Professional-Cloud-Developer試験無料問題集（400題）「Google Certified Professional

出題：1

You manage a microservices application on Google Kubernetes Engine (GKE) using Istio. You secure the communication channels between your microservices by implementing an Istio AuthorizationPolicy, a Kubernetes NetworkPolicy, and mTLS on your GKE cluster. You discover that HTTP requests between two Pods to specific URLs fail, while other requests to other URLs succeed. What is the cause of the connection issue?

A. A Kubernetes NetworkPolicy resource is blocking HTTP traffic between the Pods.

B. The Pod initiating the HTTP requests is attempting to connect to the target Pod via an incorrect TCP port.

C. The Authorization Policy of your cluster is blocking HTTP requests for specific paths within your application.

D. The cluster has mTLS configured in permissive mode, but the Pod's sidecar proxy is sending unencrypted traffic in plain text.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

You are a developer at a regulated financial company and are the lead of a risk calculation application that is running on Cloud Run. Binary Authorization for Cloud Run has been enabled as an organization policy, and there is one attestor. All applications in the company are attested.
Each application's image is deployed as part of a CI/CD pipeline during a 1-hour change window at 11 PM local time. There is a new security issue that requires you to deploy a critical fix before the next change window. You have created a new image with the fix, and your manager has approved the image in an email message. What should you do?

A. Sign the image with your private key and ask the project admin to change the public key in the attestor.

B. Use the breakglass approach to deploy the image.

C. Change the organization policy to temporarily disable Binary Authorization, and deploy the image.

D. Add the image to the exempt image patterns in the Binary Authorization policy.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Your team manages a Google Kubernetes Engine (GKE) cluster where an application is running.
A different team is planning to integrate with this application. Before they start the integration, you need to ensure that the other team cannot make changes to your application, but they can deploy the integration on GKE. What should you do?

A. Create a new namespace in the existing cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.

B. Create a new namespace in the existing cluster. Using Kubernetes role-based access control (RBAC), grant the Admin role on the new namespace to the other team.

C. Using Identity and Access Management (IAM), grant the Viewer IAM role on the cluster project to the other team.

D. Create a new GKE cluster. Using Identity and Access Management (IAM), grant the Editor role on the cluster project to the other team.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

You need to build a public API that authenticates, enforces quotas, and reports metrics for API callers. Which tool should you use to complete this architecture?

A. GKE Ingress for HTTP(S) Load Balancing

B. Identity-Aware Proxy

C. App Engine

D. Cloud Endpoints

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

You are tasked with using C++ to build and deploy a microservice for an application hosted on Google Cloud. The code needs to be containerized and use several custom software libraries that your team has built. You do not want to maintain the underlying infrastructure of the application.
How should you deploy the microservice?

A. Use Cloud Shell to containerize your microservice, and deploy it on a Container-Optimized OS Compute Engine instance.

B. Use Cloud Build to create the container, and deploy it on Cloud Run.

C. Use Cloud Functions to deploy the microservice.

D. Use Cloud Shell to containerize your microservice, and deploy it on standard Google Kubernetes Engine.

正解：B 解答を投票する

出題：6

Your ecommerce application receives external requests and forwards them to third-party API services for credit card processing, shipping, and inventory management as shown in the diagram.

Your customers are reporting that your application is running slowly at unpredictable times. The application doesn't report any metrics. You need to determine the cause of the inconsistent performance. What should you do?

A. Enable Managed Service for Prometheus on the Google Kubernetes Engine cluster to gather application metrics.

B. Install the OpenTelemetry library for your respective language, and instrument your application.

C. Install the Ops Agent inside your container and configure it to gather application metrics.

D. Modify your application to read and forward the X-Cloud-Trace-Context header when it calls the downstream services.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

You are developing an application that needs to connect to a Cloud SQL for PostgreSQL database by using the Cloud SQL Auth Proxy. The Cloud SQL Auth Proxy is hosted in a different Google Cloud VPC network. The Cloud SQL for PostgreSQL instance has public and private IP addresses. You are required to use the private IP for security reasons. When testing the connection to the Cloud SQL instance, you can connect by using the public IP address, but you are unable to connect by using the private IP address. How should you fix this issue?

A. Add the --private-ip option when starting the Cloud SQL Auth Proxy.

B. Run the Cloud SQL Auth Proxy as a background service.

C. Set up VPC Network Peering between your VPC and the VPC where the Cloud SQL instance is deployed.

D. Grant yourself the IAM role that provides access to the Cloud SQL instance.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

You are designing an application that consists of several microservices. Each microservice has its own RESTful API and will be deployed as a separate Kubernetes Service. You want to ensure that the consumers of these APIs aren't impacted when there is a change to your API, and also ensure that third-party systems aren't interrupted when new versions of the API are released.
How should you configure the connection to the application following Google-recommended best practices?

A. Combine multiple versions in the same service, and then specify the API version in the POST request.

B. Use an Ingress that uses the API's URL to route requests to the appropriate backend.

C. Use multiple clusters, and use DNS entries to route requests to separate versioned backends.

D. Leverage a Service Discovery system, and connect to the backend specified by the request.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

You are building a storage layer for an analytics Hadoop cluster for your company. This cluster will run multiple jobs on a nightly basis, and you need to access the data frequently. You want to use Cloud Storage for this purpose. Which storage option should you choose?

A. Nearline storage

B. Multi-regional storage

C. Coldline storage

D. Regional storage

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Your company's security team uses Identity and Access Management (IAM) to track which users have access to which resources. You need to create a version control system that can integrate with your security team's processes. You want your solution to support fast release cycles and frequent merges to your main branch to minimize merge conflicts. What should you do?

A. Create a Cloud Source Repositories repository, and use feature-based development.

B. Create a Cloud Source Repositories repository, and use trunk-based development.

C. Create a GitHub repository, mirror it to a Cloud Source Repositories repository, and use trunk- based development.

D. Create a GitHub repository, mirror it to a Cloud Source Repositories repository, and use feature- based development.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

Professional-Cloud-Developer試験無料問題集「Google Certified Professional - Cloud Developer 認定」