最新 [2023年11月08日]Professional-Cloud-Developer試験問題には有効なProfessional-Cloud-Developer問題集PDF [Q40-Q64]

最新 [2023年11月08日]Professional-Cloud-Developer試験問題には有効なProfessional-Cloud-Developer問題集PDF

Professional-Cloud-Developer練習テスト問題解答は更新された228問があります

Google Professional-Cloud-Developer 試験は、クラウドネイティブアプリケーションを開発することに特化した開発者にとって不可欠な認定です。この認定を取得することで、GCP のさらなる知識を習得し、スキルや経験を潜在的な雇用主にアピールし、クラウドコンピューティング分野でのキャリアアップにつなげることができます。

 

質問 # 40
You should use open questions to do which of the following?

• A. Gather more information about an issue.
• B. Obtain the customer's warranty status.
• C. Greet the customer.
• D. Check for understanding.

正解：A

質問 # 41
You recently developed an application. You need to call the Cloud Storage API from a Compute Engine instance that doesn't have a public IP address. What should you do?

• A. Use Shared VPC networks
• B. Use Carrier Peering
• C. Use Private Google Access
• D. Use VPC Network Peering

正解：C

解説：
Explanation
https://cloud.google.com/vpc/docs/private-google-access

質問 # 42
You want to upload files from an on-premises virtual machine to Google Cloud Storage as part of a data migration. These files will be consumed by Cloud DataProc Hadoop cluster in a GCP environment.
Which command should you use?

• A. gcloud cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
• B. gcloud dataproc cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
• C. hadoop fs cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/
• D. gsutil cp [LOCAL_OBJECT] gs://[DESTINATION_BUCKET_NAME]/

正解：D

解説：
The gsutil cp command allows you to copy data between your local file. storage. boto files generated by running "gsutil config"

質問 # 43
You are developing a web application that contains private images and videos stored in a Cloud Storage bucket. Your users are anonymous and do not have Google Accounts. You want to use your application-specific logic to control access to the images and videos. How should you configure access?

• A. Configure Identity-Aware Proxy (IAP) to authenticate users into the web application. Allow users to access the bucket after authenticating through IAP.
• B. Grant the Storage Object Viewer IAM role to allUsers. Allow users to access the bucket after authenticating through your web application.
• C. Generate a signed URL that grants read access to the bucket. Allow users to access the URL after authenticating through your web application.
• D. Cache each web application user's IP address to create a named IP table using Google Cloud Armor.
  Create a Google Cloud Armor security policy that allows users to access the backend bucket.

正解：C

解説：
Explanation
https://cloud.google.com/storage/docs/access-control/signed-urls#should-you-use In some scenarios, you might not want to require your users to have a Google account in order to access Cloud Storage, but you still want to control access using your application-specific logic. The typical way to address this use case is to provide a signed URL to a user, which gives the user read, write, or delete access to that resource for a limited time. You specify an expiration time when you create the signed URL. Anyone who knows the URL can access the resource until the expiration time for the URL is reached or the key used to sign the URL is rotated.

質問 # 44
Your application is deployed in a Google Kubernetes Engine (GKE) cluster. When a new version of your application is released, your CI/CD tool updates the spec.template.spec.containers[0].image value to reference the Docker image of your new application version. When the Deployment object applies the change, you want to deploy at least 1 replica of the new version and maintain the previous replicas until the new replica is healthy.
Which change should you make to the GKE Deployment object shown below?

• A. Set the Deployment strategy to RollingUpdate with maxSurge set to 1, maxUnavailable set to 0.
• B. Set the Deployment strategy to Recreate with maxSurge set to 1, maxUnavailable set to 0.
• C. Set the Deployment strategy to Recreate with maxSurge set to 0, maxUnavailable set to 1.
• D. Set the Deployment strategy to RollingUpdate with maxSurge set to 0, maxUnavailable set to 1.

正解：B

質問 # 45
You are working on a social media application. You plan to add a feature that allows users to upload images.
These images will be 2 MB - 1 GB in size. You want to minimize their infrastructure operations overhead for this feature.
What should you do?

• A. Create a separate bucket for each user in Cloud Storage. Assign a separate service account to allow write access on each bucket. Transfer service account credentials to the client application based on user information. The application uses this service account to upload images to Cloud Storage.
• B. Change the application to create signed URLs for Cloud Storage. Transfer these signed URLs to the client application to upload images to Cloud Storage.
• C. Change the application to accept images directly and store them in the database that stores other user information.
• D. Set up a web server on GCP to accept user images and create a file store to keep uploaded files. Change the application to retrieve images from the file store.

