[May 29, 2026] Pass Professional-Cloud-Developer Review Guide, Reliable Professional-Cloud-Developer Test Engine
Professional-Cloud-Developer Test Engine Practice Test Questions, Exam Dumps
NEW QUESTION # 121
Your teammate has asked you to review the code below. Its purpose is to query account entities in Cloud Datastore for those with a balance greater than 10000 and an age less than 4. Which improvement should you suggest your teammate make?
Captionless Image
- A. Send two queries-one for balances over 10000, and another for ages less than 4-and compute the intersection.
- B. Change the argument to OrderBy.desc to be "balance" instead of "age."
- C. The query should be performed in a transaction.
- D. The query needs to have an ancestor query.
Answer: A
Explanation:
A is not correct because the stated goal doesn't require an ancestor query.
B is not correct because no data is being written, so a transaction isn't necessary.
C is not correct because it wouldn't affect the results.
D is correct because two inequality comparisons aren't permitted in a Datastore query and it requires two queries to be merged.
NEW QUESTION # 122
You are developing an application that consists of several microservices running in a Google Kubernetes Engine cluster. One microservice needs to connect to a third-party database running on-premises. You need to store credentials to the database and ensure that these credentials can be rotated while following security best practices. What should you do?
- A. Store the credentials in a sidecar container proxy, and use it to connect to the third-party database.
- B. Store the credentials in an encrypted volume mount, and associate a Persistent Volume Claim with the client Pod.
- C. Configure a service mesh to allow or restrict traffic from the Pods in your microservice to the database.
- D. Store the credentials as a Kubernetes Secret, and use the Cloud Key Management Service plugin to handle encryption and decryption.
Answer: D
Explanation:
https://cloud.google.com/kubernetes-engine/docs/how-to/encrypting-secrets By default, Google Kubernetes Engine (GKE) encrypts customer content stored at rest, including Secrets. GKE handles and manages this default encryption for you without any additional action on your part.
Application-layer secrets encryption provides an additional layer of security for sensitive data, such as Secrets, stored in etcd. Using this functionality, you can use a key managed with Cloud KMS to encrypt data at the application layer. This encryption protects against attackers who gain access to an offline copy of etcd.
NEW QUESTION # 123
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Company Overview
HipLocal is a community application designed to facilitate communication between people in close proximity. It is used for event planning and organizing sporting events, and for businesses to connect with their local communities. HipLocal launched recently in a few neighborhoods in Dallas and is rapidly growing into a global phenomenon. Its unique style of hyper-local community communication and business outreach is in demand around the world.
Executive Statement
We are the number one local community app; it's time to take our local community services global. Our venture capital investors want to see rapid growth and the same great experience for new local and virtual communities that come online, whether their members are 10 or 10000 miles away from each other.
Solution Concept
HipLocal wants to expand their existing service, with updated functionality, in new regions to better serve their global customers. They want to hire and train a new team to support these regions in their time zones. They will need to ensure that the application scales smoothly and provides clear uptime data.
Existing Technical Environment
HipLocal's environment is a mix of on-premises hardware and infrastructure running in Google Cloud Platform.
The HipLocal team understands their application well, but has limited experience in global scale applications.
Their existing technical environment is as follows:
* Existing APIs run on Compute Engine virtual machine instances hosted in GCP.
* State is stored in a single instance MySQL database in GCP.
* Data is exported to an on-premises Teradata/Vertica data warehouse.
* Data analytics is performed in an on-premises Hadoop environment.
* The application has no logging.
* There are basic indicators of uptime; alerts are frequently fired when the APIs are unresponsive.
Business Requirements
HipLocal's investors want to expand their footprint and support the increase in demand they are seeing. Their requirements are:
* Expand availability of the application to new regions.
* Increase the number of concurrent users that can be supported.
* Ensure a consistent experience for users when they travel to different regions.
* Obtain user activity metrics to better understand how to monetize their product.
* Ensure compliance with regulations in the new regions (for example, GDPR).
* Reduce infrastructure management time and cost.
* Adopt the Google-recommended practices for cloud computing.
Technical Requirements
* The application and backend must provide usage metrics and monitoring.
* APIs require strong authentication and authorization.
* Logging must be increased, and data should be stored in a cloud analytics platform.
* Move to serverless architecture to facilitate elastic scaling.
* Provide authorized access to internal apps in a secure manner.
Which database should HipLocal use for storing user activity?
- A. Cloud Spanner
- B. Cloud Datastore
- C. Cloud SQL
- D. BigQuery
Answer: A
NEW QUESTION # 124
You are developing an internal application that will allow employees to organize community events within your company. You deployed your application on a single Compute Engine instance. Your company uses Google Workspace (formerly G Suite), and you need to ensure that the company employees can authenticate to the application from anywhere. What should you do?
- A. Add an HTTP(S) load balancer in front of the instance, and set up Identity-Aware Proxy (IAP). Configure the IAP settings to allow your company domain to access the website.
- B. Add a public IP address to your instance, and restrict access to the instance using firewall rules. Allow your company's proxy as the only source IP address.
