Professional-Cloud-Developer - Latest Training Dumps

2023 Updated Professional-Cloud-Developer PDF for the Professional-Cloud-Developer Tests Free Updated Today!

Fully Updated Dumps PDF – Latest Professional-Cloud-Developer Exam Questions and Answers

Google Professional-Cloud-Developer exam is a certification that validates a developer’s expertise in building and deploying applications on the Google Cloud Platform (GCP). Google Certified Professional – Cloud Developer certification is ideal for software developers who want to demonstrate their proficiency in Google Cloud technologies, including App Engine, Compute Engine, Kubernetes Engine, and Cloud Functions. By passing the exam, developers can demonstrate their ability to design, develop, deploy, and manage scalable and reliable cloud applications on GCP.

NO.120 Your company has a new security initiative that requires all data stored in Google Cloud to be encrypted by customer-managed encryption keys. You plan to use Cloud Key Management Service (KMS) to configure access to the keys. You need to follow the “separation of duties” principle and Google-recommended best practices. What should you do? (Choose two.)

Provision Cloud KMS in its own project.

Do not assign an owner to the Cloud KMS project.

Provision Cloud KMS in the project where the keys are being used.

Grant the roles/cloudkms.admin role to the owner of the project where the keys from Cloud KMS are being used.

Grant an owner role for the Cloud KMS project to a different user than the owner of the project where the keys from Cloud KMS are being used.

NO.121 Your application is composed of a set of loosely coupled services orchestrated by code executed on Compute Engine. You want your application to easily bring up new Compute Engine instances that find and use a specific version of a service. How should this be configured?

Define your service endpoint information as metadata that is retrieved at runtime and used to connect to the desired service.

Define your service endpoint information as label data that is retrieved at runtime and used to connect to the desired service.

Define your service endpoint information to be retrieved from an environment variable at runtime and used to connect to the desired service.

Define your service to use a fixed hostname and port to connect to the desired service. Replace the service at the endpoint with your new version.

NO.122 Which equipment is used to check if an AC power outlet is properly grounded?

A conductive workbench mat

A ground polarity tester

A grounding cord with alligator clips

A nylon probe tool (black stick)

NO.123 You are trying to connect to your Google Kubernetes Engine (GKE) cluster using kubectl from Cloud Shell.
You have deployed your GKE cluster with a public endpoint. From Cloud Shell, you run the following command:

You notice that the kubectl commands time out without returning an error message. What is the most likely cause of this issue?

Your user account does not have privileges to interact with the cluster using kubectl.

Your Cloud Shell external IP address is not part of the authorized networks of the cluster.

The Cloud Shell is not part of the same VPC as the GKE cluster.

A VPC firewall is blocking access to the cluster’s endpoint.

NO.124 You manage an ecommerce application that processes purchases from customers who can subsequently cancel or change those purchases. You discover that order volumes are highly variable and the backend order-processing system can only process one request at a time. You want to ensure seamless performance for customers regardless of usage volume. It is crucial that customers’ order update requests are performed in the sequence in which they were generated. What should you do?

Send the purchase and change requests over WebSockets to the backend.

Send the purchase and change requests as REST requests to the backend.

Use a Pub/Sub subscriber in pull mode and use a data store to manage ordering.

Use a Pub/Sub subscriber in push mode and use a data store to manage ordering.

NO.125 You are developing a web application that contains private images and videos stored in a Cloud Storage bucket. Your users are anonymous and do not have Google Accounts. You want to use your application-specific logic to control access to the images and videos. How should you configure access?

Cache each web application user’s IP address to create a named IP table using Google Cloud Armor.
Create a Google Cloud Armor security policy that allows users to access the backend bucket.

Grant the Storage Object Viewer IAM role to allUsers. Allow users to access the bucket after authenticating through your web application.

Configure Identity-Aware Proxy (IAP) to authenticate users into the web application. Allow users to access the bucket after authenticating through IAP.

Generate a signed URL that grants read access to the bucket. Allow users to access the URL after authenticating through your web application.

NO.126 You want to view the memory usage of your application deployed on Compute Engine. What should you do?

Install the Stackdriver Client Library.

Install the Stackdriver Monitoring Agent.

Use the Stackdriver Metrics Explorer.

