1. Your application needs to provide user inputs through an API tier that then gets routed to the database tier, but you don’t want user inputs to flow directly to the database. How would you restrict this traffic flow?

2. A green-blue deployment

3. Your development team at Acme Corporation needs to create a highly privileged role for users who work with customer data. Where would they create this role?

4. You’re consulting for an IoT company that has hundreds of thousands of IoT sensors that capture readings every two seconds. You’d like to optimize the performance of this database, so you’re looking to identify a more accurate, time-series database solution. What would you use?

5. Memegen just got breached, and the Security Operations team is kicking off their incident response process. They’re investigating a production VM and want to copy the VM as evidence in a secure location so they can conduct their forensics before taking an action. What should they do?

6. All of the following are metrics except which one?

7. Your development team is building a new business-critical application using virtual machines to be deployed in a dedicated production project. As part of this effort, the team is looking to implement a dedicated application testing environment within a development project. After a centrally managed infrastructure team creates the new development project, development team members realize that they cannot access the new environment. What is likely the issue?

8. A carefully designed organization hierarchy enables businesses to do all of the following except:

9. Duty Calls has deployed several applications running on Compute Engine that provide the gaming infrastructure for the computing clusters and storage, their analytics platform, the servers, and the matchmaking system into a well-architected organization hierarchy. They have two teams of developers: a team that focuses primarily on development and testing, and a production support team that needs direct production access to be able to handle production issues in real time. The development team wants to combine all development resources for all applications into one project. Is this an appropriate pattern?

10. You decide to use GCP to host a simple website using Drupal Content Management from Google Cloud Platform Marketplace to run a Google Compute Engine VM instance. You have global ambitions but a limited budget. What feature would you enable to provide a better experience to your global audience?

11. IAM policies are:

12. Your team is running many Apache Spark and Hadoop jobs in their on-premises environment and would like to migrate to the cloud with the least amount of change to their tooling. What should they use?

13. What are organization policies?

14. You’re an architect for Memegen, a global meme generating company, designing a real-time analytics platform that is intended to stream millions of events per second. Their platform needs to dynamically scale up and down, process incoming data on the fly, and process data that arrives late because of slow mobile networks. They also want to run SQL queries to access 10TB of historical data. They’d like to stick to managed services only. What services would you leverage?

15. Your security team wants detailed visibility of all resources in your organization. You use Resource Manager to set yourself up as the organization admin. What Cloud IAM roles should you give to the security team?

16. Security mandates that your data access logs must be tamper-resistant and tamper-evident. What should you do to protect these logs?

17. Your organization wants to centrally manage IAM policies for different departments independently. Which approach should you take?

18. Your software team for Blinding, an internal community designed for tech individuals to communicate anonymously, deployed a new release. Your users are complaining that they can’t stand how long it takes to post updates and vent their frustrations about their employers. What should you do to diagnose where your application is getting held up?

19. You work for a healthcare company that falls under the purview of the HIPAA compliance regulations. They’ve mandated that all logs need to be retained for six years. Your organization has required that these logs should be stored in the most cost-effective manner. What should you do?

20. VPC networks are:

21. BankyBank wants to create an API and manage it on Google Cloud. What service should be used?

22. You are looking to buy a new computer for personal use. You want a powerful enough computer to surf websites and run (mostly gaming) applications. But you realize that you are short on cash. What computer should you buy?

23. Memegen wants to introduce a shopping functionality for their users to connect all of their user purchasing history and activities to their user profiles. They need massive scalability with high performance, atomic transactions, and a highly available document database. What should they use?

24. Which one of the following answers is an example of a functional requirement?

25. The principle of least privilege is focused on: