Tüm alıştırma soruları

1598 soru

Soru 1541Soru

A global media broadcasting company is designing hybrid connectivity between its primary on-premises processing center and Google Cloud. The architecture requires a continuous, private network connection with a minimum baseline bandwidth of 20 Gbps to support uncompressed video rendering workloads. Applications are distributed across two distinct Google Cloud projects: a networking project housing core connectivity and a workload project housing render nodes in a separate VPC network. The network team needs to allow workloads in the rendering VPC to communicate directly with on-premises storage arrays without exposing traffic to the public internet while maintaining administrative separation. Which network architecture design meets these requirements?

Cevabı ve açıklamayı göster

Cevap: Provision a Shared VPC topology using the networking project as the Host Project and the rendering project as a Service Project, attaching Dedicated Interconnect VLAN attachments to the Host VPC to provide direct hybrid access to service project subnets.

Cevap

Provision a Shared VPC topology using the networking project as the Host Project and the rendering project as a Service Project, attaching Dedicated Interconnect VLAN attachments to the Host VPC to provide direct hybrid access to service project subnets.
The correct solution uses Shared VPC with Dedicated Interconnect. Dedicated Interconnect satisfies the 20 Gbps throughput demand. Using Shared VPC ensures that rendering project workloads reside in subnets belonging to the Host VPC, allowing them to communicate directly with on-premises networks over Cloud Router and VLAN attachments without hitting VPC Peering non-transitivity restrictions.

Adım Adım Çözüm

1
Analyze bandwidth and connection type requirements
A 20 Gbps bandwidth requirement exceeds the recommended design envelope for Cloud VPN tunnels and necessitates Dedicated Interconnect (10 Gbps or 100 Gbps physical links).
Dedicated Interconnect guarantees high-throughput, enterprise-grade SLA connectivity.
2
Evaluate cross-project network architecture options for transit limitations
VPC Network Peering is non-transitive; routes learned from Cloud Router via Dedicated Interconnect in VPC A cannot be advertised or transitively used by workloads in peered VPC B.
To grant separate project workloads access to on-premises resources via the same Interconnect, Shared VPC must be used so that workloads reside on subnets of the same overarching VPC network.
3
Select the compliant solution
Designing a Shared VPC with the Host VPC managing Dedicated Interconnect attachments satisfies administrative separation while granting service project workloads direct connectivity.
Shared VPC eliminates peering transitivity constraints and meets all performance and security criteria.

Anahtar Kavram

Shared VPC vs VPC Peering for Hybrid Interconnect Connectivity
Tahmini Süre:2m 0s
Soru 1542Soru

An enterprise logistics firm manages its Google Cloud infrastructure using Terraform across multiple environments. The cloud architecture team must secure the automated deployment pipeline, enforce least-privilege access control, and protect against state file corruption and configuration drift. Which TWO actions should the engineering team implement to meet these requirements? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure a Cloud Storage bucket with Object Versioning enabled as the remote backend to store the Terraform state file securely.; Use Workload Identity Federation with fine-grained IAM roles to authenticate the CI/CD runner to Google Cloud without storing long-lived service account keys.

Cevap

The engineering team should configure a Cloud Storage bucket with Object Versioning as the remote backend and authenticate the CI/CD pipeline using Workload Identity Federation with fine-grained IAM roles.
Configuring a Cloud Storage bucket with Object Versioning provides remote backend state locking, concurrency protection, and version recovery. Utilizing Workload Identity Federation with fine-grained IAM roles allows the CI/CD pipeline to authenticate securely without storing static service account keys while enforcing least-privilege security.

Adım Adım Çözüm

1
Establish secure remote state management
Configure Terraform to use a Cloud Storage backend with Object Versioning and state locking.
This prevents concurrent state modifications and enables state history recovery in case of corruption.
2
Secure pipeline authentication and authorization
Implement Workload Identity Federation with short-lived tokens and fine-grained custom or predefined IAM roles.
This eliminates long-lived service account key security risks and ensures least privilege access.

Anahtar Kavram

Terraform Remote State Backend Security and CI/CD Keyless Authentication
Soru 1543Soru

A smart city traffic management platform manages its Google Cloud infrastructure across multiple environments using Terraform executed via Cloud Build CI/CD pipelines. The engineering team wants to enforce IaC governance, ensure remote state file security and integrity, prevent configuration drift, and adhere to least privilege security practices. Which TWO actions should the team implement to meet these requirements?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure a Cloud Storage bucket with Object Versioning enabled as a remote backend for Terraform state, and grant backend access only to the deployment service account.; Assign fine-grained predefined IAM roles to the Cloud Build service account and schedule periodic terraform plan runs to identify infrastructure drift.

Cevap

The team should configure a Cloud Storage remote backend with Object Versioning for secure state management, and assign fine-grained predefined IAM roles to the CI/CD service account while running automated periodic terraform plan checks to detect drift.
Configuring a Google Cloud Storage bucket with Object Versioning as the remote backend provides state locking, concurrency protection, and historical state recovery. Additionally, granting fine-grained predefined IAM roles to the build service account adheres to the principle of least privilege, while running periodic automated 'terraform plan' commands continuously monitors for configuration drift.

