Professional-Cloud-Developer Certification Exam Dumps Questions in here [Oct-2023]
Updated Professional-Cloud-Developer Exam Practice Test Questions
Google Professional-Cloud-Developer exam is an excellent opportunity for developers who want to demonstrate their expertise in cloud development using GCP. Google Certified Professional - Cloud Developer certification validates the skills and knowledge required to build, deploy, and manage highly scalable and reliable cloud applications using GCP services. Passing Professional-Cloud-Developer exam can help developers advance their careers and open up new opportunities in cloud development.
NEW QUESTION # 14
You manage an application that runs in a Compute Engine instance. You also have multiple backend services executing in stand-alone Docker containers running in Compute Engine instances. The Compute Engine instances supporting the backend services are scaled by managed instance groups in multiple regions. You want your calling application to be loosely coupled. You need to be able to invoke distinct service implementations that are chosen based on the value of an HTTP header found in the request. Which Google Cloud feature should you use to invoke the backend services?
- A. Internal HTTP(S) Load Balancing
- B. Traffic Director
- C. Service Directory
- D. Anthos Service Mesh
Answer: A
NEW QUESTION # 15
You are designing a resource-sharing policy for applications used by different teams in a Google Kubernetes Engine cluster. You need to ensure that all applications can access the resources needed to run. What should you do? (Choose two.)
- A. Create a Kubernetes service account (KSA) for each application, and assign each KSA to the namespace.
- B. Create a namespace for each team, and attach resource quotas to each namespace.
- C. Use the Anthos Policy Controller to enforce label annotations on all namespaces. Use taints and tolerations to allow resource sharing for namespaces.
- D. Create a LimitRange to specify the default compute resource requirements for each namespace.
- E. Specify the resource limits and requests in the object specifications.
Answer: B,D
Explanation:
https://kubernetes.io/docs/concepts/policy/resource-quotas/
https://kubernetes.io/docs/concepts/policy/limit-range/
https://cloud.google.com/blog/products/containers-kubernetes/kubernetes-best-practices-resource-requests-and-limits
NEW QUESTION # 16
You are deploying a microservices application to Google Kubernetes Engine (GKE). The application will receive daily updates. You expect to deploy a large number of distinct containers that will run on the Linux operating system (OS). You want to be alerted to any known OS vulnerabilities in the new containers. You want to follow Google-recommended best practices. What should you do?
- A. Enable Container Analysis, and upload new container images to Artifact Registry. Review the vulnerability results before each deployment.
- B. Enable Container Analysis, and upload new container images to Artifact Registry. Review the critical vulnerability results before each deployment.
- C. Use the Container Analysis REST API to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.
- D. Use the gcloud CLI to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.
Answer: A
Explanation:
Explanation
https://cloud.google.com/container-analysis/docs/automated-scanning-howto
https://cloud.google.com/container-analysis/docs/os-overview says: The Container Scanning API allows you to automate OS vulnerability detection, scanning each time you push an image to Container Registry or Artifact Registry. Enabling this API also triggers language package scans for Go and Java vulnerabilities (Preview).
NEW QUESTION # 17
Users are complaining that your Cloud Run-hosted website responds too slowly during traffic spikes. You want to provide a better user experience during traffic peaks. What should you do?
- A. Perform as much work as possible in the background after the response has been returned to the user.
- B. Package application configuration and static data into the application image during build time.
- C. Read application configuration and static data from the database on application startup.
- D. Ensure that timeout exceptions and errors cause the Cloud Run instance to exit quickly so a replacement instance can be started.
Answer: A
NEW QUESTION # 18
Your team is developing unit tests for Cloud Function code. The code is stored in a Cloud Source Repositories repository. You are responsible for implementing the tests. Only a specific service account has the necessary permissions to deploy the code to Cloud Functions. You want to ensure that the code cannot be deployed without first passing the tests. How should you configure the unit testing process?
- A. Configure Cloud Build to deploy the Cloud Function, using the specific service account as the build agent. Run the unit tests after successful deployment.
- B. Configure Cloud Build to run the unit tests, using the specific service account as the build agent. If the code passes the tests, Cloud Build deploys the Cloud Function.
- C. Configure Cloud Build to deploy the Cloud Function. If the code passes the tests, a deployment approval is sent to you.
- D. Configure Cloud Build to run the unit tests. If the code passes the tests, the developer deploys the Cloud Function.
Answer: B
NEW QUESTION # 19
Which of the following customer statements would alert you to a safety issue? (Choose two.)
- A. The screen is too bright. It hurts my eyes.
- B. My iPhone flashed and sparked when I tried to charge it.
- C. My iPhone has fluctuating sound levels. Sometimes it is deafening.
- D. The corner of my iPad is badly bent.
- E. My new Apple Watch makes me itchy and my wrist is red and irritated.
- F. The home button on my iPhone seems to have sunk.
Answer: B,F
NEW QUESTION # 20
Your existing application keeps user state information in a single MySQL database. This state information is very user-specific and depends heavily on how long a user has been using an application. The MySQL database is causing challenges to maintain and enhance the schema for various users.
Which storage option should you choose?
- A. Cloud Storage
- B. Cloud Datastore/Firestore
- C. Cloud Spanner
- D. Cloud SQL
Answer: D
NEW QUESTION # 21
You migrated your applications to Google Cloud Platform and kept your existing monitoring platform. You now find that your notification system is too slow for time critical problems.
What should you do?
- A. Migrate some traffic back to your old platform and perform AB testing on the two platforms concurrently.
- B. Use Stackdriver to capture and alert on logs, then ship them to your existing platform.
- C. Install the Stackdriver agents on your Compute Engine instances.
