Google Professional Cloud Developer Exam Questions Instant Access

Question 1

You recently deployed a Go application on Google Kubernetes Engine (GKE). The operations team has noticed that the application's CPU usage is high even when there is low production traffic. The operations team has asked you to optimize your application's CPU resource consumption. You want to determine which Go functions consume the largest amount of CPU. What should you do?

ADeploy a Fluent Bit daemonset on the GKE cluster to log data in Cloud Logging. Analyze the logs to get insights into your application code's performance.

BCreate a custom dashboard in Cloud Monitoring to evaluate the CPU performance metrics of your application.

CConnect to your GKE nodes using SSH. Run the top command on the shell to extract the CPU utilization of your application.

DModify your Go application to capture profiling data. Analyze the CPU metrics of your application in flame graphs in Profiler.

Answer : D

https://cloud.google.com/profiler/docs/about-profiler

Cloud Profiler is a statistical, low-overhead profiler that continuously gathers CPU usage and memory-allocation information from your production applications. It attributes that information to the source code that generated it, helping you identify the parts of your application that are consuming the most resources, and otherwise illuminating your applications performance characteristics.

https://cloud.google.com/profiler/docs

Question 2

You are planning to deploy hundreds of microservices in your Google Kubernetes Engine (GKE) cluster. How should you secure communication between the microservices on GKE using a managed service?

AUse global HTTP(S) Load Balancing with managed SSL certificates to protect your services

BDeploy open source Istio in your GKE cluster, and enable mTLS in your Service Mesh

CInstall cert-manager on GKE to automatically renew the SSL certificates.

DInstall Anthos Service Mesh, and enable mTLS in your Service Mesh.

Answer : D

https://cloud.google.com/service-mesh/docs/overview#security_benefits

- Ensures encryption in transit. Using mTLS for authentication also ensures that all TCP communications are encrypted in transit.

Question 3

You are working on a social media application. You plan to add a feature that allows users to upload images. These images will be 2 MB -- 1 GB in size. You want to minimize their infrastructure operations overhead for this feature. What should you do?

AChange the application to accept images directly and store them in the database that stores other user information.

BChange the application to create signed URLs for Cloud Storage. Transfer these signed URLs to the client application to upload images to Cloud Storage.

CSet up a web server on GCP to accept user images and create a file store to keep uploaded files. Change the application to retrieve images from the file store.

DCreate a separate bucket for each user in Cloud Storage. Assign a separate service account to allow write access on each bucket. Transfer service account credentials to the client application based on user information. The application uses this service account to upload images to Cloud Storage.

Answer : B

Question 4

You are designing an application that will subscribe to and receive messages from a single Pub/Sub topic and insert corresponding rows into a database. Your application runs on Linux and leverages preemptible virtual machines to reduce costs. You need to create a shutdown script that will initiate a graceful shutdown. What should you do?

AWrite a shutdown script that uses inter-process signals to notify the application process to disconnect from the database.

BWrite a shutdown script that broadcasts a message to all signed-in users that the Compute Engine instance is going down and instructs them to save current work and sign out.

CWrite a shutdown script that writes a file in a location that is being polled by the application once every five minutes. After the file is read, the application disconnects from the database.

DWrite a shutdown script that publishes a message to the Pub/Sub topic announcing that a shutdown is in progress. After the application reads the message, it disconnects from the database.

Answer : D

Question 5

Your team develops services that run on Google Kubernetes Engine. You need to standardize their log data using Google-recommended practices and make the data more useful in the fewest number of steps. What should you do? (Choose two.)

ACreate aggregated exports on application logs to BigQuery to facilitate log analytics.

BCreate aggregated exports on application logs to Cloud Storage to facilitate log analytics.

CWrite log output to standard output (stdout) as single-line JSON to be ingested into Cloud Logging as structured logs.

DMandate the use of the Logging API in the application code to write structured logs to Cloud Logging.

EMandate the use of the Pub/Sub API to write structured data to Pub/Sub and create a Dataflow streaming pipeline to normalize logs and write them to BigQuery for analytics.

Answer : A, C

https://cloud.google.com/stackdriver/docs/solutions/gke/managing-logs#best_practices

Question 6

You are developing an internal application that will allow employees to organize community events within your company. You deployed your application on a single Compute Engine instance. Your company uses Google Workspace (formerly G Suite), and you need to ensure that the company employees can authenticate to the application from anywhere. What should you do?

AAdd a public IP address to your instance, and restrict access to the instance using firewall rules. Allow your company's proxy as the only source IP address.

BAdd an HTTP(S) load balancer in front of the instance, and set up Identity-Aware Proxy (IAP). Configure the IAP settings to allow your company domain to access the website.

CSet up a VPN tunnel between your company network and your instance's VPC location on Google Cloud. Configure the required firewall rules and routing information to both the on-premises and Google Cloud networks.

DAdd a public IP address to your instance, and allow traffic from the internet. Generate a random hash, and create a subdomain that includes this hash and points to your instance. Distribute this DNS address to your company's employees.

Answer : B

https://cloud.google.com/blog/topics/developers-practitioners/control-access-your-web-sites-identity-aware-proxy

Question 7

Your company has a new security initiative that requires all data stored in Google Cloud to be encrypted by customer-managed encryption keys. You plan to use Cloud Key Management Service (KMS) to configure access to the keys. You need to follow the "separation of duties" principle and Google-recommended best practices. What should you do? (Choose two.)

AProvision Cloud KMS in its own project.

BDo not assign an owner to the Cloud KMS project.

CProvision Cloud KMS in the project where the keys are being used.

DGrant the roles/cloudkms.admin role to the owner of the project where the keys from Cloud KMS are being used.

EGrant an owner role for the Cloud KMS project to a different user than the owner of the project where the keys from Cloud KMS are being used.

Answer : A, B

https://cloud.google.com/kms/docs/separation-of-duties#using_separate_project