Tüm alıştırma soruları

A fintech company is establishing a procedure to test and validate a new microservices-based transaction processing solution on Google Cloud before moving it to production. The architecture uses Terraform for Infrastructure as Code (IaC) and Google Kubernetes Engine (GKE) for compute. The validation procedure must ensure infrastructure readiness, deployment safety, and pre-flight operational checks without risking configuration drift or quota failures. Which TWO steps should be included in this solution validation procedure? (Select TWO)

An enterprise biotechnology organization is designing an automated continuous delivery pipeline to manage infrastructure across multiple Google Cloud projects using Terraform. The pipeline must guarantee secure remote state persistence, prevent state file corruption during concurrent deployment execution, eliminate long-lived service account authentication keys, and maintain strict identity least privilege. Which TWO actions should the cloud architecture team implement to satisfy these requirements? (Select TWO.)

A healthcare provider is configuring a pre-flight staging test strategy to validate a telemetry processing solution on Google Cloud prior to releasing it into production. The application requires automated deployment of private Google Kubernetes Engine (GKE) clusters via Terraform, strict compliance controls against unauthorized data transfers, and seamless capacity scaling. Which validation procedure should the cloud architect implement to verify technical infrastructure readiness while preventing deployment risks?

A healthcare technology enterprise operates a multi-project Google Cloud environment with steady-state core web services alongside bursty, fault-tolerant batch analytics workloads. The organization needs to establish FinOps governance to improve cost transparency across business units and optimize compute spend without impeding development velocity. Which TWO architectural and governance strategies should the Cloud Architect recommend?

An enterprise IoT telemetry platform processes high-throughput fleet analytics across Google Cloud. The primary workload runs in `us-central1`, while a secondary disaster recovery environment is staged in `us-east4`. The application tier uses Compute Engine Managed Instance Groups (MIGs) served by a Global External Application Load Balancer, and backend services rely on private inter-VPC communication and dedicated hybrid links to on-premises datacenters. During a complete outage in `us-central1`, the incident response team must execute the disaster recovery failover runbook to restore full operational capacity in `us-east4` within a strict RTO. Which of the following execution steps must the operations team perform to successfully execute this regional failover? (Select TWO.)

A financial media company operates a real-time news analytics system hosted in Google Cloud's us-central1 region. The platform processes high-throughput data streams using Compute Engine Managed Instance Groups (MIGs) and stores user subscription profiles in Cloud SQL for PostgreSQL. The company requires a disaster recovery (DR) strategy for an unrecoverable outage in us-central1. The business mandates a Recovery Point Objective (RPO) of near zero (< 1 minute) and a Recovery Time Objective (RTO) under 15 minutes. To minimize idle infrastructure costs, compute resources in the secondary region (us-east4) should only be scaled up during an actual failover execution. Which disaster recovery execution strategy satisfies these requirements?

A financial services organization operates a daily batch processing pipeline on a Compute Engine Managed Instance Group (MIG) consuming messages from Cloud Pub/Sub. Every morning at market open, incoming message rates surge by $10\times$ within 30 seconds. Because instance initialization and software warmup take approximately 4 minutes, dynamic auto-scaling policies based on Pub/Sub queue depth or CPU load experience severe queue backlogs and SLA violations during the first 10 minutes of the spike. Which architecture strategy should a Cloud Architect recommend to eliminate initial latency spikes while maintaining cost efficiency during off-peak hours?

A cloud administrator regularly manages infrastructure across separate development, staging, and production Google Cloud projects from a single workstation using the gcloud CLI. Currently, the administrator manually re-authenticates or overrides environment variables whenever switching target environments, which increases the risk of executing administrative commands against the wrong project. Which approach aligns with Google Cloud best practices for managing and switching between multiple environment settings cleanly when using the gcloud CLI?

An enterprise online gaming company is launching a global game update expected to triple active connection traffic within minutes. The telemetry ingestion pipeline runs on Google Kubernetes Engine (GKE) worker nodes and is primarily I/O-bound as it handles high-volume persistent WebSocket streams and message queues. During load testing, scaling nodes and pods based on CPU utilization failed to react quickly enough to queue backlog spikes, and sudden autoscaling attempts were rejected due to regional limits. Which TWO architectural and operational actions should a Cloud Architect recommend to ensure auto-scaling reliability and guarantee resource availability during peak launch events?

An enterprise retail platform is preparing for an annual flash sale expected to increase incoming order traffic by 500% within minutes. The order processing service runs on a Compute Engine Managed Instance Group (MIG) that consumes messages from a Cloud Pub/Sub topic. Stress testing reveals that scaling the MIG based on CPU utilization is ineffective because workers spend significant time waiting on external database I/O, leading to delayed scale-out and queue backlog buildup. Additionally, the required peak capacity for the event exceeds the project's current regional N2 CPU limits. Which TWO actions should the Cloud Architect take to ensure operational reliability and seamless capacity scaling during the flash sale?

