Online Access Free Professional-Cloud-Architect Exam Questions

For this question, refer to the Dress4Win case study. To be legally compliant during an audit, Dress4Win must be able to give insights in all administrative actions that modify the configuration or metadata of resources on Google Cloud.
What should you do?

• A.Enable Cloud Identity-Aware Proxy in all projects, and add the group of Administrators as a member.
• B.Use Stackdriver Monitoring to create a dashboard on the project's activity.
• C.Use Stackdriver Trace to create a trace list analysis.
• D.Use the Activity page in the GCP Console and Stackdriver Logging to provide the required insight.

For this question, refer to the Dress4Win case study.
Dress4Win has configured a new uptime check with Google Stackdriver for several of their legacy services.
The Stackdriver dashboard is not reporting the services as healthy. What should they do?

• A.In the Cloud Platform Console download the list of the uptime servers' IP addresses and create an inbound firewall rule
• B.Configure their legacy web servers to allow requests that contain user-Agent HTTP header when the value matches GoogleStackdriverMonitoring- UptimeChecks (https://cloud.google.com/monitoring)
• C.Configure their load balancer to pass through the User-Agent HTTP header when the value matches GoogleStackdriverMonitoring-UptimeChecks (https://cloud.google.com/monitoring)
• D.Install the Stackdriver agent on all of the legacy web servers.

Your company has a Google Cloud project that uses BigQuery for data warehousing They have a VPN tunnel between the on-premises environment and Google Cloud that is configured with Cloud VPN. The security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing.
What should they do?

• A.Perform the following tasks:
  1) Create a service account.
  2) Give the BigQuery JobUser role and Storage Reader role to the service account.
  3) Remove all other IAM access from the project.
• B.Configure VPC Service Controls and configure Private Google Access.
• C.Configure Private Google Access.
• D.Configure Private Google Access for on-premises only.

An application development team believes their current logging tool will not meet their needs for their new cloud-based product. They want a bettor tool to capture errors and help them analyze their historical log data.
You want to help them find a solution that meets their needs, what should you do?

• A.Send them a list of online resources about logging best practices.
• B.Help them upgrade their current tool to take advantage of any new features.
• C.Help them define their requirements and assess viable logging tools.
• D.Direct them to download and install the Google StackDriver logging agent.

You are designing a mobile chat application. You want to ensure people cannot spoof chat messages, by providing a message were sent by a specific user.
What should you do

• A.Use public key infrastructure (PKI) to encrypt the message client side using the originating user's private key.
• B.Use a trusted certificate authority to enable SSL connectivity between the client application and the server.
• C.Encrypt the message client side using block-based encryption with a shared key.
• D.Tag messages client side with the originating user identifier and the destination user.