Adım Adım Çözüm

1
Configure remote state security and concurrency controls
Terraform state is safely stored in Google Cloud Storage with Object Versioning and strict access control.
Centralizing state in Cloud Storage enables object locking and prevents concurrent execution corruption, while versioning allows recovery from accidental state loss.
2
Implement identity security and drift detection
The Cloud Build pipeline operates with minimum required permissions, and configuration drift is automatically flagged.
Predefined granular IAM roles satisfy Google Cloud security best practices, and periodic automated terraform plan runs detect manual infrastructure modifications.

Anahtar Kavram

Terraform remote state management, IAM least privilege, and continuous drift detection in Google Cloud CI/CD pipelines.
Soru 1544Soru

A telecommunications company hosts an IoT telemetry ingestion service on a Compute Engine Managed Instance Group (MIG). The processing application is network I/O-bound, where capacity is constrained by open TCP socket connections per virtual machine rather than CPU usage. During scheduled hourly bursts of device reporting, incoming traffic drops connections because auto-scaling fails to trigger in time, and rapid scaling attempts fail due to reaching resource limits. Which TWO architecture modifications should you implement to ensure operational reliability and adequate capacity planning during peak reporting windows?

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure the MIG autoscaler using a custom Cloud Monitoring metric that tracks active TCP connections per instance.; Submit advance quota increase requests for regional Compute Engine CPU limits to cover maximum anticipated peak capacity.

Cevap

The correct architecture modifications are to configure the MIG autoscaler using a custom Cloud Monitoring metric tracking active TCP connections per instance, and to submit advance quota increase requests for regional Compute Engine CPU limits.
For I/O-bound workloads constrained by TCP connection limits, configuring custom Cloud Monitoring metrics ensures the autoscaler triggers based on actual socket usage rather than CPU load. Additionally, proactive quota management by requesting regional CPU quota increases in advance guarantees that Compute Engine can provision the necessary instances without hitting quota bounds during peak demand windows.

Adım Adım Çözüm

1
Identify the primary bottleneck for the I/O-bound telemetry ingestion service.
Recognized that open TCP connections, not CPU utilization, dictate instance capacity needs.
Default CPU utilization autoscaling is insufficient for network socket-constrained applications.
2
Select the appropriate autoscaling metric.
Configured custom Cloud Monitoring metrics tracking active TCP connections to drive MIG autoscaling.
Custom metrics accurately reflect workload saturation for non-CPU bound services.
3
Perform proactive capacity planning.
Requested regional Compute Engine CPU quota increases prior to peak reporting windows.
Quotas are hard limits evaluated upon instance creation and must be approved in advance to avoid scaling failures.

Anahtar Kavram

Auto-scaling network I/O workloads with custom Cloud Monitoring metrics and proactive regional capacity quota planning.
Soru 1545Soru

A financial enterprise is designing a hybrid cloud network connecting its primary on-premises facility to two Google Cloud regions (us-east1 and us-west1). The architecture requires resilient, fault-tolerant routing between on-premises and GCP, private access to Google APIs from cloud workloads, and connectivity to a third-party partner's VPC peered with the central hub VPC. Which TWO architectural decisions must be implemented to fulfill these requirements correctly? (Select TWO)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure Cloud Router with Global Dynamic Routing enabled to dynamically exchange BGP routes across all regions between the on-premises network and GCP.; Establish Private Google Access or Private Service Connect endpoints within the subnets to allow internal resources to reach Google APIs securely without public IP addresses.

Cevap

The two correct choices are to enable Global Dynamic Routing on Cloud Router for multi-region BGP route exchange, and to configure Private Google Access/Private Service Connect for secure internal API connectivity.
Global Dynamic Routing on Cloud Router provides multi-region BGP route exchange across all VPC subnets, and Private Google Access ensures cloud resources communicate with Google APIs over internal GCP infrastructure without public IP exposure.

Adım Adım Çözüm

1
Evaluate hybrid multi-region routing requirements.
Enabling Global Dynamic Routing allows Cloud Routers in any region to dynamically learn and propagate BGP routes across all subnets in all regions within the VPC.
Regional dynamic routing restricts route learning to the local region, whereas multi-region hybrid topologies require global route propagation.
2
Evaluate private API access requirements.
Private Google Access or Private Service Connect enables internal IP compute instances to securely communicate with Google APIs.
This prevents sensitive cloud application traffic from routing over public IP addresses.
3
Evaluate VPC Network Peering transitive routing limits.
Identify that VPC Network Peering does not extend on-premises hybrid connections to peered VPCs automatically.
VPC Peering is strictly non-transitive, so on-premises traffic cannot traverse a peering connection into a third VPC.

Anahtar Kavram

Multi-region hybrid network routing with Cloud Router and VPC Network Peering non-transitivity constraints
Soru 1546Soru

Match each Google Cloud database or storage service on the left with its corresponding workload capability and access pattern on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Cloud Bigtable
Firestore
Cloud Storage
Cloud Spanner

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Cloud Bigtable pairs with high-throughput wide-column NoSQL; Firestore pairs with serverless document database for mobile/web; Cloud Storage pairs with unstructured object storage; Cloud Spanner pairs with globally scalable transactional relational database.
Each service directly maps to its primary design use case: Cloud Bigtable for high-throughput NoSQL time-series and wide-column data, Firestore for document storage with mobile/web real-time sync, Cloud Storage for unstructured object storage, and Cloud Spanner for globally distributed relational SQL workloads requiring strong ACID consistency.

