Professional-Cloud-Architect無料試験問題と解答PDF最新問題2024年04月
最新Professional-Cloud-Architect試験問題集で最近更新された278問題
認定された専門家Cloud-Architectになるには、候補者は50の複数選択と複数選択の質問で構成される試験に合格する必要があります。これは2時間以内に完了する必要があります。この試験は、候補者がクラウドソリューションアーキテクチャを設計および計画し、GCPインフラストラクチャを管理および提供し、技術およびビジネスプロセスを最適化する能力をテストするように設計されています。
Google Professional-Cloud-Architect 認定は、IT プロフェッショナルやクラウドアーキテクトが、GCP を使用したクラウドソリューションの設計、開発、管理における専門知識を証明するための貴重な資格です。認定試験は、さまざまなトピックをカバーし、候補者が組織のニーズに合わせてスケーラブルで信頼性の高く、コスト効果の高いクラウドソリューションを設計、展開できる能力を評価するように設計されています。
質問 # 58
A few days after JencoMart migrates the user credentials database to Google Cloud Platform and shuts down the old server, the new database server stops responding to SSH connections. It is still serving database requests to the application servers correctly.
What three steps should you take to diagnose the problem? (Choose three.)
- A. Take a snapshot of the disk and connect to a new machine to investigate
- B. Print the Serial Console output for the instance for troubleshooting, activate the interactive console, and investigate
- C. Delete the virtual machine (VM) and disks and create a new one
- D. Delete the instance, attach the disk to a new VM, and investigate
- E. Connect the machine to another network with very simple firewall rules and investigate
- F. Check inbound firewall rules for the network the machine is connected to
正解：A、B、F
解説：
D: Handling "Unable to connect on port 22" error message
Possible causes include:
* There is no firewall rule allowing SSH access on the port. SSH access on port 22 is enabled on all Compute Engine instances by default. If you have disabled access, SSH from the Browser will not work. If you run sshd on a port other than 22, you need to enable the access to that port with a custom firewall rule.
* The firewall rule allowing SSH access is enabled, but is not configured to allow connections from GCP Console services. Source IP addresses for browser-based SSH sessions are dynamically allocated by GCP Console and can vary from session to session.
F: Handling "Could not connect, retrying..." error
You can verify that the daemon is running by navigating to the serial console output page and looking for output lines prefixed with the accounts-from-metadata: string. If you are using a standard image but you do not see these output prefixes in the serial console output, the daemon might be stopped. Reboot the instance to restart the daemon.
Reference:
https://cloud.google.com/compute/docs/ssh-in-browser
https://cloud.google.com/compute/docs/ssh-in-browser
質問 # 59
For this question, refer to the Dress4Win case study.
You want to ensure Dress4Win's sales and tax records remain available for infrequent viewing by auditors for at least 10 years. Cost optimization is your top priority. Which cloud services should you choose?
- A. Google Cloud Storage Coldline to store the data, and gsutil to access the data.
- B. Google Cloud Storage Nearline to store the data, and gsutil to access the data.
- C. Google Bigtabte with US or EU as location to store the data, and gcloud to access the data.
- D. BigQuery to store the data, and a web server cluster in a managed instance group to access the data. Google Cloud SQL mirrored across two distinct regions to store the data, and a Redis cluster in a managed instance group to access the data.
正解：A
解説：
Explanation: References: https://cloud.google.com/storage/docs/storage-classes
質問 # 60
Dress4Win has asked you for advice on how to migrate their on-premises MySQL deployment to the
cloud.
They want to minimize downtime and performance impact to their on-premises solution during the
migration.
Which approach should you recommend?
- A. Create a dump of the MySQL replica server into the cloud environment, load it into: Google Cloud
Datastore, and configure applications to read/write to Cloud Datastore at cutover. - B. Create a new MySQL cluster in the cloud, configure applications to begin writing to both on premises
and cloud MySQL masters, and destroy the original cluster at cutover. - C. Create a dump of the on-premises MySQL master server, and then shut it down, upload it to the cloud
environment, and load into a new MySQL cluster. - D. Setup a MySQL replica server/slave in the cloud environment, and configure it for asynchronous
replication from the MySQL master server on-premises until cutover.
正解：D
解説：
Professional Cloud Architect
Testlet 1
Company Overview
JencoMart is a global retailer with over 10,000 stores in 16 countries. The stores carry a range of goods,
such as groceries, tires, and jewelry. One of the company's core values is excellent customer service. In
addition, they recently introduced an environmental policy to reduce their carbon output by 50% over the
next 5 years.
