최신 Professional-Cloud-Developer 무료덤프 - Google Certified Professional

문제1

You manage your company's ecommerce platform's payment system, which runs on Google Cloud. Your company must retain user logs for 1 year for internal auditing purposes and for 3 years to meet compliance requirements. You need to store new user logs on Google Cloud to minimize on-premises storage usage and ensure that they are easily searchable. You want to minimize effort while ensuring that the logs are stored correctly. What should you do?

A. Store the logs in a Cloud Storage bucket with bucket lock turned on.

B. Store the logs in Cloud Logging as custom logs with a custom retention period.

C. Store the logs in a Cloud Storage bucket with a 3-year retention period.

D. Store the logs in a Cloud Storage bucket with a 1-year retention period. After 1 year, move the logs to another bucket with a 2-year retention period.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Your data is stored in Cloud Storage buckets. Fellow developers have reported that data downloaded from Cloud Storage is resulting in slow API performance. You want to research the issue to provide details to the GCP support team. Which command should you run?

A. gsutil perfdiag -o output.json gs://my-bucket

B. gcloud compute scp example-instance:~/test-data -o output.json gs://my-bucket

C. gcloud services test -o output.json gs://my-bucket

D. gsutil test -o output.json gs://my-bucket

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제3

You are developing an application that will store and access sensitive unstructured data objects in a Cloud Storage bucket. To comply with regulatory requirements, you need to ensure that all data objects are available for at least 7 years after their initial creation. Objects created more than 3 years ago are accessed very infrequently (less than once a year). You need to configure object storage while ensuring that storage cost is optimized. What should you do? (Choose two.)

A. Use IAM Conditions to provide access to objects 7 years after the object creation date.

B. Enable Object Versioning to prevent objects from being accidentally deleted for 7 years after object creation.

C. Create an object lifecycle policy on the bucket that moves objects from Standard Storage to Archive Storage after 3 years.

D. Set a retention policy on the bucket with a period of 7 years.

E. Implement a Cloud Function that checks the age of each object in the bucket and moves the objects older than 3 years to a second bucket with the Archive Storage class. Use Cloud Scheduler to trigger the Cloud Function on a daily schedule.

정답: C,D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

You are deploying your application to a Compute Engine virtual machine instance. Your application is configured to write its log files to disk. You want to view the logs in Stackdriver Logging without changing the application code.
What should you do?

A. Provide the log file folder path in the metadata of the instance to configure it to send the application logs.

B. Install the Stackdriver Logging Agent and configure it to send the application logs.

C. Use a Stackdriver Logging Library to log directly from the application to Stackdriver Logging.

D. Change the application to log to /var/log so that its logs are automatically sent to Stackdriver Logging.

정답: B

문제5

You work for an organization that manages an ecommerce site. Your application is deployed behind a global HTTP(S) load balancer. You need to test a new product recommendation algorithm. You plan to use A/B testing to determine the new algorithm's effect on sales in a randomized way. How should you test this feature?

A. Use HTTP header-based routing.

B. Split traffic between versions using weights.

C. Enable the new recommendation feature flag on a single instance.

D. Mirror traffic to the new version of your application.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

You are responsible for deploying a new API. That API will have three different URL paths:
* https://yourcompany.com/students
* https://yourcompany.com/teachers
* https://yourcompany.com/classes
You need to configure each API URL path to invoke a different function in your code. What should you do?

A. Create one Cloud Function exposed directly.

B. Create three Cloud Functions as three backend services exposed using an HTTPS load balancer.

C. Create three Cloud Functions exposed directly.

D. Create one Cloud Function as a backend service exposed using an HTTPS load balancer.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제7

You need to redesign the ingestion of audit events from your authentication service to allow it to handle a large increase in traffic. Currently, the audit service and the authentication system run in the same Compute Engine virtual machine. You plan to use the following Google Cloud tools in the new architecture:
Multiple Compute Engine machines, each running an instance of the authentication service Multiple Compute Engine machines, each running an instance of the audit service Pub/Sub to send the events from the authentication services.
How should you set up the topics and subscriptions to ensure that the system can handle a large volume of messages and can scale efficiently?

A. Create one Pub/Sub topic. Create one pull subscription to allow the audit services to share the messages.

B. Create one Pub/Sub topic per authentication service. Create one push subscription per topic, with the endpoint pointing to one audit service.

C. Create one Pub/Sub topic per authentication service. Create one pull subscription per topic to be used by one audit service.

