Tüm alıştırma soruları

An application development team is establishing an automated local integration testing suite for a microservice that reads and writes documents using Cloud Datastore / Firestore in Native mode. To prevent test suites from interacting with live production or staging GCP resources and to avoid cloud usage costs, the team launches the local emulator within a CI pipeline container using the command `gcloud emulators firestore start --host-port=127.0.0.1:8080`. Which configuration step must be executed in the test execution container to ensure Google Cloud client SDKs automatically route all database requests to the local emulator without modifying application source code or requiring active GCP credentials?

A company runs an I/O-bound web service on a Compute Engine Managed Instance Group (MIG). During traffic spikes, request latency increases due to network socket exhaustion, while average CPU utilization on the instances remains below 30%. Which autoscaling configuration should you implement to scale the instances effectively?

A cloud architect at an enterprise logistics company is advising a development team on establishing secure deployment practices. The team's automated CI/CD pipeline deploys application workloads onto Compute Engine virtual machines that execute under a dedicated runtime application service account. To enable the CI/CD pipeline identity to attach this runtime service account to newly created virtual machine instances during deployment, developers plan to assign the CI/CD service account the Service Account Admin role. Which recommendation should the architect provide to adhere to Google Cloud security best practices and the principle of least privilege?

A software engineer is developing a Python microservice running on Compute Engine instances that programmatically uploads reports to Cloud Storage and publishes events to Cloud Pub/Sub. Enterprise security policy strictly prohibits storing downloadable service account JSON keys on virtual machine disks. Additionally, the microservice must handle high-volume API requests without failing due to transient API quota limits. Which TWO design patterns should the developer implement to satisfy security policy and handle API interactions resiliently? (Select TWO)

An enterprise healthcare organization hosts a mission-critical API gateway on Google Cloud for processing patient records. The operations team needs to establish an automated incident management pipeline that alerts on-call engineers and creates incident tickets during genuine operational disruptions. The system must notify teams only when sustained error rates consume the monthly reliability budget, while ignoring brief 1-minute network glitches to prevent alert fatigue. Which strategy should the team implement in Google Cloud Monitoring?

A financial technology company operates an on-premises data processing engine that must securely ingest daily batch files into a Google Cloud Storage bucket in Project A. To enable access, a developer generated a service account JSON key file and deployed it directly to the on-premises servers. The lead security architect mandates that long-lived credentials must be completely eliminated while ensuring the on-premises application adheres strictly to the principle of least privilege. Which architectural solution should be implemented?

A retail enterprise manages dozens of Google Cloud projects across multiple autonomous development teams. To implement FinOps governance, the central FinOps team needs to enforce cost allocation by ensuring all new resources are tagged with required environment and cost-center labels. Additionally, they want to establish proactive threshold alerts when project expenditures reach 80% and 100% of budgeted limits without abruptly interrupting running production workloads. Which architectural approach best meets these cost governance requirements?

A global financial service platform hosts a mission-critical payment processing engine spanning Google Cloud `us-central1` (primary) and `us-east4` (secondary). The architecture connects to an on-premises mainframe transferring up to 15 Gbps of state data. Business requirements mandate a Recovery Point Objective (RPO) of under 1 minute and a Recovery Time Objective (RTO) of under 15 minutes during a total regional failover. Compute workloads run on Compute Engine Managed Instance Groups (MIGs), and relational data uses Cloud SQL for PostgreSQL with a cross-region read replica in `us-east4`. During a catastrophic regional outage in `us-central1`, which disaster recovery failover procedure should the cloud architecture team execute to ensure operational continuity within compliance bounds?

A global fintech payment processing company is modernizing its legacy core transaction ledger by migrating workloads to Google Cloud. Executive leadership requires zero unplanned downtime and strict compliance, while the legacy operations team expresses concern over a lack of familiarity with cloud-native tooling and governance. During initial staging simulations, large-scale load tests failed because required compute quotas were not requested in advance, and engineering leads requested broad project Owner permissions to troubleshoot failures rapidly. As the Principal Cloud Architect leading organizational change and technical strategy, which approach best addresses stakeholder requirements while ensuring smooth operational transition?

An enterprise architecture team is designing security controls for a financial reporting application deployed on a Google Kubernetes Engine (GKE) cluster in project-app. The application needs to securely retrieve sensitive third-party API credentials stored in GCP Secret Manager within a central governance project named project-sec. The architecture requirements mandate eliminating long-lived service account JSON keys and enforcing strict principle of least privilege. Which TWO actions should the security team implement to fulfill these security requirements?

An e-commerce platform processes checkout transactions through a payment gateway microservice hosted on Google Cloud. During brief, transient database latency spikes, the Site Reliability Engineering (SRE) team receives excessive false-positive incident alerts, while genuine sustained error budget depletion is occasionally detected too late. The team needs to redesign their Cloud Monitoring automated alerting strategy to reliably detect severe outages quickly while preventing alert fatigue from transient spikes. Which architecture approach should be implemented?

A DevOps engineer needs to configure a local development workstation to run Python scripts that interact programmatically with Cloud Storage APIs using short-lived credentials via Service Account Impersonation. Corporate security policy strictly prohibits downloading JSON service account keys to local workstations. Place the operational steps in the correct chronological order to configure Application Default Credentials (ADC) with service account impersonation.

A digital media streaming platform relies on a stateless recommendations microservice hosted on Google Cloud Run, backed by a Cloud SQL for PostgreSQL database. The engineering team needs to roll out a major feature release that includes a breaking database schema change (renaming several existing database columns). The deployment must achieve zero downtime and allow for an immediate rollback if errors occur during release cutover. How should the cloud architect design the deployment and database migration pipeline?

A healthcare telemetry platform hosted on Google Cloud Run and Cloud Bigtable processes real-time patient metrics. The Site Reliability Engineering (SRE) team defines an availability Service Level Objective (SLO) of $99.9\%$ measured over a rolling 30-day window ($43,200$ minutes). During an unexpected deployment failure, the service suffered complete downtime for $18$ minutes. Later in the same rolling window, a database connection pool exhaustion caused a partial degradation for $60$ minutes, during which $40\%$ of all incoming telemetry requests failed. Assuming a constant request rate throughout the window, how many minutes of error budget remain for this 30-day period?

A multinational e-commerce company manages its core infrastructure across multiple Google Cloud projects using Terraform executed through an automated CI/CD pipeline. Following a recent operational incident, an engineer manually updated Cloud Storage bucket IAM policies and Compute Engine instance metadata via the Google Cloud Console to restore connectivity. This manual intervention created configuration drift between the actual running resources and the version-controlled Terraform state. To enforce strict IaC governance, the lead cloud architect needs an automated strategy to continuously detect configuration drift, restrict manual resource modifications going forward, and safely re-align the environment with the canonical Terraform definitions. Which operational design best achieves this objective while adhering to Google Cloud recommended best practices?

An organization runs an automated database maintenance script on a Compute Engine virtual machine located in project `prod-workloads`. The script needs to retrieve a database password stored in Google Cloud Secret Manager within project `prod-secrets`. Company security policies strictly prohibit the creation and management of downloadable service account JSON keys. Which access management configuration follows Google-recommended best practices to allow the workload to authenticate while enforcing least privilege?

An online education platform processes high-resolution video transcoding jobs using batch worker instances in a Compute Engine Managed Instance Group (MIG). During scheduled nationwide exam periods, job submission rates surge dramatically, leading to queue delays. The operations team notices that the MIG autoscaler fails to launch additional VM instances beyond a specific threshold during peak demand due to resource allocation failures. Which strategy should the Cloud Architect implement to optimize capacity planning and ensure seamless workload scaling?

A health technology enterprise stores sensitive patient medical analytics inside Google Cloud Storage buckets and BigQuery datasets. Authorized data engineers access these services from an on-premises data center connected via Dedicated Interconnect. The enterprise security policy strictly dictates that even users with legitimate administrative IAM permissions must be prevented from exfiltrating data by copying it to external Google Cloud Storage buckets or unapproved Google Cloud projects outside the enterprise organization. Which architectural control should the Cloud Architect implement to meet this requirement?

An enterprise energy company is establishing an automated testing and release validation pipeline for a mission-critical IoT telemetry ingestion platform on Google Cloud. To ensure system stability, capacity readiness, and security compliance prior to production cutover, sequence the technical solution validation steps in the correct chronological order.

A retail enterprise operates a high-throughput checkout fraud scoring service deployed on Google Cloud Run backed by Cloud Firestore. The service has a defined availability Service Level Objective (SLO) of $99.9\%$ successful HTTP requests over a rolling $30$-day period. During flash sales, brief traffic spikes trigger transient CPU utilization spikes and temporary latency fluctuations that quickly self-heal without breaching the monthly SLO, yet they trigger frequent urgent page alerts for the operations team. The Site Reliability Engineering (SRE) team needs to reduce alert fatigue while ensuring they are promptly notified before significant portions of the error budget are consumed by genuine outages. Which alerting architecture should the team implement?