Company Background
JencoMart started as a general store in 1931, and has grown into one of the world's leading brands, known
for great value and customer service. Over time, the company transitioned from only physical stores to a
stores and online hybrid model, with 25% of sales online. Currently, JencoMart has little presence in Asia,
but considers that market key for future growth.
Solution Concept
JencoMart wants to migrate several critical applications to the cloud but has not completed a technical
review to determine their suitability for the cloud and the engineering required for migration. They currently
host all of these applications on infrastructure that is at its end of life and is no longer supported.
Existing Technical Environment
JencoMart hosts all of its applications in 4 data centers: 3 in North American and 1 in Europe; most
applications are dual-homed.
JencoMart understands the dependencies and resource usage metrics of their on-premises architecture.
Application: Customer loyalty portal
LAMP (Linux, Apache, MySQL and PHP) application served from the two JencoMart-owned U.S. data
centers.
Database
Oracle Database stores user profiles
- 20 TB
- Complex table structure
- Well maintained, clean data
- Strong backup strategy
PostgreSQL database stores user credentials
- Single-homed in US West
- No redundancy
- Backed up every 12 hours
- 100% uptime service level agreement (SLA)
- Authenticates all users
Compute
30 machines in US West Coast, each machine has:
- Twin, dual core CPUs
- 32 GB of RAM
- Twin 250 GB HDD (RAID 1)
20 machines in US East Coast, each machine has:
- Single, dual-core CPU
- 24 GB of RAM
- Twin 250 GB HDD (RAID 1)
Storage
Access to shared 100 TB SAN in each location
Tape backup every week
Business Requirements
Optimize for capacity during peak periods and value during off-peak periods
Guarantee service availability and support
Reduce on-premises footprint and associated financial and environmental impact
Move to outsourcing model to avoid large upfront costs associated with infrastructure purchase
Expand services into Asia
Technical Requirements
Assess key application for cloud suitability
Modify applications for the cloud
Move applications to a new infrastructure
Leverage managed services wherever feasible
Sunset 20% of capacity in existing data centers
Decrease latency in Asia
CEO Statement
JencoMart will continue to develop personal relationships with our customers as more people access the
web. The future of our retail business is in the global market and the connection between online and in-
store experiences. As a large, global company, we also have a responsibility to the environment through
"green" initiatives and policies.
CTO Statement
The challenges of operating data centers prevent focus on key technologies critical to our long-term
success. Migrating our data services to a public cloud infrastructure will allow us to focus on big data and
machine learning to improve our service to customers.
CFO Statement
Since its founding, JencoMart has invested heavily in our data services infrastructure. However, because
of changing market trends, we need to outsource our infrastructure to ensure our long-term success. This
model will allow us to respond to increasing customer demand during peak periods and reduce costs.
質問 # 61
For this question, refer to the Dress4Win case study. To be legally compliant during an audit, Dress4Win must be able to give insights in all administrative actions that modify the configuration or metadata of resources on Google Cloud.
What should you do?
- A. Use Stackdriver Trace to create a trace list analysis.
- B. Enable Cloud Identity-Aware Proxy in all projects, and add the group of Administrators as a member.
- C. Use Stackdriver Monitoring to create a dashboard on the project's activity.
- D. Use the Activity page in the GCP Console and Stackdriver Logging to provide the required insight.
正解：A
解説：
Reference:
https://cloud.google.com/logging/docs/audit/
質問 # 62
Your company is forecasting a sharp increase in the number and size of Apache Spark and Hadoop jobs being run on your local datacenter You want to utilize the cloud to help you scale this upcoming demand with the least amount of operations work and code change. Which product should you use?
- A. Google Container Engine
- B. Google Cloud Dataflow
- C. Google Cloud Dataproc
- D. Google Compute Engine
正解：C
解説：
Google Cloud Dataproc is a fast, easy-to-use, low-cost and fully managed service that lets you run the Apache Spark and Apache Hadoop ecosystem on Google Cloud Platform. Cloud Dataproc provisions big or small clusters rapidly, supports many popular job types, and is integrated with other Google Cloud Platform services, such as Google Cloud Storage and Stackdriver Logging, thus helping you reduce TCO.
References:
https://cloud.google.com/dataproc/docs/resources/faq
質問 # 63
You want to create a private connection between your instances on Compute Engine and your on-premises data center. You require a connection of at least 20 Gbps. You want to follow Google-recommended practices.
How should you set up the connection?
