ABOUT THE AUTHORDAN SULLIVAN is a software architect specializing in data analytics, machine learning, and cloud computing. He is the author of Google Cloud certification study guides for the Professional Architect, Professional Data Engineer, and Associate Cloud Engineer exams. Dan is also an instructor with LinkedIn Learning, where he develops courses on data science, machine learning, and data management as well as with Udemy where he provides Google Cloud certification preparation courses.

Select Guide Rating

• Introduction xxiiiAssessment Test xxixAnswers to the Assessment Test xxxvChapter 1 Introduction to the Google Professional Cloud Architect Exam 1Exam Objectives 2Analyzing Business Requirements 3Reducing Operational Expenses 3Accelerating the Pace of Development 4Reporting on Service- Level Objectives 5Reducing Time to Recover from an Incident 5Improving Compliance with Industry Regulations 6Analyzing Technical Requirements 8Functional Requirements 8Exam Case Studies 11EHR Healthcare 12Helicopter Racing League 13Mountkirk Games 14TerramEarth 15Summary 16Exam Essentials 16Review Questions 18Chapter 2 Designing Solutions to Meet Business Requirements 23Business Use Cases and Product Strategy 24EHR Healthcare 25Helicopter Racing League 26Mountkirk Games Strategy 26TerramEarth Strategy 27Application Design and Cost Considerations 27Managed Services 28Reduced Levels of Services 30Data Lifecycle Management 32Systems Integration and Data Management 33Systems Integration Business Requirements 33Data Management Business Requirements 36Compliance and Regulation 38Privacy Regulations 38Data Integrity Regulations 39Security 39Confidentiality 40Integrity 40Availability 41Success Measures 41Key Performance Indicators 41Return on Investment 42Summary 43Exam Essentials 43Review Questions 45Chapter 3 Designing Solutions to Meet Technical Requirements 51High Availability 52Compute Availability 54Storage Availability 56Network Availability 60Application Availability 60Scalability 61Scaling Compute Resources 62Scaling Storage Resources 64Network Design for Scalability 64Reliability 65Measuring Reliability 65Reliability Engineering 65Summary 66Exam Essentials 66Review Questions 68Chapter 4 Designing Compute Systems 73Compute Services and Use Cases 74Compute Engine 75App Engine 80Cloud Functions 82Cloud Run 84Kubernetes Engine 84Anthos 90Overview of Anthos 91Anthos Service Mesh 91Anthos Multi Cluster Ingress 92Anthos Deployment Options 92AI and Machine Learning Services 93Vertex AI 94Cloud TPU 94Data Flows and Pipelines 94Cloud Pub/Sub Pipelines 95Cloud Dataflow Pipelines 96Cloud Dataproc 96Cloud Workflows 96Cloud Data Fusion 96Cloud Composer 97Compute System Provisioning 97Additional Design Issues 97Managing State in Distributed Systems 98Synchronous and Asynchronous Operations 99Summary 100Exam Essentials 101Review Questions 102Chapter 5 Designing Storage Systems 107Overview of Storage Services 108Object Storage with Google Cloud Storage 109Organizing Objects in a Namespace 109Cloud Storage FUSE 110Storage Tiers 110Cloud Storage Use Cases 111Network- Attached Storage with Google Cloud Filestore 112Cloud Filestore Service Tiers 112Cloud Filestore Networking 113Cloud Filestore Access Controls 113Databases 113Relational Database Overview 114Cloud SQL 115Cloud Spanner 117Analytical Database: BigQuery 117NoSQL Databases 120Caching with Cloud Memorystore 121Data Retention and Lifecycle Management 122Networking and Latency 123Summary 124Exam Essentials 125Review Questions 127Chapter 6 Designing Networks 131IP Addressing, Firewall Rules, and Routers 133IP Address Structure 133Public vs. Private Addressing 134Firewall Rules 134Cloud Router 135Cloud Armor 135Virtual Private Clouds 136VPC Subnets 136Shared VPC 137VPC Network Peering 137Hybrid- Cloud Networking 138Hybrid- Cloud Design Considerations 138Hybrid- Cloud Implementation Options 139Service- Centric Networking 141Private Service Connect for Google APIs 141Private Service Connect for Google APIs with Consumer Http(s) 142Private Google Access 142Private Google Access for On- Premises Hosts 142Private Service Connect for Published Services 142Private Service Access 142Serverless VPC Access 142Load Balancing 143Regional Load Balancing 143Global Load Balancing 144Additional Network Services 145Service Directory 145Cloud