemetry, 2) a stateless microservices container execution tier for game session management, and 3) a relational database tier for persistent player profiles restricted to a single geographic region. Additionally, security governance requires network-level data exfiltration prevention around cloud storage endpoints holding game assets. Which combination of Google Cloud services correctly maps this logical design to a physical GCP architecture while adhering to operational cost and security best practices?

  1. Use Cloud Pub/Sub for telemetry ingestion, Cloud Run for microservices execution, Cloud SQL for PostgreSQL for relational player profiles, and VPC Service Controls around storage resources.Cevap
  2. B
    Use Cloud Pub/Sub for telemetry ingestion, a dedicated Google Kubernetes Engine (GKE) Standard cluster for microservices execution, Cloud SQL for PostgreSQL for relational player profiles, and VPC Service Controls around storage resources.
  3. C
    Use Cloud Pub/Sub for telemetry ingestion, Cloud Run for microservices execution, Cloud Spanner for relational player profiles, and VPC Service Controls around storage resources.
  4. D
    Use Cloud Pub/Sub for telemetry ingestion, Cloud Run for microservices execution, Cloud SQL for PostgreSQL for relational player profiles, and IAM role bindings alone without VPC Service Controls.

Cevap

The optimal architecture utilizes Cloud Pub/Sub for telemetry ingestion, Cloud Run for stateless containerized microservices, Cloud SQL for PostgreSQL for single-region relational storage, and VPC Service Controls to enforce exfiltration boundaries.
The correct solution maps each logical requirement to its most cost-effective and secure GCP physical counterpart: Pub/Sub for ingestion, Cloud Run for serverless container microservices, Cloud SQL for regional relational storage, and VPC Service Controls for exfiltration perimeter defense.

Adım Adım Çözüm

1
Evaluate the ingestion tier requirements.
Cloud Pub/Sub provides scalable, managed event ingestion for real-time telemetry.
Pub/Sub handles asynchronous high-throughput event streaming effortlessly.
2
Evaluate compute execution requirements for stateless microservices.
Cloud Run is selected over GKE Standard.
Cloud Run automatically scales stateless containers to zero without cluster management overhead or baseline infrastructure cost.
3
Select database resource for single-region relational data.
Cloud SQL is selected over Cloud Spanner.
Cloud Spanner is designed for globally distributed multi-region databases. Cloud SQL meets single-region relational database needs efficiently and cost-effectively.
4
Determine exfiltration prevention security control.
VPC Service Controls are selected to complement IAM.
VPC Service Controls create security perimeters around GCP APIs to prevent authorized identities from copying data outside authorized networks.

Anahtar Kavram

Mapping logical architecture requirements to physical GCP services based on workload scope, management overhead, cost efficiency, and security perimeters.
Bu soruyu puanla

Konular

Creating Conceptual, Logical, and Physical Architectures