正解：B

解説：
Explanation/Reference: https://cloud.google.com/blog/products/storage-data-transfer/uploading-images-directly-to-cloud- storage-by-using-signed-url

質問 # 46
Please refer to the following information to answer the questions on the right.
Rachel is starting a repair on a three-year-old MacBook Pro.
After opening the device, she takes some time to visually inspect the top case assembly with battery.
During an embedded battery inspection which of the following issues should Rachel look for? (Choose two.)

• A. Battery is the correct color
• B. Updated battery firmware
• C. Dot imprints
• D. Scratches
• E. Battery-compliance shipping label

正解：C、D

質問 # 47
You are developing an application using different microservices that should remain internal to the cluster. You want to be able to configure each microservice with a specific number of replicas. You also want to be able to address a specific microservice from any other microservice in a uniform way, regardless of the number of replicas the microservice scales to. You need to implement this solution on Google Kubernetes Engine. What should you do?

• A. Deploy each microservice as a Pod. Expose the Pod in the cluster using a Service, and use the Service DNS name to address the microservice from other microservices within the cluster.
• B. Deploy each microservice as a Deployment. Expose the Deployment in the cluster using a Service, and use the Service DNS name to address it from other microservices within the cluster.
• C. Deploy each microservice as a Pod. Expose the Pod in the cluster using an Ingress, and use the Ingress IP address name to address the Pod from other microservices within the cluster.
• D. Deploy each microservice as a Deployment. Expose the Deployment in the cluster using an Ingress, and use the Ingress IP address to address the Deployment from other microservices within the cluster.

正解：B

質問 # 48
You have decided to migrate your Compute Engine application to Google Kubernetes Engine. You need to build a container image and push it to Artifact Registry using Cloud Build. What should you do? (Choose two.) A) Run gcloud builds submit in the directory that contains the application source code.
B)
Run gcloud run deploy app-name --image gcr.io/$PROJECT_ID/app-name in the directory that contains the application source code.
C)
Run gcloud container images add-tag gcr.io/$PROJECT_ID/app-name gcr.io/$PROJECT_ID/app-name:latest in the directory that contains the application source code.
D)
In the application source directory, create a file named cloudbuild.yaml that contains the following contents:

E)
In the application source directory, create a file named cloudbuild.yaml that contains the following contents:

• A. Option E
• B. Option C
• C. Option B
• D. Option A
• E. Option D

正解：D、E

解説：
Explanation
https://cloud.google.com/sdk/gcloud/reference/builds/submit
https://cloud.google.com/artifact-registry/docs/configure-cloud-build

質問 # 49
Please refer to the following information to answer the questions on the right.
Hannah recently picked up her iMac after a repair. The sound from the speakers was distorted and unclear and a technician determined that a repair would resolve the issue.
Once Hannah returned home with the iMac, the sound issue occurred again.
Hannah has returned. She is angry and she is cursing at the technician.
From the following, which are part of the 5-step conflict resolution model? (Choose two.)

• A. "l can prove to you exactly how you are wrong about this issue."
• B. "Are you sure your children didn't do something to it?"
• C. "Calm down!"
• D. "Though your frustration is understandable, we are in a family-friendly environment so I am going to have to ask you to be mindful of the language you are using."
• E. "Is this really the same issue? Might it be a different issue?"
• F. "If I can ask some questions about the last repair and what has occurred since then, I can figure out what the appropriate next step is. I might be able to suggest a solution. Does that sound okay, Hannah?"

正解：C、F

質問 # 50
Your company uses Cloud Logging to manage large volumes of log data. You need to build a real-time log analysis architecture that pushes logs to a third-party application for processing. What should you do?

• A. Create a Cloud Logging log export to Pub/Sub.
• B. Create a Cloud Function to read Cloud Logging log entries and send them to the third-party application.
• C. Create a Cloud Logging log export to BigQuery.
• D. Create a Cloud Logging log export to Cloud Storage.

正解：C

質問 # 51
Your team manages a Google Kubernetes Engine (GKE) cluster where an application is running. A different team is planning to integrate with this application. Before they start the integration, you need to ensure that the other team cannot make changes to your application, but they can deploy the integration on GKE. What should you do?

• A. Create a new namespace in the existing cluster. Using Kubernetes role-based access control (RBAC), grant the Admin role on the new namespace to the other team.
• B. Create a new namespace in the existing cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.
• C. Using Identity and Access Management (IAM), grant the Viewer IAM role on the cluster project to the other team.
• D. Create a new GKE cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.

正解：A

質問 # 52
You are running an application on App Engine that you inherited. You want to find out whether the application is using insecure binaries or is vulnerable to XSS attacks. Which service should you use?

