[2024年12月09日] 合格Cloud Developer Professional-Cloud-Developer試験問題集には265問があります
究極ガイドの無料準備Google Professional-Cloud-Developer試験問題と解答
質問 # 69
Your API backend is running on multiple cloud providers. You want to generate reports for the network latency of your API.
Which two steps should you take? (Choose two.)
- A. Use Fluentd agent to gather data.
- B. Use Zipkin collector to gather data.
- C. Use Stackdriver Trace to generate reports.
- D. Use Stackdriver Debugger to generate report.
- E. Use Stackdriver Profiler to generate report.
正解：B、C
解説：
Explanation
https://cloud.google.com/trace/docs/zipkin
"receive traces from Zipkin clients and forward those traces to Cloud Trace for analysis."
https://cloud.google.com/trace/docs/quickstart#analysis_reports_window
質問 # 70
Your application performs well when tested locally, but it runs significantly slower when you deploy it to App Engine standard environment. You want to diagnose the problem.
What should you do?
- A. File a ticket with Cloud Support indicating that the application performs faster locally.
- B. Use Stackdriver Trace to determine which functions within the application have higher latency.
- C. Add logging commands to the application and use Stackdriver Logging to check where the latency problem occurs.
- D. Use Stackdriver Debugger Snapshots to look at a point-in-time execution of the application.
正解：C
質問 # 71
What are the features of using iCloud as a backup method for an iOS device?
- A. Offers up to 200 TB of storage.
- B. The customer can make backups over cellular networks.
- C. Backups can be encrypted or un-encrypted.
- D. Always encrypts backups.
正解：C
解説：
Explanation/Reference: https://www.pcworld.com/article/2154792/backups-via-icloud-or-itunes-the-crucial-differences-that- affect-your-data.html
質問 # 72
Which of the following is an ESD precaution according to Apple standards?
- A. A person working on an ESD-sensitive circuit should not be touched.
- B. An ionized air generator can be used instead of grounding a work area.
- C. Safety apron made of synthetic fibers should be worn.
- D. The relative humidity in a work area should be lower than 50 percent.
正解：A
質問 # 73
Case Study
Company Overview
HipLocal is a community application designed to facilitate communication between people in close proximity. It is used for event planning and organizing sporting events, and for businesses to connect with their local communities. HipLocal launched recently in a few neighborhoods in Dallas and is rapidly growing into a global phenomenon. Its unique style of hyper-local community communication and business outreach is in demand around the world.
Executive Statement
We are the number one local community app; it's time to take our local community services global. Our venture capital investors want to see rapid growth and the same great experience for new local and virtual communities that come online, whether their members are 10 or 10000 miles away from each other.
Solution Concept
HipLocal wants to expand their existing service, with updated functionality, in new regions to better serve their global customers. They want to hire and train a new team to support these regions in their time zones. They will need to ensure that the application scales smoothly and provides clear uptime data.
Existing Technical Environment
HipLocal's environment is a mix of on-premises hardware and infrastructure running in Google Cloud Platform.
The HipLocal team understands their application well, but has limited experience in global scale applications.
Their existing technical environment is as follows:
* Existing APIs run on Compute Engine virtual machine instances hosted in GCP.
* State is stored in a single instance MySQL database in GCP.
* Data is exported to an on-premises Teradata/Vertica data warehouse.
* Data analytics is performed in an on-premises Hadoop environment.
* The application has no logging.
* There are basic indicators of uptime; alerts are frequently fired when the APIs are unresponsive.
Business Requirements
HipLocal's investors want to expand their footprint and support the increase in demand they are seeing. Their requirements are:
* Expand availability of the application to new regions.
* Increase the number of concurrent users that can be supported.
* Ensure a consistent experience for users when they travel to different regions.
* Obtain user activity metrics to better understand how to monetize their product.
* Ensure compliance with regulations in the new regions (for example, GDPR).
* Reduce infrastructure management time and cost.
* Adopt the Google-recommended practices for cloud computing.
Technical Requirements
* The application and backend must provide usage metrics and monitoring.
* APIs require strong authentication and authorization.
* Logging must be increased, and data should be stored in a cloud analytics platform.
* Move to serverless architecture to facilitate elastic scaling.
* Provide authorized access to internal apps in a secure manner.
HipLocal's APIs are showing occasional failures, but they cannot find a pattern. They want to collect some metrics to help them troubleshoot.
