PCD practice questions 211–220

1. Question 211 · 357 in bank

   You are parsing a log file that contains three columns: a timestamp, an account number (a string), and a transaction amount (a number). You want to calculate the sum of all transaction amounts for each unique account number efficiently. Which data structure should you use?

   • AA linked list
   • BA hash table
   • CA two-dimensional array
   • DA comma-delimited string

   Show answer

   Answer: B

   Explanation

   B. A hash table. A hash table allows for fast insertion and lookup of data, which would be useful in this case for quickly looking up the transaction amount for a given account number and adding it to the total. A linked list, two-dimensional array, and comma-delimited string would not be as efficient for this purpose.

   Source: Adapted from community discussion — omermahgoub

   Next question

2. Question 212 · 357 in bank

   You work for a company that operates an ecommerce website. You are developing a new integration that will manage all order fulfillment steps after orders are placed. You have created multiple Cloud Functions to process each order. You need to orchestrate the execution of the functions, using the output of each function to determine the flow. You want to minimize the latency of this process. What should you do?

   • AUse Workflows to call the functions, and use callbacks to handle the execution logic.
   • BUse Workflows to call the functions, and use conditional jumps to handle the execution logic.
   • CUse Cloud Composer to call the functions, and use an Apache Airflow HTTP operator to handle the execution logic.
   • DUse Cloud Composer to call the functions, and use an Apache Airflow operator to handle the execution logic.

   Show answer

   Answer: B

   Explanation

   Workflows is a service in Google Cloud that allows you to orchestrate serverless functions and services in a sequence or in parallel. It is specifically designed for orchestrating tasks like this in a simple and efficient manner. Using conditional jumps within Workflows allows you to dynamically control the flow based on the outputs of the functions. This means you can easily determine which function to call next based on the results of the previous steps.

   Source: Adapted from community discussion — anshad666

   Next question

3. Question 213 · 357 in bank

   You are currently pushing container images to Artifact Registry and deploying a containerized microservices application to GKE. After deploying the application, you notice that the services do not behave as expected. You use the kubectl get pods command to inspect the state of the application Pods, and discover that one of the Pods has a state of CrashLoopBackoff. How should you troubleshoot the Pod?

   • AConnect to the problematic Pod by running the kubectl exec -it POD_NAME - /bin/bash command where the POD_NAME parameter is the name of the problematic Pod. Inspect the logs in the /var/log/messages folder to determine the root cause.
   • BExecute the gcloud projects get-iam-policy PROJECT_ID command where the PROJECT_ID parameter is the name of the project where your Artifact Registry resides. Inspect the IAM bindings of the node pool s service account. Validate if the service account has the roles/artifactregistry.reader role.
   • CRun the kubectl logs POD_NAME command where the POD_NAME parameter is the name of the problematic Pod. Analyze the logs of the Pod from previous runs to determine the root cause of failed start attempts of the Pod.
   • DIn the Google Cloud console, navigate to Cloud Logging in the project of the cluster’s VPC. Enter a filter to show denied egress traffic to the Private Google Access CIDR range. Validate if egress traffic is denied from your GKE cluster to the Private Google Access CIDR range.

   Show answer

   Answer: C

   References

   • Google Cloud documentation

   Next question

4. Question 214 · 357 in bank

   You use Cloud Build to build and test container images prior to deploying them to Cloud Run. Your images are stored in Artifact Registry. You need to ensure that only container images that have passed testing are deployed. You want to minimize operational overhead. What should you do?

   • ADeploy a new revision to a Cloud Run service. Assign a tag that allows access to the revision at a specific URL without serving traffic. Test that revision again. Migrate the traffic to the Cloud Run service after you confirm that the new revision is performing as expected.
   • BEnable Binary Authorization on your Cloud Run service. Create an attestation if the container image has passed all tests. Configure Binary Authorization to allow only images with appropriate attestation to be deployed to the Cloud Run service.
   • CCreate a GKE cluster. Verify that all tests have passed, and then deploy the image to the GKE cluster.
   • DConfigure build provenance on your Cloud Build pipeline. Verify that all the tests have passed, and then deploy the image to a Cloud Run service.

