Your company has a BigQuery data mart that provides analytics information to hundreds of employees. One user of wants to run jobs without interrupting important workloads. This user isn't concerned about the time it takes to run these jobs. You want to fulfill this request while minimizing cost to the company and the effort required on your part.What should you do?

Create a separate project for the user to run jobs.

Ask the user to run the jobs as batch jobs.

Create a separate project for the user to run jobs.

Add the user as a job.user role in the existing project.

Allow the user to run jobs when important workloads are not running.

You want to notify on-call engineers about a service degradation in production while minimizing development time.What should you do?

Use Cloud Function to monitor resources and raise alerts.

Use Cloud Pub/Sub to monitor resources and raise alerts.

Use Stackdriver Error Reporting to capture errors and raise alerts.

Use Stackdriver Monitoring to monitor resources and raise alerts.

You are writing a single-page web application with a user-interface that communicates with a third-party API for content using XMLHttpRequest. The data displayed on the UI by the API results is less critical than other data displayed on the same web page, so it is acceptable for some requests to not have the API data displayed in the UI. However, calls made to the API should not delay rendering of other parts of the user interface. You want your application to perform well when the API response is an error or a timeout.What should you do?

Set the asynchronous option for your requests to the API to false and omit the widget displaying the API results when a timeout or error is encountered.

Set the asynchronous option for your request to the API to true and omit the widget displaying the API results when a timeout or error is encountered.

Catch timeout or error exceptions from the API call and keep trying with exponential backoff until the API response is successful.

Catch timeout or error exceptions from the API call and display the error response in the UI widget.

Your team develops services that run on Google Cloud. You need to build a data processing service and will use Cloud Functions. The data to be processed by the function is sensitive. You need to ensure that invocations can only happen from authorized services and follow Google-recommended best practices for securing functions. What should you do?

Create a service account with the Cloud Functions Invoker role. Use that service account to invoke the function.

Enable Identity-Aware Proxy in your project. Secure function access using its permissions.

Create a service account with the Cloud Functions Viewer role. Use that service account to invoke the function.

Create a service account with the Cloud Functions Invoker role. Use that service account to invoke the function.

Create an OAuth 2.0 client ID for your calling service in the same project as the function you want to secure. Use those credentials to invoke the function.

You are deploying your applications on Compute Engine. One of your Compute Engine instances failed to launch. What should you do? (Choose two.)

Determine whether your file system is corrupted.

Check whether your instance boot disk is completely full.

Determine whether your file system is corrupted.

Access Compute Engine as a different SSH user.

Troubleshoot firewall rules or routes on an instance.

Check whether your instance boot disk is completely full.

Check whether network traffic to or from your instance is being dropped.

Your web application is deployed to the corporate intranet. You need to migrate the web application to Google Cloud. The web application must be available only to company employees and accessible to employees as they travel. You need to ensure the security and accessibility of the web application while minimizing application changes. What should you do?

Configure Identity-Aware Proxy to allow employees to access the application through its public IP address.

Configure the application to check authentication credentials for each HTTP(S) request to the application.

Configure Identity-Aware Proxy to allow employees to access the application through its public IP address.

Configure a Compute Engine instance that requests users to log in to their corporate account. Change the web application DNS to point to the proxy Compute Engine instance. After authenticating, the Compute Engine instance forwards requests to and from the web application.

Configure a Compute Engine instance that requests users to log in to their corporate account. Change the web application DNS to point to the proxy Compute Engine instance. After authenticating, the Compute Engine issues an HTTP redirect to a public IP address hosting the web application.

You have an application that uses an HTTP Cloud Function to process user activity from both desktop browser and mobile application clients. This function will serve as the endpoint for all metric submissions using HTTP POST.Due to legacy restrictions, the function must be mapped to a domain that is separate from the domain requested by users on web or mobile sessions. The domain for the Cloud Function is https://fn.example.com. Desktop and mobile clients use the domain https://www.example.com. You need to add a header to the function's HTTP response so that only those browser and mobile sessions can submit metrics to the Cloud Function. Which response header should you add?

Access-Control-Allow-origin: https://www.example.com

Access-Control-Allow-Origin: https://*.example.com

Access-Control-Allow-Origin: https://fn.example.com

Access-Control-Allow-origin: https://www.example.com

You have an HTTP Cloud Function that is called via POST. Each submission's request body has a flat, unnested JSON structure containing numeric and text data. After the Cloud Function completes, the collected data should be immediately available for ongoing and complex analytics by many users in parallel. How should you persist the submissions?

Persist each POST request's JSON data as an individual file within Cloud Storage, with the file name containing the request identifier.

Directly persist each POST request's JSON data into Datastore.

Transform the POST request's JSON data, and stream it into BigQuery.

