Free Google Professional-Cloud-Developer Exam Questions

Question 1

The task at hand is to create a microservice-based application on Google Kubernetes Engine (GKE). The application requires access to various Google Cloud APIs. Two of these services must be able to access these APIs.

What is the recommended approach for implementing authentication of these services in the cluster according to Google's best practices?

A : Store the Google service account keys in a central secret management service.

B : Enable Workload Identity in the cluster via the gcloud command-line tool.

C : Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.

D : Use the service account attached to the GKE node.

E : Access the Google service account keys from a secret management service.

Answer: C,E

Question 2

The application on Google Kubernetes Engine (GKE) is currently using a logging library and outputting to standard output. To export the logs to Cloud Logging, including metadata about each request, the simplest method will be used.

What actions are recommended?

A : Change your application's logging library to the Cloud Logging library, and configure your application to export logs to Cloud Logging.

B : Update your application to output logs in JSON format, and include the required metadata in the JSON.

C : Modify your application to output logs in CSV format, and add the necessary metadata to the CSV.

D : Install the Fluent Bit agent on each of your GKE nodes, and have the agent export all logs from /var/log.

Answer: C

Question 3

After deploying your application in Google Kubernetes Engine, you now require the release of a new version of the application. It is essential to have the capability to promptly revert to the previous version in case complications arise with the latest version.

What would be the most suitable deployment model to use?

A : Perform a rolling deployment, and test your new application after the deployment is complete.

B : Perform A/B testing, and test your application periodically after the new tests are implemented.

C : Perform a blue/green deployment, and test your new application after the deployment is complete.

D : Perform a canary deployment, and test your new application periodically after the new version is deployed.

Answer: C

Question 4

Azgomi is a community application that facilitates communication between people in close proximity, used for event planning and organizing sporting events, and for businesses to connect with their local communities. Azgomi's unique style of hyper-local community communication and business outreach is in demand around the world. The executive statement is to expand the number one local community app globally. The solution concept is to expand their existing service in new regions to better serve their global customers, and hire and train a new team to support these regions in their time zones. Azgomi wants to ensure the application scales smoothly and provides clear uptime data, and that they analyze and respond to any issues that occur. Their existing technical environment is a mix of on-premises hardware and infrastructure running in Google Cloud Platform.

Azgomi's investors want to expand their footprint and support the increase in demand they are seeing. They require the application to expand availability to new regions, support 10x as many concurrent users, ensure a consistent experience for users when they travel to different regions, obtain user activity metrics to better monetize their product, ensure compliance with regulations in new regions, reduce infrastructure management time and cost, and adopt Google-recommended practices for cloud computing. The technical requirements include providing secure communications between the on-premises data center and cloud-hosted applications and infrastructure, providing usage metrics and monitoring, requiring authentication and authorization for APIs, implementing faster and more accurate validation of new features, providing actionable information for logging and performance metrics, and scaling to meet user demand.

A recent security audit discovered that Azgomi's database credentials for their Compute Engine-hosted MySQL databases are stored in plain text on persistent disks. Azgomi needs to reduce the risk of these credentials being stolen.

What actions do you suggest for them?

A : Create a service account and download its key. Use it to authenticate to Cloud KMS for database credentials.

B : Create a service account and use its key to authenticate to Cloud KMS for a decryption key to access the database credentials.

C : Create a service account and give it the roles/iam.serviceAccountUser role. Authenticate using Cloud SQL Proxy while impersonating this account.

D : Grant the roles/secretmanager.secretAccessor role to the Compute Engine service account and use Secret Manager API to store and access the database credentials.

Answer: C

Question 5

What is the purpose of predefined roles in GCP?

A : To create custom roles with specific permissions

B : To quickly start working in GCP with broad permissions

C : To allow different activities focused directly on the capabilities offered by the service

D : To restrict access to a particular resource

Answer: B