Free Access Google.Professional-Cloud-Architect.v2025-03-22.q201 Practice Test (Page 22)

Question 101

For this question, refer to the Dress4Win case study. You are responsible for the security of data stored in Cloud Storage for your company, Dress4Win. You have already created a set of Google Groups and assigned the appropriate users to those groups. You should use Google best practices and implement the simplest design to meet the requirements.
Considering Dress4Win's business and technical requirements, what should you do?

A.Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.
Encrypt data with a customer-supplied encryption key when storing files in Cloud Storage.

B.Assign custom IAM roles to the Google Groups you created in order to enforce security requirements.
Enable default storage encryption before storing files in Cloud Storage.

C.Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements.
Utilize Google's default encryption at rest when storing files in Cloud Storage.

D.Assign predefined IAM roles to the Google Groups you created in order to enforce security requirements. Ensure that the default Cloud KMS key is set before storing files in Cloud Storage.

Question 102

You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address.
You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly.
What should you do?

A.Ensure that a firewall rules exists to allow source traffic on HTTP/HTTPS to reach the load balancer.

B.Assign a public IP to each instance and configure a firewall rule to allow the load balancer to reach the instance public IP.

C.Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the instance group.

D.Create a tag on each instance with the name of the load balancer. Configure a firewall rule with the name of the load balancer as the source and the instance tag as the destination.

Question 103

Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?

A.The effective policy is determined only by the policy set at the node

B.The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors

C.The effective policy is the policy set at the node and restricted by the policies of its ancestors

D.The effective policy is the union of the policy set at the node and policies inherited from its ancestors

Question 104

Your architecture calls for the centralized collection of all admin activity and VM system logs within your project.
How should you collect these logs from both VMs and services?

A.All admin and VM system logs are automatically collected by Stackdriver.

B.Stackdriver automatically collects admin activity logs for most services. The Stackdriver Logging agent must be installed on each instance to collect system logs.

C.Launch a custom syslogd compute instance and configure your GCP project and VMs to forward all logs to it.

D.Install the Stackdriver Logging agent on a single compute instance and let it collect all audit and access logs for your environment.

Question 105

Your company pushes batches of sensitive transaction data from its application server VMs to Cloud Pub/Sub for processing and storage. What is the Google-recommended way for your application to authenticate to the required Google Cloud services?

A.Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.

B.Generate an OAuth2 access token for accessing Cloud Pub/Sub, encrypt it, and store it in Cloud Storage for access from each VM.

C.Ensure that VM service accounts do not have access to Cloud Pub/Sub, and use VM access scopes to grant the appropriate Cloud Pub/Sub IAM roles.

D.Create a gateway to Cloud Pub/Sub using a Cloud Function, and grant the Cloud Function service account the appropriate Cloud Pub/Sub IAM roles.

Other Version: 3472Google.Professional-Cloud-Architect.v2024-10-18.q291; 2295Google.Professional-Cloud-Architect.v2023-10-16.q124; 4858Google.Professional-Cloud-Architect.v2022-12-12.q249; 7925Google.Professional-Cloud-Architect.v2022-08-15.q243; 12020Google.Professional-Cloud-Architect.v2022-04-27.q264; 127Google.Prepawaytest.Professional-Cloud-Architect.v2021-09-17.by.quintion.207q.pdf

Latest Upload: 265Snowflake.DEA-C01.v2026-09-04.q215; 188HP.HPE0-V27.v2026-09-04.q127; 207NAHQ.CPHQ.v2026-09-03.q481; 119SAP.C-S4CPB-2602.v2026-09-02.q7; 129Cisco.700-805.v2026-09-02.q86; 164MSSC.CLT-4.0.v2026-09-02.q43; 132Fitness.NCSF-CPT.v2026-09-02.q18; 203Google.Generative-AI-Leader.v2026-09-02.q77; 149PECB.ISO-14001-Lead-Auditor.v2026-09-01.q39; 136Google.GCP-DE.v2026-09-01.q27

Question 101

Question 102

Question 103

Question 104

Question 105

Download PDF File