- A. Create a VPC and connect it to your on-premises data center using a single Cloud VPN.
- B. Create a VPC and connect it to your on-premises data center using Dedicated Interconnect.
- C. Create a Cloud Content Delivery Network (Cloud CDN) and connect it to your on-premises data center using Dedicated Interconnect.
- D. Create a Cloud Content Delivery Network (Cloud CDN) and connect it to your on-premises datacenter using a single Cloud VPN.
正解：B
質問 # 64
Your company has an application deployed on Anthos clusters (formerly Anthos GKE) that is running multiple microservices. The cluster has both Anthos Service Mesh and Anthos Config Management configured. End users inform you that the application is responding very slowly. You want to identify the microservice that is causing the delay. What should you do?
- A. Use the Service Mesh visualization in the Cloud Console to inspect the telemetry between the microservices.
- B. Use Anthos Config Management to create a ClusterSelector selecting the relevant cluster. On the Google Cloud Console page for Google Kubernetes Engine, view the Workloads and filter on the cluster. Inspect the configurations of the filtered workloads.
- C. Reinstall istio using the default istio profile in order to collect request latency. Evaluate the telemetry between the microservices in the Cloud Console.
- D. Use Anthos Config Management to create a namespaceSelector selecting the relevant cluster namespace. On the Google Cloud Console page for Google Kubernetes Engine, visit the workloads and filter on the namespace. Inspect the configurations of the filtered workloads.
正解：A
解説：
The Anthos Service Mesh pages in the Google Cloud Console provide both summary and in-depth metrics, charts, and graphs that enable you to observe service behavior. You can monitor the overall health of your services, or drill down on a specific service to set a service level objective (SLO) or troubleshoot an issue. https://cloud.google.com/service-mesh/docs/observability/explore-dashboard
https://cloud.google.com/anthos/service-mesh
質問 # 65
For this question, refer to the JencoMart case study.
The migration of JencoMart's application to Google Cloud Platform (GCP) is progressing too slowly. The infrastructure is shown in the diagram. You want to maximize throughput.
What are three potential bottlenecks? (Choose 3 answers.)
- A. Fewer virtual machines (VMs) in GCP than on-premises machines
- B. A separate storage layer outside the VMs, which is not suited for this task
- C. A single VPN tunnel, which limits throughput
- D. A copy command that is not suited to operate over long distances
- E. A tier of Google Cloud Storage that is not suited for this task
- F. Complicated internet connectivity between the on-premises infrastructure and GCP
正解：A、B、D
質問 # 66
A development manager is building a new application. He asks you to review his requirements and identify what cloud technologies he can use to meet them. The application must:
1. Be based on open-source technology for cloud portability
2. Dynamically scale compute capacity based on demand
3. Support continuous software delivery
4. Run multiple segregated copies of the same application stack
5. Deploy application bundles using dynamic templates
6. Route network traffic to specific services based on URL
Which combination of technologies will meet all of his requirements?
- A. Google Kubernetes Engine, Jenkins, and Cloud Load Balancing
- B. Google Kubernetes Engine, Jenkins, and Helm
- C. Google Kubernetes Engine and Cloud Deployment Manager
- D. Google Kubernetes Engine and Cloud Load Balancing
正解：A
解説：
Jenkins is an open-source automation server that lets you flexibly orchestrate your build, test, and deployment pipelines. Kubernetes Engine is a hosted version of Kubernetes, a powerful cluster manager and orchestration system for containers.
When you need to set up a continuous delivery (CD) pipeline, deploying Jenkins on Kubernetes Engine provides important benefits over a standard VM-based deployment Incorrect Answers:
A: Helm is a tool for managing Kubernetes charts. Charts are packages of pre-configured Kubernetes resources.
Use Helm to:
* Find and use popular software packaged as Kubernetes charts
* Share your own applications as Kubernetes charts
* Create reproducible builds of your Kubernetes applications
* Intelligently manage your Kubernetes manifest files
* Manage releases of Helm packages
Reference: https://cloud.google.com/solutions/jenkins-on-kubernetes-engine
質問 # 67
Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?
- A. The effective policy is the policy set at the node and restricted by the policies of its ancestors
- B. The effective policy is determined only by the policy set at the node
- C. The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors
- D. The effective policy is the union of the policy set at the node and policies inherited from its ancestors
正解：D
解説：
https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy
質問 # 68
You are using Cloud CDN to deliver static HTTP(S) website content hosted on a Compute Engine instance group. You want to improve the cache hit ratio.
