6.1 Understanding the Principles and Recommendations of the Operational Excellence Pillar of the Google Cloud Well-Architected Framework PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   Your organization runs a web application on Compute Engine instances in a managed instance group. Traffic spikes are unpredictable, and you want to ensure the application scales automatically without manual intervention. What should you do?

   • AUse the managed instance group autoscaler with a CPU utilization target and configure the instance template to use a custom machine type that can handle higher load.
   • BSet up a cron job on a separate instance that checks CPU utilization every minute and uses the Compute Engine API to add or remove instances as needed.
   • CDeploy the application to multiple zones and use a global load balancer to distribute traffic, so that each instance receives less traffic.
   • DConfigure a Cloud Monitoring alert that notifies the operations team when CPU utilization exceeds 70%, so they can manually add instances.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the main goal of the 'respond' phase in incident management?

   • ATo identify the root cause
   • BTo minimize the impact of the incident
   • CTo document the incident for compliance
   • DTo prevent all future incidents
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a primary benefit of automating incident response?

   • AIt guarantees that no incidents will occur
   • BIt eliminates the need for human operators
   • CIt removes the need for monitoring
   • DIt reduces the time to mitigate common issues
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of setting up alerting policies in Cloud Monitoring?

   • ATo replace the need for manual monitoring
   • BTo automatically fix any issue without human intervention
   • CTo notify operators when a metric crosses a defined threshold
   • DTo store logs for compliance purposes
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   Your company experienced a severe incident that caused a data breach. The post-incident review identified that the root cause was a misconfigured firewall rule that exposed a database to the internet. The review also found that the team did not have a clear process for responding to security incidents. You need to implement improvements to prevent recurrence and improve response. What should you do?

   • AEnable VPC Service Controls to restrict access to the database, and set up a Cloud Monitoring alert for any external access to the database.
   • BUse Infrastructure as Code (IaC) to manage firewall rules, with automated tests that verify no rule exposes a database to the internet, and integrate with a security incident response platform.
   • CImplement a change management process that requires all firewall changes to be approved by the security team, and create a runbook for responding to security incidents.
   • DConduct a security audit of all firewall rules and fix any misconfigurations, then hold a training session for the team on security best practices.
   Reveal Solution Discussion Select an answer first