Google PROFESSIONAL-CLOUD-DEVELOPER Online Practice
Questions and Exam Preparation
PROFESSIONAL-CLOUD-DEVELOPER Exam Details
Exam Code
:PROFESSIONAL-CLOUD-DEVELOPER
Exam Name
:Professional Cloud Developer
Certification
:Google Certifications
Vendor
:Google
Total Questions
:405 Q&As
Last Updated
:May 24, 2026
Google PROFESSIONAL-CLOUD-DEVELOPER Online Questions &
Answers
Question 191:
Your development team has been asked to refactor an existing monolithic application into a set of composable microservices.
Which design aspects should you implement for the new application? (Choose two.)
A. Develop the microservice code in the same programming language used by the microservice caller. B. Create an API contract agreement between the microservice implementation and microservice caller. C. Require asynchronous communications between all microservice implementations and microservice callers. D. Ensure that sufficient instances of the microservice are running to accommodate the performance requirements. E. Implement a versioning scheme to permit future changes that could be incompatible with the current interface.
B. Create an API contract agreement between the microservice implementation and microservice caller. E. Implement a versioning scheme to permit future changes that could be incompatible with the current interface.
Question 192:
You need to deploy a new feature into production on Cloud Run. Your company's SRE team mandates gradual deployments to avoid large downtimes caused by code change errors. You want to configure this deployment with minimal effort.
What should you do?
A. Configure the application's frontend load balancer to toggle between the new and old revisions. B. Configure the application code to send a small percentage of users to the newly deployed revision. C. Deploy the feature with "Serve this revision immediately" unchecked, and configure the new revision to serve a small percentage of traffic. Check for errors, and increase traffic to the revision as appropriate. D. Deploy the feature with "Serve this revision immediately" checked. Check for errors, roll back to the previous revision, and repeat the process until you have verified that the deployment is bug-free.
C. Deploy the feature with "Serve this revision immediately" unchecked, and configure the new revision to serve a small percentage of traffic. Check for errors, and increase traffic to the revision as appropriate.
Explanation
https://cloud.google.com/run/docs/deploying
Question 193:
Your application is deployed in a Google Kubernetes Engine (GKE) cluster. You want to expose this application publicly behind a Cloud Load Balancing HTTP(S) load balancer.
What should you do?
A. Configure a GKE Ingress resource. B. Configure a GKE Service resource. C. Configure a GKE Ingress resource with type: LoadBalancer. D. Configure a GKE Service resource with type: LoadBalancer.
Your development team has built several Cloud Functions using Java along with corresponding integration and service tests. You are building and deploying the functions and launching the tests using Cloud Build. Your Cloud Build job is reporting deployment failures immediately after successfully validating the code.
What should you do?
A. Check the maximum number of Cloud Function instances. B. Verify that your Cloud Build trigger has the correct build parameters. C. Retry the tests using the truncated exponential backoff polling strategy. D. Verify that the Cloud Build service account is assigned the Cloud Functions Developer role.
D. Verify that the Cloud Build service account is assigned the Cloud Functions Developer role.
Question 195:
You are building a mobile application that will store hierarchical data structures in a database. The application will enable users working offline to sync changes when they are back online. A backend service will enrich the data in the database using a service account. The application is expected to be very popular and needs to scale seamlessly and securely.
Which database and IAM role should you use?
A. Use Cloud SQL, and assign the roles/cloudsql.editor role to the service account. B. Use Bigtable, and assign the roles/bigtable.viewer role to the service account. C. Use Firestore in Native mode and assign the roles/datastore.user role to the service account. D. Use Firestore in Datastore mode and assign the roles/datastore.viewer role to the service account.
C. Use Firestore in Native mode and assign the roles/datastore.user role to the service account.
Question 196:
You are developing a scalable web application for internal users. Your organization uses Google Workspace. You need to set up authentication to the application for the users, and then deploy the application on Google Cloud. You plan to use cloud-native features, and you want to minimize infrastructure management effort.
What should you do? (Choose two.)
A. Create a Compute Engine VM, configure a web server, and deploy the application in a VPC. B. Containerize the application, and deploy it as a Cloud Run service. C. Configure Cloud SQL database with a table containing the users and password hashes. Add an authentication screen to ensure that only internal users can access the application. D. Configure Identity Aware Proxy, and grant the roles/iap.httpsResourceAccessor IAM role to the users that need to access the application. E. Configure Identity Aware Proxy, and grant the roles/iap.tunnelResourceAccessor IAM role to the users that need to access the application.