What should you do?
- A. Shorten the expiration time of the cached objects.
- B. Customize the cache keys to omit the protocol from the key.
- C. Replicate the static content in a Cloud Storage bucket. Point CloudCDN toward a load balancer on that bucket.
- D. Make sure the HTTP(S) header "Cache-Region" points to the closest region of your users.
正解：B
解説：
Explanation
Reference https://cloud.google.com/cdn/docs/bestpractices#
using_custom_cache_keys_to_improve_cache_hit_ratio
質問 # 69
For this question, refer to the JencoMart case study.
JencoMart has built a version of their application on Google Cloud Platform that serves traffic to Asia. You want to measure success against their business and technical goals.
Which metrics should you track?
- A. The number of character sets present in the database
- B. Latency difference between US and Asia
- C. Error rates for requests from Asia
- D. Total visits and average latency for users in Asia
- E. Total visits, error rates, and latency from Asia
正解：D
質問 # 70
Your company wants to track whether someone is present in a meeting room reserved for a scheduled meeting. There are 1000 meeting rooms across 5 offices on 3 continents. Each room is equipped with a motion sensor that reports its status every second. You want to support the data upload and collection needs of this sensor network. The receiving infrastructure needs to account for the possibility that the devices may have inconsistent connectivity. Which solution should you design?
- A. Have each device create a persistent connection to a Compute Engine instance and write messages to a custom application.
- B. Have devices create a persistent connection to an App Engine application fronted by Cloud Endpoints, which ingest messages and write them to Cloud Datastore.
- C. Have devices poll for connectivity to Cloud Pub/Sub and publish the latest messages on a regular interval to a shared topic for all devices.
- D. Have devices poll for connectivity to Cloud SQL and insert the latest messages on a regular interval to a device specific table.
正解：C
解説：
A is not correct because having a persistent connection does not handle the case where the device is disconnected.
B is not correct because Cloud SQL is a relational database and not the best fit for sensor data.
Additionally, the frequency of the writes has the potential to exceed the supported number of concurrent connections.
C is correct because Cloud Pub/Sub can handle the frequency of this data, and consumers of the data can pull from the shared topic for further processing.
D is not correct because having a persistent connection does not handle the case where the device is disconnected.
https://cloud.google.com/sql/
https://cloud.google.com/pubsub/
質問 # 71
You want to optimize the performance of an accurate, real-time, weather-charting application. The data comes from 50,000 sensors sending 10 readings a second, in the format of a timestamp and sensor reading. Where should you store the data?
- A. Google Cloud Bigtable
- B. Google Cloud Storage
- C. Google Cloud SQL
- D. Google BigQuery
正解：B
質問 # 72
A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center.
He wants to migrate the custom tool to the new cloud environment.
You want to advocate for the adoption of Google Cloud Deployment Manager.
What are two business risks of migrating to Cloud Deployment Manager? Choose 2 answers
- A. Cloud Deployment Manager only supports automation of Google Cloud resources.
- B. Cloud Deployment Manager uses Python.
- C. Cloud Deployment Manager is unfamiliar to the company's engineers.
- D. Cloud Deployment Manager can be used to permanently delete cloud resources.
- E. Cloud Deployment Manager APIs could be deprecated in the future.
- F. Cloud Deployment Manager requires a Google APIs service account to run.
正解：A、D
質問 # 73
TerramEarth has a legacy web application that you cannot migrate to cloud. However, you still want to build a cloud-native way to monitor the application. If the application goes down, you want the URL to point to a "Site is unavailable" page as soon as possible. You also want your Ops team to receive a notification for the issue. You need to build a reliable solution for minimum cost What should you do?
- A. Use Cloud Error Reporting to check the application URL If the application is down, switch the URL to the "Site is unavailable" page, and notify the Ops team.
- B. Create a cron job on a Compute Engine VM that runs every minute. The cron job invokes a Python program to check the application URL If the application is down, switch the URL to the "Site is unavailable" page, and notify the Ops team.
- C. Create a scheduled job in Cloud Run to invoke a container every minute. The container will check the application URL If the application is down, switch the URL to the "Site is unavailable" page, and notify the Ops team.
- D. Create a Cloud Monitoring uptime check to validate the application URL If it fails, put a message in a Pub/Sub queue that triggers a Cloud Function to switch the URL to the "Site is unavailable" page, and notify the Ops team.
正解：D
解説：
https://cloud.google.com/blog/products/management-tools/how-to-use-pubsub-as-a-cloud-monitoring-notification-channel
質問 # 74
For this question, refer to the TerramEarth case study.