   Show answer

   Answer: B

   Explanation

   Enable Binary Authorization on your Cloud Run service. Create an attestation if the container image has passed all tests. Configure Binary Authorization to allow only images with appropriate attestation to be deployed to the Cloud Run service.

   Source: Adapted from community discussion — anshad666

   Next question

5. Question 215 · 357 in bank

   Select 2

   You are developing a scalable web application for internal users. Your organization uses Google Workspace. You need to set up authentication to the application for the users, and then deploy the application on Google Cloud. You plan to use cloud-native features, and you want to minimize infrastructure management effort. What should you do? (Choose two.)

   • ACreate a Compute Engine VM, configure a web server, and deploy the application in a VPC.
   • BContainerize the application, and deploy it as a Cloud Run service.
   • CConfigure Cloud SQL database with a table containing the users and password hashes. Add an authentication screen to ensure that only internal users can access the application.
   • DConfigure Identity Aware Proxy, and grant the roles/iap.httpsResourceAccessor IAM role to the users that need to access the application.
   • EConfigure Identity Aware Proxy, and grant the roles/iap.tunnelResourceAccessor IAM role to the users that need to access the application.

   Show answer

   Answer: BD

   Explanation

   B. Containerize the application, and deploy it as a Cloud Run service. Cloud Run is a fully managed service that allows you to run containerized applications without managing the underlying infrastructure. This aligns with your goal of minimizing infrastructure management effort and provides scalability for your application. D. Configure Identity Aware Proxy, and grant the roles/iap.httpsResourceAccessor IAM role to the users that need to access the application. Identity Aware Proxy (IAP) secures access to your application by authenticating users using their Google Workspace credentials. By granting the roles/iap.httpsResourceAccessor IAM role to the internal users, you ensure that only authenticated users can access the application. This method leverages existing Google Workspace accounts, simplifying user management.

   Source: Adapted from community discussion — anshad666

   Next question

6. Question 216 · 357 in bank

   You work for an ecommerce company, and you are responsible for deploying and managing multiple APIs. The operations team wants to review the traffic patterns in the orders-prod and users-prod environments. These are the only environments in the store-prod environment group. You want to follow Google-recommended practices. What should you do?

   • AAssign the Apigee Analytics Viewer IAM role to the operations team for both environments. Use Cloud Monitoring to review traffic patterns.
   • BAssign the Apigee Analytics Viewer IAM role to the operations team for both environments. Use Apigee API Analytics to review traffic patterns.
   • CAssign the Apigee API Reader IAM role to each user of the operations team for both environments. Use Cloud Monitoring to review traffic patterns.
   • DAssign the Apigee API Reader IAM role to each user of the operations team for both environments. Use Apigee API Analytics to review traffic patterns.

   Show answer

   Answer: B

   Next question

7. Question 217 · 357 in bank

   You are migrating a containerized application to Cloud Run. You plan to use Cloud Build to build your container image and push it to Artifact Registry, and you plan to use Cloud Deploy to deploy the image to production. You need to ensure that only secure images are deployed to production. What should you do?

   • AUse Cloud Armor in front of Cloud Run to protect the container image from threats.
   • BUse Artifact Analysis to scan the image for vulnerabilities. Use Cloud Key Management Service to encrypt the image to be deployed to production.
   • CUse Secret Manager to store the encrypted image. Deploy this image to production.
   • DUse Binary Authorization to enforce a policy that only allows images that have been signed with a trusted key to be deployed to production.

   Show answer

   Answer: D

   Explanation

   Binary Authorization is a security feature that helps ensure only trusted container images are deployed to production environments. By enforcing a policy that requires images to be signed by a trusted key, you can prevent the deployment of unverified or vulnerable images, significantly enhancing the security of your application.

