Google Cloud Certified - Professional Cloud Architect (PR000213)

For this question, refer to the KnightMotives Automotive case study. KnightMotives is managing supplier data and pricing in a central MySQL database at headquarters (HO). Only personnel at HQ are allowed to change the data. Each local plant stores a copy of the data in their own MySQL database, ++ften using a different database schema or version, Every night a batch job

exports any product or price updates in XML format from the central database at HQ and stores the updated data on a central FTP server. Each local plant must download this XML file and update their local system with the new information. The local data kept by some plants has become inconsistent with the source data due to XML parsing issues. HQ wants to easily verify that all changes are applied correctly at each plant.

For this question, refer to the Cymbal Retail case study. Cymbal plans to migrate their existing on-premises systems to Google Cloud and implement AI-powered virtual agents to handle customer interactions. You need to provision the compute resources that can scale for the AI-powered virtual agents. What should you do?

For this question, refer to the KnightMotives Automotive case study. KnightMotives has developed and deployed a model on Vertex Al that can provide personalized recommendations in the new car configuration application. Customers will receive optional equipment recommendations that best suit their persona. Previous usage data from the car configuration application has been used for model training features. You know from past experience that customer behaviour can change over time. For example, in times of economic certainty and rising stock markets, customers tend to purchase more expensive options. You

want to detect when customer behaviour gradually changes over time so you can adjust the model.

For this question, refer to the Cymbal Retail case study. Cymbal has a centralized project that supports large video files for Gemini Enterprise Agent Platform model training. Standard storage costs have suddenly increased this month, and you need to determine why. What should you do?

For this question, refer to the KnightMotives Automotive case study. KnightMotives has developed a new car configurator application to enhance both the dealer and customer experience. The new application will be deployed on Google Kubernetes Engine (GKE). KnightMotives wants you to replicate the deployment of the application across multiple locations to ensure this critical application is always available over the internet, even during regional outages. What should you do?

For this question, refer to the Cymbal Retail case study. Cymbal's generative AI models require high-performance storage for temporary files generated during model training and inference. These files are ephemeral and frequently accessed and modified. You need to select a storage solution that minimizes latency and cost and maximizes performance for generative AI workloads. What should you do?

For this question, refer to the KnightMotives Automotive case study. KnightMotives management wants to upskill their engineering teams. They want each team to experiment with one specific technology at a time in a sandbox environment in Google Cloud. KnightMotives management also wants to prevent any experimental projects from going into production and creating shadow IT. They want you to design a solution that supports these training objectives and follows Google-recommended practices. What should you do?

For this question, refer to the Cymbal Retail case study. Cymbal wants you to design a cloud-first data storage infrastructure for the product catalog modernization project. You want to ensure efficient data access and high availability for Cymbal's web application and virtual agents while minimizing operational costs. What should you do?

For this question, refer to the Altostrat Media case study. Altostrat stores a large library of media content, including sensitive interviews and documentaries, in Cloud Storage. They are concerned about the confidentiality of this content and want to protect it from unauthorized access. You need to implement a Google-recommended solution that is easy to integrate and provides Altostrat with control and auditability of the encryption keys. What should you do?

You are developing a retail application on Gemini Enterprise Agent Platform that uses a large language model to give customers real-time product recommendations. The app uses text, code, images, audio, and video prompts to communicate with customers. You need to minimize the application's latency to ensure a responsive and delightful user experience. What should you do?

For this question, refer to the Altostrat Media case study. You are part of Altostrat's security team. You want to analyze the security posture in Altostrat Google Cloud environment by using Gemini in Security Command Center.

What should you do?

You are a cloud architect migrating a multiservice, containerized application from an on-premises Kubernetes cluster to Google Cloud. One of the core services communicates using a proprietary TCP protocol. You need to choose a compute platform that preserves the existing Kubernetes-native workflows and meets the technical requirements while significantly reducing the burden of managing the underlying cluster infrastructure. What should you do?

