View Full Google Professional Cloud Architect Exam Dumps and Practice Test Dumps.

 

Question 41

Which Google Cloud service provides centralized management of cryptographic keys?

1. Secret Manager
2. Cloud Key Management Service
3. Cloud Logging
4. Cloud Armor

Correct Answer: 2

Explanation

Cloud Key Management Service (Cloud KMS) allows organizations to create, manage, rotate, and control access to cryptographic keys used to protect data and other resources. It provides centralized key-management capabilities and integrates with various Google Cloud services. Secret Manager is intended for storing sensitive application secrets such as passwords and API keys, while Cloud Logging handles logs and Cloud Armor provides security controls for supported applications. Therefore, Cloud KMS is the appropriate service when an organization needs centralized management of encryption keys and related cryptographic operations.

Question 42

A company wants to deploy a web application without managing servers. The application is packaged as a container and receives unpredictable traffic. Which service is suitable?

1. Cloud Run
2. Compute Engine
3. Cloud SQL
4. Bigtable

Correct Answer: 1

Explanation

Cloud Run is a fully managed platform for running containerized applications without requiring the organization to manage the underlying servers. It can automatically scale the number of running instances according to incoming requests, making it suitable for applications with unpredictable traffic patterns. The service is particularly useful for stateless HTTP workloads and APIs packaged as containers. Compute Engine requires virtual-machine management, Cloud SQL provides managed relational databases, and Bigtable is a NoSQL database. Therefore, Cloud Run is the suitable choice for this scenario.

Question 43

Which Google Cloud service provides a managed relational database compatible with MySQL and PostgreSQL?

1. Bigtable
2. Cloud SQL
3. Firestore
4. BigQuery

Correct Answer: 2

Explanation

Cloud SQL is a fully managed relational database service supporting database engines such as MySQL and PostgreSQL, as well as SQL Server. It handles many administrative tasks including infrastructure provisioning, backups, maintenance, and high-availability configuration options. This makes it useful when applications require a traditional relational database without the organization having to manage database servers directly. Bigtable and Firestore use NoSQL models, while BigQuery is designed primarily for analytical workloads. Therefore, Cloud SQL is the appropriate service for managed MySQL or PostgreSQL workloads.

Question 44

A company wants to restrict access to a Cloud Storage bucket so that only a specific group can read its objects. Which control should be used?

1. IAM permissions
2. Cloud Monitoring
3. Cloud Scheduler
4. Cloud Trace

Correct Answer: 1

Explanation

IAM permissions can control which users, groups, or service accounts are authorized to access Cloud Storage resources. Access can be granted at appropriate resource scopes using roles containing the required permissions. This allows an organization to restrict bucket access according to identities and responsibilities rather than exposing objects broadly. Cloud Monitoring provides observability, Cloud Scheduler executes scheduled tasks, and Cloud Trace helps analyze application latency. Therefore, IAM permissions are the appropriate mechanism for restricting Cloud Storage access to a specific group.

Question 45

Which service can automatically execute code in response to an event without requiring a continuously running server?

1. Cloud Functions
2. Cloud Storage
3. Cloud SQL
4. BigQuery

Correct Answer: 1

Explanation

Cloud Functions provides a serverless environment for executing event-driven code. A function can respond to supported triggers such as HTTP requests or events generated by other Google Cloud services. The platform manages the underlying infrastructure, allowing developers to focus on application logic rather than maintaining servers. Cloud Storage provides object storage, Cloud SQL provides relational databases, and BigQuery provides analytical processing. Therefore, Cloud Functions is the appropriate service when code needs to execute in response to events without operating a continuously managed server.

Question 46

An organization needs to transfer several terabytes of data from an existing Cloud Storage bucket to another supported storage location. Which managed service can help automate this transfer?

1. Cloud Scheduler
2. Storage Transfer Service
3. Cloud Armor
4. Cloud NAT

Correct Answer: 2

Explanation

Storage Transfer Service is designed to transfer large amounts of data between supported storage systems, including certain cloud and on-premises sources. It provides managed transfer capabilities that can help organizations move datasets without developing their own custom data-migration applications. Transfer jobs can be configured according to the source, destination, and transfer requirements. Cloud Scheduler is used for scheduled execution, Cloud Armor provides application protection, and Cloud NAT handles outbound connectivity. Therefore, Storage Transfer Service is the appropriate option for managed large-scale data transfers.

Question 47

Which Google Cloud service provides distributed tracing to help identify latency across application components?