What should they do?
- A. Install the Stackdriver Logging agent on the VMs.
- B. Install the Stackdriver Monitoring agent on the VMs.
- C. Use Stackdriver Trace to look for performance bottlenecks.
- D. Take frequent snapshots of all of the VMs.
正解：B
質問 # 74
Your development team is using Cloud Build to promote a Node.js application built on App Engine from your staging environment to production. The application relies on several directories of photos stored in a Cloud Storage bucket named webphotos-staging in the staging environment. After the promotion, these photos must be available in a Cloud Storage bucket named webphotos-prod in the production environment. You want to automate the process where possible. What should you do?
A)
Manually copy the photos to webphotos-prod.
B)
Add a startup script in the application's app.yami file to move the photos from webphotos-staging to webphotos-prod.
C)
Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:
D)
Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:
- A. Option B
- B. Option A
- C. Option C
- D. Option D
正解：C
解説：
Explanation
https://cloud.google.com/storage/docs/gsutil/commands/cp
質問 # 75
Please refer to the following information to answer the questions on the right.
Hannah recently picked up her iMac after a repair. The sound from the speakers was distorted and unclear and a technician determined that a repair would resolve the issue.
Once Hannah returned home with the iMac, the sound issue occurred again.
Hannah has returned. She is angry and she is cursing at the technician.
From the following, which are part of the 5-step conflict resolution model? (Choose two.)
- A. "Is this really the same issue? Might it be a different issue?"
- B. "If I can ask some questions about the last repair and what has occurred since then, I can figure out what the appropriate next step is. I might be able to suggest a solution. Does that sound okay, Hannah?"
- C. "l can prove to you exactly how you are wrong about this issue."
- D. "Calm down!"
- E. "Though your frustration is understandable, we are in a family-friendly environment so I am going to have to ask you to be mindful of the language you are using."
- F. "Are you sure your children didn't do something to it?"
正解：B、D
質問 # 76
You are designing a deployment technique for your new applications on Google Cloud. As part of your deployment planning, you want to use live traffic to gather performance metrics for both new and existing applications. You need to test against the full production load prior to launch. What should you do?
- A. Use canary deployment
- B. Use rolling updates deployment
- C. Use blue/green deployment
- D. Use A/B testing with traffic mirroring during deployment
正解：A
質問 # 77
You have an application that uses an HTTP Cloud Function to process user activity from both desktop browser and mobile application clients. This function will serve as the endpoint for all metric submissions using HTTP POST.
Due to legacy restrictions, the function must be mapped to a domain that is separate from the domain requested by users on web or mobile sessions. The domain for the Cloud Function is https://fn.example.com. Desktop and mobile clients use the domain https://www.example.com. You need to add a header to the function's HTTP response so that only those browser and mobile sessions can submit metrics to the Cloud Function. Which response header should you add?
- A. Access-Control-Allow-Origin: https://*.example.com
- B. Access-Control-Allow-origin: https://www.example.com
- C. Access-Control-Allow-Origin: *
- D. Access-Control-Allow-Origin: https://fn.example.com
正解：B
質問 # 78
Your team is responsible for maintaining an application that aggregates news articles from many different sources. Your monitoring dashboard contains publicly accessible real-time reports and runs on a Compute Engine instance as a web application. External stakeholders and analysts need to access these reports via a secure channel without authentication. How should you configure this secure channel?
- A. Use Cloud Scheduler to trigger Cloud Build every hour to create an export from the reports. Store the reports in a public Cloud Storage bucket.
- B. Add an HTTP(S) load balancer in front of the monitoring dashboard. Configure Identity-Aware Proxy to secure the communication channel.
- C. Add a public IP address to the instance. Use the service account key of the instance to encrypt the traffic.
- D. Add an HTTP(S) load balancer in front of the monitoring dashboard. Set up a Google-managed SSL certificate on the load balancer for traffic encryption.
正解：D
解説：
Explanation
https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs
質問 # 79
You are deploying your applications on Compute Engine. One of your Compute Engine instances failed to launch. What should you do? (Choose two.)
- A. Access Compute Engine as a different SSH user.
- B. Troubleshoot firewall rules or routes on an instance.
- C. Check whether network traffic to or from your instance is being dropped.
- D. Check whether your instance boot disk is completely full.
- E. Determine whether your file system is corrupted.
