You are migrating workloads to the cloud. The goal of the migration is to serve customers worldwide
as quickly as possible According to local regulations, certain data is required to be stored in a specific
geographic area, and it can be served worldwide. You need to design the architecture and
deployment for your workloads.
What should you do?
- A . Select a public cloud provider that is only active in the required geographic area
- B . Select a private cloud provider that globally replicates data storage for fast data access
- C . Select a public cloud provider that guarantees data location in the required geographic area
- D . Select a private cloud provider that is only active in the required geographic area
C
Explanation:
The goal of the migration is to serve customers worldwide as quickly as possible According to local regulations, certain data is required to be stored in a specific geographic area, and it can be served worldwide" This characteristic are inherent to the public cloud provider
Your organization needs a large amount of extra computing power within the next two weeks.
After those two weeks, the need for the additional resources will end.
Which is the most cost-effective approach?
- A . Use a committed use discount to reserve a very powerful virtual machine
- B . Purchase one very powerful physical computer
- C . Start a very powerful virtual machine without using a committed use discount
- D . Purchase multiple physical computers and scale workload across them
C
Explanation:
When you purchase a committed use contract, you purchase Compute Engine resources―such as
vCPUs, memory, GPUs, local SSDs, and sole-tenant nodes―at a discounted price in return for committing to paying for those resources for 1 year or 3 years
Your organization needs to plan its cloud infrastructure expenditures.
Which should your organization do?
- A . Review cloud resource costs frequently, because costs change often based on use
- B . Review cloud resource costs annually as part of planning your organization’s overall budget
- C . If your organization uses only cloud resources, infrastructure costs are no longer part of your overall budget
- D . Involve fewer people in cloud resource planning than your organization did for on-premises resource planning
A
Explanation:
Review cloud resource costs frequently, because costs change often based on use because One need to know current usage/ trend for planning; While public cloud eliminates capex, and gets into pay as you go model, the usage pattern determines the cloud cost and hence needs to be measured frequently to enable better forecast
The operating systems of some of your organization’s virtual machines may have a security vulnerability.
How can your organization most effectively identify all virtual machines that do not have the latest security update?
- A . View the Security Command Center to identify virtual machines running vulnerable disk images
- B . View the Compliance Reports Manager to identify and download a recent PCI audit
- C . View the Security Command Center to identify virtual machines started more than 2 weeks ago
- D . View the Compliance Reports Manager to identify and download a recent SOC 1 audit
A
Explanation:
Security Health Analytics and Web Security Scanner detectors generate vulnerabilities findings that are available in Security Command Center. Your ability to view and edit findings is determined by the Identity and Access Management (IAM) roles and permissions you are assigned. For more information about IAM roles in Security Command Center.
Reference link: https://cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings
You are currently managing workloads running on Windows Server for which your company owns the licenses. Your workloads are only needed during working hours, which allows you to shut down the instances during the weekend. Your Windows Server licenses are up for renewal in a month, and you want to optimize your license cost.
What should you do?
- A . Renew your licenses for an additional period of 3 years. Renew your licenses for an additional period of 3 years. Negotiate a cost reduction with your current hosting provider wherein infrastructure cost is reduced when workloads are not in use
- B . Renew your licenses for an additional period of 2 years. Negotiate a cost reduction by committing to an automatic renewal of the licenses at the end of the 2 year period
- C . Migrate the workloads to Compute Engine with a bring-your-own-license (BYOL) model
- D . Migrate the workloads to Compute Engine with a pay-as-you-go (PAYG) model
D
Explanation:
The PAYG model is more convenient because you only pay for usage. And the case describes that the workloads are only run on certain days.
Your organization runs a distributed application in the Compute Engine virtual machines. Your organization needs redundancy, but it also needs extremely fast communication (less than 10 milliseconds) between the parts of the application in different virtual machines.
Where should your organization locate this virtual machines?
- A . In a single zone within a single region
- B . In different zones within a single region
- C . In multiple regions, using one zone per region
- D . In multiple regions, using multiple zones per region
B
Explanation:
Multi zone is also redundant within the region and it provides the lowest latency.
Reference link: https://cloud.google.com/solutions/best-practices-compute-engine-region-selection
You decide to migrate your on-premises environment to the cloud. You need to determine which resource components still need to be assigned ownership.
Which two functions are owned by a public cloud provider? (Choose two.)
- A . Hardware maintenance
- B . Infrastructure architecture
- C . Infrastructure deployment automation
- D . Hardware capacity management
- E . Fixing application security issues
A, D
Explanation:
In a shared responsible model, hardware maintence and capacity management cloud provider is the responsible part.
You are a program manager within a Software as a Service (SaaS) company that offers rendering software for animation studios. Your team needs the ability to allow scenes to be scheduled at will and to be interrupted at any time to restart later. Any individual scene rendering takes less than 12 hours to complete, and there is no service-level agreement (SLA) for the completion time for all scenes. Results will be stored in a global Cloud Storage bucket. The compute resources are not bound to any single geographical location. This software needs to run on Google Cloud in a cost-optimized way.
What should you do?
- A . Deploy the application on Compute Engine using preemptible instances
- B . Develop the application so it can run in an unmanaged instance group
- C . Create a reservation for the minimum number of Compute Engine instances you will use
- D . Start more instances with fewer virtual centralized processing units (vCPUs) instead of fewer instances with more vCPUs
A
Explanation:
https://cloud.google.com/compute/docs/instances/preemptible
Your manager wants to restrict communication of all virtual machines with internet access; with resources in another network; or with a resource outside Compute Engine. It is expected that different teams will create new folders and projects in the near future.
How would you restrict all virtual machines from having an external IP address?
- A . Define an organization policy at the root organization node to restrict virtual machine instances from having an external IP address
- B . Define an organization policy on all existing folders to define a constraint to restrict virtual machine instances from having an external IP address
- C . Define an organization policy on all existing projects to restrict virtual machine instances from having an external IP address
- D . Communicate with the different teams and agree that each time a virtual machine is created, it must be configured without an external IP address
A
Explanation:
Reference: https://cloud.google.com/resource-manager/docs/organization-policy/overview
Your multinational organization has servers running mission-critical workloads on its premises around the world. You want to be able to manage these workloads consistently and centrally, and you want to stop managing infrastructure.
What should your organization do?
- A . Migrate the workloads to a public cloud
- B . Migrate the workloads to a central office building
- C . Migrate the workloads to multiple local co-location facilities
- D . Migrate the workloads to multiple local private clouds
A
Explanation:
Only public cloud offers to centrally manage the infra. for Pvt cloud it may not be possible to get same Pvt Cloud provider across the globe.
Your organization stores highly sensitive data on-premises that cannot be sent over the public internet. The data must be processed both on-premises and in the cloud.
What should your organization do?
- A . Configure Identity-Aware Proxy (IAP) in your Google Cloud VPC network
- B . Create a Cloud VPN tunnel between Google Cloud and your data center
- C . Order a Partner Interconnect connection with your network provider
- D . Enable Private Google Access in your Google Cloud VPC network
C
Explanation:
After the service provider provisions your connection, you can start passing traffic between your networks by using the service provider’s network.
Reference: https://cloud.google.com/network-connectivity/docs/interconnect/concepts/partner-overview
Your company’s development team is building an application that will be deployed on Cloud Run. You are designing a CI/CD pipeline so that any new version of the application can be deployed in the fewest number of steps possible using the CI/CD pipeline you are designing. You need to select a storage location for the images of the application after the CI part of your pipeline has built them.
What should you do?
- A . Create a Compute Engine image containing the application
- B . Store the images in Container Registry
- C . Store the images in Cloud Storage
- D . Create a Compute Engine disk containing the application
B
Explanation:
Reference: https://cloud.google.com/container-registry/docs/pushing-and-pulling
Each of the three cloud service models – infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS) – offers benefits between flexibility and levels of management by the cloud provider and the customer.
Why would SaaS be the right choice of service model?
- A . You want a balance between flexibility for the customer and the level of management by the cloud provider
- B . You want to minimize the level of management by the customer
- C . You want to maximize flexibility for the customer.
- D . You want to be able to shift your emphasis between flexibility and management by the cloud provider as business needs change
B
Explanation:
Benefits of SaaS
The main benefit of SaaS is that it offloads all infrastructure and application management to the SaaS vendor.
Reference: https://www.ibm.com/cloud/learn/iaas-paas-saas
As your organization increases its release velocity, the VM-based application upgrades take a long time to perform rolling updates due to OS boot times. You need to make the application deployments faster.