CDN 145Cloud DNS 145Summary 146Exam Essentials 146Review Questions 148Chapter 7 Designing for Security and Legal Compliance 153Identity and Access Management and Related Access Control Services 154Identities and Groups 154Resources 155Permissions 156Roles 156Policies 158Cloud IAM Conditions 160IAM Best Practices 160Identity- Aware Proxy 161Workload Identity Federation 161Organization Constraints 162Data Security 162Encryption 163Key Management 164Cloud Storage Data Access 166Security Evaluation 166Penetration Testing 167Auditing 167Security Design Principles 168Separation of Duties 168Least Privilege 169Defense in Depth 170Major Regulations 171Hipaa/hitech 171General Data Protection Regulation 172Sarbanes- Oxley Act 172Children’s Online Privacy Protection Act 173ITIL Framework 173Summary 174Exam Essentials 174Review Questions 177Chapter 8 Designing for Reliability 181Improving Reliability with Cloud Operations Suite 182Monitoring with Cloud Monitoring 183Alerting with Cloud Monitoring 186Logging with Cloud Logging 187Open Source Observability Tools 188Release Management 188Continuous Delivery 189Continuous Integration 192Systems Reliability Engineering 193Overload 193Cascading Failures 196Testing for Reliability 197Incident Management and Post- Mortem Analysis 198Summary 199Exam Essentials 199Review Questions 201Chapter 9 Analyzing and Defining Technical Processes 205Software Development Lifecycle Plan 206Analysis 206Design 208Continuous Integration/Continuous Delivery 211Business Drivers to Adopt CI/CD 211CI/CD Building Blocks 212Troubleshooting and Post- Mortem Analysis Culture 213Incident Post- Mortems 214Project Post- Mortems 215IT Enterprise Processes 216Business Continuity Planning and Disaster Recovery 217Business Continuity Planning 217Disaster Recovery 218Summary 219Exam Essentials 220Review Questions 222Chapter 10 Analyzing and Defining Business Processes 227Stakeholder Management 228Interests and Influence 228Projects, Programs, and Portfolios 229Stages of Stakeholder Management 230Change Management 231Reasons for Change 231Change Management Methodologies 232Team Skill Management 233Customer Success Management 234Cost Optimization/Resource Optimization 235Summary 236Exam Essentials 236Review Questions 238Chapter 11 Development and Operations 243Application Development Methodologies 244Waterfall 244Spiral 245Agile 246Technical Debt 247API Best Practices 248Resources and Standard Methods 248API Security 249Testing Frameworks 251Testing Framework Models 251Automated Testing Tools 252Data and System Migration Tooling 253Types of Cloud Migrations 253Migration Services and Tools 254Interacting with Google Cloud Programmatically 255Google Cloud SDK 256Google Cloud Shell 256Cloud Emulators 257Summary 257Exam Essentials 257Review Questions 259Chapter 12 Migration Planning 263Integrating Cloud Services with Existing Systems 264Migrating Systems and Data to Support a Solution 266Planning for Systems Migrations 266Planning for Data Migration 268Software Licensing Mapping 269Network Planning 271Virtual Private Clouds 271Network Access Controls 272Scaling 273Connectivity 273Summary 273Exam Essentials 274Review Questions 276Appendix Answers to the Review Questions 279Chapter 1: Introduction to the Google Professional Cloud Architect Exam 280Chapter 2: Designing Solutions to Meet Business Requirements 282Chapter 3: Designing Solutions to Meet Technical Requirements 285Chapter 4: Designing Compute Systems 287Chapter 5: Designing Storage Systems 290Chapter 6: Designing Networks 293Chapter 7: Designing for Security and Legal Compliance 295Chapter 8: Designing for Reliability 297Chapter 9: Analyzing and Defining Technical Processes 298Chapter 10: Analyzing and Defining Business Processes 301Chapter 11: Development and Operations 303Chapter 12: Migration Planning 305Index 309

ABOUT THE AUTHORDAN SULLIVAN is a software architect specializing in data analytics, machine learning, and cloud computing. He is the author of Google Cloud certification study guides for the Professional Architect, Professional Data Engineer, and Associate Cloud Engineer exams. Dan is also an instructor with LinkedIn Learning, where he develops courses on data science, machine learning, and data management as well as with Udemy where he provides Google Cloud certification preparation courses.

Select Guide Rating

• Introduction xxiiiAssessment Test xxixAnswers to the Assessment Test xxxvChapter 1 Introduction to the Google Professional Cloud Architect Exam 1Exam Objectives 2Analyzing Business Requirements 3Reducing Operational Expenses 3Accelerating the Pace of Development 4Reporting on Service- Level Objectives 5Reducing Time to Recover from an Incident 5Improving Compliance with Industry Regulations 6Analyzing Technical Requirements 8Functional Requirements 8Exam Case Studies 11EHR Healthcare 12Helicopter Racing League 13Mountkirk Games 14TerramEarth 15Summary 16Exam Essentials 16Review Questions 18Chapter 2 Designing Solutions to Meet Business Requirements 23Business Use Cases and Product Strategy 24EHR Healthcare 25Helicopter Racing League 26Mountkirk Games Strategy 26TerramEarth Strategy 27Application Design and Cost Considerations 27Managed Services 28Reduced Levels of Services 30Data Lifecycle Management 32Systems Integration and Data Management 33Systems Integration Business Requirements 33Data Management Business Requirements 36Compliance and Regulation 38Privacy Regulations 38Data Integrity Regulations 39Security 39Confidentiality 40Integrity 40Availability 41Success Measures 41Key Performance Indicators 41Return on Investment 42Summary 43Exam Essentials 43Review Questions 45Chapter 3 Designing Solutions to Meet Technical Requirements 51High Availability 52Compute Availability 54Storage Availability 56Network Availability 60Application Availability 60Scalability 61Scaling Compute Resources 62Scaling Storage Resources 64Network Design for Scalability 64Reliability 65Measuring Reliability 65Reliability Engineering 65Summary 66Exam Essentials 66Review Questions 68Chapter 4 Designing Compute Systems 73Compute Services and Use Cases 74Compute Engine 75App Engine 80Cloud Functions 82Cloud Run 84Kubernetes Engine 84Anthos 90Overview of Anthos 91Anthos Service Mesh 91Anthos Multi Cluster Ingress 92Anthos Deployment Options 92AI and Machine Learning Services 93Vertex AI 94Cloud TPU 94Data Flows and Pipelines 94Cloud Pub/Sub Pipelines 95Cloud Dataflow Pipelines 96Cloud Dataproc 96Cloud Workflows 96Cloud Data Fusion 96Cloud Composer 97Compute System Provisioning 97Additional Design Issues 97Managing State in Distributed Systems 98Synchronous and Asynchronous Operations 99Summary 100Exam Essentials 101Review Questions 102Chapter 5 Designing Storage Systems 107Overview of Storage Services 108Object Storage with Google Cloud Storage 109Organizing Objects in a Namespace 109Cloud Storage FUSE 110Storage Tiers 110Cloud Storage Use Cases 111Network- Attached Storage with Google Cloud Filestore 112Cloud Filestore Service Tiers 112Cloud Filestore Networking 113Cloud Filestore Access Controls 113Databases 113Relational Database Overview 114Cloud SQL 115Cloud Spanner 117Analytical Database: BigQuery 117NoSQL Databases 120Caching with Cloud Memorystore 121Data Retention and Lifecycle Management 122Networking and Latency 123Summary 124Exam Essentials 125Review Questions 127Chapter 6 Designing Networks 131IP Addressing, Firewall Rules, and Routers 133IP Address Structure 133Public vs. Private Addressing 134Firewall Rules 134Cloud Router 135Cloud Armor 135Virtual Private Clouds 136VPC Subnets 136Shared VPC 137VPC Network Peering 137Hybrid- Cloud Networking 138Hybrid- Cloud Design Considerations 138Hybrid- Cloud Implementation Options 139Service- Centric Networking 141Private Service Connect for Google APIs 141Private Service Connect for Google APIs with Consumer Http(s) 142Private Google Access 142Private Google Access for On- Premises Hosts 142Private Service Connect for Published Services 142Private Service Access 142Serverless VPC Access 142Load Balancing 143Regional Load Balancing 143Global Load Balancing 144Additional Network Services 145Service Directory 145Cloud CDN 145Cloud DNS 145Summary 146Exam Essentials 146Review Questions 148Chapter 7 Designing for Security and Legal Compliance 153Identity and Access Management and Related Access Control Services 154Identities and Groups 154Resources 155Permissions 