Google Cloud professional architect free practice test

This practice test provides targeted preparation for aspiring Cloud architects on the Google Cloud platform. It covers essential skills such as identity management, Managing implementations of cloud architecture, security & compliance, threat monitoring, Deploying and implementing a cloud solution, and providing dynamic solutions to drive business objectives. This resource aids individuals in assessing their readiness and refining their expertise in cloud architecture practices.

Welcome to your GCP Professional cloud architect practice test

An online retailer is evaluating database options to store the analytics data from its experimental drone deliveries. You're currently using a small cluster of MongoDB NoSQL database servers. You want to move to a managed NoSQL database service with consistent low latency that can scale throughput seamlessly and can handle the petabytes of data you expect after expanding to additional markets. What should you do?

A. Extract the data from MongoDB, and insert the data into BigQuery.

B.Extract the data from MongoDB. Insert the data into Firestore using Datastore mode.

C. Create a Bigtable instance, extract the data from MongoDB, and insert the data into Bigtable.

D. Extract the data from MongoDB. Insert the data into Firestore using Native mode.

How can you enable interactive access to a Google Cloud instance?

A. Edit the metadata of the instance

B. Use SSH to connect to the instance

C. Change the instance type to "Interactive"

D. Change the IP allow list for the instance

Your application requires a service to process changes to a Firestore database. The service is triggered each time a document is added to a specific collection in the database. What is the best way to configure this?

A. Deploy the service as a Cloud Function, triggered by Firestore events

B. Deploy the service on Cloud Run, and configure it to poll the Firestore database for changes.

C. Deploy the service as a Cloud Function, triggered by Pub/Sub messages.

D. Deploy the service on Cloud Run, and configure it to respond to HTTP requests.

What is the difference between a virtual machine and a virtual machine instance in Google Compute Engine?

A. A virtual machine is a running copy of the VM, while an instance describes what the emulated server should look like.

B. A virtual machine is a physical server, while an instance is a virtual copy of that server.

C. A virtual machine is an executable file, while an instance is a running copy of the executable.

D. A virtual machine is an object that describes the VM's configuration, while an instance is a running copy of that configuration.

A social media company's employees will use Google Workspace. Your current on-premises network cannot meet the requirements to connect to Google's public infrastructure. What should you do?

A. Connect the on-premises network to Google’s public infrastructure via a partner that supports Carrier Peering.

B. Order a Partner Interconnect from a Google Cloud partner, and ensure that proper routes are configured.

C. Connect the network to a Google point of presence, and enable Direct Peering.

D.Order a Dedicated Interconnect from a Google Cloud partner, and ensure that proper routes are configured.

. You have several Compute Engine instances running NGINX and Apache for a web application. In your web server logs, many login failures come from a single IP address, which looks like a brute force attack. How can you block this traffic?

A. Ensure that an HTTP(S) load balancer is configured to send traffic to the backend Compute Engine instances running your web server. Create a Google Cloud Armor policy with a default rule action of "Allow." Add a new rule that specifies the IP address causing the login failures as the Condition, with an action of "Deny" and a deny status of "403," and accept the default priority (1000). Add the load balancer backend service's HTTP-backend as the target.

B. Ensure that an HTTP(S) load balancer is configured to send traffic to your backend Compute Engine instances running your web server. Create a Google Cloud Armor policy using the instance’s local firewall with a default rule action of "Allow." Add a new local firewall rule that specifies the IP address causing the login failures as the Condition, with an action of "Deny" and a deny status of "403," and accept the default priority (1000).

C. Ensure that an HTTP(S) load balancer is configured to send traffic to the backend Compute Engine instances running your web server. Create a Google Cloud Armor policy with a default rule action of "Deny." Add a new rule that specifies the IP address causing the login failures as the Condition, with an action of "Deny" and a deny status of "403," and accept the default priority (1000). Add the load balancer backend service's HTTP-backend as the target.

D.Edit the Compute Engine instances running your web application, and enable Google Cloud Armor. Create a Google Cloud Armor policy with a default rule action of "Allow." Add a new rule that specifies the IP address causing the login failures as the Condition, with an action of "Deny” and a deny status of "403," and accept the default priority (1000).

An IoT company must run in a separate project from its APIs and web store. You want to use Identity and Access Management (IAM) to ensure a secure environment. How should you set up IAM?

A. Use separate service accounts for each component (social media app, APIs, and web store) with predefined or custom roles to grant access.

B.Use one service account for each component (social media app, APIs, and web store) with predefined or custom roles to grant access.

C.Use separate service accounts for each component (social media app, APIs, and web store) with basic roles to grant access.

D. Use one service account for each component (social media app, APIs, and web store) with basic roles to grant access.

Which data storage service provides data warehouse services for storing data but also offers an interactive SQL interface for querying the data?

A. Datalab

B. BigQuery

C. Dataproc

D. Cloud SQL

An offshore wind company has recently acquired another company operating in Italy to expand your market in Europe. You have to integrate their legacy systems into your company’s systems. Your company uses GCP as the primary cloud to manage your applications. Assuming your team is taking this opportunity to modernize parts of the legacy system, what is the best way to integrate this system into your company’s systems?

A. Containerize the legacy applications using GKE and run them on the on-prem instances. Use Anthos for managing the applications

B. Create snapshot of the legacy systems and run them on compute instances on GCP

C. Containerize the legacy applications using GKE and run the GKE instances on GCP

D. Use transfer appliance to securely ship the data from on-prem systems to GCP

10.