What should your organization do?
- A . Migrate your VMs to the cloud, and add more resources to them
- B . Convert your applications into containers
- C . Increase the resources of your VMs
- D . Automate your upgrade rollouts
Your organization uses Active Directory to authenticate users. Users’ Google account access must be removed when their Active Directory account is terminated.
How should your organization meet this requirement?
- A . Configure two-factor authentication in the Google domain
- B . Remove the Google account from all IAM policies
- C . Configure BeyondCorp and Identity-Aware Proxy in the Google domain
- D . Configure single sign-on in the Google domain
D
Explanation:
Configure single sign-on in the Google domain
Single sign-on: Whenever a user needs to authenticate, Google Cloud delegates the authentication to Active Directory by using the Security Assertion Markup Language (SAML) protocol. This delegation ensures that only Active Directory manages user credentials and that any applicable policies or multi-factor authentication (MFA) mechanisms are being enforced. For a sign-on to succeed.
https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction
Reference Link- https://cloud.google.com/architecture/identity/single-sign-on
Which Google Cloud product gives you a consistent platform for multi-cloud application deployments and extends other Google Cloud services to your environment?
- A . Google Kubernetes Engine
- B . Virtual Public Cloud
- C . Compute Engine
- D . Anthos
D
Explanation:
https://cloud.google.com/anthos
Your organization is developing an application that will manage payments and online bank accounts located around the world. The most critical requirement for your database is that each transaction is handled consistently. Your organization anticipates almost unlimited growth in the amount of data stored.
Which Google Cloud product should your organization choose?
- A . Cloud SQL
- B . Cloud Storage
- C . Firestore
- D . Cloud Spanner
D
Explanation:
Features of Cloud Spanner
Reference: https://k21academy.com/google-cloud/cloud-sql-vs-cloud-spanner/
Your organization wants an economical solution to store data such as files, graphical images, and videos and to access and share them securely.
Which Google Cloud product or service should your organization use?
- A . Cloud Storage
- B . Cloud SQL
- C . Cloud Spanner
- D . BigQuery
A
Explanation:
– Google Storage is GCP’s version of AWS Simple Storage Service (S3) and an S3 bucket would be equivalent to a Google Storage bucket across the two clouds
Your organization wants to predict the behavior of visitors to its public website. To do that, you have decided to build a machine learning model. Your team has database-related skills but only basic machine learning skills, and would like to use those database skills.
Which Google Cloud product or feature should your organization choose?
- A . BigQuery ML
- B . LookML
- C . TensorFlow
- D . Cloud SQL
A
Explanation:
Reference: https://cloud.google.com/architecture/predicting-customer-propensity-to-buy
Your organization is developing an application that will capture a large amount of data from millions of different sensor devices spread all around the world. Your organization needs a database that is suitable for worldwide, high-speed data storage of a large amount of unstructured data.
Which Google Cloud product should your organization choose?
- A . Firestore
- B . Cloud Data Fusion
- C . Cloud SQL
- D . Cloud Bigtable
D
Explanation:
Reference: https://cloud.google.com/bigtable
Cloud Bigtable is a sparsely populated table that can scale to billions of rows and thousands of columns, enabling you to store terabytes or even petabytes of data. A single value in each row is indexed; this value is known as the row key. Bigtable is ideal for storing very large amounts of single-keyed data with very low latency. It supports high read and write throughput at low latency, and it is an ideal data source for MapReduce operations.
Bigtable is exposed to applications through multiple client libraries, including a supported extension to the Apache HBase library for Java. As a result, it integrates with the existing Apache ecosystem of open-source Big Data software.
Bigtable’s powerful back-end servers offer several key advantages over a self-managed HBase installation:
Incredible scalability. Bigtable scales in direct proportion to the number of machines in your cluster. A self-managed HBase installation has a design bottleneck that limits the performance after a certain threshold is reached. Bigtable does not have this bottleneck, so you can scale your cluster up to handle more reads and writes.
Simple administration. Bigtable handles upgrades and restarts transparently, and it automatically maintains high data durability. To replicate your data, simply add a second cluster to your instance, and replication starts automatically. No more managing replicas or regions; just design your table schemas, and Bigtable will handle the rest for you.
Cluster resizing without downtime. You can increase the size of a Bigtable cluster for a few hours to
handle a large load, then reduce the cluster’s size again―all without any downtime. After you
change a cluster’s size, it typically takes just a few minutes under load for Bigtable to balance
performance across all of the nodes in your cluster.
Your organization needs to build streaming data pipelines. You don’t want to manage the individual servers that do the data processing in the pipelines. Instead, you want a managed service that will automatically scale with the amount of data to be processed.
Which Google Cloud product or feature should your organization choose?
- A . Pub/Sub
- B . Dataflow
- C . Data Catalog
- D . Dataprep by Trifacta
B
Explanation:
Reference: https://cloud.google.com/dataflow/docs/guides/deploying-a-pipeline
Reference link: https://cloud.google.com/dataflow/docs/guides/deploying-a-pipeline
Your organization is building an application running in Google Cloud. Currently, software builds, tests, and regular deployments are done manually, but you want to reduce work for the team. Your organization wants to use Google Cloud managed solutions to automate your build, testing, and deployment process.
Which Google Cloud product or feature should your organization use?
- A . Cloud Scheduler
- B . Cloud Code
- C . Cloud Build
- D . Cloud Deployment Manager
C
Explanation:
Deploy your application to App Engine using the gcloud app deploy command. This command automatically builds a container image by using the Cloud Build service and then deploys that image to the App Engine flexible environment.
Reference: https://cloud.google.com/appengine/docs/flexible/nodejs/testing-and-deploying-your-app
Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects?
- A . Cloud Logging
- B . Identity and Access Management
- C . Google Cloud Armor
- D . Security Command Center
D
Explanation:
Security Command Center is a centralized security and risk management platform for your Google Cloud resources.
It is a single tool that offers a variety of security features including:
Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects?
- A . Cloud Logging
- B . Identity and Access Management
- C . Google Cloud Armor
- D . Security Command Center
D
Explanation:
Security Command Center is a centralized security and risk management platform for your Google Cloud resources.
It is a single tool that offers a variety of security features including:
Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects?
- A . Cloud Logging
- B . Identity and Access Management
- C . Google Cloud Armor
- D . Security Command Center
D
Explanation:
Security Command Center is a centralized security and risk management platform for your Google Cloud resources.
It is a single tool that offers a variety of security features including:
Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects?
- A . Cloud Logging
- B . Identity and Access Management
- C . Google Cloud Armor
- D . Security Command Center
D
Explanation:
Security Command Center is a centralized security and risk management platform for your Google Cloud resources.
It is a single tool that offers a variety of security features including:
Which Google Cloud product can report on and maintain compliance on your entire Google Cloud organization to cover multiple projects?
- A . Cloud Logging
- B . Identity and Access Management
- C . Google Cloud Armor
- D . Security Command Center
D
Explanation:
Security Command Center is a centralized security and risk management platform for your Google Cloud resources.
It is a single tool that offers a variety of security features including:
Your organization needs to establish private network connectivity between its on-premises network and its workloads running in Google Cloud. You need to be able to set up the connection as soon as possible.
Which Google Cloud product or feature should you use?
- A . Cloud Interconnect
- B . Direct Peering
- C . Cloud VPN
- D . Cloud CDN
A
Explanation:
Private Google Access for on-premises hosts provides a way for on-premises systems to connect to Google APIs and services by routing traffic through a Cloud VPN tunnel.
Reference: https://cloud.google.com/vpc/docs/configure-private-google-access-hybrid
Your organization is developing a mobile app and wants to select a fully featured cloud-based compute platform for it.
Which Google Cloud product or feature should your organization use?
- A . Google Kubernetes Engine
- B . Firebase
- C . Cloud Functions
- D . App Engine
B
Explanation:
Reference: https://cloud.google.com/appengine
Firebase is Google’s mobile development platform that empowers you to quickly build and grow your app
Your team has developed a machine learning model for your customer. The test results indicate very strong predictive capability. The model is then deployed in production. Evaluation of the predictions in production show that they are off by a pronounced margin.
What is the issue and how can you solve for it?
- A . The model is under fitted. Train with less data.
- B . The model is over fitted. Add more features to the model to fix it.
- C . The model is fine since the test results are good. Fix the production of incoming data.
