ExamGecko
Login
Home / Google / Professional Cloud Developer / List of questions
Ask Question

Google Professional Cloud Developer Practice Test - Questions Answers, Page 10

List of questions

Question 91

Report
Export
Collapse

Your application requires service accounts to be authenticated to GCP products via credentials stored on its host Compute Engine virtual machine instances. You want to distribute these credentials to the host instances as securely as possible. What should you do?

Use HTTP signed URLs to securely provide access to the required resources.
Use HTTP signed URLs to securely provide access to the required resources.
Use the instance's service account Application Default Credentials to authenticate to the required resources.
Use the instance's service account Application Default Credentials to authenticate to the required resources.
Generate a P12 file from the GCP Console after the instance is deployed, and copy the credentials to the host instance before starting the application.
Generate a P12 file from the GCP Console after the instance is deployed, and copy the credentials to the host instance before starting the application.
Commit the credential JSON file into your application's source repository, and have your CI/CD process package it with the software that is deployed to the instance.
Commit the credential JSON file into your application's source repository, and have your CI/CD process package it with the software that is deployed to the instance.
Suggested answer: B
asked 18/09/2024
Shahir Kazmi
42 questions

Question 92

Report
Export
Collapse

Your application is deployed in a Google Kubernetes Engine (GKE) cluster. You want to expose this application publicly behind a Cloud Load Balancing HTTP(S) load balancer. What should you do?

Configure a GKE Ingress resource.
Configure a GKE Ingress resource.
Configure a GKE Service resource.
Configure a GKE Service resource.
Configure a GKE Ingress resource with type: LoadBalancer.
Configure a GKE Ingress resource with type: LoadBalancer.
Configure a GKE Service resource with type: LoadBalancer.
Configure a GKE Service resource with type: LoadBalancer.
Suggested answer: A
asked 18/09/2024
Memo Albah
24 questions

Question 93

Report
Export
Collapse

Your company is planning to migrate their on-premises Hadoop environment to the cloud. Increasing storage cost and maintenance of data stored in HDFS is a major concern for your company. You also want to make minimal changes to existing data analytics jobs and existing architecture. How should you proceed with the migration?

Migrate your data stored in Hadoop to BigQuery. Change your jobs to source their information from BigQuery instead of the on-premises Hadoop environment.
Migrate your data stored in Hadoop to BigQuery. Change your jobs to source their information from BigQuery instead of the on-premises Hadoop environment.
Create Compute Engine instances with HDD instead of SSD to save costs. Then perform a full migration of your existing environment into the new one in Compute Engine instances.
Create Compute Engine instances with HDD instead of SSD to save costs. Then perform a full migration of your existing environment into the new one in Compute Engine instances.
Create a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop environment to the new Cloud Dataproc cluster. Move your HDFS data into larger HDD disks to save on storage costs.
Create a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop environment to the new Cloud Dataproc cluster. Move your HDFS data into larger HDD disks to save on storage costs.
Create a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop code objects to the new cluster. Move your data to Cloud Storage and leverage the Cloud Dataproc connector to run jobs on that data.
Create a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop code objects to the new cluster. Move your data to Cloud Storage and leverage the Cloud Dataproc connector to run jobs on that data.
Suggested answer: D
asked 18/09/2024
Tanpisit Songvechkasam
29 questions

Question 94

Report
Export
Collapse

Your data is stored in Cloud Storage buckets. Fellow developers have reported that data downloaded from Cloud Storage is resulting in slow API performance. You want to research the issue to provide details to the GCP support team. Which command should you run?

gsutil test --o output.json gs://my-bucket
gsutil test --o output.json gs://my-bucket
gsutil perfdiag --o output.json gs://my-bucket
gsutil perfdiag --o output.json gs://my-bucket
gcloud compute scp example-instance:~/test-data --o output.json gs://my-bucket
gcloud compute scp example-instance:~/test-data --o output.json gs://my-bucket
gcloud services test --o output.json gs://my-bucket
gcloud services test --o output.json gs://my-bucket
Suggested answer: B
asked 18/09/2024
Jonathan Steeman
32 questions

Question 95

Report
Export
Collapse

You are using Cloud Build build to promote a Docker image to Development, Test, and Production environments. You need to ensure that the same Docker image is deployed to each of these environments. How should you identify the Docker image in your build?

Use the latest Docker image tag.
Use the latest Docker image tag.
Use a unique Docker image name.
Use a unique Docker image name.
Use the digest of the Docker image.
Use the digest of the Docker image.
Use a semantic version Docker image tag.
Use a semantic version Docker image tag.
Suggested answer: D
asked 18/09/2024
First Last
36 questions

Question 96

Report
Export
Collapse

Your company has created an application that uploads a report to a Cloud Storage bucket. When the report is uploaded to the bucket, you want to publish a message to a Cloud Pub/Sub topic. You want to implement a solution that will take a small amount to effort to implement. What should you do?

