Question 1

A lead software engineer tells you that his new application design uses websockets and HTTP sessions that are not distributed across the web servers. You want to help him ensure his application will run properly on Google Cloud Platform.

What should you do?

Options :

A : Help the engineer to convert his websocket code to use HTTP streaming

B : Review the encryption requirements for websocket connections with the security team

C : Meet with the cloud operations team and the engineer to discuss load balancer options

D : Help the engineer redesign the application to use a distributed user session service that does not rely on websockets and HTTP sessions.

Answer: C

Question 2

As a cloud architect, while utilizing the Google Network Intelligence Center's Firewall Insights feature, you observe that there are no log rows available for viewing when accessing the Firewall Insights page in the Google Cloud console. This prompts the need for assessing the effectiveness of the applied firewall ruleset, considering the existence of multiple firewall rules associated with the Compute Engine instance. To troubleshoot the issue, what steps should you take?

Options :

A : Enable Firewall Rules Logging for the firewall rules you want to monitor.

B : Install the Google Cloud SDK, and verify that there are no Firewall logs in the command line output.

C : Verify that your user account is assigned the compute.networkAdmin Identity and Access Management (IAM) role.

D : Enable Virtual Private Cloud (VPC) flow logging.

Answer: A

Question 3

How would you design a solution for running a large-scale, multi-region, and secure IoT platform on Google Cloud, considering the requirement for real-time data processing, low latency, and the ability to handle millions of connected devices and terabytes of data?

Options :

A : Use Cloud IoT Core for device management, with Cloud Functions for serverless computing and Cloud Storage for data storage.

B : Use Cloud IoT Core for device management, with Firebase for real-time data streaming and Cloud Bigtable for database management.

C : Use Cloud IoT Edge for device management, with Cloud Dataflow for real-time data processing and Cloud Bigtable for database management.

D : Use Cloud Compute for device management, with Cloud Pub/Sub for real-time data streaming and Cloud BigQuery for data warehousing.

Answer: C

Question 4

You are using Cloud Shell and need to install a custom utility for use in a few weeks. Where can you store the file so it is in the default execution path and persists across sessions?

Options :

A : ~/bin

B : Cloud Storage

C : /google/scripts

D : /usr/local/bin

Answer: A

Question 5

In your role as a cloud architect, you are tasked with designing a large distributed application comprising 20 microservices. Each of these microservices must connect to the database backend. Your objective is to ensure the secure storage of credentials for these connections. What is the recommended storage location for the credentials?

Options :

A : In a config file that has restricted access through ACLs

B : In an environment variable

C : In a secret management system

D : In the source code

Answer: C