Professional-Cloud-Architect Practice Exam and Study Guides - Verified By TestkingPDF Updated 282 Questions
2025 Updated Verified Pass Professional-Cloud-Architect Study Guides & Best Courses
Google Professional-Cloud-Architect (Google Certified Professional - Cloud Architect (GCP)) Exam is a certification exam offered by Google Cloud that is designed to assess and validate the skills and knowledge of individuals in designing and implementing cloud architecture solutions. Professional-Cloud-Architect exam is aimed at professionals who are interested in becoming certified Google Cloud Architects and who possess a strong understanding of cloud computing, networking, and security concepts.
Section #6. Improving and validating the reliability of processes and solutions
The final exam domain is compact and throws light on concepts like deployment & release management, evaluations of quality control measures, monitoring and logging solutions, and helping users through deployed aids for the same.
Passing the Google Professional-Cloud-Architect exam is a significant achievement for IT professionals who want to demonstrate their expertise in cloud architecture and Google Cloud technologies. It opens up a wide range of career opportunities in cloud computing, including roles such as cloud architect, cloud engineer, cloud consultant, and cloud solutions architect. Google Certified Professional - Cloud Architect (GCP) certification is recognized globally as a mark of excellence in cloud architecture and is highly regarded by employers in the IT industry.
NEW QUESTION # 57
Your company is moving 75 TB of data into Google Cloud. You want to use Cloud Storage and follow Google-recommended practices. What should you do?
- A. Install gsutil on each server containing data. Use streaming transfers to upload the data into Cloud Storage.
- B. Install gsutil on each server that contains data. Use resumable transfers to upload the data into Cloud Storage.
- C. Move your data onto a Transfer Appliance. Use a Transfer Appliance Rehydrator to decrypt the data into Cloud Storage.
- D. Move your data onto a Transfer Appliance. Use Cloud Dataprep to decrypt the data into Cloud Storage.
Answer: B
Explanation:
https://cloud.google.com/solutions/transferring-big-data-sets-to-gcp
NEW QUESTION # 58
Your web application must comply with the requirements of the European Union's General Data Protection Regulation (GDPR). You are responsible for the technical architecture of your web application. What should you do?
- A. Ensure that your web application only uses native features and services of Google Cloud Platform, because Google already has various certifications and provides "pass-on" compliance when you use native features.
- B. Ensure that Cloud Security Scanner is part of your test planning strategy in order to pick up any compliance gaps.
- C. Define a design for the security of data in your web application that meets GDPR requirements.
- D. Enable the relevant GDPR compliance setting within the GCPConsole for each of the services in use within your application.
Answer: C
Explanation:
Explanation
https://cloud.google.com/security/gdpr/?tab=tab4
Reference: https://www.mobiloud.com/blog/gdpr-compliant-mobile-app/
NEW QUESTION # 59
Your company's user-feedback portal comprises a standard LAMP stack replicated across two zones. It is deployed in the us-central1 region and uses autoscaled managed instance groups on all layers, except the database. Currently, only a small group of select customers have access to the portal. The portal meets a
99.99% availability SLA under these conditions However next quarter, your company will be making the portal available to all users, including unauthenticated users. You need to develop a resiliency testing strategy to ensure the system maintains the SLA once they introduce additional user load. What should you do?
- A. Capture existing users input, and replay captured user load until resource utilization crosses 80%. Also, derive estimated number of users based on existing users usage of the app, and deploy enough resources to handle 200% of expected load.
- B. Expose the new system to a larger group of users, and increase group ' size each day until autoscale logic is tnggered on all layers. At the same time, terminate random resources on both zones.
- C. Create synthetic random user input, replay synthetic load until autoscale logic is triggered on at least one layer, and introduce "chaos" to the system by terminating random resources on both zones.
- D. Capture existing users input, and replay captured user load until autoscale is triggered on all layers. At the same time, terminate all resources in one of the zones.
Answer: A
NEW QUESTION # 60
The operations manager asks you for a list of recommended practices that she should consider when migrating a J2EE application to the cloud. Which three practices should you recommend? Choose 3 answers
- A. Select an automation framework to reliably provision the cloud infrastructure.
- B. Deploy a continuous integration tool with automated testing in a staging environment.
- C. Migrate from MySQL to a managed NoSQL database like Google Cloud Datastore or Bigtable.
