Latest Google Professional Cloud Developer Exam Questions

dumps2022-03-16T01:46:12+08:00

Google Professional Cloud Developer exam questions are available. With studying all of Google Professional Cloud Developer exam questions, it is easy for you to pass the test. Each candidate has 2 hours to take Google Professional Cloud Developer exam. The available languages are English and Japanese. The registration fee is $200. Free Google Professional Cloud Developer exam questions are below.

Page 1 of 4

1. Topic 1, HipLocal

Case Study

Company Overview

HipLocal is a community application designed to facilitate communication between people in close proximity. It is used for event planning and organizing sporting events, and for businesses to connect with their local communities. HipLocal launched recently in a few neighborhoods in Dallas and is rapidly growing into a global phenomenon. Its unique style of hyper-local community communication and business outreach is in demand around the world.

Executive statement

We are the number one local community app; it’s time to take our local community services global. Our venture capital investors want to see rapid growth and the same great experience for new local and virtual communities that come online, whether their members are 10 or 10,000 miles away from each other.

Solution concept

HipLocal wants to expand their existing service, with updated functionality, in new regions to better serve their global customers. They want to hire and train a new team to support these regions in their time zones. They will need to ensure that the application scales smoothly and provides clear uptime data.

Existing technical environment

HipLocal’s environment is a mix of on-premises hardware and infrastructure running in Google Cloud Platform. The HipLocal team understands their application well but has limited experience in global scale applications.

Their existing technical environment is as follows:

✑ [email protected]

Business requirements

HipLocal’s investors want to expand their footprint and support the increase in demand they are seeing.

Their requirements are:

✑ [email protected]

Technical requirements

✑ [email protected]

HipLocal is configuring their access controls.

Which firewall configuration should they implement?

Block all traffic on port 443.

Allow all traffic into the network.

Allow traffic on port 443 for a specific tag.

Allow all traffic on port 443 into the network.

2. HipLocal wants to improve the resilience of their MySQL deployment, while also meeting their business and technical requirements.

Which configuration should they choose?

Use the current single instance MySQL on Compute Engine and several read-only MySQL servers on Compute Engine.

Use the current single instance MySQL on Compute Engine, and replicate the data to Cloud SQL in an external master configuration.

Replace the current single instance MySQL instance with Cloud SQL, and configure high availability.

Replace the current single instance MySQL instance with Cloud SQL, and Google provides redundancy without further configuration.

3. Which service should HipLocal use to enable access to internal apps?

Cloud VPN

Cloud Armor

Virtual Private Cloud

Cloud Identity-Aware Proxy

4. In order to meet their business requirements, how should HipLocal store their application state?

Use local SSDs to store state.

Put a memcache layer in front of MySQ

Move the state storage to Cloud Spanner.

Replace the MySQL instance with Cloud SQ

5. HipLocal wants to reduce the number of on-call engineers and eliminate manual scaling.

Which two services should they choose? (Choose two.)

Use Google App Engine services.

Use serverless Google Cloud Functions.

Use Knative to build and deploy serverless applications.

Use Google Kubernetes Engine for automated deployments.

Use a large Google Compute Engine cluster for deployments.

6. HipLocal's APIs are showing occasional failures, but they cannot find a pattern. They want to collect some metrics to help them troubleshoot.

What should they do?

Take frequent snapshots of all of the VMs.

Install the Stackdriver Logging agent on the VMs.

Install the Stackdriver Monitoring agent on the VMs.

Use Stackdriver Trace to look for performance bottlenecks.

7. Which database should HipLocal use for storing user activity?

BigQuery

Cloud SQL

Cloud Spanner

Cloud Datastore

8. HipLocal has connected their Hadoop infrastructure to GCP using Cloud Interconnect in order to query data stored on persistent disks.

Which IP strategy should they use?

Create manual subnets.

Create an auto mode subnet.

Create multiple peered VPCs.

