Google Google Certifications PROFESSIONAL-CLOUD-DEVELOPER Questions & Answers

• Question 71:

  Your team manages a Google Kubernetes Engine (GKE) cluster where an application is running. A different team is planning to integrate with this application. Before they start the integration, you need to ensure that the other team cannot make changes to your application, but they can deploy the integration on GKE. What should you do?

  A. Using Identity and Access Management (IAM), grant the Viewer IAM role on the cluster project to the other team.

  B. Create a new GKE cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.

  C. Create a new namespace in the existing cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.

  D. Create a new namespace in the existing cluster. Using Kubernetes role-based access control (RBAC), grant the Admin role on the new namespace to the other team.

  Correct Answer: D

• Question 72:

  You are developing an application that needs to store files belonging to users in Cloud Storage. You want each user to have their own subdirectory in Cloud Storage. When a new user is created, the corresponding empty subdirectory should also be created. What should you do?

  A. Create an object with the name of the subdirectory ending with a trailing slash ('/') that is zero bytes in length.

  B. Create an object with the name of the subdirectory, and then immediately delete the object within that subdirectory.

  C. Create an object with the name of the subdirectory that is zero bytes in length and has WRITER access control list permission.

  D. Create an object with the name of the subdirectory that is zero bytes in length. Set the Content-Type metadata to CLOUDSTORAGE_FOLDER.

  Correct Answer: A

  https://cloud.google.com/storage/docs/folders

  If you create an empty folder using the Google Cloud console, Cloud Storage creates a zero-byte object as a placeholder. For example, if you create a folder called folder in a bucket called my-bucket, a zero- byte object called gs://my-bucket/ folder/ is created. This placeholder is discoverable by other tools when listing the objects in the bucket, for example when using the gsutil ls command.

• Question 73:

  Your development team has been asked to refactor an existing monolithic application into a set of composable microservices. Which design aspects should you implement for the new application? (Choose two.)

  A. Develop the microservice code in the same programming language used by the microservice caller.

  B. Create an API contract agreement between the microservice implementation and microservice caller.

  C. Require asynchronous communications between all microservice implementations and microservice callers.

  D. Ensure that sufficient instances of the microservice are running to accommodate the performance requirements.

  E. Implement a versioning scheme to permit future changes that could be incompatible with the current interface.

  Correct Answer: BE

• Question 74:

  You are using Cloud Build to create a new Docker image on each source code commit to a Cloud Source Repositoties repository. Your application is built on every commit to the master branch. You want to release specific commits made to the master branch in an automated method. What should you do?

  A. Manually trigger the build for new releases.

  B. Create a build trigger on a Git tag pattern. Use a Git tag convention for new releases.

  C. Create a build trigger on a Git branch name pattern. Use a Git branch naming convention for new releases.

  D. Commit your source code to a second Cloud Source Repositories repository with a second Cloud Build trigger. Use this repository for new releases only.

  Correct Answer: C

  Reference: https://docs.docker.com/docker-hub/builds/

• Question 75:

  The development teams in your company want to manage resources from their local environments. You have been asked to enable developer access to each team's Google Cloud projects. You want to maximize efficiency while following Google-recommended best practices. What should you do?

  A. Add the users to their projects, assign the relevant roles to the users, and then provide the users with each relevant Project ID.

  B. Add the users to their projects, assign the relevant roles to the users, and then provide the users with each relevant Project Number.

  C. Create groups, add the users to their groups, assign the relevant roles to the groups, and then provide the users with each relevant Project ID.

  D. Create groups, add the users to their groups, assign the relevant roles to the groups, and then provide the users with each relevant Project Number.

  Correct Answer: C

• Question 76:

  You are using Cloud Build for your CI/CD pipeline to complete several tasks, including copying certain files to Compute Engine virtual machines. Your pipeline requires a flat file that is generated in one builder in the pipeline to be accessible by subsequent builders in the same pipeline. How should you store the file so that all the builders in the pipeline can access it?

  A. Store and retrieve the file contents using Compute Engine instance metadata.

  B. Output the file contents to a file in /workspace. Read from the same /workspace file in the subsequent build step.

  C. Use gsutil to output the file contents to a Cloud Storage object. Read from the same object in the subsequent build step.

  D. Add a build argument that runs an HTTP POST via curl to a separate web server to persist the value in one builder. Use an HTTP GET via curl from the subsequent build step to read the value.

  Correct Answer: B

  Explanation: https://cloud.google.com/build/docs/build-config-file-schema

• Question 77:

  You are planning to deploy your application in a Google Kubernetes Engine (GKE) cluster The application

  exposes an HTTP-based health check at /healthz. You want to use this health check endpoint to determine whether traffic should be routed to the pod by the load balancer.

  Which code snippet should you include in your Pod configuration?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  For the GKE ingress controller to use your readinessProbes as health checks, the Pods for an Ingress must exist at the time of Ingress creation. If your replicas are scaled to 0, the default health check will apply.

• Question 78:

  You recently developed an application. You need to call the Cloud Storage API from a Compute Engine instance that doesn't have a public IP address. What should you do?

  A. Use Carrier Peering

  B. Use VPC Network Peering

  C. Use Shared VPC networks

  D. Use Private Google Access

  Correct Answer: D

  Explanation: https://cloud.google.com/vpc/docs/private-google-access

• Question 79:

  You are developing an online gaming platform as a microservices application on Google Kubernetes Engine (GKE). Users on social media are complaining about long loading times for certain URL requests to the application. You need to investigate performance bottlenecks in the application and identify. which HTTP requests have a significantly high latency span in user requests What should you do?

  A. Instrument your microservices by installing the OpenTelemetry tracing package Update your application code to send traces to Trace for inspection and analysis Create an analysis report on Trace to analyze user requests

  B. Configure GKE workload metrics using kubect1 Select all Pods to send their metrics to Cloud Monitoring. Create a custom dashboard of application metrics in Cloud Monitoring to determine performance bottlenecks of your GKE cluster

  C. Install tcpdump on your GKE nodes. Run tcpdump to capture network traffic over an extended period of time to collect data Analyze the data files using Wireshark to determine the cause of high latency

  D. Update your microservices to log HTTP request methods and URL paths to STDOUT Use the logs router to send container logs to Cloud Logging Create filters in Cloud Logging to evaluate the latency of user requests across different methods and URL paths.

  Correct Answer: B

• Question 80:

  You recently migrated a monolithic application to Google Cloud by breaking it down into microservices. One of the microservices is deployed using Cloud Functions. As you modernize the application, you make a change to the API of the service that is backward- incompatible. You need to support both existing callers who use the original API and new callers who use the new API. What should you do?

  A. Leave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use a load balancer to distribute calls between the versions.

  B. Leave the original Cloud Function as-is and deploy a second Cloud Function that includes only the changed API. Calls are automatically routed to the correct function.

  C. Leave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use Cloud Endpoints to provide an API gateway that exposes a versioned API.

  D. Re-deploy the Cloud Function after making code changes to support the new API. Requests for both versions of the API are fulfilled based on a version identifier included in the call.

  Correct Answer: D

  Reference: https://cloud.google.com/endpoints/docs/openapi/versioning-an-api