- D. Port the application code to run on Google App Engine.
- E. Instrument the application with a monitoring tool like Stackdriver Debugger.
- F. Integrate Cloud Dataflow into the application to capture real-time metrics.
Answer: B,C,D
Explanation:
References: https://cloud.google.com/appengine/docs/standard/java/tools/uploadinganapp
https://cloud.google.com/appengine/docs/standard/java/building-app/cloud-sql
NEW QUESTION # 61
You are designing a Data Warehouse on Google Cloud and want to store sensitive data in BigQuery. Your company requires you to generate encryption keys outside of Google Cloud. You need to implement a solution. What should you do?
- A. Import a key in Cloud KMS. Create a dataset in BigQuery using the customer-supplied key option and select the created key.
- B. Generate a new key in Cloud Key Management Service (Cloud KMS). Store all data in Cloud Storage using the customer-managed key option and select the created key. Set up a Dataflow pipeline to decrypt the data and to store it in a BigQuery dataset.
- C. Import a key in Cloud KMS. Store all data in Cloud Storage using the customer-managed key option and select the created key. Set up a Dataflow pipeline to decrypt the data and to store it in a new BigQuery dataset.
- D. Generate a new key in Cloud Key Management Service (Cloud KMS). Create a dataset in BigQuery using the customer-managed key option and select the created key
Answer: A
Explanation:
Explanation
https://cloud.google.com/bigquery/docs/customer-managed-encryption
NEW QUESTION # 62
Your marketing department wants to send out a promotional email campaign. The development team wants to minimize direct operation management. They project a wide range of possible customer responses, from 100 to 500,000 click-throughs per day. The link leads to a simple website that explains the promotion and collects user information and preferences. Which infrastructure should you recommend?
- A. Use a Google Container Engine cluster to serve the website and store data to persistent disk.
- B. Use Google App Engine to serve the website and Google Cloud Datastore to store user data.
- C. Use a managed instance group to serve the website and Google Cloud Bigtable to store user data.
- D. Use a single compute Engine virtual machine (VM) to host a web server, backed by Google Cloud SQL.
Answer: D
NEW QUESTION # 63
Your BigQuery project has several users. For audit purposes, you need to see how many queries each user ran in the last month. What should you do?
- A. Use Cloud Audit Logging to view Cloud Audit Logs, and create a filter on the query operation to get the required information.
- B. Connect Google Data Studio to BigQuery. Create a dimension for the users and a metric for the amount of queries per user.
- C. In the BigQuery interface, execute a query on the JOBS table to get the required information.
- D. Use 'bq show' to list all jobs. Per job, use 'bq Is' to list job information and get the required information.
Answer: D
NEW QUESTION # 64
Your company's user-feedback portal comprises a standard LAMP stack replicated across two zones. It is deployed in the us-central1 region and uses autoscaled managed instance groups on all layers, except the database. Currently, only a small group of select customers have access to the portal. The portal meets a 99.99% availability SLA under these conditions However next quarter, your company will be making the portal available to all users, including unauthenticated users. You need to develop a resiliency testing strategy to ensure the system maintains the SLA once they introduce additional user load. What should you do?
- A. Capture existing users input, and replay captured user load until resource utilization crosses 80%.
Also, derive estimated number of users based on existing users usage of the app, and deploy enough resources to handle 200% of expected load. - B. Expose the new system to a larger group of users, and increase group ' size each day until autoscale logic is tnggered on all layers. At the same time, terminate random resources on both zones.
- C. Create synthetic random user input, replay synthetic load until autoscale logic is triggered on at least one layer, and introduce "chaos" to the system by terminating random resources on both zones.
- D. Capture existing users input, and replay captured user load until autoscale is triggered on all layers. At the same time, terminate all resources in one of the zones.
Answer: A
NEW QUESTION # 65
You are using Cloud Shell and need to install a custom utility for use in a few weeks. Where can you store the file so it is in the default execution path and persists across sessions?
- A. /usr/local/bin
- B. ~/bin
- C. Cloud Storage
- D. /google/scripts
Answer: D
NEW QUESTION # 66
For this question, refer to the TerramEarth case study
You analyzed TerramEarth's business requirement to reduce downtime, and found that they can achieve a majority of time saving by reducing customers' wait time for parts You decided to focus on reduction of the 3 weeks aggregate reporting time Which modifications to the company's processes should you recommend?