For this question, refer to the Altostrat Media case study. Altostrat is experiencing fluctuating computational demands for its batch processing jobs. These jobs are not time-critical and can tolerate occasional interruptions. You want to optimize cloud costs and address batch processing needs.

What should you do?

You are a cloud architect for a financial services company that is building a new application on Google Kubernetes Engine (GKE). Currently, developers build container images on their workstations and manually push them to Artifact Registry. You need to design a secure CI/CD pipeline that automates the build and deployment process from your company's GitHub repository. The pipeline must ensure that only trusted, verified container images are deployed to the production GKE cluster and that every deployment can be traced back to its source code. What should you do?

For this question, refer to the Altostrat Media case study. Altostrat is concerned about sophisticated, multi-vector Distributed Denial of Service (DDoS) attacks targeting various layers of their infrastructure. DDoS attacks could potentially disrupt video streaming and cause financial losses. You need to mitigate this risk.

What should you do?

You are designing the observability strategy for a new microservices application running on Google Kubernetes Engine (GKE). The application consists of multiple services (e.g., frontend, orders, payments). During load testing, you observe an error in the frontend service's logs, but you cannot find the corresponding logs in the downstream services to investigate the root cause because the logs are not correlated. You need to implement a solution that allows you to follow a single user request across all microservices involved in the transaction. The solution must not require developers to manually add correlation logic to their application code. What should you do?

For this question, refer to the Altostrat Media case study. Altostrat needs to analyze the performance of its media processing pipeline running on Java-based Cloud Run function. You need to select the most effective tool for the task, What should you?

Your product team is building a critical, customer-facing application on Google Cloud. The development team wants to use Spanner for their database to take advantage of its horizontal scalability and low operational overhead. However, the FinOps team is concerned about the direct monthly cost of Spanner and proposed using a self-managed PostgreSQL database on Compute Engine VMs instead. You need to resolve this conflict and ensure the project moves forward with an architecturally sound database choice that balances technical requirements with financial constraints. What should you do?

For this question, refer to the Altostrat Media case study. Altostrat is using Apigee for API management and wants to ensure their APIs are protected from overuse and abuse. You need to implement an Apigee feature to control the total number of API calls for cost management. What should you do?

You are a cloud architect for a global financial services company. Your primary production environment is in a VPC network in Google Cloud. Your company also operates a secondary VPC network in Google Cloud and a separate, smaller analytics workload in another major cloud provider. You need to design a network architecture that provides reliable, high-bandwidth connectivity between all three environments. Your goal is to use Google’s private backbone as much as possible for all intercloud and inter-VPC traffic to ensure low latency and simplify network management. What should you do?

For this question, refer to the Altostrat Media case study. Altostrat's development team is using a microservices architecture for their application. You need to select the most suitable testing approach to ensure that individual microservices function correctly in isolation.

What should you do?

You are a cloud architect for a company that has migrated its on-premises VMware workloads to a Google Cloud VMware Engine. The VMware workloads running in the VMware Engine need to communicate with a set of microservices running in a dedicated Virtual Private Cloud (VPC) network following Google Cloud best practices. You have already established a private services access connection. You need to enable the VMware VMs to access the microservices in the VPC. What should you do?

Your team plans to use Vertex Al to develop and deploy machine learning models for various use cases for fraud detection, product recommendations, and customer churn prediction. You want to enhance the security posture of the Vertex Al and Workbench environment by restricting data exfiltration.

What should you do?

Your team runs a complex risk modeling application on Google Cloud for a financial services company. The application consists of a large, in-memory database that must be available 24/7 and a fleet of VMs that run thousands of independent, fault-tolerant simulation jobs. These simulation jobs are designed to be preemptible and can be restarted without losing significant progress. You need to optimize the cost of the compute resources for this app, maintain the required availability for the database, and ensure the simulation jobs are processed cost-effectively. You want to follow Google-recommended practices. What should you do?

You have an application that uses Vertex Al Feature Store to manage and serve product features for real-time recommendations. You want to monitor the performance and health of the application. You need to understand the overall duration of a request.

