Google Professional Cloud Database Engineer Question 48
Single answerGoogle Cloud PlatformYour company is designing a new global e-commerce platform that requires a highly available, scalable, and secure database solution. The platform needs to handle millions of transactions per day, distribute data across multiple regions for low-latency access, and ensure encryption at rest and in transit. Which of the following database designs would best meet these requirements?
- A
Use Cloud Spanner with multi-region configurations, enable CMEK (Customer-Managed Encryption Keys), and implement IAM roles for access control.
- B
Deploy a single-instance Cloud SQL database in the primary region with automated backups and SSL/TLS enabled.
- C
Use Firestore in Datastore mode with regional replication enabled and rely on Google's default encryption.
- D
Implement a self-managed MySQL database on Compute Engine VMs with manual replication across regions and use a VPN for encryption.
Show answer and explanation
Correct answer: A
Explanation
Cloud Spanner is purpose-built for global-scale applications that require high availability, scalability, and strong consistency. Its multi-region configurations provide low-latency access for users worldwide, while CMEK and IAM ensure robust security. Other options either lack the necessary scalability and availability or require extensive operational overhead, making them less suitable for the scenario.
- A. Correct.
This option is correct because Cloud Spanner is a fully managed, scalable, and globally distributed database that supports multi-region configurations for high availability and low-latency access. Enabling CMEK ensures encryption is managed by the customer, and IAM provides fine-grained access control.
- B. Incorrect.
This option is incorrect because a single-instance Cloud SQL database in a primary region does not provide the necessary scalability or multi-region availability for a global platform. While backups and SSL/TLS help with recovery and security, they do not address scalability or high availability.
- C. Incorrect.
This option is incorrect because Firestore in Datastore mode is not designed for high-frequency transactional workloads like those in an e-commerce platform. Additionally, while regional replication provides some availability, it does not match the level of scalability and robust multi-region support required.
- D. Incorrect.
This option is incorrect because a self-managed MySQL database on Compute Engine requires significant operational effort, and manual replication across regions may introduce latency and complexities. While a VPN provides encryption, it lacks the comprehensive encryption and management features offered by managed services.