Professional Cloud Developer Free Sample Questions

Designing highly scalable, available, and reliable cloud-native applications · Selecting the appropriate storage system based on the volume of data and performance requirements

1. A

   A multi-regional Cloud Bigtable instance.

2. B

   A multi-regional Cloud Spanner instance.

3. C

   A set of read replicas for AlloyDB for PostgreSQL in each region.

4. D

   A primary Cloud SQL for MySQL instance with cross-region read replicas.

Designing highly scalable, available, and reliable cloud-native applications · Securing application artifacts using Binary Authorization

1. A

   Create a Cloud Build trigger that checks for the vulnerability scan results before running the gcloud deploy command.

2. B

   Configure a Kubernetes Network Policy on the GKE cluster to restrict image pulls from Artifact Registry.

3. C

   Implement a Binary Authorization policy that requires an attestation from a trusted authority before allowing deployment.

4. D

   Write a custom admission controller for GKE that queries the Artifact Analysis API for scan results upon every deployment request.

Integrating applications with Google Cloud services · Instrumenting code to facilitate troubleshooting using metrics, logs, and traces in Google Cloud Observability.

1. A

   The Cloud Run service is not configured with a VPC Connector.

2. B

   The custom metric descriptor has not been created before writing time series data.

3. C

   The Cloud Run service is running with the default service account, which lacks the monitoring.metricWriter role.

4. D

   The application is using an outdated version of the Cloud Monitoring client library.

Designing highly scalable, available, and reliable cloud-native applications · Integrating applications using asynchronous or event-driven approaches (e.g., Eventarc, Pub/Sub)

1. A

   Cloud Functions

2. B

   Cloud Scheduler

3. C

   Eventarc

4. D

   Workflows

Designing highly scalable, available, and reliable cloud-native applications · Securing service-to-service communications (e.g., Cloud Service Mesh, Kubernetes Network Policies)

1. A

   An Ingress resource with a path-based rule.

2. B

   A Service of type ClusterIP for the backend.

3. C

   A Kubernetes NetworkPolicy.

4. D

   A Google Cloud Armor policy attached to the load balancer.

Building and testing applications · Using Cloud Build and Artifact Registry to build and store containers from source code

1. A

   In a build step, download the tool's binary from a public internet URL and install it.

2. B

   Store the tool's binary in a Cloud Storage bucket and download it during the build.

3. C

   Create a custom builder image containing the tool, push it to Artifact Registry, and reference it in your cloudbuild.yaml.

4. D

   Commit the tool's binary directly into your source code repository.

Building and testing applications · Writing unit tests with the help of Gemini Code Assist.

1. A

   Use a specific, clear prompt such as 'write a pytest unit test for this function, covering edge cases'.

2. B

   Accept the first generated test suite without review to maximize speed.

3. C

   Review the generated tests to ensure they cover relevant business logic and failure modes.

4. D

   Delete all existing manual tests before generating new ones to avoid conflicts.

5. E

   Use a generic prompt like 'test this' to let the AI infer the context.

Deploying applications · Deploying applications from source code

1. A
   1. gcloud run deploy --image=[NEW_IMAGE]
   2. gcloud run services update-traffic --to-revisions=NEW_REVISION=100
2. B
   1. gcloud run deploy --image=[NEW_IMAGE] --no-traffic
   2. gcloud run services update-traffic --to-revisions=NEW_REVISION=100 --migrate-gradually
3. C
   1. gcloud run deploy --image=[NEW_IMAGE] --tag=candidate
   2. gcloud run services update-traffic --to-tags=candidate=100
4. D
   1. gcloud run deploy --image=[NEW_IMAGE] --revision-suffix=test
   2. gcloud run services set-iam-policy to allow traffic.

Designing highly scalable, available, and reliable cloud-native applications · Authenticating to Google Cloud services (e.g., Application Default Credentials, JSON Web Token [JWT], OAuth 2.0, Cloud SQL Auth Proxy, AlloyDB Auth Proxy)

1. A

   Create a service account, download its JSON key, and embed it in the application's deployment package.

2. B

   Attach a service account with the 'Secret Manager Secret Accessor' role to the Compute Engine instance and use Application Default Credentials.

3. C

   Store the service account key in the VM instance's custom metadata and have the application read it at startup.

4. D

   Use your personal user credentials with gcloud auth application-default login on the VM.

Integrating applications with data and storage services · Managing connections to various Google Cloud datastores (e.g., Cloud SQL, Firestore, Cloud Storage)

1. A

   True

2. B

   False