正解：D、E
解説：
Explanation
https://cloud.google.com/compute/docs/troubleshooting/vm-startup
質問 # 80
Your API backend is running on multiple cloud providers. You want to generate reports for the network latency of your API.
Which two steps should you take? (Choose two.)
- A. Use Fluentd agent to gather data.
- B. Use Zipkin collector to gather data.
- C. Use Stackdriver Trace to generate reports.
- D. Use Stackdriver Debugger to generate report.
- E. Use Stackdriver Profiler to generate report.
正解：B、C
解説：
https://cloud.google.com/trace/docs/zipkin
"receive traces from Zipkin clients and forward those traces to Cloud Trace for analysis."
https://cloud.google.com/trace/docs/quickstart#analysis_reports_window
質問 # 81
Your App Engine standard configuration is as follows:
service: production
instance_class: B1
You want to limit the application to 5 instances.
Which code snippet should you include in your configuration?
manual_scaling:
- A. instances: 5
min_pending_latency: 30ms
basic_scaling: - B. max_instances: 5
idle_timeout: 10m - C. instances: 5
min_pending_latency: 30ms
manual_scaling: - D. max_instances: 5
idle_timeout: 10m
basic_scaling:
正解：A
質問 # 82
You are using Cloud Build to create a new Docker image on each source code commit to a Cloud Source Repositoties repository. Your application is built on every commit to the master branch. You want to release specific commits made to the master branch in an automated method. What should you do?
- A. Create a build trigger on a Git tag pattern. Use a Git tag convention for new releases.
- B. Commit your source code to a second Cloud Source Repositories repository with a second Cloud Build trigger. Use this repository for new releases only.
- C. Manually trigger the build for new releases.
- D. Create a build trigger on a Git branch name pattern. Use a Git branch naming convention for new releases.
正解：D
解説：
Reference:
https://docs.docker.com/docker-hub/builds/
質問 # 83
You want to re-architect a monolithic application so that it follows a microservices model. You want to accomplish this efficiently while minimizing the impact of this change to the business.
Which approach should you take?
- A. Refactor the monolithic application with appropriate microservices in a single effort and deploy it.
- B. Deploy the application to Compute Engine and turn on autoscaling.
- C. Replace the application's features with appropriate microservices in phases.
- D. Build a new application with the appropriate microservices separate from the monolith and replace it when it is complete.
正解：A
解説：
Reference:
https://cloud.google.com/solutions/migrating-a-monolithic-app-to-microservices-gke
質問 # 84
Your company has deployed a new API to App Engine Standard environment. During testing, the API is not behaving as expected. You want to monitor the application over time to diagnose the problem within the application code without redeploying the application.
Which tool should you use?
- A. Stackdriver Trace
- B. Stackdriver Debug Snapshots
- C. Stackdriver Debug Logpoints
- D. Stackdriver Monitoring
正解：D
解説：
Reference:
https://rominirani.com/gcp-stackdriver-tutorial-debug-snapshots-traces-logging-and-logpoints-
1ba49e4780e6
質問 # 85
Your security team is auditing all deployed applications running in Google Kubernetes Engine. After completing the audit, your team discovers that some of the applications send traffic within the cluster in clear text. You need to ensure that all application traffic is encrypted as quickly as possible while minimizing changes to your applications and maintaining support from Google. What should you do?
- A. Use an automated process to request SSL Certificates for your applications from Let's Encrypt and add them to your applications.
- B. Install Istio, enable proxy injection on your application namespace, and then enable mTLS.
- C. Use Network Policies to block traffic between applications.
- D. Define Trusted Network ranges within the application, and configure the applications to allow traffic only from those networks.
正解：A
質問 # 86
You have a web application that publishes messages to Pub/Sub. You plan to build new versions of the application locally and need to quickly test Pub/Sub integration tor each new build. How should you configure local testing?
- A. Run the gclcud config set api_endpoint_overrides/pubsub https: / 'pubsubemulator.googleapi3.com. coin/ command to change the Pub/Sub endpoint prior to starting the application
- B. In the Google Cloud console, navigate to the API Library and enable the Pub/Sub API When developing locally, configure your application to call pubsub.googleapis com
- C. Install Cloud Code on the integrated development environment (IDE) Navigate to Cloud APIs, and enable Pub/Sub against a valid Google Project ID. When developing locally, configure your application to call pubsub.googleapis com
- D. Install the Pub/Sub emulator using gcloud and start the emulator with a valid Google Project ID. When developing locally, configure your application to use the local emulator by exporting the fuhsub emulator Host variable
正解：C
質問 # 87
You are developing an application that consists of several microservices running in a Google Kubernetes Engine cluster. One microservice needs to connect to a third-party database running on-premises. You need to store credentials to the database and ensure that these credentials can be rotated while following security best practices. What should you do?