_____ is a managed microservices platform that allows you to just build your application into a container, then let Google worry about handling all the infrastructure management from there.

A. Service Mesh

B. Config Connector

C. Cloud Build

D. Cloud Run

11.

Google Cloud’s operations suite integrates several technologies, including monitoring, logging, error reporting, and debugging that are commonly implemented in other environments as separate solutions using separate products. What are key benefits of integration of these services?

A. Better for Google Cloud only so long as you don't need to monitor other applications or clouds

B. Reduces overhead, reduces noise, streamlines use, and fixes problems faster

C. Ability to replace one tool with another from a different vendor

D. Detailed control over the connections between the technologies

12.

What is the purpose of the Cloud Trace service?

A. Reporting on application errors.

B. Reporting on Google Cloud resource consumption as part of managing performance.

C. Reporting on latency as part of managing performance.

D. Reporting on Google Cloud system errors.

13.

You’ve re-architected a monolithic web application, so state is not stored in memory on the web servers, but in a database instead. This has caused slow performance when retrieving user sessions though. What might be the best way to fix this?

A. Move session state back onto the web servers and use sticky sessions in the load balancer.

B. Use a caching service like Memorystore for Redis.

C.Increase the number of CPUs in the database server.

D.Make sure all web servers are in the same zone as the database.

14.

What Google Cloud feature would be easiest to use to automate a build in response to code being checked into your source code repository?

A. Build triggers

B.Binary Authorization

C. CloudScheduler

D. Cloud run

15.

A global ecommerce company has users all over the world. They need a database service that can provide low latency worldwide with strong consistency. Which service should they choose?

A. Firestore

B. Cloud SQL

C. Spanner

D. BigQuery

16.

An Engineering firm is using Firestore to store information about products, reviews, and user sessions. You'd like to speed up data access in a simple, cost-effective way. What would you recommend?

A.Move the data to Spanner.

B. Move the data to Cloud Bigtable.

C. Move the data to BigQuery.

D. Cache the data using Memorystore.

17.

. Coinbase global has developed an online crypto exchange service to serve customers globally. The exchange service has a n-tier architecture, such as Web, REST API and databases, and it is hosted in Google Cloud. You are the lead of a QA and testing team. To make sure the platform can still operate under heavy load and in any regional natural disaster scenario. How would you design your load and DR test strategy?

A. Deploy Locust onto GKE to run load test until the system fails and conduct DR test during regular business hours to evaluate possible business impact by configuring Cloud Load Balancer to cut off the HTTP traffic at the web tier

B. Deploy Locust onto GKE to run load test until the system fails and conduct DR test during off-business hours to reduce possible business impact by configuring Cloud Load Balancer to cut off the HTTP traffic at the Web tier and API layer

C. Deploy Locust onto GKE to run load test until the system stops taking new requests and conduct DR test during regular business hours to evaluate possible business impact by configuring Cloud Load Balancer to cut off the HTTP traffic at the Web tier and API layer

D. Deploy Locust onto GKE to run load test until the system stops taking new requests and conduct DR test during off-business hours to reduce possible business impact by configuring Cloud Load Balancer to cut off the HTTP traffic at the Web tier, API layer and TCP traffic at database layer

18.

. A Large web archive application with users all over the world and a lot of static content. Which load balancer configuration would likely be the most suitable?

A. TCP load balancer with SSL configured.

B. HTTP load balancer with SSL configured.

C. HTTP load balancer with SSL configured and the CDN enabled.

D. UDP load balancer with SSL configured and the CDN enabled.

19.

You are the architect leading a team building a 3-tier web application. You do not want the programmers to have access to production resources. What's the easiest way to do this in Google Cloud?

A.Create development and production projects, and don't give developers access to production.

B. Use different service accounts for production and development resources with your project.

C. Set up private access and Identity-Aware Proxy.

D.Create a firewall rule that blocks developer access to production servers and databases.

20.

You have been assigned the role of cloud storage admin in your organization. What do you have to do to enable encryption when using Cloud Storage?

A.Enable encryption and upload a key.

B. Nothing as encryption is enabled by default.

C. Simply enable encryption when configuring a bucket.

D. Create an encryption key using Cloud Key Management Service and select it when creating a Cloud Storage bucket.

21.

. You are building a serverless app and have made a minor fix to one of your services. You want to deploy the new version with no downtime. Which would you choose?

A. Rolling update

B. A/B test

C.Canary deployment

D.Blue/green deployment

22.

. A solar company deploying test environments using Compute Engine VMs. Some downtime is acceptable, and it is very important to deploy them as inexpensively as possible. What single thing below could save you the most money?

A.Preemptible machines

B. Sustained use discount

C. Committed use discount

D. Sole tenant nodes

23.

You have deployed service on App Engine that has an availability SLO of 99%. What could you use to monitor whether you are meeting it?

A. Liveness probe

B. Readiness probe

C.Uptime check

D. Health check

24.

You made a minor update to a microservice running on Cloud run and would like to test it in production by sending a small portion of requests to the new version. Which would you choose?

A. A/B testing

B. Canary deployment

C. Blue/green deployment

D. Rolling update

25.

How does Google Cloud suggest that organizations use third-party identity providers to enable users access to Google Cloud with their corporate credentials?

A. By delegating responsibility to service accounts and groups

B. By implementing the principle of least privilege

C. By federating third-party identity providers with Google Cloud

D. By migrating unmanaged accounts to personal accounts