D. Create one Pub/Sub topic. Create one pull subscription per audit service instance to allow the services to share the messages.

E. Create one Pub/Sub topic. Create one push subscription with the endpoint pointing to a load balancer in front of the audit services.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제8

You are running a web application on Google Kubernetes Engine that you inherited. You want to determine whether the application is using libraries with known vulnerabilities or is vulnerable to XSS attacks. Which service should you use?

A. Web Security Scanner

B. Debugger

C. Google Cloud Armor

D. Error Reporting

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제9

You are a developer at a large corporation You manage three Google Kubernetes Engine clusters. Your team's developers need to switch from one cluster to another regularly without losing access to their preferred development tools. You want to configure access to these clusters using the fewest number of steps while following Google-recommended best practices. What should you do?

A. In a configuration file, define the clusters users, and contexts Email the file to the developers and ask them to use kubect1 config to add cluster, user and context details.

B. Ask the developers to open three terminals on their workstation and use kubecrt1 config to configure access to each cluster.

C. Ask the developers to install the gcloud CLI on their workstation and run gcloud container clusters get-credentials to switch to another cluster

D. Ask the developers to use Cloud Shell and run gcloud container clusters get-credentials to switch to another cluster.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제10

You are designing an application that uses a microservices architecture. You are planning to deploy the application in the cloud and on-premises. You want to make sure the application can scale up on demand and also use managed services as much as possible. What should you do?

A. Deploy open source Istio in a multi-cluster deployment on multiple Google Kubernetes Engine (GKE) clusters managed by Anthos.

B. Create a GKE cluster in each environment with Anthos, and use Cloud Run for Anthos to deploy your application to each cluster.

C. Install a GKE cluster in each environment with Anthos, and use Cloud Build to create a Deployment for your application in each cluster.

D. Create a GKE cluster in the cloud and install open-source Kubernetes on-premises. Use an external load balancer service to distribute traffic across the two environments.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제11

You want to use the Stackdriver Logging Agent to send an application's log file to Stackdriver from a Compute Engine virtual machine instance.
After installing the Stackdriver Logging Agent, what should you do first?

A. Create a Stackdriver Logs Export Sink with a filter that matches the application's log entries.

B. Grant the instance full access to all Cloud APIs.

C. Configure the application log file as a custom source.

D. Enable the Error Reporting API on the project.

정답: B

문제12

The new version of your containerized application has been tested and is ready to deploy to production on Google Kubernetes Engine. You were not able to fully load-test the new version in pre-production environments, and you need to make sure that it does not have performance problems once deployed. Your deployment must be automated. What should you do?

A. Deploy the application via a continuous delivery pipeline using canary deployments. Use Cloud Monitoring to look for performance issues. and ramp up traffic as the metrics support it.

B. Deploy the application using kubectl and set the spec.updateStrategv.type to RollingUpdate. Use Cloud Monitoring to look for performance issues, and run the kubectl rollback command if there are any issues.

C. Deploy the application via a continuous delivery pipeline using blue/green deployments. Use Cloud Monitoring to look for performance issues, and launch fully when the metrics support it.

D. Use Cloud Load Balancing to slowly ramp up traffic between versions. Use Cloud Monitoring to look for performance issues.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제13

You are developing an application that will allow users to read and post comments on news articles. You want to configure your application to store and display user-submitted comments using Firestore. How should you design the schema to support an unknown number of comments and articles?

A. Store each comment in a subcollection of the article.

B. Store each comment in a document, and add the comment's key to an array property on the user profile.

C. Store each comment in a document, and add the comment's key to an array property on the article.

D. Add each comment to an array property on the article.

정답: B

문제14

You work at a rapidly growing financial technology startup. You manage the payment processing application written in Go and hosted on Cloud Run in the Singapore region (asia-southeast1). The payment processing application processes data stored in a Cloud Storage bucket that is also located in the Singapore region.
The startup plans to expand further into the Asia Pacific region. You plan to deploy the Payment Gateway in Jakarta, Hong Kong, and Taiwan over the next six months. Each location has data residency requirements that require customer data to reside in the country where the transaction was made. You want to minimize the cost of these deployments. What should you do?

A. Create three Cloud Storage buckets in the Asia multi-region, and create three Cloud Run revisions of the payment processing application in the Singapore region.

B. Create a Cloud Storage bucket in each region, and create a Cloud Run service of the payment processing application in each region.

C. Create a Cloud Storage bucket in each region, and create three Cloud Run services of the payment processing application in the Singapore region.