Adım Adım Çözüm

1
Identify the data model and storage format required for each service.
Cloud Bigtable is wide-column, Firestore is document-based, Cloud Storage is blob/object-based, and Cloud Spanner is relational.
Determining fundamental storage formats isolates applicable GCP storage categories.
2
Analyze access patterns and scale characteristics across each option.
Bigtable targets massive streaming write throughput, Firestore targets client synchronization, Cloud Storage targets file retrieval, and Spanner targets distributed transactional consistency.
Matching access patterns ensures selecting the optimal database service per workload requirement.

Anahtar Kavram

GCP Storage & Database Resource Selection
Soru 1547Soru

A logistics enterprise processes real-time delivery routing updates ingested from thousands of vehicle tracking devices into a Cloud Pub/Sub topic. A Compute Engine Managed Instance Group (MIG) running worker services pulls messages from the subscription. During morning dispatch hours, the message queue depth spikes rapidly, but CPU utilization across worker instances remains under 20% because workers spend most of their time waiting on network calls to external mapping APIs. The operations team needs to ensure timely processing during peak hours while avoiding unexpected infrastructure provisioning failures. Which autoscaling and capacity planning strategy should you recommend?

Cevabı ve açıklamayı göster

Cevap: Configure the MIG autoscaler based on a custom Cloud Monitoring metric tracking the ratio of unacknowledged Pub/Sub messages per instance, and request regional Compute Engine resource quota increases prior to peak events.

Cevap

Configure the MIG autoscaler based on a custom Cloud Monitoring metric tracking unacknowledged Pub/Sub messages per instance, and request regional Compute Engine resource quota increases in advance.
For I/O-bound queue consumers, CPU load remains low even when unacknowledged message queues accumulate. Scaling based on custom Cloud Monitoring metrics (such as Pub/Sub unacknowledged message count per instance) ensures that autoscaling responds directly to workload backlog. Furthermore, requesting regional quota increases in advance ensures that autoscaling policies are not blocked by project-level quota boundaries during peak traffic windows.

Adım Adım Çözüm

1
Identify workload bottlenecks
Recognize that the worker workload is I/O-bound (waiting on external network responses), making CPU utilization an ineffective signal for autoscaling.
I/O-bound processes consume minimal CPU despite significant task backlogs, causing standard CPU-based autoscalers to stay idle.
2
Select the correct autoscaling metric
Implement custom metric autoscaling based on queue depth (Pub/Sub unacknowledged message count per instance).
Queue depth accurately reflects queue backlog and workload demand for message processing applications.
3
Plan capacity and quotas
Submit regional quota increase requests well in advance of peak operational spikes.
Compute Engine quotas are enforced regionally and quota approval takes time; submitting in advance ensures the MIG autoscaler can provision required instances up to the maximum target size without hitting quota limits.

Anahtar Kavram

Queue-based Autoscaling & Pre-provisioning Quotas
Soru 1548Soru

A Cloud Architect is establishing a progressive release process using Google Cloud Deploy to update a microservice running on a Google Kubernetes Engine (GKE) cluster. To guarantee reliability and automated health verification before full traffic cutover, place the following deployment pipeline steps in the correct chronological order.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct sequence starts with pipeline definition, followed by release creation for the initial canary workload, execution of automated verification tests, promotion to 100% traffic, and maintaining the previous release state for rollback readiness.
A progressive delivery strategy requires defining pipeline rules first, deploying to a limited canary tier second, validating health via automated verification third, promoting to full production fourth, and maintaining previous release history for rapid rollback fifth.

Adım Adım Çözüm

1
Configure the pipeline declarative manifests.
Cloud Deploy and Skaffold configurations establish the delivery target stages and progressive traffic phases.
Infrastructure and pipeline configuration must exist prior to artifact deployment.
2
Instantiate the release in Cloud Deploy.
Container images and Kubernetes manifests are rendered and deployed to the initial 10% canary phase on GKE.
Creating a release triggers the actual rendering and initial phase deployment.
3
Run automated verification tasks.
Cloud Deploy verification containers execute tests to measure application health and SLIs on the canary workload.
Automated testing ensures defects are caught while blast radius is limited to canary traffic.
4
Promote the release to full traffic cutover.
Traffic shifts completely (100%) to the new workload across the GKE cluster upon successful verification.
Promotion gates validate health before replacing the active production version.
5
Maintain rollback readiness.
The target retains history of the previous stable release manifest.
Preserving previous release states ensures immediate operational recovery if unexpected issues arise post-release.

Anahtar Kavram

Progressive Canary Deployment Automation with Cloud Deploy
Soru 1549Soru

An enterprise SaaS platform hosts an internal reporting portal in a single Google Cloud region (uscentral1us-central1). The portal executes relational SQL queries against a 1.5 TB database. Query traffic follows a predictable pattern, occurring strictly during weekday business hours (9:00 AM to 5:00 PM), with negligible usage overnight and on weekends. The primary business objective is to minimize total infrastructure costs while ensuring adequate database performance during business hours. Which architectural strategy best satisfies these requirements?

Cevabı ve açıklamayı göster

Cevap: Maintain the workload on Cloud SQL for PostgreSQL and use Cloud Scheduler with Cloud Functions to dynamically scale up instance resources before business hours and scale down during off-peak periods.

