Professional-Cloud-Architect無料問題集「Google Certified Professional

質問 1

You are moving an application that uses MySQL from on-premises to Google Cloud. The application will run on Compute Engine and will use Cloud SQL. You want to cut over to the Compute Engine deployment of the application with minimal downtime and no data loss to your customers. You want to migrate the application with minimal modification. You also need to determine the cutover strategy. What should you do?

（A）1. Set up Cloud VPN to provide private network connectivity between the Compute Engine application and the on-premises MySQL server.
2.Stop the on-premises application.
3.Start the Compute Engine application, configured to read and write to the on-premises MySQL server.
4.Create the replication configuration in Cloud SQL.
5.Configure the source database server to accept connections from the Cloud SQL replica.
6.Finalize the Cloud SQL replica configuration.
7.When replication has been completed, stop the Compute Engine application.
8.Promote the Cloud SQL replica to a standalone instance.
9.Restart the Compute Engine application, configured to read and write to the Cloud SQL standalone instance.

（B）1. Stop the on-premises application.
2.Create a mysqldump of the on-premises MySQL server.
3.Upload the dump to a Cloud Storage bucket.
4.Import the dump into Cloud SQL.
5.Start the application on Compute Engine.

（C）1. Set up Cloud SQL proxy and MySQL proxy.
2.Create a mysqldump of the on-premises MySQL server.
3.Upload the dump to a Cloud Storage bucket.
4.Import the dump into Cloud SQL.
5.Stop the on-premises application.
6.Start the Compute Engine application.

（D）1. Set up Cloud VPN to provide private network connectivity between the Compute Engine application and the on-premises MySQL server.
2.Stop the on-premises application.
3.Create a mysqldump of the on-premises MySQL server.
4.Upload the dump to a Cloud Storage bucket.
5.Import the dump into Cloud SQL.
6.Modify the source code of the application to write queries to both databases and read from its local database.
7.Start the Compute Engine application.
8.Stop the on-premises application.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

For this question, refer to the EHR Healthcare case study. In the past, configuration errors put public IP addresses on backend servers that should not have been accessible from the Internet. You need to ensure that no one can put external IP addresses on backend Compute Engine instances and that external IP addresses can only be configured on frontend Compute Engine instances. What should you do?

（A）Revoke the compute.networkAdmin role from all users in the project with front end instances.

（B）Create an Identity and Access Management (IAM) policy that maps the IT staff to the compute.networkAdmin role for the organization.

（C）Create an Organizational Policy with a constraint to allow external IP addresses only on the frontend Compute Engine instances.

（D）Create a custom Identity and Access Management (IAM) role named GCE_FRONTEND with the compute.addresses.create permission.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Your customer wants to do resilience testing of their authentication layer. This consists of a regional managed instance group serving a public REST API that reads from and writes to a Cloud SQL instance.
What should you do?

（A）Schedule a disaster simulation exercise during which you can shut off all VMs in a zone to see how your application behaves.

（B）Engage with a security company to run web scrapes that look your users' authentication data om malicious websites and notify you if any if found.

（C）Configure a red replica for your Cloud SQL instance in a different zone than the master, and then manually trigger a failover while monitoring KPIs for our REST API.

（D）Deploy intrusion detection software to your virtual machines to detect and log unauthorized access.

正解：A 解答を投票する

質問 4

Your web application uses Google Kubernetes Engine to manage several workloads. One workload requires a consistent set of hostnames even after pod scaling and relaunches.
Which feature of Kubernetes should you use to accomplish this?

（A）StatefulSets

（B）Container environment variables

（C）Persistent Volumes

（D）Role-based access control

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company's data center. Upon investigation, you discover that some of the RFC 1918 IP ranges being used in the new company's Virtual Private Cloud (VPC) overlap with your data center IP space. What should you do to enable connectivity and make sure that there are no routing conflicts when connectivity is established?

（A）Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply new IP addresses so there is no overlapping IP space.

（B）Create a Cloud VPN connection from the new VPC to the data center, create a Cloud Router, and apply a custom route advertisement to block the overlapping IP space.

（C）Create a Cloud VPN connection from the new VPC to the data center, and apply a firewall rule that blocks the overlapping IP space.

