Google Certified Professional - Cloud Architect (GCP) - Professional-Cloud-Architect

Your company has a support ticketing solution that uses App Engine Standard. The project that contains the App Engine application already has a Virtual Private Cloud(VPC) network fully connected to the company's on-premises environment through a Cloud VPN tunnel. You want to enable App Engine application to communicate with a database that is running in the company's on-premises environment. What should you do?

• A. Configure private services access
• B. Configure private Google access for on-premises hosts only
• C. Configure serverless VPC access
• D. Configure private Google access

You are deploying an application to Google Cloud. The application is part of a system. The application in Google Cloud must communicate over a private network with applications in a non-Google Cloud environment. The expected average throughput is 200 kbps. The business requires:
* 99.99% system availability
* cost optimization
You need to design the connectivity between the locations to meet the business requirements. What should you provision?

• A. An HA Cloud VPN gateway connected with two tunnels to an on-premises VPN gateway.
• B. A Classic Cloud VPN gateway connected with two tunnels to an on-premises VPN gateway.
• C. A Classic Cloud VPN gateway connected with one tunnel to an on-premises VPN gateway.
• D. Two HA Cloud VPN gateways connected to two on-premises VPN gateways. Configure each HA Cloud VPN gateway to have two tunnels, each connected to different on-premises VPN gateways.

Your customer is receiving reports that their recently updated Google App Engine application is taking approximately 30 seconds to load for some of their users. This behavior was not reported before the update.
What strategy should you take?

• A. Open a support ticket to ask for network capture and flow data to diagnose the problem, then roll back your application.
• B. Roll back to an earlier known good release, then push the release again at a quieter period to investigate. Then use Stackdriver Trace and logging to diagnose the problem.
• C. Roll back to an earlier known good release initially, then use Stackdriver Trace and logging to diagnose the problem in a development/test/staging environment.
• D. Work with your ISP to diagnose the problem.

Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?

• A. The effective policy is the policy set at the node and restricted by the policies of its ancestors
• B. The effective policy is the union of the policy set at the node and policies inherited from its ancestors
• C. The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors
• D. The effective policy is determined only by the policy set at the node

You need to upgrade the EHR connection to comply with their requirements. The new connection design must support business-critical needs and meet the same network and security policy requirements. What should you do?

• A. Upgrade the bandwidth on the Dedicated Interconnect connection to 100 G.
• B. Add a new Dedicated Interconnect connection.
• C. Add three new Cloud VPN connections.
• D. Add a new Carrier Peering connection.