Cevap

Maintain the workload on Cloud SQL for PostgreSQL and use Cloud Scheduler with Cloud Functions to dynamically scale up instance resources before business hours and scale down during off-peak periods.
Cloud SQL for PostgreSQL provides fully managed relational database functionality appropriate for single-region workloads. Because the traffic pattern is strictly tied to predictable business hours, leveraging automated scheduled scaling to scale up capacity before 9:00 AM and scale down after 5:00 PM minimizes operational spend without sacrificing performance when needed.

Adım Adım Çözüm

1
Analyze the workload pattern and scale requirements.
The database workload is predictable, limited to weekday business hours, and runs within a single region (uscentral1us-central1) on a 1.5 TB dataset.
Identifying that usage is predictable and cyclic allows for target capacity planning without paying for continuous peak compute.
2
Evaluate database platform options against business cost constraints.
Cloud SQL is the appropriate tier for a 1.5 TB single-region relational database. Cloud Spanner is over-provisioned for single-region needs, and GKE introduces unneeded management complexity.
Selecting managed single-region services keeps operational and service costs aligned with functional requirements.
3
Determine the optimal cost-optimization scaling strategy.
Automating instance scaling via Cloud Scheduler during known idle hours optimizes compute utilization and reduces billing hours for high-tier machine configurations.
Scheduled vertical scaling aligns resource spend directly with actual usage windows.

Anahtar Kavram

Cost-optimized database selection and scheduled resource scaling for predictable workloads.
Tahmini Süre:1m 30s
Soru 1550Soru

An energy utility enterprise is connecting its primary on-premises data center to Google Cloud to ingest real-time Smart Grid telemetry. The architecture requires a sustained throughput of 12 Gbps with a 99.99% availability SLA. The telemetry processing workloads are distributed across multiple department-specific VPC networks within the same GCP region. Which network topology and hybrid connectivity design satisfies the performance, availability, and routing requirements?

Cevabı ve açıklamayı göster

Cevap: Provision a Dedicated Interconnect pair with dual 10 Gbps links across two metropolitan availability domains connected to Cloud Routers, and configure a Shared VPC architecture where a host VPC contains the Interconnect attachments and service projects host the telemetry workloads.

Cevap

Establish a Dedicated Interconnect deployment using redundant VLAN attachments across dual edge domains configured in a Shared VPC host project, attaching department workloads as service projects.
Dedicated Interconnect with redundant links across dual edge availability domains delivers physical circuit capacities exceeding 10 Gbps required to support sustained 12 Gbps traffic while meeting Google's 99.99% availability SLA architecture guidelines. Using a Shared VPC host project allows department service projects to attach directly to subnets with native routing access to the hybrid Interconnect attachments, completely avoiding the routing limitations of non-transitive VPC Network Peering.

Adım Adım Çözüm

1
Evaluate hybrid connectivity bandwidth and SLA requirements
Sustained 12 Gbps throughput exceeds standard Cloud VPN tunnel limits (3 Gbps per tunnel) and single 10 Gbps links. Achieving a 99.99% SLA requires Dedicated Interconnect with redundant attachments across two Google Cloud edge availability domains (metropolitan areas).
Dedicated Interconnect provides enterprise-grade private connectivity supporting 10 Gbps or 100 Gbps physical circuits with SLA guarantees.
2
Evaluate multi-VPC network topology for hybrid route propagation
Shared VPC allows resources in multiple service projects to share subnets from a central host VPC that contains the Cloud Routers and Interconnect attachments.
VPC Network Peering does not support transitive routing, meaning peered Spoke VPCs cannot natively route traffic through a Hub VPC's Interconnect attachment to on-premises systems.

Anahtar Kavram

Designing Dedicated Interconnect with Shared VPC topology to support high-throughput, 99.99% SLA hybrid connectivity without encountering VPC Peering non-transitivity limits.
Soru 1551Soru

An enterprise cloud engineering team needs to safely transition manually provisioned Google Cloud SQL databases and Cloud Storage buckets into Terraform management while establishing a remote backend for state storage. Order the following operational steps in the correct logical sequence to complete this brownfield IaC onboarding workflow while preventing state corruption or resource re-creation.

Öğeleri doğru sıraya koymak için sürükleyin

Cevabı ve açıklamayı göster

Cevap

The correct operational order is: 1) Write the HCL configuration code and specify the backend, 2) Run terraform init to configure backend state storage and provider plugins, 3) Execute terraform import commands to map live resources to state, and 4) Run terraform plan to validate zero drift before active management.
The correct sequence begins by defining the resource blocks and backend parameters in HCL. Next, initializing the workspace (`terraform init`) downloads the GCP provider and connects to the GCS remote backend. Once initialized, existing GCP resources can be bound to the state file using `terraform import`. Finally, running `terraform plan` confirms that the HCL definitions perfectly mirror the imported resources, ensuring future automation will not cause unwanted resource replacement.

Adım Adım Çözüm

1
Define configuration and backend
HCL code is declared with backend metadata.
Terraform needs resource block declarations and backend settings before initialization.
2
Initialize Terraform backend
Provider plugins are downloaded and GCS remote backend is activated.
Backend initialization establishes state locking mechanisms in Cloud Storage before state modifications occur.
3
Import live infrastructure into state
Remote state file is populated with existing resource attributes.
Terraform import updates state metadata so Terraform becomes aware of existing GCP resources.
4
Validate state alignment via plan
Verification confirms zero proposed modifications.
Validating alignment ensures HCL configuration accurate matches live infrastructure prior to applying continuous deployments.

