手に入れよう！は2024年最新の有効な実践問題であなたのProfessional-Cloud-Architect試験を合格させる（本日更新された270問)
Google Cloud Certified Professional-Cloud-Architect試験実践テスト問題集解答豪華セットを使おう！
質問 # 21
Your company has successfully migrated to the cloud and wants to analyze their data stream to optimize operations. They do not have any existing code for this analysis, so they are exploring all their options.
These options include a mix of batch and stream processing, as they are running some hourly jobs and live- processing some data as it comes in.
Which technology should they use for this?
- A. Google Compute Engine with Google BigQuery
- B. Google Container Engine with Bigtable
- C. Google Cloud Dataproc
- D. Google Cloud Dataflow
正解：D
解説：
Cloud Dataflow is a fully-managed service for transforming and enriching data in stream (real time) and batch (historical) modes with equal reliability and expressiveness -- no more complex workarounds or compromises needed.
Reference: https://cloud.google.com/dataflow/
質問 # 22
You want to ensure Dress4Win's sales and tax records remain available for infrequent viewing by auditors
for at least 10 years.
Cost optimization is your top priority.
Which cloud services should you choose?
- A. BigQuery to store the data, and a web server cluster in a managed instance group to access the data.
Google Cloud SQL mirrored across two distinct regions to store the data, and a Redis cluster in a
managed instance group to access the data. - B. Google Cloud Storage Nearline to store the data, and gsutil to access the data.
- C. Google Cloud Storage Coldline to store the data, and gsutil to access the data.
- D. Google Bigtabte with US or EU as location to store the data, and gcloud to access the data.
正解：C
解説：
Explanation/Reference:
Reference: https://cloud.google.com/storage/docs/storage-classes
質問 # 23
Your organization has decided to restrict the use of external IP addresses on instances to only approved instances. You want to enforce this requirement across all of your Virtual Private Clouds (VPCs). What should you do?
- A. Create a new VPC in custom mode. Create a new subnet for the approved instances, and set a default route to the internet gateway on this new subnet.
- B. Remove the default route on all VPCs. Move all approved instances into a new subnet that has a default route to an internet gateway.
- C. Set an Organization Policy with a constraint on constraints/compute.vmExternalIpAccess. List the approved instances in the allowedValues list.
- D. Implement a Cloud NAT solution to remove the need for external IP addresses entirely.
正解：C
解説：
Reference: https://cloud.google.com/compute/docs/ip-addresses/reserve-static-external-ip-address
質問 # 24
The current Dress4win system architecture has high latency to some customers because it is located in
one data center.
As of a future evaluation and optimizing for performance in the cloud, Dresss4win wants to distribute its
system architecture to multiple locations when Google cloud platform.
Which approach should they use?
- A. Use regional managed instance groups and a global load balancer to increase performance because
the regional managed instance group can grow instances in each region separately based on traffic. - B. Use a global load balancer with a set of virtual machines that forward the requests to a closer group of
virtual machines managed by your operations team. - C. Use a global load balancer with a set of virtual machines that forward the requests to a closer group of
virtual machines as part of a separate managed instance groups. - D. Use regional managed instance groups and a global load balancer to increase reliability by providing
automatic failover between zones in different regions.
正解：C
解説：
Explanation/Reference:
Testlet 1
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe
using a website and mobile application. The company also cultivates an active social network that
connects their users with designers and retailers. They monetize their services through advertising, e-
commerce, referrals, and a freemium app model. The application has grown from a few servers in the
founder's garage to several hundred servers and appliances in a collocated data center. However, the
capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth
and the company's desire to innovate faster. Dress4Win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is moving their development and test
environments. They are also building a disaster recovery site, because their current infrastructure is at a
single location. They are not sure which components of their architecture they can migrate as is and which
components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location. All servers run Ubuntu LTS
v16.04.
Databases:
MySQL. 1 server for user data, inventory, static data:
- MySQL 5.8
- 8 core CPUs
- 128 GB of RAM
- 2x 5 TB HDD (RAID 1)
Redis 3 server cluster for metadata, social graph, caching. Each server is:
- Redis 3.2
- 4 core CPUs
- 32GB of RAM
Compute:
40 Web Application servers providing micro-services based APIs and static content.
- Tomcat - Java
- Nginx
- 4 core CPUs
- 32 GB of RAM
20 Apache Hadoop/Spark servers:
- Data analysis
- Real-time trending calculations
- 8 core CPUS
- 128 GB of RAM
- 4x 5 TB HDD (RAID 1)
3 RabbitMQ servers for messaging, social notifications, and events:
- 8 core CPUs
- 32GB of RAM
Miscellaneous servers:
- Jenkins, monitoring, bastion hosts, security scanners
- 8 core CPUs
- 32GB of RAM
Storage appliances:
iSCSI for VM hosts
Fiber channel SAN - MySQL databases
- 1 PB total storage; 400 TB available
NAS - image storage, logs, backups
- 100 TB total storage; 35 TB available
Business Requirements
Build a reliable and reproducible environment with scaled parity of production.
Improve security by defining and adhering to a set of security and Identity and Access Management
(IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
Analyze and optimize architecture for performance in the cloud.
Technical Requirements
Easily create non-production environment in the cloud.
Implement an automation framework for provisioning resources in cloud.
Implement a continuous deployment process for deploying applications to the on-premises datacenter
or cloud.
Support failover of the production environment to cloud during an emergency.
Encrypt data on the wire and at rest.
Support multiple private connections between the production data center and cloud environment.
Executive Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure.
They are also concerned that a competitor could use a public cloud platform to offset their up-front
investment and free them to focus on developing better features. Our traffic patterns are highest in the
mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause
an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our
total cost of ownership (TCO) analysis over the next 5 years for a public cloud strategy achieves a cost
reduction between 30% and 50% over our current model.
質問 # 25
Your agricultural division is experimenting with fully autonomous vehicles.
You want your architecture to promote strong security during vehicle operation.
Which two architecture should you consider?
Choose 2 answers:
- A. Use a trusted platform module (TPM) and verify firmware and binaries on boot.
- B. Require IPv6 for connectivity to ensure a secure address space.
- C. Treat every micro service call between modules on the vehicle as untrusted.
- D. Use multiple connectivity subsystems for redundancy.
- E. Enclose the vehicle's drive electronics in a Faraday cage to isolate chips.
- F. Use a functional programming language to isolate code execution cycles.
正解：A、E
質問 # 26
Your customer wants to capture multiple GBs of aggregate real-time key performance indicators (KPIs) from their game servers running on Google Cloud Platform and monitor the KPIs with low latency. How should they capture the KPIs?
- A. Schedule BigQuery load jobs to ingest analytics files uploaded to Cloud Storage every ten minutes, and visualize the results in Google Data Studio.
- B. Output custom metrics to Stackdriver from the game servers, and create a Dashboard in Stackdriver Monitoring Console to view them.
- C. Insert the KPIs into Cloud Datastore entities, and run ad hoc analysis and visualizations of them in Cloud Datalab.
- D. Store time-series data from the game servers in Google Bigtable, and view it using Google Data Studio.
正解：D
解説：
Reference:https://cloud.google.com/solutions/data-lifecycle-cloud-platform
質問 # 27
You are creating a solution to remove backup files older than 90 days from your backup Cloud Storage bucket. You want to optimize ongoing Cloud Storage spend. What should you do?
- A. Schedule a cron script using gsutil ls -1 gs://backups/** to find and remove items older than 90 days and schedule it with cron.
- B. Write a lifecycle management rule in XML and push it to the bucket with gsutil.
- C. Schedule a cron script using gsutil is -lr gs://backups/** to find and remove items older than 90 days.
- D. Write a lifecycle management rule in JSON and push it to the bucket with gsutil.
正解：D
解説：
Reference:
https://cloud.google.com/storage/docs/gsutil/commands/lifecycle
質問 # 28
Your company has decided to make a major revision of their API in order to create better experiences for their developers. They need to keep the old version of the API available and deployable, while allowing new customers and testers to try out the new API. They want to keep the same SSL and DNS records in place to serve both APIs. What should they do?
- A. Configure a new load balancer for the new version of the API.
- B. Have the old API forward traffic to the new API based on the path.
- C. Use separate backend pools for each API path behind the load balancer.
- D. Reconfigure old clients to use a new endpoint for the new API.
正解：C
解説：
A is not correct because a single load balancer with URL maps is sufficient.
B is not correct because it goes against the requirements. The company wants to keep the old API available while new customers and testers try the new API.
C is not correct because it is not a requirement to decommission the implementation behind the old API Moreover, it introduces unnecessary risk in case bugs or incompatibilities are discovered in the new API.
D is correct because an HTTP(S) load balancer can direct traffic reaching a single IP to different backends based on the incoming URL.
質問 # 29
Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?
- A. Use Compute Engine to create an Active Directory (AD) domain controller that is a replica of the on- premises AD domain controller using Google Cloud Directory Sync.
- B. Use Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain controller as an identity provider.
- C. Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities and configure SAML SSO.
- D. Use the Admin Directory API to authenticate against the Active Directory domain controller.
正解：C
解説：
https://cloud.google.com/blog/products/identity-security/using-your-existing-identitymanagement- system-with-google-cloud-platform
質問 # 30
Your company is forecasting a sharp increase in the number and size of Apache Spark and Hadoop jobs being run on your local datacenter You want to utilize the cloud to help you scale this upcoming demand with the least amount of operations work and code change.
Which product should you use?
- A. Google Compute Engine
- B. Google Container Engine
- C. Google Cloud Dataflow
- D. Google Cloud Dataproc
正解：D
質問 # 31
Auditors visit your teams every 12 months and ask to review all the Google Cloud Identity and Access Management (Cloud IAM) policy changes in the previous 12 months. You want to streamline and expedite the analysis and audit process. What should you do?
- A. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor.
- B. Use cloud functions to transfer log entries to Google Cloud SQL and use ACLS and views to limit an auditor's view.
- C. Create custom Google Stackdriver alerts and send them to the auditor.
- D. Enable Google Cloud Storage (GCS) log export to audit logs Into a GCS bucket and delegate access to the bucket.
正解：A
質問 # 32
Your company wants to track whether someone is present in a meeting room reserved for a scheduled meeting. There are 1000 meeting rooms across 5 offices on 3 continents. Each room is equipped with a motion sensor that reports its status every second. The data from the motion detector includes only a sensor ID and several different discrete items of information. Analysts will use this data, together with information about account owners and office locations. Which database type should you use?
- A. NoSQL
- B. Relational
- C. Blobstore
- D. Flat file
正解：A
質問 # 33
You have an application deployed on Google Kubernetes Engine using a Deployment named echo-deployment.
The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application. What should you do?
- A. Update the deployment yaml file with the new container image. Use kubectl delete deployment/ echo-deployment and kubectl create -f <yaml-file>
- B. Update the service yaml file which the new container image. Use kubectl delete service/echo- service and kubectl create -f <yaml-file>
- C. Use the rolling update functionality of the Instance Group behind the Kubernetes cluster
- D. Use kubectl set image deployment/echo-deployment <new-image>
正解：C
解説：
Explanation/Reference: https://cloud.google.com/kubernetes-engine/docs/how-to/updating-apps
質問 # 34
A recent audit that a new network was created in Your GCP project. In this network, a GCE instance has an SSH port open the world. You want to discover this network's origin. What should you do?
- A. Connect to the GCE instance using project SSH Keys. Identify previous logins in system logs, and match these with the project owners list.
- B. Navigate to the Activity page in the Home section. Set category to Data Access and search for Create VM entry.
- C. Search for Create VM entry in the Stackdriver alerting console.
- D. In the logging section of the console, specify GCE Network as the logging section. Search for the Create Insert entry.
正解：D
質問 # 35
You are migrating your on-premises solution to Google Cloud in several phases. You will use Cloud VPN to maintain a connection between your on-premises systems and Google Cloud until the migration is completed. You want to make sure all your on-premise systems remain reachable during this period. How should you organize your networking in Google Cloud?
- A. Use the same IP range on Google Cloud as you use on-premises
- B. Use the same IP range on Google Cloud as you use on-premises for your primary IP range and use a secondary range that does not overlap with the range you use on-premises
- C. Use an IP range on Google Cloud that does not overlap with the range you use on-premises
- D. Use an IP range on Google Cloud that does not overlap with the range you use on-premises for your primary IP range and use a secondary range with the same IP range as you use on-premises
正解：D
質問 # 36
Case Study: 5 - Dress4win
Company Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model. The application has grown from a few servers in the founder's garage to several hundred servers and appliances in a collocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster.
Dress4Win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is moving their development and test environments. They are also building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location. All servers run Ubuntu LTS v16.04.
Databases:
MySQL. 1 server for user data, inventory, static data:
* - MySQL 5.8
- 8 core CPUs
- 128 GB of RAM
- 2x 5 TB HDD (RAID 1)
Redis 3 server cluster for metadata, social graph, caching. Each server is:
* - Redis 3.2
- 4 core CPUs
- 32GB of RAM
Compute:
40 Web Application servers providing micro-services based APIs and static content.
* - Tomcat - Java
- Nginx
- 4 core CPUs
- 32 GB of RAM
20 Apache Hadoop/Spark servers:
* - Data analysis
- Real-time trending calculations
- 8 core CPUS
- 128 GB of RAM
- 4x 5 TB HDD (RAID 1)
3 RabbitMQ servers for messaging, social notifications, and events:
* - 8 core CPUs
- 32GB of RAM
Miscellaneous servers:
* - Jenkins, monitoring, bastion hosts, security scanners
- 8 core CPUs
- 32GB of RAM
Storage appliances:
iSCSI for VM hosts
* Fiber channel SAN - MySQL databases
* - 1 PB total storage; 400 TB available
NAS - image storage, logs, backups
* - 100 TB total storage; 35 TB available
Business Requirements
Build a reliable and reproducible environment with scaled parity of production.
* Improve security by defining and adhering to a set of security and Identity and Access
* Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
* Analyze and optimize architecture for performance in the cloud.
* Technical Requirements
Easily create non-production environment in the cloud.
* Implement an automation framework for provisioning resources in cloud.
* Implement a continuous deployment process for deploying applications to the on-premises
* datacenter or cloud.
Support failover of the production environment to cloud during an emergency.
* Encrypt data on the wire and at rest.
* Support multiple private connections between the production data center and cloud
* environment.
Executive Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a competitor could use a public cloud platform to offset their up-front investment and free them to focus on developing better features. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years for a public cloud strategy achieves a cost reduction between 30% and 50% over our current model.
For this question, refer to the Dress4Win case study. You want to ensure that your on-premises architecture meets business requirements before you migrate your solution.
What change in the on-premises architecture should you make?
- A. Replace RabbitMQ with Google Pub/Sub.
- B. Resize compute resources to match predefined Compute Engine machine types.
- C. Downgrade MySQL to v5.7, which is supported by Cloud SQL for MySQL.
- D. Containerize the micro services and host them in Google Kubernetes Engine.
正解：B
質問 # 37
For this question refer to the TerramEarth case study.
Which of TerramEarth's legacy enterprise processes will experience significant change as a result of increased Google Cloud Platform adoption.
- A. Capacity planning, TCO calculations, opex/capex allocation
- B. Data Center expansion, TCO calculations, utilization measurement
- C. Capacity planning, utilization measurement, data center expansion
- D. Opex/capex allocation, LAN changes, capacity planning
正解：A
解説：
Capacity planning, TCO calculations, opex/capex allocation From the case study, it can conclude that Management (CXO) all concern rapid provision of resources (infrastructure) for growing as well as cost management, such as Cost optimization in Infrastructure, trade up front capital expenditures (Capex) for ongoing operating expenditures (Opex), and Total cost of ownership (TCO)
質問 # 38
Your company just finished a rapid lift and shift to Google Compute Engine for your compute needs. You have another 9 months to design and deploy a more cloud-native solution.
Specifically, you want a system that is no-ops and auto-scaling. Which two compute products should you choose? Choose 2 answers
- A. Google Container Engine with containers
- B. Compute Engine with managed instance groups
- C. Compute Engine with containers
- D. Google App Engine Standard Environment
- E. Compute Engine with custom instance types
正解：A、D
解説：
B: With Container Engine, Google will automatically deploy your cluster for you, update, patch, secure the nodes.
Kubernetes Engine's cluster autoscaler automatically resizes clusters based on the demands of the workloads you want to run.
C: Solutions like Datastore, BigQuery, AppEngine, etc are truly NoOps.
App Engine by default scales the number of instances running up and down to match the load, thus providing consistent performance for your app at all times while minimizing idle instances and thus reducing cost.
Note: At a high level, NoOps means that there is no infrastructure to build out and manage during usage of the platform. Typically, the compromise you make with NoOps is that you lose control of the underlying infrastructure.
References: https://www.quora.com/How-well-does-Google-Container-Engine-support-Google- Cloud-Platform%E2%80%99s-NoOps-claim
質問 # 39
Your company is migrating its on-premises data center into the cloud. As part of the migration, you want to integrate Kubernetes Engine for workload orchestration. Parts of your architecture must also be PCI DSS- compliant. Which of the following is most accurate?
- A. Kubernetes Engine and GCP provide the tools you need to build a PCI DSS-compliant environment.
- B. Kubernetes Engine cannot be used under PCI DSS because it is considered shared hosting.
- C. App Engine is the only compute platform on GCP that is certified for PCI DSS hosting.
- D. All Google Cloud services are usable because Google Cloud Platform is certified PCI-compliant.
正解：A
質問 # 40
For this question, refer to the TerramEarth case study. TerramEarth has decided to store data files in
Cloud Storage. You need to configure Cloud Storage lifecycle rule to store 1 year of data and minimize file
storage cost.
Which two actions should you take?
- A. Create a Cloud Storage lifecycle rule with Age: "30", Storage Class: "Standard", and Action: "Set to
Coldline", and create a second GCS life-cycle rule with Age: "365", Storage Class: "Nearline", and
Action: "Delete". - B. Create a Cloud Storage lifecycle rule with Age: "30", Storage Class: "Coldline", and Action: "Set to
Nearline", and create a second GCS life-cycle rule with Age: "91", Storage Class: "Coldline", and
Action: "Set to Nearline". - C. Create a Cloud Storage lifecycle rule with Age: "30", Storage Class: "Standard", and Action: "Set to
Coldline", and create a second GCS life-cycle rule with Age: "365", Storage Class: "Coldline", and
Action: "Delete". - D. Create a Cloud Storage lifecycle rule with Age: "90", Storage Class: "Standard", and Action: "Set to
Nearline", and create a second GCS life-cycle rule with Age: "91", Storage Class: "Nearline", and
Action: "Set to Coldline".
正解：A
質問 # 41
For this question, refer to the TerramEarth case study. You need to implement a reliable, scalable GCP solution for the data warehouse for your company, TerramEarth.
Considering the TerramEarth business and technical requirements, what should you do?
- A. Replace the existing data warehouse with BigQuery. Use federated data sources.
- B. Replace the existing data warehouse with a Compute Engine instance with 96 CPUs.
- C. Replace the existing data warehouse with BigQuery. Use table partitioning.
- D. Replace the existing data warehouse with a Compute Engine instance with 96 CPUs. Add an additional Compute Engine preemptible instance with 32 CPUs.
正解：C
質問 # 42
......
完全版最新の問題集PDFで最新Professional-Cloud-Architect試験問題と解答：https://jp.fast2test.com/Professional-Cloud-Architect-premium-file.html
本日更新された最新のProfessional-Cloud-ArchitectのPDFはProfessional-Cloud-Architect無料お試し可能です：https://drive.google.com/open?id=1_ostv0ocati_kJqUf2QgnwkxvI6n6bYG