Professional Cloud Architect Free Practice Questions — Page 4
Question 22
Company Overview -
Altostrat is a prominent player in the media industry, with an extensive collection of audio and video content that comprises podcasts, interviews, news broadcasts, and documentaries. Their success in delivering premium content to a diverse audience requires a content management system that can keep pace with the dynamic media landscape.
Solution Concept -
Altostrat seeks to modernize its content management and user engagement strategies using Google Cloud's generative AI. They want a platform that empowers customers with personalized recommendations, natural language interactions and seamless self-service support. Simultaneously, they want to drive revenue growth through dynamic pricing targeted marketing, and personalized product suggestions.
The seamless integration of AI-powered tools into the existing Google Cloud environment will enable Altostrat to efficiently manage their vast media library, enhance user experiences, and unlock new revenue streams. Google Cloud's generative AI will solidify their leadership in the media industry.
Existing Technical Environment -
Altostrat’s content management and delivery platform leverages GKE for scalability and high availability, essential for handling their vast media library. Their extensive media library spanning various documents, audio and video formats is stored in Cloud Storage. To gain valuable insights into user behavior, content consumption patterns, and audience demographics, Altostrat leverages BigQuery as their primary data warehouse. Additionally, they use Cloud Run functions for serverless execution of event-driven tasks such as video transcoding metadata extraction, and personalized content recommendations.
While Altostrat has made significant strides in cloud adoption, they also maintain some legacy on-premises systems for specific workflows like content ingestion and archival. These systems are slated for modernization and migration to Google Cloud in the near future. User management and authentication are currently handled through a combination of Google Identity and third-party identity providers. For monitoring and observability, Altostrat relies on a mix of native Google Cloud tools like Cloud Monitoring and open-source solutions like Prometheus, with alerts primarily delivered via email notifications.
Business Requirements -
• Accelerate and enhance the reliability of operational workflows across all environments. [Google Cloud + On-premises]
• Simplify infrastructure management for rapid application deployment.
• Optimize cloud storage costs while maintaining high availability and scalability for media content.
• Enable natural language interaction with the platform with 24/7 user support.
• Automatically generate concise summaries of media content.
• Extract rich metadata from media assets using NLP and computer vision.
• Detect and filter inappropriate content.
• Analyze media content to identify trends and extract insights.
• Inform content strategy and decision making with data.
Technical Requirements -
• Modernize CI/CD for containerized deployments with a centralized management platform.
• Secure, high-performance hybrid cloud connectivity for data ingestion.
• Provide scalable, performant kubernetes environments both on-premises and in the cloud.
• Optimize cloud storage costs for growing media volumes.
• Design AI-powered detection of harmful content.
• Ensure that AI systems are auditable and their decisions can be explained.
• Leverage LLMs and conversational AI for personalized experiences and content virality.
• Develop advanced chatbots with natural language understanding to provide personalized assistance.
• Automated summarization for diverse media.
Executive Statement -
At Altostrat, we are embracing the next frontier of artificial intelligence to revolutionize our content strategy. By harnessing the power of generative AI, we will create an unparalleled user experience by empowering our audience with intelligent toots for content discovery, personalized recommendations, and seamless interaction. Reliability and cost management are our top priorities. This strategic initiative will deepen engagement, foster customer loyalty, and unlock new revenue streams through targeted marketing and tailored content offerings. We see a future where Al-driven innovation is central to our business, leading to greater success for our company and delivering exceptional value to our customers.
For this question, refer to the Altostrat Media case study. Altostrat needs to analyze the performance of its media processing pipeline running on Java-based Cloud Run function. You need to select the most effective tool for the task. What should you do?
A. Query logs in Cloud Logging.
B. Analyze the data via Cloud Profiler.
C. Instrument the code to use Cloud Trace.
D. Inspect data from Snapshot Debugger.
Show Answer
Correct Answer: B
Explanation: Cloud Profiler is designed to analyze runtime performance of Java services, including CPU usage, memory allocation, and latency, with minimal overhead. It is the most effective tool for understanding performance characteristics of a Cloud Run–based Java media processing pipeline. Cloud Logging focuses on events, Cloud Trace on request latency, and Snapshot Debugger on debugging rather than performance profiling.
