Professional-Cloud-Developer試験無料問題集（265題）「Google Certified Professional

出題：1

You manage a microservice-based ecommerce platform on Google Cloud that sends confirmation emails to a third-party email service provider using a Cloud Function. Your company just launched a marketing campaign, and some customers are reporting that they have not received order confirmation emails. You discover that the services triggering the Cloud Function are receiving HTTP 500 errors. You need to change the way emails are handled to minimize email loss. What should you do?

A. Increase the Cloud Function's timeout to nine minutes.

B. Configure the sender application to write emails to Memorystore and then trigger the Cloud Function.
When the function is triggered, it reads the email details from Memorystore and sends them to the email service.

C. Configure the sender application to publish the outgoing emails in a message to a Pub/Sub topic. Update the Cloud Function configuration to consume the Pub/Sub queue.

D. Configure the sender application to retry the execution of the Cloud Function every one second if a request fails.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You are developing an application that will allow users to read and post comments on news articles. You want to configure your application to store and display user-submitted comments using Firestore. How should you design the schema to support an unknown number of comments and articles?

A. Store each comment in a subcollection of the article.

B. Add each comment to an array property on the article.

C. Store each comment in a document, and add the comment's key to an array property on the article.

D. Store each comment in a document, and add the comment's key to an array property on the user profile.

正解：D 解答を投票する

出題：3

Your team is building an application for a financial institution. The application's frontend runs on Compute Engine, and the data resides in Cloud SQL and one Cloud Storage bucket. The application will collect data containing PII, which will be stored in the Cloud SQL database and the Cloud Storage bucket. You need to secure the PII data. What should you do?

A. 1) Create the relevant firewall rules to allow only the frontend to communicate with the Cloud SQL database
2) Enable private access to allow the frontend to access the Cloud Storage bucket privately

B. 1) Configure a private IP address for Cloud SQL
2) Use VPC-SC to create a service perimeter
3) Add the Cloud SQL database and the Cloud Storage bucket to different service perimeters

C. 1) Create the relevant firewall rules to allow only the frontend to communicate with the Cloud SQL database
2) Using IAM, allow only the frontend service account to access the Cloud Storage bucket

D. 1) Configure a private IP address for Cloud SQL
2) Use VPC-SC to create a service perimeter
3) Add the Cloud SQL database and the Cloud Storage bucket to the same service perimeter

正解：D 解答を投票する

出題：4

Your team is responsible for maintaining an application that aggregates news articles from many different sources. Your monitoring dashboard contains publicly accessible real-time reports and runs on a Compute Engine instance as a web application. External stakeholders and analysts need to access these reports via a secure channel without authentication. How should you configure this secure channel?

A. Add a public IP address to the instance. Use the service account key of the instance to encrypt the traffic.

B. Add an HTTP(S) load balancer in front of the monitoring dashboard. Configure Identity-Aware Proxy to secure the communication channel.

C. Add an HTTP(S) load balancer in front of the monitoring dashboard. Set up a Google-managed SSL certificate on the load balancer for traffic encryption.

D. Use Cloud Scheduler to trigger Cloud Build every hour to create an export from the reports. Store the reports in a public Cloud Storage bucket.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

You are building an API that will be used by Android and iOS apps The API must:
* Support HTTPs
* Minimize bandwidth cost
* Integrate easily with mobile apps
Which API architecture should you use?

A. gRPC-based APIs

B. SOAP-based APIs

C. MQTT for APIs

D. RESTful APIs

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

You have containerized a legacy application that stores its configuration on an NFS share. You need to deploy this application to Google Kubernetes Engine (GKE) and do not want the application serving traffic until after the configuration has been retrieved. What should you do?

A. Add a startup script to the GKE instance group to mount the NFS share at node startup. Copy the configuration files into the container, and start the service using an ENTRYPOINT script.

B. Use the COPY statement in the Dockerfile to load the configuration into the container image. Verify that the configuration is available, and start the service using an ENTRYPOINT script.

