Google Professional-Cloud-Architect Google Cloud Architect Professional Exam Practice Test Questions

• Question 1

  Your company is using Google Cloud. You have two folders under the Organization: Finance and Shopping. The members of the development team are in a Google Group. The development team group has been assigned the Project Owner role on the Organization. You want to prevent the development team from creating resources in projects in the Finance folder. What should you do?

  • Assign the development team group the Project Viewer role on the Finance folder, and assign the development team group the Project Owner role on the Shopping folder.
  • Assign the development team group only the Project Viewer role on the Finance folder.
  • Assign the development team group the Project Owner role on the Shopping folder, and remove the development team group Project Owner role from the Organization.
  • Assign the development team group only the Project Owner role on the Shopping folder.

  Show Answer Answer: C Next

• Question 2

  Your applications will be writing their logs to BigQuery for analysis. Each application should have its own table.Any logs older than 45 days should be removed. You want to optimize storage and follow Google recommended practices. What should you do?

  • Configure the expiration time for your tables at 45 days
  • Make the tables time-partitioned, and configure the partition expiration at 45 days
  • Rely on BigQuery's default behavior to prune application logs older than 45 days
  • Create a script that uses the BigQuery command line tool (bq) to remove records older than 45 days

  Show Answer Answer: B Next

• Question 3

  Your company pushes batches of sensitive transaction data from its application server VMs to Cloud Pub/Sub for processing and storage. What is the Google-recommended way for your application to authenticate to the required Google Cloud services?

  • Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.
  • Ensure that VM service accounts do not have access to Cloud Pub/Sub, and use VM access scopes to grant the appropriate Cloud Pub/Sub IAM roles.
  • Generate an OAuth2 access token for accessing Cloud Pub/Sub, encrypt it, and store it in Cloud Storage for access from each VM.
  • Create a gateway to Cloud Pub/Sub using a Cloud Function, and grant the Cloud Function service account the appropriate Cloud Pub/Sub IAM roles.

  Show Answer Answer: A Next

• Question 4

  For this question, refer to the Dress4Win case study.Dress4Win would like to become familiar with deploying applications to the cloud by successfully deploying some applications quickly, as is. They have asked for your recommendation. What should you advise?

  • Identify self-contained applications with external dependencies as a first move to the cloud.
  • Identify enterprise applications with internal dependencies and recommend these as a first move to the cloud.
  • Suggest moving their in-house databases to the cloud and continue serving requests to on-premise applications.
  • Recommend moving their message queuing servers to the cloud and continue handling requests to on-premise applications.

  Show Answer Answer: A Next

• Question 5

  Your customer is moving an existing corporate application to Google Cloud Platform from an on-premises data center. The business owners require minimal user disruption. There are strict security team requirements for storing passwords. What authentication strategy should they use?

  • Use G Suite Password Sync to replicate passwords into Google.
  • Federate authentication via SAML 2.0 to the existing Identity Provider.
  • Provision users in Google using the Google Cloud Directory Sync tool.
  • Ask users to set their Google password to match their corporate password.

  Show Answer Answer: B Next