Professional-Cloud-Architect無料問題集「Google Certified Professional

質問 1

An application development team believes their current logging tool will not meet their needs for their new cloud-based product. They want a bettor tool to capture errors and help them analyze their historical log data.
You want to help them find a solution that meets their needs, what should you do?

（A）Send them a list of online resources about logging best practices.

（B）Direct them to download and install the Google StackDriver logging agent.

（C）Help them upgrade their current tool to take advantage of any new features.

（D）Help them define their requirements and assess viable logging tools.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Your team is developing a web application that will be deployed on Google Kubernetes Engine (GKE). Your CTO expects a successful launch and you need to ensure your application can handle the expected load of tens of thousands of users. You want to test the current deployment to ensure the latency of your application stays below a certain threshold. What should you do?

（A）Use Cloud Debugger in the development environment to understand the latency between the different microservices.

（B）Use a load testing tool to simulate the expected number of concurrent users and total requests to your application, and inspect the results.

（C）Replicate the application over multiple GKE clusters in every Google Cloud region. Configure a global HTTP (S) load balancer to expose the different clusters over a single global IP address.

（D）Enable autoscaling on the GKE cluster and enable horizontal pod autoscaling on your application deployments. Send curl requests to your application, and validate if the auto scaling works.

正解：B 解答を投票する

質問 3

For this question, refer to the Mountkirk Games case study. Mountkirk Games wants to migrate from their current analytics and statistics reporting model to one that meets their technical requirements on Google Cloud Platform.
Which two steps should be part of their migration plan? (Choose two.)

（A）Integrate Cloud Armor to defend against possible SQL injection attacks in analytics files uploaded to Cloud Storage.

（B）Draw an architecture diagram that shows how to move from a single MySQL database to a MySQL cluster.

（C）Evaluate the impact of migrating their current batch ETL code to Cloud Dataflow.

（D）Write a schema migration plan to denormalize data for better performance in BigQuery.

（E）Load 10 TB of analytics data from a previous game into a Cloud SQL instance, and run test queries against the full dataset to confirm that they complete successfully.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Mountkirk Games wants you to secure the connectivity from the new gaming application platform to Google Cloud. You want to streamline the process and follow Google-recommended practices. What should you do?

（A）Configure HashiCorp Vault on Compute Engine, and use customer managed encryption keys and Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used by the application platform.

（B）Use Kubernetes Secrets, which are obfuscated by default. Configure these Secrets to be used by the application platform.

（C）Configure Workload Identity and service accounts to be used by the application platform.

（D）Configure Kubernetes Secrets to store the secret, enable Application-Layer Secrets Encryption, and use Cloud Key Management Service (Cloud KMS) to manage the encryption keys. Configure these Secrets to be used by the application platform.

正解：C 解答を投票する

質問 5

You are developing an application using different microservices that should remain internal to the cluster.
You want to be able to configure each microservice with a specific number of replicas. You also want to be able to address a specific microservice from any other microservice in a uniform way, regardless of the number of replicas the microservice scales to. You need to implement this solution on Google Kubernetes Engine. What should you do?

（A）Deploy each microservice as a Pod. Expose the Pod in the cluster using a Service, and use the Service DNS name to address the microservice from other microservices within the cluster.

（B）Deploy each microservice as a Deployment. Expose the Deployment in the cluster using an Ingress, and use the Ingress IP address to address the Deployment from other microservices within the cluster.

（C）Deploy each microservice as a Deployment. Expose the Deployment in the cluster using a Service, and use the Service DNS name to address it from other microservices within the cluster.

（D）Deploy each microservice as a Pod. Expose the Pod in the cluster using an Ingress, and use the Ingress IP address name to address the Pod from other microservices within the cluster.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

For this question, refer to the Helicopter Racing League (HRL) case study. HRL wants better prediction accuracy from their ML prediction models. They want you to use Google's AI Platform so HRL can understand and interpret the predictions. What should you do?

（A）Use Vision AI.

（B）Use Explainable AI.

（C）Use Jupyter Notebooks.

（D）Use Google Cloud's operations suite.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Your web application has several VM instances running within a VPC. You want to restrict communications between instances to only the paths and ports you authorize, but you don't want to rely on static IP addresses or subnets because the app can autoscale. How should you restrict communications?

（A）Use service accounts and configure the web application particular service accounts to have access

（B）Use firewall rules based on network tags attached to the compute instances

（C）Use separate VPCs to restrict traffic

（D）Use Cloud DNS and only allow connections from authorized hostnames

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

A small number of API requests to your microservices-based application take a very long time. You know that each request to the API can traverse many services. You want to know which service takes the longest in those cases. What should you do?

（A）Instrument your application with Stackdnver Trace in order to break down the request latencies at each microservice.

（B）Use Stackdriver Monitoring to look for insights that show when your API latencies are high.

（C）Send custom metrics for each of your requests to Stackdriver Monitoring.

（D）Set timeouts on your application so that you can fail requests faster.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Your company has a Google Cloud project that uses BigQuery for data warehousing They have a VPN tunnel between the on-premises environment and Google Cloud that is configured with Cloud VPN. The security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing.
What should they do?

（A）Configure Private Google Access for on-premises only.

（B）Perform the following tasks:
1) Create a service account.
2) Give the BigQuery JobUser role and Storage Reader role to the service account.
3) Remove all other IAM access from the project.

（C）Configure VPC Service Controls and configure Private Google Access.

（D）Configure Private Google Access.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Your company is developing a web-based application. You need to make sure that production deployments are linked to source code commits and are fully auditable. What should you do?

（A）Make sure a developer is adding a comment to the commit that links to the deployment.

（B）Make sure the developer is tagging the commits with :latest

（C）Make sure a developer is tagging the code commit with the date and time of commit

（D）Make the container tag match the source code commit hash.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

For this question, refer to the Helicopter Racing League (HRL) case study. Recently HRL started a new regional racing league in Cape Town, South Africa. In an effort to give customers in Cape Town a better user experience, HRL has partnered with the Content Delivery Network provider, Fastly. HRL needs to allow traffic coming from all of the Fastly IP address ranges into their Virtual Private Cloud network (VPC network). You are a member of the HRL security team and you need to configure the update that will allow only the Fastly IP address ranges through the External HTTP(S) load balancer. Which command should you use?

（A）Apply a VPC firewall rule on port 443 for network resources tagged with scurceiplisr-fasrly.

（B）Apply a Cloud Armor security policy to external load balancers using the IP addresses that Fastly has published. C. Apply a VPC firewall rule on port 443 for Fastly IP address ranges.

（C）Apply a Cloud Armor security policy to external load balancers using a named IP list for Fastly.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

Your company has an application running on multiple Compute Engine instances. You need to ensure that the application can communicate with an on-premises service that requires high throughput via internal IPs, while minimizing latency. What should you do?

（A）Use OpenVPN to configure a VPN tunnel between the on-premises environment and Google Cloud.

（B）Configure a direct peering connection between the on-premises environment and Google Cloud.

（C）Use Cloud VPN to configure a VPN tunnel between the on-premises environment and Google Cloud.

（D）Configure a Cloud Dedicated Interconnect connection between the on-premises environment and Google Cloud.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

You are creating an App Engine application that uses Cloud Datastore as its persistence layer. You need to retrieve several root entities for which you have the identifiers. You want to minimize the overhead in operations performed by Cloud Datastore. What should you do?

（A）Create the Key object for each Entity and run a batch get operation

（B）Use the identifiers to create a query filter and run a batch query operation

（C）Use the identifiers to create a query filter and run multiple query operations, one operation for each entity

（D）Create the Key object for each Entity and run multiple get operations, one operation for each entity

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

Your development teams release new versions of games running on Google Kubernetes Engine (GKE) daily.
You want to create service level indicators (SLIs) to evaluate the quality of the new versions from the user's perspective. What should you do?

（A）Create GKE CPU Utilization and Memory Utilization as service level indicators.

（B）Create Request Latency and Error Rate as service level indicators.

（C）Create Server Uptime and Error Rate as service level indicators.

（D）Create CPU Utilization and Request Latency as service level indicators.

