Professional Cloud Architect · Free Practice Question Hard
Question 34
A company is planning to deploy a highly scalable and secure cloud infrastructure on Google Cloud Platform (GCP) to support their growing cloud-based product offerings. The infrastructure must be able to handle sudden spikes in demand, provide fast and reliable performance, and meet strict security and compliance requirements. Which of the following options would be the most effective approach to meet these requirements while also optimizing cost?
-
A
Use Google Kubernetes Engine with network security policies and encrypted secrets to host the application, and use Cloud Interconnect to securely connect to on-premises resources.
-
B
Use Compute Engine instances with custom firewall rules and encrypted disks to host the application, and use Cloud VPN to securely connect to on-premises resources.
-
C
Use App Engine Flexible Environment with custom firewall rules and encrypted environment variables to host the application, and use Cloud Armor to protect against network threats.
-
D
Use Cloud Functions with encrypted secrets and environment variables to host the application, and use Cloud Load Balancer with SSL/TLS termination to provide secure access to the application.
Reveal correct answer
Correct answer: A
A.
The scenario described in the question involves deploying a highly scalable and secure cloud infrastructure on Google Cloud Platform that can handle sudden spikes in demand, provide fast and reliable performance, and meet strict security and compliance requirements while also optimizing cost. Google Kubernetes Engine (GKE) is a fully managed container orchestration system that provides automatic scaling, self-healing, and rolling updates. It can handle sudden spikes in demand and provide fast and reliable performance. GKE also integrates well with other GCP services, including Cloud Interconnect, which can be used to securely connect to on-premises resources.
B.
It is a viable approach for hosting applications, but it does not provide the same level of scalability and reliability as GKE. Cloud VPN is also a valid solution for securely connecting to on-premises resources, but Cloud Interconnect provides a more reliable and faster connection.
C.
It is a good solution for hosting web applications that require automatic scaling and self-healing. However, GKE provides more control over the underlying infrastructure, making it a better fit for highly scalable and secure cloud infrastructures.
D.
It is a good solution for deploying event-driven applications that do not require a persistent server. However, it is not suitable for hosting web applications that require a persistent server and automatic scaling. Additionally, Cloud Load Balancer with SSL/TLS termination can provide secure access to the application, but it does not provide the same level of security and compliance as network security policies provided by GKE.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