Question 23
Company Overview -
Altostrat is a prominent player in the media industry, with an extensive collection of audio and video content that comprises podcasts, interviews, news broadcasts, and documentaries. Their success in delivering premium content to a diverse audience requires a content management system that can keep pace with the dynamic media landscape.
Solution Concept -
Altostrat seeks to modernize its content management and user engagement strategies using Google Cloud's generative AI. They want a platform that empowers customers with personalized recommendations, natural language interactions and seamless self-service support. Simultaneously, they want to drive revenue growth through dynamic pricing targeted marketing, and personalized product suggestions.
The seamless integration of AI-powered tools into the existing Google Cloud environment will enable Altostrat to efficiently manage their vast media library, enhance user experiences, and unlock new revenue streams. Google Cloud's generative AI will solidify their leadership in the media industry.
Existing Technical Environment -
Altostrat’s content management and delivery platform leverages GKE for scalability and high availability, essential for handling their vast media library. Their extensive media library spanning various documents, audio and video formats is stored in Cloud Storage. To gain valuable insights into user behavior, content consumption patterns, and audience demographics, Altostrat leverages BigQuery as their primary data warehouse. Additionally, they use Cloud Run functions for serverless execution of event-driven tasks such as video transcoding metadata extraction, and personalized content recommendations.
While Altostrat has made significant strides in cloud adoption, they also maintain some legacy on-premises systems for specific workflows like content ingestion and archival. These systems are slated for modernization and migration to Google Cloud in the near future. User management and authentication are currently handled through a combination of Google Identity and third-party identity providers. For monitoring and observability, Altostrat relies on a mix of native Google Cloud tools like Cloud Monitoring and open-source solutions like Prometheus, with alerts primarily delivered via email notifications.
Business Requirements -
• Accelerate and enhance the reliability of operational workflows across all environments. [Google Cloud + On-premises]
• Simplify infrastructure management for rapid application deployment.
• Optimize cloud storage costs while maintaining high availability and scalability for media content.
• Enable natural language interaction with the platform with 24/7 user support.
• Automatically generate concise summaries of media content.
• Extract rich metadata from media assets using NLP and computer vision.
• Detect and filter inappropriate content.
• Analyze media content to identify trends and extract insights.
• Inform content strategy and decision making with data.
Technical Requirements -
• Modernize CI/CD for containerized deployments with a centralized management platform.
• Secure, high-performance hybrid cloud connectivity for data ingestion.
• Provide scalable, performant kubernetes environments both on-premises and in the cloud.
• Optimize cloud storage costs for growing media volumes.
• Design AI-powered detection of harmful content.
• Ensure that AI systems are auditable and their decisions can be explained.
• Leverage LLMs and conversational AI for personalized experiences and content virality.
• Develop advanced chatbots with natural language understanding to provide personalized assistance.
• Automated summarization for diverse media.
Executive Statement -
At Altostrat, we are embracing the next frontier of artificial intelligence to revolutionize our content strategy. By harnessing the power of generative AI, we will create an unparalleled user experience by empowering our audience with intelligent toots for content discovery, personalized recommendations, and seamless interaction. Reliability and cost management are our top priorities. This strategic initiative will deepen engagement, foster customer loyalty, and unlock new revenue streams through targeted marketing and tailored content offerings. We see a future where Al-driven innovation is central to our business, leading to greater success for our company and delivering exceptional value to our customers.
For this question, refer to the Altostrat Media case study. Altostrat is concerned about sophisticated, multi-vector Distributed Denial of Service (DDoS) attacks targeting various layers of their infrastructure. DDoS attacks could potentially disrupt video streaming and cause financial losses. You need to mitigate this risk. What should you do?
A. Set up VPC Service Controls to restrict access to sensitive resources and prevent data exfiltration.
B. Configure Cloud Next Generation Firewall (NGFW) with custom rules to filter malicious traffic at the network level.
C. Deploy Google Cloud Armor with pre-configured and custom rules for L3/L4 and L7 protection
D. Activate Security Command Center to monitor security posture and detect potential threats.
Show Answer
Correct Answer: C
Explanation: Mitigating sophisticated, multi-vector DDoS attacks requires an active, in-line protection service that operates across network and application layers. Google Cloud Armor provides managed DDoS protection with preconfigured and custom rules for L3/L4 and L7, integrates with Google’s global edge, and is designed to protect services like video streaming from volumetric and application-layer attacks. The other options focus on access control (VPC Service Controls), general firewalling without managed DDoS mitigation (NGFW), or monitoring and detection rather than prevention (Security Command Center).