- A. Migrate from CSV to binary format, migrate from FTP to SFTP transport, and develop machine learning analysis of metrics.
- B. Increase fleet cellular connectivity to 80%, migrate from FTP to streaming transport, and develop machine learning analysis of metrics.
- C. Migrate from FTP to streaming transport, migrate from CSV to binary format, and develop machine learning analysis of metrics.
- D. Migrate from FTP to SFTP transport, develop machine learning analysis of metrics, and increase dealer local inventory by a fixed factor.
Answer: C
Explanation:
Explanation
The Avro binary format is the preferred format for loading compressed data. Avro data is faster to load because the data can be read in parallel, even when the data blocks are compressed.
Cloud Storage supports streaming transfers with the gsutil tool or boto library, based on HTTP chunked transfer encoding. Streaming data lets you stream data to and from your Cloud Storage account as soon as it becomes available without requiring that the data be first saved to a separate file. Streaming transfers are useful if you have a process that generates data and you do not want to buffer it locally before uploading it, or if you want to send the result from a computational pipeline directly into Cloud Storage.
References: https://cloud.google.com/storage/docs/streaming
https://cloud.google.com/bigquery/docs/loading-data
NEW QUESTION # 67
You have been asked to select the storage system for the click-data of your company's large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute, with bursts of up to 8,500 clicks per second. It must been stored for future analysis by your data science and user experience teams. Which storage infrastructure should you choose?
- A. Google cloud Datastore
- B. Google Cloud Storage
- C. Google Cloud Bigtable
- D. Google Cloud SQL
Answer: B
Explanation:
Reference:
https://cloud.google.com/bigquery/docs/loading-data-cloud-storage
NEW QUESTION # 68
You are moving an application that uses MySQL from on-premises to Google Cloud. The application will run on Compute Engine and will use Cloud SQL. You want to cut over to the Compute Engine deployment of the application with minimal downtime and no data loss to your customers. You want to migrate the application with minimal modification. You also need to determine the cutover strategy. What should you do?
- A. 1. Set up Cloud VPN to provide private network connectivity between the Compute Engine application and the on-premises MySQL server.
2.Stop the on-premises application.
3.Start the Compute Engine application, configured to read and write to the on-premises MySQL server.
4.Create the replication configuration in Cloud SQL.
5.Configure the source database server to accept connections from the Cloud SQL replica.
6.Finalize the Cloud SQL replica configuration.
7.When replication has been completed, stop the Compute Engine application.
8.Promote the Cloud SQL replica to a standalone instance.
9.Restart the Compute Engine application, configured to read and write to the Cloud SQL standalone instance. - B. 1. Set up Cloud SQL proxy and MySQL proxy.
2.Create a mysqldump of the on-premises MySQL server.
3.Upload the dump to a Cloud Storage bucket.
4.Import the dump into Cloud SQL.
5.Stop the on-premises application.
6.Start the Compute Engine application. - C. 1. Stop the on-premises application.
2.Create a mysqldump of the on-premises MySQL server.
3.Upload the dump to a Cloud Storage bucket.
4.Import the dump into Cloud SQL.
5.Start the application on Compute Engine. - D. 1. Set up Cloud VPN to provide private network connectivity between the Compute Engine application and the on-premises MySQL server.
2.Stop the on-premises application.
3.Create a mysqldump of the on-premises MySQL server.
4.Upload the dump to a Cloud Storage bucket.
5.Import the dump into Cloud SQL.
6.Modify the source code of the application to write queries to both databases and read from its local database.
7.Start the Compute Engine application.
8.Stop the on-premises application.
Answer: D
NEW QUESTION # 69
You need to upload files from your on-premises environment to Cloud Storage. You want the files to be encrypted on Cloud Storage using customer-supplied encryption keys. What should you do?
- A. Supply the encryption key using gcloud config. Use gsutil to upload the files to that bucket.
- B. Supply the encryption key in a .boto configuration file. Use gsutil to upload the files.
- C. Use gsutil to upload the files, and use the flag --encryption-key to supply the encryption key.
- D. Use gsutil to create a bucket, and use the flag --encryption-key to supply the encryption key. Use gsutil to upload the files to that bucket.