（D）Create a Cloud VPN connection from the new VPC to the data center, and create a Cloud NAT instance to perform NAT on the overlapping IP space.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

For this question, refer to the EHR Healthcare case study. EHR has single Dedicated Interconnect connection between their primary data center and Googles network. This connection satisfies EHR's network and security policies:
* On-premises servers without public IP addresses need to connect to cloud resources without public IP addresses
* Traffic flows from production network mgmt. servers to Compute Engine virtual machines should never traverse the public internet.
You need to upgrade the EHR connection to comply with their requirements. The new connection design must support business critical needs and meet the same network and security policy requirements. What should you do?

（A）Upgrade the bandwidth on the Dedicated Interconnect connection to 100 G

（B）Add a new Dedicated Interconnect connection

（C）Add a new Carrier Peering connection

（D）Add three new Cloud VPN connections

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

For this question, refer to the Mountkirk Games case study
Mountkirk Games needs to create a repeatable and configurable mechanism for deploying isolated application environments. Developers and testers can access each other's environments and resources, but they cannot access staging or production resources. The staging environment needs access to some services from production.
What should you do to isolate development environments from staging and production?

（A）Create a network for development and test and another for staging and production.

（B）Create one project for development, a second for staging and a third for production.

（C）Create one subnetwork for development and another for staging and production.

（D）Create a project for development and test and another for staging and production.

正解：B 解答を投票する

質問 8

Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Googlerecommended practices. What should you do?

（A）Move your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.

（B）Move your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.

（C）Install gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.

（D）Install gsutil on each server containing data. Use streaming transfers to upload the data into Cloud Storage.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

You have deployed an application to Kubernetes Engine, and are using the Cloud SQL proxy container to make the Cloud SQL database available to the services running on Kubernetes. You are notified that the application is reporting database connection issues. Your company policies require a post-mortem. What should you do?

（A）Validate that the Service Account used by the Cloud SQL proxy container still has the Cloud Build Editor role.

（B）Use gcloud sql instances restart.

（C）In the GCP Console, navigate to Stackdriver Logging. Consult logs for Kubernetes Engine and Cloud SQL.

（D）In the GCP Console, navigate to Cloud SQL. Restore the latest backup. Use kubect1 to restart all pods.

正解：C 解答を投票する

質問 10

Your company is planning to migrate their Windows Server 2022 from their on-premises data center to Google Cloud. You need to bring the licenses that are currently in use in on-premises virtual machines into the target cloud environment. What should you do?

（A）1. Create standard instances on Compute Engine.
2. Select as the OS the same Microsoft Windows version that is currently in use in the on-premises environment.

（B）1. Create an image of the on-premises virtual machines and upload into Cloud Storage.
2. Import the image as a virtual disk on Compute Engine.

（C）1. Create an image of the on-premises virtual machines.
2. Import the image as a virtual disk on Compute Engine using --os=windows-2022-dc-v.
3. Create a sole-tenancy instance on Compute Engine that uses the imported disk as a boot disk.

（D）1. Create an image of the on-premises virtual machine.
2. Import the image as a virtual disk on Compute Engine.
3. Create a standard instance on Compute Engine, selecting as the OS the same Microsoft Windows version that is currently in use in the on-premises environment.
4. Attach a data disk that includes data that matches the created image.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

Your development teams release new versions of games running on Google Kubernetes Engine (GKE) daily.
You want to create service level indicators (SLIs) to evaluate the quality of the new versions from the user's perspective. What should you do?

（A）Create GKE CPU Utilization and Memory Utilization as service level indicators.

（B）Create Request Latency and Error Rate as service level indicators.

（C）Create Server Uptime and Error Rate as service level indicators.

（D）Create CPU Utilization and Request Latency as service level indicators.

正解：B 解答を投票する

質問 12

Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?

（A）Use Compute Engine to create an Active Directory (AD) domain controller that is a replica of the onpremises AD domain controller using Google Cloud Directory Sync.

（B）Use the Admin Directory API to authenticate against the Active Directory domain controller.

（C）Use Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain controller as an identity provider.

（D）Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities and configure SAML SSO.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

Your company has a networking team and a development team. The development team runs applications on Compute Engine instances that contain sensitive data. The development team requires administrative permissions for Compute Engine. Your company requires all network resources to be managed by the networking team. The development team does not want the networking team to have access to the sensitive data on the instances. What should you do?

（A）1. Create a project with a Shared VPC and assign the Network Admin role to the networking team.
2. Create a second project without a VPC, configure it as a Shared VPC service project, and assign the Compute Admin role to the development team.

（B）1. Create a project with a standalone VPC and assign the Network Admin role to the networking team.
2.Create a second project with a standalone VPC and assign the Compute Admin role to the development team.
3.Use Cloud VPN to join the two VPCs.