Provision a single instance for NA

9. Which service should HipLocal use for their public APIs?

Cloud Armor

Cloud Functions

Cloud Endpoints

Shielded Virtual Machines

10. In order for HipLocal to store application state and meet their stated business requirements, which database service should they migrate to?

Cloud Spanner

Cloud Datastore

Cloud Memorystore as a cache

Separate Cloud SQL clusters for each region

Page 2 of 4

11. HipLocal's.net-based auth service fails under intermittent load.

What should they do?

Use App Engine for autoscaling.

Use Cloud Functions for autoscaling.

Use a Compute Engine cluster for the service.

Use a dedicated Compute Engine virtual machine instance for the service.

12. HipLocal’s data science team wants to analyze user reviews.

How should they prepare the data?

Use the Cloud Data Loss Prevention API for redaction of the review dataset.

Use the Cloud Data Loss Prevention API for de-identification of the review dataset.

Use the Cloud Natural Language Processing API for redaction of the review dataset.

Use the Cloud Natural Language Processing API for de-identification of the review dataset.

13. Topic 2, Misc. Questions

You are building a new API. You want to minimize the cost of storing and reduce the latency of serving images.

Which architecture should you use?

App Engine backed by Cloud Storage

Compute Engine backed by Persistent Disk

Transfer Appliance backed by Cloud Filestore

Cloud Content Delivery Network (CDN) backed by Cloud Storage

14. You manage an application that runs in a Compute Engine instance. You also have multiple backend services executing in stand-alone Docker containers running in Compute Engine instances. The Compute Engine instances supporting the backend services are scaled by managed instance groups in multiple regions. You want your calling application to be loosely coupled. You need to be able to invoke distinct service implementations that are chosen based on the value of an HTTP header found in the request.

Which Google Cloud feature should you use to invoke the backend services?

Traffic Director

Service Directory

Anthos Service Mesh

Internal HTTP(S) Load Balancing

15. Your security team is auditing all deployed applications running in Google Kubernetes Engine. After completing the audit, your team discovers that some of the applications send traffic within the cluster in clear text. You need to ensure that all application traffic is encrypted as quickly as possible while minimizing changes to your applications and maintaining support from Google.

What should you do?

Use Network Policies to block traffic between applications.

Install Istio, enable proxy injection on your application namespace, and then enable mTL

Define Trusted Network ranges within the application, and configure the applications to allow traffic only from those networks.

Use an automated process to request SSL Certificates for your applications from Let’s Encrypt and add them to your applications.

16. You have containerized a legacy application that stores its configuration on an NFS share. You need to deploy this application to Google Kubernetes Engine (GKE) and do not want the application serving traffic until after the configuration has been retrieved.

What should you do?

Use the gsutil utility to copy files from within the Docker container at startup, and start the service using an ENTRYPOINT script.

Create a PersistentVolumeClaim on the GKE cluster. Access the configuration files from the volume, and start the service using an ENTRYPOINT script.

Use the COPY statement in the Dockerfile to load the configuration into the container image. Verify that the configuration is available, and start the service using an ENTRYPOINT script.

Add a startup script to the GKE instance group to mount the NFS share at node startup. Copy the configuration files into the container, and start the service using an ENTRYPOINT script.

17. You are developing a microservice-based application that will be deployed on a Google Kubernetes Engine cluster. The application needs to read and write to a Spanner database. You want to follow security best practices while minimizing code changes.

How should you configure your application to retrieve Spanner credentials?

Configure the appropriate service accounts, and use Workload Identity to run the pods.

Store the application credentials as Kubernetes Secrets, and expose them as environment variables.

Configure the appropriate routing rules, and use a VPC-native cluster to directly connect to the database.

Store the application credentials using Cloud Key Management Service, and retrieve them whenever a database connection is made.