A financial services organization is establishing an automated data ingestion pipeline from an external identity platform into Google Cloud. The security team must enforce service account lifecycle security and ensure sensitive database credentials stored in Secret Manager are protected according to Google Cloud security standards. The architecture must eliminate static service account keys, strictly enforce least privilege access, and allow key lifecycle control using Google Cloud KMS. Which TWO security controls should the architecture team implement?

A financial services organization deploys a Go-based microservice on Google Kubernetes Engine (GKE) that programmatically ingests data by publishing messages to Cloud Pub/Sub and writing records to Cloud Bigtable using official Google Cloud Client Libraries. During high-volume market events, the application experiences transient HTTP $429$ (Too Many Requests) rate limit errors and HTTP $503$ (Service Unavailable) errors. The security and platform architecture teams require a solution that adheres to GCP authentication best practices while ensuring resilient API interaction and minimal operational overhead. Which implementation strategy should the cloud architect recommend?

An enterprise financial compliance application deployed on Compute Engine Managed Instance Groups (MIGs) processes continuous streaming network traffic. During high-throughput compliance audit cycles, backend instances experience severe latency and drop connections due to socket allocation exhaustion and memory pressure, while average CPU utilization remains at approximately 35%. Furthermore, upcoming quarterly compliance stress testing requires expanding the infrastructure by 300 instances, but past automated scale-out events failed immediately because the target region exceeded baseline vCPU limits. Which combination of autoscaling policy and capacity planning strategies should the Cloud Architect implement to ensure operational reliability?

A digital media production enterprise hosts high-value pre-release video assets within Cloud Storage buckets and processes analytics using BigQuery. The security team must ensure that authorized developers and automated pipelines working within the environment cannot exfiltrate raw assets to external Google Cloud resources outside the organization. Additionally, access to Google APIs from on-premises workstations must be strictly constrained to private network paths without exposing traffic to the public internet. Which TWO security controls should you implement to satisfy these requirements?

An enterprise logistics company runs a critical real-time inventory reservation service deployed on Google Kubernetes Engine (GKE) backed by Cloud Spanner. The service processes high-throughput synchronous HTTP requests from mobile applications. To balance feature velocity with operational stability, the Site Reliability Engineering (SRE) team needs to define metrics and alerting mechanisms. Which TWO of the following practices should the team implement? (Select TWO)

An enterprise cloud architect is designing a multi-layered security model for a multi-tenant SaaS application hosted on Google Cloud. Match each network security and perimeter requirement on the left with the most appropriate Google Cloud security mechanism on the right.

A smart grid energy company is designing a hybrid cloud connectivity topology between its primary operational control center on-premises and Google Cloud. The telemetry ingest workload requires a minimum sustained throughput of 12 Gbps and an availability SLA of 99.99%. Furthermore, the on-premises controllers must communicate with resources distributed across multiple workloads in distinct Virtual Private Clouds (VPCs) via a central hub VPC. How should the cloud architect design the hybrid network topology to meet all bandwidth, SLA, and routing requirements?

An e-commerce enterprise hosts a public-facing web API on Google Kubernetes Engine (GKE) behind an HTTP(S) Load Balancer and stores sensitive transaction analytics in Cloud Storage and BigQuery. The security team needs to satisfy two core requirements: mitigate Layer 7 web application attacks (such as SQL injection) at the network edge, and prevent authorized users from copying internal datasets to external storage buckets outside the organization perimeter.

Which TWO security and perimeter controls should you implement to fulfill these requirements?

A multinational automotive software enterprise is connecting its on-premises build servers to Google Cloud. The workload requires a sustained network throughput of 8 Gbps between on-premises data centers and Google Cloud resources. Additionally, the company operates three separate environments in Google Cloud—Production, Staging, and Shared Services—that all require private connectivity to on-premises resources. The network engineering team wants to centralize network administration, avoid creating separate hybrid connections for each environment, and eliminate routing issues caused by VPC Network Peering non-transitivity. Which network architecture should you recommend?

An automotive IoT enterprise ingests streaming vehicle telemetry into Cloud Storage buckets located inside Project-Ingest. An analytics team operating out of Project-Analytics requires direct read access to this telemetry to run BigQuery Omni and Dataproc jobs. The chief information security officer (CISO) mandates that raw telemetry data must be strictly prevented from being exfiltrated to external Google Cloud resources or public internet destinations, even by identities holding legitimate read permissions. Additionally, Project-Analytics is connected via VPC Network Peering to a shared Project-Management network, but Project-Ingest has no direct VPC Network Peering connection to Project-Management. Which security architecture should a Cloud Architect implement to satisfy these security and operational requirements?