- D . The model is overfitted. Train with more data.
D
Explanation:
If our ML model does well on the training set than on the production set, then we’re likely over fitting. Training with more data would be one solution.
Your large and frequently changing organization’s user information is stored in an on-premises LDAP database. The database includes user passwords and group and organization membership.
How should your organization provision Google accounts and groups to access Google Cloud resources?
- A . Replicate the LDAP infrastructure on Compute Engine
- B . Use the Firebase Authentication REST API to create users
- C . Use Google Cloud Directory Sync to create users
- D . Use the Identity Platform REST API to create users
C
Explanation:
You can run a single instance of Google Cloud Directory Sync to synchronize user accounts and groups to Google Cloud.
Reference: https://cloud.google.com/architecture/identity/federating-gcp-with-active-directory-introduction
https://support.google.com/a/answer/106368?hl=en
Your organization recently migrated its compute workloads to Google Cloud. You want these
workloads in Google Cloud to privately and securely access your large volume of on-premises data,
and you also want to minimize latency.
What should your organization do?
- A . Use Storage Transfer Service to securely make your data available to Google Cloud
- B . Create a VPC between your on-premises data center and your Google resources
- C . Peer your on-premises data center to Google’s Edge Network
- D . Use Transfer Appliance to securely make your data available to Google Cloud
C
Explanation:
https://cloud.google.com/network-connectivity/docs/direct-peering
Your organization consists of many teams. Each team has many Google Cloud projects. Your organization wants to simplify the management of identity and access policies for these projects.
How can you group these projects to meet this goal?
- A . Group each team’s projects into a separate domain
- B . Assign labels based on the virtual machines that are part of each team’s projects
- C . Use folders to group each team’s projects
- D . Group each team’s projects into a separate organization node
C
Explanation:
https://cloud.google.com/resource-manager/docs/creating-managing-folders
Your organization needs to restrict access to a Cloud Storage bucket. Only employees who are based in Canada should be allowed to view the contents.
What is the most effective and efficient way to satisfy this requirement?
- A . Deploy the Cloud Storage bucket to a Google Cloud region in Canada
- B . Configure Google Cloud Armor to allow access to the bucket only from IP addresses based in Canada
- C . Give each employee who is based in Canada access to the bucket
- D . Create a group consisting of all Canada-based employees, and give the group access to the bucket
D
Explanation:
Reference: https://cloud.google.com/storage/docs/access-control
Because you can use your own private VPN to access the Canada-only bucket from anywhere in the world.
Your organization is moving an application to Google Cloud. As part of that effort, it needs to migrate the application’s working database from another cloud provider to Cloud SQL. The database runs on the MySQL engine. The migration must cause minimal disruption to users. Data must be secured while in transit.
Which should your organization use?
- A . BigQuery Data Transfer Service
- B . MySQL batch insert
- C . Database Migration Service
- D . Cloud Composer
C
Explanation:
Reference: https://aws.amazon.com/dms/
Your organization is developing and deploying an application on Google Cloud. Tracking your Google Cloud spending needs to stay as simple as possible.
What should you do to ensure that workloads in the development environment are fully isolated from production workloads?
- A . Apply a unique tag to development resources
- B . Associate the development resources with their own network
- C . Associate the development resources with their own billing account
- D . Put the development resources in their own project
D
Explanation:
Reference: https://www.deps.co/blog/google-cloud-platform-good-bad-ugly/
Project resources are components that are necessary for successful project implementation. They include people, equipment, money, time, knowledge C basically, anything that you may require from the project planning to the project delivery phases.
Your company is running the majority of its workloads in a co-located data center. The workloads are running on virtual machines (VMs) on top of a hypervisor and use either Linux or Windows server editions. As part of your company’s transformation strategy, you need to modernize workloads as much as possible by adopting cloud-native technologies. You need to migrate the workloads into Google Cloud.
What should you do?
- A . Export the VMs into VMDK format, and import them into Compute Engine
- B . Export the VMs into VMDK format, and import them into Google Cloud VMware Engine
- C . Migrate the workloads using Migrate for Compute Engine
- D . Migrate the workloads using Migrate for Anthos
D
Explanation:
Anthos: Anthos lets you build, deploy, and manage applications anywhere in a secure, consistent manner. You can modernize existing applications running on virtual machines while deploying cloud-native apps on containers in an increasingly hybrid and multi-cloud world.
Your organization is running all its workloads in a private cloud on top of a hypervisor. Your organization has decided it wants to move to Google Cloud as quickly as possible. Your organization wants minimal changes to the current environment, while using the maximim amount of managed services Google offers.
What should your organization do?
- A . Migrate the workloads to Google Cloud VMware Engine
- B . Migrate the workloads to Compute Engine
- C . Migrate the workloads to Bare Metal Solution
- D . Migrate the workloads to Google Kubernetes Engine
B
Explanation:
Migrate for Compute Engine enables you to lift and shift workloads at scale to Google Cloud Compute Engine with minimal changes and risk.
Reference: https://dataintegration.info/simplify-vm-migrations-with-migrate-for-compute-engine-as-a-service
Your organization is releasing its first publicly available application in Google Cloud. The application is critical to your business and customers and requires a 2-hour SLA.
How should your organization set up support to minimize costs?
- A . Enroll in Premium Support
- B . Enroll in Enhanced Support
- C . Enroll in Standard Support
- D . Enroll in Basic Support
B
Explanation:
Reference: https://www.secureauth.com/enhanced-support-offering/
SecureAuth is dedicated to providing the industry-leading enhanced support ensuring the long term success of your SecureAuth SaaS IAM deployment
Your organization offers public mobile apps and websites. You want to migrate to a Google Cloud-based solution for checking and maintaining your users’ usernames and passwords and controlling their access to different resources based on their identity.
Which should your organization choose?
- A . VPN tunnels
- B . Identity Platform
- C . Compute Engine firewall rules
- D . Private Google Access
B
Explanation:
An identity platform is a modern solution for managing the identities of users and devices in a centralized fashion.
Reference: https://www.okta.com/blog/2021/07/what-is-an-identity-platform/#:~:text=An%20identity%20platform%20is%20a,%2C%20integrations%2C%20and%20platfo rm%20services
Which Google Cloud service or feature lets you build machine learning models using Standard SQL and data in a data warehouse?
- A . BigQuery ML
- B . TensorFlow
- C . AutoML Tables
- D . Cloud Bigtable ML
A
Explanation:
BigQuery ML lets you create and execute machine learning models in BigQuery using standard SQL queries.
Reference: https://cloud.google.com/bigquery-ml/docs/introduction#:~:text=BigQuery%20ML%20lets%20you%20create,the%20need%20to%20move%20data
https://cloud.google.com/bigquery-ml/docs/introduction
Your organization runs an application on virtual machines in Google Cloud. This application processes incoming images. This activity takes hours to create a result for each image. The workload for this application normally stays at a certain baseline level, but at regular intervals it spikes to a much greater workload. Your organization needs to control the cost to run this application.
What should your organization do?
- A . Purchase committed use discounts for the baseline load
- B . Purchase committed use discounts for the expected spike load
- C . Leverage sustained use discounts for your virtual machines
- D . Run the workload on preemptible VM instances
C
Explanation:
The idea of the Sustained Use discount is that the longer you run a VM instance in any given month, the bigger discount you will get from the list price.
Reference: https://www.parkmycloud.com/blog/google-sustained-use-discounts/
Your organization is developing a plan for migrating to Google Cloud.
What is a best practice when initially configuring your Google Cloud environment?
- A . Create a project via Google Cloud Console per department in your company
- B . Define your resource hierarchy with an organization node on top
- C . Create projects based on tem members’ requests
- D . Make every member of your company the project owner
B
Explanation:
The Organization resource is the root node of the Google Cloud resource hierarchy and all resources that belong to an organization are grouped under the organization node. This provides central visibility and control over every resource that belongs to an organization.
Reference link: https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy
Your organization runs many workloads in different Google Cloud projects, each linked to the same billing account. Each project’s workload costs can vary from month to month, but the overall combined cost of all projects is relatively stable. Your organization needs to optimize its cost.
What should your organization do?