18. Deploy the new container on Cloud Run as a pipeline step.

19. You deployed a new application to Google Kubernetes Engine and are experiencing some performance degradation. Your logs are being written to Cloud Logging, and you are using a Prometheus sidecar model for capturing metrics. You need to correlate the metrics and data from the logs to troubleshoot the performance issue and send real-time alerts while minimizing costs.

What should you do?

Create custom metrics from the Cloud Logging logs, and use Prometheus to import the results using the Cloud Monitoring REST AP

Export the Cloud Logging logs and the Prometheus metrics to Cloud Bigtable. Run a query to join the results, and analyze in Google Data Studio.

Export the Cloud Logging logs and stream the Prometheus metrics to BigQuery. Run a recurring query to join the results, and send notifications using Cloud Tasks.

Export the Prometheus metrics and use Cloud Monitoring to view them as external metrics. Configure Cloud Monitoring to create log-based metrics from the logs, and correlate them with the Prometheus data.

20. You are developing an HTTP API hosted on a Compute Engine virtual machine instance that needs to be invoked by multiple clients within the same Virtual Private Cloud (VPC). You want clients to be able to get the IP address of the service.

What should you do?

Reserve a static external IP address and assign it to an HTTP(S) load balancing service's forwarding rule. Clients should use this IP address to connect to the service.

Reserve a static external IP address and assign it to an HTTP(S) load balancing service's forwarding rule. Then, define an A record in Cloud DN

Clients should use the name of the A record to connect to the service.

Ensure that clients use Compute Engine internal DNS by connecting to the instance name with the url https://[INSTANCE_NAME].[ZONE].c.[PROJECT_ID].internal/.

Ensure that clients use Compute Engine internal DNS by connecting to the instance name with the url https://[API_NAME]/[API_VERSION]/.

Page 3 of 4

21. You are parsing a log file that contains three columns: a timestamp, an account number (a string), and a transaction amount (a number). You want to calculate the sum of all transaction amounts for each unique account number efficiently.

Which data structure should you use?

A linked list

A hash table

A two-dimensional array

A comma-delimited string

22. Your teammate has asked you to review the code below, which is adding a credit to an account balance in Cloud Datastore.

Which improvement should you suggest your teammate make?

Get the entity with an ancestor query.

Get and put the entity in a transaction.

Use a strongly consistent transactional database.

Don’t return the account entity from the function.

23. You have deployed an HTTP(s) Load Balancer with the gcloud commands shown below.

Health checks to port 80 on the Compute Engine virtual machine instance are failing and no traffic is sent to your instances. You want to resolve the problem.

Which commands should you run?

gcloud compute instances add-access-config ${NAME}-backend-instance-1

gcloud compute instances add-tags ${NAME}-backend-instance-1 --tags http-server

gcloud compute firewall-rules create allow-lb -- network load-balancer C allow tcp -- source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS

gcloud compute firewall-rules create allow-lb -- network load-balancer C allow tcp -- destination-ranges 130.211.0.0/22,35.191.0.0/16 --direction EGRESS

24. You have two tables in an ANSI-SQL compliant database with identical columns that you need to quickly combine into a single table, removing duplicate rows from the result set.

What should you do?

Use the JOIN operator in SQL to combine the tables.

Use nested WITH statements to combine the tables.

Use the UNION operator in SQL to combine the tables.

Use the UNION ALL operator in SQL to combine the tables.

25. Your data is stored in Cloud Storage buckets. Fellow developers have reported that data downloaded from Cloud Storage is resulting in slow API performance. You want to research the issue to provide details to the GCP support team.

Which command should you run?

gsutil test Co output.json gs://my-bucket

gsutil perfdiag Co output.json gs://my-bucket

gcloud compute scp example-instance:~/test-data Co output.json gs://my-bucket

gcloud services test Co output.json gs://my-bucket

26. Your company is planning to migrate their on-premises Hadoop environment to the cloud. Increasing storage cost and maintenance of data stored in HDFS is a major concern for your company. You also want to make minimal changes to existing data analytics jobs and existing architecture.

