実践サンプルと問題集と指導には2021年最新のProfessional-Cloud-Architect有効なテスト問題集
最新 [2021年12月24日] 100%合格率保証付きの素晴らしいProfessional-Cloud-Architect試験問題PDF
Google Professional-Cloud-Architect 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
| トピック 7 |
|
| トピック 8 |
|
質問 21
You are using a single Cloud SQL instance to serve your application from a specific zone. You want to introduce high availability. What should you do?
- A. Create a failover replica instance in the same region, but in a different zone
- B. Create a read replica instance in a different region
- C. Create a failover replica instance in a different region
- D. Create a read replica instance in the same region, but in a different zone
正解: C
解説:
Reference:
https://cloud.google.com/sql/docs/mysql/high-availability
質問 22
Your company has multiple on-premises systems that serve as sources for reporting. The data has not been maintained well and has become degraded over time. You want to use Google- recommended practices to detect anomalies in your company data. What should you do?
- A. Connect Cloud Datalab to your on-premises systems. Use Cloud Datalab to explore and clean your data.
- B. Upload your files into Cloud Storage. Use Cloud Datalab to explore and clean your data.
- C. Upload your files into Cloud Storage. Use Cloud Dataprep to explore and clean your data.
- D. Connect Cloud Dataprep to your on-premises systems. Use Cloud Dataprep to explore and clean your data.
正解: C
質問 23
Your applications will be writing their logs to BigQuery for analysis. Each application should have its own table.
Any logs older than 45 days should be removed. You want to optimize storage and follow Google recommended practices. What should you do?
- A. Create a script that uses the BigQuery command line tool (bq) to remove records older than 45 days
- B. Rely on BigQuery's default behavior to prune application logs older than 45 days
- C. Make the tables time-partitioned, and configure the partition expiration at 45 days
- D. Configure the expiration time for your tables at 45 days
正解: C
解説:
Reference:
https://cloud.google.com/bigquery/docs/managing-partitioned-tables
質問 24
Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?
- A. Use the Admin Directory API to authenticate against the Active Directory domain controller.
- B. Use Compute Engine to create an Active Directory (AD) domain controller that is a replica of the on- premises AD domain controller using Google Cloud Directory Sync.
- C. Use Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain controller as an identity provider.
- D. Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities and configure SAML SSO.
正解: C
解説:
Explanation/Reference: https://cloud.google.com/blog/products/identity-security/using-your-existing-identity-management- system-with-google-cloud-platform
質問 25
A lead software engineer tells you that his new application design uses websockets and HTTP sessions that are not distributed across the web servers. You want to help him ensure his application will run property on Google Cloud Platform. What should you do?
- A. Review the encryption requirements for websocket connections with the security team.
- B. Help the engineer redesign the application to use a distributed user session service that does not rely on websockets and HTTP sessions.
- C. Meet with the cloud operations team and the engineer to discuss load balancer options.
- D. Help the engineer to convert his websocket code to use HTTP streaming.
正解: C
質問 26
Your company is planning to perform a lift and shift migration of their Linux RHEL 6.5+ virtual machines. The virtual machines are running in an on-premises VMware environment. You want to migrate them to Compute Engine following Google-recommended practices. What should you do?
- A. 1. Define a migration plan based on the list of the applications and their dependencies.
2. Migrate all virtual machines into Compute Engine individually with Migrate for Compute Engine. - B. 1. Perform an assessment of virtual machines running in the current VMware environment.
2. Install a third-party agent on all selected virtual machines.
3. Migrate all virtual machines into Compute Engine. - C. 1. Perform an assessment of virtual machines running in the current VMware environment.
2. Define a migration plan, prepare a Migrate for Compute Engine migration RunBook, and execute the migration. - D. 1. Perform an assessment of virtual machines running in the current VMware environment.
2. Create images of all disks. Import disks on Compute Engine.
3. Create standard virtual machines where the boot disks are the ones you have imported.
正解: C
解説:
The framework illustrated in the preceding diagram has four phases:
* Assess. In this phase, you assess your source environment, assess the workloads that you want to migrate to Google Cloud, and assess which VMs support each workload.
* Plan. In this phase, you create the basic infrastructure for Migrate for Compute Engine, such as provisioning the resource hierarchy and setting up network access.
* Deploy. In this phase, you migrate the VMs from the source environment to Compute Engine.
* Optimize. In this phase, you begin to take advantage of the cloud technologies and capabilities.
