QUESTION: 125

You are developing an ecommerce web application that uses App Engine standard environment and Memorystore for Redis.
When a user logs into the app, the application caches the user's information (e.g., session, name, address, preferences), which is stored for quick retrieval during checkout.
While testing your application in a browser, you get a 502 Bad Gateway error. You have determined that the application is not connecting to Memorystore.
What is the reason for this error?

Your Memorystore for Redis instance was deployed without a public IP address.
You configured your Serverless VPC Access connector in a different region than your App Engine instance.
The firewall rule allowing a connection between App Engine and Memorystore was removed during an infrastructure update by the DevOps team.
You configured your application to use a Serverless VPC Access connector on a different subnet in a different availability zone than your App Engine instance.

Answer(s): B

Reference:

https://cloud.google.com/endpoints/docs/openapi/troubleshoot-response-errors

Reveal Solution Next Question

QUESTION: 126

Your team develops services that run on Google Cloud. You need to build a data processing service and will use Cloud Functions. The data to be processed by the function is sensitive. You need to ensure that invocations can only happen from authorized services and follow Google-recommended best practices for securing functions.
What should you do?

Enable Identity-Aware Proxy in your project. Secure function access using its permissions.
Create a service account with the Cloud Functions Viewer role. Use that service account to invoke the function.
Create a service account with the Cloud Functions Invoker role. Use that service account to invoke the function.
Create an OAuth 2.0 client ID for your calling service in the same project as the function you want to secure. Use those credentials to invoke the function.

Answer(s): C

Reference:

https://medium.com/google-cloud/how-to-securely-invoke-a-cloud-function-from-google-kubernetes-engine-running-on-another-gcp-79797ec2b2c6

Reveal Solution Next Question

QUESTION: 127

You are deploying your applications on Compute Engine. One of your Compute Engine instances failed to launch.
What should you do? (Choose two.)

Determine whether your file system is corrupted.
Access Compute Engine as a different SSH user.
Troubleshoot firewall rules or routes on an instance.
Check whether your instance boot disk is completely full.
Check whether network traffic to or from your instance is being dropped.

Answer(s): A,D

Reference:

https://cloudacademy.com/course/deploying-applications-on-gcp-compute/deploying-applications-and-services-on-compute-engine/

Reveal Solution Next Question

QUESTION: 128

Your web application is deployed to the corporate intranet. You need to migrate the web application to Google Cloud. The web application must be available only to company employees and accessible to employees as they travel. You need to ensure the security and accessibility of the web application while minimizing application changes.
What should you do?

Configure the application to check authentication credentials for each HTTP(S) request to the application.
Configure Identity-Aware Proxy to allow employees to access the application through its public IP address.
Configure a Compute Engine instance that requests users to log in to their corporate account. Change the web application DNS to point to the proxy Compute Engine instance. After authenticating, the Compute Engine instance forwards requests to and from the web application.
Configure a Compute Engine instance that requests users to log in to their corporate account. Change the web application DNS to point to the proxy Compute Engine instance. After authenticating, the Compute Engine issues an HTTP redirect to a public IP address hosting the web application.

Answer(s): B

Reveal Solution Next Question

Free Professional Cloud Developer Exam Braindumps (page: 32)

QUESTION: 125

Reference:

QUESTION: 126

Reference:

QUESTION: 127

Reference:

QUESTION: 128