Tüm alıştırma soruları

A financial services institution is migrating its reporting warehouse and transactional workloads from an on-premises data center to Google Cloud. The dataset consists of $1.2\text{ PB}$ of historical raw analytics logs stored on Network-Attached Storage (NAS) and an active $4\text{ TB}$ operational MySQL database. The institution has a dedicated WAN bandwidth of $200\text{ Mbps}$ available for migration activities, and business requirements mandate a maximum downtime window of 4 hours during the final cutover.

Which TWO architectural decisions should the Cloud Architect incorporate into the migration plan to satisfy these requirements?

A cloud administrator creates a VPC Network Peering connection between VPC-A and VPC-B, and another VPC Network Peering connection between VPC-B and VPC-C. A user attempts to ping a Compute Engine virtual machine in VPC-C directly from a virtual machine in VPC-A, but the traffic is dropped. What is the fundamental VPC networking rule causing this behavior?

An enterprise organization operates two separate Google Cloud Virtual Private Cloud (VPC) networks: vpc-production and vpc-analytics. The vpc-production network is connected to the company's on-premises data center using an High Availability (HA) Cloud VPN gateway paired with a Cloud Router running dynamic BGP routing. The two VPCs are connected using VPC Network Peering with custom route import and export enabled. Network administrators discover that on-premises hosts can successfully reach workloads in vpc-production, but cannot communicate with resources in vpc-analytics. You must enable private on-premises connectivity to both VPC environments without introducing redundant IPSec tunnels or increasing administrative overhead. Which architectural modification should you implement?

A DevOps team needs to provision a new Google Kubernetes Engine (GKE) cluster for an enterprise application while adhering to basic security and administrative access best practices. Which of the following configurations should the team implement when creating the cluster? (Select TWO.)

A DevOps team is setting up an automated Infrastructure as Code (IaC) pipeline using Terraform to provision Compute Engine resources and service accounts for a new analytics platform. The team must ensure secure state management and adhere to the principle of least privilege for the deployment pipeline's service account. Which two actions should the team take to meet these security and operational requirements?

A global media enterprise is redesigning its video processing pipeline on Google Cloud. The architecture requires deploying two distinct workloads:

1. A legacy video transcoding service that depends on custom OS kernel parameter tuning (`sysctl` network buffer settings) and requires POSIX-compliant high-performance local disk access.
2. A lightweight REST API service that receives unpredictable, bursty HTTP traffic, requires automatic scaling to zero instances to minimize costs during idle hours, and must require minimal operational management overhead.

Which TWO compute platform architectural decisions should the Cloud Architect recommend to satisfy these requirements? (Select TWO.)

A logistics enterprise is deploying an automated CI/CD pipeline using Infrastructure as Code to provision Compute Engine virtual machines and Google Kubernetes Engine (GKE) node pools across multiple projects. The deployment pipeline runs under a dedicated service account and must support rapid scaling without encountering deployment failures, while strictly adhering to the principle of least privilege. Which TWO configuration steps should the cloud architect recommend to meet these requirements?

A DevOps team is establishing an automated continuous delivery pipeline for a mission-critical web application on Google Kubernetes Engine (GKE) using Cloud Build, Artifact Registry, Binary Authorization, and Google Cloud Deploy. The deployment requirements mandate zero downtime, automated container security gates, and progressive canary traffic shifting with automated rollback capabilities. In what chronological sequence should the pipeline stages be executed to implement this secure release process?

A global fintech firm is designing the compute architecture on Google Cloud for a payment processing system consisting of two distinct workloads. Workload 1 is a stateless microservice that receives gRPC requests from external gateways, experiences unpredictable bursty traffic with periods of complete idle time, and requires automatic scale-to-zero capability with minimal operational overhead. Workload 2 is a stateful stream-enrichment engine that requires ultra-low latency access to local NVMe storage and custom Linux kernel tuning (`sysctl` network parameter modifications) at the operating system level. Which TWO compute platform strategies should you select to meet these technical requirements while adhering to Google Cloud best practices?

An energy Grid IoT analytics company is modernizing its telemetry processing platform on Google Cloud. The system must support two distinct workloads with separate operational characteristics:

1. Event Ingestion Microservice: An HTTP REST service that receives telemetry webhooks from smart meters. Traffic fluctuates unpredictable throughout the day and drops to zero overnight in specific regions. The service must scale rapidly, minimize management overhead, and scale down to zero when idle.
2. Batch Spatial Simulation Engine: An intensive data pipeline requiring custom Linux kernel parameters (`sysctl` network tuning) and direct `/dev/shm` shared memory allocations. The workload processes batched data chunks periodically, tolerates unexpected instance terminations, and must run at the lowest possible infrastructure cost.

