Professional-Cloud-Architect無料問題集「Google Certified Professional

質問 1

You are developing your microservices application on Google Kubernetes Engine. During testing, you want to validate the behavior of your application in case a specific microservice should suddenly crash. What should you do?

（A）Use Istio's fault injection on the particular microservice whose faulty behavior you want to simulate.

（B）Add a taint to one of the nodes of the Kubernetes cluster. For the specific microservice, configure a pod anti-affinity label that has the name of the tainted node as a value.

（C）Configure Istio's traffic management features to steer the traffic away from a crashing microservice.

（D）Destroy one of the nodes of the Kubernetes cluster to observe the behavior.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

During a high traffic portion of the day, one of your relational databases crashes, but the replica is never promoted to a master. You want to avoid this in the future. What should you do?

（A）Choose larger instances for your database.

（B）Use a different database.

（C）Implement routinely scheduled failovers of your databases.

（D）Create snapshots of your database more regularly.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

For this question, refer to the TerramEarth case study
Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data. What should you do?

（A）Create secondary credentials for each dealer that can be given to the trusted third party.

（B）Build SAML 2.0 SSO compatibility into your authentication system.

（C）Build or leverage an OAuth-compatible access control system.

（D）Restrict data access based on the source IP address of the partner systems.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Your web application uses Google Kubernetes Engine to manage several workloads. One workload requires a consistent set of hostnames even after pod scaling and relaunches.
Which feature of Kubernetes should you use to accomplish this?

（A）StatefulSets

（B）Container environment variables

（C）Persistent Volumes

（D）Role-based access control

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Your customer runs a web service used by e-commerce sites to offer product recommendations to users. The company has begun experimenting with a machine learning model on Google Cloud Platform to improve the quality of results.
What should the customer do to improve their model's results over time?

（A）Monitor Compute Engine announcements for availability of newer CPU architectures, and deploy the model to them as soon as they are available for additional performance.

（B）Save a history of recommendations and results of the recommendations in BigQuery, to be used as training data.

（C）Export Cloud Machine Learning Engine performance metrics from Stackdriver to BigQuery, to be used to analyze the efficiency of the model.

（D）Build a roadmap to move the machine learning model training from Cloud GPUs to Cloud TPUs, which offer better results.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

You have an App Engine application that needs to be updated. You want to test the update with production traffic before replacing the current application version.
What should you do?

（A）Deploy the update using the Instance Group Updater to create a partial rollout, which allows for canary testing.

（B）Deploy the update as a new version in the App Engine application, and split traffic between the new and current versions.

（C）Deploy the update in a new VPC, and use Google's global HTTP load balancing to split traffic between the update and current applications.

（D）Deploy the update as a new App Engine application, and use Google's global HTTP load balancing to split traffic between the new and current applications.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Your company has multiple on-premises systems that serve as sources for reporting. The data has not been maintained well and has become degraded over time. You want to use Google-recommended practices to detect anomalies in your company data. What should you do?

（A）Upload your files into Cloud Storage. Use Cloud Datalab to explore and clean your data.

（B）Upload your files into Cloud Storage. Use Cloud Dataprep to explore and clean your data.

（C）Connect Cloud Datalab to your on-premises systems. Use Cloud Datalab to explore and clean your data.

（D）Connect Cloud Dataprep to your on-premises systems. Use Cloud Dataprep to explore and clean your data.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Your company has a networking team and a development team. The development team runs applications on Compute Engine instances that contain sensitive data. The development team requires administrative permissions for Compute Engine. Your company requires all network resources to be managed by the networking team. The development team does not want the networking team to have access to the sensitive data on the instances. What should you do?

（A）1. Create a project with a Shared VPC and assign the Network Admin role to the networking team.
2. Create a second project without a VPC, configure it as a Shared VPC service project, and assign the Compute Admin role to the development team.

（B）1. Create a project with a standalone VPC and assign the Network Admin role to the networking team.
2.Create a second project with a standalone VPC and assign the Compute Admin role to the development team.
3.Use Cloud VPN to join the two VPCs.

（C）1. Create a project with a standalone VPC and assign the Network Admin role to the networking team.
2.Create a second project with a standalone VPC and assign the Compute Admin role to the development team.
3.Use VPC Peering to join the two VPCs.

（D）1. Create a project with a standalone Virtual Private Cloud (VPC), assign the Network Admin role to the networking team, and assign the Compute Admin role to the development team.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

You are implementing Firestore for Mountkirk Games. Mountkirk Games wants to give a new game programmatic access to a legacy game's Firestore database. Access should be as restricted as possible. What should you do?

（A）Create a service account (SA) in the legacy game's Google Cloud project, give it the Firebase Admin role, and then migrate the new game to the legacy game's project.