How should you proceed with the migration?

Migrate your data stored in Hadoop to BigQuery. Change your jobs to source their information from BigQuery instead of the on-premises Hadoop environment.

Create Compute Engine instances with HDD instead of SSD to save costs. Then perform a full migration of your existing environment into the new one in Compute Engine instances.

Create a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop environment to the new Cloud Dataproc cluster. Move your HDFS data into larger HDD disks to save on storage costs.

Create a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop code objects to the new cluster. Move your data to Cloud Storage and leverage the Cloud Dataproc connector to run jobs on that data.

27. You recently developed a new service on Cloud Run. The new service authenticates using a custom service and then writes transactional information to a Cloud Spanner database. You need to verify that your application can support up to 5,000 read and 1,000 write transactions per second while identifying any bottlenecks that occur. Your test infrastructure must be able to autoscale.

What should you do?

Build a test harness to generate requests and deploy it to Cloud Run. Analyze the VPC Flow Logs using Cloud Logging.

Create a Google Kubernetes Engine cluster running the Locust or JMeter images to dynamically generate load tests. Analyze the results using Cloud Trace.

Create a Cloud Task to generate a test load. Use Cloud Scheduler to run 60,000 Cloud Task transactions per minute for 10 minutes. Analyze the results using Cloud Monitoring.

Create a Compute Engine instance that uses a LAMP stack image from the Marketplace, and use Apache Bench to generate load tests against the service. Analyze the results using Cloud Trace.

28. Your application is built as a custom machine image. You have multiple unique deployments of the machine image. Each deployment is a separate managed instance group with its own template. Each deployment requires a unique set of configuration values. You want to provide these unique values to each deployment but use the same custom machine image in all deployments. You want to use out-of-the-box features of Compute Engine.

What should you do?

Place the unique configuration values in the persistent disk.

Place the unique configuration values in a Cloud Bigtable table.

Place the unique configuration values in the instance template startup script.

Place the unique configuration values in the instance template instance metadata.

29. Your application is running on Compute Engine and is showing sustained failures for a small number of requests. You have narrowed the cause down to a single Compute Engine instance, but the instance is unresponsive to SSH.

What should you do next?

Reboot the machine.

Enable and check the serial port output.

Delete the machine and create a new one.

Take a snapshot of the disk and attach it to a new machine.

30. You have an HTTP Cloud Function that is called via POST. Each submission’s request body has a flat, unnested JSON structure containing numeric and text data. After the Cloud Function completes, the collected data should be immediately available for ongoing and complex analytics by many users in parallel.

How should you persist the submissions?

Directly persist each POST request’s JSON data into Datastore.

Transform the POST request’s JSON data, and stream it into BigQuery.

Transform the POST request’s JSON data, and store it in a regional Cloud SQL cluster.

Persist each POST request’s JSON data as an individual file within Cloud Storage, with the file name containing the request identifier.

Page 4 of 4

31. Your team develops services that run on Google Cloud. You need to build a data processing service and will use Cloud Functions. The data to be processed by the function is sensitive. You need to ensure that invocations can only happen from authorized services and follow Google-recommended best practices for securing functions.

What should you do?

Enable Identity-Aware Proxy in your project. Secure function access using its permissions.

Create a service account with the Cloud Functions Viewer role. Use that service account to invoke the function.

Create a service account with the Cloud Functions Invoker role. Use that service account to invoke the function.

Create an OAuth 2.0 client ID for your calling service in the same project as the function you want to secure. Use those credentials to invoke the function.

32. You have been tasked with planning the migration of your company’s application from on-premises to Google Cloud. Your company’s monolithic application is an ecommerce website. The application will be migrated to microservices deployed on Google Cloud in stages. The majority of your company’s revenue is generated through online sales, so it is important to minimize risk during the migration. You need to prioritize features and select the first functionality to migrate.

What should you do?

Migrate the Product catalog, which has integrations to the frontend and product database.