正解：B 解答を投票する

質問 15

For this question, refer to the Mountkirk Games case study.
Mountkirk Games wants you to design their new testing strategy. How should the test coverage differ from their existing backends on the other platforms?

（A）Unit tests are no longer required, only end-to-end tests.

（B）Tests should scale well beyond the prior approaches.

（C）Tests should be applied after the release is in the production environment.

（D）Tests should include directly testing the Google Cloud Platform (GCP) infrastructure.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 16

For this question, refer to the Mountkirk Games case study. Mountkirk Games wants you to design a way to test the analytics platform's resilience to changes in mobile network latency. What should you do?

（A）Build a test client that can be run from a mobile phone emulator on a Compute Engine virtual machine, and run multiple copies in Google Cloud Platform regions all over the world to generate realistic traffic.

（B）Deploy failure injection software to the game analytics platform that can inject additional latency to mobile client analytics traffic.

（C）Add the ability to introduce a random amount of delay before beginning to process analytics files uploaded from mobile devices.

（D）Create an opt-in beta of the game that runs on players' mobile devices and collects response times from analytics endpoints running in Google Cloud Platform regions all over the world.

正解：D 解答を投票する

質問 17

For this question, refer to the EHR Healthcare case study. You are responsible for ensuring that EHR's use of Google Cloud will pass an upcoming privacy compliance audit. What should you do? (Choose two.)

（A）Use GKE private clusters for all Kubernetes workloads.

（B）Verify EHR's product usage against the list of compliant products on the Google Cloud compliance page.

（C）Use Firebase Authentication for EHR's user facing applications.

（D）Advise EHR to execute a Business Associate Agreement (BAA) with Google Cloud.

（E）Implement Prometheus to detect and prevent security breaches on EHR's web-based applications.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 18

Your development team has installed a new Linux kernel module on the batch servers in Google Compute Engine (GCE) virtual machines (VMs) to speed up the nightly batch process. Two days after the installation,
50% of web application deployed in the same
nightly batch run. You want to collect details on the failure to pass back to the development team. Which three actions should you take? Choose 3 answers

（A）Read the debug GCE Activity log using the API or Cloud Console.

（B）Use gcloud or Cloud Console to connect to the serial console and observe the logs.

（C）Export a debug VM into an image, and run the image on a local server where kernel log messages will be displayed on the native screen.

（D）Identify whether a live migration event of the failed server occurred, using in the activity log.

（E）Use Stackdriver Logging to search for the module log entries.

（F）Adjust the Google Stackdriver timeline to match the failure time, and observe the batch server metrics.

正解：B、E、F 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 19

Your company wants to migrate their 10-TB on-premises database export into Cloud Storage You want to minimize the time it takes to complete this activity, the overall cost and database load. The bandwidth between the on-premises environment and Google Cloud is 1 Gbps. You want to follow Google-recommended practices What should you do?

（A）Use a commercial partner ETL solution to extract the data from the on-premises database and upload it into Cloud Storage

（B）Use the Data Transfer appliance to perform an offline migration

（C）Compress the data and upload it with gsutii -m to enable multi-threaded copy

（D）Develop a Dataflow job to read data directly from the database and write it into Cloud Storage

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 20

You company has a Kubernetes application that pulls messages from Pub/Sub and stores them in Firestore.
Because the application is simple, it was deployed as a single pod. The infrastructure team has analyzed Pub/Sub metrics and discovered that the application cannot process the messages in real time. Most of them wait for minutes before being processed. You need to scale the elaboration process that is I/O-intensive.
What should you do?

（A）Configure a Kubernetes autoscaling based on the subscription/push_request metric.

（B）Use the -enable- autoscaling flag when you create the Kubernetes cluster

（C）Configure a Kubernetes autoscaling based on the subscription/num_undelivered message metric.

（D）Use kubectl autoscale deployment APP_NAME -max 6 -min 2 -cpu- percent 50 to configure Kubernetes autoscaling deployment

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

Professional-Cloud-Architect 無料問題集「Google Certified Professional - Cloud Architect (GCP)」

弊社を連絡する

関連リンク

トップ試験