View All Professional-Cloud-Developer Actual Exam Questions Answers and Explanations for Free Dec-2023 [Q122-Q144]

4.2/5 - (4 votes)

View All Professional-Cloud-Developer Actual Exam Questions Answers and Explanations for Free Dec-2023

The Most In-Demand Google Professional-Cloud-Developer Pass Guaranteed Quiz

NEW QUESTION 122
You have written a Cloud Function that accesses other Google Cloud resources. You want to secure the environment using the principle of least privilege. What should you do?

Create a new service account that has Editor authority to access the resources. The deployer is given permission to get the access token.

Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to get the access token.

Create a new service account that has Editor authority to access the resources. The deployer is given permission to act as the new service account.

Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to act as the new service account.

NEW QUESTION 123
You are running an application on App Engine that you inherited. You want to find out whether the application is using insecure binaries or is vulnerable to XSS attacks.
Which service should you use?

Cloud Amor

Stackdriver Debugger

Cloud Security Scanner

Stackdriver Error Reporting

NEW QUESTION 124
Your team is developing unit tests for Cloud Function code. The code is stored in a Cloud Source Repositories repository. You are responsible for implementing the tests. Only a specific service account has the necessary permissions to deploy the code to Cloud Functions. You want to ensure that the code cannot be deployed without first passing the tests. How should you configure the unit testing process?

Configure Cloud Build to deploy the Cloud Function. If the code passes the tests, a deployment approval is sent to you.

Configure Cloud Build to deploy the Cloud Function, using the specific service account as the build agent. Run the unit tests after successful deployment.

Configure Cloud Build to run the unit tests. If the code passes the tests, the developer deploys the Cloud Function.

Configure Cloud Build to run the unit tests, using the specific service account as the build agent. If the code passes the tests, Cloud Build deploys the Cloud Function.

NEW QUESTION 125
You are developing a JPEG image-resizing API hosted on Google Kubernetes Engine (GKE). Callers of the service will exist within the same GKE cluster. You want clients to be able to get the IP address of the service.
What should you do?

Define a GKE Service. Clients should use the name of the A record in Cloud DNS to find the service’s cluster IP address.

Define a GKE Service. Clients should use the service name in the URL to connect to the service.

Define a GKE Endpoint. Clients should get the endpoint name from the appropriate environment variable in the client container.

Define a GKE Endpoint. Clients should get the endpoint name from Cloud DNS.

NEW QUESTION 126
You are developing an internal application that will allow employees to organize community events within your company. You deployed your application on a single Compute Engine instance. Your company uses Google Workspace (formerly G Suite), and you need to ensure that the company employees can authenticate to the application from anywhere. What should you do?

Add a public IP address to your instance, and restrict access to the instance using firewall rules. Allow your company’s proxy as the only source IP address.

Add an HTTP(S) load balancer in front of the instance, and set up Identity-Aware Proxy (IAP).
Configure the IAP settings to allow your company domain to access the website.

Set up a VPN tunnel between your company network and your instance’s VPC location on Google Cloud. Configure the required firewall rules and routing information to both the on-premises and Google Cloud networks.

Add a public IP address to your instance, and allow traffic from the internet. Generate a random hash, and create a subdomain that includes this hash and points to your instance. Distribute this DNS address to your company’s employees.

NEW QUESTION 127
You are creating a Google Kubernetes Engine (GKE) cluster and run this command:

The command fails with the error:

You want to resolve the issue. What should you do?

Request additional GKE quota is the GCP Console.

Request additional Compute Engine quota in the GCP Console.

Open a support case to request additional GKE quotA.

Decouple services in the cluster, and rewrite new clusters to function with fewer cores.

NEW QUESTION 128
Your teammate has asked you to review the code below. Its purpose is to efficiently add a large number of small rows to a BigQuery table.

Which improvement should you suggest your teammate make?

Include multiple rows with each request.

Perform the inserts in parallel by creating multiple threads.

Write each row to a Cloud Storage object, then load into BigQuery.

Write each row to a Cloud Storage object in parallel, then load into BigQuery.