Migrate Payment processing, which has integrations to the frontend, order database, and third-party payment vendor.

Migrate Order fulfillment, which has integrations to the order database, inventory system, and third-party shipping vendor.

Migrate the Shopping cart, which has integrations to the frontend, cart database, inventory system, and payment processing system.

33. Your company has deployed a new API to App Engine Standard environment. During testing, the API is not behaving as expected. You want to monitor the application over time to diagnose the problem within the application code without redeploying the application.

Which tool should you use?

Stackdriver Trace

Stackdriver Monitoring

Stackdriver Debug Snapshots

Stackdriver Debug Logpoints

34. You have an application running in App Engine. Your application is instrumented with Stackdriver Trace. The /product-details request reports details about four known unique products at /sku-details as shown below. You want to reduce the time it takes for the request to complete.

What should you do?

Increase the size of the instance class.

Change the Persistent Disk type to SS

Change /product-details to perform the requests in parallel.

Store the /sku-details information in a database, and replace the webservice call with a database query.

35. Your API backend is running on multiple cloud providers. You want to generate reports for the network latency of your API.

Which two steps should you take? (Choose two.)

Use Zipkin collector to gather data.

Use Fluentd agent to gather data.

Use Stackdriver Trace to generate reports.

Use Stackdriver Debugger to generate report.

Use Stackdriver Profiler to generate report.

36. You are planning to migrate a MySQL database to the managed Cloud SQL database for Google Cloud. You have Compute Engine virtual machine instances that will connect with this Cloud SQL instance. You do not want to whitelist IPs for the Compute Engine instances to be able to access Cloud SQL.

What should you do?

Enable private IP for the Cloud SQL instance.

Whitelist a project to access Cloud SQL, and add Compute Engine instances in the whitelisted project.

Create a role in Cloud SQL that allows access to the database from external instances, and assign the Compute Engine instances to that role.

Create a CloudSQL instance on one project. Create Compute engine instances in a different project. Create a VPN between these two projects to allow internal access to CloudSQ

37. You are using Cloud Build for your CI/CD pipeline to complete several tasks, including copying certain files to Compute Engine virtual machines. Your pipeline requires a flat file that is generated in one builder in the pipeline to be accessible by subsequent builders in the same pipeline.

How should you store the file so that all the builders in the pipeline can access it?

Store and retrieve the file contents using Compute Engine instance metadata.

Output the file contents to a file in /workspace. Read from the same /workspace file in the subsequent build step.

Use gsutil to output the file contents to a Cloud Storage object. Read from the same object in the subsequent build step.

Add a build argument that runs an HTTP POST via curl to a separate web server to persist the value in one builder. Use an HTTP GET via curl from the subsequent build step to read the value.

38. You are writing a single-page web application with a user-interface that communicates with a third-party API for content using XMLHttpRequest. The data displayed on the UI by the API results is less critical than other data displayed on the same web page, so it is acceptable for some requests to not have the API data displayed in the UI. However, calls made to the API should not delay rendering of other parts of the user interface. You want your application to perform well when the API response is an error or a timeout.

What should you do?

Set the asynchronous option for your requests to the API to false and omit the widget displaying the API results when a timeout or error is encountered.

Set the asynchronous option for your request to the API to true and omit the widget displaying the API results when a timeout or error is encountered.

Catch timeout or error exceptions from the API call and keep trying with exponential backoff until the API response is successful.

Catch timeout or error exceptions from the API call and display the error response in the UI widget.

39. You need to migrate an internal file upload API with an enforced 500-MB file size limit to App Engine.

What should you do?

Use FTP to upload files.

Use CPanel to upload files.

Use signed URLs to upload files.

Change the API to be a multipart file upload AP

Latest Google Professional Cloud Developer Exam Questions

Latest Google Professional Cloud Developer Exam Questions

Share this post

Leave a Reply Cancel reply

Related Posts