Professional Cloud Architect Practice Test

Professional Cloud Architect Practice Test practice questions, page 6 of 15, with answer review and explanations.

Question 26

Your organization requires that metrics from all applications be retained for 5 years for future analysis in possible legal proceedings. Which approach should you use?

  1. Grant the security team access to the logs in each Project
  2. Configure Stackdriver Monitoring for all Projects, and export to BigQuery
  3. Configure Stackdriver Monitoring for all Projects with the default retention policies
  4. Configure Stackdriver Monitoring for all Projects, and export to Google Cloud Storage

Question 27

Your company has decided to build a backup replica of their on-premises user authentication PostgreSQL database on Google Cloud Platform. The database is 4 TB, and large updates are frequent. Replication requires private address space communication. Which networking approach should you use?

  1. Google Cloud Dedicated Interconnect
  2. Google Cloud VPN connected to the data center network
  3. A NAT and TLS translation gateway installed on-premises
  4. A Google Compute Engine instance with a VPN server installed connected to the data center network

Question 28

Auditors visit your teams every 12 months and ask to review all the Google Cloud Identity and Access Management (Cloud IAM) policy changes in the previous 12 months. You want to streamline and expedite the analysis and audit process. What should you do?

  1. Create custom Google Stackdriver alerts and send them to the auditor
  2. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor
  3. Use cloud functions to transfer log entries to Google Cloud SQL and use ACLs and views to limit an auditor's view
  4. Enable Google Cloud Storage (GCS) log export to audit logs into a GCS bucket and delegate access to the bucket

Question 29

You are designing a large distributed application with 30 microservices. Each of your distributed microservices needs to connect to a database back-end. You want to store the credentials securely. Where should you store the credentials?

  1. In the source code
  2. In an environment variable
  3. In a secret management system
  4. In a config file that has restricted access through ACLs

Question 30

A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center. He wants to migrate the custom tool to the new cloud environment. You want to advocate for the adoption of Google Cloud Deployment Manager. What are two business risks of migrating to Cloud Deployment Manager? (Choose two.)

  1. Cloud Deployment Manager uses Python
  2. Cloud Deployment Manager APIs could be deprecated in the future
  3. Cloud Deployment Manager is unfamiliar to the company's engineers
  4. Cloud Deployment Manager requires a Google APIs service account to run
  5. Cloud Deployment Manager can be used to permanently delete cloud resources
  6. Cloud Deployment Manager only supports automation of Google Cloud resources