Answer: B
Explanation:
Reference:
https://cloud.google.com/storage/docs/encryption/customer-supplied-keys#gsutil
NEW QUESTION # 70
For this question, refer to the TerramEarth case study. To be compliant with European GDPR regulation, TerramEarth is required to delete data generated from its European customers after a period of 36 months when it contains personal data. In the new architecture, this data will be stored in both Cloud Storage and BigQuery. What should you do?
- A. Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action when with an Age condition of 36 months.
- B. Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36 months.
- C. Create a BigQuery time-partitioned table for the European data, and set the partition period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action with an Age condition of 36 months.
- D. Create a BigQuery time-partitioned table for the European data, and set the partition expiration period to
36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36 months.
Answer: D
Explanation:
Explanation
https://cloud.google.com/bigquery/docs/managing-partitioned-tables#partition-expiration
https://cloud.google.com/storage/docs/lifecycle
NEW QUESTION # 71
For this question, refer to the JencoMart case study
A few days after JencoMart migrates the user credentials database to Google Cloud Platform and shuts down the old server, the new database server stops responding to SSH connections. It is still serving database requests to the application servers correctly. What three steps should you take to diagnose the problem? Choose 3 answers
- A. Delete the instance, attach the disk to a new VM, and investigate.
- B. Connect the machine to another network with very simple firewall rules and investigate.
- C. Check inbound firewall rules for the network the machine is connected to.
- D. Delete the virtual machine (VM) and disks and create a new one.
- E. Print the Serial Console output for the instance for troubleshooting, activate the interactive console, and investigate.
- F. Take a snapshot of the disk and connect to a new machine to investigate.
Answer: C,E,F
Explanation:
https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-ssh D: Handling "Unable to connect on port 22" error message Possible causes include:
There is no firewall rule allowing SSH access on the port. SSH access on port 22 is enabled on all Compute Engine instances by default. If you have disabled access, SSH from the Browser will not work. If you run sshd on a port other than 22, you need to enable the access to that port with a custom firewall rule.
The firewall rule allowing SSH access is enabled, but is not configured to allow connections from GCP Console services. Source IP addresses for browser-based SSH sessions are dynamically allocated by GCP Console and can vary from session to session.
References:
https://cloud.google.com/compute/docs/ssh-in-browser
https://cloud.google.com/compute/docs/ssh-in-browser
Topic 4, Dress4Win
Solution Concept
For the first phase of their migration to the cloud, Dress4win is considering moving their development and test environments. They are also considering building a disaster recovery site, because their current infrastructure is at a single location. They are not sure which components of their architecture they can migrate as is and which components they need to change before migrating them.
Existing Technical Environment
The Dress4win application is served out of a single data center location.
Databases:
MySQL - user data, inventory, static data
Redis - metadata, social graph, caching
Application servers:
Tomcat - Java micro-services
Nginx - static content
Apache Beam - Batch processing
Storage appliances:
iSCSI for VM hosts
Fiber channel SAN - MySQL databases
NAS - image storage, logs, backups
Apache Hadoop/Spark servers:
Data analysis
Real-time trending calculations
MQ servers:
Messaging
Social notifications
Events
Miscellaneous servers:
Jenkins, monitoring, bastion hosts, security scanners
Business Requirements
Build a reliable and reproducible environment with scaled parity of production.
Improve security by defining and adhering to a set of security and Identity and Access Management (IAM) best practices for cloud.
Improve business agility and speed of innovation through rapid provisioning of new resources.
Analyze and optimize architecture for performance in the cloud.
Migrate fully to the cloud if all other requirements are met.
Technical Requirements
Evaluate and choose an automation framework for provisioning resources in cloud.
Support failover of the production environment to cloud during an emergency.
Identify production services that can migrate to cloud to save capacity.
Use managed services whenever possible.
Encrypt data on the wire and at rest.
Support multiple VPN connections between the production data center and cloud environment.
CEO Statement
Our investors are concerned about our ability to scale and contain costs with our current infrastructure. They are also concerned that a new competitor could use a public cloud platform to offset their up-front investment and freeing them to focus on developing better features.
CTO Statement
We have invested heavily in the current infrastructure, but much of the equipment is approaching the end of its useful life. We are consistently waiting weeks for new gear to be racked before we can start new projects. Our traffic patterns are highest in the mornings and weekend evenings; during other times, 80% of our capacity is sitting idle.
