PCD practice questions 181–190

1. Question 181 · 357 in bank

   You have a web application that publishes messages to Pub/Sub. You plan to build new versions of the application locally and want to quickly test Pub/Sub integration for each new build. How should you configure local testing?

   • AInstall Cloud Code on the integrated development environment (IDE). Navigate to Cloud APIs, and enable Pub/Sub against a valid Google Project ID. When developing locally, configure your application to call pubsub.googleapis.com.
   • BInstall the Pub/Sub emulator using gcloud, and start the emulator with a valid Google Project ID. When developing locally, configure your application to use the local emulator with ${gcloud beta emulators pubsub env-init}.
   • CIn the Google Cloud console, navigate to the API Library, and enable the Pub/Sub API. When developing locally, configure your application to call pubsub.googleapis.com.
   • DInstall the Pub/Sub emulator using gcloud, and start the emulator with a valid Google Project IWhen developing locally, configure your application to use the local emulator by exporting the PUBSUB_EMULATOR_HOST variable.

   Show answer

   Answer: B

   Explanation

   https://cloud.google.com/pubsub/docs/emulator#automatically_setting_the_variables If your application and the emulator run on the same machine, you can set the environment variables automatically with: 1) $(gcloud beta emulators pubsub env-init) If your application and the emulator run on different machines, set the environment variables manually with: 1) Run the env-init command: gcloud beta emulators pubsub env-init 2) On the machine that runs your application, set the PUBSUB_EMULATOR_HOST

   Source: Adapted from community discussion — [Removed]

   References

   • Google Cloud documentation

   Next question

2. Question 182 · 357 in bank

   Your ecommerce application receives external requests and forwards them to third-party API services for credit card processing, shipping, and inventory management as shown in the diagram.

   

   Your customers are reporting that your application is running slowly at unpredictable times. The application doesn’t report any metrics. You need to determine the cause of the inconsistent performance. What should you do?

   • AInstall the OpenTelemetry library for your respective language, and instrument your application.
   • BInstall the Ops Agent inside your container and configure it to gather application metrics.
   • CModify your application to read and forward the X-Cloud-Trace-Context header when it calls the downstream services.
   • DEnable Managed Service for Prometheus on the Google Kubernetes Engine cluster to gather application metrics.

   Show answer

   Answer: A

   References

   • Google Cloud documentation

   Next question

3. Question 183 · 357 in bank

   You are developing a new application. You want the application to be triggered only when a given file is updated in your Cloud Storage bucket. Your trigger might change, so your process must support different types of triggers. You want the configuration to be simple so that multiple team members can update the triggers in the future. What should you do?

   • AConfigure Cloud Storage events to be sent to Pub/Sub, and use Pub/Sub events to trigger a Cloud Build job that executes your application.
   • BCreate an Eventarc trigger that monitors your Cloud Storage bucket for a specific filename, and set the target as Cloud Run.
   • CConfigure a Cloud Function that executes your application and is triggered when an object is updated in Cloud Storage.
   • DConfigure a Firebase function that executes your application and is triggered when an object is updated in Cloud Storage.

   Show answer

   Answer: B

   Explanation

   B- is correct because Eventarc supports exible lters and you can create triggers based on lename patterns. Question is from Sample exam available on official GCP site. https://cloud.google.com/eventarc/docs/event-driven-architectures https://cloud.google.com/functions/docs/calling/storage https://cloud.google.com/storage/docs/reporting-changes https://cloud.google.com/build/docs/automating-builds/create-pubsub-triggers#gcs_build_trigger https://cloud.google.com/eventarc/docs/overview https://firebase.google.com/docs/functions/gcp-storage-events https://cloud.google.com/eventarc/docs/run/create-trigger#trigger-setup

   Source: Adapted from community discussion — rglearn

   References

   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation
   • Google Cloud documentation

   Next question

4. Question 184 · 357 in bank

   You are defining your system tests for an application running in Cloud Run in a Google Cloud project. You need to create a testing environment that is isolated from the production environment. You want to fully automate the creation of the testing environment with the least amount of effort and execute automated tests. What should you do?

   • AUsing Cloud Build, execute Terraform scripts to create a new Google Cloud project and a Cloud Run instance of your application in the Google Cloud project.
   • BUsing Cloud Build, execute a Terraform script to deploy a new Cloud Run revision in the existing Google Cloud project. Use traffic splitting to send traffic to your test environment.
   • CUsing Cloud Build, execute gcloud commands to create a new Google Cloud project and a Cloud Run instance of your application in the Google Cloud project.
   • DUsing Cloud Build, execute gcloud commands to deploy a new Cloud Run revision in the existing Google Cloud project. Use traffic splitting to send traffic to your test environment.

   Show answer

   Answer: A

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

5. Question 185 · 357 in bank

   You are a cluster administrator for Google Kubernetes Engine (GKE). Your organization’s clusters are enrolled in a release channel. You need to be informed of relevant events that affect your GKE clusters, such as available upgrades and security bulletins. What should you do?

   • AConfigure cluster notifications to be sent to a Pub/Sub topic.
   • BExecute a scheduled query against the google_cloud_release_notes BigQuery dataset.
   • CQuery the GKE API for available versions.
   • DCreate an RSS subscription to receive a daily summary of the GKE release notes.

   Show answer

   Answer: A

   References

   • Google Cloud documentation
   • Google Cloud documentation

   Next question

6. Question 186 · 357 in bank

   You are tasked with using C++ to build and deploy a microservice for an application hosted on Google Cloud. The code needs to be containerized and use several custom software libraries that your team has built. You do not want to maintain the underlying infrastructure of the application. How should you deploy the microservice?