Which TWO compute architecture decisions should the Cloud Architect recommend to satisfy these requirements? (Select TWO.)

An Site Reliability Engineering (SRE) team is designing a centralized operational observability and compliance log routing framework across an entire Google Cloud Organization. They need to aggregate all admin activity audit logs from all project workloads into a dedicated Security Operations project's BigQuery dataset for long-term retention. Additionally, they must monitor application severity levels and receive real-time notifications whenever high-priority application errors spike across services. Which TWO actions should the team perform to meet these requirements following Google-recommended best practices and least-privilege security principles? (Select TWO.)

An organization needs to establish an encrypted connection over the public internet between their on-premises network and a Google Cloud Virtual Private Cloud (VPC) for a low-bandwidth workload requiring 500 Mbps throughput. Which Google Cloud hybrid connectivity service should they implement?

An enterprise organization is designing a multi-tier e-commerce system on Google Cloud and translating conceptual business requirements into logical and physical architecture components.

The conceptual architecture specifies four primary requirements:
1. A stateless HTTP API ingress layer to accept lightweight order payloads with minimal operational management overhead.
2. A relational data tier storing order transactions restricted strictly to a single GCP region with cost-effective, standard relational database capacity.
3. A hybrid network topology capable of delivering 10 Gbps predictable, low-latency bandwidth between on-premises systems and GCP VPCs.
4. A data security boundary that prevents authorized internal users from exfiltrating sensitive storage data to external, unauthorized Google Cloud projects.

Which TWO physical architecture decisions correctly implement these requirements while avoiding architectural anti-patterns? (Select TWO)

A healthcare enterprise is provisioning a private Google Kubernetes Engine (GKE) cluster in GCP to execute clinical processing workloads. The architecture must enforce strict security controls: administrative API access to the GKE control plane must be restricted exclusively to the corporate management subnet ($192.168.10.0/24$) routed over Dedicated Interconnect, and pods must authenticate to Google Cloud SQL instances without using static service account keys or relying on node-level identities. Which TWO configuration actions should the Cloud Architect execute to satisfy these security requirements?

An enterprise engineering team is deploying a secure subnetwork for internal Compute Engine virtual machines that are configured without external IP addresses. The applications running on these instances require access to Google Cloud APIs (such as Cloud Storage) and also require outbound access to external third-party repositories for software updates without allowing inbound connections from the internet. Which TWO network topology configurations must be implemented in the Virtual Private Cloud (VPC) network to satisfy these connectivity requirements?

A DevOps engineering team is setting up an Infrastructure as Code workflow using Terraform to provision Google Cloud storage buckets and database instances. They need to configure a remote backend that supports automatic state locking and prevents state corruption during concurrent deployments by multiple engineers. Which storage configuration should they implement?

A principal cloud architect is designing an enterprise infrastructure automation strategy using HashiCorp Terraform for a logistics enterprise on Google Cloud. Multiple automated runner instances executing within Cloud Build must perform `terraform apply` operations concurrently across distinct operational pipelines targeting shared staging environments. The architectural mandate requires protecting infrastructure state against concurrency race conditions, enabling immediate state recovery from accidental corruptions, and adhering to strict least-privilege security without storing long-lived service account keys in repositories. Which implementation strategy meets all of these requirements?

An enterprise retail corporation is modernizing its global order processing ecosystem on Google Cloud. The architecture consists of two core workloads with distinct operational parameters:

1. A stateless HTTP REST microservice that processes user checkout requests. Traffic is extremely bursty, experiencing 50x spikes during seasonal promotions and dropping to zero overnight. The organization mandates minimal operational overhead and zero infrastructure maintenance.
2. A legacy stateful inventory synchronization service that requires custom Linux kernel socket parameter tuning (`sysctl`), direct access to attached persistent disk volumes for local file locking, and fixed internal IP addresses.

Which compute platform architecture should you recommend to meet the requirements of both workloads while minimizing operational complexity?

An enterprise financial service relies on automated scripts to provision a temporary managed instance group (MIG) of Compute Engine virtual machines every midnight to process end-of-day ledger reconciliations. During scale testing for an upcoming release requiring $500$ N2 vCPUs in the `us-central1` region, the deployment script fails to scale up beyond $100$ vCPUs, despite using valid credentials and validated Infrastructure as Code templates. Which action should the Cloud Architect take to resolve this provisioning failure?

A financial enterprise is re-architecting its nightly batch risk calculation system on Google Cloud. The system executes containerized, stateless tasks triggered on a fixed schedule. Each batch task requires up to 45 minutes of processing time, requires custom CPU and memory allocations, and must scale to zero when no jobs are running to avoid idle infrastructure costs. Which TWO architectural decisions should the team make to meet these requirements with minimal operational overhead?