Professional Cloud Developer · Free Practice Question Hard
Question 1
Azgomi is a community application that facilitates communication between people in close proximity. It is used for event planning, organizing sporting events, and for businesses to connect with their local communities. Azgomi is expanding globally and is in demand for its unique style of hyper-local community communication and business outreach.
The executive statement is to take the local community services global. Venture capital investors want to see rapid growth and the same great experience for new local and virtual communities. The solution concept is to expand the existing service with updated functionality in new regions and hire and train a new team to support these regions in their time zones. The application must scale smoothly and provide clear uptime data.
Azgomi's existing technical environment is a mix of on-premises hardware and infrastructure running in Google Cloud Platform. Existing APIs run on Compute Engine virtual machine instances hosted in GCP. State is stored in a single instance MySQL database in GCP. Data is exported to an on-premises Teradata/Vertica data warehouse. Data analytics is performed in an on-premises Hadoop environment. The application has no logging, and there are basic indicators of uptime; alerts are frequently fired when the APIs are unresponsive.
Azgomi's investors want to expand their footprint and support the increase in demand. The business requirements are to expand availability of the application to new regions, increase the number of concurrent users that can be supported, ensure a consistent experience for users when they travel to different regions, obtain user activity metrics to better understand how to monetize their product, ensure compliance with regulations in the new regions, reduce infrastructure management time and cost, and adopt the Google-recommended practices for cloud computing.
The technical requirements are that the application and backend must provide usage metrics and monitoring, APIs require strong authentication and authorization, logging must be increased, and data should be stored in a cloud analytics platform. The application should move to serverless architecture to facilitate elastic scaling and provide authorized access to internal apps in a secure manner.
What public API service would be the best fit for Azgomi to use?
- A Cloud Armor
- B Cloud Functions
- C Cloud Endpoints
- D Shielded Virtual Machines
Reveal correct answer
Correct answer: D
Explanation
Azgomi should use Shielded Virtual Machines for their public APIs. Shielded Virtual Machines provides verifiable integrity of the virtual machines' root of trust, ensuring that the VMs are running genuine Google Chrome OS images. This helps to protect against rootkits and bootkits, as well as other firmware and bootloader attacks. Additionally, Shielded Virtual Machines offer secure boot and virtual trusted platform module (vTPM) capabilities, further enhancing the security of the VMs. By using Shielded Virtual Machines, Azgomi can ensure the security and integrity of their public APIs, which is crucial for maintaining the trust of their users and complying with regulations.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
