Tüm alıştırma soruları

An enterprise logistics company plans to store sensitive customer shipment records in Cloud Storage and analyze them using BigQuery. Security compliance mandates that the data must be protected at rest using Customer-Managed Encryption Keys (CMEK) managed via Cloud KMS. The security team requires strict adherence to least privilege, explicit separation of duties, and continuous compliance automation without giving service accounts administrative key control. Which TWO architectural design decisions and IAM configurations should you implement to meet these requirements?

A cloud architecture team is refactoring an event-driven data pipeline that processes real-time transaction events via Cloud Pub/Sub and persists aggregated records into Cloud Bigtable. To cut cloud costs and accelerate CI/CD build execution, the team must run unit and integration tests completely offline without interacting with real Google Cloud API endpoints. Which TWO configuration steps must be implemented to ensure the client SDKs route all network requests to the locally running emulators? (Select TWO.)

A healthcare enterprise is designing a secure CI/CD pipeline on Google Cloud using Cloud Build to automate infrastructure changes via Terraform and deploy containerized services. The security architect specifies that the build process must prevent privilege escalation, avoid local configuration state loss, and restrict network traffic to internal resources. Which TWO architectural practices should the team implement to satisfy these security and reliability requirements? (Select TWO.)

A software development team is building a microservices-based event processing application on Google Cloud that relies heavily on Cloud Pub/Sub and Cloud Datastore. The team leads report high Google Cloud charges during early development iterations and security risks due to developers creating service account keys on their local workstations to authenticate against live Cloud resources during local testing. As a Cloud Architect advising the development and operations teams, which TWO actions should you recommend to establish a secure, cost-effective local development and integration testing workflow?

A digital media publishing company receives irregular batches of user-generated promotional video uploads. The raw video files must be processed and converted into multiple streaming formats. The processing workloads are stateless, highly parallelizable, and tolerant of temporary interruptions or delayed retries. The company wants to minimize compute costs for this batch processing pipeline while ensuring that raw uploads are automatically transitioned to lower-cost storage after 30 days. Which two architecture decisions should you recommend to satisfy these business requirements? (Select TWO.)

A online gaming studio runs its real-time multiplayer backend in region `us-west1` (primary) and maintains a pilot light disaster recovery (DR) setup in region `us-east1`. During a simulated regional disaster recovery test, the team successfully promotes the cross-region database replica in `us-east1`. However, when the automated scaling scripts attempt to rapidly scale up the Managed Instance Groups (MIGs) in `us-east1` to handle the full production load, instance creation fails due to exceeding regional CPU limits (`QUOTA_EXCEEDED`). Which operational measure should the cloud architect implement to ensure reliable business continuity and failover execution?

A digital healthcare company runs patient telemetry and microservice workloads across Google Kubernetes Engine (GKE) clusters and on-premises infrastructure. The enterprise operations team needs to establish a centralized observability architecture. Requirements dictate that all administrative audit logs and application error events must be securely routed to a BigQuery dataset located in a dedicated compliance project for long-term retention. Additionally, operational metrics must stream into Cloud Monitoring, and non-essential debug logs must be filtered out without inadvertently dropping high-severity error events or audit records. Which architecture best meets these business and operational requirements following Google Cloud recommended practices?

An enterprise Site Reliability Engineering (SRE) team is implementing an automated incident response and notification suppression pipeline on Google Cloud for a mission-critical financial settlement service. The pipeline must detect SLO degradation, prevent alert storms during active outages, execute automated self-healing without relying on long-lived service account keys or primitive IAM roles, and archive operational telemetry for post-mortems. In what chronological sequence should the SRE team structure the operational steps for this automated incident lifecycle?

A healthcare provider processes nightly patient diagnostic imaging datasets using batch processing worker VMs in Google Cloud Compute Engine. During peak overnight runs, the workload rapidly scales from 20 instances to 500 $n2-standard-8$ instances to ensure completion before morning clinical operations. During a scaling dry run, instance creation failed after reaching 100 instances due to regional resource limits. Which strategy should the cloud architect implement to ensure reliable infrastructure scaling and capacity for these batch workloads?

A financial analytics firm provisions its multi-environment Google Cloud infrastructure using Terraform executed via Cloud Build CI/CD pipelines. The lead cloud architect must establish a centralized Infrastructure as Code (IaC) governance model that prevents concurrent state updates, protects state file integrity, and adheres to the principle of least privilege. Which strategy should the architect implement?