Anahtar Kavram

Brownfield Infrastructure as Code Adoption and Resource Import Workflow
Soru 1552Soru

An automotive technology company is migrating its legacy vehicle telemetry platform from an on-premises data center to Google Cloud. The legacy monolithic application relies on a central relational database. To resolve technical debt, the team plans to decouple the monolith into stateless microservices and modernize the database schema. The solution must ensure zero planned downtime and maintain full backward compatibility during the transition. Which strategy should the Cloud Architect recommend?

Cevabı ve açıklamayı göster

Cevap: Migrate the relational workload to Cloud SQL using Database Migration Service, and adopt an expand-and-contract schema design pattern alongside deploying stateless microservices to Cloud Run.

Cevap

Migrate the relational workload to Cloud SQL using Database Migration Service, and adopt an expand-and-contract schema design pattern alongside deploying stateless microservices to Cloud Run.
The correct strategy combines Database Migration Service (DMS) for continuous minimal-downtime database replication, Cloud Run for hosting serverless stateless microservices, and the expand-and-contract schema refactoring pattern. Expand-and-contract separates database updates into additive changes (expand), migration of access patterns, and removal of legacy fields (contract), ensuring zero downtime and backward compatibility throughout the migration.

Adım Adım Çözüm

1
Analyze workload compute and database requirements.
Identified stateless HTTP microservices suitable for serverless container execution and a standard relational database workload.
Cloud Run eliminates infrastructure management overhead for stateless containers, while Cloud SQL accommodates standard relational databases without unnecessary Cloud Spanner complexity.
2
Evaluate database schema modernization strategies for zero-downtime migrations.
Selected the expand-and-contract (parallel run) schema refactoring pattern.
Expand-and-contract allows new fields and structures to be added without breaking legacy queries, allowing phased microservice cutovers without application downtime.
3
Select data replication tooling.
Configured Database Migration Service (DMS) for continuous initial migration.
DMS enables continuous data synchronization from source to target Cloud SQL instance until final cutover.

Anahtar Kavram

Managing Technical Debt and Database Schema Evolution during Cloud Migrations
Soru 1553Soru

An enterprise financial analytics company runs an event-driven risk assessment workload on Compute Engine Managed Instance Groups (MIGs). The application receives trade messages from a queue, processes heavy calculations, and stores the results in a database. During periods of sudden market volatility, trade queue lengths increase dramatically while worker VM CPU utilization remains low due to database connection waiting times. Additionally, rapid scaling attempts during recent market events failed because the project hit regional instance limit ceilings. Which TWO architectural actions should a Cloud Architect implement to ensure auto-scaling reliability and adequate operational capacity during peak events? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure the MIG auto-scaler to scale based on a custom Cloud Monitoring metric representing unprocessed message queue depth instead of CPU utilization.; Request regional Compute Engine CPU quota increases in advance and implement Compute Engine capacity reservations for baseline capacity in target zones.

Cevap

The correct recommendations are configuring MIG auto-scaling using custom queue depth metrics in Cloud Monitoring, and requesting regional CPU quota increases in advance alongside Compute Engine capacity reservations.
Scaling based on custom metrics (such as queue depth) ensures I/O-bound workers scale according to true backlog demand rather than low CPU utilization. Additionally, requesting proactive quota increases and creating capacity reservations ensures that both logical quota room and physical infrastructure are guaranteed during unexpected traffic spikes.

Adım Adım Çözüm

1
Analyze workload scaling triggers
Identify that the workload bottleneck is queue backlogs and I/O wait times rather than CPU saturation.
CPU-based scaling fails for I/O-bound worker pools; Cloud Monitoring custom queue depth metrics trigger scaling proportional to incoming trade message backlogs.
2
Analyze capacity management and quota constraints
Identify that auto-scaling cannot exceed regional GCP quotas or guarantee hardware availability without explicit configuration.
Requesting regional quota increases prevents API provision errors during rapid scale-up, while zonal capacity reservations ensure physical Compute Engine resources are reserved for peak events.

Anahtar Kavram

Custom Metric Auto-scaling & Compute Capacity Planning
Soru 1554Soru

An energy enterprise collects telemetry from millions of smart grid sensors. They are establishing hybrid connectivity between their primary on-premises data center and Google Cloud. The workload requires a sustained throughput of 12 Gbps with a strict 99.99% availability SLA. Additionally, three isolated workload environments (Production, Analytics, and Staging) residing in distinct VPC networks must reach on-premises resources. A draft proposal suggests deploying an HA VPN gateway to a central Transit VPC and connecting the spoke VPCs via VPC Network Peering so they can route through the Transit VPC to on-premises. Which architectural modification should a Cloud Architect implement to meet all throughput, availability SLA, and multi-VPC connectivity requirements?

Cevabı ve açıklamayı göster

Cevap: Provision Dedicated Interconnect with redundant 10 Gbps circuits across two metropolitan locations, and replace the Transit-Spoke VPC peering model with a Shared VPC architecture where the Host VPC contains the Interconnect VLAN attachments and Service Projects house the workload subnets.

