Google PROFESSIONAL-CLOUD-DEVELOPER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-DEVELOPER Online Questions & Answers

• Question 171:

  You are planning to migrate a MySQL database to the managed Cloud SQL database for Google Cloud. You have Compute Engine virtual machine instances that will connect with this Cloud SQL instance. You do not want to whitelist IPs for the Compute Engine instances to be able to access Cloud SQL.

  What should you do?

  A. Enable private IP for the Cloud SQL instance.
  B. Whitelist a project to access Cloud SQL, and add Compute Engine instances in the whitelisted project.
  C. Create a role in Cloud SQL that allows access to the database from external instances, and assign the Compute Engine instances to that role.
  D. Create a CloudSQL instance on one project. Create Compute engine instances in a different project. Create a VPN between these two projects to allow internal access to CloudSQL.
  A. Enable private IP for the Cloud SQL instance.

• Question 172:

  You noticed that your application was forcefully shut down during a Deployment update in Google Kubernetes Engine. Your application didn't close the database connection before it was terminated. You want to update your application to make sure that it completes a graceful shutdown.

  What should you do?

  A. Update your code to process a received SIGTERM signal to gracefully disconnect from the database.
  B. Configure a PodDisruptionBudget to prevent the Pod from being forcefully shut down.
  C. Increase the terminationGracePeriodSeconds for your application.
  D. Configure a PreStop hook to shut down your application.
  A. Update your code to process a received SIGTERM signal to gracefully disconnect from the database.

• Question 173:

  You have an application controlled by a managed instance group. When you deploy a new version of the application, costs should be minimized and the number of instances should not increase. You want to ensure that, when each new instance is created, the deployment only continues if the new instance is healthy.

  What should you do?

  A. Perform a rolling-action with maxSurge set to 1, maxUnavailable set to 0.
  B. Perform a rolling-action with maxSurge set to 0, maxUnavailable set to 1
  C. Perform a rolling-action with maxHealthy set to 1, maxUnhealthy set to 0.
  D. Perform a rolling-action with maxHealthy set to 0, maxUnhealthy set to 1.
  B. Perform a rolling-action with maxSurge set to 0, maxUnavailable set to 1

• Question 174:

  You recently deployed a Go application on GKE. The operations team has noticed that the application's CPU usage is high even when there is low production traffic. The operations team has asked you to optimize your application's CPU resource consumption. You want to determine which Go functions consume the largest amount of CPU.

  What should you do?

  A. Deploy a Fluent Bit daemonset on the GKE cluster to log data in Cloud Logging. Analyze the logs to get insights into your application code's performance.
  B. Create a custom dashboard in Cloud Monitoring to evaluate the CPU performance metrics of your application.
  C. Connect to your GKE nodes using SSH. Run the top command on the shell to extract the CPU utilization of your application.
  D. Modify your Go application to capture profiling data. Analyze the CPU metrics of your application in flame graphs in Profiler.
  D. Modify your Go application to capture profiling data. Analyze the CPU metrics of your application in flame graphs in Profiler.

• Question 175:

  You are using Cloud Build to build and test application source code stored in Cloud Source Repositories. The build process requires a build tool not available in the Cloud Build environment.

  What should you do?

  A. Download the binary from the internet during the build process.
  B. Build a custom cloud builder image and reference the image in your build steps.
  C. Include the binary in your Cloud Source Repositories repository and reference it in your build scripts.
  D. Ask to have the binary added to the Cloud Build environment by filing a feature request against the Cloud Build public Issue Tracker.
  B. Build a custom cloud builder image and reference the image in your build steps.

• Question 176:

  You are building a mobile backend API that requires efficient binary serialization and low latency.

  Which protocol should you choose?

  A. REST over HTTP/1.1
  B. SOAP
  C. gRPC
  D. XML-RPC
  C. gRPC

  ---

  Explanation

  gRPC uses HTTP/2 and Protocol Buffers for efficient binary serialization, providing low latency and reduced bandwidth usage, making it suitable for mobile backends.

• Question 177:

  Your team is developing an ecommerce platform for your company. Users will log in to the website and add items to their shopping cart. Users will be automatically logged out after 30 minutes of inactivity. When users log back in, their shopping cart should be saved.

  How should you store users' session and shopping cart information while following Google-recommended best practices?

  A. Store the session information in Pub/Sub, and store the shopping cart information in Cloud SQL.
  B. Store the shopping cart information in a file on Cloud Storage where the filename is the SESSION ID.
  C. Store the session and shopping cart information in a MySQL database running on multiple Compute Engine instances.
  D. Store the session information in Memorystore for Redis or Memorystore for Memcached, and store the shopping cart information in Firestore.
  D. Store the session information in Memorystore for Redis or Memorystore for Memcached, and store the shopping cart information in Firestore.

• Question 178:

  You have a web application that publishes messages to Pub/Sub. You plan to build new versions of the application locally and want to quickly test Pub/Sub integration for each new build.

  How should you configure local testing?

  A. Install Cloud Code on the integrated development environment (IDE). Navigate to Cloud APIs, and enable Pub/Sub against a valid Google Project ID. When developing locally, configure your application to call pubsub.googleapis.com.
  B. Install the Pub/Sub emulator using gcloud, and start the emulator with a valid Google Project ID. When developing locally, configure your application to use the local emulator with ${gcloud beta.emulators pubsub env-init}
  C. In the Google Cloud console, navigate to the API Library, and enable the Pub/Sub API. When developing locally, configure your application to call pubsub.googleapis.com.
  D. Install the Pub/Sub emulator using gcloud, and start the emulator with a valid Google Project ID. When developing locally, configure your application to use the local emulator by exporting the variable.PUBSUB_EMULATOR_HOST
  B. Install the Pub/Sub emulator using gcloud, and start the emulator with a valid Google Project ID. When developing locally, configure your application to use the local emulator with ${gcloud beta.emulators pubsub env-init}

• Question 179:

  You are planning to deploy your application in a Google Kubernetes Engine (GKE) cluster. Your application can scale horizontally, and each instance of your application needs to have a stable network identity and its own persistent disk.

  Which GKE object should you use?

  A. Deployment
  B. StatefulSet
  C. ReplicaSet
  D. ReplicaController
  B. StatefulSet

  ---

  Explanation

  https://livebook.manning.com/book/kubernetes-in-action/chapter-10/46

• Question 180:

  Your application is running as a container in a Google Kubernetes Engine cluster. You need to add a secret to your application using a secure approach.

  What should you do?

  A. Create a Kubernetes Secret, and pass the Secret as an environment variable to the container.
  B. Enable Application-layer Secret Encryption on the cluster using a Cloud Key Management Service (KMS) key.
  C. Store the credential in Cloud KMS. Create a Google service account (GSA) to read the credential from Cloud KMS. Export the GSA as a .json file, and pass the .json file to the container as a volume which can read the credential from Cloud KMS.
  D. Store the credential in Secret Manager. Create a Google service account (GSA) to read the credential from Secret Manager. Create a Kubernetes service account (KSA) to run the container. Use Workload Identity to configure your KSA to act as a GSA.
  D. Store the credential in Secret Manager. Create a Google service account (GSA) to read the credential from Secret Manager. Create a Kubernetes service account (KSA) to run the container. Use Workload Identity to configure your KSA to act as a GSA.