質問 27
Mountkirk Games has deployed their new backend on Google Cloud Platform (GCP). You want to create a through testing process for new versions of the backend before they are released to the public. You want the testing environment to scale in an economical way. How should you design the process?
- A. Use the existing infrastructure to test the GCP-based backend at scale
- B. Create a set of static environments in GCP to test different levels of load - for example, high, medium, and low
- C. Create a scalable environment in GCP for simulating production load
- D. Build stress tests into each component of your application using resources internal to GCP to simulate load
正解: C
解説:
From scenario: Requirements for Game Backend Platform
1. Dynamically scale up or down based on game activity
2. Connect to a managed NoSQL database service
3. Run customize Linux distro
質問 28
Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform.
Each tier (web, API, and database) scales independently of the others. Network traffic should flow through the web to the API tier and then on to the database tier. Traffic should not flow between the web and the database tier.
How should you configure the network?
- A. Add each tier to a different subnetwork
- B. Add tags to each tier and set up firewall rules to allow the desired traffic flow
- C. Add tags to each tier and set up routes to allow the desired traffic flow
- D. Set up software based firewalls on individual VMs
正解: B
解説:
Google Cloud Platform(GCP) enforces firewall rules through rules and tags. GCP rules and tags can be defined once and used across all regions.
Reference: https://cloud.google.com/docs/compare/openstack/
https://aws.amazon.com/it/blogs/aws/building-three-tier-architectures-with-security-groups/
質問 29
For this question, refer to the TerramEarth case study.
To speed up data retrieval, more vehicles will be upgraded to cellular connections and be able to transmit data to the ETL process. The current FTP process is error-prone and restarts the data transfer from the start of the file when connections fail, which happens often. You want to improve the reliability of the solution and minimize data transfer time on the cellular connections. What should you do?
- A. Use one Google Container Engine cluster of FTP servers. Save the data to a Multi- Regional bucket. Run the ETL process using data in the bucket.
- B. Directly transfer the files to a different Google Cloud Regional Storage bucket location in us, eu, and asia using Google APIs over HTTP(S). Run the ETL process to retrieve the data from each Regional bucket.
- C. Use multiple Google Container Engine clusters running FTP servers located in different regions. Save the data to Multi-Regional buckets in us, eu, and asia. Run the ETL process using the data in the bucket.
- D. Directly transfer the files to different Google Cloud Multi-Regional Storage bucket locations in us, eu, and asia using Google APIs over HTTP(S). Run the ETL process using the data in the bucket.
正解: B
解説:
Topic 3, JencoMart Case Study
Company Overview
JencoMart is a global retailer with over 10,000 stores in 16 countries. The stores carry a range of goods, such as groceries, tires, and jewelry. One of the company's core values is excellent customer service. In addition, they recently introduced an environmental policy to reduce their carbon output by 50% over the next 5 years.
Company Background
JencoMart started as a general store in 1931, and has grown into one of the world's leading brands known for great value and customer service. Over time, the company transitioned from only physical stores to a stores and online hybrid model, with 25% of sales online. Currently, JencoMart has little presence in Asia, but considers that market key for future growth.
Solution Concept
JencoMart wants to migrate several critical applications to the cloud but has not completed a technical review to determine their suitability for the cloud and the engineering required for migration. They currently host all of these applications on infrastructure that is at its end of life and is no longer supported.
Existing Technical Environment
JencoMart hosts all of its applications in 4 data centers: 3 in North American and 1 in Europe, most applications are dual-homed.
JencoMart understands the dependencies and resource usage metrics of their on-premises architecture.
Application Customer loyalty portal
LAMP (Linux, Apache, MySQL and PHP) application served from the two JencoMart- owned U.S. data centers.
Database
* Oracle Database stores user profiles
* 20 TB
* Complex table structure
* Well maintained, clean data
* Strong backup strategy
* PostgreSQL database stores user credentials
* Single-homed in US West
No redundancy
Backed up every 12 hours
* 100% uptime service level agreement (SLA)
* Authenticates all users
Compute
* 30 machines in US West Coast, each machine has:
Twin, dual core CPUs
32GB of RAM
* Twin 250 GB HDD (RAID 1)
* 20 machines in US East Coast, each machine has:
Single dual-core CPU
2 4 GB of RAM
* Twin 250 GB HDD (RAID 1)
Storage
* Access to shared 100 TB SAN in each location
* Tape backup every week
Business Requirements
* Optimize for capacity during peak periods and value during off-peak periods
* Guarantee service availably and support
* Reduce on-premises footprint and associated financial and environmental impact.