Question 24
Company Overview -
KnightMotives is a car manufacturer specializing in autonomous, self-driving vehicles, including Battery Electric Vehicles (BEVs), hybrids and traditional internal combustion engine (ICE) vehicles. While KnightMotives has made strides with the in-vehicle experience in their BEV fleet, the hybrid and ICE vehicles have yet to implement these new systems and are viewed poorly by critics and drivers. The lack of modern in-vehicle technology in hybrid and ICE vehicles has resulted in declining sales and customer satisfaction.
KnightMotives wants to modernize the consumer experience across all vehicles within five years Artificial Intelligence offers a unique opportunity to revolutionize the in-vehicle experience, as well as the shopping buying and service/maintenance experience. Investment in this new technology will require a shift in financial priorities on a global scale.
KnightMotives also wants to improve their online ordering system, which is unreliable. Systems for customers to build their vehicle online for acquisition through a dealer are not delivering the data or reliability that dealers need, causing. A strain in the relationship between KnightMotives and dealers. Service technicians and sales staff need better tooling to enhance dealer successes, including built-to-order vehicles.
Solution Concept -
KnightMotives wants to shift from manufacturing cars to creating a complete and compelling “automotive experience.” Then strategy prioritizes delivering a consistent experience across all models, developing AI-powered features, generating new revenue from data monetization, adopting a digital focus to differentiate their brand from competitors, and developing better tools for mechanics and salespeople.
Existing Technical Environment -
KnightMotives's IT is largely on-premises with some applications on major cloud platforms. Their supply chain runs on an outdated mainframe, and Enterprise Resource Planning (ERP) is also outdated, making new promotions and dealer discounts difficult to implement. Dealers have no budget for new equipment. There is fragmentation across vehicles with multiple code bases, and significant technical debt from supporting backwards compatibility. Network connectivity to manufacturing plants and vehicle connectivity in rural areas are challenges.
Business Requirements -
Key business requirements include fostering a personalized relationship with the driver and delivering a cohesive experience across all models. Creating a better build-to-order model will reduce time on the lot and provide transparency for both dealers and customers. Additionally, KnightMotives seeks to monetize corporate data to finance new technology investments, as their current AI infrastructure is obsolete and corporate data remains siloed. Security is a paramount concern due to past data breaches Adherence to European Union (EU) data protection regulations, especially for emerging autonomous platforms, is critical.
KnightMotives plans to make significant investments in fully autonomous driving capabilities, with initial implementation targeting regions with favorable regulatory environments. Prioritizing employee upskilling, attracting top-tier talent, and fostering better communication between business and technical teams are also critical objectives.
Technical Requirements -
• Modernizing the in-vehicle experience includes developing a consistent user experience (UX) that seamlessly integrates AI-powered features across all models, updating in-vehicle hardware and software in legacy models to support new UX features and AI capabilities, and ensuring reliable network connectivity, especially in rural areas, to support real-time AI features and data transmission.
• Network upgrades are necessary to support increased data traffic and improve connectivity between plants and headquarters.
• IT infrastructure modernization requires adopting a hybrid cloud strategy to leverage the benefits of both on-premises and cloud infrastructure, and gradually modernizing or replacing legacy systems to improve efficiency and agility.
• Autonomous vehicle development and testing requires investing in cutting-edge AI and machine learning technologies, building a robust simulation environment, and ensuring compliance with evolving regulations related to autonomous vehicles.
• Data monetization and insights requires implementing a robust data management platform, strict data security and privacy measures, and a scalable AI/ML infrastructure.
• Increased focus on security and risk management involves implementing a comprehensive security framework to protect against cyber threats and data breaches, developing an incident response plan, and providing security awareness training to employees.
