Examkin

Soru

Zorluk: ZorCreating Conceptual, Logical, and Physical Architectures

An architectural team at a global financial settlement firm is translating a multi-tier conceptual architecture into concrete logical and physical designs on Google Cloud. The logical tier mandates two key requirements: first, a core relational transaction ledger that guarantees active-active multi-region ACID consistency with low write latency; second, strict network-level security perimeters between the transaction engine and third-party audit reporting components to block unauthorized data exfiltration even if IAM credentials are leaked. Which physical architecture implementation correctly maps these logical requirements to Google Cloud services?

  1. Provision Cloud Spanner with a multi-region instance configuration for the relational transaction ledger, and isolate the transaction processing and audit reporting projects into separate security perimeters using VPC Service Controls.Cevap
  2. B
    Provision Cloud SQL for PostgreSQL with cross-region read replicas for the relational transaction ledger, and restrict communication between project environments using IAM primitive Editor roles.
  3. C
    Provision Cloud Spanner with a multi-region instance configuration for the transaction ledger, and rely exclusively on IAM Service Account User role bindings without configuring VPC Service Controls perimeters.
  4. D
    Provision an Autopilot GKE Enterprise cluster to host stateless event ingestion webhooks, while deploying Cloud SQL for global multi-region transactional consistency and Cloud Spanner for long-term audit logging.

Cevap

Provision Cloud Spanner with a multi-region instance configuration for the relational transaction ledger, and isolate the transaction processing and audit reporting projects into separate security perimeters using VPC Service Controls.
The correct solution maps the logical requirements to physical GCP components by choosing Cloud Spanner for multi-region active-active relational consistency and VPC Service Controls to enforce perimeter-based network protection against data exfiltration.

Adım Adım Çözüm

1
Analyze the logical database requirements.
The requirement specifies an active-active multi-region relational database with strict ACID consistency and low latency.
Cloud Spanner is the physical GCP service designed specifically for globally distributed, multi-region synchronous relational transactions, whereas Cloud SQL only provides single-region primary engines with asynchronous cross-region replicas.
2
Analyze the logical security and isolation requirements.
The requirement demands protection against data exfiltration across security perimeters, even if IAM identities are compromised.
VPC Service Controls create boundary perimeters around GCP resources at the network layer to prevent data theft and exfiltration, which IAM alone cannot prevent.
3
Synthesize the physical architecture mapping.
Combining Cloud Spanner (multi-region) and VPC Service Controls (project perimeters) satisfies both logical criteria.
This configuration accurately maps conceptual data integrity and isolation policies into enterprise-grade GCP physical infrastructure.

Anahtar Kavram

Translating logical data storage and security requirements into GCP physical services (Cloud Spanner and VPC Service Controls)
Bu soruyu puanla

Konular

Creating Conceptual, Logical, and Physical Architectures