156Roles 156Policies 158Cloud IAM Conditions 160IAM Best Practices 160Identity- Aware Proxy 161Workload Identity Federation 161Organization Constraints 162Data Security 162Encryption 163Key Management 164Cloud Storage Data Access 166Security Evaluation 166Penetration Testing 167Auditing 167Security Design Principles 168Separation of Duties 168Least Privilege 169Defense in Depth 170Major Regulations 171Hipaa/hitech 171General Data Protection Regulation 172Sarbanes- Oxley Act 172Children’s Online Privacy Protection Act 173ITIL Framework 173Summary 174Exam Essentials 174Review Questions 177Chapter 8 Designing for Reliability 181Improving Reliability with Cloud Operations Suite 182Monitoring with Cloud Monitoring 183Alerting with Cloud Monitoring 186Logging with Cloud Logging 187Open Source Observability Tools 188Release Management 188Continuous Delivery 189Continuous Integration 192Systems Reliability Engineering 193Overload 193Cascading Failures 196Testing for Reliability 197Incident Management and Post- Mortem Analysis 198Summary 199Exam Essentials 199Review Questions 201Chapter 9 Analyzing and Defining Technical Processes 205Software Development Lifecycle Plan 206Analysis 206Design 208Continuous Integration/Continuous Delivery 211Business Drivers to Adopt CI/CD 211CI/CD Building Blocks 212Troubleshooting and Post- Mortem Analysis Culture 213Incident Post- Mortems 214Project Post- Mortems 215IT Enterprise Processes 216Business Continuity Planning and Disaster Recovery 217Business Continuity Planning 217Disaster Recovery 218Summary 219Exam Essentials 220Review Questions 222Chapter 10 Analyzing and Defining Business Processes 227Stakeholder Management 228Interests and Influence 228Projects, Programs, and Portfolios 229Stages of Stakeholder Management 230Change Management 231Reasons for Change 231Change Management Methodologies 232Team Skill Management 233Customer Success Management 234Cost Optimization/Resource Optimization 235Summary 236Exam Essentials 236Review Questions 238Chapter 11 Development and Operations 243Application Development Methodologies 244Waterfall 244Spiral 245Agile 246Technical Debt 247API Best Practices 248Resources and Standard Methods 248API Security 249Testing Frameworks 251Testing Framework Models 251Automated Testing Tools 252Data and System Migration Tooling 253Types of Cloud Migrations 253Migration Services and Tools 254Interacting with Google Cloud Programmatically 255Google Cloud SDK 256Google Cloud Shell 256Cloud Emulators 257Summary 257Exam Essentials 257Review Questions 259Chapter 12 Migration Planning 263Integrating Cloud Services with Existing Systems 264Migrating Systems and Data to Support a Solution 266Planning for Systems Migrations 266Planning for Data Migration 268Software Licensing Mapping 269Network Planning 271Virtual Private Clouds 271Network Access Controls 272Scaling 273Connectivity 273Summary 273Exam Essentials 274Review Questions 276Appendix Answers to the Review Questions 279Chapter 1: Introduction to the Google Professional Cloud Architect Exam 280Chapter 2: Designing Solutions to Meet Business Requirements 282Chapter 3: Designing Solutions to Meet Technical Requirements 285Chapter 4: Designing Compute Systems 287Chapter 5: Designing Storage Systems 290Chapter 6: Designing Networks 293Chapter 7: Designing for Security and Legal Compliance 295Chapter 8: Designing for Reliability 297Chapter 9: Analyzing and Defining Technical Processes 298Chapter 10: Analyzing and Defining Business Processes 301Chapter 11: Development and Operations 303Chapter 12: Migration Planning 305Index 309

ABOUT THE AUTHORDAN SULLIVAN is a software architect specializing in data analytics, machine learning, and cloud computing. He is the author of Google Cloud certification study guides for the Professional Architect, Professional Data Engineer, and Associate Cloud Engineer exams. Dan is also an instructor with LinkedIn Learning, where he develops courses on data science, machine learning, and data management as well as with Udemy where he provides Google Cloud certification preparation courses.