B. Containerize the application, and deploy it as a Cloud Run service. D. Configure Identity Aware Proxy, and grant the roles/iap.httpsResourceAccessor IAM role to the users that need to access the application.
Explanation
https://support.google.com/a/answer/7281227?hl=en
Question 197:
You work for a financial services company that has a container-first approach. Your team develops microservices applications. You have a Cloud Build pipeline that creates a container image, runs regression tests, and publishes the image to Artifact Registry. You need to ensure that only containers that have passed the regression tests are deployed to GKE clusters. You have already enabled Binary Authorization on the GKE clusters.
What should you do next?
A. Deploy Voucher Server and Voucher Client components. After a container image has passed the regression tests, run Voucher Client as a step in the Cloud Build pipeline. B. Create an attestor and a policy. Run a vulnerability scan to create an attestation for the container image as a step in the Cloud Build pipeline. C. Create an attestor and a policy. Create an attestation for the container images that have passed the regression tests as a step in the Cloud Build pipeline. D. Set the Pod Security Standard level to Restricted for the relevant namespaces. Digitally sign the container images that have passed the regression tests as a step in the Cloud Build pipeline.
C. Create an attestor and a policy. Create an attestation for the container images that have passed the regression tests as a step in the Cloud Build pipeline.
Explanation
Attestation: By creating an attestation for container images that have successfully passed regression tests, you can enforce deployment policies that only allow images with valid attestations to be deployed to your GKE clusters.
Integration with Binary Authorization: This approach directly integrates with Binary Authorization, allowing it to enforce the deployment policy based on the attestations created during the Cloud Build pipeline.
Control and Security: This method ensures that only thoroughly tested and verified images are deployed, enhancing the security and reliability of your applications.
Options "Deploy Voucher Server and Voucher Client components. After a container image has passed the regression tests, run Voucher Client as a step in the Cloud Build pipeline" and "Set the Pod Security Standard level to Restricted for the relevant namespaces. Digitally sign the container images that have passed the regression tests as a step in the Cloud Build pipeline" do not specifically leverage the attestation mechanism necessary for Binary Authorization. Option "Create an attestor and a policy. Run a vulnerability scan to create an attestation for the container image as a step in the Cloud Build pipeline" focuses on vulnerability scanning, which, while important, does not fulfill the requirement of ensuring that only tested images are deployed.
Question 198:
You manage a system that runs on stateless Compute Engine VMs and Cloud Run instances. Cloud Run is connected to a VPC, and the ingress setting is set to Internal. You want to schedule tasks on Cloud Run. You create a service account and grant it the roles/run.invoker Identity and Access Management (IAM) role. When you create a schedule and test it, a 403 Permission Denied error is returned in Cloud Logging.
What should you do?
A. Grant the service account the roles/run.developer IAM role. B. Configure a cron job on the Compute Engine VMs to trigger Cloud Run on schedule. C. Change the Cloud Run ingress setting to 'Internal and Cloud Load Balancing.' D. Use Cloud Scheduler with Pub/Sub to invoke Cloud Run.
D. Use Cloud Scheduler with Pub/Sub to invoke Cloud Run.
Question 199:
You maintain a popular mobile game deployed on Google Cloud services that include Firebase, Firestore, and Cloud Run functions. Recently, the game experienced a surge in usage, and the application encountered HTTP 429 RESOURCE_EXHAUSTED errors when accessing the Firestore API. The application has now stabilized. You want to quickly fix this issue because your company has a marketing campaign next week and you expect another surge in usage.
What should you do?
A. Request a quota increase, and modify the application code to retry the Firestore API call with fixed backoff. B. Request a quota increase, and modify the application code to retry the Firestore API call with exponential backoff. C. Optimize database queries to reduce read/write operations, and modify the application code to retry the Firestore API call with fixed backoff. D. Optimize database queries to reduce read/write operations, and modify the application code to retry the Firestore API call with exponential backoff.
D. Optimize database queries to reduce read/write operations, and modify the application code to retry the Firestore API call with exponential backoff.
Nowadays, the certification exams become more and more important and required by more and more
enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare
for the exam in a short time with less efforts? How to get a ideal result and how to find the
most reliable resources? Here on Vcedump.com, you will find all the answers.
Vcedump.com provide not only Google exam questions,
answers and explanations but also complete assistance on your exam preparation and certification
application. If you are confused on your PROFESSIONAL-CLOUD-DEVELOPER exam preparations
and Google certification application, do not hesitate to visit our
Vcedump.com to find your solutions here.