Transform the POST request's JSON data, and store it in a regional Cloud SQL cluster.

Persist each POST request's JSON data as an individual file within Cloud Storage, with the file name containing the request identifier.

Your security team is auditing all deployed applications running in Google Kubernetes Engine. After completing the audit, your team discovers that some of the applications send traffic within the cluster in clear text. You need to ensure that all application traffic is encrypted as quickly as possible while minimizing changes to your applications and maintaining support from Google. What should you do?

Use an automated process to request SSL Certificates for your applications from Let's Encrypt and add them to your applications.

Use Network Policies to block traffic between applications.

Install Istio, enable proxy injection on your application namespace, and then enable mTLS.

Define Trusted Network ranges within the application, and configure the applications to allow traffic only from those networks.

Use an automated process to request SSL Certificates for your applications from Let's Encrypt and add them to your applications.

You migrated some of your applications to Google Cloud. You are using a legacy monitoring platform deployed on-premises for both on-premises and cloud-deployed applications. You discover that your notification system is responding slowly to time-critical problems in the cloud applications. What should you do?

Use Cloud Logging and Cloud Monitoring to capture logs, monitor, and send alerts. Send them to your existing platform.

Replace your monitoring platform with Cloud Monitoring.

Install the Cloud Monitoring agent on your Compute Engine instances.

Migrate some traffic back to your old platform. Perform A/B testing on the two platforms concurrently.

Use Cloud Logging and Cloud Monitoring to capture logs, monitor, and send alerts. Send them to your existing platform.

You recently deployed your application in Google Kubernetes Engine, and now need to release a new version of your application. You need the ability to instantly roll back to the previous version in case there are issues with the new version. Which deployment model should you use?

Perform a blue/green deployment, and test your new application after the deployment is. complete.

Perform a rolling deployment, and test your new application after the deployment is complete.

Perform A/B testing, and test your application periodically after the new tests are implemented.

Perform a blue/green deployment, and test your new application after the deployment is. complete.

Perform a canary deployment, and test your new application periodically after the new version is deployed.

You migrated your applications to Google Cloud Platform and kept your existing monitoring platform. You now find that your notification system is too slow for time critical problems.What should you do?

Install the Stackdriver agents on your Compute Engine instances.

Replace your entire monitoring platform with Stackdriver.

Install the Stackdriver agents on your Compute Engine instances.

Use Stackdriver to capture and alert on logs, then ship them to your existing platform.

Migrate some traffic back to your old platform and perform AB testing on the two platforms concurrently.

You are planning to migrate a MySQL database to the managed Cloud SQL database for Google Cloud. You have Compute Engine virtual machine instances that will connect with this Cloud SQL instance. You do not want to whitelist IPs for the Compute Engine instances to be able to access Cloud SQL.What should you do?

Create a role in Cloud SQL that allows access to the database from external instances, and assign the Compute Engine instances to that role.

Enable private IP for the Cloud SQL instance.

Whitelist a project to access Cloud SQL, and add Compute Engine instances in the whitelisted project.

Create a role in Cloud SQL that allows access to the database from external instances, and assign the Compute Engine instances to that role.

Create a CloudSQL instance on one project. Create Compute engine instances in a different project. Create a VPN between these two projects to allow internal access to CloudSQL.

You have deployed an HTTP(s) Load Balancer with the gcloud commands shown below. Health checks to port 80 on the Compute Engine virtual machine instance are failing and no traffic is sent to your instances. You want to resolve the problem.Which commands should you run?

gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS

gcloud compute instances add-access-config ${NAME}-backend-instance-1

gcloud compute instances add-tags ${NAME}-backend-instance-1 --tags http-server

gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS

gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --destination-ranges 130.211.0.0/22,35.191.0.0/16 --direction EGRESS

Your website is deployed on Compute Engine. Your marketing team wants to test conversion rates between 3 different website designs.Which approach should you use?

Deploy the website on App Engine and use traffic splitting.

Deploy the website on App Engine as three separate services.

Deploy the website on Cloud Functions and use traffic splitting.

Deploy the website on Cloud Functions as three separate functions.

You need to copy directory local-scripts and all of its contents from your local workstation to a Compute Engine virtual machine instance.Which command should you use?

gcloud compute scp --project ''my-gcp-project'' --recurse ~/local-scripts/ gcpinstance- name:~/server-scripts/ --zone ''us-east1-b''

gsutil cp --project ''my-gcp-project'' -r ~/local-scripts/ gcp-instance-name:~/ server-scripts/ --zone ''us-east1-b''

gsutil cp --project ''my-gcp-project'' -R ~/local-scripts/ gcp-instance-name:~/ server-scripts/ --zone ''us-east1-b''

gcloud compute scp --project ''my-gcp-project'' --recurse ~/local-scripts/ gcpinstance- name:~/server-scripts/ --zone ''us-east1-b''

gcloud compute mv --project ''my-gcp-project'' --recurse ~/local-scripts/ gcpinstance- name:~/server-scripts/ --zone ''us-east1-b''

You are creating an App Engine application that writes a file to any user's Google Drive.How should the application authenticate to the Google Drive API?