Cevap

Provision Dedicated Interconnect with redundant circuits across two metropolitan locations, and implement a Shared VPC topology where the Host VPC manages the VLAN attachments and Service Projects host the workload environments.
To satisfy a continuous 12 Gbps throughput requirement and a 99.99% availability SLA, Google Cloud mandates Dedicated Interconnect deployed across two metropolitan locations with dual attachments in each metro. Furthermore, because VPC Network Peering does not support transitive routing, substituting the peered transit network with a Shared VPC structure enables workload subnets in service projects to natively send traffic over the Host VPC's Interconnect VLAN attachments.

Adım Adım Çözüm

1
Analyze hybrid connectivity throughput and SLA constraints.
The requirement specifies 12 Gbps sustained bandwidth and a 99.99% SLA. HA VPN caps at 3 Gbps per tunnel and is unsuitable for primary 12 Gbps traffic. Dedicated Interconnect with 10 Gbps links deployed across 2 metros (4 connections total across 2 edge availability domains per metro) is required to meet the 99.99% SLA.
Google Cloud requires dual-metro Dedicated Interconnect topology to guarantee a 99.99% availability SLA for hybrid connectivity.
2
Evaluate multi-VPC routing topology constraints.
VPC Network Peering is non-transitive. Spoke VPCs peered to a central Transit VPC cannot route traffic through the Transit VPC's hybrid connections (Interconnect or VPN) to reach on-premises networks.
Directing traffic from multiple spoke VPCs over a central hybrid connection via VPC Peering fails due to GCP network protocol boundaries.
3
Select the correct topology modification.
By transitioning to a Shared VPC model, the Interconnect attachments reside in the Host VPC, while subnets defined in the Host VPC are shared directly with Service Projects (Production, Analytics, Staging). Workloads use the Host VPC's routing table and Interconnect seamlessly.
Shared VPC eliminates the need for transitive peering by giving service projects native subnet access to the Host VPC's hybrid connections.

Anahtar Kavram

Designing High-Availability Dedicated Interconnect and Shared VPC Topologies
Tahmini Süre:2m 0s
Soru 1555Soru

A multinational enterprise is designing a hybrid network architecture to connect its on-premises data centers with Google Cloud VPCs. Match each GCP hybrid networking component on the left with the architectural requirement or design constraint it satisfies on the right.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Dedicated Interconnect
HA VPN
Partner Interconnect
Cloud Router

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Dedicated Interconnect pairs with direct 10/100 Gbps physical colocation connectivity; HA VPN pairs with 99.99% SLA IPsec connections over the public internet; Partner Interconnect pairs with sub-10 Gbps connectivity via service providers; Cloud Router pairs with dynamic BGP route control plane management.
Each GCP hybrid networking component directly matches its functional constraint: Dedicated Interconnect delivers unencrypted 10/100 Gbps direct physical colocation links; HA VPN provides 99.99% available IPsec tunnels over public transit; Partner Interconnect offers sub-10 Gbps service-provider-managed connections; Cloud Router provides dynamic BGP control plane routing.

Adım Adım Çözüm

1
Identify direct high-bandwidth physical connection options
Dedicated Interconnect connects directly at a Google colocation facility using 10 Gbps or 100 Gbps physical circuits.
Direct private physical connections at colocation facilities meet strict high-throughput SLA demands.
2
Identify high-availability internet-based encrypted options
HA VPN delivers 99.99% SLA using dual active-active IPsec gateway tunnels over public internet routes.
HA VPN provides encrypted traffic transport with high availability topology requirements.
3
Identify sub-10 Gbps service provider connectivity options
Partner Interconnect bridges on-premises locations to GCP via third-party service provider networks for fractional bandwidth capacities.
Partner Interconnect supports data transport without requiring direct physical colocation infrastructure.
4
Determine the control plane mechanism for dynamic routing
Cloud Router establishes BGP sessions to exchange topology routes dynamically between VPCs and on-premises gateways.
Dynamic BGP route advertisement eliminates static route maintenance across hybrid links.

Anahtar Kavram

Designing Hybrid Network Architecture and Connectivity Controls
Tahmini Süre:1m 30s
Soru 1556Soru

A global pharmaceutical enterprise is modernizing its network architecture to support high-throughput genomic data transfers, remote lab connectivity, and multi-tenant environment isolation. Match each architectural constraint or requirement to the most appropriate Google Cloud hybrid networking service or deployment pattern.

Soldaki öğeye tıklayın, sonra eşleşen sağdaki öğeye tıklayın

Öğeler

Requires a direct, private physical connection providing 100 Gbps bandwidth, low latency, and a 99.99% availability SLA without routing traffic over the public internet.
Requires SLA-backed 99.99% availability for encrypted hybrid connectivity over public internet lines to remote clinical trial sites, utilizing dynamic BGP routing.
Requires connecting on-premises data centers to GCP where physical presence at a Google colocation facility is unavailable, utilizing a supported service provider.
Requires interconnecting hundreds of isolated spoke VPCs to central hybrid connectivity pipelines without creating a complex, non-transitive mesh of individual VPC network peerings.