* Move to outsourcing model to avoid large upfront costs associated with infrastructure purchase
* Expand services into Asia.
Technical Requirements
* Assess key application for cloud suitability.
* Modify application for the cloud.
* Move applications to a new infrastructure.
* Leverage managed services wherever feasible
* Sunset 20% of capacity in existing data centers
* Decrease latency in Asia
CEO Statement
JencoMart will continue to develop personal relationships with our customers as more people access the web. The future of our retail business is in the global market and the connection between online and in-store experiences. As a large global company, we also have a responsibility to the environment through 'green' initiatives and polices.
CTO Statement
The challenges of operating data centers prevents focus on key technologies critical to our long-term success. Migrating our data services to a public cloud infrastructure will allow us to focus on big data and machine learning to improve our service customers.
CFO Statement
Since its founding JencoMart has invested heavily in our data services infrastructure.
However, because of changing market trends, we need to outsource our infrastructure to ensure our long-term success. This model will allow us to respond to increasing customer demand during peak and reduce costs.
質問 30
You want to make a copy of a production Linux virtual machine in the US-Central region. You want to manage and replace the copy easily if there are changes on the production virtual machine. You will deploy the copy as a new instance in a different project in the US-East region.
What steps must you take?
- A. Create an image file from the root disk with Linux dd command, create a new disk from the image file, and use it to create a new virtual machine instance in the US-East region.
- B. Create a snapshot of the root disk, create an image file in Google Cloud Storage from the snapshot, and create a new virtual machine instance in the US-East region using the image file for the root disk.
- C. Use the Linux dd and netcat commands to copy and stream the root disk contents to a new virtual machine instance in the US-East region.
- D. Create a snapshot of the root disk and select the snapshot as the root disk when you create a new virtual machine instance in the US-East region.
正解: B
解説:
A) This approach affects performance of the existing machine and incurs significant network costs.
B) This approach does not allow you to create the VM in the new project since snapshots are limited to the project in which they are taken.
C) dd will not work correctly on a mounted disk.
D) (Correct Answer) - This approach meets all of the requirements, it is easy to do and works cross project and cross region.
Reference Resources:
https://cloud.google.com/compute/docs/images/sharing-images-across-projects
質問 31
Your company has multiple on-premises systems that serve as sources for reporting. The data has not been maintained well and has become degraded over time. You want to use Google-recommended practices to detect anomalies in your company data. What should you do?
- A. Connect Cloud Datalab to your on-premises systems. Use Cloud Datalab to explore and clean your data.
- B. Upload your files into Cloud Storage. Use Cloud Dataprep to explore and clean your data.
- C. Connect Cloud Dataprep to your on-premises systems. Use Cloud Dataprep to explore and clean your data.
- D. Upload your files into Cloud Storage. Use Cloud Datalab to explore and clean your data.
正解: D
質問 32
A small number of API requests to your microservices-based application take a very long time. You know that each request to the API can traverse many services. You want to know which service takes the longest in those cases. What should you do?
- A. Instrument your application with Stackdnver Trace in order to break down the request latencies at each microservice.
- B. Set timeouts on your application so that you can fail requests faster.
- C. Send custom metrics for each of your requests to Stackdriver Monitoring.
- D. Use Stackdriver Monitoring to look for insights that show when your API latencies are high.
正解: A
解説:
Explanation
https://cloud.google.com/trace/docs/overview
質問 33
You need to set up Microsoft SQL Server on GCP. Management requires that there's no downtime in case of a data center outage in any of the zones within a GCP region. What should you do?
- A. Set up SQL Server Always On Availability Groups using Windows Failover Clustering. Place nodes in different zones.
- B. Set up SQL Server on Compute Engine, using Always On Availability Groups using Windows Failover Clustering. Place nodes in different subnets.
- C. Configure a Cloud SQL instance with high availability enabled.
- D. Configure a Cloud Spanner instance with a regional instance configuration.
正解: B
解説:
Explanation/Reference: https://cloud.google.com/solutions/sql-server-always-on-compute-engine
質問 34
Your company has an application running on multiple Compute Engine instances. You need to ensure that the application can communicate with an on-premises service that requires high throughput via internal IPs, while minimizing latency. What should you do?
