Google PROFESSIONAL-CLOUD-DEVELOPER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-DEVELOPER Online Questions & Answers

• Question 281:

  You are a developer of a new customer-facing help desk chat service that is built on Cloud Run. Your customers use the chat option on your website to get support. The application saves each transcript as a text file with a unique identifier in a Cloud Storage bucket. After the conversation is done and before the chat window is closed, the customer receives a link to the chat transcript. You want to provide access to the chat transcript link for 2 hours. You need to configure this access using an approach that prioritizes security and follows Google-recommended practices.

  What should you do?

  A. Set the ACL permission on the Cloud Storage bucket. Set the permission of each text file to allUsers with READER access. Delete each text file 2 hours after it is created.
  B. Set the permission on the Cloud Storage bucket with the text files to allUsers. Delete each text file 2 hours after it is created.
  C. Create a new Cloud Storage bucket for each user. Grant the user access to the bucket with a conditional IAM role that expires after 2 hours.
  D. Create a signed URL for each text file that expires after 2 hours.
  D. Create a signed URL for each text file that expires after 2 hours.

  ---

  Explanation

  A signed URL is a secure, time-limited link that provides temporary access to a specific object in Cloud Storage. By creating a signed URL for each chat transcript with a 2-hour expiration, you ensure that only users with the URL can access the transcript and that access is automatically revoked after 2 hours. This approach prioritizes security and aligns with Google-recommended practices for providing temporary, secure access to files in Cloud Storage without modifying bucket permissions or setting up complex conditional IAM roles.

• Question 282:

  You are a developer at a large corporation. You manage three Google Kubernetes Engine clusters on Google Cloud. Your team's developers need to switch from one cluster to another regularly without losing access to their preferred development tools. You want to configure access to these multiple clusters while following Google-recommended best practices.

  What should you do?

  A. Ask the developers to use Cloud Shell and run gcloud container clusters get-credential to switch to another cluster.
  B. In a configuration file, define the clusters, users, and contexts. Share the file with the developers and ask them to use kubectl contig to add cluster, user, and context details.
  C. Ask the developers to install the gcloud CLI on their workstation and run gcloud container to switch to another cluster. clusters get-credentials
  D. Ask the developers to open three terminals on their workstation and use kubectl config to configure access to each cluster.
  B. In a configuration file, define the clusters, users, and contexts. Share the file with the developers and ask them to use kubectl contig to add cluster, user, and context details.

• Question 283:

  You are responsible for managing the security of internal applications in your company. The applications are deployed on Cloud Run, and use Secret Manager to store passwords needed to access internal databases. Each application can cache secrets for up to 15 minutes. You need to determine how to rotate the secrets. You want to avoid application downtime.

  What should you do?

  A. Store the new username and password in the secret. Reference the latest version of any secret required, and cache the secret for 15 minutes.
  B. Design the applications to retrieve the Latest secret payload on application startup, and continue to use the secret for the duration of the application run.
  C. Store the new password in the secret. Reference the latest version of any secret required, and cache the secret for 15 minutes.
  D. Store the new password in the secret. Design the applications to reference a specific secret version.Change the code to reference the new version, and schedule the deployment of the application during a maintenance window.
  C. Store the new password in the secret. Reference the latest version of any secret required, and cache the secret for 15 minutes.

  ---

  Explanation

  By storing the new password in the secret and referencing the latest version, the application can automatically pick up the updated secret without requiring any code changes or redeployments. Since the application caches the secret for 15 minutes, it will retrieve the new password when the cache expires, ensuring a seamless rotation process. This approach avoids downtime and keeps the secret rotation process secure and efficient.

• Question 284:

  Your Compute Engine managed instance group should replace unhealthy instances automatically.

  What must you configure?

  A. Autoscaler only
  B. Health check
  C. Startup script
  D. Metadata server
  B. Health check

  ---

  Explanation

  Managed instance groups rely on health checks to determine instance health and automatically recreate unhealthy instances.

• Question 285:

  Your analytics system executes queries against a BigQuery dataset. The SQL query is executed in batch and passes the contents of a SQL file to the BigQuery CLI. Then it redirects the BigQuery CLI output to another process. However, you are getting a permission error from the BigQuery CLI when the queries are executed.

  You want to resolve the issue.

  What should you do?

  A. Grant the service account BigQuery Data Viewer and BigQuery Job User roles.
  B. Grant the service account BigQuery Data Editor and BigQuery Data Viewer roles.
  C. Create a view in BigQuery from the SQL query and SELECT* from the view in the CLI.
  D. Create a new dataset in BigQuery, and copy the source table to the new dataset Query the new dataset and table from the CLI.
  A. Grant the service account BigQuery Data Viewer and BigQuery Job User roles.

• Question 286:

  You are a developer working with the CI/CD team to troubleshoot a new feature that your team introduced. The CI/CD team used HashiCorp Packer to create a new Compute Engine image from your development branch. The image was successfully built, but is not booting up. You need to investigate the issue with the CI/CD team.

