Google PROFESSIONAL-CLOUD-DEVELOPER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-DEVELOPER Online Questions & Answers

• Question 11:

  You have been tasked with planning the migration of your company's application from on-premises to Google Cloud. Your company's monolithic application is an ecommerce website. The application will be migrated to microservices deployed on Google Cloud in stages. The majority of your company's revenue is generated through online sales, so it is important to minimize risk during the migration. You need to prioritize features and select the first functionality to migrate.

  What should you do?

  A. Migrate the Product catalog, which has integrations to the frontend and product database.
  B. Migrate Payment processing, which has integrations to the frontend, order database, and third-party payment vendor.
  C. Migrate Order fulfillment, which has integrations to the order database, inventory system, and third- party shipping vendor.
  D. Migrate the Shopping cart, which has integrations to the frontend, cart database, inventory system, and payment processing system.
  A. Migrate the Product catalog, which has integrations to the frontend and product database.

• Question 12:

  You want to view the memory usage of your application deployed on Compute Engine.

  What should you do?

  A. Install the Stackdriver Client Library.
  B. Install the Stackdriver Monitoring Agent.
  C. Use the Stackdriver Metrics Explorer.
  D. Use the Google Cloud Platform Console.
  B. Install the Stackdriver Monitoring Agent.

• Question 13:

  You are using Cloud Run and Cloud SQL for PostgreSQL to develop an application. You want to test your application code locally before deploying new application versions to the development environment that is shared with other developers. You need to set up your Cloud Run local development environment to test your application while keeping all traffic to Cloud SQL instances encrypted and authenticated to Cloud IAM and PostgreSQL.

  What should you do before starting the local development server?

  A. Install PostgreSQL on your local workstation. Run a local PostgreSQL database on your workstation. Configure the application to connect to a PostgreSQL instance on localhost.
  B. Download and install the Cloud SQL Auth Proxy to your local development environment. Configure the Cloud SQL Auth Proxy to connect to the Cloud SQL instance and run the proxy. Configure the application to connect to a PostgreSQL instance on localhost.
  C. Deploy a Compute Engine instance, and install HAProxy on the instance. Configure Cloud SQL Auth Proxy on the instance, and use the instance's service account to authenticate to Cloud SQL. Configure the application to connect to the Compute Engine instance's IP address.
  D. Configure your local development server to connect to the private IP address of the Cloud SQL instance. Encrypt database entries with a cryptographic library before submitting them to the database. Store the decryption key as an environment variable in Cloud Run.
  B. Download and install the Cloud SQL Auth Proxy to your local development environment. Configure the Cloud SQL Auth Proxy to connect to the Cloud SQL instance and run the proxy. Configure the application to connect to a PostgreSQL instance on localhost.

  ---

  Explanation

  https://cloud.google.com/sql/docs/postgres/connect-app-engine-standard

• Question 14:

  You need to configure a Deployment on GKE. You want to include a check that verifies that the containers can connect to the database. If the Pod is failing to connect, you want a script on the container to run to complete a graceful shutdown.

  How should you configure the Deployment?

  A. Create two jobs: one that checks whether the container can connect to the database, and another that runs the shutdown script if the Pod is failing.
  B. Create the Deployment with a livenessProbe for the container that will fail if the container can't connect to the database. Configure a PreStop lifecycle handler that runs the shutdown script if the container is failing.
  C. Create the Deployment with a PostStart lifecycle handler that checks the service availability. Configure a PreStop lifecycle handler that runs the shutdown script if the container is failing.
  D. Create the Deployment with an initContainer that checks the service availability. Configure a lifecycle handler that runs the shutdown script if the Pod is failing.PreStop
  B. Create the Deployment with a livenessProbe for the container that will fail if the container can't connect to the database. Configure a PreStop lifecycle handler that runs the shutdown script if the container is failing.

• Question 15:

  You need to automatically rebuild a container image when code is pushed to the main branch of Cloud Source Repositories.

  What should you configure?

  A. Manual build
  B. Cloud Scheduler job
  C. Cloud Build trigger on branch
  D. Pub/Sub push subscription
  C. Cloud Build trigger on branch

  ---

  Explanation

  Cloud Build triggers can be configured to automatically start builds when changes are pushed to a specified branch.