D. Create three Cloud Storage buckets in the Asia multi-region, and create three Cloud Run services of the payment processing application in the Singapore region.

정답: B

문제15

You
are deploying a single website on App Engine that needs to be accessible via the URL
http://www.altostrat.com/. What should you do?

A. Define a mapping in dispatch.yaml to point the domain www.altostrat.com to your App Engine service. Create a DNS CNAME record to point to the App Engine canonical name ghs.googlehosted.com.

B. Verify domain ownership with Webmaster Central. Create a DNS CNAME record to point to the App Engine canonical name ghs.googlehosted.com.

C. Verify domain ownership with Webmaster Central. Define an A record pointing to the single global App Engine IP address.

D. Define a mapping in dispatch.yaml to point the domain www.altostrat.com to your App Engine service. Define an A record pointing to the single global App Engine IP address.

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제16

You are reviewing and updating your Cloud Build steps to adhere to Google-recommended practices.
Currently, your build steps include:
1. Pull the source code from a source repository.
2. Build a container image
3. Upload the built image to Artifact Registry.
You need to add a step to perform a vulnerability scan of the built container image, and you want the results of the scan to be available to your deployment pipeline running in Google Cloud. You want to minimize changes that could disrupt other teams' processes What should you do?

A. Upload the built container images to your Docker Hub instance, and scan them for vulnerabilities.

B. Add Artifact Registry to your Aqua Security instance, and scan the built container images for vulnerabilities

C. Enable the Container Scanning API in Artifact Registry, and scan the built container images for vulnerabilities.

D. Enable Binary Authorization, and configure it to attest that no vulnerabilities exist in a container image.

정답: C

문제17

You are developing an internal application that will allow employees to organize community events within your company. You deployed your application on a single Compute Engine instance. Your company uses Google Workspace (formerly G Suite), and you need to ensure that the company employees can authenticate to the application from anywhere. What should you do?

A. Set up a VPN tunnel between your company network and your instance's VPC location on Google Cloud. Configure the required firewall rules and routing information to both the on-premises and Google Cloud networks.

B. Add a public IP address to your instance, and restrict access to the instance using firewall rules. Allow your company's proxy as the only source IP address.

C. Add a public IP address to your instance, and allow traffic from the internet. Generate a random hash, and create a subdomain that includes this hash and points to your instance. Distribute this DNS address to your company's employees.

D. Add an HTTP(S) load balancer in front of the instance, and set up Identity-Aware Proxy (IAP).
Configure the IAP settings to allow your company domain to access the website.

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제18

You are running an application on App Engine that you inherited. You want to find out whether the application is using insecure binaries or is vulnerable to XSS attacks. Which service should you use?

A. Cloud Security Scanner

B. Stackdriver Debugger

C. Cloud Amor

D. Stackdriver Error Reporting

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제19

You migrated some of your applications to Google Cloud. You are using a legacy monitoring platform deployed on-premises for both on-premises and cloud-deployed applications. You discover that your notification system is responding slowly to time-critical problems in the cloud applications. What should you do?

A. Install the Cloud Monitoring agent on your Compute Engine instances.

B. Replace your monitoring platform with Cloud Monitoring.

C. Migrate some traffic back to your old platform. Perform A/B testing on the two platforms concurrently.

D. Use Cloud Logging and Cloud Monitoring to capture logs, monitor, and send alerts. Send them to your existing platform.

정답: D

문제20

You recently migrated an on-premises monolithic application to a microservices application on Google Kubernetes Engine (GKE). The application has dependencies on backend services on-premises, including a CRM system and a MySQL database that contains personally identifiable information (PII). The backend services must remain on-premises to meet regulatory requirements.
You established a Cloud VPN connection between your on-premises data center and Google Cloud. You notice that some requests from your microservices application on GKE to the backend services are failing due to latency issues caused by fluctuating bandwidth, which is causing the application to crash. How should you address the latency issues?

A. Use Istio to create a service mesh that includes the microservices on GKE and the on-premises services

B. Decrease the network layer packet size by decreasing the Maximum Transmission Unit (MTU) value from its default value on Cloud VPN

C. Use Memorystore to cache frequently accessed PII data from the on-premises MySQL database

D. Increase the number of Cloud VPN tunnels for the connection between Google Cloud and the on-premises services

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

최신 Professional-Cloud-Developer 무료덤프 - Google Certified Professional - Cloud Developer

우리와 연락하기

유용한 링크

최신 업데이트