   • AUse Cloud Functions to deploy the microservice.
   • BUse Cloud Build to create the container, and deploy it on Cloud Run.
   • CUse Cloud Shell to containerize your microservice, and deploy it on a Container-Optimized OS Compute Engine instance.
   • DUse Cloud Shell to containerize your microservice, and deploy it on standard Google Kubernetes Engine.

   Show answer

   Answer: B

   Explanation

   Option A, using Cloud Functions, is not suitable for your scenario because Cloud Functions primarily supports Node.js, Python, Go, Java, .NET, Ruby, and PHP runtimes. It does not natively support C++ applications. Therefore, for a microservice written in C++, Cloud Functions would not be an appropriate choice as it would require significant workarounds or a complete rewrite of your application in a supported language. and C ,D is OS and GKE so you need to setup the infra. therefore the answer is B.

   Source: Adapted from community discussion — kapara

   Next question

7. Question 187 · 357 in bank

   You need to containerize a web application that will be hosted on Google Cloud behind a global load balancer with SSL certificates. You don’t have the time to develop authentication at the application level, and you want to offload SSL encryption and management from your application. You want to configure the architecture using managed services where possible. What should you do?

   • AHost the application on Google Kubernetes Engine, and deploy an NGINX Ingress Controller to handle authentication.
   • BHost the application on Google Kubernetes Engine, and deploy cert-manager to manage SSL certificates.
   • CHost the application on Compute Engine, and configure Cloud Endpoints for your application.
   • DHost the application on Google Kubernetes Engine, and use Identity-Aware Proxy (IAP) with Cloud Load Balancing and Google-managed certificates.

   Show answer

   Answer: D

   Explanation

   IAP provides a way to control access to applications running on GCP without the need for traditional VPNs. It works by verifying a user’s identity and determining if that user should be allowed access to the application. This is especially useful since you do not have the time to develop authentication at the application level. IAP can handle this for you.

   Source: Adapted from community discussion — plutonians123

   Next question

8. Question 188 · 357 in bank

   You manage a system that runs on stateless Compute Engine VMs and Cloud Run instances. Cloud Run is connected to a VPC, and the ingress setting is set to Internal. You want to schedule tasks on Cloud Run. You create a service account and grant it the roles/run.invoker Identity and Access Management (IAM) role. When you create a schedule and test it, a 403 Permission Denied error is returned in Cloud Logging. What should you do?

   • AGrant the service account the roles/run.developer IAM role.
   • BConfigure a cron job on the Compute Engine VMs to trigger Cloud Run on schedule.
   • CChange the Cloud Run ingress setting to 'Internal and Cloud Load Balancing.'
   • DUse Cloud Scheduler with Pub/Sub to invoke Cloud Run.

   Show answer

   Answer: D

   Explanation

   Cloud Scheduler can trigger Cloud Run services, but in this case, where the ingress is set to 'Internal', direct invocation might not work. Instead, you can use Cloud Scheduler in combination with Pub/Sub. Cloud Scheduler can create a Pub/Sub message on a schedule, and this Pub/Sub message can then trigger the Cloud Run service. This approach is commonly used for invoking services with restricted network access.

   Source: Adapted from community discussion — plutonians123

   Next question

9. Question 189 · 357 in bank

   You work on an application that relies on Cloud Spanner as its main datastore. New application features have occasionally caused performance regressions. You want to prevent performance issues by running an automated performance test with Cloud Build for each commit made. If multiple commits are made at the same time, the tests might run concurrently. What should you do?

   • ACreate a new project with a random name for every build. Load the required data. Delete the project after the test is run.
   • BCreate a new Cloud Spanner instance for every build. Load the required data. Delete the Cloud Spanner instance after the test is run.
   • CCreate a project with a Cloud Spanner instance and the required data. Adjust the Cloud Build build file to automatically restore the data to its previous state after the test is run.
   • DStart the Cloud Spanner emulator locally. Load the required data. Shut down the emulator after the test is run.

   Show answer

   Answer: B

   Explanation

   Isolation of Test Environments: Creating a new Cloud Spanner instance for each build ensures complete isolation of test environments. This is crucial for accurate performance testing, as it avoids any interference from other concurrent test runs. Consistency and Accuracy of Data: By loading the required data into each new instance, you ensure that every test starts with a consistent dataset, which is essential for reliable and repeatable performance testing. Resource Management: Automatically deleting the Cloud Spanner instance after each test helps manage resources and costs effectively. It ensures that you are only using and paying for resources during the duration of the test. Parallel Testing: This approach supports concurrent testing for multiple commits, as each test run has its own dedicated Cloud Spanner instance.

   Source: Adapted from community discussion — vspringe

   References

   • Google Cloud documentation

   Next question

10. Question 190 · 357 in bank

    You are creating a web application that runs in a Compute Engine instance and writes a file to any user's Google Drive. You need to configure the application to authenticate to the Google Drive API. What should you do?

    • AUse an OAuth Client ID that uses the https://www.googleapis.com/auth/drive.file scope to obtain an access token for each user.
    • BUse an OAuth Client ID with delegated domain-wide authority.
    • CUse the App Engine service account and https://www.googleapis.com/auth/drive.file scope to generate a signed JSON Web Token (JWT).
    • DUse the App Engine service account with delegated domain-wide authority.

    Show answer

    Answer: A

    Explanation

    A is correct for me. https://developers.google.com/drive/api/guides/about-auth: "So, when possible, use "recommended" scopes as they narrow access to specific functionality needed by an app. In most cases, providing narrow access means using the https://www.googleapis.com/auth/drive.file per-file access scope" plus each user need their token to acces their own files.

    Source: Adapted from community discussion — brunoguzzo18

    References

    • Google developer documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCD practice, question 181. 357 questions available.