• Question 16:

  Your company is planning a global event. You need to configure an event registration portal for the event. You have decided to deploy the registration service by using Cloud Run. Your company's marketing team does not want to advertise the Cloud Run service URL. They want the registration portal to be accessed by using a personalized hostname or path in your custom domain URL pattern, for example, . How should you configure access to the service while following Google- <service>.example.

  com recommended practices?

  A. Configure Cloud Armor to block traffic on the Cloud Run service URL and allow reroutes from only the custom domain URL pattern.
  B. Set up an HAProxy on Compute Engine, and add routing rules for a custom domain to the Cloud Run service URL.
  C. Add a global external Application Load Balancer in front of the service, and configure a DNS record that points to the load balancer's IP address.
  D. Create a CNAME record that points to the Cloud Run service URL.
  C. Add a global external Application Load Balancer in front of the service, and configure a DNS record that points to the load balancer's IP address.

  ---

  Explanation

  Using a global external Application Load Balancer allows you to serve your Cloud Run service behind a custom domain with flexible routing and SSL support, following Google-recommended best practices for production workloads.

• Question 17:

  Your GKE application requires persistent storage that survives pod restarts.

  What should you use?

  A. EmptyDir
  B. ConfigMap
  C. PersistentVolumeClaim
  D. Secret
  C. PersistentVolumeClaim

  ---

  Explanation

  PersistentVolumeClaim requests durable storage resources that persist beyond the lifecycle of individual pods.

• Question 18:

  You are developing a new ecommerce application that uses Cloud Run functions. You want to expose your application's APIs to public users while maintaining a high level of security. You need to ensure that only authorized users can access your APIs and that all API traffic is encrypted and protected from unauthorized access. You want to use the most scalable and secure approach.

  What should you do?

  A. Deploy your Cloud Functions behind Cloud Load Balancing, and use Cloud Armor to protect your APIs from distributed denial of service (DDoS) attacks.
  B. Deploy your Cloud Functions with Security Command Center enabled, and use IAM to manage access to your APIs.
  C. Deploy your Cloud Functions behind an Apigee proxy and use Apigee's authentication and authorization features to secure your APIs.
  D. Deploy your Cloud Functions behind a Cloud API Gateway proxy. Create and use an API key to authorize users to access your APIs.
  C. Deploy your Cloud Functions behind an Apigee proxy and use Apigee's authentication and authorization features to secure your APIs.

  ---

  Explanation

  Apigee is a robust API management platform that provides comprehensive security, including authentication, authorization, and rate limiting, making it well-suited for public-facing APIs. By deploying Cloud Functions behind an Apigee proxy, you can enforce strict security policies, manage user authentication, and leverage Apigee's built-in features for protecting your APIs against unauthorized access. Apigee also provides support for encryption, scalability, and monitoring, which meets the requirements for secure, scalable, and public access.

  While API Gateway offers some security features, Apigee provides a broader set of capabilities specifically tailored for secure, enterprise-grade API management.

• Question 19:

  You are building an API that will be used by Android and iOS apps. The API must:

  1. Support HTTPs

  2. Minimize bandwidth cost

  3. Integrate easily with mobile apps

  Which API architecture should you use?

  A. RESTful APIs
  B. MQTT for APIs
  C. gRPC-based APIs
  D. SOAP-based APIs
  C. gRPC-based APIs

• Question 20:

  Your team develops stateless services that run on Google Kubernetes Engine (GKE). You need to deploy a new service that will only be accessed by other services running in the GKE cluster. The service will need to scale as quickly as possible to respond to changing load.

  What should you do?

  A. Use a Vertical Pod Autoscaler to scale the containers, and expose them via a ClusterIP Service.
  B. Use a Vertical Pod Autoscaler to scale the containers, and expose them via a NodePort Service.
  C. Use a Horizontal Pod Autoscaler to scale the containers, and expose them via a ClusterIP Service.
  D. Use a Horizontal Pod Autoscaler to scale the containers, and expose them via a NodePort Service.
  C. Use a Horizontal Pod Autoscaler to scale the containers, and expose them via a ClusterIP Service.