1. Cloud Trace
2. Cloud Storage
3. Cloud DNS
4. Cloud Build

Correct Answer: 1

Explanation

Cloud Trace helps developers and operators understand application latency by providing distributed tracing information across application components. Traces can help identify where time is being spent during requests and can assist in locating performance bottlenecks. This is particularly useful for applications composed of multiple services where a single request may pass through several components. Cloud Storage provides object storage, Cloud DNS provides DNS management, and Cloud Build automates software builds. Therefore, Cloud Trace is the appropriate service for analyzing distributed application latency.

Question 48

A company needs a globally available static IP endpoint for an application whose backends are distributed across multiple regions. Which Google Cloud capability should be considered?

1. Global external Application Load Balancer
2. Cloud NAT
3. Cloud Router
4. VPC firewall rule

Correct Answer: 1

Explanation

A global external Application Load Balancer can provide a global frontend for supported HTTP(S) application workloads while distributing requests among available backends. It can help organizations build highly available applications with backends distributed across regions. This architecture can also support intelligent traffic routing and improve user experience for geographically distributed clients. Cloud NAT provides outbound address translation, Cloud Router manages dynamic routing, and firewall rules control network traffic. Therefore, a global external Application Load Balancer is appropriate for this globally distributed application scenario.

Question 49

Which database is document-oriented and commonly used for mobile and web application development?

1. Cloud Spanner
2. Cloud SQL
3. Firestore
4. BigQuery

Correct Answer: 3

Explanation

Firestore is a managed NoSQL document database designed for application development, particularly mobile and web applications. Data is organized into documents and collections, and the service supports features that can simplify synchronization between applications and backend data. Cloud Spanner and Cloud SQL provide relational database capabilities, while BigQuery is designed for analytical queries over large datasets. Therefore, Firestore is the appropriate database when an application requires a managed document-oriented data model suitable for mobile or web development.

Question 50

A workload requires temporary high-performance storage attached to a virtual machine. Which disk type is generally appropriate for scratch data that does not need to survive VM termination?

1. Persistent Disk
2. Local SSD
3. Cloud Storage
4. Filestore

Correct Answer: 2

Explanation

Local SSD provides high-performance, physically attached storage that is suitable for temporary or scratch data requiring very low latency. Data stored on Local SSD is ephemeral and should not be used as the only location for information that must survive VM termination or other lifecycle events. Persistent Disk provides durable block storage, Cloud Storage provides object storage, and Filestore provides managed file storage. Therefore, Local SSD is appropriate when an application needs temporary high-performance storage and can tolerate the loss of the data.

Question 51

Which Google Cloud service is designed to provide shared file storage using a managed NFS interface?

1. Filestore
2. Bigtable
3. Cloud Storage
4. Pub/Sub

Correct Answer: 1

Explanation

Filestore provides managed file storage that applications can access using the Network File System (NFS) protocol. It is useful for workloads that require a shared filesystem accessible by multiple compute instances. Unlike Cloud Storage, which provides object storage, Filestore presents a filesystem-style interface suitable for applications that expect traditional file semantics. Bigtable is a NoSQL database, while Pub/Sub is a messaging service. Therefore, Filestore is the appropriate choice when applications require managed shared NFS file storage.

Question 52

A company wants to send notifications to multiple independent applications whenever a business event occurs. Which architecture is most suitable?

1. One direct connection from the producer to every application
2. Pub/Sub topic with multiple subscriptions
3. A shared database table polled by every application
4. A single virtual machine running a custom message server

Correct Answer: 2

Explanation

A Pub/Sub topic with multiple subscriptions allows one published event to be delivered independently to multiple consuming applications. Each subscriber can process messages according to its own requirements and pace, creating a loosely coupled event-driven architecture. Direct connections between the producer and every consumer increase coupling, while database polling can introduce unnecessary load and delays. A custom message server also adds operational overhead. Therefore, using a Pub/Sub topic with separate subscriptions is a scalable architecture for distributing business events to multiple applications.

Question 53

Which Google Cloud service is primarily used for analytical queries rather than transactional application processing?

1. BigQuery
2. Cloud SQL
3. Firestore
4. Memorystore

Correct Answer: 1

Explanation

BigQuery is designed primarily for analytical processing and large-scale SQL queries. It can analyze substantial datasets and is optimized for data warehousing and analytics rather than serving as the primary transactional database for typical application workloads. Cloud SQL and Firestore are commonly used for operational application data, while Memorystore provides low-latency in-memory caching. Therefore, BigQuery is the appropriate choice when the primary requirement is analytical querying rather than transactional application processing.

Question 54

A company wants to prevent a VM from being directly reachable from the public internet while still allowing selected outbound connections. What network design should be used?