With an OAuth Client ID with delegated domain-wide authority.

With an OAuth Client ID that uses the https://www.googleapis.com/auth/drive.file scope to obtain an access token for each user.

With an OAuth Client ID with delegated domain-wide authority.

With the App Engine service account and https://www.googleapis.com/auth/drive.file scope that generates a signed JWT.

With the App Engine service account with delegated domain-wide authority.

You are creating a Google Kubernetes Engine (GKE) cluster and run this command: The command fails with the error: You want to resolve the issue. What should you do?

Request additional GKE quota is the GCP Console.

Request additional Compute Engine quota in the GCP Console.

Open a support case to request additional GKE quotA.

Decouple services in the cluster, and rewrite new clusters to function with fewer cores.

Your company has a BigQuery dataset named 'Master' that keeps information about employee travel and expenses. This information is organized by employee department. That means employees should only be able to view information for their department. You want to apply a security framework to enforce this requirement with the minimum number of steps.What should you do?

Create a separate dataset for each department. Create a data pipeline for each department to copy appropriate information from the Master dataset to the specific dataset for the department. Give employees the permission to this department-specific dataset.

Create a separate dataset for each department. Create a view with an appropriate WHERE clause to select records from a particular dataset for the specific department. Authorize this view to access records from your Master dataset. Give employees the permission to this department-specific dataset.

Create a separate dataset for each department. Create a data pipeline for each department to copy appropriate information from the Master dataset to the specific dataset for the department. Give employees the permission to this department-specific dataset.

Create a dataset named Master dataset. Create a separate view for each department in the Master dataset. Give employees access to the specific view for their department.

Create a dataset named Master dataset. Create a separate table for each department in the Master dataset. Give employees access to the specific table for their department.

You have an application in production. It is deployed on Compute Engine virtual machine instances controlled by a managed instance group. Traffic is routed to the instances via a HTTP(s) load balancer. Your users are unable to access your application. You want to implement a monitoring technique to alert you when the application is unavailable.Which technique should you choose?

Cloud Load Balancing - heath checks

Managed instance group - heath checks

You are load testing your server application. During the first 30 seconds, you observe that a previously inactive Cloud Storage bucket is now servicing 2000 write requests per second and 7500 read requests per second.Your application is now receiving intermittent 5xx and 429 HTTP responses from the Cloud Storage JSON API as the demand escalates. You want to decrease the failed responses from the Cloud Storage API.What should you do?

Distribute the uploads across a large number of individual storage buckets.

Use the XML API instead of the JSON API for interfacing with Cloud Storage.

Pass the HTTP response codes back to clients that are invoking the uploads from your application.

Limit the upload rate from your application clients so that the dormant bucket's peak request rate is reached more gradually.

Your application is controlled by a managed instance group. You want to share a large read-only data set between all the instances in the managed instance group. You want to ensure that each instance can start quickly and can access the data set via its filesystem with very low latency. You also want to minimize the total cost of the solution.What should you do?

Move the data to a Compute Engine persistent disk, and attach the disk in read-only mode to multiple Compute Engine virtual machine instances.

Move the data to a Cloud Storage bucket, and mount the bucket on the filesystem using Cloud Storage FUSE.

Move the data to a Cloud Storage bucket, and copy the data to the boot disk of the instance via a startup script.

Move the data to a Compute Engine persistent disk, and attach the disk in read-only mode to multiple Compute Engine virtual machine instances.

Move the data to a Compute Engine persistent disk, take a snapshot, create multiple disks from the snapshot, and attach each disk to its own instance.

You are developing an HTTP API hosted on a Compute Engine virtual machine instance that needs to be invoked by multiple clients within the same Virtual Private Cloud (VPC). You want clients to be able to get the IP address of the service.What should you do?

Ensure that clients use Compute Engine internal DNS by connecting to the instance name with the url https://[API_NAME]/[API_VERSION]/.

Reserve a static external IP address and assign it to an HTTP(S) load balancing service's forwarding rule. Clients should use this IP address to connect to the service.

Reserve a static external IP address and assign it to an HTTP(S) load balancing service's forwarding rule. Then, define an A record in Cloud DNS. Clients should use the name of the A record to connect to the service.

Ensure that clients use Compute Engine internal DNS by connecting to the instance name with the url https://[INSTANCE_NAME].[ZONE].c.[PROJECT_ID].internal/.