Eşleşmeler

Cevabı ve açıklamayı göster

Cevap

Direct 100 Gbps private connection with 99.99% SLA matches Dedicated Interconnect with redundant edge availability domains. Encrypted connectivity over public internet with 99.99% SLA matches HA VPN with dual active IPsec tunnels and Cloud Router. Connection via a third-party service provider where direct colocation is absent matches Partner Interconnect. Scalable multi-VPC hub-and-spoke interconnectivity bypassing VPC Peering non-transitivity constraints matches Network Connectivity Center.
Each GCP hybrid networking service fulfills specific technical constraints: Dedicated Interconnect offers high-capacity (10/100 Gbps) direct physical lines; HA VPN supplies encrypted IPsec connections over public lines with 99.99% SLA; Partner Interconnect enables SLA-backed connections through service providers when direct colocation is absent; and Network Connectivity Center simplifies multi-VPC management while accommodating non-transitive VPC network boundaries.

Adım Adım Çözüm

1
Analyze high-bandwidth direct physical circuit requirements.
Identify Dedicated Interconnect as the only option supporting 100 Gbps direct circuits with 99.99% SLA using dual Edge Availability Domains (EADs).
Cloud VPN cannot reach 100 Gbps without hundreds of tunnels, and Partner Interconnect relies on third-party provider capacity rather than direct 100 Gbps circuits.
2
Evaluate internet-based encrypted hybrid connection needs.
Match HA VPN to the requirement for 99.99% SLA IPsec encrypted tunnel connectivity over public internet.
Classic VPN does not offer a 99.99% SLA, whereas HA VPN provides high availability through dual active interfaces and Cloud Router BGP integration.
3
Determine connectivity option when lacking physical colocation presence.
Select Partner Interconnect.
Partner Interconnect bridges the customer network and GCP through a certified service provider when direct physical meet-me location presence is unavailable.
4
Resolve multi-VPC routing complexity and VPC Peering transitivity limitations.
Assign Network Connectivity Center (NCC) as the central hub solution for managing spoke VPC networks.
VPC Network Peering is strictly non-transitive, meaning traffic cannot hop across intermediate VPCs without custom VPN or proxy appliances, whereas NCC handles spoke routing centrally.

Anahtar Kavram

Selecting and architecting Google Cloud hybrid connectivity options (Dedicated Interconnect, Partner Interconnect, HA VPN, and Network Connectivity Center) based on SLA, bandwidth, encryption, physical colocation capability, and VPC transitivity constraints.
Soru 1557Soru

A telehealth organization is designing a solution to handle patient document processing and report generation. The document generation service is a stateless HTTP-based microservice that experiences unpredictable, bursty usage with long periods of zero traffic. Reports must be rendered on demand, and generated PDF files must be retained for seven years to comply with health regulations. The files are accessed frequently during the first 30 days after creation, but rarely accessed afterward. The organization wants to minimize operational maintenance and overall cloud expenditure, ensuring costs scale to zero during idle periods. Which architecture best meets these business and cost optimization requirements?

Cevabı ve açıklamayı göster

Cevap: Deploy the microservice on Cloud Run, and store generated PDF reports in a Cloud Storage bucket configured with an Object Lifecycle Management rule to transition objects to Archive Storage after 30 days.

Cevap

Deploy the microservice on Cloud Run, and store generated PDF reports in a Cloud Storage bucket configured with an Object Lifecycle Management rule to transition objects to Archive Storage after 30 days.
Cloud Run provides serverless compute execution that automatically scales down to zero instances during idle periods, ensuring costs are incurred only when HTTP requests are actively processed. Paired with Cloud Storage Object Lifecycle Management, files are stored cost-effectively during their active 30-day window in Standard class and then transitioned to Archive class to fulfill seven-year compliance storage requirements at minimal cost.

Adım Adım Çözüm

1
Analyze compute tier cost requirements.
Cloud Run is selected because it natively supports stateless HTTP workloads and scales down to zero instances, eliminating cost during zero-traffic idle times.
GKE cluster overhead or fixed VM commitments incur continuous baseline costs regardless of traffic volume.
2
Analyze storage access patterns and retention constraints.
Cloud Storage Standard class satisfies frequent access for the initial 30 days, while an Object Lifecycle Management policy transitioning files to Archive Storage minimizes 7-year retention costs.
Relational databases like Cloud Spanner are inefficient and expensive for storing unstructured binary blobs over long retention periods.

Anahtar Kavram

Serverless compute auto-scaling to zero paired with object storage lifecycle tiering for optimal cost governance.
Soru 1558Soru

A global healthcare provider is modernizing a legacy patient scheduling monolithic application to resolve architectural technical debt during its migration from an on-premises data center to Google Cloud. The application relies on an on-premises PostgreSQL relational database and stateless HTTP web microservices. The migration plan requires continuous database replication with near-zero downtime cutover and safe zero-downtime database schema evolutionary updates. Which TWO architectural and migration strategy patterns should the cloud architect recommend? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Implement the expand-and-contract (parallel change) pattern for database schema changes to support both legacy and modernized application code simultaneously.; Use Database Migration Service (DMS) with continuous Change Data Capture (CDC) to synchronize the on-premises PostgreSQL database to Cloud SQL prior to final cutover.

Cevap

The correct recommendations are implementing the expand-and-contract pattern for schema migrations and utilizing Database Migration Service with CDC for minimal downtime database replication.
Database Migration Service (DMS) with CDC provides continuous replication to Cloud SQL with minimal downtime during cutover. Pairing this with the expand-and-contract database migration pattern enables backward compatibility, allowing legacy and modernized applications to interact with the database safely during incremental rollout phases.