• A. Cloud Security Scanner
• B. Cloud Amor
• C. Stackdriver Error Reporting
• D. Stackdriver Debugger

正解：A

解説：
Reference:
https://cloud.google.com/security-scanner

質問 # 53
You have decided to migrate your Compute Engine application to Google Kubernetes Engine. You need to build a container image and push it to Artifact Registry using Cloud Build. What should you do? (Choose two.) A) Run gcloud builds submit in the directory that contains the application source code.
B)
Run gcloud run deploy app-name --image gcr.io/$PROJECT_ID/app-name in the directory that contains the application source code.
C)
Run gcloud container images add-tag gcr.io/$PROJECT_ID/app-name gcr.io/$PROJECT_ID/app-name:latest in the directory that contains the application source code.
D)
In the application source directory, create a file named cloudbuild.yaml that contains the following contents:

E)
In the application source directory, create a file named cloudbuild.yaml that contains the following contents:

• A. Option E
• B. Option C
• C. Option B
• D. Option A
• E. Option D

正解：D、E

解説：
https://cloud.google.com/sdk/gcloud/reference/builds/submit
https://cloud.google.com/artifact-registry/docs/configure-cloud-build

質問 # 54
Your website is deployed on Compute Engine. Your marketing team wants to test conversion rates between 3 different website designs.
Which approach should you use?

• A. Deploy the website on Cloud Functions and use traffic splitting.
• B. Deploy the website on App Engine as three separate services.
• C. Deploy the website on App Engine and use traffic splitting.
• D. Deploy the website on Cloud Functions as three separate functions.

正解：C

解説：
Explanation/Reference: https://cloud.google.com/appengine/docs/standard/python/splitting-traffic

質問 # 55
Your team is developing a new application using a PostgreSQL database and Cloud Run. You are responsible for ensuring that all traffic is kept private on Google Cloud. You want to use managed services and follow Google-recommended best practices. What should you do?

• A. 1. Install PostgreSQL on a Compute Engine VM, and enable Cloud Run in different projects.
  2. Configure a private IP address for the VM. Enable private services access.
  3. Create a Serverless VPC Access connector.
  4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to access the VM hosting PostgreSQL
• B. 1. Install PostgreSQL on a Compute Engine virtual machine (VM), and enable Cloud Run in the same project.
  2. Configure a private IP address for the VM. Enable private services access.
  3. Create a Serverless VPC Access connector.
  4. Configure Cloud Run to use the connector to connect to the VM hosting PostgreSQL.
• C. 1. Use Cloud SQL and Cloud Run in different projects.
  2. Configure a private IP address for Cloud SQL. Enable private services access.
  3. Create a Serverless VPC Access connector.
  4. Set up a VPN connection between the two projects. Configure Cloud Run to use the connector to connect to Cloud SQL.
• D. 1. Enable Cloud SQL and Cloud Run in the same project.
  2. Configure a private IP address for Cloud SQL. Enable private services access.
  3. Create a Serverless VPC Access connector.
  4. Configure Cloud Run to use the connector to connect to Cloud SQL.

正解：D

解説：
Explanation
https://cloud.google.com/sql/docs/postgres/connect-run#private-ip

質問 # 56
Your company's development teams want to use Cloud Build in their projects to build and push Docker images to Container Registry. The operations team requires all Docker images to be published to a centralized, securely managed Docker registry that the operations team manages.
What should you do?

• A. Create a separate project for the operations team that has the open source Docker Registry deployed on a Compute Engine virtual machine instance. Create a username and password for each development team.
  Store the username and password in the source code repository and use it to authenticate against the operations team's Docker registry.
• B. Create a separate project for the operations team that has Container Registry configured. Assign appropriate permissions to the Cloud Build service account in each developer team's project to allow access to the operation team's registry.
• C. Use Container Registry to create a registry in each development team's project. Configure the Cloud Build build to push the Docker image to the project's registry. Grant the operations team access to each development team's registry.
• D. Create a separate project for the operations team that has Container Registry configured. Create a Service Account for each development team and assign the appropriate permissions to allow it access to the operations team's registry. Store the service account key file in the source code repository and use it to authenticate against the operations team's registry.

正解：C

解説：
Reference:
https://cloud.google.com/container-registry/

質問 # 57
You are creating and running containers across different projects in Google Cloud. The application you are developing needs to access Google Cloud services from within Google Kubernetes Engine (GKE).
What should you do?

• A. Use a Google service account to run the Pod with Workload Identity.
• B. Use a Google service account with GKE role-based access control (RBAC).
• C. Store the Google service account credentials as a Kubernetes Secret.
• D. Assign a Google service account to the GKE nodes.

正解：A

解説：
Explanation
https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity

質問 # 58
You plan to make a simple HTML application available on the internet. This site keeps information about FAQs for your application. The application is static and contains images, HTML, CSS, and Javascript. You want to make this application available on the internet with as few steps as possible.
What should you do?

