Google Google Certifications PROFESSIONAL-CLOUD-DEVELOPER Questions & Answers

• Question 151:

  You have an ecommerce application hosted in Google Kubernetes Engine (GKE) that receives external requests and forwards them to third-party APIs external to Google Cloud. The third-party APIs are responsible for credit card processing, shipping, and inventory management using the process shown in the diagram.

  Your customers are reporting that the ecommerce application is running slowly at unpredictable times. The application doesn't report any metrics You need to determine the cause of the inconsistent performance What should you do?

  

  A. Install the Ops Agent inside your container and configure it to gather application metrics.

  B. Install the OpenTelemetry library for your respective language, and instrument your application.

  C. Modify your application to read and forward the x-Cloud-Trace-context header when it calls the downstream services D Enable Managed Service for Prometheus on the GKE cluster to gather application metrics.

  Correct Answer: B

• Question 152:

  Your company's development teams want to use Cloud Build in their projects to build and push Docker images

  to Container Registry. The operations team requires all Docker images to be published to a centralized,

  securely managed Docker registry that the operations team manages.

  What should you do?

  A. Use Container Registry to create a registry in each development team's project. Configure the Cloud Build build to push the Docker image to the project's registry. Grant the operations team access to each

  development team's registry.

  B. Create a separate project for the operations team that has Container Registry configured. Assign appropriate permissions to the Cloud Build service account in each developer team's project to allow access to the operation team's registry.

  C. Create a separate project for the operations team that has Container Registry configured. Create a Service Account for each development team and assign the appropriate permissions to allow it access to the operations team's registry. Store the service account key file in the source code repository and use it to authenticate against the operations team's registry.

  D. Create a separate project for the operations team that has the open source Docker Registry deployed on a Compute Engine virtual machine instance. Create a username and password for each development team. Store the username and password in the source code repository and use it to authenticate against the operations team's Docker registry.

  Correct Answer: A

  Reference: https://cloud.google.com/container-registry/

• Question 153:

  You are developing an ecommerce web application that uses App Engine standard environment and Memorystore for Redis. When a user logs into the app, the application caches the user's information (e.g., session, name, address, preferences), which is stored for quick retrieval during checkout.

  While testing your application in a browser, you get a 502 Bad Gateway error. You have determined that the application is not connecting to Memorystore. What is the reason for this error?

  A. Your Memorystore for Redis instance was deployed without a public IP address.

  B. You configured your Serverless VPC Access connector in a different region than your App Engine instance.

  C. The firewall rule allowing a connection between App Engine and Memorystore was removed during an infrastructure update by the DevOps team.

  D. You configured your application to use a Serverless VPC Access connector on a different subnet in a different availability zone than your App Engine instance.

  Correct Answer: A

  Reference: https://cloud.google.com/endpoints/docs/openapi/troubleshoot-response-errors

• Question 154:

  You are building a new API. You want to minimize the cost of storing and reduce the latency of serving

  images.

  Which architecture should you use?

  A. App Engine backed by Cloud Storage

  B. Compute Engine backed by Persistent Disk

  C. Transfer Appliance backed by Cloud Filestore

  D. Cloud Content Delivery Network (CDN) backed by Cloud Storage

  Correct Answer: B

• Question 155:

  Your company's corporate policy states that there must be a copyright comment at the very beginning of all source files. You want to write a custom step in Cloud Build that is triggered by each source commit. You need the trigger to validate that the source contains a copyright and add one for subsequent steps if not there. What should you do?

  A. Build a new Docker container that examines the files in /workspace and then checks and adds a copyright for each source file. Changed files are explicitly committed back to the source repository.

  B. Build a new Docker container that examines the files in /workspace and then checks and adds a copyright for each source file. Changed files do not need to be committed back to the source repository.

  C. Build a new Docker container that examines the files in a Cloud Storage bucket and then checks and adds a copyright for each source file. Changed files are written back to the Cloud Storage bucket.

  D. Build a new Docker container that examines the files in a Cloud Storage bucket and then checks and adds a copyright for each source file. Changed files are explicitly committed back to the source repository.

  Correct Answer: A

  https://cloud.google.com/build/docs/configuring-builds/pass-data-between- steps#passing_data_using_workspaces

  To pass data between build steps, store the assets produced by the build step in /workspace and these assets will be available to any subsequent build steps.

• Question 156:

  Your application performs well when tested locally, but it runs significantly slower when you deploy it to App Engine standard environment. You want to diagnose the problem. What should you do?

  A. File a ticket with Cloud Support indicating that the application performs faster locally.

  B. Use Stackdriver Debugger Snapshots to look at a point-in-time execution of the application.

  C. Use Stackdriver Trace to determine which functions within the application have higher latency.

  D. Add logging commands to the application and use Stackdriver Logging to check where the latency problem occurs.

  Correct Answer: D

• Question 157:

  You have containerized a legacy application that stores its configuration on an NFS share. You need to deploy this application to Google Kubernetes Engine (GKE) and do not want the application serving traffic until after the configuration has been retrieved. What should you do?

  A. Use the gsutil utility to copy files from within the Docker container at startup, and start the service using an ENTRYPOINT script.

  B. Create a PersistentVolumeClaim on the GKE cluster. Access the configuration files from the volume, and start the service using an ENTRYPOINT script.

  C. Use the COPY statement in the Dockerfile to load the configuration into the container image. Verify that the configuration is available, and start the service using an ENTRYPOINT script.

  D. Add a startup script to the GKE instance group to mount the NFS share at node startup. Copy the configuration files into the container, and start the service using an ENTRYPOINT script.

  Correct Answer: B

  Reference: https://cloud.google.com/compute/docs/instances/startup-scripts/linux

• Question 158:

  You have an on-premises application that authenticates to the Cloud Storage API using a user-managed service account with a user-managed key. The application connects to Cloud Storage using Private Google Access over a Dedicated Interconnect link. You discover that requests from the application to access objects in the Cloud Storage bucket are failing with a 403 Permission Denied error code. What is the likely cause of this issue?

  A. The folder structure inside the bucket and object paths have changed.

  B. The permissions of the service account's predefined role have changed.

  C. The service account key has been rotated but not updated on the application server.

  D. The Interconnect link from the on-premises data center to Google Cloud is experiencing a temporary outage.

  Correct Answer: C

• Question 159:

  Your App Engine standard configuration is as follows:

  service: production

  instance_class: B1

  You want to limit the application to 5 instances. Which code snippet should you include in your configuration?

  A. manual_scaling:instances: 5min_pending_latency: 30ms

  B. manual_scaling:max_instances: 5idle_timeout: 10m

  C. basic_scaling:instances: 5min_pending_latency: 30ms

  D. basic_scaling:max_instances: 5idle_timeout: 10m

  Correct Answer: C

• Question 160:

  You are deploying your application on a Compute Engine instance that communicates with Cloud SQL. You will use Cloud SQL Proxy to allow your application to communicate to the database using the service account associated with the application's instance. You want to follow the Google-recommended best practice of providing minimum access for the role assigned to the service account. What should you do?

  A. Assign the Project Editor role.

  B. Assign the Project Owner role.

  C. Assign the Cloud SQL Client role.

  D. Assign the Cloud SQL Editor role.

  Correct Answer: C

  Reference: https://cloud.google.com/sql/docs/mysql/sql-proxy