Professional Cloud Developer practice test

1. Question 1 · 1

   You want to upload files from an on-premises virtual machine to Google Cloud Storage as part of a data migration. These files will be consumed by Cloud DataProc Hadoop cluster in a GCP environment. Which command should you use?

   Choose one answer.

   • gsutil cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
   • gcloud cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
   • hadoop fs cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
   • gcloud dataproc cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/

2. Question 2 · 1

   Your company wants to expand their users outside the United States for their popular application. The company wants to ensure 99.999% availability of the database for their application and also wants to minimize the read latency for their users across the globe. Which two actions should they take? (Choose two.)

   Choose all answers that apply.

   • Create a multi-regional Cloud Spanner instance with "nam-asia-eur1" configuration.
   • Create a multi-regional Cloud Spanner instance with "nam3" configuration.
   • Create a cluster with at least 3 Spanner nodes.
   • Create a cluster with at least 1 Spanner node.
   • Create a minimum of two Cloud Spanner instances in separate regions with at least one node.
   • Create a Cloud Dataflow pipeline to replicate data across different databases.

3. Question 3 · 1

   Your development team is using Cloud Build to promote a Node.js application built on App Engine from your staging environment to production. The application relies on several directories of photos stored in a Cloud Storage bucket named webphotos-staging in the staging environment. After the promotion, these photos must be available in a Cloud Storage bucket named webphotos-prod in the production environment. You want to automate the process where possible. What should you do?

   Choose one answer.

   • Manually copy the photos to webphotos-prod.
   • Add a startup script in the application's app.yami file to move the photos from webphotos-staging to webphotos-prod.
   • Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:
   • Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:

4. Question 4 · 1

   You are developing a web application that will be accessible over both HTTP and HTTPS and will run on Compute Engine instances. On occasion, you will need to SSH from your remote laptop into one of the Compute Engine instances to conduct maintenance on the app. How should you configure the instances while following Google-recommended best practices?

   Choose one answer.

   • Set up a backend with Compute Engine web server instances with a private IP address behind a TCP proxy load balancer.
   • Configure the firewall rules to allow all ingress traffic to connect to the Compute Engine web servers, with each server having a unique external IP address.
   • Configure Cloud Identity-Aware Proxy API for SSH access. Then configure the Compute Engine servers with private IP addresses behind an HTTP(s) load balancer for the application web traffic.
   • Set up a backend with Compute Engine web server instances with a private IP address behind an HTTP(S) load balancer. Set up a bastion host with a public IP address and open firewall ports. Connect to the web instances using the bastion host.

5. Question 5 · 1

   You have a mixture of packaged and internally developed applications hosted on a Compute Engine instance that is running Linux. These applications write log records as text in local files. You want the logs to be written to Cloud Logging. What should you do?

   Choose one answer.

   • Pipe the content of the files to the Linux Syslog daemon.
   • Install a Google version of fluentd on the Compute Engine instance.
   • Install a Google version of collectd on the Compute Engine instance.
   • Using cron, schedule a job to copy the log files to Cloud Storage once a day.

6. Question 6 · 1

   You want to create `fully baked` or `golden` Compute Engine images for your application. You need to bootstrap your application to connect to the appropriate database according to the environment the application is running on (test, staging, production). What should you do?

   Choose one answer.

   • Embed the appropriate database connection string in the image. Create a different image for each environment.
   • When creating the Compute Engine instance, add a tag with the name of the database to be connected. In your application, query the Compute Engine API to pull the tags for the current instance, and use the tag to construct the appropriate database connection string.
   • When creating the Compute Engine instance, create a metadata item with a key of ג€DATABASEג€ and a value for the appropriate database connection string. In your application, read the ג€DATABASEג€ environment variable, and use the value to connect to the appropriate database.
   • When creating the Compute Engine instance, create a metadata item with a key of ג€DATABASEג€ and a value for the appropriate database connection string. In your application, query the metadata server for the ג€DATABASEג€ value, and use the value to connect to the appropriate database.

7. Question 7 · 1

   You are developing a microservice-based application that will be deployed on a Google Kubernetes Engine cluster. The application needs to read and write to a Spanner database. You want to follow security best practices while minimizing code changes. How should you configure your application to retrieve Spanner credentials?

   Choose one answer.