C. Use the gsutil utility to copy files from within the Docker container at startup, and start the service using an ENTRYPOINT script.

D. Create a PersistentVolumeClaim on the GKE cluster. Access the configuration files from the volume, and start the service using an ENTRYPOINT script.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

You recently developed a new service on Cloud Run. The new service authenticates using a custom service and then writes transactional information to a Cloud Spanner database. You need to verify that your application can support up to 5,000 read and 1,000 write transactions per second while identifying any bottlenecks that occur. Your test infrastructure must be able to autoscale. What should you do?

A. Create a Compute Engine instance that uses a LAMP stack image from the Marketplace, and use Apache Bench to generate load tests against the service. Analyze the results using Cloud Trace.

B. Create a Cloud Task to generate a test load. Use Cloud Scheduler to run 60,000 Cloud Task transactions per minute for 10 minutes. Analyze the results using Cloud Monitoring.

C. Build a test harness to generate requests and deploy it to Cloud Run. Analyze the VPC Flow Logs using Cloud Logging.

D. Create a Google Kubernetes Engine cluster running the Locust or JMeter images to dynamically generate load tests. Analyze the results using Cloud Trace.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

You have decided to migrate your Compute Engine application to Google Kubernetes Engine. You need to build a container image and push it to Artifact Registry using Cloud Build. What should you do? (Choose two.) A) Run gcloud builds submit in the directory that contains the application source code.
B)
Run gcloud run deploy app-name --image gcr.io/$PROJECT_ID/app-name in the directory that contains the application source code.
C)
Run gcloud container images add-tag gcr.io/$PROJECT_ID/app-name gcr.io/$PROJECT_ID/app-name:latest in the directory that contains the application source code.
D)
In the application source directory, create a file named cloudbuild.yaml that contains the following contents:

E)
In the application source directory, create a file named cloudbuild.yaml that contains the following contents:

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

For this question, refer to the HipLocal case study.
Which Google Cloud product addresses HipLocal's business requirements for service level indicators and objectives?

A. Cloud Logging

B. Cloud Monitoring

C. Cloud Profiler

D. Cloud Trace

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Your company just experienced a Google Kubernetes Engine (GKE) API outage due to a zone failure. You want to deploy a highly available GKE architecture that minimizes service interruption to users in the event of a future zone failure. What should you do?

A. Deploy Multi-Zone clusters

B. Deploy GKE on-premises clusters

C. Deploy Zonal clusters

D. Deploy Regional clusters

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

Your team develops services that run on Google Cloud. You need to build a data processing service and will use Cloud Functions. The data to be processed by the function is sensitive. You need to ensure that invocations can only happen from authorized services and follow Google-recommended best practices for securing functions. What should you do?

A. Enable Identity-Aware Proxy in your project. Secure function access using its permissions.

B. Create an OAuth 2.0 client ID for your calling service in the same project as the function you want to secure. Use those credentials to invoke the function.

C. Create a service account with the Cloud Functions Viewer role. Use that service account to invoke the function.

D. Create a service account with the Cloud Functions Invoker role. Use that service account to invoke the function.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

Your analytics system executes queries against a BigQuery dataset. The SQL query is executed in batch and passes the contents of a SQL file to the BigQuery CLI. Then it redirects the BigQuery CLI output to another process. However, you are getting a permission error from the BigQuery CLI when the queries are executed.
You want to resolve the issue. What should you do?

A. Create a new dataset in BigQuery, and copy the source table to the new dataset Query the new dataset and table from the CLI.

B. Grant the service account BigQuery Data Viewer and BigQuery Job User roles.

C. Create a view in BigQuery from the SQL query and SELECT* from the view in the CLI.

D. Grant the service account BigQuery Data Editor and BigQuery Data Viewer roles.

正解：D 解答を投票する

Professional-Cloud-Developer試験無料問題集「Google Certified Professional - Cloud Developer 認定」