- A . Purchase a commitment per project for each project’s usual minimum
- B . Create a billing account per project, and link each project to a different billing account
- C . Turn on committed use discount sharing, and create a commitment for the combined usage
- D . Move all workloads from all different projects into one single consolidated project
C
Explanation:
Turn on committed use discount sharing, and create a commitment for the combined usage
Sharing your committed use discounts across all your projects reduces the overhead of managing discounts on a per-project basis, and maximizes your savings by pooling all your discounts across your projects’ resource usage. If you have multiple projects that share the same Cloud Billing account, you can enable committed use discount sharing so all of your projects within that Cloud Billing account share all of your committed use discount contracts. Your sustained use discounts are also pooled at the same time. That is, sustained use discounts are calculated using the total resources across these projects, rather than just the resources within a single project.
Reference link: https://cloud.google.com/compute/docs/instances/signing-up-committed-use-discounts#sharing_committed_use_discounts_across_projects
How should a multinational organization that is migrating to Google Cloud consider security and privacy regulations to ensure that it is in compliance with global standards?
- A . Comply with data security and privacy regulations in each geographical region
- B . Comply with regional standards for data security and privacy, because they supersede all international regulations
- C . Comply with international standards for data security and privacy, because they supersede all regional regulations
- D . Comply with regional data security regulations, because they’re more complex than privacy standards
A
Explanation:
Comply with data security and privacy regulations in each geographical region For a multi-national corporation, they need to abide not just by international laws, but also regional laws where they do business.
Your company has recently acquired three growing startups in three different countries. You want to reduce overhead in infrastructure management and keep your costs low without sacrificing security and quality of service to your customers.
How should you meet these requirements?
- A . Host all your subsidiaries’ services on-premises together with your existing services.
- B . Host all your subsidiaries’ services together with your existing services on the public cloud.
- C . Build a homogenous infrastructure at each subsidiary, and invest in training their engineers.
- D . Build a homogenous infrastructure at each subsidiary, and invest in hiring more engineers.
B
Explanation:
Host all your subsidiaries’ services together with your existing services on the public cloud.
What is the difference between Standard and Coldline storage?
- A . Coldline storage is for data for which a slow transfer rate is acceptable.
- B . Standard and Coldline storage have different durability guarantees.
- C . Standard and Coldline storage use different APIs.
- D . Coldline storage is for infrequently accessed data.
D
Explanation:
Reference: https://www.msp360.com/resources/blog/google-cloud-nearline-storage-vs-coldline-vs-standard/
Google Cloud Coldline is a new cold-tier storage for archival data with access frequency of less than once per year. Unlike other cold storage options, Nearline has no delays prior to data access, so now it is the leading solution among competitors.
What would provide near-unlimited availability of computing resources without requiring your organization to procure and provision new equipment?
- A . Public cloud
- B . Containers
- C . Private cloud
- D . Microservices
A
Explanation:
Reference: https://cloud.google.com/docs/overview
You are a program manager for a team of developers who are building an event-driven application to allow users to follow one another’s activities in the app. Each time a user adds himself as a follower of another user, a write occurs in the real-time database.
The developers will develop a lightweight piece of code that can respond to database writes and generate a notification to let the appropriate users know that they have gained new followers. The code should integrate with other cloud services such as Pub/Sub, Firebase, and Cloud APIs to streamline the orchestration process. The application requires a platform that automatically manages underlying infrastructure and scales to zero when there is no activity.
Which primary compute resource should your developers select, given these requirements?
- A . Google Kubernetes Engine
- B . Cloud Functions
- C . App Engine flexible environment
- D . Compute Engine
B
Explanation:
Reference: https://firebase.google.com/docs/functions/use-cases
Your company has been using a shared facility for data storage and will be migrating to Google Cloud.
One of the internal applications uses Linux custom images that need to be migrated.
Which Google Cloud product should you use to maintain the custom images?
- A . App Engine flexible environment
- B . Compute Engine
- C . App Engine standard environment
- D . Google Kubernetes Engine
B
Explanation:
Reference: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images
A custom image is a boot disk image that you own and control access to.
Use custom images for the following tasks:
Import a virtual disk to Compute Engine from your on-premises environment or from VMs that are running on your local workstation or on another cloud platform. You can manually import boot disk images to Compute Engine, but one disk at a time.
https://cloud.google.com/compute/docs/images
Your organization wants to migrate its data management solutions to Google Cloud because it needs to dynamically scale up or down and to run transactional SQL queries against historical data at scale.
Which Google Cloud product or service should your organization use?
- A . BigQuery
- B . Cloud Bigtable
- C . Pub/Sub
- D . Cloud Spanner
D
Explanation:
Reference: https://cloud.google.com/terms/services
Cloud Spanner is a fully-managed, mission-critical relational database service. It is designed to provide a scalable online transaction processing (OLTP) database with high availability and strong consistency at global scale
Your organization needs to categorize objects in a large group of static images using machine learning.
Which Google Cloud product or service should your organization use?
- A . BigQuery ML
- B . AutoML Video Intelligence
- C . Cloud Vision API
- D . AutoML Tables
C
Explanation:
Reference: https://cloud.google.com/vision
Derive insights from your images in the cloud or at the edge with AutoML Vision or use pre-trained Vision API models to detect emotion, understand text, and more.
Vision API offers powerful pre-trained machine learning models through REST and RPC APIs. Assign labels to images and quickly classify them into millions of predefined categories. Detect objects and faces, read printed and handwritten text, and build valuable metadata into your image catalog.
Your organization runs all its workloads on Compute Engine virtual machine instances. Your organization has a security requirement: the virtual machines are not allowed to access the public internet. The workloads running on those virtual machines need to access BigQuery and Cloud Storage, using their publicly accessible interfaces, without violating the security requirement.
Which Google Cloud product or feature should your organization use?
- A . Identity-Aware Proxy
- B . Cloud NAT (network address translation)
- C . VPC internal load balancers
- D . Private Google Access
D
Explanation:
VM instances that only have internal IP addresses (no external IP addresses) can use Private Google Access. They can reach the external IP addresses of Google APIs and services. The source IP address of the packet can be the primary internal IP address of the network interface or an address in an alias IP range that is assigned to the interface. If you disable Private Google Access, the VM instances can no longer reach Google APIs and services; they can only send traffic within the VPC network.
https://cloud.google.com/vpc/docs/configure-private-google-access
Which Google Cloud product is designed to reduce the risks of handling personally identifiable information (PII)?
- A . Cloud Storage
- B . Google Cloud Armor
- C . Cloud Data Loss Prevention
- D . Secret Manager
C
Explanation:
Reference: https://cloud.google.com/blog/products/gcp/take-charge-of-your-sensitive-data-with-the-cloud-dlp-api
Cloud Data Loss Prevention: Fully managed service designed to help you discover, classify, and protect your most sensitive data.
Your organization is migrating to Google Cloud. As part of that effort, it needs to move terabytes of data from on-premises file servers to Cloud Storage. Your organization wants the migration process to be automated and to be managed by Google. Your organization has an existing Dedicated Interconnect connection that it wants to use.
Which Google Cloud product or feature should your organization use?
- A . Storage Transfer Service
- B . Migrate for Anthos
- C . BigQuery Data Transfer Service
- D . Transfer Appliance
A
Explanation:
Reference: https://cloud.google.com/architecture/migration-to-google-cloud-transferring-your-large-datasets
https://cloud.google.com/architecture/migration-to-google-cloud-transferring-your-large-datasets
Your organization needs to analyze data in order to gather insights into its daily operations. You only want to pay for the data you store and the queries you perform.
Which Google Cloud product should your organization choose for its data analytics warehouse?
- A . Cloud SQL
- B . Dataproc
- C . Cloud Spanner
- D . BigQuery
D
Explanation:
BigQuery is an enterprise data warehouse for large amounts of relational structured data Serverless, highly scalable, and cost-effective multicloud data warehouse designed for business agility.
Your organization wants to run a container-based application on Google Cloud. This application is expected to increase in complexity. You have a security need for fine-grained control of traffic between the containers. You also have an operational need to exercise fine-grained control over the application’s scaling policies.
What Google Cloud product or feature should your organization use?
- A . Google Kubernetes Engine cluster
- B . App Engine
- C . Cloud Run
- D . Compute Engine virtual machines
A
Explanation:
Google Kubernetes Engine GKE seems a better fit since the requirement is for "security need for fine-grained control of traffic between the containers" and "fine-grained control over scaling policies". Such level of control is easier on GKE that Cloud Run.
Reference link: https://cloud.google.com/blog/products/containers-kubernetes/when-to-use-google-kubernetes-engine-vs-cloud-run-for-containers
Which Google Cloud product or feature makes specific recommendations based on security risks and compliance violations?