- A. Configure a direct peering connection between the on-premises environment and Google Cloud.
- B. Configure a Cloud Dedicated Interconnect connection between the on-premises environment and Google Cloud.
- C. Use Cloud VPN to configure a VPN tunnel between the on-premises environment and Google Cloud.
- D. Use OpenVPN to configure a VPN tunnel between the on-premises environment and Google Cloud.
正解: C
解説:
Explanation
Reference https://cloud.google.com/architecture/setting-up-private-access-to-cloud-apis-through-vpn-tunnels
質問 35
An application development team has come to you for advice.They are planning to write and deploy an HTTP(S) API using Go 1.12. The API will have a very unpredictable workload and must remain reliable during peaks in traffic. They want to minimize operational overhead for this application. What approach should you recommend?
- A. Develop the application for App Engine Flexible environment using a custom runtime
- B. Develop the application for App Engine standard environment
- C. Develop an application with containers, and deploy to Google Kubernetes Engine (GKE)
- D. Use a Managed Instance Group when deploying to Compute Engine
正解: B
質問 36
You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address. You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly. What should you do?
- A. Create a tag on each instance with the name of the load balancer. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.
- B. Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.
- C. Ensure that a firewall rule exists to allow source traffic on HTTP/HTTPS to reach the load balancer.
- D. Assign a public IP to each instance and configure a firewall rule to allow the load balancer to reach the instance public IP.
正解: B
解説:
https://cloud.google.com/vpc/docs/using-firewalls
質問 37
Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Googlerecommended practices. What should you do?
- A. Move your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.
- B. Move your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.
- C. Install gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.
- D. Install gsutil on each server containing data. Use streaming transfers to upload the data into Cloud Storage.
正解: C
解説:
Reference: https://cloud.google.com/solutions/transferring-big-data-sets-to-gcp
質問 38
Dress4Win has asked you to recommend machine types they should deploy their application servers to.
How should you proceed?
- A. Perform a mapping of the on-premises physical hardware cores and RAM to the nearest machine types in the cloud.
- B. Recommend that Dress4Win deploy application servers to machine types that offer the highest RAM to CPU ratio available.
- C. Recommend that Dress4Win deploy into production with the smallest instances available, monitor them over time, and scale the machine type up until the desired performance is reached.
- D. Identify the number of virtual cores and RAM associated with the application server virtual machines align them to a custom machine type in the cloud, monitor performance, and scale the machine types up until the desired performance is reached.
正解: A
質問 39
Your company is building a new architecture to support its data-centric business focus. You are responsible for setting up the network. Your company's mobile and web-facing applications will be deployed on-premises, and all data analysis will be conducted in GCP. The plan is to process and load 7 years of archived .csv files totaling 900 TB of data and then continue loading 10 TB of data daily. You currently have an existing 100-MB internet connection.
What actions will meet your company's needs?
- A. Compress and upload both achieved files and files uploaded daily using the qsutil -m option.
- B. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish one Cloud VPN Tunnel to VPC networks over the public internet, and compares and upload files daily using the gsutil -m option.
- C. Lease a Transfer Appliance, upload archived files to it, and send it, and send it to Google to transfer archived data to Cloud Storage. Establish a connection with Google using a Dedicated Interconnect or Direct Peering connection and use it to upload files daily.
- D. Lease a Transfer Appliance, upload archived files to it, and send it to Google to transfer archived data to Cloud Storage. Establish a Cloud VPN Tunnel to VPC networks over the public internet, and compress and upload files daily.
正解: C
解説:
https://cloud.google.com/interconnect/docs/how-to/direct-peering
質問 40
You are building a continuous deployment pipeline for a project stored in a Git source repository and want to ensure that code changes can be verified deploying to production. What should you do?
- A. Use Spinnaker to deploy builds to production and run tests on production deployments.
- B. Use Jenkins to build the staging branches and the master branch. Build and deploy changes to production for 10% of users before doing a complete rollout.
- C. Use Jenkins to monitor tags in the repository. Deploy staging tags to a staging environment for testing.
After testing, tag the repository for production and deploy that to the production environment. - D. Use Spinnaker to deploy builds to production using the red/black deployment strategy so that changes can easily be rolled back.
正解: C
解説:
Automation Jenkins can monitor Git repo
質問 41
Auditors visit your teams every 12 months and ask to review all the Google Cloud Identity and Access Management (Cloud IAM) policy changes in the previous 12 months. You want to streamline and expedite the analysis and audit process. What should you do?
