Tüm alıştırma soruları

A global multiplayer game studio runs its backend infrastructure on Google Cloud across multiple projects bound to a central Cloud Billing account. The infrastructure features two main workloads: a stateless, containerized matchmaking service that experiences unpredictable traffic bursts during special in-game events, and a centralized BigQuery telemetry warehouse used for real-time player analytics. The studio wants to establish FinOps governance and cost optimization without compromising service performance or increasing management overhead. Which TWO recommendations should the lead Cloud Architect make?

An enterprise organization operates a multi-project Google Cloud environment hosting business-critical microservices. The central operations team needs to aggregate high-severity application logs and system audit logs across all projects into a centralized observability project for analysis and compliance. Concurrently, the team must optimize Cloud Logging ingestion costs by suppressing high-volume, routine container runtime logs without risking the loss of critical failure events or audit records. Which TWO actions should the Cloud Architect recommend to satisfy these observability and cost optimization requirements? (Select TWO)

An online automotive auction enterprise operates a transaction backend on Google Cloud with a steady baseline compute footprint running 24/7 on Compute Engine instances, alongside highly variable, fault-tolerant batch workloads for image rendering and valuation reports. The cloud architecture team needs to implement a FinOps strategy to maximize cost optimization without compromising workload performance or flexibility. Which approach should the Cloud Architect recommend?

A global biomedical research institution is migrating its legacy genomic analysis platform to Google Cloud. The executive steering committee demands minimal disruption to ongoing clinical trials, while the principal researchers express strong resistance to adopting new cloud tools due to a lack of Google Cloud expertise. Additionally, the proposed architecture requires substantial compute resource quotas in the target region. As a Cloud Architect, which strategy best aligns business stakeholder goals, technical requirements, and organizational change management principles?

An aerospace software engineering enterprise is establishing a multi-layered defense architecture on Google Cloud for its flight simulation microservices. The lead cloud security architect must assign dedicated GCP security products to specific vulnerability management, deploy-time governance, and threat detection requirements. Match each Google Cloud security product to its primary security capability within the application lifecycle.

An operations team is establishing a baseline observability architecture for a hybrid application running on Compute Engine instances and on-premises servers. The team must collect system metrics and log data, centralize observability in Google Cloud, and optimize storage costs by preventing low-severity debug logs from being ingested into log buckets, while maintaining strict access controls. Which TWO actions should the team take to meet these requirements?

A global logistics company manages dozens of Google Cloud projects across multiple departments within a single organization hierarchy. The security team must enforce mandatory baseline ingress firewall rules—such as blocking port 22 from the public internet—across all current and future projects. The design must prevent project-level administrators from overriding or deleting these baseline security rules, while still allowing central security administrators to delegate fine-grained access control using granular service tags. Which network security architecture should the cloud architect recommend to meet these requirements?

A healthcare data platform processes streaming clinical records using Google Cloud Pub/Sub and a worker pool running on Compute Engine Managed Instance Groups (MIGs). During sudden peak emergency intake windows, message backlogs accumulate rapidly, yet worker instances fail to scale out in time to prevent processing delays. An operational audit identifies two core constraints: the MIG autoscaler is currently driven by average CPU utilization—which remains low while tasks wait in queue—and recent manual attempts to add capacity hit an error indicating that the region's vCPU quota limit of $500$ vCPUs was reached. Which combination of architectural actions should the Cloud Architect implement to optimize capacity planning and resolve the workload scaling bottlenecks?

Your DevOps team is setting up automated incident management in Google Cloud Monitoring for a critical backend web service. You need to ensure that when an alert triggers due to high error rates, an incident notification is automatically dispatched to your team's third-party PagerDuty endpoint. Which Cloud Monitoring resource should you configure to define where the incident alerts are sent?

An enterprise web application running in primary region `us-central1` uses Cloud SQL for PostgreSQL with a cross-region read replica in `us-east4` for disaster recovery. Compute Engine Managed Instance Groups (MIGs) are deployed in both regions behind a Global External HTTP(S) Load Balancer with backends configured in both regions. Following a catastrophic, unexpected regional failure in `us-central1`, the architecture team must execute their disaster recovery runbook to restore complete write functionality and serve application traffic from `us-east4` with an Recovery Time Objective (RTO) of less than 15 minutes. Which TWO steps must the operations team perform as part of this regional disaster recovery failover process?