- A . Google Cloud firewalls
- B . Security Command Center
- C . Cloud Deployment Manager
- D . Google Cloud Armor
B
Explanation:
Reference: https://cloud.google.com/security-command-center
Security Command Center is Security and risk management platform for Google Cloud.
Reference link: https://cloud.google.com/security-command-center
Your organization wants to optimize its use of Google Cloud’s discounts on virtual machine-based workloads. You plan to use 200 CPUs constantly for the next 3 years, and you forecast that spikes of up to 300 CPUs will occur approximately 30% of the time.
What should you choose?
- A . 1-year committed use discount for 200 CPUs
- B . 3-year committed use discount for 300 CPUs
- C . 3-year committed use discount for 200 CPUs
- D . Regular pay-as-you-go pricing
C
Explanation:
you can get a 57% discount by agreeing to commit to a 3-year contract. Any usage over the commitment will just be billed at the standard rate. Since they only need 300 CPUs 30% of the time, will pick answer C so that we are not paying usage off 300 CPUs all of the time. This gives us a discount of 57% for 200 CPU’s, huge cost savings.
Your organization needs to minimize how much it pays for data traffic from the Google network to the internet.
What should your organization do?
- A . Choose the Standard network service tier.
- B . Choose the Premium network service tier.
- C . Deploy Cloud VPN.
- D . Deploy Cloud NAT.
A
Explanation:
Choose the Standard network service tier. While Premium tier is the default for all egress traffic and offers the highest performance, when cost is a consideration. Standard tier is the more economical.
https://cloud.google.com/blog/products/networking/networking-cost-optimization-best-practices
Your organization wants to migrate your on-premises environment to Google Cloud. The on-premises environment consists of containers and virtual machine instances.
Which Google Cloud products can help to migrate the container images and the virtual machine disks?
- A . Compute Engine and Filestore
- B . Artifact Registry and Cloud Storage
- C . Dataflow and BigQuery
- D . Pub/Sub and Cloud Storage
A
Explanation:
Reference: https://cloud.google.com/compute/docs/import/importing-virtual-disks
Your company security team manages access control to production systems using an LDAP directory group.
How is this access control managed in the Google Cloud production project?
- A . Assign the proper role to the Service Account in the project’s IAM Policy
- B . Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group.
- C . Assign the proper role to the Google Group in the project’s IAM Policy.
- D . Create the project in a folder with the same name as the LDAP directory group.
C
Explanation:
Reference: https://cloud.google.com/blog/products/identity-security/achieving-identity-and-access-governance-on-google-cloud
Your organization wants to be sure that is expenditures on cloud services are in line with the budget.
Which two Google Cloud cost management features help your organization gain greater visibility into its cloud resource costs? (Choose two.)
- A . Billing dashboards
- B . Resource labels
- C . Sustained use discounts
- D . Financial governance policies
- E . Payments profile
AB
Explanation:
A label is a key-value pair that helps you organize your Google Cloud resources. You can attach a label to each resource, then filter the resources based on their labels. Information about labels is forwarded to the billing system, so you can break down your billed charges by label.
Reference link: https://cloud.google.com/cost-management
Your organization needs to process large amounts of data from an online application that operates continuously. You do not want to be required to provision infrastructure or create server clusters.
What should your organization choose?
- A . Compute Engine with BigQuery
- B . Dataproc
- C . Google Kubernetes Engine with Cloud Bigtable
- D . Dataflow
D
Explanation:
You do not want to be required to provision infrastructure or create server clusters. Because Unified stream and batch data processing that’s serverless, fast, and cost-effective.
Reference link: https://cloud.google.com/dataflow
Your organization needs to ensure that the Google Cloud resources of each of your departments are segregated from one another. Each department has several environments of its own: development, testing, and production.
Which strategy should your organization choose?
- A . Create a project per department, and create a folder per environment in each project.
- B . Create a folder per department, and create a project per environment in each folder.
- C . Create a Cloud Identity domain per department, and create a project per environment in each domain.
- D . Create a Cloud Identity domain per environment, and create a project per department in each domain.
B
Explanation:
Reference link: https://cloud.google.com/resource-manager/docs/creating-managing-folders
Reference link: https://stackoverflow.com/questions/59460623/how-to-create-a-folder-a-project-under-it-with-deployment-manager-google-cloud
Your organization is defining the resource hierarchy for its new application in Google Cloud. You need separate development and production environments. The production environment will be deployed in Compute Engine in two regions.
Which structure should your organization choose?
- A . Create a single project for all environments. Use labels to segregate resources by environment.
- B . Create a single project for all environments. Use tags to segregate resources by environment.
- C . Create one project for the development environment and one project for the production environment.
- D . Create two projects for the development environment and two projects for the production environment (one for each region).
C
Explanation:
Many organizations have separate development and production environments so they can build and test new features without disturbing production traffic. In Optimizely, you can create separate projects for each environment to help with governance.
With separate development and production projects, your organization can safely build and QA experiments and Personalization campaigns in a development environment before deploying to production. This approach allows multiple stakeholders in your organization to act as gatekeepers for running new experiments in production.
Reference link: https://support.optimizely.com/hc/en-us/articles/4410284353805-Set-up-projects-for-development-and-production-environments
Your organization meant to purchase a 3-year Committed Use Discount, but accidentally purchased a 1-year Committed Use Discount instead.
What should your organization do?
- A . Contact your financial institution.
- B . Contact Trust and Safety.
- C . Contact Cloud Billing Support.
- D . Contact Technical Support.
C
Explanation:
https://cloud.google.com/compute/docs/instances/signing-up-committed-use-discounts
Your organization needs to allow a production job to have access to a BigQuery dataset. The production job is running on a Compute Engine instance that is part of an instance group.
What should be included in the IAM Policy on the BigQuery dataset?
- A . The Compute Engine instance group
- B . The project that owns the Compute Engine instance
- C . The Compute Engine service account
- D . The Compute Engine instance
C
Explanation:
When an identity calls a Google Cloud API, BigQuery requires that the identity has the appropriate permissions to use the resource. You can grant permissions by granting roles to a user, a group, or a service account.
Reference link: https://cloud.google.com/bigquery/docs/access-control
Your team is publishing research results and needs to make large amounts of data available to other researchers within the professional community and the public at minimum cost.
How should you host the data?
- A . Use a Cloud Storage bucket and enable "Requester Pays.’
- B . Use a Cloud Storage bucket and provide Signed URLs for the data files.
- C . Use a Cloud Storage bucket and set up a Cloud Interconnect connection to allow access to the data.
- D . Host the data on-premises. and set up a Cloud Interconnect connection to allow access to the
data.
A
Explanation:
Enabling Requester Pays is useful, for example, if you have a lot of data you want to make available to users, but you don’t want to be charged for their access to that data.
Reference link: https://cloud.google.com/storage/docs/requester-pays
Your company needs to segment Google Cloud resources used by each team from the others. The teams’ efforts are changing frequently, and you need to reduce operational risk and maintain cost visibility.
Which approach does Google recommend?
- A . One project per team.
- B . One organization per team.
- C . One project that contains all of each team’s resources.
- D . One top-level folder per team.
A
Explanation:
Reference: https://cloud.google.com/security/infrastructure/design
The Teams need to segmented to have visibility on the resources each team consumes
How do Migrate for Compute Engine and Migrate for Anthos differ?
- A . Unlike Migrate for Anthos, Migrate for Compute Engine assumes that the migration source is VMware vSphere.
- B . Migrate for Compute Engine charges for ingress, but Migrate for Anthos does not.
- C . Migrate for Compute Engine is closed source, and Migrate for Anthos is open source.
- D . Migrate for Anthos migrates to containers, and Migrate for Compute Engine migrates to virtual machines.
D
Explanation:
Reference: https://cloud.google.com/migrate/anthos
Migrate workloads to Compute Engine with Migrate for Compute Engine. Migrate from Compute Engine to containers with Migrate for Anthos and GKE.
This method makes sense, for instance, in cases where you want to conduct a data-center migration and migrate all workloads into Compute Engine, and only at a second stage selectively modernize
suitable workloads to containers.
https://cloud.google.com/migrate/containers/docs/architecture
An IoT platform is providing services to home security systems. They have more than a million customers, each with many home devices. Burglaries or child safety issues are concerns that the clients customers. Therefore, the platform has to respond very quickly in near real time.