NEW QUESTION 129
Your company’s development teams want to use various open source operating systems in their Docker builds.
When images are created in published containers in your company’s environment, you need to scan them for Common Vulnerabilities and Exposures (CVEs). The scanning process must not impact software development agility. You want to use managed services where possible. What should you do?

Enable the Vulnerability scanning setting in the Container Registry.

Create a Cloud Function that is triggered on a code check-in and scan the code for CVEs.

Disallow the use of non-commercially supported base images in your development environment.

Use Cloud Monitoring to review the output of Cloud Build to determine whether a vulnerable version has been used.

NEW QUESTION 130
You want to view the memory usage of your application deployed on Compute Engine. What should you do?

Install the Stackdriver Client Library.

Install the Stackdriver Monitoring Agent.

Use the Stackdriver Metrics Explorer.

Use the Google Cloud Platform Console.

NEW QUESTION 131
You manage an ecommerce application that processes purchases from customers who can subsequently cancel or change those purchases. You discover that order volumes are highly variable and the backend order-processing system can only process one request at a time. You want to ensure seamless performance for customers regardless of usage volume. It is crucial that customers’ order update requests are performed in the sequence in which they were generated. What should you do?

Send the purchase and change requests over WebSockets to the backend.

Send the purchase and change requests as REST requests to the backend.

Use a Pub/Sub subscriber in pull mode and use a data store to manage ordering.

Use a Pub/Sub subscriber in push mode and use a data store to manage ordering.

NEW QUESTION 132
You are working on a social media application. You plan to add a feature that allows users to upload images. These images will be 2 MB – 1 GB in size. You want to minimize their infrastructure operations overhead for this feature. What should you do?

Change the application to accept images directly and store them in the database that stores other user information.

Change the application to create signed URLs for Cloud Storage. Transfer these signed URLs to the client application to upload images to Cloud Storage.

Set up a web server on GCP to accept user images and create a file store to keep uploaded files. Change the application to retrieve images from the file store.

Create a separate bucket for each user in Cloud Storage. Assign a separate service account to allow write access on each bucket. Transfer service account credentials to the client application based on user information. The application uses this service account to upload images to Cloud Storage.

NEW QUESTION 133
Your website is deployed on Compute Engine. Your marketing team wants to test conversion rates between 3 different website designs.
Which approach should you use?

Deploy the website on App Engine and use traffic splitting.

Deploy the website on App Engine as three separate services.

Deploy the website on Cloud Functions and use traffic splitting.

Deploy the website on Cloud Functions as three separate functions.

NEW QUESTION 134
You are developing a microservice-based application that will run on Google Kubernetes Engine (GKE). Some of the services need to access different Google Cloud APIs. How should you set up authentication of these services in the cluster following Google-recommended best practices? (Choose two.)

Use the service account attached to the GKE node.

Enable Workload Identity in the cluster via the gcloud command-line tool.

Access the Google service account keys from a secret management service.

Store the Google service account keys in a central secret management service.

Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.

NEW QUESTION 135
Your application is deployed in a Google Kubernetes Engine (GKE) cluster. When a new version of your application is released, your CI/CD tool updates the spec.template.spec.containers[0].image value to reference the Docker image of your new application version. When the Deployment object applies the change, you want to deploy at least 1 replica of the new version and maintain the previous replicas until the new replica is healthy.
Which change should you make to the GKE Deployment object shown below?

Set the Deployment strategy to RollingUpdate with maxSurge set to 0, maxUnavailable set to 1.

Set the Deployment strategy to RollingUpdate with maxSurge set to 1, maxUnavailable set to 0.

Set the Deployment strategy to Recreate with maxSurge set to 0, maxUnavailable set to 1.

Set the Deployment strategy to Recreate with maxSurge set to 1, maxUnavailable set to 0.

NEW QUESTION 136
Your application is deployed on hundreds of Compute Engine instances in a managed instance group (MIG) in multiple zones. You need to deploy a new instance template to fix a critical vulnerability immediately but must avoid impact to your service. What setting should be made to the MIG after updating the instance template?

Set the Max Surge to 100%.

Set the Update mode to Opportunistic.