• Providing a delightful experience for dealers and customers requires improving the online build-to-order system; developing modern dealer tools to streamline dealer operations, including sales, service, and inventory management; and implementing a comprehensive Customer Relationship Management (CRM) system to track customer interactions personalize experiences, and improve customer satisfaction.
Executive Statement -
KnightMotives is committed to enhancing safety and saving lives by leveraging an extensive body of data — encompassing driving, road conditions, behavioral studies, and crash safety statistics — to create compelling digital experiences for drivers. Our AI consistently outperforms national safety statistics, ensuring the unique and coveted KnightMotives experience is aligned across all our vehicle models.
Michael Knight, KnightMotives CEO
For this question, refer to the KnightMotives Automotive case study. As part of its development of fully autonomous driving vehicles. KnightMotives wants to analyze all vehicle sensor data during test drives. The analysis will enable KnightMotives to improve its software based on insights from this data.
• Different event types, such as parking, overtaking and navigating, need to be analyzed. Each test vehicle and event type has an ID.
• Different categories of sensors, such as cameras, radars, and ultrasonic beams, also need to be analyzed. During each autonomously-initiated event, data from multiple sensors will be captured and sent to Google Cloud where the data will be stored in Bigtable.
During data analysis, you want to be able to retrieve all sensor data of occurrences of the same event type for a specific vehicle within a specific interval of time. You need to design a Bigtable schema that is optimized for read performance. What should you do?
A. Use the sensor category, event ID, and timestamp (in that order) as the row key. Create a column family for each individual sensor and a column qualifier for each vehicle.
B. Use the timestamp, vehicle ID, and event ID (in that order) as the row key. Create a column family per sensor category, and use a column qualifier for each individual sensor within its respective category.
C. Use the vehicle ID, event ID, and timestamp (in that order) as the row key. Create a column family per sensor category, and use a column qualifier for each individual sensor within its respective category.
D. Use the vehicle ID and event ID (in that order) as the row key. Create a column family per sensor category, and use a column qualifier for each individual sensor within its respective category. Utilize the timestamped versions of a cell to distinguish between different moments in time of similar events.
Show Answer
Correct Answer: C
Explanation: Bigtable is optimized for read patterns that align with lexicographically ordered row keys. The query pattern requires retrieving all sensor data for a specific vehicle, for a specific event type, within a time interval. Using the row key order Vehicle ID → Event ID → Timestamp groups all rows for the same vehicle and event together and allows efficient range scans over time. Using column families per sensor category and qualifiers per individual sensor matches Bigtable best practices (few column families, many qualifiers) and enables efficient reads across all sensors for an event.
Question 25
Your company is rapidly deploying containerized microservices on Google Kubernetes Engine (GKE) using a robust CI/CD pipeline. Security is a top priority, and you need to implement a comprehensive and efficient strategy to prevent container image vulnerabilities from reaching your GKE production environment. What should you do? (Choose two.)
A. Review the security reports generated by Artifact Analysis for each container image before deployment to GKE.
B. Incorporate vulnerability scanning before building container images, and use Google-maintained base images for your container deployments.
C. Enable Artifact Analysis for the container images, and stop deployment if critical vulnerabilities are found.
D. Use a custom security policy within your container image that restricts access to specific network ports and resources.
E. Enable Shielded GKE Nodes on the production cluster to automatically block the execution of container images with known vulnerabilities.
Show Answer
Correct Answer: B, C
Explanation: The goal is to prevent vulnerable images from ever reaching GKE production in an automated, scalable way.
C is correct because enabling Artifact Analysis (Container Scanning) and enforcing a CI/CD gate to block deployments with critical vulnerabilities is the primary Google Cloud–native control for stopping vulnerable images before production.
B is also correct because shifting security left—using vulnerability scanning as part of the build process and relying on Google‑maintained base images—significantly reduces the introduction of known CVEs. While scanning is most effective on built images, integrating scanning early in the pipeline and using trusted, frequently patched base images is a recognized best practice for vulnerability prevention.
A is incorrect because manual review does not scale and is not an efficient prevention strategy.
D focuses on runtime/network hardening rather than image vulnerability prevention.
E is incorrect because Shielded GKE Nodes protect against node‑level threats, not container image CVEs.