（C）1. Create a project with a standalone VPC and assign the Network Admin role to the networking team.
2.Create a second project with a standalone VPC and assign the Compute Admin role to the development team.
3.Use VPC Peering to join the two VPCs.

（D）1. Create a project with a standalone Virtual Private Cloud (VPC), assign the Network Admin role to the networking team, and assign the Compute Admin role to the development team.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

Mountkirk Games wants you to secure the connectivity from the new gaming application platform to Google Cloud. You want to streamline the process and follow Google-recommended practices. What should you do?

（A）Configure HashiCorp Vault on Compute Engine, and use customer managed encryption keys and Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used by the application platform.

（B）Use Kubernetes Secrets, which are obfuscated by default. Configure these Secrets to be used by the application platform.

（C）Configure Workload Identity and service accounts to be used by the application platform.

（D）Configure Kubernetes Secrets to store the secret, enable Application-Layer Secrets Encryption, and use Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used by the application platform.

正解：C 解答を投票する

質問 15

Your company has an enterprise application running on Compute Engine that requires high availability and high performance. The application has been deployed on two instances in two zones in the same region m active passive mode. The application writes data to a persistent disk in the case of a single zone outage that data should be immediately made available to the other instance in the other zone. You want to maximize performance while minimizing downtime and data loss. What should you do?

（A）1. Attach a regional SSD persistent Ask to the first instance
2. In case of a zone outage, force-attach the disk to the other instance

（B）1 Create a Cloud Storage bucket
2. Mount the bucket into the first instance with gcs-fuse
3. In case of a zone outage, mount the Cloud Storage bucket to the second instance with gcs-fuse

（C）1. Attach a persistent SSD disk to the first instance
2. Create a snapshot every hour
3. In case of a zone outage, recreate a persistent SSD disk in the second instance where data is coming from the created snapshot

（D）1 Attach a local SSD lo the first instance disk
2. Execute an rsync command every hour where the target is a persistent SSD disk attached to the second instance
3. In case of a zone outage, use the second instance

正解：A 解答を投票する

質問 16

You company has a Kubernetes application that pulls messages from Pub/Sub and stores them in Firestore.
Because the application is simple, it was deployed as a single pod. The infrastructure team has analyzed Pub/Sub metrics and discovered that the application cannot process the messages in real time. Most of them wait for minutes before being processed. You need to scale the elaboration process that is I/O-intensive.
What should you do?

（A）Configure a Kubernetes autoscaling based on the subscription/push_request metric.

（B）Use the -enable- autoscaling flag when you create the Kubernetes cluster

（C）Configure a Kubernetes autoscaling based on the subscription/num_undelivered message metric.

（D）Use kubectl autoscale deployment APP_NAME -max 6 -min 2 -cpu- percent 50 to configure Kubernetes autoscaling deployment

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

You are developing your microservices application on Google Kubernetes Engine. During testing, you want to validate the behavior of your application in case a specific microservice should suddenly crash. What should you do?

（A）Use Istio's fault injection on the particular microservice whose faulty behavior you want to simulate.

（B）Add a taint to one of the nodes of the Kubernetes cluster. For the specific microservice, configure a pod anti-affinity label that has the name of the tainted node as a value.

（C）Configure Istio's traffic management features to steer the traffic away from a crashing microservice.

（D）Destroy one of the nodes of the Kubernetes cluster to observe the behavior.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 18

Your company wants you to build a highly reliable web application with a few public APIs as the backend.
You don't expect a lot of user traffic, but traffic could spike occasionally. You want to leverage Cloud Load Balancing, and the solution must be cost-effective for users. What should you do?

（A）Store static content such as HTML and images in Cloud CDN. Host the APIs on App Engine and store the user data in Cloud SQL.

（B）Store static content such as HTML and images in Cloud CDN. Use Cloud Run to host the APIs and save the user data in Cloud SQL.

（C）Store static content such as HTML and images in a Cloud Storage bucket. Host the APIs on a zonal Google Kubernetes Engine cluster with worker nodes in multiple zones, and save the user data in Cloud Spanner.

（D）Store static content such as HTML and images in a Cloud Storage bucket. Use Cloud Functions to host the APIs and save the user data in Firestore.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

Professional-Cloud-Architect 無料問題集「Google Certified Professional - Cloud Architect (GCP)」

弊社を連絡する

関連リンク

トップ試験