Back to overview

GCP Professional Cloud Architect exam

Sample questions to prepare for the Google GCP Professional Cloud Architect exam

Subject
Sciences / Computer science
Language of creation
English
218 flashcards No ratings yet 0 views
Add to my sets

Sign in to add this set to your collection. You will return here afterwards.

Cards in this set

Card 181

Question

Regarding Compute Engine: What is a managed instance group?

Answer

  • A managed instance group combines existing instances of different configurations into one manageable group
  • A managed instance group uses an instance template to create identical instances
  • A managed instance group creates a firewall around instances
  • A managed instance group is a set of servers used exclusively for batch processing

Card 182

Question

What type of firewall rule(s) does Google Cloud's networking support?

Answer

  • allow
  • allow, deny & filtered
  • deny
  • allow & deny

Card 183

Question

How are subnetworks different than the legacy networks?

Answer

  • They're the same, only the branding is different
  • With subnetworks IP address allocation occurs at the global network level
  • Legacy networks are the preferred way to create networks
  • Each subnetwork controls the IP address range used for instances that are allocated to that subnetwork

Card 184

Question

Which of the following is not a valid metric for triggering autoscaling?

Answer

  • Google Cloud Pub/Sub queuing
  • App Engine Task Queues
  • Stackdriver Monitoring metrics
  • Average CPU utilization

Card 185

Question

Which of the following features makes applying firewall settings easier?

Answer

  • Service accounts
  • Tags
  • Metadata
  • Labels

Card 186

Question

What option does Cloud SQL offer to help with high availability?

Answer

  • Point-in-time recovery
  • The AlwaysOn setting
  • Snapshots
  • Failover replicas

Card 187

Question

Regarding Compute Engine: when executing a startup script on a Linux server which user does the instance execute the script as?

Answer

  • ubuntu
  • The Google provided "gceinstance" user
  • root
  • Whatever user you specify in the console

Card 188

Question

Which of the follow methods will not cause a shutdown script to be executed?

Answer

  • When an instance shuts down through a request to the guest operating system
  • A preemptible instance being terminated
  • Shutting down via the cloud console
  • An instances.reset API call

Card 189

Question

Which type of account would you use in code when you want to interact with Google Cloud services?

Answer

  • Google group
  • Service account
  • Code account
  • Google account

Card 190

Question

Which of the following is not an IAM best practice?

Answer

  • Use primitive roles by default
  • Treat each component of your application as a separate trust boundary
  • Grant roles at the smallest scope needed
  • Restrict who has access to create and manage service accounts in your project

Card 191

Question

Which of the following would not reduce your recovery time in the event of a disaster?

Answer

  • Make it as easy as possible to adjust the DNS record to cut over to your warm standby server.
  • Replace your warm standby server with a hot standby server.
  • Use a highly preconfigured machine image for deploying new instances.
  • Replace your active/active hybrid production environment (on-premises and GCP) with a warm standby server.

Card 192

Question

Which of the following is not a best practice for mitigating Denial of Service attacks on your Google Cloud infrastructure?

Answer

  • Block SYN floods using Cloud Router
  • Scale to absorb the attack
  • Isolate your internal traffic from the external world
  • Reduce the attack surface for your GCE deployment

Card 193

Question

Which is the fastest instance storage option that will still be available when an instance is stopped?

Answer

  • Local SSD
  • Standard Persistent Disk
  • SSD Persistent Disk
  • RAM disk

Card 194

Question

Which of these statements about Microsoft licenses is true?

Answer

  • You can migrate your existing Microsoft application licenses to Compute Engine instances, but not your Microsoft Windows licenses.
  • You can migrate your existing Microsoft Windows and Microsoft application licenses to Compute Engine instances.
  • You cannot migrate your existing Microsoft Windows or Microsoft application licenses to Compute Engine instances.
  • You can migrate your existing Microsoft Windows licenses to Compute Engine instances, but not your Microsoft application licenses.

Card 195

Question

Which database services support standard SQL queries?

Answer

  • Cloud Bigtable and Cloud SQL
  • Cloud Spanner and Cloud SQL
  • Cloud SQL
  • Cloud SQL and Cloud Datastore

Card 196

Question

Which statement about IP addresses is false?

Answer

  • You are charged for a static external IP address for every hour it is in use.
  • You are not charged for ephemeral IP addresses.
  • Google Cloud Engine supports only IPv4 addresses, not IPv6.
  • You are charged for a static external IP address when it is assigned but unused.

Card 197

Question

Which Google Cloud Platform service requires the least management because it takes care of the underlying infrastructure for you?

Answer

  • Kubernetes Engine
  • Cloud Engine
  • Docker containers running on Cloud Engine
  • App Engine

Card 198

Question

To ensure that your application will handle the load even if an entire zone fails, what should you do?

Answer

  • Don't select the "Multizone" option when creating your managed instance group.
  • Create a regional unmanaged instance group and spread your instances across multiple zones.
  • Spread your managed instance group over two zones and overprovision by 100%.
  • Overprovision your regional managed instance group by at least 50%.

Card 199

Question

If you do not grant a user named Bob permission to access a Cloud Storage bucket, but then use an ACL to grant access to an object inside that bucket to Bob, what will happen?

Answer

  • Bob will be able to access the object because bucket and object ACLs are independent of each other.
  • Bob will be able to access all of the objects inside the bucket because he was granted access to at least one object in the bucket.
  • ob will not be able to access the object because he does not have access to the bucket.
  • It is not possible to grant access to an object when it is inside a bucket for which a user does not have access.

Card 200

Question

To set up a virtual private network between your office network and Google Cloud Platform and have the routes automatically updated when the network topology changes, what is the minimal number of each type of component you need to implement?

Answer

  • 2 Cloud VPN Gateways and 1 Peer Gateway
  • 1 Cloud VPN Gateway, 1 Peer Gateway, and 1 Cloud Router
  • 2 Peer Gateways and 1 Cloud Router
  • 2 Cloud VPN Gateways and 1 Cloud Router

How to use this set

Read the preview and check whether the content and answers suit your learning goal. You can add the public set to your sets to study it. Your account shows the available actions.

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please reload the page.