Free Access to Google.Professional-Cloud-Architect.v2024-05-07.q227 with Valid Practice Test (Page 36)

Question 171

For this question, refer to the JencoMart case study.
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources. What Google domain and project structure should you recommend?

A.Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.
B.Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.
C.Create a single G Suite account to manage users with each stage of each application in its own project.
D.Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.

Correct Answer: A

Topic 4, Dress4Win case studyCompany Overview
Dress4win is a web-based company that helps their users organize and manage their personal wardrobe using a website and mobile application. The company also cultivates an active social network that connects their users with designers and retailers. They monetize their services through advertising, e-commerce, referrals, and a freemium app model.
Company Background
Dress4win's application has grown from a few servers in the founder's garage to several hundred servers and appliances in a colocated data center. However, the capacity of their infrastructure is now insufficient for the application's rapid growth. Because of this growth and the company's desire to innovate faster, Dress4win is committing to a full migration to a public cloud.
Solution Concept
For the first phase of their migration to the cloud, Dress4win is considering moving their development and test environments. They are also considering building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location.
* Databases:
* Application servers:
* Storage appliances:
* Apache Hadoop/Spark servers:
* MQ servers:
* Miscellaneous servers:
Business Requirements
* Build a reliable and reproducible environment with scaled parity of production.
* Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
* Improve business agility and speed of innovation through rapid provisioning of new resources.
* Analyze and optimize architecture for performance in the cloud.
* Migrate fully to the cloud if all other requirements are met.
Technical Requirements
* Evaluate and choose an automation framework for provisioning resources in cloud.
* Support failover of the production environment to cloud during an emergency.
* Identify production services that can migrate to cloud to save capacity.
* Use managed services whenever possible.
* Encrypt data on the wire and at rest.
* Support multiple VPN connections between the production data center and cloud environment.
CEO Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a new competitor could use a public cloud platform to offset their up-front investment and freeing them to focus on developing better features.
CTO Statement
We have invested heavily in the current infrastructure, but much of the equipment is approaching the end of its useful life. We are consistently waiting weeks for new gear to be racked before we can start new projects. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
CFO Statement
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years puts a cloud strategy between 30 to 50% lower than our current model.

Question 172

You want to establish a Compute Engine application in a single VPC across two regions. The application must communicate over VPN to an on-premises network. How should you deploy the VPN?

A.Use VPC Network Peering between the VPC and the on-premises network.
B.Expose the VPC to the on-premises network using IAM and VPC Sharing.
C.Create a global Cloud VPN Gateway with VPN tunnels from each region to the on-premises peer gateway.
D.Deploy Cloud VPN Gateway in each region. Ensure that each region has at least one VPN tunnel to the on-premises peer gateway.

Question 173

Your customer is moving an existing corporate application to Google Cloud Platform from an on-premises data center. The business owners require minimal user disruption. There are strict security team requirements for storing passwords. What authentication strategy should they use?

A.Use G Suite Password Sync to replicate passwords into Google.
B.Federate authentication via SAML 2.0 to the existing Identity Provider.
C.Provision users in Google using the Google Cloud Directory Sync tool.
D.Ask users to set their Google password to match their corporate password.

Question 174

Dress4Win has end-to-end tests covering 100% of their endpoints.
They want to ensure that the move to the cloud does not introduce any new bugs.
Which additional testing methods should the developers employ to prevent an outage?

A.They should enable Google Stackdriver Debugger on the application code to show errors in the code.
B.They should add additional unit tests and production scale load tests on their cloud staging environment.
C.They should add canary tests so developers can measure how much of an impact the new release causes to latency.
D.They should run the end-to-end tests in the cloud staging environment to determine if the code is working as intended.

Question 175

Your company captures all web traffic data in Google Analytics 260 and stores it in BigQuery.
Each country has its own dataset. Each dataset has multiple tables. You want analysts from each country to be able to see and query only the data for their respective countries.
How should you configure the access rights?

A.Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate tables with view access with each respective analyst country- group.
B.Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group.
C.Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate dataset with view access with each respective analyst country-group.
D.Create a group per country. Add analysts to their respective country-groups. Create a single group `all_analysts', and add all country-groups as members. Grant the `all-analysis' group the IAM role of BigQuery dataViewer. Share the appropriate table with view access with each respective analyst country-group.

Question 171

Question 172

Question 173

Question 174

Question 175

Download PDF File