- C. Set up a VPN tunnel between your company network and your instance's VPC location on Google Cloud. Configure the required firewall rules and routing information to both the on-premises and Google Cloud networks.
- D. Add a public IP address to your instance, and allow traffic from the internet. Generate a random hash, and create a subdomain that includes this hash and points to your instance. Distribute this DNS address to your company's employees.
Answer: A
Explanation:
https://cloud.google.com/blog/topics/developers-practitioners/control-access-your-web-sites-identity-aware-proxy
NEW QUESTION # 125
Your data is stored in Cloud Storage buckets. Fellow developers have reported that data downloaded from Cloud Storage is resulting in slow API performance. You want to research the issue to provide details to the GCP support team. Which command should you run?
- A. gcloud compute scp example-instance:~/test-data -o output.json gs://my-bucket
- B. gsutil perfdiag -o output.json gs://my-bucket
- C. gcloud services test -o output.json gs://my-bucket
- D. gsutil test -o output.json gs://my-bucket
Answer: B
Explanation:
Reference: https://groups.google.com/forum/#!topic/gce-discussion/xBl9Jq5HDsY
NEW QUESTION # 126
You use Cloud Build to build and test container images prior to deploying them to Cloud Run.
Your images are stored in Artifact Registry. You need to ensure that only container images that have passed testing are deployed. You want to minimize operational overhead. What should you do?
- A. Enable Binary Authorization on your Cloud Run service. Create an attestation if the container image has passed all tests. Configure Binary Authorization to allow only images with appropriate attestation to be deployed to the Cloud Run service.
- B. Deploy a new revision to a Cloud Run service. Assign a tag that allows access to the revision at a specific URL without serving traffic. Test that revision again. Migrate the traffic to the Cloud Run service after you confirm that the new revision is performing as expected.
- C. Create a GKE cluster. Verify that all tests have passed, and then deploy the image to the GKE cluster.
- D. Configure build provenance on your Cloud Build pipeline. Verify that all the tests have passed, and then deploy the image to a Cloud Run service.
Answer: A
Explanation:
https://cloud.google.com/run/docs/securing/binary-authorization
NEW QUESTION # 127
You want to view the memory usage of your application deployed on Compute Engine. What should you do?
- A. Use the Google Cloud Platform Console.
- B. Install the Stackdriver Monitoring Agent.
- C. Use the Stackdriver Metrics Explorer.
- D. Install the Stackdriver Client Library.
Answer: C
Explanation:
Reference:
https://stackoverflow.com/questions/43991246/google-cloud-platform-how-to-monitor-memory-usage-of-vm-ins
NEW QUESTION # 128
You are planning to add unit tests to your application. You need to be able to assert that published Pub/Sub messages are processed by your subscriber in order. You want the unit tests to be cost-effective and reliable.
What should you do?
- A. Add a filter by tester to the subscription.
- B. Use the Pub/Sub emulator.
- C. Implement a mocking framework.
- D. Create a topic and subscription for each tester.
Answer: B
Explanation:
Explanation
https://cloud.google.com/pubsub/docs/emulator, "Testing apps locally with the emulator".
NEW QUESTION # 129
You are capturing important audit activity in Stackdriver Logging. You need to read the information from Stackdriver Logging to perform real-time analysis of the logs. You will have multiple processes performing different types of analysis on the logging data. What should you do?
- A. Read the logs directly from the Stackdriver Logging API.
- B. Set up a Stackdriver Logging sync to BigQuery, and read the logs from the BigQuery table.
- C. Set up a Stackdriver Logging sync to Cloud Pub/Sub, and read the logs from a Cloud Pub/Sub topic.
- D. Set up a Stackdriver Logging sync to Cloud Storage, and read the logs from a Cloud Storage bucket.
Answer: C
Explanation:
A is not correct because the API has read limits and is not a suitable solution if you have multiple readers. (https://cloud.google.com/logging/quotas) B is not correct because this solution is not real time.
(https://cloud.google.com/logging/docs/export/using_exported_logs#bigquery-availability) C is correct because this solution is real time.
(https://cloud.google.com/logging/docs/export/using_exported_logs#pubsub-availability) D is not correct because this solution is not real time.
(https://cloud.google.com/logging/docs/export/using_exported_logs#gcs-availability)
NEW QUESTION # 130
You are developing an application that consists of several microservices running in a Google Kubernetes Engine cluster. One microservice needs to connect to a third-party database running on-premises. You need to store credentials to the database and ensure that these credentials can be rotated while following security best practices. What should you do?
- A. Store the credentials in a sidecar container proxy, and use it to connect to the third-party database.
- B. Store the credentials in an encrypted volume mount, and associate a Persistent Volume Claim with the client Pod.
- C. Configure a service mesh to allow or restrict traffic from the Pods in your microservice to the database.
- D. Store the credentials as a Kubernetes Secret, and use the Cloud Key Management Service plugin to handle encryption and decryption.
Answer: D
Explanation:
Explanation
https://cloud.google.com/kubernetes-engine/docs/how-to/encrypting-secrets By default, Google Kubernetes Engine (GKE) encrypts customer content stored at rest, including Secrets.
GKE handles and manages this default encryption for you without any additional action on your part.