Adım Adım Çözüm

1
Analyze database continuous replication requirements for minimal downtime migration.
Database Migration Service (DMS) with Change Data Capture (CDC) enables continuous synchronization between on-premises PostgreSQL and Cloud SQL.
CDC tracks real-time data changes, enabling smooth transition during cutover with minimal application downtime.
2
Analyze database schema technical debt and zero-downtime evolution strategies.
The expand-and-contract (parallel change) schema migration pattern decouples database updates from application code releases.
By expanding the schema first (adding new fields without dropping old ones) and contracting later, both legacy and modern components remain fully operational.

Anahtar Kavram

Managing Technology Debt and Legacy Cloud Migrations via CDC replication and expand-and-contract schema migrations
Soru 1559Soru

A global e-commerce analytics company is modernizing a legacy inventory management platform to resolve architectural technical debt during its migration to Google Cloud. The system relies on an on-premises 8 TB transactional PostgreSQL database with heavy read and write traffic. The legacy architecture suffers from significant tech debt, including hardcoded IP addresses embedded across legacy components and unversioned database schemas. The company requires a migration strategy that supports continuous data replication to achieve near-zero downtime (under 15 minutes cutover) while decoupling application components from hardcoded database IP endpoints without modifying the legacy core code. Which migration architecture should the cloud architect recommend?

Cevabı ve açıklamayı göster

Cevap: Utilize Database Migration Service (DMS) to establish continuous change data capture (CDC) replication from the legacy PostgreSQL database to Cloud SQL for PostgreSQL, and implement Private Service Connect alongside Cloud DNS private zone entries to abstract endpoint IP addresses prior to cutover.

Cevap

Utilize Database Migration Service (DMS) to establish continuous change data capture (CDC) replication from the legacy PostgreSQL database to Cloud SQL for PostgreSQL, and implement Private Service Connect alongside Cloud DNS private zone entries to abstract endpoint IP addresses prior to cutover.
Database Migration Service (DMS) enables serverless, low-friction migration to Cloud SQL using native PostgreSQL replication and Change Data Capture (CDC), fulfilling the requirement for near-zero downtime cutover. Pairing Cloud SQL with Private Service Connect and Cloud DNS private zones abstracts database endpoints, resolving legacy technical debt stemming from hardcoded IP addresses.

Adım Adım Çözüm

1
Analyze the database migration requirements and constraints.
Identified an 8 TB PostgreSQL workload requiring continuous replication (under 15-minute cutover) and a mechanism to resolve hardcoded IP technical debt.
Managed replication services like DMS allow continuous CDC synchronization from source to target without long downtime.
2
Evaluate Google Cloud managed target services.
Selected Cloud SQL for PostgreSQL as the fully managed destination, eliminating self-management overhead.
Cloud SQL maintains engine compatibility with existing PostgreSQL schemas, avoiding complex application refactoring.
3
Address legacy endpoint technical debt.
Implemented Cloud DNS private zones and Private Service Connect to route traffic via DNS hostnames rather than hardcoded IPs.
Abstracting IP addresses through private DNS entries allows seamless cutover without updating application source code.

Anahtar Kavram

Managing Database Technical Debt and Low-Downtime Migration Patterns
Soru 1560Soru

An architectural modeling platform processes asynchronous 3D spatial rendering tasks submitted by enterprise users. The processing worker nodes are deployed on Compute Engine Managed Instance Groups (MIGs). Tasks are pulled from a Cloud Pub/Sub topic and processed by worker VMs, which spend most of their processing time waiting on I/O operations and database queries. The platform expects a fivefold traffic burst during an upcoming product launch. Which TWO actions should a Cloud Architect recommend to ensure the rendering system auto-scales efficiently and meets capacity demands during the burst? (Select TWO.)

Geçerli olan tümünü seçin

Cevabı ve açıklamayı göster

Cevap: Configure the Managed Instance Group auto-scaling policy to scale based on a Cloud Monitoring custom metric tracking unacknowledged messages per worker instance.; Audit regional Compute Engine vCPU quota limits in advance and submit quota increase requests for the target regions prior to the launch.

Cevap

The platform should scale the Managed Instance Group based on a Cloud Monitoring custom metric tracking unacknowledged messages per worker instance, and proactively request regional Compute Engine vCPU quota increases prior to the launch event.
For I/O-bound queue processing workloads, auto-scaling should be based on task backlog metrics (such as Cloud Pub/Sub unacknowledged message count per instance) rather than CPU usage. Additionally, capacity planning requires verifying and requesting vCPU quota increases ahead of anticipated traffic bursts so that auto-scaling is not blocked by platform quota limits.

Adım Adım Çözüm

1
Analyze workload characteristics
Identify that the workload is I/O-bound and queue-driven by Cloud Pub/Sub.
CPU utilization does not accurately reflect work backlogs for I/O-bound worker processes.
2
Select appropriate auto-scaling metric
Choose queue backlog metrics (unacknowledged messages per instance) via Cloud Monitoring.
This guarantees that the MIG scales out when task backlog increases regardless of CPU load.
3
Perform capacity planning
Check regional Compute Engine vCPU quotas and request increases before the event.
MIG auto-scalers are constrained by project quota limits and cannot spawn instances if quotas are exhausted.

Anahtar Kavram

Auto-scaling metric selection for queue-driven/I-O bound workloads and proactive vCPU quota management in GCP.
ÖncekiSayfa 78 / 80Sonraki
Tüm alıştırma soruları — Google Cloud Professional Cloud Architect | Examkin