2.2 Configuring Individual Storage Systems PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company runs a critical application on Compute Engine that stores data on a zonal persistent disk. They need to protect against accidental deletion or corruption of data. They want a solution that allows them to restore the disk to a specific point in time and is cost-effective. Which approach should they use?

   • AUse a regional persistent disk instead of a zonal disk.
   • BEnable versioning on the disk.
   • CCreate a new disk and copy data to it daily using rsync.
   • DCreate scheduled disk snapshots and retain them for a defined period.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A media processing company runs a batch job on Compute Engine VMs that reads large video files from a Cloud Storage bucket in the same region, processes them, and writes the output back to the same bucket. The job is currently slow due to network latency between the VMs and the bucket. Which action will most effectively reduce the network latency?

   • ACreate a multi-regional bucket in a nearby continent and use a VPN to connect to it.
   • BMount the Cloud Storage bucket using Cloud Storage FUSE on each VM.
   • CDownload the files to a persistent disk on each VM before processing.
   • DUse a regional bucket in the same region as the VMs and ensure the VMs use the internal IP address of the storage service.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A healthcare organization stores sensitive patient data in Cloud Storage buckets. They need to ensure that only specific service accounts from their VPC can access the data, and that data is encrypted at rest. They also want to avoid managing their own encryption keys. Which configuration meets these requirements?

   • ASet the bucket to 'fine-grained' access control and add the service accounts as storage object viewers.
   • BUse a signed URL with a long expiration time and share it with the service accounts.
   • CUse IAM conditions to restrict access to the bucket to the specific service accounts, and enable VPC Service Controls with a perimeter that includes the bucket.
   • DCreate a new bucket with customer-managed encryption keys (CMEK) and assign the service accounts to the bucket.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a key consideration when planning for storage growth in Cloud Storage?

   • AStorage class selection
   • BNumber of buckets
   • CBucket name uniqueness
   • DProject number
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company runs a critical database on a Compute Engine VM with a zonal persistent disk. They need to protect against data loss with a recovery point objective (RPO) of 15 minutes and a recovery time objective (RTO) of 1 hour. They also want to minimize cost. Which backup strategy is most appropriate?

   • ACreate scheduled snapshots of the disk every 15 minutes and retain them for 7 days.
   • BEnable versioning on the disk.
   • CCreate a new disk and copy data to it every 15 minutes using rsync.
   • DUse a regional persistent disk instead of a zonal disk.
   Reveal Solution Discussion Select an answer first