TerramEarth's CTO wants to use the raw data from connected vehicles to help identify approximately when a vehicle in the development team to focus their failure. You want to allow analysts to centrally query the vehicle dat a. Which architecture should you recommend?
- A.
- B.
- C.
- D.
正解：C
解説：
https://cloud.google.com/solutions/iot/
https://cloud.google.com/solutions/designing-connected-vehicle-platform
https://cloud.google.com/solutions/designing-connected-vehicle-platform#data_ingestion
http://www.eweek.com/big-data-and-analytics/google-touts-value-of-cloud-iot-core-for-analyzing-connected-car-data
https://cloud.google.com/solutions/iot/
The push endpoint can be a load balancer.
A container cluster can be used.
Cloud Pub/Sub for Stream Analytics
Reference:
https://cloud.google.com/solutions/iot/
https://cloud.google.com/solutions/designing-connected-vehicle-platform
https://cloud.google.com/solutions/designing-connected-vehicle-platform#data_ingestion
http://www.eweek.com/big-data-and-analytics/google-touts-value-of-cloud-iot-core-for-analyzing-connected-car-data
https://cloud.google.com/solutions/iot/
質問 # 75
For this question, refer to the TerramEarth case study
Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data. What should you do?
- A. Build SAML 2.0 SSO compatibility into your authentication system.
- B. Build or leverage an OAuth-compatible access control system.
- C. Restrict data access based on the source IP address of the partner systems.
- D. Create secondary credentials for each dealer that can be given to the trusted third party.
正解：B
解説：
Explanation
https://cloud.google.com/appengine/docs/flexible/go/authorizing-apps
https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#delegate_application_autho Delegate application authorization with OAuth2 Cloud Platform APIs support OAuth 2.0, and scopes provide granular authorization over the methods that are supported. Cloud Platform supports both service-account and user-account OAuth, also called three-legged OAuth.
References:
https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations#delegate_application_autho
https://cloud.google.com/appengine/docs/flexible/go/authorizing-apps
Topic 2, Mountkirk Games Case Study
Company Overview
Mountkirk Games makes online, session-based. multiplayer games for the most popular mobile platforms.
Company Background
Mountkirk Games builds all of their games with some server-side integration and has historically used cloud providers to lease physical servers. A few of their games were more popular than expected, and they had problems scaling their application servers, MySQL databases, and analytics tools.
Mountkirk's current model is to write game statistics to files and send them through an ETL tool that loads them into a centralized MySQL database for reporting.
Solution Concept
Mountkirk Games is building a new game, which they expect to be very popular. They plan to deploy the game's backend on Google Compute Engine so they can capture streaming metrics, run intensive analytics and take advantage of its autoscaling server environment and integrate with a managed NoSQL database.
Technical Requirements
Requirements for Game Backend Platform
1. Dynamically scale up or down based on game activity.
2. Connect to a managed NoSQL database service.
3. Run customized Linx distro.
Requirements for Game Analytics Platform
1. Dynamically scale up or down based on game activity.
2. Process incoming data on the fly directly from the game servers.
3. Process data that arrives late because of slow mobile networks.
4. Allow SQL queries to access at least 10 TB of historical data.
5. Process files that are regularly uploaded by users' mobile devices.
6. Use only fully managed services
CEO Statement
Our last successful game did not scale well with our previous cloud provider, resuming in lower user adoption and affecting the game's reputation. Our investors want more key performance indicators (KPIs) to evaluate the speed and stability of the game, as well as other metrics that provide deeper insight into usage patterns so we can adapt the gams to target users.
CTO Statement
Our current technology stack cannot provide the scale we need, so we want to replace MySQL and move to an environment that provides autoscaling, low latency load balancing, and frees us up from managing physical servers.
CFO Statement
We are not capturing enough user demographic data usage metrics, and other KPIs. As a result, we do not engage the right users. We are not confident that our marketing is targeting the right users, and we are not selling enough premium Blast-Ups inside the games, which dramatically impacts our revenue.
質問 # 76
......
Google Professional-Cloud-Architectリアル2024年最新のブレーン問題集で模擬試験問題集：https://jp.fast2test.com/Professional-Cloud-Architect-premium-file.html
Professional-Cloud-Architect試験問題リアルProfessional-Cloud-Architect練習問題集：https://drive.google.com/open?id=1LANy8f64Muhq63M34hmR8gmlfayi4tLv