Google Google Certifications PROFESSIONAL-CLOUD-DEVELOPER Questions & Answers

• Question 211:

  You are developing an ecommerce web application that uses App Engine standard environment and Memorystore for Redis. When a user logs into the app, the application caches the user's information (e.g., session, name, address, preferences), which is stored for quick retrieval during checkout.

  While testing your application in a browser, you get a 502 Bad Gateway error. You have determined that the application is not connecting to Memorystore. What is the reason for this error?

  A. Your Memorystore for Redis instance was deployed without a public IP address.

  B. You configured your Serverless VPC Access connector in a different region than your App Engine instance.

  C. The firewall rule allowing a connection between App Engine and Memorystore was removed during an infrastructure update by the DevOps team.

  D. You configured your application to use a Serverless VPC Access connector on a different subnet in a different availability zone than your App Engine instance.

  Correct Answer: A

  Reference: https://cloud.google.com/endpoints/docs/openapi/troubleshoot-response-errors

• Question 212:

  You are developing an application that will handle requests from end users. You need to secure a Cloud Function called by the application to allow authorized end users to authenticate to the function via the application while restricting access to unauthorized users. You will integrate Google Sign-In as part of the solution and want to follow Google-recommended best practices. What should you do?

  A. Deploy from a source code repository and grant users the roles/cloudfunctions.viewer role.

  B. Deploy from a source code repository and grant users the roles/cloudfunctions.invoker role

  C. Deploy from your local machine using gcloud and grant users the roles/cloudfunctions.admin role

  D. Deploy from your local machine using gcloud and grant users the roles/cloudfunctions.developer role

  Correct Answer: C

• Question 213:

  You made a typo in a low-level Linux configuration file that prevents your Compute Engine instance from booting to a normal run level. You just created the Compute Engine instance today and have done no other maintenance on it, other than tweaking files.

  How should you correct this error?

  A. Download the file using scp, change the file, and then upload the modified version

  B. Configure and log in to the Compute Engine instance through SSH, and change the file

  C. Configure and log in to the Compute Engine instance through the serial port, and change the file

  D. Configure and log in to the Compute Engine instance using a remote desktop client, and change the file

  Correct Answer: C

  https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-using-serial-console

• Question 214:

  You are in the final stage of migrating an on-premises data center to Google Cloud. You are quickly approaching your deadline, and discover that a web API is running on a server slated for decommissioning. You need to recommend a solution to modernize this API while migrating to Google Cloud. The modernized web API must meet the following requirements:

  1.

  Autoscales during high traffic periods at the end of each month

  2.

  Written in Python 3.x

  3.

  Developers must be able to rapidly deploy new versions in response to frequent code changes You want to minimize cost, effort, and operational overhead of this migration. What should you do?

  A. Modernize and deploy the code on App Engine flexible environment.

  B. Modernize and deploy the code on App Engine standard environment.

  C. Deploy the modernized application to an n1-standard-1 Compute Engine instance.

  D. Ask the development team to re-write the application to run as a Docker container on Google Kubernetes Engine.

  Correct Answer: B

  https://cloud.google.com/appengine/docs/standard

• Question 215:

  You have deployed an HTTP(s) Load Balancer with the gcloud commands shown below.

  

  Health checks to port 80 on the Compute Engine virtual machine instance are failing and no traffic is sent to your instances. You want to resolve the problem. Which commands should you run?

  A. gcloud compute instances add-access-config ${NAME}-backend-instance-1

  B. gcloud compute instances add-tags ${NAME}-backend-instance-1 --tags http-server

  C. gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS

  D. gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --destination-ranges 130.211.0.0/22,35.191.0.0/16 --direction EGRESS

  Correct Answer: C

  Reference: https://cloud.google.com/vpc/docs/special-configurations

• Question 216:

  You work at a rapidly growing financial technology startup. You manage the payment processing application written in Go and hosted on Cloud Run in the Singapore region (asia-southeast1). The payment processing application processes data stored in a Cloud Storage bucket that is also located in the Singapore region.

  The startup plans to expand further into the Asia Pacific region. You plan to deploy the Payment Gateway in Jakarta, Hong Kong, and Taiwan over the next six months. Each location has data residency requirements that require customer data to reside in the country where the transaction was made. You want to minimize the cost of these deployments. What should you do?

  A. Create a Cloud Storage bucket in each region, and create a Cloud Run service of the payment processing application in each region.

  B. Create a Cloud Storage bucket in each region, and create three Cloud Run services of the payment processing application in the Singapore region.

  C. Create three Cloud Storage buckets in the Asia multi-region, and create three Cloud Run services of the payment processing application in the Singapore region.

  D. Create three Cloud Storage buckets in the Asia multi-region, and create three Cloud Run revisions of the payment processing application in the Singapore region.

  Correct Answer: A

• Question 217:

  Your company just experienced a Google Kubernetes Engine (GKE) API outage due to a zone failure. You want to deploy a highly available GKE architecture that minimizes service interruption to users in the event of a future zone failure. What should you do?

  A. Deploy Zonal clusters

  B. Deploy Regional clusters

  C. Deploy Multi-Zone clusters

  D. Deploy GKE on-premises clusters

  Correct Answer: B

  https://cloud.google.com/kubernetes-engine/docs/concepts/types-of-clusters#regional_clusters

  A regional cluster has multiple replicas of the control plane, running in multiple zones within a given region. Nodes in a regional cluster can run in multiple zones or a single zone depending on the configured node locations. By default, GKE replicates each node pool across three zones of the control plane's region. When you create a cluster or when you add a new node pool, you can change the default configuration by specifying the zone(s) in which the cluster's nodes run. All zones must be within the same region as the control plane.

• Question 218:

  You are a developer working with the CI/CD team to troubleshoot a new feature that your team introduced. The CI/CD team used HashiCorp Packer to create a new Compute Engine image from your development branch. The image was successfully built, but is not booting up. You need to investigate the issue with the CI/CD team. What should you do?

  A. Create a new feature branch, and ask the build team to rebuild the image.

  B. Shut down the deployed virtual machine, export the disk, and then mount the disk locally to access the boot logs.

  C. Install Packer locally, build the Compute Engine image locally, and then run it in your personal Google Cloud project.

  D. Check Compute Engine OS logs using the serial port, and check the Cloud Logging logs to confirm access to the serial port.

  Correct Answer: D

  https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-using-serial-console

• Question 219:

  You are planning to deploy your application in a Google Kubernetes Engine (GKE) cluster.

  Your application can scale horizontally, and each instance of your application needs to have a stable network identity and its own persistent disk.

  Which GKE object should you use?

  A. Deployment

  B. StatefulSet

  C. ReplicaSet

  D. ReplicaController

  Correct Answer: B

  Reference: https://livebook.manning.com/book/kubernetes-in-action/chapter-10/46

• Question 220:

  Your team develops services that run on Google Cloud. You want to process messages sent to a Pub/Sub topic, and then store them. Each message must be processed exactly once to avoid duplication of data and any data conflicts. You need to use the cheapest and most simple solution. What should you do?

  A. Process the messages with a Dataproc job, and write the output to storage.

  B. Process the messages with a Dataflow streaming pipeline using Apache Beam's PubSubIO package, and write the output to storage.

  C. Process the messages with a Cloud Function, and write the results to a BigQuery location where you can run a job to deduplicate the data.

  D. Retrieve the messages with a Dataflow streaming pipeline, store them in Cloud Bigtable, and use another Dataflow streaming pipeline to deduplicate messages.

  Correct Answer: B

  https://cloud.google.com/dataflow/docs/concepts/streaming-with-cloud-pubsub