Examkin

Soru

Zorluk: OrtaDesigning Infrastructure for Technical Requirements and High Availability

An enterprise automotive company is designing the high-availability cloud architecture on Google Cloud for its connected vehicle telemetry ingestion service. The system must meet three critical technical requirements: establish private hybrid connectivity between their primary data center and Google Cloud with guaranteed throughput exceeding 10 Gbps; auto-scale compute workloads based on incoming message queue backlog rather than CPU metrics; and enforce data exfiltration protections to prevent authorized administrators from copying ingested telemetry files to external Cloud Storage buckets outside the enterprise boundary. Which architecture recommendation satisfies all technical and availability requirements?

  1. Provision Dedicated Interconnect for hybrid connectivity, configure compute auto-scaling based on Cloud Pub/Sub unacknowledged message count metrics, and configure VPC Service Controls perimeter boundaries around Cloud Storage resources.Cevap
  2. B
    Provision active-active HA Cloud VPN tunnels for hybrid connectivity, configure compute auto-scaling based on Cloud Pub/Sub unacknowledged message count metrics, and configure VPC Service Controls perimeter boundaries around Cloud Storage resources.
  3. C
    Provision Dedicated Interconnect for hybrid connectivity, configure compute auto-scaling based on target average CPU utilization exceeding 80%, and configure VPC Service Controls perimeter boundaries around Cloud Storage resources.
  4. D
    Provision Dedicated Interconnect for hybrid connectivity, configure compute auto-scaling based on Cloud Pub/Sub unacknowledged message count metrics, and rely exclusively on fine-grained IAM Storage Object Viewer roles without VPC Service Controls.

Cevap

Provision Dedicated Interconnect for high-throughput hybrid connectivity, utilize queue backlog metrics (Cloud Pub/Sub unacknowledged message count) for scaling I/O-bound consumers, and enforce VPC Service Controls to prevent data exfiltration beyond security perimeters.
The combination of Dedicated Interconnect, queue-depth-based autoscaling via Cloud Pub/Sub metrics, and VPC Service Controls fulfills all throughput, availability, and security requirements. Dedicated Interconnect provides native 10 Gbps/100 Gbps dedicated pipes; Pub/Sub unacknowledged message count accurately triggers scaling for queue processing workloads; and VPC Service Controls isolates storage resources within a network perimeter to prevent exfiltration to external projects.

Adım Adım Çözüm

1
Evaluate hybrid network connectivity throughput requirements
Requirements specify guaranteed bandwidth exceeding 10 Gbps, which requires Dedicated Interconnect (offering 10 Gbps or 100 Gbps pipes) rather than HA Cloud VPN (max 3 Gbps per tunnel).
Choosing the appropriate physical connectivity option guarantees SLA and throughput constraints.
2
Select autoscaling metric for message ingestion consumers
For queue-based telemetry processing, scaling on Pub/Sub unacknowledged message count (queue depth) ensures compute instances scale ahead of queue backlogs.
CPU utilization metrics do not reflect I/O-bound message queue buildup.
3
Select security controls for exfiltration prevention
VPC Service Controls establishes a boundary blocking communication and data copy actions to GCP services outside the defined perimeter, even for valid IAM identities.
IAM roles grant permission to access data but cannot restrict copying data to external projects.

Anahtar Kavram

Designing high-availability hybrid architectures balancing network throughput, workload-appropriate autoscaling metrics, and perimeter security controls.
Bu soruyu puanla

Konular

Designing Infrastructure for Technical Requirements and High Availability