Use the Google Cloud Platform Console.

NO.127 You plan to make a simple HTML application available on the internet. This site keeps information about FAQs for your application. The application is static and contains images, HTML, CSS, and Javascript. You want to make this application available on the internet with as few steps as possible.
What should you do?

Upload your application to Cloud Storage.

Upload your application to an App Engine environment.

Create a Compute Engine instance with Apache web server installed. Configure Apache web server to host the application.

Containerize your application first. Deploy this container to Google Kubernetes Engine (GKE) and assign an external IP address to the GKE pod hosting the application.

NO.128 You need to configure a Deployment on Google Kubernetes Engine (GKE). You want to include a check that verifies that the containers can connect to the database. If the Pod is failing to connect, you want a script on the container to run to complete a graceful shutdown. How should you configure the Deployment?

Create two jobs: one that checks whether the container can connect to the database, and another that runs the shutdown script if the Pod is failing.

Create the Deployment with a livenessProbe for the container that will fail if the container can’t connect to the database. Configure a Prestop lifecycle handler that runs the shutdown script if the container is failing.

Create the Deployment with a PostStart lifecycle handler that checks the service availability. Configure a PreStop lifecycle handler that runs the shutdown script if the container is failing.

Create the Deployment with an initContainer that checks the service availability. Configure a Prestop lifecycle handler that runs the shutdown script if the Pod is failing.

NO.129 You need to migrate an internal file upload API with an enforced 500-MB file size limit to App Engine.
What should you do?

Use FTP to upload files.

Use CPanel to upload files.

Use signed URLs to upload files.

Change the API to be a multipart file upload API.

NO.130 Which service should HipLocal use for their public APIs?

Cloud Armor

Cloud Functions

Cloud Endpoints

Shielded Virtual Machines

NO.131 You are developing a corporate tool on Compute Engine for the finance department, which needs to authenticate users and verify that they are in the finance department. All company employees use G Suite.
What should you do?

Enable Cloud Identity-Aware Proxy on the HTTP(s) load balancer and restrict access to a Google Group containing users in the finance department. Verify the provided JSON Web Token within the application.

Enable Cloud Identity-Aware Proxy on the HTTP(s) load balancer and restrict access to a Google Group containing users in the finance department. Issue client-side certificates to everybody in the finance team and verify the certificates in the application.

Configure Cloud Armor Security Policies to restrict access to only corporate IP address ranges. Verify the provided JSON Web Token within the application.

Configure Cloud Armor Security Policies to restrict access to only corporate IP address ranges. Issue client side certificates to everybody in the finance team and verify the certificates in the application.

NO.132 Your company has created an application that uploads a report to a Cloud Storage bucket. When the report is uploaded to the bucket, you want to publish a message to a Cloud Pub/Sub topic. You want to implement a solution that will take a small amount to effort to implement.
What should you do?

Configure the Cloud Storage bucket to trigger Cloud Pub/Sub notifications when objects are modified.

Create an App Engine application to receive the file; when it is received, publish a message to the Cloud Pub/Sub topic.

Create a Cloud Function that is triggered by the Cloud Storage bucket. In the Cloud Function, publish a message to the Cloud Pub/Sub topic.

Create an application deployed in a Google Kubernetes Engine cluster to receive the file; when it is received, publish a message to the Cloud Pub/Sub topic.

NO.133 Your application is deployed in a Google Kubernetes Engine (GKE) cluster. You want to expose this application publicly behind a Cloud Load Balancing HTTP(S) load balancer. What should you do?

Configure a GKE Ingress resource.

Configure a GKE Service resource.

Configure a GKE Ingress resource with type: LoadBalancer.

Configure a GKE Service resource with type: LoadBalancer.

NO.134 In order for HipLocal to store application state and meet their stated business requirements, which database service should they migrate to?