1. Give the VM an external IP address and allow all traffic
2. Place the VM in a private subnet and use Cloud NAT for outbound access
3. Disable all VPC routing
4. Store the VM’s traffic in Cloud Storage

Correct Answer: 2

Explanation

A VM can be placed in a private subnet without an external IP address, preventing direct inbound access from the public internet. Cloud NAT can then provide outbound internet connectivity for approved use cases such as software updates or access to public APIs. Firewall rules can further restrict allowed traffic. Assigning an external IP would increase direct internet exposure, while disabling routing would prevent useful network communication. Therefore, a private subnet combined with Cloud NAT is an appropriate architecture for private VMs requiring controlled outbound connectivity.

Question 55

Which service should be used when an application needs a managed in-memory cache?

1. Memorystore
2. Cloud Storage
3. Cloud DNS
4. BigQuery

Correct Answer: 1

Explanation

Memorystore provides managed in-memory data stores that applications can use for caching frequently accessed information. Caching can reduce repeated database queries and improve response times for suitable workloads. Because the data is stored in memory, it should generally be treated as temporary or reconstructable rather than the authoritative source of durable business information. Cloud Storage provides object storage, Cloud DNS manages DNS, and BigQuery provides analytical processing. Therefore, Memorystore is the appropriate service when an application requires a managed in-memory cache.

Question 56

An enterprise needs to establish encrypted connectivity between its branch office and Google Cloud over the internet. Which option is appropriate?

1. Cloud VPN
2. Cloud CDN
3. Cloud Storage
4. Cloud Load Balancing

Correct Answer: 1

Explanation

Cloud VPN creates encrypted tunnels between an external network and Google Cloud over the public internet. It is commonly used for hybrid connectivity when an organization needs secure communication without deploying a dedicated physical connection. Cloud CDN is designed for content delivery, Cloud Storage provides object storage, and Cloud Load Balancing distributes application traffic. Therefore, Cloud VPN is the appropriate option for establishing encrypted network connectivity between a branch office and Google Cloud over the internet.

Question 57

Which IAM principle recommends granting users only the permissions they actually need?

1. Defense in depth
2. Least privilege
3. High availability
4. Horizontal scaling

Correct Answer: 2

Explanation

The principle of least privilege requires identities to receive only the permissions necessary to perform their assigned tasks. Applying this principle limits the potential impact of compromised credentials, accidental changes, and unauthorized actions. In Google Cloud, least privilege can be implemented using appropriately scoped IAM roles and carefully controlled service-account permissions. Defense in depth involves multiple security layers, high availability focuses on service continuity, and horizontal scaling addresses capacity. Therefore, least privilege is the principle that directly describes minimizing unnecessary permissions.

Question 58

A company needs to run a scheduled task every night at 2:00 AM. Which service is designed for this purpose?

1. Cloud Scheduler
2. Cloud Monitoring
3. Cloud Trace
4. Cloud Armor

Correct Answer: 1

Explanation

Cloud Scheduler is a managed service for triggering jobs according to a defined schedule. It can invoke supported endpoints and services at specified times or intervals, making it suitable for recurring tasks such as nightly processing, maintenance operations, or scheduled application workflows. Cloud Monitoring focuses on metrics and alerts, Cloud Trace analyzes application latency, and Cloud Armor provides security controls. Therefore, Cloud Scheduler is the appropriate service for a task that must execute automatically at a specific recurring time.

Question 59

A company wants to automatically delete temporary Cloud Storage objects after a defined period. Which feature should be configured?

1. IAM policy
2. Object Lifecycle Management
3. Cloud NAT
4. Cloud Trace

Correct Answer: 2

Explanation

Cloud Storage Object Lifecycle Management allows organizations to define rules that automatically transition or delete objects according to conditions such as age, creation date, or storage characteristics. This is useful for managing temporary files, backups, logs, and other objects whose retention period is known. IAM controls access rather than object lifecycle, Cloud NAT manages outbound network connections, and Cloud Trace provides distributed tracing. Therefore, Object Lifecycle Management is the appropriate feature for automatically deleting temporary objects after a defined period.

Question 60

Which Google Cloud service provides a managed message broker for asynchronous application communication?

1. Pub/Sub
2. Cloud SQL
3. Cloud DNS
4. Filestore

Correct Answer: 1

Explanation

Pub/Sub provides asynchronous messaging that allows independent application components to exchange events and messages without requiring direct, synchronous communication. Publishers send messages to topics, while subscribers receive messages through subscriptions. This architecture supports loose coupling, scalable event processing, and workload buffering. Cloud SQL is a relational database service, Cloud DNS manages domain-name resolution, and Filestore provides shared file storage. Therefore, Pub/Sub is the appropriate managed messaging service for asynchronous communication between application components.