Hard1 markMultiple Choice
This question is part of a case study — click to read the full scenario(Case 06)

CASE STUDY: RetailMart

Overview: Global e-commerce, 5,000 employees. Legacy monolith on VMware, 20TB Oracle DB on-prem.
Business: Modernize to microservices, 100% uptime during Black Friday (10x traffic), real-time inventory sync, exit data center in 2 years.
Executives:

  • CEO: "Innovate faster to beat online-only competitors."
  • CFO: "End hardware CAPEX. Move to pure OPEX."
  • CTO: "Break monolith safely. Zero downtime during transition."
    Tech: Migrate off Oracle to open-source, containerize, secure hybrid connectivity during transition, automated scaling.
    Constraints: Zero downtime for storefront, heavy reliance on Oracle stored procedures, all hybrid traffic must be private/encrypted.

Which migration approach should you recommend to safely break down the monolith with zero downtime?

GCP PCA · Question 10 · Domain 4: Analyzing and Optimizing Technical and Business Processes

CASE STUDY: RetailMart

Overview: Global e-commerce, 5,000 employees. Legacy monolith on VMware, 20TB Oracle DB on-prem.
Business: Modernize to microservices, 100% uptime during Black Friday (10x traffic), real-time inventory sync, exit data center in 2 years.
Executives:

  • CEO: "Innovate faster to beat online-only competitors."
  • CFO: "End hardware CAPEX. Move to pure OPEX."
  • CTO: "Break monolith safely. Zero downtime during transition."
    Tech: Migrate off Oracle to open-source, containerize, secure hybrid connectivity during transition, automated scaling.
    Constraints: Zero downtime for storefront, heavy reliance on Oracle stored procedures, all hybrid traffic must be private/encrypted.

To support the CEO's goal to "innovate faster," you need to design a secure CI/CD pipeline for the new microservices. Which architecture should you implement?

Answer options:

A.

Use Jenkins on Compute Engine to build images, store them in Cloud Storage, and deploy via bash scripts.

B.

Use Cloud Build to create container images, store them in Artifact Registry, and use Binary Authorization to ensure only signed images are deployed to GKE.

C.

Use Cloud Source Repositories to build images and deploy directly to Cloud Run.

D.

Use GitHub Actions to build images and push them to Docker Hub, then pull from GKE.

How to approach this question

Identify the native GCP services for building (Cloud Build), storing (Artifact Registry), and securing (Binary Authorization) containers.

Full Answer

B.Use Cloud Build to create container images, store them in Artifact Registry, and use Binary Authorization to ensure only signed images are deployed to GKE.✓ Correct
Use Cloud Build to create container images, store them in Artifact Registry, and use Binary Authorization to ensure only signed images are deployed to GKE.
A modern, secure CI/CD pipeline on Google Cloud utilizes Cloud Build for continuous integration, Artifact Registry for secure container image storage and vulnerability scanning, and Binary Authorization to enforce deploy-time security policies (ensuring only images signed by trusted authorities can run on GKE).

Common mistakes

Forgetting Binary Authorization. In enterprise environments, just building and storing isn't enough; you must cryptographically verify images before deployment.

Practice the full GCP Professional Cloud Architect Practice Exam 4

50 questions · hints · full answers · grading

More questions from this exam