What should you do?

You are a cloud architect for a company where multiple autonomous development teams manage their own Google Cloud projects. The finance department has raised concerns about escalating and unpredictable cloud costs. An initial review shows widespread overprovisioning of Compute Engine instances and idle development resources running overnight and on weekends. The teams currently lack visibility into their specific spending and its business impact. You need to implement a strategy to control costs and foster a culture of financial responsibility across the engineering organization. What should you do?

A large healthcare provider's primary electronic health record (EHR) application runs on Compute Engine instances with a Cloud SOL for PostgreSQL database, all located in the us-west1 region. A new regulatory mandate requires you to implement and document a business continuity plan (BCP). This plan must ensure that the EHR application can be fully recovered and operational in a different geographical region with a recovery time objective (RTO) of two hours and a recovery point objective (RPO) of 15 minutes. You need to design a disaster recovery strategy that meets these strict BCP requirements.

What should you do?

You are a cloud architect at a financial institution, and you are automating the migration of various on-premises data to Google Cloud. You need to upload legacy integration files to a Cloud Storage bucket and then load customer record data from those files into a BigQuery table named customer_records. You also need to automate the creation of a new GKE cluster for a containerized application. What should you do?

A financial services company is decommissioning one of its on-premises data centers. As part of this initiative, the company needs to perform a one-time migration of 500 TB of historical transaction archives to a Cloud Storage bucket for long-term retention. The data centers internet egress is 1 Gbps, which is shared with critical business operations. You must complete the secure data transfer within a 60-day window to meet the decommissioning deadline.

What should you do?

You are a cloud architect for a genomics research company. Your team needs to run a critical, time-sensitive data processing job that requires a large cluster of 75 accelerator-optimized VMs. The job must run continuously for a fixed seven-day period, starting in exactly four weeks. Due to the critical and time-sensitive nature of this processing job, you need to ensure the required compute resources are available for the specified period. What should you do?

A retail company's most critical application is its online payment processing system. The business has a requirement that the system must be able to survive a complete zonal outage while minimizing cost. You need a design solution that can handle a zonal failure.

What should you do?

You are deploying a new containerized, internal-facing, three-tier web application on a regional Google Kubernetes Engine (GKE) cluster. The application has predictable traffic, with high usage during business hours and low usage at night. You need to design a network solution that is highly available and automatically scales with demand. You must also ensure the solution is as cost-effective as possible by minimizing resource expenses. What should you do?

A global media company is launching a new web application. The application backend is hosted on Compute Engine in us-centrall and serves both static assets (images, CSS, and JavaScript) and dynamic, user-specific content from a Cloud SQL database in the same region. Early user feedback from Europe and Asia indicates significant page load delays due to slow loading static content. You need to design a solution that minimizes latency for all global users accessing the static content.

What should you do?

Choose 2 answers

You are developing a deep learning model that requires high-performance access to large volumes of media data currently stored in Cloud Storage. Model training will be executed on multiple VM instances with GPUs attached, but your application must interact with the data as if it were on the local file system. You need to minimize complexity and cost.

What should you do?

Your company is expanding its Al-powered operations nationwide and has chosen accelerator-based compute for the Al workloads. The batch image processing workloads are not time-sensitive and can tolerate interruptions. You need to rapidly deploy cost-effective accelerator nodes for these batch tasks, ensuring rapid deployment and data persistence when necessary.

What should you do?

A large, multinational corporation is migrating to Google Cloud. The company has several distinct business units: Finance, Marketing, and Research and Development (R&

Your organization is going to migrate applications to Kubernetes and use managed cloud services to deploy applications. Your team is new to Kubernetes and wants to quickly onboard engineers. You want to reduce operational overhead, so the engineering team can focus on developing consumer requirements instead of maintaining the infrastructure. What should you do?

Your company runs a critical, revenue-generating ecommerce application that is served by a regional managed instance group (MIG) behind an external HTTP(S) Load Balancer. The operations team is currently overwhelmed with low-priority notifications and is starting to ignore alerts. Your team's service level objective (SLO) is to maintain 99.9% availability, which is measured by the ratio of successful requests (2xx status codes) to total requests. You want to minimize noise from non-critical events and ensure that the team is only notified of issues that are actionable and threaten the SLO.

What should you do?

You are creating a migration plan to move your organization’s infrastructure from on-premises to Google Cloud. You want to understand and manage costs effectively after the migration is complete. Which strategies should you include in the migration plan? (Choose two.)

You manage a highly distributed, hybrid- and multi-cloud IT environment, and your developers rely heavily on Prometheus for their workflows. You need a cloud- based, highly scalable, low-maintenance enterprise solution that supports Prometheus Query Language (PromQL) queries, quick metric viewing, and efficient issue diagnosis. What should you do?

Your organization has a significant amount of log data stored in Cloud Logging. The data engineering team is accustomed to using SQL for analysis and wants the ability to create insightful dashboards for visualizing log trends and patterns. You want to follow the recommendations of the Google Cloud Well-Architected Framework to provide a solution for the data engineering team. What should you do?

Your organization uses Google Kubernetes Engine (GKE) and Amazon Elastic Kubernetes Service (EKS) to manage a complex Kubernetes environment across multiple cloud providers. You need to deploy a solution that streamlines configuration management, enforces security policies, and ensures consistent application deployment across all of the environments. You want to follow Google-recommended practices. What should you do?

Your company is building containerized applications as part of their CI/CD pipeline. To improve the security and maintainability of the build process, you need to:

• Identify potential vulnerabilities within your container images.

• Generate verifiable metadata about the builds for auditing and compliance.

• Create a comprehensive inventory of your application’s dependencies

What should you do?

Your company is rapidly deploying containerized microservices on Google Kubernetes Engine (GKE) using a robust CI/CD pipeline. Security is a top priority, and you need to implement a comprehensive and efficient strategy to prevent container image vulnerabilities from reaching your GKE production environment. What should you do?

Choose 2 answers

You are deploying a critical application with a stateless, containerized frontend on Cloud Run and a Cloud SQL for PostgreSQL backend. The application experiences unpredictable traffic spikes, and the business requires the ability to immediately roll back a failed deployment to the last known good state. You need to apply a deployment strategy that aligns with Site Reliability Engineering (SRE) principles for both the application code and the database schema updates, while meeting the business's requirements. What should you do?

Your organization is implementing a new cloud-native application on Google Cloud and needs to ensure compliance with the ISO/IEC 27001 framework. You want to leverage Google Cloud's security reports and documentation to support your ISO/IEC 27001 audit process. What should you do?

You are designing the storage architecture for a financial analytics platform. The platform ingests and stores terabytes of transactional data daily, which is used for both real-time fraud detection and long-term historical analysis. Transaction data from the last 30 days must be accessible with very low latency for the fraud detection engine. Data older than 30 days is accessed infrequently for quarterly reports, where retrieval times of a few seconds are acceptable. All data must be retained for five years to meet compliance regulations. You need to design a solution as cost-effective as possible. What should you do?

Your company is a global financial services provider that processes and analyzes a high volume of credit card transactions in real time for fraud detection. Your analytics team must run complex batch queries on the same transaction data for daily reporting. You need to design a data processing solution that can handle both real-time and batch processing of the transaction data while minimizing operational overhead and infrastructure management.

What should you do?

Choose 2 answers

Your organization uses separate Google Cloud projects for shared services, development, testing, and production.

• The shared services project hosts your private CI/CD runners and a central Artifact Registry

• The development, testing, and production projects host the GKE clusters where applications are deployed.

You need to design an architecture that allows the CI/CD runners to connect to the GKE clusters and the clusters to pull images from Artifact Registry, all using private IP addresses. However, direct network traffic between the development, testing, and production environments must be strictly prohibited. What should you do?

