Free Professional Cloud Developer Exam Professional-Cloud-Developer Exam Practice Test

Your application performs well when tested locally, but it runs significantly slower when you deploy it to App Engine standard environment. You want to diagnose the problem. What should you do?

• File a ticket with Cloud Support indicating that the application performs faster locally.
• Use Stackdriver Debugger Snapshots to look at a point-in-time execution of the application.
• Use Stackdriver Trace to determine which functions within the application have higher latency.
• Add logging commands to the application and use Stackdriver Logging to check where the latency problem occurs.

You are in the final stage of migrating an on-premises data center to Google Cloud. You are quickly approaching your deadline, and discover that a web API is running on a server slated for decommissioning. You need to recommend a solution to modernize this API while migrating to Google Cloud. The modernized web API must meet the following requirements:* Autoscales during high traffic periods at the end of each month* Written in Python 3.x* Developers must be able to rapidly deploy new versions in response to frequent code changesYou want to minimize cost, effort, and operational overhead of this migration. What should you do?

• Modernize and deploy the code on App Engine flexible environment.
• Modernize and deploy the code on App Engine standard environment.
• Deploy the modernized application to an n1-standard-1 Compute Engine instance.
• Ask the development team to re-write the application to run as a Docker container on Google Kubernetes Engine.

You are creating and running containers across different projects in Google Cloud. The application you are developing needs to access Google Cloud services from within Google Kubernetes Engine (GKE).What should you do?

• Assign a Google service account to the GKE nodes.
• Use a Google service account to run the Pod with Workload Identity.
• Store the Google service account credentials as a Kubernetes Secret.
• Use a Google service account with GKE role-based access control (RBAC).

HipLocal's.net-based auth service fails under intermittent load.What should they do?

• Use App Engine for autoscaling.
• Use Cloud Functions for autoscaling.
• Use a Compute Engine cluster for the service.
• Use a dedicated Compute Engine virtual machine instance for the service.

You are planning to migrate a MySQL database to the managed Cloud SQL database for Google Cloud. You have Compute Engine virtual machine instances that will connect with this Cloud SQL instance. You do not want to whitelist IPs for the Compute Engine instances to be able to access Cloud SQL.What should you do?

• Enable private IP for the Cloud SQL instance.
• Whitelist a project to access Cloud SQL, and add Compute Engine instances in the whitelisted project.
• Create a role in Cloud SQL that allows access to the database from external instances, and assign the Compute Engine instances to that role.
• Create a CloudSQL instance on one project. Create Compute engine instances in a different project. Create a VPN between these two projects to allow internal access to CloudSQL.

For this question refer to the HipLocal case study.HipLocal wants to reduce the latency of their services for users in global locations. They have created read replicas of their database in locations where their users reside and configured their service to read traffic using those replicas. How should they further reduce latency for all database interactions with the least amount of effort?

• Migrate the database to Bigtable and use it to serve all global user traffic.
• Migrate the database to Cloud Spanner and use it to serve all global user traffic.
• Migrate the database to Firestore in Datastore mode and use it to serve all global user traffic.
• Migrate the services to Google Kubernetes Engine and use a load balancer service to better scale the application.

Your company just experienced a Google Kubernetes Engine (GKE) API outage due to a zone failure. You want to deploy a highly available GKE architecture that minimizes service interruption to users in the event of a future zone failure. What should you do?

• Deploy Zonal clusters
• Deploy Regional clusters
• Deploy Multi-Zone clusters
• Deploy GKE on-premises clusters

Your team develops services that run on Google Cloud. You need to build a data processing service and will use Cloud Functions. The data to be processed by the function is sensitive. You need to ensure that invocations can only happen from authorized services and follow Google-recommended best practices for securing functions. What should you do?

• Enable Identity-Aware Proxy in your project. Secure function access using its permissions.
• Create a service account with the Cloud Functions Viewer role. Use that service account to invoke the function.
• Create a service account with the Cloud Functions Invoker role. Use that service account to invoke the function.
• Create an OAuth 2.0 client ID for your calling service in the same project as the function you want to secure. Use those credentials to invoke the function.

You are planning to add unit tests to your application. You need to be able to assert that published Pub/Sub messages are processed by your subscriber in order. You want the unit tests to be cost-effective and reliable. What should you do?

• Implement a mocking framework.
• Create a topic and subscription for each tester.
• Add a filter by tester to the subscription.
• Use the Pub/Sub emulator.

Your security team is auditing all deployed applications running in Google Kubernetes Engine. After completing the audit, your team discovers that some of the applications send traffic within the cluster in clear text. You need to ensure that all application traffic is encrypted as quickly as possible while minimizing changes to your applications and maintaining support from Google. What should you do?

• Use Network Policies to block traffic between applications.
• Install Istio, enable proxy injection on your application namespace, and then enable mTLS.
• Define Trusted Network ranges within the application, and configure the applications to allow traffic only from those networks.
• Use an automated process to request SSL Certificates for your applications from Let's Encrypt and add them to your applications.