Google Google Certifications PROFESSIONAL-CLOUD-DEVELOPER Questions & Answers

• Question 121:

  You are developing an application that will allow clients to download a file from your website for a specific period of time. How should you design the application to complete this task while following Google-recommended best practices?

  A. Configure the application to send the file to the client as an email attachment.

  B. Generate and assign a Cloud Storage-signed URL for the file. Make the URL available for the client to download.

  C. Create a temporary Cloud Storage bucket with time expiration specified, and give download permissions to the bucket. Copy the file, and send it to the client.

  D. Generate the HTTP cookies with time expiration specified. If the time is valid, copy the file from the Cloud Storage bucket, and make the file available for the client to download.

  Correct Answer: B

• Question 122:

  You want to notify on-call engineers about a service degradation in production while minimizing development

  time.

  What should you do?

  A. Use Cloud Function to monitor resources and raise alerts.

  B. Use Cloud Pub/Sub to monitor resources and raise alerts.

  C. Use Stackdriver Error Reporting to capture errors and raise alerts.

  D. Use Stackdriver Monitoring to monitor resources and raise alerts.

  Correct Answer: A

• Question 123:

  You are developing an application that will store and access sensitive unstructured data objects in a Cloud Storage bucket. To comply with regulatory requirements, you need to ensure that all data objects are available for at least 7 years

  after their initial creation. Objects created more than 3 years ago are accessed very infrequently (less than once a year). You need to configure object storage while ensuring that storage cost is optimized.

  What should you do? (Choose two.)

  A. Set a retention policy on the bucket with a period of 7 years.

  B. Use IAM Conditions to provide access to objects 7 years after the object creation date.

  C. Enable Object Versioning to prevent objects from being accidentally deleted for 7 years after object creation.

  D. Create an object lifecycle policy on the bucket that moves objects from Standard Storage to Archive Storage after 3 years.

  E. Implement a Cloud Function that checks the age of each object in the bucket and moves the objects older than 3 years to a second bucket with the Archive Storage class. Use Cloud Scheduler to trigger the Cloud Function on a daily schedule.

  Correct Answer: AD

  https://cloud.google.com/storage/docs/bucket-lock

  This page discusses the Bucket Lock feature, which allows you to configure a data retention policy for a Cloud Storage bucket that governs how long objects in the bucket must be retained. The feature also allows you to lock the data

  retention policy, permanently preventing the policy from being reduced or removed.

  https://cloud.google.com/storage/docs/storage-classes#archive

  Archive storage is the lowest-cost, highly durable storage service for data archiving, online backup, and disaster recovery. Unlike the "coldest" storage services offered by other Cloud providers, your data is available within milliseconds, not

  hours or days.

  Archive storage is the best choice for data that you plan to access less than once a year.

• Question 124:

  You need to deploy a new European version of a website hosted on Google Kubernetes Engine. The current and new websites must be accessed via the same HTTP(S) load balancer's external IP address, but have different domain names. What should you do?

  A. Define a new Ingress resource with a host rule matching the new domain

  B. Modify the existing Ingress resource with a host rule matching the new domain

  C. Create a new Service of type LoadBalancer specifying the existing IP address as the loadBalancerIP

  D. Generate a new Ingress resource and specify the existing IP address as the kubernetes.io/ingress.global-static-ip-name annotation value

  Correct Answer: B

  https://kubernetes.io/docs/concepts/services-networking/ingress/#name-based-virtual- hosting Name-based virtual hosts support routing HTTP traffic to multiple host names at the same IP address.

• Question 125:

  Your development team is using Cloud Build to promote a Node.js application built on App Engine from your staging environment to production. The application relies on several directories of photos stored in a Cloud Storage bucket named webphotos-staging in the staging environment. After the promotion, these photos must be available in a Cloud Storage bucket named webphotos-prod in the production environment. You want to automate the process where possible. What should you do?

  A. Manually copy the photos to webphotos-prod.

  B. Add a startup script in the application's app.yami file to move the photos from webphotos- staging to webphotos-prod.

  C. Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:

  

  D. Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  Explanation: https://cloud.google.com/storage/docs/gsutil/commands/cp

• Question 126:

  Your application takes an input from a user and publishes it to the user's contacts. This input is stored in a table in Cloud Spanner. Your application is more sensitive to latency and less sensitive to consistency. How should you perform reads from Cloud Spanner for this application?

  A. Perform Read-Only transactions.

  B. Perform stale reads using single-read methods.

  C. Perform strong reads using single-read methods.

  D. Perform stale reads using read-write transactions.

  Correct Answer: D

  Reference: https://cloud.google.com/solutions/best-practices-cloud-spanner-gaming- database

• Question 127:

  You have two tables in an ANSI-SQL compliant database with identical columns that you need to quickly

  combine into a single table, removing duplicate rows from the result set.

  What should you do?

  A. Use the JOIN operator in SQL to combine the tables.

  B. Use nested WITH statements to combine the tables.

  C. Use the UNION operator in SQL to combine the tables.

  D. Use the UNION ALL operator in SQL to combine the tables.

  Correct Answer: C

  Reference: https://www.techonthenet.com/sql/union_all.php

• Question 128:

  Your team develops stateless services that run on Google Kubernetes Engine (GKE). You need to deploy a new service that will only be accessed by other services running in the GKE cluster. The service will need to scale as quickly as possible to respond to changing load. What should you do?

  A. Use a Vertical Pod Autoscaler to scale the containers, and expose them via a ClusterIP Service.

  B. Use a Vertical Pod Autoscaler to scale the containers, and expose them via a NodePort Service.

  C. Use a Horizontal Pod Autoscaler to scale the containers, and expose them via a ClusterIP Service.

  D. Use a Horizontal Pod Autoscaler to scale the containers, and expose them via a NodePort Service.

  Correct Answer: C

  Explanation: https://cloud.google.com/kubernetes-engine/docs/concepts/service

• Question 129:

  Your application requires service accounts to be authenticated to GCP products via credentials stored on its host Compute Engine virtual machine instances. You want to distribute these credentials to the host instances as securely as possible. What should you do?

  A. Use HTTP signed URLs to securely provide access to the required resources.

  B. Use the instance's service account Application Default Credentials to authenticate to the required resources.

  C. Generate a P12 file from the GCP Console after the instance is deployed, and copy the credentials to the host instance before starting the application.

  D. Commit the credential JSON file into your application's source repository, and have your CI/CD process package it with the software that is deployed to the instance.

  Correct Answer: B

  Reference: https://cloud.google.com/compute/docs/api/how-tos/authorization

• Question 130:

  You have a mixture of packaged and internally developed applications hosted on a Compute Engine instance that is running Linux. These applications write log records as text in local files. You want the logs to be written to Cloud Logging. What should you do?

  A. Pipe the content of the files to the Linux Syslog daemon.

  B. Install a Google version of fluentd on the Compute Engine instance.

  C. Install a Google version of collectd on the Compute Engine instance.

  D. Using cron, schedule a job to copy the log files to Cloud Storage once a day.

  Correct Answer: B

  Reference: https://cloud.google.com/logging/docs/agent/logging/configuration