Your company uses a custom-built application running on a Compute Engine virtual machine (VM). This application processes real-time sales data and writes it to a zonal Persistent Disk. A recent internal audit requires that you implement a backup and recovery plan to protect against zonal failures. Your company has a strict policy that all backup data must be retained for at least 90 days and stored in a separate project with limited access. You need to implement a fully automated backup solution that meets these requirements with minimal operational overhead.

What should you do?

You are designing the network architecture for a public-facing, containerized web application deployed on Cloud Run. All incoming traffic must be inspected by a Cloud Armor web application firewall (WAF) before reaching the application You plan to use an Application Load Balancer, which will have the Cloud Armor policy attached. You must ensure that all public requests pass through the load balancer and any attempt to access the Cloud Run service directly through its default *.run.app URL is blocked. What should you do?

You are architecting a new application feature for a healthcare provider based in The feature needs to summarize sensitive patient notes that are submitted by clinicians. A critical requirement is that the content of these patient notes must never be processed outside of Qataris borders. You want to use a powerful, pre-trained generative model for the summarization task while strictly adhering to the data residency constraint.

What should you do?

You are designing the architecture for a global social media site on Google Cloud. The site serves dynamic API content, static assets such as CSS. JS. images, and user-uploaded videos for streaming. You need to minimize latency for all content types for users worldwide. What should you do? (Choose two.)

Your ecommerce web application includes many products with pictures and videos. You need to improve the application's page load speed and reduce the latency for customer requests. What should you do?

Choose 2 answers

You are architecting a new application feature for a healthcare provider based in Qatar. The feature needs to summarize sensitive patient notes that are submitted by clinicians. A critical requirement is that the content of these patient notes must never be processed outside of Qatar's borders. You want to use a powerful, pre-trained generative model for the summarization task while strictly adhering to the data residency constraint. What should you do?

You need to build and deploy a containerized web application to Google Cloud. The application is very write-heavy and requires a relational database as its data store. The application needs to be highly available in multiple cloud regions. You want to minimize operational overhead while following Google-recommended practices. What should you do?

A Cloud Run service running your serverless application is unable to connect to an AlloyDB database created with default configurations. You need to troubleshoot and resolve the issue as quickly as possible. What should you do?

Your team is running applications on a Google Kubernetes Engine (GKE) cluster with a private endpoint. You've set up a Cloud Deploy pipeline, but deployments to the GKE cluster are failing. You need to resolve the issue. What should you do?

You are managing a few hundred Ubuntu and Red Hat Enterprise Linux virtual machines running on Google Compute Engine (GCE). You need to patch the operating systems for those VMs periodically in a secure and scalable way. What should you do?

You need to build a continuous delivery pipeline for a containerized application in Google Cloud. You want to run all your tests in the pipeline to improve your application's quality. What should you do?

You are migrating a critical on-premises inventory management application to Google Cloud. The application is a monolith with a traditional relational database, and the immediate business goal is a rapid data center exit. The monolith is exposing an API to other business critical applications.

The long-term vision is to modernize the application into globally distributed, cloud-native services to support the company’s expansion. You need to design the initial cloud architecture to ensure that future modernization causes the least possible disruption to other applications that depend on inventory data. The future modernization might require the API to change structure. What should you do?

You are deploying a critical application with a stateliest containerized frontend on Cloud Run and a Cloud SQL for PostgreSQL backend. The application experiences unpredictable traffic spikes, and the business requires the ability to immediately roll back a failed deployment to the last known good state. You need to apply a deployment strategy that aligns with Site Reliability Engineering (SRE) principles for both the application code and the database schema updates, while meeting the business's requirements.

What should you do?

For this question, refer to the KnightMotives Automotive case study. KnightMotives wants to personalize the dealer experience for its customers and has decided to train its own AI models for personalized recommendations. The company will start collecting personally identifiable information (PII) from its customers to use as part of the models’ training data. KnightMotives wants to ensure maximum security and compliance worldwide. You need to ensure the data is encrypted both at rest and during AI model training without impacting the models’ accuracy. What should you do?