- A. Enable Google Cloud Storage (GCS) log export to audit logs Into a GCS bucket and delegate access to the bucket.
- B. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor.
- C. Use cloud functions to transfer log entries to Google Cloud SQL and use ACLS and views to limit an auditor's view.
- D. Create custom Google Stackdriver alerts and send them to the auditor.
正解: A
解説:
Explanation
Export the logs to Google Cloud Storage bucket - Archive Storage, as it will not be used for 1 year, price for which is $0.004 per GB per Month. The price for long term storage in BigQuery is $0.01 per GB per Month (250% more). Also for analysis purpose, whenever Auditors are there(once per year), you can use BigQuery and use GCS bucket as external data source. BigQuery supports querying Cloud Storage data from these storage classes:
Standard Nearline Coldline Archive
質問 42
You are using Cloud Shell and need to install a custom utility for use in a few weeks. Where can you store the file so it is in the default execution path and persists across sessions?
- A. /usr/local/bin
- B. ~/bin
- C. /google/scripts
- D. Cloud Storage
正解: A
解説:
https://medium.com/google-cloud/no-localhost-no-problem-using-google-cloud-shell-as-my-full-time-development-environment-22d5a1942439
質問 43
For this question, refer to the TerramEarth case study.
The TerramEarth development team wants to create an API to meet the company's business requirements. You want the development team to focus their development effort on business value versus creating a custom framework. Which method should they use?
- A. Use Google Container Engine with a Tomcat container with the Swagger (Open API Specification) framework. Focus on an API for dealers and partners.
- B. Use Google Container Engine with a Django Python container. Focus on an API for the public.
- C. Use Google App Engine with Google Cloud Endpoints. Focus on an API for dealers and partners.
- D. Use Google App Engine with a JAX-RS Jersey Java-based framework. Focus on an API for the public.
- E. Use Google App Engine with the Swagger (open API Specification) framework. Focus on an API for the public.
正解: E
質問 44
Your company provides a recommendation engine for retail customers. You are providing retail customers with an API where they can submit a user ID and the API returns a list of recommendations for that user. You are responsible for the API lifecycle and want to ensure stability for your customers in case the API makes backward-incompatible changes. You want to follow Google-recommended practices. What should you do?
- A. Use a versioning strategy for the APIs that increases the version number on every backward-incompatible change.
- B. Create a distribution list of all customers to inform them of an upcoming backward-incompatible change at least one month before replacing the old API with the new API.
- C. Use a versioning strategy for the APIs that adds the suffix "DEPRECATED" to the current API version number on every backward-incompatible change. Use the current version number for the new API.
- D. Create an automated process to generate API documentation, and update the public API documentation as part of the CI/CD process when deploying an update to the API.
正解: A
解説:
https://cloud.google.com/apis/design/versioning
All Google API interfaces must provide a major version number, which is encoded at the end of the protobuf package, and included as the first part of the URI path for REST APIs. If an API introduces a breaking change, such as removing or renaming a field, it must increment its API version number to ensure that existing user code does not suddenly break.
質問 45
For this question, refer to the Dress4Win case study.
At Dress4Win, an operations engineer wants to create a tow-cost solution to remotely archive copies of database backup files. The database files are compressed tar files stored in their current data center.
How should he proceed?
- A. Create a Cloud Storage Transfer Service Job to copy the files to a Coldline Storage bucket.
- B. Create a cron script using gsutil to copy the files to a Coldline Storage bucket.
- C. Create a Cloud Storage Transfer Service job to copy the files to a Regional Storage bucket.
- D. Create a cron script using gsutil to copy the files to a Regional Storage bucket.
正解: B
解説:
Follow these rules of thumb when deciding whether to use gsutil or Storage Transfer Service:
When transferring data from an on-premises location, use gsutil.
When transferring data from another cloud storage provider, use Storage Transfer Service.
Otherwise, evaluate both tools with respect to your specific scenario.
Use this guidance as a starting point. The specific details of your transfer scenario will also help you determine which tool is more appropriate
質問 46
......
Professional-Cloud-Architect時間限定！無料アクセス：https://jp.fast2test.com/Professional-Cloud-Architect-premium-file.html
Professional-Cloud-Architect認定有効な試験問題集と解答学習ガイド：https://drive.google.com/open?id=1LANy8f64Muhq63M34hmR8gmlfayi4tLv