Select Guide Rating

• Introduction xxiiiAssessment Test xxixAnswers to the Assessment Test xxxvChapter 1 Introduction to the Google Professional Cloud Architect Exam 1Exam Objectives 2Analyzing Business Requirements 3Reducing Operational Expenses 3Accelerating the Pace of Development 4Reporting on Service- Level Objectives 5Reducing Time to Recover from an Incident 5Improving Compliance with Industry Regulations 6Analyzing Technical Requirements 8Functional Requirements 8Exam Case Studies 11EHR Healthcare 12Helicopter Racing League 13Mountkirk Games 14TerramEarth 15Summary 16Exam Essentials 16Review Questions 18Chapter 2 Designing Solutions to Meet Business Requirements 23Business Use Cases and Product Strategy 24EHR Healthcare 25Helicopter Racing League 26Mountkirk Games Strategy 26TerramEarth Strategy 27Application Design and Cost Considerations 27Managed Services 28Reduced Levels of Services 30Data Lifecycle Management 32Systems Integration and Data Management 33Systems Integration Business Requirements 33Data Management Business Requirements 36Compliance and Regulation 38Privacy Regulations 38Data Integrity Regulations 39Security 39Confidentiality 40Integrity 40Availability 41Success Measures 41Key Performance Indicators 41Return on Investment 42Summary 43Exam Essentials 43Review Questions 45Chapter 3 Designing Solutions to Meet Technical Requirements 51High Availability 52Compute Availability 54Storage Availability 56Network Availability 60Application Availability 60Scalability 61Scaling Compute Resources 62Scaling Storage Resources 64Network Design for Scalability 64Reliability 65Measuring Reliability 65Reliability Engineering 65Summary 66Exam Essentials 66Review Questions 68Chapter 4 Designing Compute Systems 73Compute Services and Use Cases 74Compute Engine 75App Engine 80Cloud Functions 82Cloud Run 84Kubernetes Engine 84Anthos 90Overview of Anthos 91Anthos Service Mesh 91Anthos Multi Cluster Ingress 92Anthos Deployment Options 92AI and Machine Learning Services 93Vertex AI 94Cloud TPU 94Data Flows and Pipelines 94Cloud Pub/Sub Pipelines 95Cloud Dataflow Pipelines 96Cloud Dataproc 96Cloud Workflows 96Cloud Data Fusion 96Cloud Composer 97Compute System Provisioning 97Additional Design Issues 97Managing State in Distributed Systems 98Synchronous and Asynchronous Operations 99Summary 100Exam Essentials 101Review Questions 102Chapter 5 Designing Storage Systems 107Overview of Storage Services 108Object Storage with Google Cloud Storage 109Organizing Objects in a Namespace 109Cloud Storage FUSE 110Storage Tiers 110Cloud Storage Use Cases 111Network- Attached Storage with Google Cloud Filestore 112Cloud Filestore Service Tiers 112Cloud Filestore Networking 113Cloud Filestore Access Controls 113Databases 113Relational Database Overview 114Cloud SQL 115Cloud Spanner 117Analytical Database: BigQuery 117NoSQL Databases 120Caching with Cloud Memorystore 121Data Retention and Lifecycle Management 122Networking and Latency 123Summary 124Exam Essentials 125Review Questions 127Chapter 6 Designing Networks 131IP Addressing, Firewall Rules, and Routers 133IP Address Structure 133Public vs. Private Addressing 134Firewall Rules 134Cloud Router 135Cloud Armor 135Virtual Private Clouds 136VPC Subnets 136Shared VPC 137VPC Network Peering 137Hybrid- Cloud Networking 138Hybrid- Cloud Design Considerations 138Hybrid- Cloud Implementation Options 139Service- Centric Networking 141Private Service Connect for Google APIs 141Private Service Connect for Google APIs with Consumer Http(s) 142Private Google Access 142Private Google Access for On- Premises Hosts 142Private Service Connect for Published Services 142Private Service Access 142Serverless VPC Access 142Load Balancing 143Regional Load Balancing 143Global Load Balancing 144Additional Network Services 145Service Directory 145Cloud