What could be a typical data pipeline used to support this platform on Google Cloud?
- A . Cloud Pub/Sub, Cloud Dataflow, Data Studio
- B . Cloud Functions, Cloud Dataproc, Looker
- C . Cloud Pub/Sub, Cloud Dataflow, BigQuery
- D . Cloud Functions, Cloud Dataproc, BigQuery
A
Explanation:
Explanation
=> Cloud Pub/Sub- Cloud Pub/Sub is the best to be the end-point for ingesting large amounts of data. It will grow as required, can stream data to downstream systems, and can also work with intermittently available backends.
=> Cloud Dataflow- supports streaming data and therefore is an appropriate option for processing the data that is ingested.
=> BigQuery- BigQuery also supports streaming data and its possible to do real time ana-lytics on it.
=> DataStudio- DataStudio and Looker are for visualization. They don’t have any in-built analysis.
=> Cloud Functions- Cloud Functions is a useful serverless endpoint. However, Pub/Sub is better in this case because it can also retain messages for a set period if it was not possi-ble to deliver it first time.
=>Cloud Dataproc- Cloud Dataproc is used for Hadoop/Spark workloads and won’t be a good fit here.
An organization runs their application on a virtual machine, but every time they want to edit specific features, they have to bring the system offline to update the applica-tion.
What would be a more appropriate solution for their app?
- A . GPUs
- B . Containers
- C . Hypervisors
- D . Solid State Disk
B
Explanation:
Because containers can compartmentalize applications which enables parts to be edited in isolation.
Reference link: https://cloud.google.com/learn/what-are-containers
A Multiple projects within your organization have long-term VM usage. Based on current demand, they are able to project into the future and estimate how many VM hours they will use every year. Going in for a committed use contract seems sensible.
How can you configure committed use easily across all the projects?
- A . Enable committed use with discount sharing for the projects
- B . Review the usage of resources by each project on a daily basis. Enable committed use for the following day based on that number, so that it gives maximum granularity without wastage.
- C . Take a report of each project’s use in the last year. Enable committed use on a per-project basis based on the previous year’s numbers.
- D . Share a Google Sheet and request each project team to send in their estimate. Enable committed use accordingly on a per-project basis.
A
Explanation:
Enable committed use discounts are applied to the project from which you purchased it. To share the discount across multiple projects linked to your Cloud Billing account, enable committed use discount sharing from the console. When you enable committed use discount sharing, all of your current active committed use dis-counts in all the projects under the same Cloud Billing account, including those you previously purchased and new ones you purchase in the future are shared across your Cloud Billing account. Your sustained use discounts are also pooled and shared across all projects within your Cloud Billing account.
An organization currently stores its data on-premises and they receive different levels of traffic on their website every month.
How could the organization benefit from modernizing their infrastructure with cloud technology?
- A . They can rely on the cloud provider for all website source code.
- B . Agile storage scalability.
- C . 100% service availability.
- D . They can shift from heavy operational expenditure to a capital expenditure model.
B
Explanation:
Organizations can scale in the cloud by paying for what they use, when they use it.
Which of the following NIST Cloud characteristics uses the business model of shared re-sources in a cloud environment?
- A . Elasticity
- B . Availability
- C . Broad Network Access
- D . Multi-Tenancy
D
Explanation:
In cloud computing, multitenancy means that multiple customers of a cloud vendor are using the same computing resources. Even though they share resources, cloud customers aren’t aware of each other, and their data is kept totally separate. Mul-titenancy is a crucial component of cloud computing; without it, cloud services would be far less practical. Multitenant architecture is a feature in many types of public cloud com-puting, including IaaS, PaaS, SaaS, containers, and serverless computing.
You want to build an application that will allow customers to register and login. It would be great to have the ability to secure it with multi-factor authentication and the ability to reset credentials. As a small startup, you want to build the main application as quickly as possible and have minimum overhead.
Which might be a suitable option for you on Google Cloud?
- A . Since identity and credentials should be secure and private, do not trust other ser-vice providers.
- B . Cloud Identity
- C . Google Workspace
- D . Cloud Identity Platform
D
Explanation:
Cloud Identity Platform
Cloud Identity Platform allows you to manage identity and credentials for your consumer-facing applications. So that’s the right one in this case to use. "Identity Platform is a customer identity and access management (CIAM) platform that helps organizations add identity and access management functionality to their applications, protect user accounts, and scale with confidence on Google Cloud."
Reference link: https://cloud.google.com/identity-platform
A video game organization has invested in cloud technology to generate insights from user behaviors. They want to ensure recommendations of games are aligned to players’ interests.
What may have prompted this business decision?
- A . Customers expect faster time to market for games.
- B . Employees expect source code changes to be deployed faster.
- C . Customers expect a personalized experience.
- D . Employees expect more predictable data management spending.
C
Explanation:
Because in the cloud era, users expect more personalization and customization.
A company with its own private data center has called you in for help with their disaster recovery planning. News of multiple ransomware attacks has made them very anxious. They want to make they are well prepared for such an eventuality.
Which of these would be good recommendations?
- A . It is better to have redundancy; so, set up another private data center nearby so that you can quickly go over in case of an emergency.
- B . It is better to have redundancy; use one or many of the Google Cloud datacenters as a backup location.
- C . The one data center is enough, as long as the data is encrypted; attackers won’t be able to read the data.
- D . The one data center is enough as long as you regularly back up data and save it in another place in the same DC.
B
Explanation:
A single data center is vulnerable. So any option involving that is not good.
Reference Link: https://www.coresite.com/blog/data-center-redundancy
A startup is planning to create their entire suite of applications on Google Cloud. They are looking at various open source technologies to build applications. One of the considera-tion is about having a well integrated monitoring tool. They have to be able to constantly review load capacity and performance of their applications and virtual machines.
What would you advise them to do?
- A . It is best to build a custom solution so that they know it integrates well with all their custom applications.
- B . Since they are using open source for applications, find another open source monitoring tool and integrate it, which could turn out to be very cheap.
- C . Use the Google Cloud Operations Suite which contains monitoring among other operations tools.
- D . Update the application code to regularly write to output logs. Export the logs to BigQuery to analyze them frequently.
C
Explanation:
Operations Suite is well integrated into Google and it s the recommended option.
Reference: https://cloud.google.com/products/operations
A multinational retail company has approached you to help design its systems. They have millions of transactions at their point of sale systems across the world that need to be captured, stored, and analyzed. They are seeing more growth and expect to expand into even more geographies.
Which database would be appropriate for them?
- A . Cloud Datastore
- B . Cloud Storage
- C . Cloud Spanner
- D . Cloud SQL
C
Explanation:
Cloud Spanner: "Fully managed relational database with unlimited scale, strong consistency, and up
to 99.999% availability."
Reference: https://cloud.google.com/spanner
An organization wants to dynamically adjust its application to serve different user needs.
What are the benefits of storing their data in the cloud for this use case?
- A . Data can be stored in archive for long term access
- B . Automatic data cleaning and validation
- C . Real-time data ingestion and analysis
- D . No data access management required
C
Explanation:
By storing their application data in the cloud the organization will be able to gather and analyze user behavior data in real-time. This will enable them to dynamically adjust their application for different user needs.
An organization has completely migrated all their infrastructure to the cloud to benefit from its agility. Now they want to innovate faster and achieve a higher return on investment.
What should the organization do?
- A . Manually provision all cloud infrastructure for increased control.
- B . Modernize their applications.
- C . Lower their service level objective (SLO).
- D . Move to a hybrid architecture with some of their infrastructure on-premises.
B
Explanation:
Because this will enable the business to better serve their users.
Your customer currently has a hybrid cloud setup including their on-premises data center and AWS. They are consolidating all their services on Google Cloud as part of a modernization plan and want to spend less IT effort in the future. There are about 10 MySQL and 25 PostgreSQL databases across the two DCs.
What is the best option to for them?
- A . Use the Data Catalog Service to manage the metadata of the databases
- B . Use Cloud Dataflow service and setup Google’s Cloud SQL as the sink and the others as the source,
which will cause the data to flow in as expected. - C . Use the Database Migration Service
- D . Use the Bare Metal Solution and copy the databases directly as they are on-premises and on AWS.
C
Explanation:
Database Migration is the right one to use: "Simplifying migrations to Cloud SQL. Now available for MySQL and PostgreSQL migrations, with SQL Server coming soon." Since the customer also doesn’t want to manage their own database installations in the future, Cloud SQL is the best option.
https://cloud.google.com/database-migration
There are internal compliance requirements that demand that we do not use any APIs or services that are not backed by SLAs.