   Source: Adapted from community discussion — anshad666

   Next question

8. Question 218 · 357 in bank

   Your team uses Cloud Storage for a video and image application that was recently migrated to Google Cloud. Following a viral surge, users are reporting application instability, coinciding with a 10x increase in HTTP 429 error codes from Cloud Storage APIs. You need to resolve the errors and establish a long-term solution. You want to ensure that the application remains stable if the load increases again in the future. What should you do?

   • AOptimize the application code to reduce unnecessary calls to Cloud Storage APIs to prevent HTTP 429 errors.
   • BCompress the video and images files to reduce their size, and minimize storage costs and bandwidth usage. Implement a custom throttling mechanism in the application that limits the number of concurrent API calls.
   • CMigrate all image and video data to Firestore. Replace the Cloud Storage APIs in the application code with the new Firestore database.
   • DImplement a retry strategy with exponential backoff for requests that encounter HTTP 429 errors.

   Show answer

   Answer: D

   References

   • Google Cloud documentation

   Next question

9. Question 219 · 357 in bank

   You are developing a container build pipeline for an application hosted on GKE. You have the following requirements: • Only images that are created using your build pipeline should be deployed on your GKE cluster. • All code and build artifacts should remain within your environment and protected from data exfiltration. How should you build the pipeline?

   • A1. Create a build pipeline by using Cloud Build with the default worker pool. 2. Deploy container images to a private container registry in your VPC. 3. Create a VPC firewall policy in your project that denies all egress and ingress traffic to public networks.
   • B1. Create a build pipeline by using Cloud Build with a private worker pool. 2. Use VPC Service Controls to place all components and services in your CI/CD pipeline inside a security perimeter. 3. Configure your GKE cluster to only allow container images signed by Binary Authorization.
   • C1. Create a build pipeline by using Cloud Build with a private worker pool. 2. Configure the CI/CD pipeline to build container images and store them in Artifact Registry. 3. Configure Artifact Registry to encrypt container images by using customer-managed encryption keys (CMEK).
   • D1. Create a build pipeline by using Cloud Build with the default worker pool. 2. Configure the CI/CD pipeline to build container images and store them in Artifact Registry. 3. Configure your GKE cluster to only allow container images signed by Binary Authorization.

   Show answer

   Answer: B

   Next question

10. Question 220 · 357 in bank

    You are a developer at a company that operates an ecommerce website. The website stores the customer order data in a Cloud SQL for PostgreSQL database. Data scientists on the marketing team access this data to run their reports. Every time they run these reports, the website's performance is negatively affected. You want to provide access to up-to-date customer order datasets without affecting your website. What should you do?

    • AConfigure Cloud Scheduler to run an hourly Cloud Function that exports the data from the Cloud SQL database into CSV format and sends the data to a Cloud Storage bucket.
    • BSet up a Bigtable table for the data science team. Configure the application to perform dual writes to both Cloud SQL and Bigtable simultaneously.
    • CSet up a BigQuery dataset for the data science team. Configure Datastream to replicate the relevant Cloud SQL tables in BigQuery.
    • DCreate a clone of the PostgreSQL database instance for the data science team. Schedule a job to create a new clone every 15 minutes.

    Show answer

    Answer: C

    Explanation

    BigQuery for Analytics: BigQuery is a serverless data warehouse designed for large-scale analytics. It can handle complex queries and large datasets without affecting the performance of your operational database (Cloud SQL). Datastream for Replication: Using Datastream allows you to continuously replicate the relevant tables from Cloud SQL to BigQuery. This ensures that the data scientists have access to up-to-date customer order datasets without putting any load on the Cloud SQL database. They can run their reports and analytics directly on BigQuery, which is optimized for such workloads.

    Source: Adapted from community discussion — anshad666

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

PCD practice, question 211. 357 questions available.