[Dec-2023] Get 100% Real Professional-Cloud-Developer Exam Questions, Accurate & Verified Pass4training Dumps in the Real Exam!
Pass Your Cloud Developer Exams Fast. All Top Professional-Cloud-Developer Exam Questions Are Covered.
NEW QUESTION # 85
You are creating an App Engine application that writes a file to any user's Google Drive.
How should the application authenticate to the Google Drive API?
- A. With the App Engine service account and https://www.googleapis.com/auth/drive.filescope that generates a signed JWT.
- B. With an OAuth Client ID with delegated domain-wide authority.
- C. With the App Engine service account with delegated domain-wide authority.
- D. With an OAuth Client ID that uses the https://www.googleapis.com/auth/drive.filescope to obtain an access token for each user.
Answer: B
Explanation:
Explanation/Reference: https://developers.google.com/drive/api/v3/about-auth
NEW QUESTION # 86
The new version of your containerized application has been tested and is ready to deploy to production on Google Kubernetes Engine. You were not able to fully load-test the new version in pre-production environments, and you need to make sure that it does not have performance problems once deployed. Your deployment must be automated. What should you do?
- A. Deploy the application via a continuous delivery pipeline using canary deployments. Use Cloud Monitoring to look for performance issues. and ramp up traffic as the metrics support it.
- B. Deploy the application using kubectl and set the spec.updateStrategv.type to RollingUpdate. Use Cloud Monitoring to look for performance issues, and run the kubectl rollback command if there are any issues.
- C. Deploy the application via a continuous delivery pipeline using blue/green deployments. Use Cloud Monitoring to look for performance issues, and launch fully when the metrics support it.
- D. Use Cloud Load Balancing to slowly ramp up traffic between versions. Use Cloud Monitoring to look for performance issues.
Answer: C
Explanation:
Explanation
https://cloud.google.com/architecture/implementing-deployment-and-testing-strategies-on-gke#perform_a_blueg
NEW QUESTION # 87
You configured your Compute Engine instance group to scale automatically according to overall CPU usage. However, your application's response latency increases sharply before the cluster has finished adding up instances. You want to provide a more consistent latency experience for your end users by changing the configuration ot the instance group autoscaler. Which two configuration changes should you make? (Choose two.)
- A. Decrease the target CPU usage for the instance group autoscaler.
- B. Decrease the cool-down period for instances added to the group.
- C. Increase the target CPU usage for the instance group autoscaler.
- D. Remove the health-check for individual VMs in the instance group.
- E. Add the label "AUTOSCALE" to the instance group template.
Answer: C,E
NEW QUESTION # 88
You are creating an App Engine application that writes a file to any user's Google Drive.
How should the application authenticate to the Google Drive API?
- A. With an OAuth Client ID that uses the https://www.googleapis.com/auth/drive.file scope to obtain an access token for each user.
- B. With an OAuth Client ID with delegated domain-wide authority.
- C. With the App Engine service account with delegated domain-wide authority.
- D. With the App Engine service account and https://www.googleapis.com/auth/drive.file scope that generates a signed JWT.
Answer: B
Explanation:
Reference:
https://developers.google.com/drive/api/v3/about-auth
NEW QUESTION # 89
Your data is stored in Cloud Storage buckets. Fellow developers have reported that data downloaded from Cloud Storage is resulting in slow API performance. You want to research the issue to provide details to the GCP support team. Which command should you run?
- A. gcloud services test -o output.json gs://my-bucket
- B. gsutil test -o output.json gs://my-bucket
- C. gsutil perfdiag -o output.json gs://my-bucket
- D. gcloud compute scp example-instance:~/test-data -o output.json gs://my-bucket
Answer: C
Explanation:
Explanation/Reference: https://groups.google.com/forum/#!topic/gce-discussion/xBl9Jq5HDsY
NEW QUESTION # 90
You are developing a microservice-based application that will be deployed on a Google Kubernetes Engine cluster. The application needs to read and write to a Spanner database. You want to follow security best practices while minimizing code changes. How should you configure your application to retrieve Spanner credentials?
- A. Store the application credentials using Cloud Key Management Service, and retrieve them whenever a database connection is made.
- B. Configure the appropriate service accounts, and use Workload Identity to run the pods.
- C. Configure the appropriate routing rules, and use a VPC-native cluster to directly connect to the database.
- D. Store the application credentials as Kubernetes Secrets, and expose them as environment variables.
Answer: B
Explanation:
Explanation
https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity
NEW QUESTION # 91
Your team develops services that run on Google Cloud. You need to build a data processing service and will use Cloud Functions. The data to be processed by the function is sensitive. You need to ensure that invocations can only happen from authorized services and follow Google-recommended best practices for securing functions. What should you do?
- A. Create a service account with the Cloud Functions Viewer role. Use that service account to invoke the function.
- B. Create a service account with the Cloud Functions Invoker role. Use that service account to invoke the function.