Question 26
Your company runs a critical, revenue-generating ecommerce application that is served by a regional managed instance group (MIG) behind an external HTTP(S) Load Balancer. The operations team is currently overwhelmed with low-priority notifications and is starting to ignore alerts. Your team's service level objective (SLO) is to maintain 99.9% availability, which is measured by the ratio of successful requests (2xx status codes) to total requests. You want to minimize noise from non-critical events and ensure that the team is only notified of issues that are actionable and threaten the SLO. What should you do?
A. Focus on cause-based alerts, creating alerting policies with thresholds for the Compute Engine instances, including CPU utilization, memory usage, disk I/O, and network traffic.
B. Create log-based alerts for only the WARN and ERROR log entries generated by the application to ensure that no potential issue is missed.
C. Implement an error budget policy based on the availability of the SLO. Create a "page” alert that triggers only when the rate of burn of the error budget predicts a full exhaustion within the next 24 hours.
D. Configure alerts based on predictive metrics. Use the instance count of the MIG as the primary metric to trigger an alert.
Show Answer
Correct Answer: C
Explanation: The goal is to reduce alert noise and notify only on issues that threaten the 99.9% availability SLO, which is defined by successful requests. Error-budget burn rate alerting is an SRE best practice for this scenario because it is symptom-based and directly tied to user impact. A burn-rate alert that predicts full error budget exhaustion within 24 hours pages the team only when the SLO is genuinely at risk and human intervention is required. The other options are noisy or indirect: infrastructure metrics and logs are cause-based and not necessarily correlated with user impact, and MIG instance count changes can be normal and not affect availability.
Question 27
Company Overview -
KnightMotives is a car manufacturer specializing in autonomous, self-driving vehicles, including Battery Electric Vehicles (BEVs), hybrids and traditional internal combustion engine (ICE) vehicles. While KnightMotives has made strides with the in-vehicle experience in their BEV fleet, the hybrid and ICE vehicles have yet to implement these new systems and are viewed poorly by critics and drivers. The lack of modern in-vehicle technology in hybrid and ICE vehicles has resulted in declining sales and customer satisfaction.
KnightMotives wants to modernize the consumer experience across all vehicles within five years Artificial Intelligence offers a unique opportunity to revolutionize the in-vehicle experience, as well as the shopping buying and service/maintenance experience. Investment in this new technology will require a shift in financial priorities on a global scale.
KnightMotives also wants to improve their online ordering system, which is unreliable. Systems for customers to build their vehicle online for acquisition through a dealer are not delivering the data or reliability that dealers need, causing. A strain in the relationship between KnightMotives and dealers. Service technicians and sales staff need better tooling to enhance dealer successes, including built-to-order vehicles.
Solution Concept -
KnightMotives wants to shift from manufacturing cars to creating a complete and compelling “automotive experience.” Then strategy prioritizes delivering a consistent experience across all models, developing AI-powered features, generating new revenue from data monetization, adopting a digital focus to differentiate their brand from competitors, and developing better tools for mechanics and salespeople.
Existing Technical Environment -
KnightMotives's IT is largely on-premises with some applications on major cloud platforms. Their supply chain runs on an outdated mainframe, and Enterprise Resource Planning (ERP) is also outdated, making new promotions and dealer discounts difficult to implement. Dealers have no budget for new equipment. There is fragmentation across vehicles with multiple code bases, and significant technical debt from supporting backwards compatibility. Network connectivity to manufacturing plants and vehicle connectivity in rural areas are challenges.
Business Requirements -
Key business requirements include fostering a personalized relationship with the driver and delivering a cohesive experience across all models. Creating a better build-to-order model will reduce time on the lot and provide transparency for both dealers and customers. Additionally, KnightMotives seeks to monetize corporate data to finance new technology investments, as their current AI infrastructure is obsolete and corporate data remains siloed. Security is a paramount concern due to past data breaches Adherence to European Union (EU) data protection regulations, especially for emerging autonomous platforms, is critical.
KnightMotives plans to make significant investments in fully autonomous driving capabilities, with initial implementation targeting regions with favorable regulatory environments. Prioritizing employee upskilling, attracting top-tier talent, and fostering better communication between business and technical teams are also critical objectives.
Technical Requirements -
• Modernizing the in-vehicle experience includes developing a consistent user experience (UX) that seamlessly integrates AI-powered features across all models, updating in-vehicle hardware and software in legacy models to support new UX features and AI capabilities, and ensuring reliable network connectivity, especially in rural areas, to support real-time AI features and data transmission.
• Network upgrades are necessary to support increased data traffic and improve connectivity between plants and headquarters.
• IT infrastructure modernization requires adopting a hybrid cloud strategy to leverage the benefits of both on-premises and cloud infrastructure, and gradually modernizing or replacing legacy systems to improve efficiency and agility.
• Autonomous vehicle development and testing requires investing in cutting-edge AI and machine learning technologies, building a robust simulation environment, and ensuring compliance with evolving regulations related to autonomous vehicles.
• Data monetization and insights requires implementing a robust data management platform, strict data security and privacy measures, and a scalable AI/ML infrastructure.
• Increased focus on security and risk management involves implementing a comprehensive security framework to protect against cyber threats and data breaches, developing an incident response plan, and providing security awareness training to employees.
• Providing a delightful experience for dealers and customers requires improving the online build-to-order system; developing modern dealer tools to streamline dealer operations, including sales, service, and inventory management; and implementing a comprehensive Customer Relationship Management (CRM) system to track customer interactions personalize experiences, and improve customer satisfaction.
Executive Statement -
KnightMotives is committed to enhancing safety and saving lives by leveraging an extensive body of data — encompassing driving, road conditions, behavioral studies, and crash safety statistics — to create compelling digital experiences for drivers. Our AI consistently outperforms national safety statistics, ensuring the unique and coveted KnightMotives experience is aligned across all our vehicle models.
Michael Knight, KnightMotives CEO
For this question, refer to the KnightMotives Automotive case study. KnightMotives wants to personalize the dealer experience for its customers and has decided to train its own AI models for personalized recommendations. The company will start collecting personally identifiable information (PII) from its customers to use as part of the models’ training data. KnightMotives wants to ensure maximum security and compliance worldwide. You need to ensure the data is encrypted both at rest and during AI model training without impacting the models’ accuracy. What should you do?
A. Store the training data in BigQuery using column-level encryption. Train the model using Confidential GKE Nodes.
B. Store the training data in BigQuery using column-level encryption Train the model on VertexAI notebooks using customer-managed encryption keys.
C. Process all data with Sensitive Data Protection’s de-identification service. Replace any PII with a random string before storing it. Train the model using Confidential GKE Nodes.
D. Process all data with Sensitive Data Protection's de-identification service. Replace any PII with a random string before storing it. Train the model on VertexAI notebooks using customer-managed encryption keys.
Show Answer
Correct Answer: A
Explanation: The requirement is to encrypt PII at rest and during AI model training (encryption in use) without degrading model accuracy. BigQuery column-level encryption protects sensitive PII fields at rest while still enabling analytics and feature preparation. Confidential GKE Nodes use confidential computing to keep data encrypted in memory during processing and training, satisfying the ‘during training’ requirement. De-identification would reduce personalization accuracy, and CMEK on Vertex AI notebooks encrypts storage but does not guarantee encryption in use during training.
Question 28
Company Overview -
KnightMotives is a car manufacturer specializing in autonomous, self-driving vehicles, including Battery Electric Vehicles (BEVs), hybrids and traditional internal combustion engine (ICE) vehicles. While KnightMotives has made strides with the in-vehicle experience in their BEV fleet, the hybrid and ICE vehicles have yet to implement these new systems and are viewed poorly by critics and drivers. The lack of modern in-vehicle technology in hybrid and ICE vehicles has resulted in declining sales and customer satisfaction.
KnightMotives wants to modernize the consumer experience across all vehicles within five years Artificial Intelligence offers a unique opportunity to revolutionize the in-vehicle experience, as well as the shopping buying and service/maintenance experience. Investment in this new technology will require a shift in financial priorities on a global scale.
KnightMotives also wants to improve their online ordering system, which is unreliable. Systems for customers to build their vehicle online for acquisition through a dealer are not delivering the data or reliability that dealers need, causing. A strain in the relationship between KnightMotives and dealers. Service technicians and sales staff need better tooling to enhance dealer successes, including built-to-order vehicles.
