Professional-Cloud-Developer無料問題集「Google Certified Professional

質問 1

Your team is developing a new application using a PostgreSQL database and Cloud Run. You are responsible for ensuring that all traffic is kept private on Google Cloud. You want to use managed services and follow Google-recommended best practices. What should you do?

（A）1. Enable Cloud SQL and Cloud Run in the same project.
2. Configure a private IP address for Cloud SQL. Enable private services access.
3. Create a Serverless VPC Access connector.
4. Configure Cloud Run to use the connector to connect to Cloud SQL.

（B）1. Install PostgreSQL on a Compute Engine VM, and enable Cloud Run in different projects.
2. Configure a private IP address for the VM. Enable private services access.
3. Create a Serverless VPC Access connector.
4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to access the VM hosting PostgreSQL

（C）1. Install PostgreSQL on a Compute Engine virtual machine (VM), and enable Cloud Run in the same project.
2. Configure a private IP address for the VM. Enable private services access.
3. Create a Serverless VPC Access connector.
4. Configure Cloud Run to use the connector to connect to the VM hosting PostgreSQL.

（D）1. Use Cloud SQL and Cloud Run in different projects.
2. Configure a private IP address for Cloud SQL. Enable private services access.
3. Create a Serverless VPC Access connector.
4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to connect to Cloud SQL.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Your development team has been asked to refactor an existing monolithic application into a set of composable microservices. Which design aspects should you implement for the new application? (Choose two.)

（A）Implement a versioning scheme to permit future changes that could be incompatible with the current interface.

（B）Develop the microservice code in the same programming language used by the microservice caller.

（C）Create an API contract agreement between the microservice implementation and microservice caller.

（D）Require asynchronous communications between all microservice implementations and microservice callers.

（E）Ensure that sufficient instances of the microservice are running to accommodate the performance requirements.

正解：A、C 解答を投票する

質問 3

You are running a containerized application on Google Kubernetes Engine. Your container images are stored in Container Registry. Your team uses CI/CD practices. You need to prevent the deployment of containers with known critical vulnerabilities. What should you do?

（A）* Enable the Container Scanning API to perform vulnerability scanning
* Programmatically review vulnerability reporting through the Container Scanning API, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed

（B）* Use Web Security Scanner to automatically crawl your application
* Review your application logs for scan results, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed

（C）* Use Web Security Scanner to automatically crawl your application
* Review the scan results in the scan details page in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed

（D）* Enable the Container Scanning API to perform vulnerability scanning
* Review vulnerability reporting in Container Registry in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You are using Cloud Build build to promote a Docker image to Development, Test, and Production environments. You need to ensure that the same Docker image is deployed to each of these environments.
How should you identify the Docker image in your build?

（A）Use the latest Docker image tag.

（B）Use a unique Docker image name.

（C）Use a semantic version Docker image tag.

（D）Use the digest of the Docker image.

正解：C 解答を投票する

質問 5

A governmental regulation was recently passed that affects your application. For compliance purposes, you are now required to send a duplicate of specific application logs from your application's project to a project that is restricted to the security team. What should you do?

（A）Create a job that copies the togs from the _Required log bucket into the security team's log bucket in their project.

（B）Create a job that copies the System Event logs from the _Required log bucket into the security team's log bucket in their project.

（C）Create user-defined log buckets in the security team's project. Configure a Cloud Logging sink to route your application s logs to log buckets in the security team's project.

（D）Modify the _Default tog bucket sink rules to reroute the logs into the security team's log bucket.

正解：C 解答を投票する

質問 6

Your company wants to expand their users outside the United States for their popular application. The company wants to ensure 99.999% availability of the database for their application and also wants to minimize the read latency for their users across the globe.
Which two actions should they take? (Choose two.)

（A）Create a Cloud Dataflow pipeline to replicate data across different databases.

（B）Create a multi-regional Cloud Spanner instance with "nam3" configuration.

（C）Create a cluster with at least 3 Spanner nodes.

（D）Create a minimum of two Cloud Spanner instances in separate regions with at least one node.

（E）Create a cluster with at least 1 Spanner node.

（F）Create a multi-regional Cloud Spanner instance with "nam-asia-eur1" configuration.

正解：A、B 解答を投票する

質問 7

Your analytics system executes queries against a BigQuery dataset. The SQL query is executed in batch and passes the contents of a SQL file to the BigQuery CLI. Then it redirects the BigQuery CLI output to another process. However, you are getting a permission error from the BigQuery CLI when the queries are executed.
You want to resolve the issue. What should you do?

（A）Create a view in BigQuery from the SQL query and SELECT* from the view in the CLI.

（B）Grant the service account BigQuery Data Editor and BigQuery Data Viewer roles.

（C）Grant the service account BigQuery Data Viewer and BigQuery Job User roles.

（D）Create a new dataset in BigQuery, and copy the source table to the new dataset Query the new dataset and table from the CLI.

