Important Google Professional Cloud Architect (PR000213) Exam Questions

Answer: B

Explanation:

https://cloud.google.com/kubernetes-engine/docs/concepts/private-cluster-concept#overview

Answer: C

Explanation:

The Avro binary format is the preferred format for loading compressed data. Avro data is faster to load because the data can be read in parallel, even when the data blocks are compressed.

Cloud Storage supports streaming transfers with the gsutil tool or boto library, based on HTTP chunked transfer encoding. Streaming data lets you stream data to and from your Cloud Storage account as soon as it becomes available without requiring that the data be first saved to a separate file. Streaming transfers are useful if you have a process that generates data and you do not want to buffer it locally before uploading it, or if you want to send the result from a computational pipeline directly into Cloud Storage.

https://cloud.google.com/bigquery/docs/loading-data

Answer: C

Explanation:

https://cloud.google.com/blog/products/data-analytics/taking-a-practical-approach-to-bigquery-cost-monitoring

Answer: A

Explanation:

According to Cloud KMS documentation, the HSM protection level allows you to host encryption keys in a FIPS 140-2 Level 3 certified hardware security module managed by Google. This is the 'fully integrated managed service' the requirement asks for.

When you select the HSM protection level, the key material is generated within the HSM and never leaves the hardware boundary in plaintext. This fulfills the compliance mandate for HSM-based key storage while providing the ease of use of the Cloud KMS API. Option C (Cloud EKM) is used when you must keep the keys on-premises, which adds significant network latency and complexity. Option B (CSEK) places the burden of key management and availability on the customer, which is not a 'managed service' for the key lifecycle. Option D is incorrect as it lowers the security posture to a software-based level, violating the HSM storage mandate.

Answer: B