Solution Concept -
KnightMotives wants to shift from manufacturing cars to creating a complete and compelling “automotive experience.” Then strategy prioritizes delivering a consistent experience across all models, developing AI-powered features, generating new revenue from data monetization, adopting a digital focus to differentiate their brand from competitors, and developing better tools for mechanics and salespeople.
Existing Technical Environment -
KnightMotives's IT is largely on-premises with some applications on major cloud platforms. Their supply chain runs on an outdated mainframe, and Enterprise Resource Planning (ERP) is also outdated, making new promotions and dealer discounts difficult to implement. Dealers have no budget for new equipment. There is fragmentation across vehicles with multiple code bases, and significant technical debt from supporting backwards compatibility. Network connectivity to manufacturing plants and vehicle connectivity in rural areas are challenges.
Business Requirements -
Key business requirements include fostering a personalized relationship with the driver and delivering a cohesive experience across all models. Creating a better build-to-order model will reduce time on the lot and provide transparency for both dealers and customers. Additionally, KnightMotives seeks to monetize corporate data to finance new technology investments, as their current AI infrastructure is obsolete and corporate data remains siloed. Security is a paramount concern due to past data breaches Adherence to European Union (EU) data protection regulations, especially for emerging autonomous platforms, is critical.
KnightMotives plans to make significant investments in fully autonomous driving capabilities, with initial implementation targeting regions with favorable regulatory environments. Prioritizing employee upskilling, attracting top-tier talent, and fostering better communication between business and technical teams are also critical objectives.
Technical Requirements -
• Modernizing the in-vehicle experience includes developing a consistent user experience (UX) that seamlessly integrates AI-powered features across all models, updating in-vehicle hardware and software in legacy models to support new UX features and AI capabilities, and ensuring reliable network connectivity, especially in rural areas, to support real-time AI features and data transmission.
• Network upgrades are necessary to support increased data traffic and improve connectivity between plants and headquarters.
• IT infrastructure modernization requires adopting a hybrid cloud strategy to leverage the benefits of both on-premises and cloud infrastructure, and gradually modernizing or replacing legacy systems to improve efficiency and agility.
• Autonomous vehicle development and testing requires investing in cutting-edge AI and machine learning technologies, building a robust simulation environment, and ensuring compliance with evolving regulations related to autonomous vehicles.
• Data monetization and insights requires implementing a robust data management platform, strict data security and privacy measures, and a scalable AI/ML infrastructure.
• Increased focus on security and risk management involves implementing a comprehensive security framework to protect against cyber threats and data breaches, developing an incident response plan, and providing security awareness training to employees.
• Providing a delightful experience for dealers and customers requires improving the online build-to-order system; developing modern dealer tools to streamline dealer operations, including sales, service, and inventory management; and implementing a comprehensive Customer Relationship Management (CRM) system to track customer interactions personalize experiences, and improve customer satisfaction.
Executive Statement -
KnightMotives is committed to enhancing safety and saving lives by leveraging an extensive body of data — encompassing driving, road conditions, behavioral studies, and crash safety statistics — to create compelling digital experiences for drivers. Our AI consistently outperforms national safety statistics, ensuring the unique and coveted KnightMotives experience is aligned across all our vehicle models.
Michael Knight, KnightMotives CEO
For this question, refer to the KnightMotives Automotive case study, KnightMotives has deployed their new Dealer Tools on Google Kubernetes Engine (GKE). You are supporting KnightMotives in the performance of the GKE workloads. Some of the Pods are Statefull. To ensure these Pods do not consume an unlimited amount of CPU, you have configured resource limits on the Deployments. You have identified that these Pods were allocated too much CPU and are actually consuming drastically less some of the time. You want to optimize resource usage and allow maximum flexibility in case of higher load. What should you do?
A. Configure resource requests per Deployment. Set resource requests slightly above the typical CPU usage observed during monitoring.
B. Configure resource requests per Deployment. Ensure the requests are equal to the current limits.
C. Enable vertical Pod autoscaling on each Deployment. Ensure the autoscaling mode is set to Auto.
D. Enable horizontal Pod autoscaling on each Deployment. Ensure the minimum number of Pods is lower than the currently configured amount in the Deployment.