A telemetry organization ingests vehicle diagnostic logs into Cloud Storage. Once a week, an intensive batch processing job analyzes the aggregated files. The processing run requires substantial compute capacity for approximately 6 hours, can tolerate individual node interruptions, and must complete within a 12-hour SLA window. The business objective is to minimize total compute costs while avoiding unnecessary baseline infrastructure expenditure. Which architecture should you recommend?

A multinational biomedical research organization is designing hybrid connectivity to transfer large genomic datasets between its on-premises laboratory center and Google Cloud VPCs. The architecture requires a minimum sustained dedicated bandwidth of $12\text{ Gbps}$, consistent low latency, a $99.99\%$ availability SLA, and mandatory IPsec encryption for all data in transit across the hybrid connection. Which hybrid network architecture should the lead Cloud Architect recommend?

An enterprise financial platform hosts a high-throughput transaction processing API on Cloud Run backed by Cloud Spanner. The business alignment requires maintaining a rolling 30-day Service Level Objective (SLO) of 99.9% successful HTTP requests, while enabling feature teams to maintain rapid deployment velocity. The Site Reliability Engineering (SRE) team needs to establish an automated alerting strategy in Google Cloud Monitoring that minimizes alert fatigue from brief transient spikes while ensuring immediate paging for major outages that threaten the monthly error budget. Which alerting implementation should you configure?

A platform engineering team is deploying a Python application in an on-premises container environment. The application needs to programmatically create and manage resources across multiple Google Cloud projects using Google Cloud Client Libraries. Enterprise security policy strictly forbids downloading service account JSON key files and mandates short-lived credentials alongside fine-grained authorization. Which TWO configuration steps should the team implement to establish secure programmatic interaction with Google Cloud APIs?

An enterprise deployment team uses an automated deployment service account to manage Compute Engine virtual machines in a dedicated Google Cloud folder named `App-Development`. The automated pipeline must be able to provision compute instances within this folder and assign a specific runtime service account (`app-runner-sa@`) to those instances. Following Google-recommended security practices and the principle of least privilege, which TWO IAM configuration steps should you execute?

A municipal water utility enterprise is migrating its smart meter analytics platform to Google Cloud. Executive leadership requires seamless operational continuity, strict compliance controls against data exfiltration, and a structured change management strategy for legacy operational staff transitioning from on-premises tools. Which TWO actions should the Lead Cloud Architect take to address technical requirements while facilitating organizational change? (Select TWO.)

A SaaS provider offering real-time document collaboration tools is planning a major enterprise product release expected to cause a 5x surge in API traffic overnight. The application tier runs on Compute Engine Managed Instance Groups (MIGs) handling I/O-intensive requests, backed by a standard Cloud SQL database. During load testing, engineers noticed that CPU load remains low even when network request queues back up, and compute capacity risks reaching default GCP project caps during peak hours. Which TWO actions should the Cloud Architect execute during capacity planning to ensure seamless infrastructure workload scaling? (Select TWO.)

A financial services organization runs a mission-critical payment processing workload on Google Cloud. To improve operational reliability and incident response, the SRE team needs to implement an automated alerting and self-healing incident management architecture. The solution must fulfill two requirements:
1. Alert the SRE team based on consumed service level objective (SLO) error budget rates to catch both rapid budget exhaustion and slow, persistent errors without triggering false positives from brief transient spikes.
2. Automatically trigger downstream remediation workflows securely during severe incidents without violating least-privilege principles.

Which TWO actions should the SRE team take to achieve these objectives?

A global gaming platform deployed on Google Cloud experiences periodic database latency spikes. These spikes cause temporary downstream HTTP 500 error bursts across Compute Engine backend instance groups. During these incidents, Cloud Monitoring generates hundreds of redundant notification emails per minute, causing severe alert fatigue. Furthermore, automated remediation scripts triggered directly by raw error thresholds attempt to reboot instance group VMs, leading to prolonged service degradation because load balancer health checks are configured to execute deep database queries. Which incident management and automated alerting architecture should you implement to eliminate alert storms and prevent cascading service outages during transient database latency?

A telemetry platform team operating a global IoT data ingestion service on Google Cloud is restructuring their deployment pipeline and environment governance. Currently, engineers perform manual infrastructure modifications through the Cloud Console and authenticate CI/CD jobs using long-lived service account keys saved locally. As a Principal Cloud Architect, you are advising the development and operations teams on implementing GCP best practices for automation, security, and state management. Which TWO practices should you recommend? (Select TWO.)