- D. Replace your entire monitoring platform with Stackdriver.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/monitoring/
NEW QUESTION # 22
You
are deploying a single website on App Engine that needs to be accessible via the URL
http://www.altostrat.com/. What should you do?
- A. Verify domain ownership with Webmaster Central. Create a DNS CNAME record to point to the App Engine canonical name ghs.googlehosted.com.
- B. Define a mapping in dispatch.yaml to point the domain www.altostrat.com to your App Engine service.
Create a DNS CNAME record to point to the App Engine canonical name ghs.googlehosted.com. - C. Define a mapping in dispatch.yaml to point the domain www.altostrat.com to your App Engine service.
Define an A record pointing to the single global App Engine IP address. - D. Verify domain ownership with Webmaster Central. Define an A record pointing to the single global App Engine IP address.
Answer: A
Explanation:
Reference: https://cloud.google.com/appengine/docs/flexible/dotnet/mapping-custom-domains?hl=fa
NEW QUESTION # 23
Your company has a new security initiative that requires all data stored in Google Cloud to be encrypted by customer-managed encryption keys. You plan to use Cloud Key Management Service (KMS) to configure access to the keys. You need to follow the "separation of duties" principle and Google-recommended best practices. What should you do? (Choose two.)
- A. Do not assign an owner to the Cloud KMS project.
- B. Provision Cloud KMS in its own project.
- C. Grant an owner role for the Cloud KMS project to a different user than the owner of the project where the keys from Cloud KMS are being used.
- D. Grant the roles/cloudkms.admin role to the owner of the project where the keys from Cloud KMS are being used.
- E. Provision Cloud KMS in the project where the keys are being used.
Answer: A,B
Explanation:
Explanation
https://cloud.google.com/kms/docs/separation-of-duties#using_separate_project
NEW QUESTION # 24
You are running a containerized application on Google Kubernetes Engine. Your container images are stored in Container Registry. Your team uses CI/CD practices. You need to prevent the deployment of containers with known critical vulnerabilities. What should you do?
- A. * Enable the Container Scanning API to perform vulnerability scanning
* Review vulnerability reporting in Container Registry in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed - B. * Use Web Security Scanner to automatically crawl your application
* Review your application logs for scan results, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed - C. * Enable the Container Scanning API to perform vulnerability scanning
* Programmatically review vulnerability reporting through the Container Scanning API, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed - D. * Use Web Security Scanner to automatically crawl your application
* Review the scan results in the scan details page in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed
Answer: C
Explanation:
Explanation
https://cloud.google.com/binary-authorization/docs/creating-attestations-kritis
https://cloud.google.com/container-analysis/docs/os-overview
NEW QUESTION # 25
You want to upload files from an on-premises virtual machine to Google Cloud Storage as part of a data migration. These files will be consumed by Cloud DataProc Hadoop cluster in a GCP environment.
Which command should you use?
- A. gcloud dataproc cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
- B. gsutil cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
- C. gcloud cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
- D. hadoop fs cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
Answer: B
Explanation:
Explanation
The gsutil cp command allows you to copy data between your local file. storage. boto files generated by running "gsutil config"
NEW QUESTION # 26
You are evaluating developer tools to help drive Google Kubernetes Engine adoption and integration with your development environment, which includes VS Code and IntelliJ. What should you do?
- A. Use Cloud Shell to manage your infrastructure and applications from the command line.
- B. Use Cloud Code to develop applications.
- C. Use a Cloud Notebook instance to ingest and process data and deploy models.
- D. Use the Cloud Shell integrated Code Editor to edit code and configuration files.
Answer: B
Explanation:
Reference: https://cloud.google.com/code
NEW QUESTION # 27
You have written a Cloud Function that accesses other Google Cloud resources. You want to secure the environment using the principle of least privilege. What should you do?
- A. Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to act as the new service account.
- B. Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to get the access token.
- C. Create a new service account that has Editor authority to access the resources. The deployer is given permission to get the access token.
- D. Create a new service account that has Editor authority to access the resources. The deployer is given permission to act as the new service account.
Answer: A
NEW QUESTION # 28
When evaluating an issue, which of the following is an empathetic and supportive closed question about updating software on an iOS device?
- A. I notice that your iPhone software is not up to date; would you like me to walk you through updating the software?
- B. Updating your software is extremely easy, why haven't you done so?
- C. How to update your software is in the iPhone User's guide, why didn't you read it before using this phone?
- D. You do know you should always update your software, correct?
Answer: A
NEW QUESTION # 29
You have an application deployed in Google Kubernetes Engine (GKE) that reads and processes Pub/Sub messages. Each Pod handles a fixed number of messages per minute. The rate at which messages are published to the Pub/Sub topic varies considerably throughout the day and week, including occasional large batches of messages published at a single moment.
You want to scale your GKE Deployment to be able to process messages in a timely manner. What GKE feature should you use to automatically adapt your workload?
- A. Vertical Pod Autoscaler in Recommendation mode
- B. Vertical Pod Autoscaler in Auto mode
- C. Horizontal Pod Autoscaler based on an external metric
- D. Horizontal Pod Autoscaler based on resources utilization
Answer: D
Explanation:
Explanation
https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/
NEW QUESTION # 30
......
Verified Professional-Cloud-Developer dumps Q&As 100% Pass in First Attempt Guaranteed Updated Dump: https://drive.google.com/open?id=1K_gNsChbtXY8WXeZXqpgCfbpOW0rlMKc
Pass Cloud Developer Professional-Cloud-Developer Exam With 228 Questions: https://www.premiumvcedump.com/Google/valid-Professional-Cloud-Developer-premium-vce-exam-dumps.html