Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the Google Cloud Developer Professional-Cloud-Developer Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam Professional-Cloud-Developer Premium Access

View all detail and faqs for the Professional-Cloud-Developer exam

Go to Exam

702 Students Passed

84% Average Score

95% Same Questions

Viewing page 4 out of 6 pages

Viewing questions 31-40 out of questions

Questions # 31:

You have written a Cloud Function that accesses other Google Cloud resources. You want to secure the environment using the principle of least privilege. What should you do?

Options:

Create a new service account that has Editor authority to access the resources. The deployer is given permission to get the access token.

Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to get the access token.

Create a new service account that has Editor authority to access the resources. The deployer is given permission to act as the new service account.

Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to act as the new service account.

Questions # 32:

You are a developer at a large organization. Your team uses Git for source code management (SCM). You want to ensure that your team follows Google-recommended best practices to manage code to drive higher rates of software delivery. Which SCM process should your team use?

Options:

Each group of developers creates a feature branch from the main branch for their work, commits their changes to their branch, and merges their code into the main branch before each major release.

Each developer commits their code to the main branch before each product release, conducts testing, and rolls back if integration issues are detected.

Each group of developers copies the repository, commits their changes to their repository, and merges their code into the main repository before each product release.

Each developer creates a branch for their own work, commits their changes to their branch, and merges their code into the main branch after peer review.

Questions # 33:

You migrated some of your applications to Google Cloud. You are using a legacy monitoring platform deployed on-premises for both on-premises and cloud-deployed applications. You discover that your notification system is responding slowly to time-critical problems in the cloud applications. What should you do?

Options:

Replace your monitoring platform with Cloud Monitoring.

Install the Cloud Monitoring agent on your Compute Engine instances.

Migrate some traffic back to your old platform. Perform A/B testing on the two platforms concurrently.

Use Cloud Logging and Cloud Monitoring to capture logs, monitor, and send alerts. Send them to your existing platform.

Questions # 34:

You recently developed an application. You need to call the Cloud Storage API from a Compute Engine instance that doesn’t have a public IP address. What should you do?

Options:

Use Carrier Peering

Use VPC Network Peering

Use Shared VPC networks

Use Private Google Access

Questions # 35:

You manage your company's ecommerce platform's payment system, which runs on Google Cloud. Your company must retain user logs for 1 year for internal auditing purposes and for 3 years to meet compliance requirements. You need to store new user logs on Google Cloud to minimize on-premises storage usage and ensure that they are easily searchable. You want to minimize effort while ensuring that the logs are stored correctly. What should you do?

Options:

Store the logs in a Cloud Storage bucket with bucket lock turned on.

Store the logs in a Cloud Storage bucket with a 3-year retention period.

Store the logs in Cloud Logging as custom logs with a custom retention period.

Store the logs in a Cloud Storage bucket with a 1-year retention period. After 1 year, move the logs to another bucket with a 2-year retention period.

Questions # 36:

You need to deploy resources from your laptop to Google Cloud using Terraform. Resources in your Google Cloud environment must be created using a service account. Your Cloud Identity has the roles/iam.serviceAccountTokenCreator Identity and Access Management (IAM) role and the necessary permissions to deploy the resources using Terraform. You want to set up your development environment to deploy the desired resources following Google-recommended best practices. What should you do?

Options:

1) Download the service account’s key file in JSON format, and store it locally on your laptop.

2) Set the GOOGLE_APPLICATION_CREDENTIALS environment variable to the path of your downloaded key file.

1) Run the following command from a command line: gcloud config set auth/impersonate_service_account service-account-name@project.iam.gserviceacccount.com.

2) Set the GOOGLE_OAUTH_ACCESS_TOKEN environment variable to the value that is returned by the gcloud auth print-access-token command.

1) Run the following command from a command line: gcloud auth application-default login.

2) In the browser window that opens, authenticate using your personal credentials.

1) Store the service account's key file in JSON format in Hashicorp Vault.

2) Integrate Terraform with Vault to retrieve the key file dynamically, and authenticate to Vault using a short-lived access token.

Questions # 37:

Your company has a new security initiative that requires all data stored in Google Cloud to be encrypted by customer-managed encryption keys. You plan to use Cloud Key Management Service (KMS) to configure access to the keys. You need to follow the "separation of duties" principle and Google-recommended best practices. What should you do? (Choose two.)

Options:

Provision Cloud KMS in its own project.

Do not assign an owner to the Cloud KMS project.

Provision Cloud KMS in the project where the keys are being used.

Grant the roles/cloudkms.admin role to the owner of the project where the keys from Cloud KMS are being used.

Grant an owner role for the Cloud KMS project to a different user than the owner of the project where the keys from Cloud KMS are being used.

Questions # 38:

You are designing a schema for a table that will be moved from MySQL to Cloud Bigtable. The MySQL table is as follows:

Question # 38

How should you design a row key for Cloud Bigtable for this table?

Options:

Set Account_id as a key.

Set Account_id_Event_timestamp as a key.

Set Event_timestamp_Account_id as a key.

Set Event_timestamp as a key.

Questions # 39:

You manage an application that runs in a Compute Engine instance. You also have multiple backend services executing in stand-alone Docker containers running in Compute Engine instances. The Compute Engine instances supporting the backend services are scaled by managed instance groups in multiple regions. You want your calling application to be loosely coupled. You need to be able to invoke distinct service implementations that are chosen based on the value of an HTTP header found in the request. Which Google Cloud feature should you use to invoke the backend services?

Options:

Traffic Director

Service Directory

Anthos Service Mesh

Internal HTTP(S) Load Balancing

Questions # 40:

You are building a mobile application that will store hierarchical data structures in a database. The application will enable users working offline to sync changes when they are back online. A backend service will enrich the data in the database using a service account. The application is expected to be very popular and needs to scale seamlessly and securely. Which database and IAM role should you use?

Options:

Use Cloud SQL, and assign the roles/cloudsql.editor role to the service account.

Use Bigtable, and assign the roles/bigtable.viewer role to the service account.

Use Firestore in Native mode and assign the roles/datastore.user role to the service account.

Use Firestore in Datastore mode and assign the roles/datastore.viewer role to the service account.

Viewing page 4 out of 6 pages

Viewing questions 31-40 out of questions

TOP CODES

Top selling exam codes in the certification world, popular, in demand and updated to help you pass on the first try.

2V0-11.25

ADM-201

Agentforce-Specialist

CMMC-CCP

Data-Cloud-Consultant

PDI

PSE-Strata-Pro-24

Secure-Software-Design

Sharing-and-Visibility-Architect

Workday-Pro-Integrations

ZDTA