Free Google Cloud Architect Professional Exam Braindumps (page: 21)

Page 20 of 68
View Related Case Study

For this question, refer to the EHR Healthcare case study. You are a developer on the EHR customer portal team. Your team recently migrated the customer portal application to Google Cloud. The load has increased on the application servers, and now the application is logging many timeout errors. You recently incorporated Pub/Sub into the application architecture, and the application is not logging any Pub/Sub publishing errors. You want to improve publishing latency.
What should you do?

  1. Increase the Pub/Sub Total Timeout retry value.
  2. Move from a Pub/Sub subscriber pull model to a push model.
  3. Turn off Pub/Sub message batching.
  4. Create a backup Pub/Sub message queue.

Answer(s): C

Explanation:

https://cloud.google.com/pubsub/docs/publisher?hl=en#batching



View Related Case Study

For this question, refer to the EHR Healthcare case study. In the past, configuration errors put public

IP addresses on backend servers that should not have been accessible from the Internet. You need to ensure that no one can put external IP addresses on backend Compute Engine instances and that external IP addresses can only be configured on frontend Compute Engine instances.
What should you do?

  1. Create an Organizational Policy with a constraint to allow external IP addresses only on the frontend Compute Engine instances.
  2. Revoke the compute.networkAdmin role from all users in the project with front end instances.
  3. Create an Identity and Access Management (IAM) policy that maps the IT staff to the compute.networkAdmin role for the organization.
  4. Create a custom Identity and Access Management (IAM) role named GCE_FRONTEND with the compute.addresses.create permission.

Answer(s): A

Explanation:

https://cloud.google.com/compute/docs/ip-addresses/reserve-static-external-ip- address#disableexternalip



View Related Case Study

For this question, refer to the EHR Healthcare case study. You are responsible for designing the Google Cloud network architecture for Google Kubernetes Engine. You want to follow Google best practices. Considering the EHR Healthcare business and technical requirements, what should you do to reduce the attack surface?

  1. Use a private cluster with a private endpoint with master authorized networks configured.
  2. Use a public cluster with firewall rules and Virtual Private Cloud (VPC) routes.
  3. Use a private cluster with a public endpoint with master authorized networks configured.
  4. Use a public cluster with master authorized networks enabled and firewall rules.

Answer(s): A

Explanation:

https://cloud.google.com/kubernetes-engine/docs/concepts/private-cluster-concept#overview



View Related Case Study

For this question, refer to the EHR Healthcare case study. EHR has single Dedicated Interconnect connection between their primary data center and Googles network. This connection satisfies EHR's network and security policies:

· On-premises servers without public IP addresses need to connect to cloud resources without public IP addresses

· Traffic flows from production network mgmt. servers to Compute Engine virtual machines should never traverse the public internet.
You need to upgrade the EHR connection to comply with their requirements. The new connection design must support business critical needs and meet the same network and security policy requirements.
What should you do?

  1. Add a new Dedicated Interconnect connection
  2. Upgrade the bandwidth on the Dedicated Interconnect connection to 100 G
  3. Add three new Cloud VPN connections
  4. Add a new Carrier Peering connection

Answer(s): A

Explanation:

The case does not call out the throughput being an issue. However, to achieve 99.99%, you need to have 4 connections as per Google recommendations. However, in the options only A has the option to add an additional Interconnect connection. https://cloud.google.com/network- connectivity/docs/interconnect/concepts/dedicated-overview#availability






Post your Comments and Discuss Google Google Cloud Architect Professional exam with other Community members:

Google Cloud Architect Professional Discussions & Posts