Ngân hàng đề — Google Professional Cloud Architect

For this question, refer to the KnightMotives Automotive case study.

https://services.google.com/fh/files/misc/v6.1_pca_knightmotives_automotive_case_study_english.pdf

KnightMotives employees—including developers, data scientists, and dealer support staff—are transitioning to cloud-based systems and AI-driven workflows. Due to recent industry-wide automotive cyberattacks, leadership requires improved security awareness training and stricter access controls. The solution must enforce least privilege, reduce credential misuse, and integrate with a centralized incident response strategy while supporting a global workforce. What is the most effective Google Cloud–aligned approach to meet these security and risk management objectives?

A financial services company is developing a new cloud-native application on Google Cloud Platform (GCP) that will process financial transactions in real-time. The application is designed using a microservices architecture to ensure scalability, reliability, and ease of maintenance. The company requires each microservice to be independently deployable, with robust inter-service communication, secure access to sensitive data, and a focus on high availability. They also need to minimize latency in communication between services, as transaction processing speed is critical. Which architecture best supports the application’s design requirements?

In your organization, there is an application that operates on multiple Compute Engine instances. The objective is to establish seamless communication between your application and an on-premises service, which demands high throughput, using internal IP addresses. The goal is to minimize latency as much as possible. As a cloud architect, what recommendations should you provide in this scenario?

Your company operates a multi-tier financial application in Google Cloud. The architecture includes frontend servers, middleware processing, and backend databases. Each tier is hosted within a separate Managed Instance Group (MIG), and communication between tiers is strictly directional: frontend servers communicate only with middleware servers, middleware servers communicate only with database servers. Direct communication between frontend servers and database servers must be prevented. How can you configure your network security to meet these requirements efficiently?

You are designing a data processing pipeline on Google Cloud to handle large-scale batch jobs for a retail company. The pipeline processes sales data once a day, generates daily reports, and stores them in Cloud Storage. The reports are then processed by a BigQuery analytics system. The batch jobs will run on Google Dataproc, and Cloud Storage will be used to store both raw and processed data. You need to estimate the monthly cost of the solution based on the following usage:

• Dataproc cluster with 5 worker nodes running 4 hours per day.

• 10 TB of data storage in Cloud Storage (Regional storage).

• 5 TB of processed data queried daily in BigQuery.

• Network egress costs to export 1 TB of data monthly to an external service.

Which approach is the most accurate for estimating the monthly cost of this solution?

Your company wants to integrate a conversational AI assistant into its customer support platform. The assistant should use a Google Gemini model for natural language understanding and generation, connect securely to internal APIs, and leverage existing company knowledge bases. As the Cloud Architect, which Google Cloud solution provides the most efficient and scalable way to build and deploy this AI assistant?

For this question, refer to the EHR Healthcare case study.

https://services.google.com/fh/files/misc/v6.1_pca_ehr_healthcare_case_study_english.pdf

EHR Healthcare's data analysis team runs an analytics application to process public health data. The application is currently hosted on-premises but has seen significant growth, leading to performance issues. The team wants to migrate the application to Google Cloud, reduce latency, and ensure security from potential attacks. Additionally, the application must comply with regulations to encrypt data in transit. What should you do?

As a cloud architect, you set up the optimal combination of CPU and memory resources for nodes in a Kubernetes cluster. You want to be notified whenever CPU utilization exceeds 80% for 5 minutes or when memory utilization exceeds 90% for 1 minute. What do you need to specify to receive such notifications?

Your team has created an updated version of an application that is currently hosted on the App Engine Standard environment. You aim to migrate 2% of your users to the new version while minimizing complexity. What course of action would you recommend?

A large retail chain with stores across multiple continents is moving its e-commerce platform to Google Cloud Platform (GCP). The platform must handle high traffic during sales events, ensure zero downtime, and offer a consistent user experience globally. The business requires the application to be highly available, automatically scalable, and capable of handling localized traffic efficiently. Additionally, the platform needs to integrate with legacy systems hosted on-premises for inventory and order management. The company also wants to optimize costs by paying for resources based on demand. Which architecture best meets the company’s requirements?