Google PROFESSIONAL-CLOUD-DEVELOPER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-DEVELOPER Online Questions & Answers

• Question 111:

  You are deploying a stateless API to Cloud Run. You want to ensure that only authenticated internal services within your project can invoke the API.

  What should you do?

  A. Allow unauthenticated invocations and validate a custom header.
  B. Restrict ingress to internal and require IAM authentication.
  C. Deploy the service with a public endpoint and rely on firewall rules.
  D. Use a signed URL to access the service.
  B. Restrict ingress to internal and require IAM authentication.

  ---

  Explanation

  Cloud Run allows restricting ingress to internal traffic and enforcing IAM authentication. This ensures that only authorized identities within the project or VPC can invoke the service, following the principle of least privilege and Google-recommended security best practices.

• Question 112:

  Your team is developing a new application using a PostgreSQL database and Cloud Run. You are responsible for ensuring that all traffic is kept private on Google Cloud. You want to use managed services and follow Google-recommended best practices.

  What should you do?

  A. 1. Enable Cloud SQL and Cloud Run in the same project. 2. Configure a private IP address for Cloud SQL. Enable private services access. 3. Create a Serverless VPC Access connector. 4. Configure Cloud Run to use the connector to connect to Cloud SQL.
  B. 1. Install PostgreSQL on a Compute Engine virtual machine (VM), and enable Cloud Run in the same project. 2. Configure a private IP address for the VM. Enable private services access. 3. Create a Serverless VPC Access connector. 4. Configure Cloud Run to use the connector to connect to the VM hosting PostgreSQL.
  C. 1. Use Cloud SQL and Cloud Run in different projects. 2. Configure a private IP address for Cloud SQL. Enable private services access. 3. Create a Serverless VPC Access connector. 4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to connect to Cloud SQL.
  D. 1. Install PostgreSQL on a Compute Engine VM, and enable Cloud Run in different projects. 2. Configure a private IP address for the VM. Enable private services access. 3. Create a Serverless VPC Access connector. 4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to access the VM hosting PostgreSQL
  A. 1. Enable Cloud SQL and Cloud Run in the same project. 2. Configure a private IP address for Cloud SQL. Enable private services access. 3. Create a Serverless VPC Access connector. 4. Configure Cloud Run to use the connector to connect to Cloud SQL.

• Question 113:

  You are developing an ecommerce application that stores customer, order, and inventory data as relational tables inside Cloud Spanner. During a recent load test, you discover that Spanner performance is not scaling linearly as expected.

  Which of the following is the cause?

  A. The use of 64-bit numeric types for 32-bit numbers.
  B. The use of the STRING data type for arbitrary-precision values.
  C. The use of Version 1 UUIDs as primary keys that increase monotonically.
  D. The use of LIKE instead of STARTS_WITH keyword for parameterized SQL queries.
  C. The use of Version 1 UUIDs as primary keys that increase monotonically.

• Question 114:

  You are developing a new mobile game that will be deployed on GKE and Cloud Run as a set of microservices. Currently, there are no projections for the game's user volume.

  You need to store the following data types:

  1. Data type 1: leaderboard data

  2. Data type 2: player profiles, chats, and news feed

  3. Data type 3: player clickstream data for BI

  You need to identify a data storage solution that is easy to use, cost-effective, scalable, and supports offline caching on the user's device.

  Which data storage option should you choose for the different data types?

  A. Data type 1: Memorystore Data type 2: Firestore Data type 3: BigQuery
  B. Data type 1: Memorystore Data type 2: Spanner Data type 3: Bigtable
  C. Data type 1: Firestore Data type 2: Cloud SQL Data type 3: BigQuery
  D. Data type 1: Firestore Data type 2: Firestore Data type 3: BigQuery
  D. Data type 1: Firestore Data type 2: Firestore Data type 3: BigQuery

  ---

  Explanation

  Firestore is scalable, easy to use, and supports offline caching for both leaderboard data and player profiles/chats/news feeds. BigQuery is cost-effective and designed for scalable analytics, making it suitable for storing and analyzing clickstream data for BI.

• Question 115:

  Your company has deployed a new API to a Compute Engine instance. During testing, the API is not behaving as expected. You want to monitor the application over 12 hours to diagnose the problem within the application code without redeploying the application.

  Which tool should you use?

  A. Cloud Trace
  B. Cloud Monitoring
  C. Cloud Debugger logpoints
  D. Cloud Debugger snapshots
  C. Cloud Debugger logpoints

• Question 116:

  You configured your Compute Engine instance group to scale automatically according to overall CPU usage. However, your application's response latency increases sharply before the cluster has finished adding up instances. You want to provide a more consistent latency experience for your end users by changing the configuration of the instance group autoscaler.

