Question 1

Azgomi is a community application that facilitates communication between people in close proximity, used for event planning and organizing sporting events, and for businesses to connect with their local communities. Azgomi's unique style of hyper-local community communication and business outreach is in demand around the world. The executive statement is to expand the number one local community app globally. The solution concept is to expand their existing service in new regions to better serve their global customers, and hire and train a new team to support these regions in their time zones. Azgomi wants to ensure the application scales smoothly and provides clear uptime data, and that they analyze and respond to any issues that occur. Their existing technical environment is a mix of on-premises hardware and infrastructure running in Google Cloud Platform.

Azgomi's investors want to expand their footprint and support the increase in demand they are seeing. They require the application to expand availability to new regions, support 10x as many concurrent users, ensure a consistent experience for users when they travel to different regions, obtain user activity metrics to better monetize their product, ensure compliance with regulations in new regions, reduce infrastructure management time and cost, and adopt Google-recommended practices for cloud computing. The technical requirements include providing secure communications between the on-premises data center and cloud-hosted applications and infrastructure, providing usage metrics and monitoring, requiring authentication and authorization for APIs, implementing faster and more accurate validation of new features, providing actionable information for logging and performance metrics, and scaling to meet user demand.

A recent security audit discovered that Azgomi's database credentials for their Compute Engine-hosted MySQL databases are stored in plain text on persistent disks. Azgomi needs to reduce the risk of these credentials being stolen.

What actions do you suggest for them?

Options :

A : Create a service account and download its key. Use it to authenticate to Cloud KMS for database credentials.

B : Create a service account and use its key to authenticate to Cloud KMS for a decryption key to access the database credentials.

C : Create a service account and give it the roles/iam.serviceAccountUser role. Authenticate using Cloud SQL Proxy while impersonating this account.

D : Grant the roles/secretmanager.secretAccessor role to the Compute Engine service account and use Secret Manager API to store and access the database credentials.

Answer: C

Question 2

Your company is planning to migrate their on-premises Hadoop environment to the cloud. Increasing storage cost and maintenance of data stored in HDFS is a major concern for your company. You also want to make minimal changes to existing data analytics jobs and existing architecture. How should you proceed with the migration?

Options :

A : Migrate your data stored in Hadoop to BigQuery. Change your jobs to source their information from BigQuery instead of the on-premises Hadoop environment.

B : Create Compute Engine instances with HDD instead of SSD to save costs. Then perform a full migration of your existing environment into the new one in Compute Engine instances.

C : Create a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop environment to the new Cloud Dataproc cluster. Move your HDFS data into larger HDD disks to save on storage costs.

D : Create a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop code objects to the new cluster. Move your data to Cloud Storage and leverage the Cloud Dataproc connector to run jobs on that data.

Answer: D

Question 3

The analytics system is currently facing a permission error while executing queries against a BigQuery dataset. The SQL query is executed in batch by passing the contents of a SQL file to the BigQuery CLI, which in turn redirects the output to another process. To resolve this issue, you need to identify the root cause of the permission error and take necessary steps to fix it.

What actions are recommended in this situation?

Options :

A : Create a view in BigQuery from an SQL query and SELECT* from the view in the command-line interface.

B : Grant the service account BigQuery Data Editor and BigQuery Data Viewer roles.

C : Grant the service account BigQuery Data Viewer and BigQuery Job User roles.

D : Create a new dataset in BigQuery, copy the source table to the new dataset, and query the new dataset and table from the command-line interface.

Answer: C

Question 4

You are developing a new web application using Cloud Run and committing code to Cloud Source Repositories. You want to deploy new code in the most efficient way possible. You have already created a Cloud Build YAML file that builds a container and runs the following command: gcloud run deploy. What should you do next?

Options :

A : Create a Pub/Sub topic to be notified when code is pushed to the repository. Create a Pub/Sub trigger that runs the build file when an event is published to the topic

B : Create a build trigger that runs the build file in response to a repository code being pushed to the development branch.

C : Create a build trigger that runs the build file in response to a repository code being pushed to the development branch.

D : Create a Cron job that runs the following command every 24 hours: gcloud builds submit.

Answer: B

Question 5

Working alongside the CI/CD team, you, as a developer, are tasked with identifying and resolving a problem that has arisen with a new feature that your team has recently introduced. The CI/CD team employed HashiCorp Packer to generate a fresh Compute Engine image from your development branch, which proved successful in its creation. However, the image is currently unable to start up and requires investigation by the CI/CD team.

What actions are recommended?

Options :

A : Install Packer on your device, build the Compute Engine image locally, and then run it in your personal Google Cloud project.

B : Verify the Compute Engine OS logs through the serial port and confirm access to the serial port by checking the Cloud Logging logs.

C : Create a new feature branch and request the build team to reconstruct the image.

D : Power off the virtual machine in use, export the disk, and mount it locally to access the boot logs.

Answer: B