Free Access Google.Professional-Cloud-Architect.v2022-08-15.q243 Practice Test (Page 30)

Question 141

For this question, refer to the JencoMart case study.
The JencoMart security team requires that all Google Cloud Platform infrastructure is deployed using a least privilege model with separation of duties for administration between production and development resources. What Google domain and project structure should you recommend?

A.Create two G Suite accounts to manage users: one for development/test/staging and one for production. Each account should contain one project for every application.

B.Create two G Suite accounts to manage users: one with a single project for all development applications and one with a single project for all production applications.

C.Create a single G Suite account to manage users with each stage of each application in its own project.

D.Create a single G Suite account to manage users with one project for the development/test/staging environment and one project for the production environment.

Question 142

You have an application deployed on Google Kubernetes Engine using a Deployment named echo-deployment.
The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application. What should you do?

A.Use kubectl set image deployment/echo-deployment <new-image>

B.Use the rolling update functionality of the Instance Group behind the Kubernetes cluster

C.Update the deployment yaml file with the new container image. Use kubectl delete deployment/ echo-deployment and kubectl create -f <yaml-file>

D.Update the service yaml file which the new container image. Use kubectl delete service/echo- service and kubectl create -f <yaml-file>

Question 143

For this question, refer to the TerramEarth case study. To be compliant with European GDPR regulation, TerramEarth is required to delete data generated from its European customers after a period of 36 months when it contains personal data. In the new architecture, this data will be stored in both Cloud Storage and BigQuery. What should you do?

A.Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36 months.

B.Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action when with an Age condition of 36 months.

C.Create a BigQuery time-partitioned table for the European data, and set the partition expiration period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action with an Age condition of
36 months.

D.Create a BigQuery time-partitioned table for the European data, and set the partition expiration period to 36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36 months.

Question 144

Mountkirk Games needs to create a repeatable and configurable mechanism for deploying isolated
application environments. Developers and testers can access each other's environments and resources,
but they cannot access staging or production resources. The staging environment needs access to some
services from production.
What should you do to isolate development environments from staging and production?

A.Create a project for development and test and another for staging and production

B.Create a network for development and test and another for staging and production

C.Create one subnetwork for development and another for staging and production

D.Create one project for development, a second for staging and a third for production

Question 145

Your development team has created a structured API to retrieve vehicle data. They want to allow third parties to develop tools for dealerships that use this vehicle event data. You want to support delegated authorization against this data.
What should you do?

A.Build or leverage an OAuth-compatible access control system

B.Build SAML 2.0 SSO compatibility into your authentication system

C.Restrict data access based on the source IP address of the partner systems

D.Create secondary credentials for each dealer that can be given to the trusted third party

Other Version: 1232Google.Professional-Cloud-Architect.v2025-03-22.q201; 961Google.Professional-Cloud-Architect.v2024-10-18.q291; 1242Google.Professional-Cloud-Architect.v2023-10-16.q124; 2950Google.Professional-Cloud-Architect.v2022-12-12.q249; 10286Google.Professional-Cloud-Architect.v2022-04-27.q264; 127Google.Prepawaytest.Professional-Cloud-Architect.v2021-09-17.by.quintion.207q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 153Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 166TheSecOpsGroup.CNSP.v2025-09-08.q20; 229CFAInstitute.ESG-Investing.v2025-09-08.q173; 176PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 152Salesforce.Data-Architect.v2025-09-05.q216; 148Adobe.AD0-E605.v2025-09-05.q50

Question 141

Question 142

Question 143

Question 144

Question 145

Download PDF File