Ensure that clients use Compute Engine internal DNS by connecting to the instance name with the url https://[API_NAME]/[API_VERSION]/.

Your application is logging to Stackdriver. You want to get the count of all requests on all /api/alpha/* endpoints.What should you do?

Export the logs to Cloud Storage and count lines matching /api/alphA.

Add a Stackdriver counter metric for path:/api/alpha/.

Add a Stackdriver counter metric for endpoint:/api/alpha/*.

Export the logs to Cloud Storage and count lines matching /api/alphA.

Export the logs to Cloud Pub/Sub and count lines matching /api/alphA.

You want to re-architect a monolithic application so that it follows a microservices model. You want to accomplish this efficiently while minimizing the impact of this change to the business.Which approach should you take?

Refactor the monolithic application with appropriate microservices in a single effort and deploy it.

Deploy the application to Compute Engine and turn on autoscaling.

Replace the application's features with appropriate microservices in phases.

Refactor the monolithic application with appropriate microservices in a single effort and deploy it.

Build a new application with the appropriate microservices separate from the monolith and replace it when it is complete.

You are building a new API. You want to minimize the cost of storing and reduce the latency of serving images.Which architecture should you use?

Compute Engine backed by Persistent Disk

App Engine backed by Cloud Storage

Compute Engine backed by Persistent Disk

Transfer Appliance backed by Cloud Filestore

Cloud Content Delivery Network (CDN) backed by Cloud Storage

HipLocal's.net-based auth service fails under intermittent load.What should they do?

Use a dedicated Compute Engine virtual machine instance for the service.

Use App Engine for autoscaling.

Use Cloud Functions for autoscaling.

Use a Compute Engine cluster for the service.

Use a dedicated Compute Engine virtual machine instance for the service.

HipLocal's APIs are showing occasional failures, but they cannot find a pattern. They want to collect some metrics to help them troubleshoot.What should they do?

Install the Stackdriver Monitoring agent on the VMs.

Take frequent snapshots of all of the VMs.

Install the Stackdriver Logging agent on the VMs.

Install the Stackdriver Monitoring agent on the VMs.

Use Stackdriver Trace to look for performance bottlenecks.

HipLocal has connected their Hadoop infrastructure to GCP using Cloud Interconnect in order to query data stored on persistent disks.Which IP strategy should they use?

Provision a single instance for NAT.

HipLocal wants to reduce the number of on-call engineers and eliminate manual scaling.Which two services should they choose? (Choose two.)

Use serverless Google Cloud Functions.

Use Knative to build and deploy serverless applications.

Use Google App Engine services.

Use serverless Google Cloud Functions.

Use Knative to build and deploy serverless applications.

Use Google Kubernetes Engine for automated deployments.

Use a large Google Compute Engine cluster for deployments.

In order to meet their business requirements, how should HipLocal store their application state?

Put a memcache layer in front of MySQL.

Move the state storage to Cloud Spanner.

Replace the MySQL instance with Cloud SQL.

HipLocal wants to improve the resilience of their MySQL deployment, while also meeting their business and technical requirements.Which configuration should they choose?

Use the current single instance MySQL on Compute Engine, and replicate the data to Cloud SQL in an external master configuration.

Use the current single instance MySQL on Compute Engine and several read-only MySQL servers on Compute Engine.

Use the current single instance MySQL on Compute Engine, and replicate the data to Cloud SQL in an external master configuration.

Replace the current single instance MySQL instance with Cloud SQL, and configure high availability.

Replace the current single instance MySQL instance with Cloud SQL, and Google provides redundancy without further configuration.

HipLocal is configuring their access controls.Which firewall configuration should they implement?

Allow all traffic on port 443 into the network.

Allow all traffic into the network.

Allow traffic on port 443 for a specific tag.

Allow all traffic on port 443 into the network.

HipLocal's data science team wants to analyze user reviews.How should they prepare the data?

Use the Cloud Data Loss Prevention API for de-identification of the review dataset.

Use the Cloud Data Loss Prevention API for redaction of the review dataset.

Use the Cloud Data Loss Prevention API for de-identification of the review dataset.

Use the Cloud Natural Language Processing API for redaction of the review dataset.

Use the Cloud Natural Language Processing API for de-identification of the review dataset.

Google Professional Cloud Developer Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 40

You want to use the Stackdriver Logging Agent to send an application's log file to Stackdriver from a Compute Engine virtual machine instance.

After installing the Stackdriver Logging Agent, what should you do first?

Enable the Error Reporting API on the project.

Grant the instance full access to all Cloud APIs.

Configure the application log file as a custom source.

Create a Stackdriver Logs Export Sink with a filter that matches the application's log entries.

Comment (0)

Google Professional Cloud Developer Practice Test 1

Question

Google Professional Cloud Developer Practice Tests

Practice Tests