• A. Create a Compute Engine instance with Apache web server installed. Configure Apache web server to host the application.
• B. Containerize your application first. Deploy this container to Google Kubernetes Engine (GKE) and assign an external IP address to the GKE pod hosting the application.
• C. Upload your application to Cloud Storage.
• D. Upload your application to an App Engine environment.

正解：C

解説：
Explanation/Reference: https://cloud.google.com/storage/docs/hosting-static-website

質問 # 59
You plan to make a simple HTML application available on the internet. This site keeps information about FAQs for your application. The application is static and contains images, HTML, CSS, and Javascript. You want to make this application available on the internet with as few steps as possible.
What should you do?

• A. Create a Compute Engine instance with Apache web server installed. Configure Apache web server to host the application.
• B. Containerize your application first. Deploy this container to Google Kubernetes Engine (GKE) and assign an external IP address to the GKE pod hosting the application.
• C. Upload your application to Cloud Storage.
• D. Upload your application to an App Engine environment.

正解：C

解説：
Reference:
https://cloud.google.com/storage/docs/hosting-static-website

質問 # 60
Your company's development teams want to use Cloud Build in their projects to build and push Docker images to Container Registry. The operations team requires all Docker images to be published to a centralized, securely managed Docker registry that the operations team manages.
What should you do?

• A. Create a separate project for the operations team that has the open source Docker Registry deployed on a Compute Engine virtual machine instance. Create a username and password for each development team.
  Store the username and password in the source code repository and use it to authenticate against the operations team's Docker registry.
• B. Create a separate project for the operations team that has Container Registry configured. Assign appropriate permissions to the Cloud Build service account in each developer team's project to allow access to the operation team's registry.
• C. Use Container Registry to create a registry in each development team's project. Configure the Cloud Build build to push the Docker image to the project's registry. Grant the operations team access to each development team's registry.
• D. Create a separate project for the operations team that has Container Registry configured. Create a Service Account for each development team and assign the appropriate permissions to allow it access to the operations team's registry. Store the service account key file in the source code repository and use it to authenticate against the operations team's registry.

正解：C

解説：
Reference: https://cloud.google.com/container-registry/

質問 # 61
You are trying to connect to your Google Kubernetes Engine (GKE) cluster using kubectl from Cloud Shell.
You have deployed your GKE cluster with a public endpoint. From Cloud Shell, you run the following command:

You notice that the kubectl commands time out without returning an error message. What is the most likely cause of this issue?

• A. Your user account does not have privileges to interact with the cluster using kubectl.
• B. Your Cloud Shell external IP address is not part of the authorized networks of the cluster.
• C. A VPC firewall is blocking access to the cluster's endpoint.
• D. The Cloud Shell is not part of the same VPC as the GKE cluster.

正解：B

解説：
Explanation
https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters#cloud_shell If you want to use Cloud Shell to access the cluster, you must add the public IP address of your Cloud Shell to the cluster's list of authorized networks.

質問 # 62
You migrated your applications to Google Cloud Platform and kept your existing monitoring platform. You now find that your notification system is too slow for time critical problems.
What should you do?

• A. Migrate some traffic back to your old platform and perform AB testing on the two platforms concurrently.
• B. Install the Stackdriver agents on your Compute Engine instances.
• C. Use Stackdriver to capture and alert on logs, then ship them to your existing platform.
• D. Replace your entire monitoring platform with Stackdriver.

正解：B

解説：
Explanation/Reference: https://cloud.google.com/monitoring/

質問 # 63
You are working on a social media application. You plan to add a feature that allows users to upload images. These images will be 2 MB - 1 GB in size. You want to minimize their infrastructure operations overhead for this feature. What should you do?

• A. Create a separate bucket for each user in Cloud Storage. Assign a separate service account to allow write access on each bucket. Transfer service account credentials to the client application based on user information. The application uses this service account to upload images to Cloud Storage.
• B. Change the application to create signed URLs for Cloud Storage. Transfer these signed URLs to the client application to upload images to Cloud Storage.
• C. Change the application to accept images directly and store them in the database that stores other user information.
• D. Set up a web server on GCP to accept user images and create a file store to keep uploaded files. Change the application to retrieve images from the file store.

正解：B

質問 # 64
......

Professional-Cloud-Developer問題集で合格確定させる練習には228問があります：https://jp.fast2test.com/Professional-Cloud-Developer-premium-file.html

最新Professional-Cloud-Developer認証有効な試験問題集の解答をゲットせよ：https://drive.google.com/open?id=19fduDuaQajQ-FD0aJDcJkGmySlJNkgjF