A Site Reliability Engineering (SRE) team manages an e-commerce inventory search API deployed on Cloud Run. The team has established a 30-day rolling Service Level Objective (SLO) of 99.9% availability. They want to receive actionable notifications when an outage threatens to consume their remaining error budget, while avoiding alert fatigue caused by brief, temporary error spikes. Which alerting approach should the team implement in Cloud Monitoring?

A cloud architecture team at a healthcare informatics enterprise is transitioning manually provisioned Google Cloud VPC networks and subnetworks into an automated Infrastructure as Code (IaC) workflow managed by Terraform. The team must establish remote state management with state locking, avoid resource recreation, and ensure existing production workloads experience zero downtime during the adoption process. What is the correct sequence of steps to safely import these unmanaged GCP infrastructure resources into Terraform state and align the HCL configuration?

A mission-critical payment gateway hosted on Google Kubernetes Engine (GKE) processes $20,000,000$ valid HTTP requests over a rolling 30-day measurement window. The Site Reliability Engineering (SRE) team defines an Availability Service Level Objective (SLO) of $99.9\%$, measured as the ratio of successful (non-HTTP 5xx) requests to total valid requests. During a bad canary release, the service logged $12,000$ HTTP 500 responses before being rolled back. No other failure events occurred during the 30-day window. What percentage of the total 30-day error budget remains after this incident?

A healthcare analytics platform organizes its workload projects under a dedicated `Clinical-Analytics` folder within the Google Cloud resource hierarchy. The security team needs to grant a centralized monitoring team read-only access to inspect Cloud Logging logs for all current and future projects within this folder. The solution must strictly adhere to the principle of least privilege without exposing underlying dataset contents in Cloud Storage or BigQuery. Which IAM configuration strategy should the architect recommend to meet these requirements with minimal administrative overhead?

A security engineer at a financial technology company performed emergency out-of-band updates to a Cloud Storage bucket retention policy and Cloud KMS encryption settings using the Google Cloud Console to mitigate an active security alert. The infrastructure was originally provisioned and managed via Terraform within a Cloud Build CI/CD pipeline. During the next scheduled deployment pipeline run, `terraform plan` detects configuration drift and proposes modifying the bucket settings back to their previous state, which would violate current security compliance requirements. The team needs to align the Terraform code and state with the live GCP infrastructure without causing service disruption or deleting existing data. Which approach should the cloud architecture team follow to resolve this drift safely?

An enterprise gaming company hosts its multiplayer matchmaking service on Google Cloud Run. The engineering team is executing a canary deployment strategy using Cloud Deploy to roll out a major version update with revision-based traffic splitting. Shortly after directing 10% of production traffic to the new revision, users assigned to the existing revision begin encountering severe database query failures because the release pipeline applied a breaking schema migration to Cloud SQL prior to traffic shifting. Which architectural modification should the cloud architect implement to enable zero-downtime releases during database schema updates?

A video gaming company is implementing an automated CI/CD pipeline using Cloud Build to deploy application infrastructure via Terraform across multiple Google Cloud environments. The security team mandates that Cloud Build must run builds following the principle of least privilege without being granted administrative control over service accounts. Additionally, the pipeline design must ensure that concurrent build executions do not cause state corruption or race conditions. Which combination of IAM configuration and state management should you implement?

A financial services organization hosts sensitive client datasets in Cloud Storage and BigQuery within Google Cloud. The security team must ensure that authorized analysts working from an on-premises network can access these Google Cloud APIs over a Dedicated Interconnect connection, while preventing any authorized user from exfiltrating data to external Cloud Storage buckets outside the organization's control. IAM roles have already been restricted using custom fine-grained permissions. Which security control strategy should you implement to satisfy these perimeter security and exfiltration requirements?

A retail platform operates microservices across multiple Google Kubernetes Engine (GKE) clusters and Cloud Run services deployed in multiple Google Cloud projects. The operations team needs to centralize administrative audit logs and application error logs into a single BigQuery dataset for compliance auditing, while minimizing Cloud Logging ingestion costs by excluding high-volume verbose debug logs before they are written to log buckets. Which TWO actions should the cloud architect recommend to meet these requirements?

A enterprise architecture team is defining data encryption standards across Google Cloud workloads to meet distinct compliance and operational mandates. Match each business encryption requirement to the appropriate Google Cloud key management mechanism.