  What should you do?

  A. Create a new feature branch, and ask the build team to rebuild the image.
  B. Shut down the deployed virtual machine, export the disk, and then mount the disk locally to access the boot logs.
  C. Install Packer locally, build the Compute Engine image locally, and then run it in your personal Google Cloud project.
  D. Check Compute Engine OS logs using the serial port, and check the Cloud Logging logs to confirm access to the serial port.
  D. Check Compute Engine OS logs using the serial port, and check the Cloud Logging logs to confirm access to the serial port.

• Question 287:

  You recently deployed an application to GKE where Pods are writing files to a Compute Engine persistent disk. You have created a PersistentVolumeClaim (PVC) and a PersistentVolume (PV) object on Kubernetes for the disk, and you reference the PVC in the deployment manifest file.

  You recently expanded the size of the persistent disk because the application has used up almost all of the disk space. You have logged on to one of the Pods, and you notice that the disk expansion is not visible in the container file system.

  What should you do?

  A. Set the spec.capacity.storage value of the PV object to match the size of the persistent disk. Apply the updated configuration by using kubectl.
  B. Recreate the application Pods by running the kubectl delete deployment DEPLOYMENT_NAME command, where the DEPLOYMENT_NAME parameter is && kubectl apply deployment.yaml the name of your deployment and deployment.yaml is its manifest file.
  C. Set the spec.resources.requests.storage value of the PVC object to match the size of the persistent disk. Apply the updated configuration by using kubectl.
  D. In the Pod, resize the disk partition to the maximum value by using the fdisk or parted utility.
  C. Set the spec.resources.requests.storage value of the PVC object to match the size of the persistent disk. Apply the updated configuration by using kubectl.

  ---

  Explanation

  https://cloud.google.com/kubernetes-engine/docs/how-to/persistent-volumes/volume-

  expansion

• Question 288:

  You are a developer at a large organization. You are deploying a web application to Google Kubernetes Engine (GKE). The DevOps team has built a CI/CD pipeline that uses Cloud Deploy to deploy the application to Dev, Test, and Prod clusters in GKE. After Cloud Deploy successfully deploys the application to the Dev cluster, you want to automatically promote it to the Test cluster.

  How should you configure this process following Google-recommended best practices?

  A. 1. Create a Cloud Build trigger that listens for SUCCEEDED Pub/Sub messages from the topic.clouddeploy-operations 2. Configure Cloud Build to include a step that promotes the application to the Test cluster.
  B. 1. Create a Cloud Function that calls the Google Cloud Deploy API to promote the application to the Test cluster. 2. Configure this function to be triggered by SUCCEEDED Pub/Sub messages from the cloud- topic.builds
  C. 1. Create a Cloud Function that calls the Google Cloud Deploy API to promote the application to the Test cluster. 2. Configure this function to be triggered by SUCCEEDED Pub/Sub messages from the topic.clouddeploy-operations
  D. 1. Create a Cloud Build pipeline that uses the gke-deploy builder. 2. Create a Cloud Build trigger that listens for SUCCEEDED Pub/Sub messages from the cloud- topic.builds 3. Configure this pipeline to run a deployment step to the Test cluster.
  C. 1. Create a Cloud Function that calls the Google Cloud Deploy API to promote the application to the Test cluster. 2. Configure this function to be triggered by SUCCEEDED Pub/Sub messages from the topic.clouddeploy-operations

• Question 289:

  You are developing an application that consists of several microservices running in a Google Kubernetes Engine cluster. One microservice needs to connect to a third-party database running on-premises. You need to store credentials to the database and ensure that these credentials can be rotated while following security best practices.

  What should you do?

  A. Store the credentials in a sidecar container proxy, and use it to connect to the third-party database.
  B. Configure a service mesh to allow or restrict traffic from the Pods in your microservice to the database.
  C. Store the credentials in an encrypted volume mount, and associate a Persistent Volume Claim with the client Pod.
  D. Store the credentials as a Kubernetes Secret, and use the Cloud Key Management Service plugin to handle encryption and decryption.
  D. Store the credentials as a Kubernetes Secret, and use the Cloud Key Management Service plugin to handle encryption and decryption.

• Question 290:

  You are designing a schema for a Cloud Spanner customer database. You want to store a phone number array field in a customer table. You also want to allow users to search customers by phone number.

  How should you design this schema?

  A. Create a table named Customers. Add an Array field in a table that will hold phone numbers for the customer.
  B. Create a table named Customers. Create a table named Phones. Add a CustomerId field in the Phones table to find the CustomerId from a phone number.
  C. Create a table named Customers. Add an Array field in a table that will hold phone numbers for the customer. Create a secondary index on the Array field.
  D. Create a table named Customers as a parent table. Create a table named Phones, and interleave this table into the Customer table. Create an index on the phone number field in the Phones table.
  D. Create a table named Customers as a parent table. Create a table named Phones, and interleave this table into the Customer table. Create an index on the phone number field in the Phones table.