- A. Store the credentials in an encrypted volume mount, and associate a Persistent Volume Claim with the client Pod.
- B. Store the credentials as a Kubernetes Secret, and use the Cloud Key Management Service plugin to handle encryption and decryption.
- C. Store the credentials in a sidecar container proxy, and use it to connect to the third-party database.
- D. Configure a service mesh to allow or restrict traffic from the Pods in your microservice to the database.
正解：B
解説：
https://cloud.google.com/kubernetes-engine/docs/how-to/encrypting-secrets By default, Google Kubernetes Engine (GKE) encrypts customer content stored at rest, including Secrets. GKE handles and manages this default encryption for you without any additional action on your part.
Application-layer secrets encryption provides an additional layer of security for sensitive data, such as Secrets, stored in etcd. Using this functionality, you can use a key managed with Cloud KMS to encrypt data at the application layer. This encryption protects against attackers who gain access to an offline copy of etcd.
質問 # 88
You are building a new API. You want to minimize the cost of storing and reduce the latency of serving images.
Which architecture should you use?
- A. Transfer Appliance backed by Cloud Filestore
- B. App Engine backed by Cloud Storage
- C. Compute Engine backed by Persistent Disk
- D. Cloud Content Delivery Network (CDN) backed by Cloud Storage
正解：C
質問 # 89
You are monitoring a web application that is written in Go and deployed in Google Kubernetes Engine. You notice an increase in CPU and memory utilization. You need to determine which source code is consuming the most CPU and memory resources. What should you do?
- A. Download, install, and start the Snapshot Debugger agent in your VM. Take debug snapshots of the functions that take the longest time. Review the call stack frame, and identify the local variables at that level in the stack.
- B. Create a Cloud Logging query that gathers the web application's logs. Write a Python script that calculates the difference between the timestamps from the beginning and the end of the application's longest functions to identity time-intensive functions.
- C. Import OpenTelemetry and Trace export packages into your application, and create the trace provider.
Review the latency data for your application on the Trace overview page, and identify where bottlenecks are occurring. - D. Import the Cloud Profiler package into your application, and initialize the Profiler agent. Review the generated flame graph in the Google Cloud console to identify time-intensive functions.
正解：D
質問 # 90
You are creating an App Engine application that writes a file to any user's Google Drive.
How should the application authenticate to the Google Drive API?
- A. With the App Engine service account and https://www.googleapis.com/auth/drive.file scope that generates a signed JWT.
- B. With the App Engine service account with delegated domain-wide authority.
- C. With an OAuth Client ID that uses the https://www.googleapis.com/auth/drive.file scope to obtain an access token for each user.
- D. With an OAuth Client ID with delegated domain-wide authority.
正解：D
質問 # 91
Your company stores their source code in a Cloud Source Repositories repository. Your company wants to build and test their code on each source code commit to the repository and requires a solution that is managed and has minimal operations overhead.
Which method should they use?
- A. Use Jenkins deployed via the Google Cloud Platform Marketplace, configured to watch for source code commits.
- B. Use Cloud Build with a trigger configured for each source code commit.
- C. Use a Compute Engine virtual machine instance with an open source continuous integration tool, configured to watch for source code commits.
- D. Use a source code commit trigger to push a message to a Cloud Pub/Sub topic that triggers an App Engine service to build the source code.
正解：B
解説：
https://cloud.google.com/build/docs/automating-builds/create-manage-triggers#:~:text=A%20Cloud%20Build%20trigger%20automatically,changes%20that%20match%20certain%20criteria.
質問 # 92
......
Google Certified Professional - Cloud Developer練習テスト2024年最新のストレスなしでProfessional-Cloud-Developer合格！：https://drive.google.com/open?id=19fduDuaQajQ-FD0aJDcJkGmySlJNkgjF
合格させるProfessional-Cloud-DeveloperテストエンジンとPDFで完全版無料問題集：https://jp.fast2test.com/Professional-Cloud-Developer-premium-file.html