Show Answer
Correct Answer: C
Explanation: The problem is overprovisioned CPU on (partly stateful) Pods with highly variable usage, and the goal is to optimize resource usage while allowing maximum flexibility under higher load. Vertical Pod Autoscaler (VPA) in Auto mode continuously adjusts CPU requests (and limits, if configured) based on real usage, directly addressing wasted resources without manual tuning. This is especially appropriate for stateful workloads where HPA is less effective, and it provides adaptive optimization over time. Simply setting static requests (A or B) does not provide flexibility, and HPA (D) scales pod count rather than right-sizing individual Pods.
Question 29
To improve governance and security, your organization has structured the Google Cloud environment using folders for different business units. Each business unit folder has subfolders for development, staging, and production environments, which must comply with internal security controls:
• Production workloads must be protected from direct internet ingress by default unless explicitly tagged.
• The application must be accessible to customers over HTTPS.
You need to design a scalable and enforceable model that blocks internet ingress traffic to the production folders while selectively allowing direct HTTPS traffic to the necessary virtual machines. You must also ensure that individual project teams cannot overwrite these controls once they are implemented for all current and future production projects. What should you do?
A. At each production folder, apply a hierarchical firewall policy to deny all ingress except for HTTPS to tagged VMs.
B. Mandate the application teams to deploy a Terraform module to create VPC firewall rules in each project that deny ingress and allow HTTPS.
C. At the organization root, apply a hierarchical firewall policy to deny all ingress except for HTTPS to tagged VMs.
D. At each production folder, use an organization policy to block all external IPs and require teams to use external HTTPS load balancers.
Show Answer
Correct Answer: A
Explanation: Hierarchical firewall policies applied at the production folder enforce mandatory ingress controls for all current and future projects and cannot be overridden by project teams. A default deny-all ingress rule blocks direct internet access, while an explicit allow rule for HTTPS (port 443) using secure tags selectively permits customer access to only approved VMs. These policies are evaluated before VPC firewall rules, ensuring centralized, scalable, and enforceable governance aligned with the requirements.
Question 30
You are migrating a critical on-premises inventory management application to Google Cloud. The application is a monolith with a traditional relational database, and the immediate business goal is a rapid data center exit. The monolith is exposing an API to other business critical applications.
The long-term vision is to modernize the application into globally distributed, cloud-native services to support the company’s expansion. You need to design the initial cloud architecture to ensure that future modernization causes the least possible disruption to other applications that depend on inventory data. The future modernization might require the API to change structure. What should you do?
A. Use Service Directory to register the monolith's endpoint, allowing dependent applications to look up its address and connect directly.
B. Implement a managed API facade with Apigee to handle all requests from dependent applications on behalf of the monolith’s backend.
C. Use an internal load balancer to provide a stable IP for dependent applications to connect directly to the monolith's native API.
D. Provide dependent applications with direct database access by creating secured SQL VIEWs on Cloud SQL for them to query.
Show Answer
Correct Answer: B
Explanation: A managed API facade decouples dependent applications from the monolith’s internal API. Using Apigee provides a stable contract, security, and routing layer so backend implementations can change during future modernization with minimal disruption to consumers. The other options tightly couple clients to the monolith’s endpoint or database, making future API changes more disruptive.
Question 31
You are planning to migrate your on-premises compute and SAP workloads to Google Cloud. You want to follow Google-recommended practices to quickly create a cost estimate for running these workloads in Google Cloud. What should you do?
A. Leverage Cloud Asset Inventory to gather data and generate a cost estimate.
B. Use the Google Cloud pricing calculator, and input the estimated resource to generate a cost estimate.
C. Engage with a Google Cloud partner to perform a comprehensive assessment and provide a customized cost estimate.
D. Gather data about your current environment, and leverage Google Cloud Migration Center to generate a cost estimate.
Show Answer
Correct Answer: D
Explanation: Google‑recommended practice for quickly estimating migration costs is to use Google Cloud Migration Center. By gathering data from the current on‑premises environment, Migration Center provides automated discovery and built‑in cost estimation, including support for complex workloads like SAP. This is faster and more aligned with Google guidance than manually using the pricing calculator or other tools.
$19
Get all 305 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.