CFO Statement
Our capital expenditure is now exceeding our quarterly projections. Migrating to the cloud will likely cause an initial increase in spending, but we expect to fully transition before our next hardware refresh cycle. Our total cost of ownership (TCO) analysis over the next 5 years puts a cloud strategy between 30 to 50% lower than our current model.
NEW QUESTION # 72
Mountkirk Games wants to set up a real-time analytics platform for their new game. The new platform must
meet their technical requirements.
Which combination of Google technologies will meet all of their requirements?
- A. Kubernetes Engine, Cloud Pub/Sub, and Cloud SQL
- B. Cloud Dataflow, Cloud Storage, Cloud Pub/Sub, and BigQuery
- C. Cloud SQL, Cloud Storage, Cloud Pub/Sub, and Cloud Dataflow
- D. Cloud Dataproc, Cloud Pub/Sub, Cloud SQL, and Cloud Dataflow
- E. Cloud Pub/Sub, Compute Engine, Cloud Storage, and Cloud Dataproc
Answer: B
Explanation:
Explanation/Reference:
Explanation:
Ingest millions of streaming events per second from anywhere in the world with Cloud Pub/Sub, powered
by Google's unique, high-speed private network. Process the streams with Cloud Dataflow to ensure
reliable, exactly-once, low-latency data transformation. Stream the transformed data into BigQuery, the
cloud-native data warehousing service, for immediate analysis via SQL or popular visualization tools.
From scenario: They plan to deploy the game's backend on Google Compute Engine so they can capture
streaming metrics, run intensive analytics.
Requirements for Game Analytics Platform
1. Dynamically scale up or down based on game activity
2. Process incoming data on the fly directly from the game servers
3. Process data that arrives late because of slow mobile networks
4. Allow SQL queries to access at least 10 TB of historical data
5. Process files that are regularly uploaded by users' mobile devices
6. Use only fully managed services
References: https://cloud.google.com/solutions/big-data/stream-analytics/
Testlet 1
Company Overview
Mountkirk Games makes online, session-based, multiplayer games for mobile platforms. They build all of
their games using some server-side integration. Historically, they have used cloud providers to lease
physical servers.
Due to the unexpected popularity of some of their games, they have had problems scaling their global
audience, application servers, MySQL databases, and analytics tools.
Their current model is to write game statistics to files and send them through an ETL tool that loads them
into a centralized MySQL database for reporting.
Solution Concept
Mountkirk Games is building a new game, which they expect to be very popular. They plan to deploy the
game's backend on Google Compute Engine so they can capture streaming metrics, run intensive
analytics, and take advantage of its autoscaling server environment and integrate with a managed NoSQL
database.
Business Requirements
Increase to a global footprint.
Improve uptime - downtime is loss of players.
Increase efficiency of the cloud resources we use.
Reduce latency to all customers.
Technical Requirements
Requirements for Game Backend Platform
Dynamically scale up or down based on game activity.
Connect to a transactional database service to manage user profiles and game state.
Store game activity in a timeseries database service for future analysis.
As the system scales, ensure that data is not lost due to processing backlogs.
Run hardened Linux distro.
Requirements for Game Analytics Platform
Dynamically scale up or down based on game activity
Process incoming data on the fly directly from the game servers
Process data that arrives late because of slow mobile networks
Allow queries to access at least 10 TB of historical data
Process files that are regularly uploaded by users' mobile devices
Executive Statement
Our last successful game did not scale well with our previous cloud provider, resulting in lower user
adoption and affecting the game's reputation. Our investors want more key performance indicators (KPIs)
to evaluate the speed and stability of the game, as well as other metrics that provide deeper insight into
usage patterns so we can adapt the game to target users. Additionally, our current technology stack
cannot provide the scale we need, so we want to replace MySQL and move to an environment that
provides autoscaling, low latency load balancing, and frees us up from managing physical servers.
NEW QUESTION # 73
......
Ultimate Guide to the Professional-Cloud-Architect - Latest Edition Available Now: https://www.testkingpdf.com/Professional-Cloud-Architect-testking-pdf-torrent.html
2025 Updated Verified Pass Professional-Cloud-Architect Exam - Real Questions and Answers: https://drive.google.com/open?id=1cYuW8Ihv_xWFEUmEYe2CsPkHPNoWpJuP