（B）Create a service account (SA) in the legacy game's Google Cloud project, add a second SA in the new game's IAM page, and then give the Organization Admin role to both SAs

（C）Create a service account (SA) in the legacy game's Google Cloud project, add this SA in the new game's IAM page, and then give it the Firebase Admin role in both projects

（D）Create a service account (SA) in the lgacy game's Google Cloud project, give the SA the Organization Admin rule and then give it the Firebase Admin role in both projects

正解：C 解答を投票する

質問 10

Your development team has created a mobile game app. You want to test the new mobile app on Android and iOS devices with a variety of configurations. You need to ensure that testing is efficient and cost-effective.
What
should you do?

（A）Create Android and iOS VMs on Google Cloud, install the mobile app on the VMs, and test the mobile app.

（B）Upload your mobile app with different configurations to Firebase Hosting and test each configuration.

（C）Create Android and iOS containers on Google Kubernetes Engine (GKE), install the mobile app on the containers, and test the mobile app.

（D）Upload your mobile app to the Firebase Test Lab, and test the mobile app on Android and iOS devices.

正解：C 解答を投票する

質問 11

You have deployed several instances on Compute Engine. As a security requirement, instances cannot have a public IP address. There is no VPN connection between Google Cloud and your office, and you need to connect via SSH into a specific machine without violating the security requirements. What should you do?

（A）Add all instances to an unmanaged instance group. Configure TCP Proxy Load Balancing with the instance group as a backend. Connect to the instance using the TCP Proxy IP.

（B）Create a bastion host in the network to SSH into the bastion host from your office location. From the bastion host, SSH into the desired instance.

（C）Configure Identity-Aware Proxy (IAP) for the instance and ensure that you have the role of IAP-secured Tunnel User. Use the gcloud command line tool to ssh into the instance.

（D）Configure Cloud NAT on the subnet where the instance is hosted. Create an SSH connection to the Cloud NAT IP address to reach the instance.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all projects in the organization. You provision the Google Cloud Resource Manager and set up yourself as the org admin. What Google Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team'?

（A）Org viewer, project viewer

（B）Org admin, project browser

（C）Project owner, network admin

（D）Org viewer, project owner

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 13

You need to evaluate your team readiness for a new GCP project. You must perform the evaluation and create a skills gap plan incorporates the business goal of cost optimization. Your team has deployed two GCP projects successfully to date. What should you do?

（A）Allocate budget for team training. Create a roadmap for your team to achieve Google Cloud certification based on job role.

（B）Allocate budget to hire skilled external consultants. Create a roadmap for your team to achieve Google Cloud certification based on job role.

（C）Allocate budget to hire skilled external consultants. Set a deadline for the new GCP project.

（D）Allocate budget for team training. Set a deadline for the new GCP project.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 14

Your company is designing its data lake on Google Cloud and wants to develop different ingestion pipelines to collect unstructured data from different sources. After the data is stored in Google Cloud, it will be processed in several data pipelines to build a recommendation engine for end users on the website. The structure of the data retrieved from the source systems can change at any time. The data must be stored exactly as it was retrieved for reprocessing purposes in case the data structure is incompatible with the current processing pipelines. You need to design an architecture to support the use case after you retrieve the data. What should you do?

（A）Store the data in a Cloud Storage bucket. Design the processing pipelines to retrieve the data from the bucket

（B）Store the data in a BigQuery table. Design the processing pipelines to retrieve the data from the table.

（C）Send the data through the processing pipeline, and then store the processed data in a BigQuery table for reprocessing.

（D）Send the data through the processing pipeline, and then store the processed data in a Cloud Storage bucket for reprocessing.

正解：A 解答を投票する

質問 15

For this question, refer to the JencoMart case study.
JencoMart has decided to migrate user profile storage to Google Cloud Datastore and the application servers to Google Compute Engine (GCE). During the migration, the existing infrastructure will need access to Datastore to upload the data. What service account key-management strategy should you recommend?

（A）Provision service account keys for the on-premises infrastructure and use Google Cloud Platform (GCP) managed keys for the VMs

（B）Deploy a custom authentication service on GCE/Google Container Engine (GKE) for the on-premises infrastructure and use GCP managed keys for the VMs.

（C）Provision service account keys for the on-premises infrastructure and for the GCE virtual machines (VMs).

（D）Authenticate the on-premises infrastructure with a user account and provision service account keys for the VMs.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 16

The current Dress4win system architecture has high latency to some customers because it is located in one data center.
As of a future evaluation and optimizing for performance in the cloud, Dresss4win wants to distribute it's system architecture to multiple locations when Google cloud platform.
Which approach should they use?

（A）Use regional managed instance groups and a global load balancer to increase reliability by providing automatic failover between zones in different regions.

（B）Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines managed by your operations team.

（C）Use regional managed instance groups and a global load balancer to increase performance because the regional managed instance group can grow instances in each region separately based on traffic.

（D）Use a global load balancer with a set of virtual machines that forward the requests to a closer group of virtual machines as part of a separate managed instance groups.

正解：C 解答を投票する

Professional-Cloud-Architect 無料問題集「Google Certified Professional - Cloud Architect (GCP)」

弊社を連絡する

関連リンク

トップ試験