Cloud Spanner

Cloud Datastore

Cloud Memorystore as a cache

Separate Cloud SQL clusters for each region

NO.135 You need to copy directory local-scripts and all of its contents from your local workstation to a Compute Engine virtual machine instance.
Which command should you use?
gsutil cp –project “my-gcp-project” -r ~/local-scripts/ gcp-instance-name:~/

server-scripts/ –zone “us-east1-b”
gsutil cp –project “my-gcp-project” -R ~/local-scripts/ gcp-instance-name:~/

server-scripts/ –zone “us-east1-b”
gcloud compute scp –project “my-gcp-project” –recurse ~/local-scripts/ gcp-

instance-name:~/server-scripts/ –zone “us-east1-b”
gcloud compute mv –project “my-gcp-project” –recurse ~/local-scripts/ gcp-

instance-name:~/server-scripts/ –zone “us-east1-b”

NO.136 You are building a CI/CD pipeline that consists of a version control system, Cloud Build, and Container Registry. Each time a new tag is pushed to the repository, a Cloud Build job is triggered, which runs unit tests on the new code builds a new Docker container image, and pushes it into Container Registry. The last step of your pipeline should deploy the new container to your production Google Kubernetes Engine (GKE) cluster.
You need to select a tool and deployment strategy that meets the following requirements:
* Zero downtime is incurred
* Testing is fully automated
* Allows for testing before being rolled out to users
* Can quickly rollback if needed
What should you do?

Trigger a Spinnaker pipeline configured as an A/B test of your new code and, if it is successful, deploy the container to production.

Trigger a Spinnaker pipeline configured as a canary test of your new code and, if it is successful, deploy the container to production.

Trigger another Cloud Build job that uses the Kubernetes CLI tools to deploy your new container to your GKE cluster, where you can perform a canary test.

Trigger another Cloud Build job that uses the Kubernetes CLI tools to deploy your new container to your GKE cluster, where you can perform a shadow test.

NO.137 Your company’s development teams want to use Cloud Build in their projects to build and push Docker images to Container Registry. The operations team requires all Docker images to be published to a centralized, securely managed Docker registry that the operations team manages.
What should you do?

Use Container Registry to create a registry in each development team’s project. Configure the Cloud Build build to push the Docker image to the project’s registry. Grant the operations team access to each development team’s registry.

Create a separate project for the operations team that has Container Registry configured. Assign appropriate permissions to the Cloud Build service account in each developer team’s project to allow access to the operation team’s registry.

Create a separate project for the operations team that has Container Registry configured. Create a Service Account for each development team and assign the appropriate permissions to allow it access to the operations team’s registry. Store the service account key file in the source code repository and use it to authenticate against the operations team’s registry.

Create a separate project for the operations team that has the open source Docker Registry deployed on a Compute Engine virtual machine instance. Create a username and password for each development team.
Store the username and password in the source code repository and use it to authenticate against the operations team’s Docker registry.

NO.138 You are developing an application that reads credit card data from a Pub/Sub subscription. You have written code and completed unit testing. You need to test the Pub/Sub integration before deploying to Google Cloud. What should you do?

Create a service to publish messages, and deploy the Pub/Sub emulator. Generate random content in the publishing service, and publish to the emulator.

Create a service to publish messages to your application. Collect the messages from Pub/Sub in production, and replay them through the publishing service.

Create a service to publish messages, and deploy the Pub/Sub emulator. Collect the messages from Pub/Sub in production, and publish them to the emulator.

Create a service to publish messages, and deploy the Pub/Sub emulator. Publish a standard set of testing messages from the publishing service to the emulator.

NO.139 You want to view the memory usage of your application deployed on Compute Engine. What should you do?

Install the Stackdriver Client Library.

Install the Stackdriver Monitoring Agent.

Use the Stackdriver Metrics Explorer.

Use the Google Cloud Platform Console.

Google Professional-Cloud-Developer exam is a certification exam that is used to validate the skills and knowledge of individuals who want to demonstrate their proficiency in developing and deploying applications on Google Cloud Platform. Professional-Cloud-Developer exam is designed to test the candidate’s ability to design, build, test, and deploy applications on the Google Cloud Platform using the appropriate development tools and technologies.

Free Professional-Cloud-Developer Exam Questions Professional-Cloud-Developer Actual Free Exam Questions: https://www.trainingdump.com/Google/Professional-Cloud-Developer-practice-exam-dumps.html

Category Professional-Cloud-Developer

[Q120-Q139] 2023 Updated Professional-Cloud-Developer PDF for the Professional-Cloud-Developer Tests Free Updated Today!