Question 1

You are building a mobile application that will store hierarchical data structures in a database. The application will enable users working offline to sync changes when they are back online. A backend service will enrich the data in the database using a service account. The application is expected to be very popular and needs to scale seamlessly and securely. Which database and IAM role should you use?

Options :

A : Use Cloud SQL, and assign the roles/cloudsql.editor role to the service account.

B : Use Cloud Bigtable, and assign the roles/bigtable .viewer role to the service account.

C : Use Firestore in Native mode and assign the roles/datastore.user role to the service account.

D : Use Firestore in Datastore mode and assign the roles/datastore.viewer role to the service account.

Answer: A

Question 2

What is a possible security measure to limit access to resources in App Engine?

Options :

A : Configuration of ingress traffic

B : Analysis of exposed URLs

C : Use of default domains

D : Use of App Engine firewall

Answer: D

Question 3

Your team is responsible for maintaining an application that aggregates news articles from many different sources. Your monitoring dashboard contains publicly accessible real-time reports and runs on a Compute Engine instance as a web application. External stakeholders and analysts need to access these reports via a secure channel without authentication. How should you configure this secure channel?

Options :

A : Add a public IP address to the instance. Use the service account key of the instance to encrypt the traffic

B : Use Cloud Scheduler to trigger Cloud Build every hour to create an export from the reports. Store the reports in a public Cloud Storage bucket.

C : Add an HTTP(S) load balancer in front of the monitoring dashboard. Configure Identity-Aware Proxy to secure the communication channel.

D : Add an HTTP(S) load balancer in front of the monitoring dashboard. Set up a Google-managed SSL certificate on the load balancer for traffic encryption.

Answer: B

Question 4

Your application will be deployed on a Compute Engine instance that will communicate with Cloud SQL. In order to allow communication between the application and the database using the service account associated with the instance, you will use Cloud SQL Proxy. It is recommended by Google to provide minimum access for the role assigned to the service account, which you intend to follow as a best practice.What actions do you recommend taking?

Options :

A : Assign the Project Editor role.

B : Assign the Cloud SQL Client role.

C : Assign the Project Owner role.

D : Assign the Cloud SQL Editor role.

Answer: B

Question 5

You are developing a new web application using Cloud Run and committing code to Cloud Source Repositories. You want to deploy new code in the most efficient way possible. You have already created a Cloud Build YAML file that builds a container and runs the following command: gcloud run deploy. What should you do next?

Options :

A : Create a Pub/Sub topic to be notified when code is pushed to the repository. Create a Pub/Sub trigger that runs the build file when an event is published to the topic

B : Create a build trigger that runs the build file in response to a repository code being pushed to the development branch.

C : Create a build trigger that runs the build file in response to a repository code being pushed to the development branch.

D : Create a Cron job that runs the following command every 24 hours: gcloud builds submit.

Answer: B

Confidently Practice Online with Free Professional-Cloud-Developer Exam Cram

Buying Options: