Free Professional-Cloud-Architect Exam Braindumps

- (Exam Topic 5)
Your application needs to process credit card transactions. You want the smallest scope of Payment Card Industry (PCI) compliance without compromising the ability to analyze transactional data and trends relating to which payment methods are used. How should you design your architecture?

1. A. Create a tokenizer service and store only tokenized data.
2. B. Create separate projects that only process credit card data.
3. C. Create separate subnetworks and isolate the components that process credit card data.
4. D. Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI data.
5. E. Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor.

Correct Answer: A
https://cloud.google.com/solutions/pci-dss-compliance-in-gcp

- (Exam Topic 5)
You are helping the QA team to roll out a new load-testing tool to test the scalability of your primary cloud services that run on Google Compute Engine with Cloud Bigtable. Which three requirements should they include? Choose 3 answers

1. A. Ensure that the load tests validate the performance of Cloud Bigtable.
2. B. Create a separate Google Cloud project to use for the load-testing environment.
3. C. Schedule the load-testing tool to regularly run against the production environment.
4. D. Ensure all third-party systems your services use are capable of handling high load.
5. E. Instrument the production services to record every transaction for replay by the load-testing tool.
6. F. Instrument the load-testing tool and the target services with detailed logging and metrics collection.

Correct Answer: ABF

- (Exam Topic 5)
Your company uses the Firewall Insights feature in the Google Network Intelligence Center. You have several firewall rules applied to Compute Engine instances. You need to evaluate the efficiency of the applied firewall ruleset. When you bring up the Firewall Insights page in the Google Cloud Console, you notice that there are no log rows to display. What should you do to troubleshoot the issue?

1. A. Enable Virtual Private Cloud (VPC) flow logging.
2. B. Enable Firewall Rules Logging for the firewall rules you want to monitor.
3. C. Verify that your user account is assigned the compute.networkAdmin Identity and Access Management (IAM) role.
4. D. Install the Google Cloud SDK, and verify that there are no Firewall logs in the command line output.

Correct Answer: B
Reference: https://cloud.google.com/network-intelligence-center/docs/firewall-insights/how-to/using-firewall- insights

- (Exam Topic 3)
For this question, refer to the JencoMart case study.
JencoMart wants to move their User Profiles database to Google Cloud Platform. Which Google Database should they use?

1. A. Cloud Spanner
2. B. Google BigQuery
3. C. Google Cloud SQL
4. D. Google Cloud Datastore

Correct Answer: D
https://cloud.google.com/datastore/docs/concepts/overview Common workloads for Google Cloud Datastore:
User profiles
Product catalogs
Game state
References: https://cloud.google.com/storage-options/ https://cloud.google.com/datastore/docs/concepts/overview

- (Exam Topic 4)
For this question, refer to the Dress4Win case study.
Dress4Win would like to become familiar with deploying applications to the cloud by successfully deploying some applications quickly, as is. They have asked for your recommendation. What should you advise?

1. A. Identify self-contained applications with external dependencies as a first move to the cloud.
2. B. Identify enterprise applications with internal dependencies and recommend these as a first move to the cloud.
3. C. Suggest moving their in-house databases to the cloud and continue serving requests to on-premise applications.
4. D. Recommend moving their message queuing servers to the cloud and continue handling requests to on-premise applications.

Correct Answer: A
https://cloud.google.com/blog/products/gcp/the-five-phases-of-migrating-to-google-cloud-platform