正解：B 解答を投票する

質問 8

You are developing an internal application that will allow employees to organize community events within your company. You deployed your application on a single Compute Engine instance. Your company uses Google Workspace (formerly G Suite), and you need to ensure that the company employees can authenticate to the application from anywhere. What should you do?

（A）Set up a VPN tunnel between your company network and your instance's VPC location on Google Cloud. Configure the required firewall rules and routing information to both the on-premises and Google Cloud networks.

（B）Add an HTTP(S) load balancer in front of the instance, and set up Identity-Aware Proxy (IAP).
Configure the IAP settings to allow your company domain to access the website.

（C）Add a public IP address to your instance, and restrict access to the instance using firewall rules. Allow your company's proxy as the only source IP address.

（D）Add a public IP address to your instance, and allow traffic from the internet. Generate a random hash, and create a subdomain that includes this hash and points to your instance. Distribute this DNS address to your company's employees.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

You are a developer at a financial institution You use Cloud Shell to interact with Google Cloud services. User data is currently stored on an ephemeral disk however a recently passed regulation mandates that you can no longer store sensitive information on an ephemeral disk. You need to implement a new storage solution for your user data You want to minimize code changes Where should you store your user data'?

（A）Store user data in a Cloud Storage bucket

（B）Store user data m BigQuery tables

（C）Store user data on a persistent disk in a Compute Engine instance

（D）Store user data on a Cloud Shell home disk and log in at least every 120 days to prevent its deletion

正解：C 解答を投票する

質問 10

You are developing a microservice-based application that will run on Google Kubernetes Engine (GKE).
Some of the services need to access different Google Cloud APIs. How should you set up authentication of these services in the cluster following Google-recommended best practices? (Choose two.)

（A）Enable Workload Identity in the cluster via the gcloud command-line tool.

（B）Store the Google service account keys in a central secret management service.

（C）Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.

（D）Use the service account attached to the GKE node.

（E）Access the Google service account keys from a secret management service.

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

Your operations team has asked you to create a script that lists the Cloud Bigtable, Memorystore, and Cloud SQL databases running within a project. The script should allow users to submit a filter expression to limit the results presented. How should you retrieve the data?

（A）Run gcloud bigtable instances list, gcloud redis instances list, and gcloud sql databases list. Use a filter within the application, and then display the results

（B）Run gcloud bigtable instances list, gcloud redis instances list, and gcloud sql databases list. Use --filter flag with each command, and then display the results

（C）Use the HBase API, Redis API, and MySQL connection to retrieve database lists. Combine the results, and then apply the filter to display the results

（D）Use the HBase API, Redis API, and MySQL connection to retrieve database lists. Filter the results individually, and then combine them to display the results

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

For this question refer to the HipLocal case study.
HipLocal wants to reduce the latency of their services for users in global locations. They have created read replicas of their database in locations where their users reside and configured their service to read traffic using those replicas. How should they further reduce latency for all database interactions with the least amount of effort?

（A）Migrate the database to Firestore in Datastore mode and use it to serve all global user traffic.

（B）Migrate the database to Bigtable and use it to serve all global user traffic.

（C）Migrate the database to Cloud Spanner and use it to serve all global user traffic.

（D）Migrate the services to Google Kubernetes Engine and use a load balancer service to better scale the application.

正解：D 解答を投票する

質問 13

Your team is developing an application in Google Cloud that executes with user identities maintained by Cloud Identity. Each of your application's users will have an associated Pub/Sub topic to which messages are published, and a Pub/Sub subscription where the same user will retrieve published messages. You need to ensure that only authorized users can publish and subscribe to their own specific Pub/Sub topic and subscription. What should you do?

（A）Configure the application to run as a service account that has the pubsub.publisher and pubsub.subscriber roles.

（B）Bind the user identity to the pubsub.publisher and pubsub.subscriber roles at the resource level.

（C）Grant the user identity the pubsub.publisher and pubsub.subscriber roles at the project level.

（D）Grant the user identity a custom role that contains the pubsub.topics.create and pubsub.subscriptions.create permissions.

正解：D 解答を投票する

質問 14

You are developing a single-player mobile game backend that has unpredictable traffic patterns as users interact with the game throughout the day and night. You want to optimize costs by ensuring that you have enough resources to handle requests, but minimize over-provisioning. You also want the system to handle traffic spikes efficiently. Which compute platform should you use?

（A）Compute Engine with unmanaged instance groups

（B）Google Kubernetes Engine using cluster autoscaling

（C）Cloud Run

（D）Compute Engine with managed instance groups

正解：C 解答を投票する

質問 15

Your teammate has asked you to review the code below. Its purpose is to efficiently add a large number of small rows to a BigQuery table.

Which improvement should you suggest your teammate make?

（A）Write each row to a Cloud Storage object, then load into BigQuery.

（B）Write each row to a Cloud Storage object in parallel, then load into BigQuery.

（C）Include multiple rows with each request.

（D）Perform the inserts in parallel by creating multiple threads.

正解：D 解答を投票する

Professional-Cloud-Developer 無料問題集「Google Certified Professional - Cloud Developer」

弊社を連絡する

関連リンク

トップ試験