Configure the Cloud Storage bucket to trigger Cloud Pub/Sub notifications when objects are modified.
Configure the Cloud Storage bucket to trigger Cloud Pub/Sub notifications when objects are modified.
Create an App Engine application to receive the file; when it is received, publish a message to the Cloud Pub/Sub topic.
Create an App Engine application to receive the file; when it is received, publish a message to the Cloud Pub/Sub topic.
Create a Cloud Function that is triggered by the Cloud Storage bucket. In the Cloud Function, publish a message to the Cloud Pub/Sub topic.
Create a Cloud Function that is triggered by the Cloud Storage bucket. In the Cloud Function, publish a message to the Cloud Pub/Sub topic.
Create an application deployed in a Google Kubernetes Engine cluster to receive the file; when it is received, publish a message to the Cloud Pub/Sub topic.
Create an application deployed in a Google Kubernetes Engine cluster to receive the file; when it is received, publish a message to the Cloud Pub/Sub topic.
Suggested answer: C

Explanation:

: https://cloud.google.com/storage/docs/pubsub-notifications

asked 18/09/2024
Sergey Aleksandrov
50 questions

Question 97

Report
Export
Collapse

Your teammate has asked you to review the code below, which is adding a credit to an account balance in Cloud Datastore. Which improvement should you suggest your teammate make?

Google Professional Cloud Developer image Question 97 28775 09182024191318000000

Get the entity with an ancestor query.
Get the entity with an ancestor query.
Get and put the entity in a transaction.
Get and put the entity in a transaction.
Use a strongly consistent transactional database.
Use a strongly consistent transactional database.
Don't return the account entity from the function.
Don't return the account entity from the function.
Suggested answer: A
asked 18/09/2024
Nicolas Da Silva
42 questions

Question 98

Report
Export
Collapse

Your company stores their source code in a Cloud Source Repositories repository. Your company wants to build and test their code on each source code commit to the repository and requires a solution that is managed and has minimal operations overhead.

Which method should they use?

Use Cloud Build with a trigger configured for each source code commit.
Use Cloud Build with a trigger configured for each source code commit.
Use Jenkins deployed via the Google Cloud Platform Marketplace, configured to watch for source code commits.
Use Jenkins deployed via the Google Cloud Platform Marketplace, configured to watch for source code commits.
Use a Compute Engine virtual machine instance with an open source continuous integration tool, configured to watch for source code commits.
Use a Compute Engine virtual machine instance with an open source continuous integration tool, configured to watch for source code commits.
Use a source code commit trigger to push a message to a Cloud Pub/Sub topic that triggers an App Engine service to build the source code.
Use a source code commit trigger to push a message to a Cloud Pub/Sub topic that triggers an App Engine service to build the source code.
Suggested answer: A

Explanation:

https://cloud.google.com/build/docs/automating-builds/create-manage-triggers#:~:text=A%20Cloud%20Build%20trigger%20automatically,changes%20that%20match%20certain%20criteria.

asked 18/09/2024
Robert Aghten
34 questions

Question 99

Report
Export
Collapse

You are writing a Compute Engine hosted application in project A that needs to securely authenticate to a Cloud Pub/Sub topic in project B.

What should you do?

Configure the instances with a service account owned by project B. Add the service account as a Cloud Pub/Sub publisher to project A.
Configure the instances with a service account owned by project B. Add the service account as a Cloud Pub/Sub publisher to project A.
Configure the instances with a service account owned by project A. Add the service account as a publisher on the topic.
Configure the instances with a service account owned by project A. Add the service account as a publisher on the topic.
Configure Application Default Credentials to use the private key of a service account owned by project B. Add the service account as a Cloud Pub/Sub publisher to project A.
Configure Application Default Credentials to use the private key of a service account owned by project B. Add the service account as a Cloud Pub/Sub publisher to project A.
Configure Application Default Credentials to use the private key of a service account owned by project A. Add the service account as a publisher on the topic
Configure Application Default Credentials to use the private key of a service account owned by project A. Add the service account as a publisher on the topic
Suggested answer: B

Explanation:

https://cloud.google.com/pubsub/docs/access-control

'For example, suppose a service account in Cloud Project A wants to publish messages to a topic in Cloud Project B. You could accomplish this by granting the service account Edit permission in Cloud Project B'

asked 18/09/2024
Kanta Prasad
38 questions

Question 100

Report
Export
Collapse

You are developing a corporate tool on Compute Engine for the finance department, which needs to authenticate users and verify that they are in the finance department. All company employees use G Suite.

What should you do?

Enable Cloud Identity-Aware Proxy on the HTTP(s) load balancer and restrict access to a Google Group containing users in the finance department. Verify the provided JSON Web Token within the application.
Enable Cloud Identity-Aware Proxy on the HTTP(s) load balancer and restrict access to a Google Group containing users in the finance department. Verify the provided JSON Web Token within the application.
Enable Cloud Identity-Aware Proxy on the HTTP(s) load balancer and restrict access to a Google Group containing users in the finance department. Issue client-side certificates to everybody in the finance team and verify the certificates in the application.
Enable Cloud Identity-Aware Proxy on the HTTP(s) load balancer and restrict access to a Google Group containing users in the finance department. Issue client-side certificates to everybody in the finance team and verify the certificates in the application.
Configure Cloud Armor Security Policies to restrict access to only corporate IP address ranges. Verify the provided JSON Web Token within the application.
Configure Cloud Armor Security Policies to restrict access to only corporate IP address ranges. Verify the provided JSON Web Token within the application.
Configure Cloud Armor Security Policies to restrict access to only corporate IP address ranges. Issue client side certificates to everybody in the finance team and verify the certificates in the application.
Configure Cloud Armor Security Policies to restrict access to only corporate IP address ranges. Issue client side certificates to everybody in the finance team and verify the certificates in the application.
Suggested answer: A

Explanation:

https://cloud.google.com/iap/docs/signed-headers-howto#securing_iap_headers

(https://cloud.google.com/endpoints/docs/openapi/authenticating-users-google-id).

https://cloud.google.com/armor/docs/security-policy-overview#:~:text=Google%20Cloud%20Armor%20security%20policies%20enable%20you%20to%20allow%20or,Private%20Cloud%20(VPC)%20networks

'Google Cloud Armor security policies protect your application by providing Layer 7 filtering and by scrubbing incoming requests for common web attacks or other Layer 7 attributes to potentially block traffic before it reaches your load balanced backend services or backend buckets'

asked 18/09/2024
Carola Lotito
41 questions
Total 265 questions
Go to page: of 27
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

You work at a rapidly growing financial technology startup. You manage the payment processing application written in Go and hosted on Cloud Run in the Singapore region (asia-southeast1). The payment processing application processes data stored in a Cloud Storage bucket that is also located in the Singapore region. The startup plans to expand further into the Asia Pacific region. You plan to deploy the Payment Gateway in Jakarta, Hong Kong, and Taiwan over the next six months. Each location has data residency requirements that require customer data to reside in the country where the transaction was made. You want to minimize the cost of these deployments. What should you do?
HipLocal wants to reduce the number of on-call engineers and eliminate manual scaling. Which two services should they choose? (Choose two.)
You need to migrate a standalone Java application running in an on-premises Linux virtual machine (VM) to Google Cloud in a cost-effective manner. You decide not to take the lift-and-shift approach, and instead you plan to modernize the application by converting it to a container. How should you accomplish this task?
You need to redesign the ingestion of audit events from your authentication service to allow it to handle a large increase in traffic. Currently, the audit service and the authentication system run in the same Compute Engine virtual machine. You plan to use the following Google Cloud tools in the new architecture: Multiple Compute Engine machines, each running an instance of the authentication service Multiple Compute Engine machines, each running an instance of the audit service Pub/Sub to send the events from the authentication services. How should you set up the topics and subscriptions to ensure that the system can handle a large volume of messages and can scale efficiently?
You are deploying a microservices application to Google Kubernetes Engine (GKE). The application will receive daily updates. You expect to deploy a large number of distinct containers that will run on the Linux operating system (OS). You want to be alerted to any known OS vulnerabilities in the new containers. You want to follow Google-recommended best practices. What should you do?
Your team detected a spike of errors in an application running on Cloud Run in your production project. The application is configured to read messages from Pub/Sub topic A, process the messages, and write the messages to topic B. You want to conduct tests to identify the cause of the errors. You can use a set of mock messages for testing. What should you do?
You manage a microservice-based ecommerce platform on Google Cloud that sends confirmation emails to a third-party email service provider using a Cloud Function. Your company just launched a marketing campaign, and some customers are reporting that they have not received order confirmation emails. You discover that the services triggering the Cloud Function are receiving HTTP 500 errors. You need to change the way emails are handled to minimize email loss. What should you do?
You have an application running in a production Google Kubernetes Engine (GKE) cluster. You use Cloud Deploy to automatically deploy your application to your production GKE cluster. As part of your development process: you are planning to make frequent changes to the applications source code and need to select the tools to test the changes before pushing them to your remote source code repository. Your toolset must meet the following requirements: * Test frequent local changes automatically. * Local deployment emulates production deployment. Which tools should you use to test building and running a container on your laptop using minimal resources'?
You are building a highly available and globally accessible application that will serve static content to users. You need to configure the storage and serving components. You want to minimize management overhead and latency while maximizing reliability for users. What should you do?
You are building a mobile application that will store hierarchical data structures in a database. The application will enable users working offline to sync changes when they are back online. A backend service will enrich the data in the database using a service account. The application is expected to be very popular and needs to scale seamlessly and securely. Which database and IAM role should you use?