Question 1

You are deploying an application on App Engine that needs to integrate with an on-premises database. For security purposes, your on-premises database must not be accessible through the public internet. What should you do?

Options :

A : Deploy your application on App Engine standard environment and use App Engine firewall rules to limit access to the open on-premises database.

B : Deploy your application on App Engine standard environment and use Cloud VPN to limit access to the on-premises database.

C : Deploy your application on App Engine flexible environment and use App Engine firewall rules to limit access to the on-premises database.

D : Deploy your application on App Engine flexible environment and use Cloud VPN to limit access to the on-premises database.

Answer: D

Question 2

Your company captures all web traffic data in Google Analytics 360 and stores it in BigQuery. Each country has its own dataset. Each dataset has multiple tables.You want analysts from each country to be able to see and query only the data for their respective countries.How should you configure the access rights?

Options :

A : Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts', and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group

B : Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts', and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery jobUser. Share the appropriate tables with view access with each respective analyst country-group.

C : Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts', and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery dataViewer. Share the appropriate dataset with view access with each respective analyst country- group

D : Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts', and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery dataViewer. Share the appropriate table with view access with each respective analyst country-group.

Answer: A

Question 3

In your customer support tool, all email and chat conversations are logged to Bigtable for storage and analysis purposes. However, to ensure data privacy and compliance, it is essential to sanitize this data by removing any Personally Identifiable Information (PII) or payment card information before it is initially stored. What approach would you recommend for accomplishing this task?

Options :

A : De-identify the data with the Cloud Data Loss Prevention API.

B : Hash all data using SHA256.

C : Use regular expressions to find and redact phone numbers, email addresses, and credit card numbers.

D : Encrypt all data using elliptic curve cryptography.

Answer: A

Question 4

You have added a debug function to the backend service of your business application to send all server occurrences to Google Cloud Storage for further evaluation. The event record is 50 KB minimum and a maximum of 15 MB. Expected events at the peak are 3,000 per second; how should data loss be minimized? What process are you supposed to follow?

Options :

A : Append metadata to the file body. Compress individual files. Name files with serverName-Timestamp. Create a new bucket if the old one is older than 1 hour, and save individual files to the new bucket. Otherwise, save files to the existing bucket

B : Compress individual files. Name files with serverName-EventSequence. Save files to one bucket. Set custom metadata headers for each object after saving

C : Batch every 10,000 events with a single manifest file for metadata. Compress event files and manifest files into a single archive file. Name files using serverName-EventSequence. Create a new bucket if the old one is older than 1 day, and save the single archive file to the new bucket. Otherwise, save the single archive file to an existing bucket

D : Append metadata to the file body. Compress individual files. Name files with a random prefix pattern. Save files to one bucket

Answer: C

Question 5

As a cloud architect, while utilizing the Google Network Intelligence Center's Firewall Insights feature, you observe that there are no log rows available for viewing when accessing the Firewall Insights page in the Google Cloud console. This prompts the need for assessing the effectiveness of the applied firewall ruleset, considering the existence of multiple firewall rules associated with the Compute Engine instance. To troubleshoot the issue, what steps should you take?

Options :

A : Enable Firewall Rules Logging for the firewall rules you want to monitor.

B : Install the Google Cloud SDK, and verify that there are no Firewall logs in the command line output.

C : Verify that your user account is assigned the compute.networkAdmin Identity and Access Management (IAM) role.

D : Enable Virtual Private Cloud (VPC) flow logging.

Answer: A

Confidently Practice Online with Free Professional-Cloud-Architect Exam Cram

Buying Options: