Free Professional-Cloud-Developer Exam Braindumps

- (Exam Topic 2)
You are a developer at a large organization. You have an application written in Go running in a production Google Kubernetes Engine (GKE) cluster. You need to add a new feature that requires access to BigQuery. You want to grant BigQuery access to your GKE cluster following Google-recommended best practices. What should you do?

1. A. Create a Google service account with BigQuery acces
2. B. Add the JSON key to Secret Manager, and use the Go client library to access the JSON key.
3. C. Create a Google service account with BigQuery acces
4. D. Add the Google service account JSON key as a Kubernetes secret, and configure the application to use this secret.
5. E. Create a Google service account with BigQuery acces
6. F. Add the Google service account JSON key to Secret Manager, and use an init container to access the secret for the application to use.
7. G. Create a Google service account and a Kubernetes service accoun
8. H. Configure Workload Identity on the GKE cluster, and reference the Kubernetes service account on the application Deployment.

Correct Answer: D
https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity#what_is
Applications running on GKE might need access to Google Cloud APIs such as Compute Engine API, BigQuery Storage API, or Machine Learning APIs.
Workload Identity allows a Kubernetes service account in your GKE cluster to act as an IAM service account. Pods that use the configured Kubernetes service account automatically authenticate as the IAM service account when accessing Google Cloud APIs. Using Workload Identity allows you to assign distinct,
fine-grained identities and authorization for each application in your cluster.

- (Exam Topic 2)
The development teams in your company want to manage resources from their local environments. You have been asked to enable developer access to each team’s Google Cloud projects. You want to maximize efficiency while following Google-recommended best practices. What should you do?

1. A. Add the users to their projects, assign the relevant roles to the users, and then provide the users with each relevant Project ID.
2. B. Add the users to their projects, assign the relevant roles to the users, and then provide the users with each relevant Project Number.
3. C. Create groups, add the users to their groups, assign the relevant roles to the groups, and then provide the users with each relevant Project ID.
4. D. Create groups, add the users to their groups, assign the relevant roles to the groups, and then provide the users with each relevant Project Number.

Correct Answer: C

- (Exam Topic 2)
You need to copy directory local-scripts and all of its contents from your local workstation to a Compute Engine virtual machine instance.
Which command should you use?

1. A. gsutil cp --project “my-gcp-project” -r ~/local-scripts/ gcp-instance-name:~/ server-scripts/ --zone “us-east1-b”
2. B. gsutil cp --project “my-gcp-project” -R ~/local-scripts/ gcp-instance-name:~/ server-scripts/ --zone “us-east1-b”
3. C. gcloud compute scp --project “my-gcp-project” --recurse ~/local-scripts/ gcpinstance- name:~/server-scripts/ --zone “us-east1-b”
4. D. gcloud compute mv --project “my-gcp-project” --recurse ~/local-scripts/ gcpinstance- name:~/server-scripts/ --zone “us-east1-b”

Correct Answer: C
Reference: https://cloud.google.com/sdk/gcloud/reference/compute/copy-files

- (Exam Topic 2)
Your company has deployed a new API to App Engine Standard environment. During testing, the API is not behaving as expected. You want to monitor the application over time to diagnose the problem within the application code without redeploying the application.
Which tool should you use?

1. A. Stackdriver Trace
2. B. Stackdriver Monitoring
3. C. Stackdriver Debug Snapshots
4. D. Stackdriver Debug Logpoints

Correct Answer: B
Reference: https://rominirani.com/gcp-stackdriver-tutorial-debug-snapshots-traces-logging-and-logpoints- 1ba49e4780e6

- (Exam Topic 2)
Your application is composed of a set of loosely coupled services orchestrated by code executed on Compute Engine. You want your application to easily bring up new Compute Engine instances that find and use a specific version of a service. How should this be configured?

1. A. Define your service endpoint information as metadata that is retrieved at runtime and used to connect to the desired service.
2. B. Define your service endpoint information as label data that is retrieved at runtime and used to connect to the desired service.
3. C. Define your service endpoint information to be retrieved from an environment variable at runtime and used to connect to the desired service.
4. D. Define your service to use a fixed hostname and port to connect to the desired servic
5. E. Replace the service at the endpoint with your new version.

Correct Answer: A
https://cloud.google.com/service-infrastructure/docs/service-metadata/reference/rest#service-endpoint