Which of these are acceptable for us? (Choose two answer)
- A . Alpha, Beta
- B . Early Access, Preview
- C . General Availability
- D . Deprecated, but ensure that the SLA support period is still valid.
CD
Explanation:
General Availability is the stage where SLAs apply.
Deprecated – in the deprecated stage, you should start moving away from those APIs and products.
Depending on the deprecation policy, SLAs could still be valid.
An organization has created an ecommerce website.
What data on this website would be considered structured data?
- A . Product photographs
- B . Product reviews
- C . Product descriptions
- D . Product ratings score
D
Explanation:
Because product ratings are structured because they are numerical scores.
Your company provides car maintenance services. It is conducting an internal hackathon to identify new ideas that could expand their business. The teams have pitched different ideas and have started working on it. They have to present their application to the judges within 48 hours. A presentation alone is not enough; they have to demonstrate a working proof of concept. The team that you are mentoring is going to recommend additional ser-vices to drive in customers based on the brand of car they drive in. They need to be able to identify what brand of car the customer has, based on a photograph automatically taken at entry. They have already discovered an open source database of car images collected by online enthusiasts.
How should they implement this solution?
- A . Use Deep Learning Containers that are preconfigured and optimized containers for deep learning environments.
- B . Use AutoML Image – upload the images and let it create a working model for you.
- C . Use TensorFlow to create a model that will identify the car brands; use the available data to train the model.
- D . Use Cloud Vision AI that is able to detect logos. Write only the code to integrate in-to your workflow.
B
Explanation:
It would be most straightforward to use AutoML Image. Put the images in Cloud Storage, point to it from AutoML, and start the model building process. Reference Link- https://cloud.google.com/automl
Your application is onboarding a number of users. The details of the users very widely.
What kind of database would be most suitable for this use case?
- A . NoSQL database like Firestore
- B . OLAP database like BigQuery which support SQL
- C . SQL database like MySQL or PostgreSQL
- D . OLTP database like Cloud Spanner
A
Explanation:
Your application is onboarding a number of users. The details of the users very widely.
What kind of database would be most suitable for this use case?
- A . NoSQL database like Firestore
- B . OLAP database like BigQuery which support SQL
- C . SQL database like MySQL or PostgreSQL
- D . OLTP database like Cloud Spanner
A
Explanation:
Your application is onboarding a number of users. The details of the users very widely.
What kind of database would be most suitable for this use case?
- A . NoSQL database like Firestore
- B . OLAP database like BigQuery which support SQL
- C . SQL database like MySQL or PostgreSQL
- D . OLTP database like Cloud Spanner
A
Explanation:
Your team is using BigQuery as your central data warehouse. You are running a certain workload that you’ve run frequently over the last few days. It is a short, high capacity ana-lytics workload.
Which of the following would be an appropriate pricing model to use?
- A . There is no need for any pricing model the first 1 TB of query data processed per month is free.
- B . On-demand pricing
- C . Flex Slots
- D . Flat-rate reservations
C
Explanation:
Option A is Correct- BigQuery Flex Slots for cyclical workloads that require extra capacity, or for workloads that need to process a lot of data in a short time, and so would be less expensive to run using reserved slots for a short time.
An organization wants to search for and share plug-and-play AI components which can easily build ML services into their project.
Which Google Cloud product should the organi-zation use?
- A . Document AI
- B . AI Hub
- C . Cloud Talent Solution
- D . Recommendations AI
B
Explanation:
Because AI Hub is a hosted repository of plug-and-play AI compo-nents.
Reference link: https://cloud.google.com/ai-hub/docs/release-notes
Your company has multiple internal applications used by your employees. You also have to give access to certain vendors and contractors.
What is a good option for you to adopt?
- A . Keep the credentials separate for each application to reduce the blast radius in case of any issues.
- B . Use an external identity provider that is famous and popular like Facebook or Twitter; that way, even your vendors and contractors will have an account there.
- C . Allow all users, especially contractors and vendors, to bring their own identities, like those at gmail.com.
- D . Use an IDaaS (Identity as a Service) product that can centrally manage authenti-cation and authorization for the applications.
D
Explanation:
IDaaS – identity providers managed by the company give better control over security and privacy. Security/access can be set granularly, while also being centralized. You don’t have to manage multiple credentials.
Your organization is on a critical path with recently developed applications. They are going into production in a month. A few million users are expected to use the new application. They want to ensure minimum disruption when the application goes live. Any issues have to be dealt with within minutes and resolved as quickly as possible.
Which Support package should they take?
- A . Enhanced Support
- B . Standard Support
- C . Basic Support
- D . Premium Support
D
Explanation:
Explanation
Premium Support will have a 15-minute response time with 24/7 response for high & criti-cal-impact issues.
https://cloud.google.com/support
An organization wants to move from a strategic cloud adoption maturity level to a trans-formational one.
How should the organization change the way they scale?
- A . None of these
- B . Deploy changes when problems arise.
- C . Deploy changes programmatically.
- D . Review changes manually.
C
Explanation:
Because automation is a transformational approach which ensures changes are constant and low-risk.
Which of the following statements is/are correct about Bare Metal Solutions?
- A . The network, which Google Cloud manages includes a low-latency Cloud Inter-connect connection into the customer Bare Metal Solution environment.
- B . Bare Metal Solution also includes the provisioning and maintenance of the cus-tom, sole-tenancy hardware with local SAN, and smart hands support.
- C . Bare Metal Solution uses a bring-your-own-license (BYOL) model.
- D . All of the Above.
D
Explanation:
Option A is true
You are responsible for the licensing of all of your software. Bare Metal Solution uses a bring-your-own-license (BYOL) model.
Apart from this you are responsible for the software, applications, and data that you use and store in
the Bare Metal Solution environment.
Responsibilities
Data, including:
– Security and encryption
– Backups
Software and applications, including:
– Installation
– Configuration
– Upgrades and patching
Operating system and any hypervisor, including:
– Configuration changes
– Upgrades and patching
Server clusters, including:
– Installation
– Configuration
– Maintenance
Licensing
Option B & C is also true.
With Bare Metal Solution, Google Cloud provides and manages the core infrastructure, the net-work, the physical and network security, and hardware monitoring capabilities in an environment from which you can access all of the Google Cloud services. The core infrastructure includes secure, controlled-environment facilities, and power.
The Bare Metal Solution also includes the provisioning and maintenance of the custom, sole-tenancy hardware with local SAN, and smart hands support.
The network, which is managed by Google Cloud includes a low-latency Cloud Interconnect con-nection into the customer Bare Metal Solution environment.
The available Google Cloud services include private API access, management tools, support, and billing.
An organization has had a data leak scare because one employee made a sensitive Cloud Storage bucket available to the public. Given the nature of the company’s business, it is understood that there is never any reason to give the public direct access to any file. The security head wants to ensure that such an event never occurs again.
How can you ensure this?
- A . Remove Edit access rights of all Cloud Storage buckets so that no user can make any edits.
- B . Set an organizational policy constraint to restrict bucket access set to the public.
- C . Use Cloud Scheduler to run a job at a specified interval to scan buckets. Any public permissions can be programmatically changed.
- D . Write Cloud Functions code connected to Cloud Storage. Any changes will be notified to the function which can be used to reset the public access.
B
Explanation:
The straightforward way to set it is using Organizational Policy constraint. Any attempts to change the organizational setting will be rejected for any project and resource.
Reference link:
-> https://cloud.google.com/resource-manager/docs/organization-policy/overview
-> https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints
Which of the following options is/are correct about Preemptible VMs?
- A . Preemptible VMs don’t have fixed pricing.
- B . Both A & B
- C . None of the Above.
- D . You can not use Preemptible VMs at fault-tolerant workloads such as high-performance computing, big data and analytics, continuous integration/continuous delivery (CI/CD), rendering/transcoding, and testing.
C
Explanation:
Preemptible VMs:
Predictable and low cost
Preemptible VMs are up to 80% cheaper than regular instances. Pricing is fixed so you will always get low cost and financial predictability, without worrying about variable market pricing.
Expand your batch processing
Supplement your regular VMs with lower-cost, preemptible instances to finish your compute-intensive work faster, saving you time and money. Throw preemptible VMs at fault-tolerant workloads such as high performance computing, big data and analytics, continuous integration/continuous delivery (CI/CD), rendering/transcoding, and testing.