CDN 145Cloud DNS 145Summary 146Exam Essentials 146Review Questions 148Chapter 7 Designing for Security and Legal Compliance 153Identity and Access Management and Related Access Control Services 154Identities and Groups 154Resources 155Permissions 156Roles 156Policies 158Cloud IAM Conditions 160IAM Best Practices 160Identity- Aware Proxy 161Workload Identity Federation 161Organization Constraints 162Data Security 162Encryption 163Key Management 164Cloud Storage Data Access 166Security Evaluation 166Penetration Testing 167Auditing 167Security Design Principles 168Separation of Duties 168Least Privilege 169Defense in Depth 170Major Regulations 171Hipaa/hitech 171General Data Protection Regulation 172Sarbanes- Oxley Act 172Children’s Online Privacy Protection Act 173ITIL Framework 173Summary 174Exam Essentials 174Review Questions 177Chapter 8 Designing for Reliability 181Improving Reliability with Cloud Operations Suite 182Monitoring with Cloud Monitoring 183Alerting with Cloud Monitoring 186Logging with Cloud Logging 187Open Source Observability Tools 188Release Management 188Continuous Delivery 189Continuous Integration 192Systems Reliability Engineering 193Overload 193Cascading Failures 196Testing for Reliability 197Incident Management and Post- Mortem Analysis 198Summary 199Exam Essentials 199Review Questions 201Chapter 9 Analyzing and Defining Technical Processes 205Software Development Lifecycle Plan 206Analysis 206Design 208Continuous Integration/Continuous Delivery 211Business Drivers to Adopt CI/CD 211CI/CD Building Blocks 212Troubleshooting and Post- Mortem Analysis Culture 213Incident Post- Mortems 214Project Post- Mortems 215IT Enterprise Processes 216Business Continuity Planning and Disaster Recovery 217Business Continuity Planning 217Disaster Recovery 218Summary 219Exam Essentials 220Review Questions 222Chapter 10 Analyzing and Defining Business Processes 227Stakeholder Management 228Interests and Influence 228Projects, Programs, and Portfolios 229Stages of Stakeholder Management 230Change Management 231Reasons for Change 231Change Management Methodologies 232Team Skill Management 233Customer Success Management 234Cost Optimization/Resource Optimization 235Summary 236Exam Essentials 236Review Questions 238Chapter 11 Development and Operations 243Application Development Methodologies 244Waterfall 244Spiral 245Agile 246Technical Debt 247API Best Practices 248Resources and Standard Methods 248API Security 249Testing Frameworks 251Testing Framework Models 251Automated Testing Tools 252Data and System Migration Tooling 253Types of Cloud Migrations 253Migration Services and Tools 254Interacting with Google Cloud Programmatically 255Google Cloud SDK 256Google Cloud Shell 256Cloud Emulators 257Summary 257Exam Essentials 257Review Questions 259Chapter 12 Migration Planning 263Integrating Cloud Services with Existing Systems 264Migrating Systems and Data to Support a Solution 266Planning for Systems Migrations 266Planning for Data Migration 268Software Licensing Mapping 269Network Planning 271Virtual Private Clouds 271Network Access Controls 272Scaling 273Connectivity 273Summary 273Exam Essentials 274Review Questions 276Appendix Answers to the Review Questions 279Chapter 1: Introduction to the Google Professional Cloud Architect Exam 280Chapter 2: Designing Solutions to Meet Business Requirements 282Chapter 3: Designing Solutions to Meet Technical Requirements 285Chapter 4: Designing Compute Systems 287Chapter 5: Designing Storage Systems 290Chapter 6: Designing Networks 293Chapter 7: Designing for Security and Legal Compliance 295Chapter 8: Designing for Reliability 297Chapter 9: Analyzing and Defining Technical Processes 298Chapter 10: Analyzing and Defining Business Processes 301Chapter 11: Development and Operations 303Chapter 12: Migration Planning 305Index 309