support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. Professional Cloud Developer

Free Professional Cloud Developer Exam Braindumps
Professional Cloud Developer Questions 96–100 (page: 21)

Updated On: 10-Feb-2026
Page 21 of 52
PDF with 379 Questions

You have written a Cloud Function that accesses other Google Cloud resources. You want to secure
the environment using the principle of least privilege. What should you do?

  1. Create a new service account that has Editor authority to access the resources. The deployer is given permission to get the access token.
  2. Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to get the access token.
  3. Create a new service account that has Editor authority to access the resources. The deployer is given permission to act as the new service account.
  4. Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to act as the new service account.

Answer(s): D


Reference:

https://cloud.google.com/blog/products/application-development/least-privilege-for-cloud-functions-using-cloud-iam



You are a SaaS provider deploying dedicated blogging software to customers in your Google Kubernetes Engine (GKE) cluster. You want to configure a secure multi-tenant platform to ensure that each customer has access to only their own blog and can’t affect the workloads of other customers. What should you do?

  1. Enable Application-layer Secrets on the GKE cluster to protect the cluster.
  2. Deploy a namespace per tenant and use Network Policies in each blog deployment.
  3. Use GKE Audit Logging to identify malicious containers and delete them on discovery.
  4. Build a custom image of the blogging software and use Binary Authorization to prevent untrusted image deployments.

Answer(s): B


Reference:

https://cloud.google.com/kubernetes-engine/docs/concepts/multitenancy-overview



You have decided to migrate your Compute Engine application to Google Kubernetes Engine. You need to build a container image and push it to Artifact Registry using Cloud Build. What should you do? (Choose two.)

  1. Run gcloud builds submit in the directory that contains the application source code.
  2. Run gcloud run deploy app-name --image gcr.io/$PROJECT_ID/app-name in the directory that contains the application source code.
  3. Run gcloud container images add-tag gcr.io/$PROJECT_ID/app-name gcr.io/$PROJECT_ID/app-name:latest in the directory that contains the application source code.
  4. In the application source directory, create a file named cloudbuild.yaml that contains the following contents:
  5. In the application source directory, create a file named cloudbuild.yaml that contains the following contents:

Answer(s): B,D



You are developing an internal application that will allow employees to organize community events within your company. You deployed your application on a single Compute Engine instance. Your company uses Google Workspace (formerly G Suite), and you need to ensure that the company employees can authenticate to the application from anywhere. What should you do?

  1. Add a public IP address to your instance, and restrict access to the instance using firewall rules. Allow your company’s proxy as the only source IP address.
  2. Add an HTTP(S) load balancer in front of the instance, and set up Identity-Aware Proxy (IAP). Configure the IAP settings to allow your company domain to access the website.
  3. Set up a VPN tunnel between your company network and your instance’s VPC location on Google Cloud. Configure the required firewall rules and routing information to both the on-premises and Google Cloud networks.
  4. Add a public IP address to your instance, and allow traffic from the internet. Generate a random hash, and create a subdomain that includes this hash and points to your instance. Distribute this DNS address to your company’s employees.

Answer(s): C



Your development team is using Cloud Build to promote a Node.js application built on App Engine from your staging environment to production. The application relies on several directories of photos stored in a Cloud Storage bucket named webphotos-staging in the staging environment. After the promotion, these photos must be available in a Cloud Storage bucket named webphotos-prod in the production environment. You want to automate the process where possible. What should you do?

  1. Manually copy the photos to webphotos-prod.
  2. Add a startup script in the application’s app.yaml file to move the photos from webphotos-staging to webphotos-prod.
  3. Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:
  4. Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:

Answer(s): C



  PDF
Viewing page 21 of 52
Viewing questions 101 - 105 out of 379 questions


Post your Comments and Discuss Google Professional Cloud Developer exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!