Application-layer secrets encryption provides an additional layer of security for sensitive data, such as Secrets, stored in etcd. Using this functionality, you can use a key managed with Cloud KMS to encrypt data at the application layer. This encryption protects against attackers who gain access to an offline copy of etcd.
NEW QUESTION # 131
Your company stores their source code in a Cloud Source Repositories repository. Your company wants to build and test their code on each source code commit to the repository and requires a solution that is managed and has minimal operations overhead.
Which method should they use?
- A. Use a Compute Engine virtual machine instance with an open source continuous integration tool, configured to watch for source code commits.
- B. Use Cloud Build with a trigger configured for each source code commit.
- C. Use a source code commit trigger to push a message to a Cloud Pub/Sub topic that triggers an App Engine service to build the source code.
- D. Use Jenkins deployed via the Google Cloud Platform Marketplace, configured to watch for source code commits.
Answer: B
NEW QUESTION # 132
You are developing a JPEG image-resizing API hosted on Google Kubernetes Engine (GKE). Callers of the service will exist within the same GKE cluster. You want clients to be able to get the IP address of the service.
What should you do?
- A. Define a GKE Service. Clients should use the name of the A record in Cloud DNS to find the service's cluster IP address.
- B. Define a GKE Endpoint. Clients should get the endpoint name from Cloud DNS.
- C. Define a GKE Service. Clients should use the service name in the URL to connect to the service.
- D. Define a GKE Endpoint. Clients should get the endpoint name from the appropriate environment variable in the client container.
Answer: D
Explanation:
Explanation
NEW QUESTION # 133
Your company needs a database solution that stores customer purchase history and meets the following requirements:
- Customers can query their purchase immediately after submission.
- Purchases can be sorted on a variety of fields.
- Distinct record formats can be stored at the same time.
Which storage option satisfies these requirements?
- A. Firestore in Native mode
- B. Firestore in Datastore mode using a global query
- C. Cloud Storage using an object read
- D. Cloud SQL using a SQL SELECT statement
Answer: A
Explanation:
https://cloud.google.com/datastore/docs/firestore-or-datastore
NEW QUESTION # 134
You are a developer working on an internal application for payroll processing. You are building a component of the application that allows an employee to submit a timesheet, which then initiates several steps:
* An email is sent to the employee and manager, notifying them that the timesheet was submitted.
* A timesheet is sent to payroll processing for the vendor's API.
* A timesheet is sent to the data warehouse for headcount planning.
These steps are not dependent on each other and can be completed in any order. New steps are being considered and will be implemented by different development teams. Each development team will implement the error handling specific to their step. What should you do?
- A. Deploy a Cloud Function for each step that calls the corresponding downstream system to complete the required action.
- B. Create a Pub/Sub topic for timesheet submissions. Create a subscription for each downstream development team to subscribe to the topic.
- C. Create a timesheet microservice deployed to Google Kubernetes Engine. The microservice calls each downstream step and waits for a successful response before calling the next step.
- D. Create a Pub/Sub topic for each step. Create a subscription for each downstream development team to subscribe to their step's topic.
Answer: B
NEW QUESTION # 135
Your team develops services that run on Google Kubernetes Engine. You need to standardize their log data using Google-recommended practices and make the data more useful in the fewest number of steps. What should you do? (Choose two.)
- A. Create aggregated exports on application logs to BigQuery to facilitate log analytics.
- B. Mandate the use of the Pub/Sub API to write structured data to Pub/Sub and create a Dataflow streaming pipeline to normalize logs and write them to BigQuery for analytics.
- C. Create aggregated exports on application logs to Cloud Storage to facilitate log analytics.
- D. Mandate the use of the Logging API in the application code to write structured logs to Cloud Logging.
- E. Write log output to standard output (stdout) as single-line JSON to be ingested into Cloud Logging as structured logs.
Answer: A,E
Explanation:
Explanation
https://cloud.google.com/stackdriver/docs/solutions/gke/managing-logs#best_practices
NEW QUESTION # 136
You are deploying a microservices application to Google Kubernetes Engine (GKE) that will broadcast livestreams. You expect unpredictable traffic patterns and large variations in the number of concurrent users.
Your application must meet the following requirements:
* Scales automatically during popular events and maintains high availability
* Is resilient in the event of hardware failures
How should you configure the deployment parameters? (Choose two.)
- A. Create alerting policies in Cloud Monitoring based on GKE CPU and memory utilization. Ask an on-duty engineer to scale the workload by executing a script when CPU and memory usage exceed predefined thresholds.
- B. Distribute your workload evenly using a multi-zonal node pool.
- C. Create a managed instance group for Compute Engine with the cluster nodes. Configure autoscaling rules for the managed instance group.
- D. Use cluster autoscaler to resize the number of nodes in the node pool, and use a Horizontal Pod Autoscaler to scale the workload.
- E. Distribute your workload evenly using multiple zonal node pools.
Answer: B,D
NEW QUESTION # 137
......
100% Free Professional-Cloud-Developer Daily Practice Exam With 400 Questions: https://examsboost.dumpstorrent.com/Professional-Cloud-Developer-exam-prep.html