Google PROFESSIONAL-CLOUD-DEVELOPER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-DEVELOPER Online Questions & Answers

• Question 131:

  You need to migrate an internal file upload API with an enforced 500-MB file size limit to App Engine.

  What should you do?

  A. Use FTP to upload files.
  B. Use CPanel to upload files.
  C. Use signed URLs to upload files.
  D. Change the API to be a multipart file upload API.
  C. Use signed URLs to upload files.

  ---

  Explanation

  https://wiki.christophchamp.com/index.php?title=Google_Cloud_Platform

• Question 132:

  You are developing an internal application that will allow employees to organize community events within your company. You deployed your application on a single Compute Engine instance. Your company uses Google Workspace (formerly G Suite), and you need to ensure that the company employees can authenticate to the application from anywhere.

  What should you do?

  A. Add a public IP address to your instance, and restrict access to the instance using firewall rules. Allow your company's proxy as the only source IP address.
  B. Add an HTTP(S) load balancer in front of the instance, and set up Identity-Aware Proxy (IAP). Configure the IAP settings to allow your company domain to access the website.
  C. Set up a VPN tunnel between your company network and your instance's VPC location on Google Cloud. Configure the required firewall rules and routing information to both the on-premises and Google Cloud networks.
  D. Add a public IP address to your instance, and allow traffic from the internet. Generate a random hash, and create a subdomain that includes this hash and points to your instance. Distribute this DNS address to your company's employees.
  B. Add an HTTP(S) load balancer in front of the instance, and set up Identity-Aware Proxy (IAP). Configure the IAP settings to allow your company domain to access the website.

• Question 133:

  You are a lead developer working on a new retail system that runs on Cloud Run and Firestore. A web UI requirement is for the user to be able to browse through all products. A few months after go-live, you notice that Cloud Run instances are terminated with HTTP 500: Container instances are exceeding errors during busy times. This error coincides with spikes in the number of Firestore memory limits queries.

  You need to prevent Cloud Run from crashing and decrease the number of Firestore queries. You want to use a solution that optimizes system performance.

  What should you do?

  A. Modify the query that returns the product list using cursors with limits.
  B. Create a custom index over the products.
  C. Modify the query that returns the product list using integer offsets.
  D. Modify the Cloud Run configuration to increase the memory limits.
  A. Modify the query that returns the product list using cursors with limits.

• Question 134:

  Your application requires strong global consistency and horizontal scalability.

  Which database should you use?

  A. Firestore
  B. Cloud SQL
  C. Cloud Spanner
  D. Memorystore
  C. Cloud Spanner

  ---

  Explanation

  Cloud Spanner provides strong consistency, global distribution, and horizontal scalability, making it suitable for globally distributed applications.

• Question 135:

  You have two tables in an ANSI-SQL compliant database with identical columns that you need to quickly combine into a single table, removing duplicate rows from the result set.

  What should you do?

  A. Use the JOIN operator in SQL to combine the tables.
  B. Use nested WITH statements to combine the tables.
  C. Use the UNION operator in SQL to combine the tables.
  D. Use the UNION ALL operator in SQL to combine the tables.
  C. Use the UNION operator in SQL to combine the tables.

  ---

  Explanation

  https://www.techonthenet.com/sql/union_all.php

• Question 136:

  You need to monitor the availability of a public HTTP endpoint.

  Which feature should you configure?

  A. Logging sink
  B. Uptime check
  C. Trace span
  D. Profiler agent
  B. Uptime check

  ---

  Explanation

  Cloud Monitoring uptime checks verify the availability and latency of public endpoints and can trigger alerts if availability drops.

• Question 137:

  Your service adds text to images that it reads from Cloud Storage. During busy times of the year, requests to Cloud Storage fail with an HTTP 429 "Too Many Requests" status code.

  How should you handle this error?

  A. Add a cache-control header to the objects.
  B. Request a quota increase from the GCP Console.
  C. Retry the request with a truncated exponential backoff strategy.
  D. Change the storage class of the Cloud Storage bucket to Multi-regional.
  C. Retry the request with a truncated exponential backoff strategy.

  ---

  Explanation

  https://developers.google.com/gmail/api/v1/reference/quota

• Question 138:

  There are three teams developing an ecommerce application in the same Google Cloud project. Team A will build a set of RESTful APIs that exposes some core functionalities for the application. Team B and Team C will make requests to those APIs in their downstream processes running on Cloud Run services. You need to propose a solution for exposing the APIs in a way that maximizes security and minimizes management overhead for the three teams.

  How should you design this solution?

  A. 1. Team A uses service accounts to authorize Cloud API Gateway. Team B and Team C each create a service account, export their service account's key, and store each key in a separate secret in Secret Manager. 2. Team B and Team C use this service account key to create an OAuth token to access the APIs.
  B. 1. Team A uses Apigee hybrid to create an API key and shares that key with Team B and Team
  C. 2. Team B and Team C store the API key in a secret in Secret Manager, and use this API key to access the API endpoint.
  D. 1. Team A uses service accounts to authorize Cloud API Gateway. Team B and Team C each create a service account that has access to the APIs. 2. Team B and Team C access the APIs in the Cloud Run service running their processes by using the service accounts attached to their service.
  D. 1. Team A uses service accounts to authorize Cloud API Gateway. Team B and Team C each create a service account that has access to the APIs. 2. Team B and Team C access the APIs in the Cloud Run service running their processes by using the service accounts attached to their service.

  ---

  Explanation

  This solution maximizes security by using service accounts for authentication and authorization, avoiding the need to manage and distribute API keys or secrets, which can be insecure and cumbersome. By configuring Cloud API Gateway to use service accounts, you ensure that only authorized services can access the APIs securely. Attaching the service accounts directly to Team B and Team C's Cloud Run services enables seamless and secure access without requiring manual handling of credentials.

  Using service accounts also aligns with Google Cloud's best practices for identity and access management, minimizing management overhead while providing a scalable and secure way to control access across teams and services.

• Question 139:

  You have an on-premises application that authenticates to the Cloud Storage API using a user-managed service account with a user-managed key. The application connects to Cloud Storage using Private Google Access over a Dedicated Interconnect link. You discover that requests from the application to access objects in the Cloud Storage bucket are failing with a 403 Permission Denied error code.

  What is the likely cause of this issue?

  A. The folder structure inside the bucket and object paths have changed.
  B. The permissions of the service account's predefined role have changed.
  C. The service account key has been rotated but not updated on the application server.
  D. The Interconnect link from the on-premises data center to Google Cloud is experiencing a temporary outage.
  C. The service account key has been rotated but not updated on the application server.

• Question 140:

  You are creating a web application that runs in a Compute Engine instance and writes a file to any user's Google Drive. You need to configure the application to authenticate to the Google Drive API.

  What should you do?

  A. Use an OAuth Client ID that uses the https://www.googleapis.com/auth/drive.file scope to obtain an access token for each user.
  B. Use an OAuth Client ID with delegated domain-wide authority.
  C. Use the App Engine service account and https://www.googleapis.com/auth/drive.file scope to generate a signed JSON Web Token (JWT).
  D. Use the App Engine service account with delegated domain-wide authority.
  A. Use an OAuth Client ID that uses the https://www.googleapis.com/auth/drive.file scope to obtain an access token for each user.