   • Configure the appropriate service accounts, and use Workload Identity to run the pods.
   • Store the application credentials as Kubernetes Secrets, and expose them as environment variables.
   • Configure the appropriate routing rules, and use a VPC-native cluster to directly connect to the database.
   • Store the application credentials using Cloud Key Management Service, and retrieve them whenever a database connection is made.

8. Question 8 · 1

   You are deploying your application on a Compute Engine instance that communicates with Cloud SQL. You will use Cloud SQL Proxy to allow your application to communicate to the database using the service account associated with the application's instance. You want to follow the Google-recommended best practice of providing minimum access for the role assigned to the service account. What should you do?

   Choose one answer.

   • Assign the Project Editor role.
   • Assign the Project Owner role.
   • Assign the Cloud SQL Client role.
   • Assign the Cloud SQL Editor role.

9. Question 9 · 1

   Your team develops stateless services that run on Google Kubernetes Engine (GKE). You need to deploy a new service that will only be accessed by other services running in the GKE cluster. The service will need to scale as quickly as possible to respond to changing load. What should you do?

   Choose one answer.

   • Use a Vertical Pod Autoscaler to scale the containers, and expose them via a ClusterIP Service.
   • Use a Vertical Pod Autoscaler to scale the containers, and expose them via a NodePort Service.
   • Use a Horizontal Pod Autoscaler to scale the containers, and expose them via a ClusterIP Service.
   • Use a Horizontal Pod Autoscaler to scale the containers, and expose them via a NodePort Service.

10. Question 10 · 1

    You recently migrated a monolithic application to Google Cloud by breaking it down into microservices. One of the microservices is deployed using Cloud Functions. As you modernize the application, you make a change to the API of the service that is backward-incompatible. You need to support both existing callers who use the original API and new callers who use the new API. What should you do?

    Choose one answer.

    • Leave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use a load balancer to distribute calls between the versions.
    • Leave the original Cloud Function as-is and deploy a second Cloud Function that includes only the changed API. Calls are automatically routed to the correct function.
    • Leave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use Cloud Endpoints to provide an API gateway that exposes a versioned API.
    • Re-deploy the Cloud Function after making code changes to support the new API. Requests for both versions of the API are fulfilled based on a version identifier included in the call.

11. Question 11 · 1

    You are developing an application that will allow users to read and post comments on news articles. You want to configure your application to store and display user-submitted comments using Firestore. How should you design the schema to support an unknown number of comments and articles?

    Choose one answer.

    • Store each comment in a subcollection of the article.
    • Add each comment to an array property on the article.
    • Store each comment in a document, and add the comment's key to an array property on the article.
    • Store each comment in a document, and add the comment's key to an array property on the user profile.

12. Question 12 · 1

    You recently developed an application. You need to call the Cloud Storage API from a Compute Engine instance that doesn't have a public IP address. What should you do?

    Choose one answer.

    • Use Carrier Peering
    • Use VPC Network Peering
    • Use Shared VPC networks
    • Use Private Google Access

13. Question 13 · 1

    You need to migrate an internal file upload API with an enforced 500-MB file size limit to App Engine. What should you do?

    Choose one answer.

    • Use FTP to upload files.
    • Use CPanel to upload files.
    • Use signed URLs to upload files.
    • Change the API to be a multipart file upload API.

14. Question 14 · 1

    You are a developer working with the CI/CD team to troubleshoot a new feature that your team introduced. The CI/CD team used HashiCorp Packer to create a new Compute Engine image from your development branch. The image was successfully built, but is not booting up. You need to investigate the issue with the CI/ CD team. What should you do?

    Choose one answer.

    • Create a new feature branch, and ask the build team to rebuild the image.
    • Shut down the deployed virtual machine, export the disk, and then mount the disk locally to access the boot logs.
    • Install Packer locally, build the Compute Engine image locally, and then run it in your personal Google Cloud project.
    • Check Compute Engine OS logs using the serial port, and check the Cloud Logging logs to confirm access to the serial port.

15. Question 15 · 1

    You manage an application that runs in a Compute Engine instance. You also have multiple backend services executing in stand-alone Docker containers running in Compute Engine instances. The Compute Engine instances supporting the backend services are scaled by managed instance groups in multiple regions. You want your calling application to be loosely coupled. You need to be able to invoke distinct service implementations that are chosen based on the value of an HTTP header found in the request. Which Google Cloud feature should you use to invoke the backend services?

    Choose one answer.

    • Traffic Director
    • Service Directory
    • Anthos Service Mesh
    • Internal HTTP(S) Load Balancing

Paid access to all 329 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.