Set the Maximum Unavailable to 100%.

Set the Minimum Wait time to 0 seconds.

NEW QUESTION 137
Your team manages a Google Kubernetes Engine (GKE) cluster where an application is running. A different team is planning to integrate with this application. Before they start the integration, you need to ensure that the other team cannot make changes to your application, but they can deploy the integration on GKE. What should you do?

Using Identity and Access Management (IAM), grant the Viewer IAM role on the cluster project to the other team.

Create a new GKE cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.

Create a new namespace in the existing cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.

Create a new namespace in the existing cluster. Using Kubernetes role-based access control (RBAC), grant the Admin role on the new namespace to the other team.

NEW QUESTION 138
You are planning to deploy hundreds of microservices in your Google Kubernetes Engine (GKE) cluster. How should you secure communication between the microservices on GKE using a managed service?

Use global HTTP(S) Load Balancing with managed SSL certificates to protect your services

Deploy open source Istio in your GKE cluster, and enable mTLS in your Service Mesh

Install cert-manager on GKE to automatically renew the SSL certificates.

Install Anthos Service Mesh, and enable mTLS in your Service Mesh.

NEW QUESTION 139
Your teammate has asked you to review the code below, which is adding a credit to an account balance in Cloud Datastore. Which improvement should you suggest your teammate make?

Get the entity with an ancestor query.

Get and put the entity in a transaction.

Use a strongly consistent transactional database.

Don’t return the account entity from the function.

NEW QUESTION 140
Which of the following are required to setup iTunes backup with an iPhone 8? (Choose two.)

Encrypted volume on Mac or PC

Lightning to USB Cable

iCloud account

Computer compatible with iTunes

iTunes Store account

NEW QUESTION 141
You are designing a schema for a Cloud Spanner customer database. You want to store a phone number array field in a customer table. You also want to allow users to search customers by phone number. How should you design this schema?

Create a table named Customers. Add an Array field in a table that will hold phone numbers for the customer.

Create a table named Customers. Create a table named Phones. Add a CustomerId field in the Phones table to find the CustomerId from a phone number.

Create a table named Customers. Add an Array field in a table that will hold phone numbers for the customer. Create a secondary index on the Array field.

Create a table named Customers as a parent table. Create a table named Phones, and interleave this table into the Customer table. Create an index on the phone number field in the Phones table.

NEW QUESTION 142
Your company has deployed a new API to a Compute Engine instance. During testing, the API is not behaving as expected. You want to monitor the application over 12 hours to diagnose the problem within the application code without redeploying the application. Which tool should you use?

Cloud Trace

Cloud Monitoring

Cloud Debugger logpoints

Cloud Debugger snapshots

NEW QUESTION 143
Your team develops services that run on Google Kubernetes Engine. You need to standardize their log data using Google-recommended practices and make the data more useful in the fewest number of steps. What should you do? (Choose two.)

Create aggregated exports on application logs to BigQuery to facilitate log analytics.

Create aggregated exports on application logs to Cloud Storage to facilitate log analytics.

Write log output to standard output (stdout) as single-line JSON to be ingested into Cloud Logging as structured logs.

Mandate the use of the Logging API in the application code to write structured logs to Cloud Logging.

Mandate the use of the Pub/Sub API to write structured data to Pub/Sub and create a Dataflow streaming pipeline to normalize logs and write them to BigQuery for analytics.

NEW QUESTION 144
Which service should HipLocal use to enable access to internal apps?

Cloud VPN

Cloud Armor

Virtual Private Cloud

Cloud Identity-Aware Proxy

Google Professional-Cloud-Developer certification is an industry-recognized credential that demonstrates one’s expertise in cloud-native application development on the Google Cloud Platform. Google Certified Professional – Cloud Developer certification is particularly valuable for developers who work with Google Cloud technologies and are responsible for creating cloud-native applications that can scale and adapt to changing business requirements.

Professional-Cloud-Developer Free Certification Exam Material with 256 Q&As : https://www.passleadervce.com/Cloud-Developer/reliable-Professional-Cloud-Developer-exam-learning-guide.html