- C. Enable Identity-Aware Proxy in your project. Secure function access using its permissions.
- D. Create an OAuth 2.0 client ID for your calling service in the same project as the function you want to secure. Use those credentials to invoke the function.
Answer: B
Explanation:
Reference:
https://medium.com/google-cloud/how-to-securely-invoke-a-cloud-function-from-google-kubernetes-engine-run
NEW QUESTION # 92
Your code is running on Cloud Functions in project A. It is supposed to write an object in a Cloud Storage bucket owned by project B. However, the write call is failing with the error "403 Forbidden".
What should you do to correct the problem?
- A. Grant your user account the roles/storage.objectCreator role for the Cloud Storage bucket.
- B. Enable the Cloud Storage API in project B.
- C. Grant your user account the roles/iam.serviceAccountUser role for the service-PROJECTA@gcf-admin- robot.iam.gserviceaccount.com service account.
- D. Grant the [email protected] service account the roles/ storage.objectCreator role for the Cloud Storage bucket.
Answer: C
NEW QUESTION # 93
You are working on a social media application. You plan to add a feature that allows users to upload images.
These images will be 2 MB - 1 GB in size. You want to minimize their infrastructure operations overhead for this feature. What should you do?
- A. Create a separate bucket for each user in Cloud Storage. Assign a separate service account to allow write access on each bucket. Transfer service account credentials to the client application based on user information. The application uses this service account to upload images to Cloud Storage.
- B. Set up a web server on GCP to accept user images and create a file store to keep uploaded files. Change the application to retrieve images from the file store.
- C. Change the application to accept images directly and store them in the database that stores other user information.
- D. Change the application to create signed URLs for Cloud Storage. Transfer these signed URLs to the client application to upload images to Cloud Storage.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/blog/products/storage-data-transfer/uploading-images-directly-to-cloud- storage-by-using-signed-url
NEW QUESTION # 94
Your company's development teams want to use Cloud Build in their projects to build and push Docker images to Container Registry. The operations team requires all Docker images to be published to a centralized, securely managed Docker registry that the operations team manages.
What should you do?
- A. Create a separate project for the operations team that has the open source Docker Registry deployed on a Compute Engine virtual machine instance. Create a username and password for each development team.
Store the username and password in the source code repository and use it to authenticate against the operations team's Docker registry. - B. Create a separate project for the operations team that has Container Registry configured. Create a Service Account for each development team and assign the appropriate permissions to allow it access to the operations team's registry. Store the service account key file in the source code repository and use it to authenticate against the operations team's registry.
- C. Create a separate project for the operations team that has Container Registry configured. Assign appropriate permissions to the Cloud Build service account in each developer team's project to allow access to the operation team's registry.
- D. Use Container Registry to create a registry in each development team's project. Configure the Cloud Build build to push the Docker image to the project's registry. Grant the operations team access to each development team's registry.
Answer: D
Explanation:
Reference: https://cloud.google.com/container-registry/
NEW QUESTION # 95
You are working on a social media application. You plan to add a feature that allows users to upload images. These images will be 2 MB - 1 GB in size. You want to minimize their infrastructure operations overhead for this feature. What should you do?
- A. Create a separate bucket for each user in Cloud Storage. Assign a separate service account to allow write access on each bucket. Transfer service account credentials to the client application based on user information. The application uses this service account to upload images to Cloud Storage.
- B. Set up a web server on GCP to accept user images and create a file store to keep uploaded files. Change the application to retrieve images from the file store.
- C. Change the application to accept images directly and store them in the database that stores other user information.
- D. Change the application to create signed URLs for Cloud Storage. Transfer these signed URLs to the client application to upload images to Cloud Storage.
Answer: D
NEW QUESTION # 96
What requirements are needed for iCloud to automatically back up an iOS device each day? (Choose two.)
- A. The device is connected to a power source.
- B. The device is powered off.
- C. The device is updated to latest iOS.
- D. The device's screen is locked.
- E. The device has two-factor authentication turned on.
Answer: A,D
Explanation:
Explanation/Reference:
Reference: https://support.apple.com/en-us/HT203977
NEW QUESTION # 97
Your team is developing an ecommerce platform for your company. Users will log in to the website and add items to their shopping cart. Users will be automatically logged out after 30 minutes of inactivity. When users log back in, their shopping cart should be saved. How should you store users' session and shopping cart information while following Google-recommended best practices?
- A. Store the session information in Memorystore for Redis or Memorystore for Memcached, and store the shopping cart information in Firestore.
- B. Store the shopping cart information in a file on Cloud Storage where the filename is the SESSION ID.
- C. Store the session information in Pub/Sub, and store the shopping cart information in Cloud SQL.
- D. Store the session and shopping cart information in a MySQL database running on multiple Compute Engine instances.
