6.4 Assisting with the Support of Deployed Solutions PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11expert · medium

   A company has a recurring incident where a misconfigured firewall rule blocks traffic to a critical service. Each time, the support team identifies the issue and updates the firewall rule. The company wants to implement a long-term solution that reduces the likelihood of recurrence. Which approach is most effective?

   • ARestrict firewall rule changes to a single senior engineer.
   • BSet up an alert that triggers whenever a firewall rule is changed.
   • CImplement infrastructure as code for firewall rules and add automated tests to validate the rules before deployment.
   • DCreate a runbook for support engineers to quickly fix firewall misconfigurations.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a key benefit of sharing knowledge through a centralized knowledge base?

   • AIt reduces the time to resolve issues by allowing team members to find known solutions
   • BIt guarantees that no new issues will occur
   • CIt automatically fixes recurring issues
   • DIt eliminates the need for incident logging
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A support team has resolved a recurring issue where a misconfigured IAM policy caused access denials for a service account. The team wants to prevent this issue from recurring and improve their support process. What should they do?

   • ACreate a script that automatically reverts any IAM changes that cause access denials.
   • BAdd a new monitoring alert that triggers whenever any IAM policy is changed.
   • CRestrict all IAM changes to be made only by senior engineers.
   • DDocument the issue and resolution in a knowledge base and create a runbook for similar IAM misconfigurations.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which Google Cloud service is designed for storing, searching, and analyzing log data from your applications and services?

   • ACloud Trace
   • BCloud Logging
   • CCloud Debugger
   • DCloud Monitoring
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company runs a customer-facing web application on Google Kubernetes Engine (GKE). A sudden increase in 5xx errors is detected by an alerting policy. The on-call engineer triages the incident and determines that the issue is isolated to a specific GKE node pool. The engineer needs to communicate the status to the incident commander and take an initial action to mitigate the impact. What should the engineer do first?

   • ACommunicate the triage findings and mitigation plan to the incident commander, then drain the affected node pool.
   • BDrain the affected node pool and reschedule the workloads to healthy nodes.
   • CImmediately delete the node pool and let GKE recreate it with the same configuration.
   • DOpen a support case with Google Cloud and wait for their recommendation before taking any action.
   Reveal Solution Discussion Select an answer first