Examkin

Soru

Zorluk: OrtaCreating Conceptual, Logical, and Physical Architectures

A smart manufacturing enterprise is translating its functional solution requirements into a Google Cloud physical architecture. The solution requires real-time telemetry ingestion from IoT edge devices, stateless event-driven microservices to validate payload schemas, a regional relational database for transactional maintenance work order tracking, and isolation controls to prevent data exfiltration beyond IAM permissions. Which combination of GCP services and security controls fulfills these physical architecture requirements while minimizing operational overhead?

  1. Cloud Pub/Sub for ingestion, Cloud Run for event processing, Cloud SQL for PostgreSQL for work orders, and VPC Service Controls for exfiltration prevention.Cevap
  2. B
    Cloud Pub/Sub for ingestion, Google Kubernetes Engine (GKE) clusters for event processing, Cloud SQL for PostgreSQL for work orders, and VPC Service Controls for exfiltration prevention.
  3. C
    Cloud Pub/Sub for ingestion, Cloud Run for event processing, Cloud Spanner for work orders, and VPC Service Controls for exfiltration prevention.
  4. D
    Cloud Pub/Sub for ingestion, Cloud Run for event processing, Cloud SQL for PostgreSQL for work orders, and fine-grained IAM roles without VPC Service Controls.

Cevap

The optimal architecture combines Cloud Pub/Sub for real-time telemetry ingestion, Cloud Run for fully managed stateless event processing, Cloud SQL for PostgreSQL for regional relational storage, and VPC Service Controls to prevent data exfiltration.
The combination of Cloud Pub/Sub, Cloud Run, Cloud SQL for PostgreSQL, and VPC Service Controls accurately maps each logical tier to its ideal physical service on GCP. It delivers serverless event processing, efficient regional relational storage, and robust perimeter security against exfiltration with minimal operational burden.

Adım Adım Çözüm

1
Evaluate compute service selection for stateless event microservices.
Cloud Run provides fully managed serverless container execution for stateless HTTP/event processing with zero infrastructure management overhead compared to GKE.
Choosing Cloud Run aligns physical resources with the conceptual requirement of minimal operational complexity.
2
Evaluate relational database tier requirements.
Cloud SQL for PostgreSQL satisfies standard regional SQL transactions and ACID compliance without the expense and operational model of Cloud Spanner.
Cloud Spanner is designed for globally distributed multi-region databases and is unnecessary for a regional workload.
3
Evaluate perimeter security for data exfiltration prevention.
VPC Service Controls form a security perimeter around storage resources to block data copies to external projects.
IAM roles manage access identity but cannot enforce network boundaries to prevent authorized users from exfiltrating data.

Anahtar Kavram

Mapping functional solution requirements across conceptual, logical, and physical architecture tiers on GCP.
Bu soruyu puanla

Konular

Creating Conceptual, Logical, and Physical Architectures