Google PROFESSIONAL-CLOUD-DEVELOPER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-DEVELOPER Online Questions & Answers

• Question 231:

  You are working on a social media application. You plan to add a feature that allows users to upload images. These images will be 2 MB - 1 GB in size. You want to minimize their infrastructure operations overhead for this feature.

  What should you do?

  A. Change the application to accept images directly and store them in the database that stores other user information.
  B. Change the application to create signed URLs for Cloud Storage. Transfer these signed URLs to the client application to upload images to Cloud Storage.
  C. Set up a web server on GCP to accept user images and create a file store to keep uploaded files. Change the application to retrieve images from the file store.
  D. Create a separate bucket for each user in Cloud Storage. Assign a separate service account to allow write access on each bucket. Transfer service account credentials to the client application based on user information. The application uses this service account to upload images to Cloud Storage.
  B. Change the application to create signed URLs for Cloud Storage. Transfer these signed URLs to the client application to upload images to Cloud Storage.

  ---

  Explanation

  https://cloud.google.com/blog/products/storage-data-transfer/uploading-images-directly-to-cloud-storage-by-using-signed-url

• Question 232:

  You are migrating a containerized application to Cloud Run. You plan to use Cloud Build to build your container image and push it to Artifact Registry, and you plan to use Cloud Deploy to deploy the image to production. You need to ensure that only secure images are deployed to production.

  What should you do?

  A. Use Cloud Armor in front of Cloud Run to protect the container image from threats.
  B. Use Artifact Analysis to scan the image for vulnerabilities. Use Cloud Key Management Service to encrypt the image to be deployed to production.
  C. Use Secret Manager to store the encrypted image. Deploy this image to production.
  D. Use Binary Authorization to enforce a policy that only allows images that have been signed with a trusted key to be deployed to production.
  D. Use Binary Authorization to enforce a policy that only allows images that have been signed with a trusted key to be deployed to production.

  ---

  Explanation

  https://cloud.google.com/run/docs/deploying

• Question 233:

  You recently deployed an API to process hotel room requests. You need to enforce a quota on incoming API requests that allows no more than 1000 API search requests by each customer for every successful booking by that customer. You want the quota to reset every 24 hours. You want to prioritize the speed of the API over allowing exactly 1000 searches for every booking.

  What should you do?

  A. Configure an Apigee Quota policy with the Synchronous setting set to false. Reset the quota on every booking or when 24 hours have passed.
  B. Store a query counter in a Firestore document that uses the customer ID as the key. Reset the counter to zero when a booking occurs or 24 hours have passed. Deny a search request if the user's counter is over 1000.
  C. Store a query counter in memory that counts the number of search requests by each customer. Reset the counter to zero when a booking occurs or 24 hours have passed. Deny a search request if the user's counter is over 1000.
  D. In BigQuery, store a table row for each search and booking request along with the customer ID and current time. Query the table for the number of prior search and booking requests made in the last 24 hours. Deny the search request if the number of prior search requests is 1000 times more than the number of prior booking requests.
  A. Configure an Apigee Quota policy with the Synchronous setting set to false. Reset the quota on every booking or when 24 hours have passed.

  ---

  Explanation

  An Apigee Quota policy with the Synchronous setting set to false efficiently enforces quotas with high performance, prioritizing API speed. It allows quota resets based on bookings or time, as required, even if the enforcement is not perfectly exact.

• Question 234:

  Your API backend is running on multiple cloud providers. You want to generate reports for the network latency of your API.

  Which two steps should you take? (Choose two.)

  A. Use Zipkin collector to gather data.
  B. Use Fluentd agent to gather data.
  C. Use Stackdriver Trace to generate reports.
  D. Use Stackdriver Debugger to generate report.
  E. Use Stackdriver Profiler to generate report.
  A. Use Zipkin collector to gather data.
  C. Use Stackdriver Trace to generate reports.

• Question 235:

  You are parsing a log file that contains three columns: a timestamp, an account number (a string), and a transaction amount (a number). You want to calculate the sum of all transaction amounts for each unique account number efficiently.

  Which data structure should you use?

  A. A linked list
  B. A hash table
  C. A two-dimensional array
  D. A comma-delimited string
  B. A hash table

• Question 236:

  Your Cloud Function needs permission to access a Cloud Storage bucket.

  How should you grant access following least privilege?

  A. Assign Editor role to the default service account
  B. Assign Owner role to the project
  C. Create a custom service account with specific Storage role and assign it to the function
  D. Embed service account key in the function code
  C. Create a custom service account with specific Storage role and assign it to the function

  ---

  Explanation

  Creating a dedicated service account with only the required Cloud Storage permissions and assigning it to the Cloud Function ensures adherence to the principle of least privilege and improves security posture.

• Question 237:

  Your application is running on Compute Engine and is showing sustained failures for a small number of requests. You have narrowed the cause down to a single Compute Engine instance, but the instance is unresponsive to SSH.

  What should you do next?

  A. Reboot the machine.
  B. Enable and check the serial port output.
  C. Delete the machine and create a new one.
  D. Take a snapshot of the disk and attach it to a new machine.
  B. Enable and check the serial port output.

• Question 238:

  You are building a CI/CD pipeline that consists of a version control system, Cloud Build, and Container Registry. Each time a new tag is pushed to the repository, a Cloud Build job is triggered, which runs unit tests on the new code builds a new Docker container image, and pushes it into Container Registry. The last step of your pipeline should deploy the new container to your production Google Kubernetes Engine (GKE) cluster.

  You need to select a tool and deployment strategy that meets the following requirements:

  1. Zero downtime is incurred

  2. Testing is fully automated

  3. Allows for testing before being rolled out to users

  4. Can quickly rollback if needed

  What should you do?

  A. Trigger a Spinnaker pipeline configured as an A/B test of your new code and, if it is successful, deploy the container to production.
  B. Trigger a Spinnaker pipeline configured as a canary test of your new code and, if it is successful, deploy the container to production.
  C. Trigger another Cloud Build job that uses the Kubernetes CLI tools to deploy your new container to your GKE cluster, where you can perform a canary test.
  D. Trigger another Cloud Build job that uses the Kubernetes CLI tools to deploy your new container to your GKE cluster, where you can perform a shadow test.
  D. Trigger another Cloud Build job that uses the Kubernetes CLI tools to deploy your new container to your GKE cluster, where you can perform a shadow test.

• Question 239:

  In order to meet their business requirements, how should HipLocal store their application state?

  A. Use local SSDs to store state.
  B. Put a memcache layer in front of MySQL.
  C. Move the state storage to Cloud Spanner.
  D. Replace the MySQL instance with Cloud SQL.
  C. Move the state storage to Cloud Spanner.

• Question 240:

  You are developing a discussion portal that is built on Cloud Run. Incoming external requests are routed through a set of microservices before a response is sent. Some of these microservices connect to databases. You need to run a load test to identify any bottlenecks in the application when it is under load. You want to follow Google-recommended practices.

  What should you do?

  A. Modify the response to include a time series that shows elapsed time per service. Use Log Analytics in Cloud Logging to create a heatmap that exposes any service that could be a bottleneck.
  B. Configure Cloud Trace to capture the requests from the load testing clients. Review the timings in Cloud Trace.
  C. Expose the latency metrics per service for each request. Configure Google Cloud Managed Service for Prometheus, and use it to scrape and analyze the metrics.
  D. Add log statements that capture elapsed time. Analyze the logs and metrics by using BigQuery.
  B. Configure Cloud Trace to capture the requests from the load testing clients. Review the timings in Cloud Trace.

  ---

  Explanation

  https://cloud.google.com/run/docs/about-load-testing