Answer: A
NEW QUESTION # 98
You are designing an application that will subscribe to and receive messages from a single Pub/Sub topic and insert corresponding rows into a database. Your application runs on Linux and leverages preemptible virtual machines to reduce costs. You need to create a shutdown script that will initiate a graceful shutdown. What should you do?
- A. Write a shutdown script that writes a file in a location that is being polled by the application once every five minutes. After the file is read, the application disconnects from the database.
- B. Write a shutdown script that broadcasts a message to all signed-in users that the Compute Engine instance is going down and instructs them to save current work and sign out.
- C. Write a shutdown script that uses inter-process signals to notify the application process to disconnect from the database.
- D. Write a shutdown script that publishes a message to the Pub/Sub topic announcing that a shutdown is in progress. After the application reads the message, it disconnects from the database.
Answer: D
NEW QUESTION # 99
You are using Cloud Build for your CI/CD pipeline to complete several tasks, including copying certain files to Compute Engine virtual machines. Your pipeline requires a flat file that is generated in one builder in the pipeline to be accessible by subsequent builders in the same pipeline. How should you store the file so that all the builders in the pipeline can access it?
- A. Output the file contents to a file in /workspace. Read from the same /workspace file in the subsequent build step.
- B. Use gsutil to output the file contents to a Cloud Storage object. Read from the same object in the subsequent build step.
- C. Store and retrieve the file contents using Compute Engine instance metadata.
- D. Add a build argument that runs an HTTP POST via curl to a separate web server to persist the value in one builder. Use an HTTP GET via curl from the subsequent build step to read the value.
Answer: A
Explanation:
https://cloud.google.com/build/docs/build-config-file-schema
NEW QUESTION # 100
You have an analytics application that runs hundreds of queries on BigQuery every few minutes using BigQuery API. You want to find out how much time these queries take to execute. What should you do?
- A. Use Stackdriver Trace to plot query execution time.
- B. Use Stackdriver Monitoring to plot query execution times.
- C. Use Stackdriver Trace to plot API execution time.
- D. Use Stackdriver Monitoring to plot slot usage.
Answer: B
NEW QUESTION # 101
Your company's development teams want to use Cloud Build in their projects to build and push Docker images to Container Registry. The operations team requires all Docker images to be published to a centralized, securely managed Docker registry that the operations team manages.
What should you do?
- A. Create a separate project for the operations team that has Container Registry configured. Create a Service Account for each development team and assign the appropriate permissions to allow it access to the operations team's registry. Store the service account key file in the source code repository and use it to authenticate against the operations team's registry.
- B. Create a separate project for the operations team that has Container Registry configured. Assign appropriate permissions to the Cloud Build service account in each developer team's project to allow access to the operation team's registry.
- C. Use Container Registry to create a registry in each development team's project. Configure the Cloud Build build to push the Docker image to the project's registry. Grant the operations team access to each development team's registry.
- D. Create a separate project for the operations team that has the open source Docker Registry deployed on a Compute Engine virtual machine instance. Create a username and password for each development team.Store the username and password in the source code repository and use it to authenticate against the operations team's Docker registry.
Answer: C
NEW QUESTION # 102
Your service adds text to images that it reads from Cloud Storage. During busy times of the year, requests to Cloud Storage fail with an HTTP 429 "Too Many Requests" status code.
How should you handle this error?
- A. Request a quota increase from the GCP Console.
- B. Retry the request with a truncated exponential backoff strategy.
- C. Add a cache-control header to the objects.
- D. Change the storage class of the Cloud Storage bucket to Multi-regional.
Answer: B
Explanation:
Explanation/Reference: https://developers.google.com/gmail/api/v1/reference/quota
NEW QUESTION # 103
You are deploying your applications on Compute Engine. One of your Compute Engine instances failed to launch. What should you do? (Choose two.)
- A. Check whether network traffic to or from your instance is being dropped.
- B. Troubleshoot firewall rules or routes on an instance.
- C. Check whether your instance boot disk is completely full.
- D. Determine whether your file system is corrupted.
- E. Access Compute Engine as a different SSH user.
Answer: C,D
Explanation:
Explanation
https://cloud.google.com/compute/docs/troubleshooting/vm-startup
NEW QUESTION # 104
......
Google Professional-Cloud-Developer certification exam is designed to test the skills and knowledge of professionals in cloud development. It is intended for individuals who have experience in developing and deploying applications on Google Cloud Platform. Professional-Cloud-Developer exam covers a wide range of topics, including Google Cloud Platform services, application development, security, and monitoring. Google Certified Professional - Cloud Developer certification is recognized globally and demonstrates the proficiency of professionals in cloud development.
Penetration testers simulate Professional-Cloud-Developer exam: https://www.pass4training.com/Professional-Cloud-Developer-pass-exam-training.html
Free Test Engine For Google Certified Professional - Cloud Developer Certification Exams: https://drive.google.com/open?id=1JzoMi1pbdsDvfnGb52TiX27m7xaurUy_
