Free Access Google.Professional-Cloud-Architect.v2022-12-12.q249 Practice Test (Page 21)

Question 96

Your organization wants to control IAM policies for different departments independently, but centrally.
Which approach should you take?

A.Multiple Organizations with multiple Folders

B.Multiple Organizations, one for each department

C.A single Organization with Folder for each department

D.A single Organization with multiple projects, each with a central owner

Question 97

You want to automate the creation of a managed instance group and a startup script to install the OS package dependencies. You want to minimize the startup time for VMs in the instance group.
What should you do?

A.Use Deployment Manager to create the managed instance group and Ansible to install the OS package dependencies.

B.Use Terraform to create the managed instance group and a startup script to install the OS package dependencies.

C.Use Puppet to create the managed instance group and install the OS package dependencies.

D.Create a custom VM image with all OS package dependencies. Use Deployment Manager to create the managed instance group with the VM image.

Question 98

You are running a cluster on Kubernetes Engine to serve a web application. Users are reporting that a
specific part of the application is not responding anymore. You notice that all pods of your deployment
keep restarting after 2 seconds. The application writes logs to standard output. You want to inspect the
logs to find the cause of the issue. Which approach can you take?

A.Review the Stackdriver logs for the specific Kubernetes Engine container that is serving the
unresponsive part of the application.

B.Review the Stackdriver logs for each Compute Engine instance that is serving as a node in the cluster.

C.Connect to the cluster using gcloud credentials and connect to a container in one of the pods to read
the logs.

D.Review the Serial Port logs for each Compute Engine instance that is serving as a node in the cluster.

Question 99

For this question, refer to the Helicopter Racing League (HRL) case study. Recently HRL started a new regional racing league in Cape Town, South Afric a. In an effort to give customers in Cape Town a better user experience, HRL has partnered with the Content Delivery Network provider, Fastly. HRL needs to allow traffic coming from all of the Fastly IP address ranges into their Virtual Private Cloud network (VPC network). You are a member of the HRL security team and you need to configure the update that will allow only the Fastly IP address ranges through the External HTTP(S) load balancer. Which command should you use?

A.glouc compute firewall rules update hlr-policy \
--priority 1000 \
target tags-sourceiplist fastly \
--allow tcp:443

B.gcloud compute security policies rules update 1000 \
--security-policy hlr-policy \
--expression "evaluatePreconfiguredExpr('sourceiplist-fastly')" \
--action " allow"

C.gcloud compute firewall rules update
sourceiplist-fastly \
priority 1000 \
allow tcp: 443

D.gcloud compute priority-policies rules update
1000 \
security policy from fastly
--src- ip-ranges"

Question 100

Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?

A.The effective policy is determined only by the policy set at the node

B.The effective policy is the policy set at the node and restricted by the policies of its ancestors

C.The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors

D.The effective policy is the union of the policy set at the node and policies inherited from its ancestors

Other Version: 1231Google.Professional-Cloud-Architect.v2025-03-22.q201; 961Google.Professional-Cloud-Architect.v2024-10-18.q291; 1242Google.Professional-Cloud-Architect.v2023-10-16.q124; 6139Google.Professional-Cloud-Architect.v2022-08-15.q243; 10278Google.Professional-Cloud-Architect.v2022-04-27.q264; 127Google.Prepawaytest.Professional-Cloud-Architect.v2021-09-17.by.quintion.207q.pdf

Latest Upload: 105OCEG.GRCP.v2025-09-11.q211; 104HP.HPE0-V27.v2025-09-11.q78; 118Oracle.1Z0-1057-23.v2025-09-10.q47; 151Google.Professional-Cloud-Network-Engineer.v2025-09-09.q179; 131SAP.C-S4EWM-2023.v2025-09-08.q83; 165TheSecOpsGroup.CNSP.v2025-09-08.q20; 224CFAInstitute.ESG-Investing.v2025-09-08.q173; 174PECB.ISO-IEC-27001-Lead-Implementer.v2025-09-06.q132; 151Salesforce.Data-Architect.v2025-09-05.q216; 147Adobe.AD0-E605.v2025-09-05.q50

Question 96

Question 97

Question 98

Question 99

Question 100

Download PDF File