  Which two configuration changes should you make? (Choose two.)

  A. Add the label "AUTOSCALE" to the instance group template.
  B. Decrease the cool-down period for instances added to the group.
  C. Increase the target CPU usage for the instance group autoscaler.
  D. Decrease the target CPU usage for the instance group autoscaler.
  E. Remove the health-check for individual VMs in the instance group.
  B. Decrease the cool-down period for instances added to the group.
  D. Decrease the target CPU usage for the instance group autoscaler.

• Question 117:

  You are developing a new Python 3 API that needs to be deployed to Cloud Run. Your Cloud Run service sits behind an Apigee proxy. You need to ensure that the Cloud Run service is running with the already deployed Apigee proxy. You want to conduct this testing as quickly as possible.

  What should you do?

  A. Store the service code as a zip file in a Cloud Storage bucket. Deploy your application by using the command, and test the integration by pointing Apigee to Cloud gcloud run deploy --source Run.
  B. Use the Cloud Run emulator to test your application locally. Test the integration by pointing Apigee to your local Cloud Run emulator.
  C. Build a container image locally, and push the image to Artifact Registry. Deploy the Image to Cloud Run, and test the integration by pointing Apigee to Cloud Run.
  D. Deploy your application directly from the current directory by using the gcloud run deploy -- command, and test the integration by pointing Apigee to Cloud Run.source
  D. Deploy your application directly from the current directory by using the gcloud run deploy -- command, and test the integration by pointing Apigee to Cloud Run.source

  ---

  Explanation

  Deploying directly from the current directory with gcloud run deploy --source enables rapid deployment and immediate integration testing with the Apigee proxy, minimizing setup time and complexity.

• Question 118:

  You are using the latest stable version of Python 3 to develop an API that stores data in a Cloud SQL database. You need to perform CRUD operations on the production database securely and reliably with minimal effort.

  What should you do?

  A. 1. Use Cloud Composer to manage the connection to the Cloud SQL database from your Python application. 2. Grant an IAM role to the service account that includes the composer.worker permission.
  B. 1. Use the Cloud SQL API to connect to the Cloud SQL database from your Python application. 2. Grant an IAM role to the service account that includes the cloudsql.instances.login permission.
  C. 1. Use the Cloud SQL connector library for Python to connect to the Cloud SQL database through a Cloud SQL Auth Proxy. 2. Grant an IAM role to the service account that includes the cloudsql.instances.connect permission.
  D. 1. Use the Cloud SQL emulator to connect to the Cloud SQL database from Cloud Shell 2. Grant an IAM role to the user that includes the cloudsql.instances.login permission.
  C. 1. Use the Cloud SQL connector library for Python to connect to the Cloud SQL database through a Cloud SQL Auth Proxy. 2. Grant an IAM role to the service account that includes the cloudsql.instances.connect permission.

  ---

  Explanation

  The Cloud SQL connector library for Python, along with the Cloud SQL Auth Proxy, is the recommended way to connect securely to Cloud SQL from a Python application. This method handles authentication using IAM and allows your application to securely connect to the database without managing a password or setting up a static IP. Granting the cloudsql.instances.connect permission to the service account ensures that it has the necessary access to connect to the Cloud SQL instance.

  Using this approach provides a secure, reliable connection with minimal configuration and is preferred over options like the Cloud SQL API or Cloud Composer, which are not specifically designed for direct database connections in an application context.

• Question 119:

  Your company needs a database solution that stores customer purchase history and meets the following requirements:

  1. Customers can query their purchase immediately after submission.

  2. Purchases can be sorted on a variety of fields.

  3. Distinct record formats can be stored at the same time.

  Which storage option satisfies these requirements?

  A. Firestore in Native mode
  B. Cloud Storage using an object read
  C. Cloud SQL using a SQL SELECT statement
  D. Firestore in Datastore mode using a global query
  A. Firestore in Native mode

• Question 120:

  Your application is deployed on hundreds of Compute Engine instances in a managed instance group (MIG) in multiple zones. You need to deploy a new instance template to fix a critical vulnerability immediately but must avoid impact to your service.

  What setting should be made to the MIG after updating the instance template?

  A. Set the Max Surge to 100%.
  B. Set the Update mode to Opportunistic.
  C. Set the Maximum Unavailable to 100%.
  D. Set the Minimum Wait time to 0 seconds.
  D. Set the Minimum Wait time to 0 seconds.