Free Google Professional-Cloud-Developer Exam Questions

Question 1

You are building a mobile application that will store hierarchical data structures in a database. The application will enable users working offline to sync changes when they are back online. A backend service will enrich the data in the database using a service account. The application is expected to be very popular and needs to scale seamlessly and securely. Which database and IAM role should you use?

A : Cloud SQL, and assign the roles/cloudsql.editor role to the service account.

B : Cloud Bigtable, and assign the roles/bigtable .viewer role to the service account.

C : Firestore in Native mode and assign the roles/datastore.user role to the service account.

D : Firestore in Datastore mode and assign the roles/datastore.viewer role to the service account.

Answer: A

Question 2

Working alongside the CI/CD team, you, as a developer, are tasked with identifying and resolving a problem that has arisen with a new feature that your team has recently introduced. The CI/CD team employed HashiCorp Packer to generate a fresh Compute Engine image from your development branch, which proved successful in its creation. However, the image is currently unable to start up and requires investigation by the CI/CD team.

What actions are recommended?

A : Install Packer on your device, build the Compute Engine image locally, and then run it in your personal Google Cloud project.

B : Verify the Compute Engine OS logs through the serial port and confirm access to the serial port by checking the Cloud Logging logs.

C : Create a new feature branch and request the build team to reconstruct the image.

D : Power off the virtual machine in use, export the disk, and mount it locally to access the boot logs.

Answer: B

Question 3

Your application is deployed across several Google Kubernetes Engine clusters, with each cluster managed by a Deployment. The Deployment has generated several replicas of your Pod in every cluster. You intend to access the logs sent to stdout for all the replicas in your Deployment across all clusters.

What is the appropriate command to use?

A : kubectl logs [PARAM]

B : gcloud logging read [PARAM]

C : kubectl exec ""it [PARAM] journalctl

D : gcloud compute ssh [PARAM] ""-command= 'sudo journalctl'

Answer: B

Question 4

What is a possible security measure to limit access to resources in App Engine?

A : Configuration of ingress traffic

B : Analysis of exposed URLs

C : Use of default domains

D : Use of App Engine firewall

Answer: D

Question 5

Azgomi is a community application that facilitates communication between people in close proximity, used for event planning and organizing sporting events, and for businesses to connect with their local communities. Azgomi's unique style of hyper-local community communication and business outreach is in demand around the world. The executive statement is to expand the number one local community app globally. The solution concept is to expand their existing service in new regions to better serve their global customers, and hire and train a new team to support these regions in their time zones. Azgomi wants to ensure the application scales smoothly and provides clear uptime data, and that they analyze and respond to any issues that occur. Their existing technical environment is a mix of on-premises hardware and infrastructure running in Google Cloud Platform.

Azgomi's investors want to expand their footprint and support the increase in demand they are seeing. They require the application to expand availability to new regions, support 10x as many concurrent users, ensure a consistent experience for users when they travel to different regions, obtain user activity metrics to better monetize their product, ensure compliance with regulations in new regions, reduce infrastructure management time and cost, and adopt Google-recommended practices for cloud computing. The technical requirements include providing secure communications between the on-premises data center and cloud-hosted applications and infrastructure, providing usage metrics and monitoring, requiring authentication and authorization for APIs, implementing faster and more accurate validation of new features, providing actionable information for logging and performance metrics, and scaling to meet user demand.

A recent security audit discovered that Azgomi's database credentials for their Compute Engine-hosted MySQL databases are stored in plain text on persistent disks. Azgomi needs to reduce the risk of these credentials being stolen.

What actions do you suggest for them?

A : Create a service account and download its key. Use it to authenticate to Cloud KMS for database credentials.

B : Create a service account and use its key to authenticate to Cloud KMS for a decryption key to access the database credentials.

C : Create a service account and give it the roles/iam.serviceAccountUser role. Authenticate using Cloud SQL Proxy while impersonating this account.

D : Grant the roles/secretmanager.secretAccessor role to the Compute Engine service account and use Secret Manager API to store and access the database credentials.

Answer: C