Get more from your containers
Containers are naturally stateless and fault tolerant, making them a great fit for preemptible VMs! You save on your containerized workloads today with these affordable compute instances. Take advantage of Google Kubernetes Engine for your containerized workloads and Managed Instance Groups to painlessly and seamlessly recover from preemptions.
Enable it instantly
Simply add –preemptible to the gcloud command line and you’re off to the races. There’s no bidding to code for, and with per-second billing, just shut down your VMs as soon as you’re done.
Your ed-tech start-up was originally launched in a small geography. Any user sign-ups, course progress, tests taken, etc. are captured on a self-managed MySQL database. Every user generates many such transactions. Now you’re taking the application globally and preparing for a much larger influx of users from all over the world. The existing MySQL server is unlikely to be able to scale.
Which convenient option can be considered?
- A . Migrate to BigQuery
- B . Migrate to Cloud Spanner
- C . Migrate to Cloud SQL
- D . Migrate to Bigtable
B
Explanation:
Cloud Spanner is a global scale SQL database that scales extremely well. That would be the best choice.
An organization with hybrid cloud architecture wants to build an application once and be able to run it both on-premises and in their public cloud.
Which Google Cloud solution should the organization use?
- A . Cloud Functions
- B . App Engine
- C . Compute Engine
- D . Anthos
D
Explanation:
Anthos allows organizations to build an application once and run it anywhere.
Migrate directly from VMs, Build, deploy, and optimize apps on GKE, Anthos serverless landing zones and VMs anywhere-simply, flexibly, and securely
Reference Link- https://cloud.google.com/anthos
Which of the following is/are true about Anthos?
- A . Enterprise-grade container orchestration and management service.
- B . Modernizing your security for hybrid and multi-cloud deployments
- C . Fully managed service mesh with built-in visibility
- D . All of the Above
D
Explanation:
Anthos:
Anthos unifies the management of infrastructure and applications across on-premises, edge, and in multiple public clouds with a Google Cloud-backed control plane for consistent operation at scale.
– Build, deploy, and optimize apps on GKE and VMs anywhere―simply, flexibly, and securely.
– Consistent development and operations experience for hybrid and multi-cloud environments.
Key features:
Which of the following is/are true about Anthos?
- A . Enterprise-grade container orchestration and management service.
- B . Modernizing your security for hybrid and multi-cloud deployments
- C . Fully managed service mesh with built-in visibility
- D . All of the Above
D
Explanation:
Anthos:
Anthos unifies the management of infrastructure and applications across on-premises, edge, and in multiple public clouds with a Google Cloud-backed control plane for consistent operation at scale.
– Build, deploy, and optimize apps on GKE and VMs anywhere―simply, flexibly, and securely.
– Consistent development and operations experience for hybrid and multi-cloud environments.
Key features:
Which of the following is/are true about Anthos?
- A . Enterprise-grade container orchestration and management service.
- B . Modernizing your security for hybrid and multi-cloud deployments
- C . Fully managed service mesh with built-in visibility
- D . All of the Above
D
Explanation:
Anthos:
Anthos unifies the management of infrastructure and applications across on-premises, edge, and in multiple public clouds with a Google Cloud-backed control plane for consistent operation at scale.
– Build, deploy, and optimize apps on GKE and VMs anywhere―simply, flexibly, and securely.
– Consistent development and operations experience for hybrid and multi-cloud environments.
Key features:
Which of the following is/are true about Anthos?
- A . Enterprise-grade container orchestration and management service.
- B . Modernizing your security for hybrid and multi-cloud deployments
- C . Fully managed service mesh with built-in visibility
- D . All of the Above
D
Explanation:
Anthos:
Anthos unifies the management of infrastructure and applications across on-premises, edge, and in multiple public clouds with a Google Cloud-backed control plane for consistent operation at scale.
– Build, deploy, and optimize apps on GKE and VMs anywhere―simply, flexibly, and securely.
– Consistent development and operations experience for hybrid and multi-cloud environments.
Key features:
Which of the following is/are true about Anthos?
- A . Enterprise-grade container orchestration and management service.
- B . Modernizing your security for hybrid and multi-cloud deployments
- C . Fully managed service mesh with built-in visibility
- D . All of the Above
D
Explanation:
Anthos:
Anthos unifies the management of infrastructure and applications across on-premises, edge, and in multiple public clouds with a Google Cloud-backed control plane for consistent operation at scale.
– Build, deploy, and optimize apps on GKE and VMs anywhere―simply, flexibly, and securely.
– Consistent development and operations experience for hybrid and multi-cloud environments.
Key features:
The CFO is attending one of the preliminary meetings in the migration strategy meeting. She brings up the concern about costs. They have contracts with their vendors and the payments they will need to make when purchasing any kind of infrastructure. This gives them a clear view of numbers for resource budgeting and planning.
Can she get the same kind of clarity on Google Cloud?
- A . Yes. Do a trial run of typical workloads. See the billing amount and that becomes the base reference.
- B . Yes, the Cloud Native Computing Foundation publishes yearly numbers on the cost of running the cloud. Use that as a reference.
- C . Yes, the Pricing Calculator can be used to estimate the cost of resources.
- D . Yes, Google provides a typical cost of application workloads by region and indus-try. Use that as a reference.
C
Explanation:
The pricing calculator can be used to give clear estimates of resource usage.
-> Running test loads is as closely indicative as using the pricing calculator.
-> There are no cloud cost references published, either by Google or CNCF. Even if some companies have published such info. It might not apply to you.
Reference link: https://cloud.google.com/products/calculator
The government has ordered an audit of your company’s data. You have hired an external company to conduct the audit. They need to be able to review the data stored in your Cloud Storage buckets across eight projects.
How would you grant them access?
- A . Give the auditors an Owner role on the eight buckets so that they have proper access.
- B . Give them Storage Object Viewer access to the buckets in those eight projects.
- C . They might need access to all projects as the audit progresses; so give them access to all Storage buckets so that you don’t have to do it repeatedly later on.
- D . They might need access to all projects as the audit progresses; so give them the Editor role on all Storage buckets so that you don’t have to do it repeatedly later on.
B
Explanation:
Apply the Principle of Least Privilege and only provide read permissions on only the required
buckets. No more, no less
https://cloud.google.com/storage/docs/access-control/iam-roles
A prospect wants to be able to store and analyze data. Their analysts already know SQL, but are not familiar with other technologies.
Which of these databases can the analysts use without additional training?
- A . Cloud SQL, BigQuery, Datastore
- B . Spanner, Cloud SQL, BigQuery
- C . Cloud SQL, Firestore, Datastore
- D . Cloud SQL, Bigtable, BigQuery
B
Explanation:
Spanner, Cloud SQL, BigQuery
Spanner- Cloud Spanner is a fully managed, mission-critical, relational database service that offers
transactional consistency at global scale, automatic, synchronous replication for high availability, and
support for two SQL Google Standard SQL and PostgreSQL.
Cloud SQL- Cloud SQL is a fully-managed database service that helps you set up, maintain, manage, and administer your relational databases on Google Cloud Platform.
BigQuery- Google BigQuery is a cloud-based Architecture and provides exceptional performance as it can auto-scale up and down based on the data load and performs data analysis efficiently. On the other hand, SQL Server is based on client-server architecture and has fixed performance throughout unless the user scales it manually.
Which of the following is/are true about Bare Metal Solutions?
- A . Enterprise-grade deployment platform
- B . All your existing investment in tooling and best practices will work as is
- C . Continue to run any version, and feature set, any database option, and any customizations (patchsets)
- D . All of the Above.
D
Explanation:
Bare Metal Solution for Oracle
Bring your Oracle workloads to Google Cloud with Bare Metal Solution and jumpstart your cloud journey with minimal risk.
– Continue to run any version, any feature set, any database option, and any customizations (patchsets)
– Enterprise-grade deployment platform
– High availability with Oracle RAC
– Works with any application, any Oracle versions
– All your existing investment in tooling and best practices will work as is
A customer has new applications to build that has to handle both batch data and streaming dat a.
Which product should they choose?
- A . Dataprep
- B . Dataflow
- C . Dataproc
- D . Data Fusion
B
Explanation:
Dataflow is the managed version of Apache Beam. Beam = Batch + Stream. Unified stream and batch data processing that’s serverless, fast, and cost-effective.
Reference link: https://cloud.google.com/dataflow