support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Google
  4. Professional Cloud Developer

Free Professional Cloud Developer Exam Braindumps
Professional Cloud Developer Questions 101–105 (page: 22)

Updated On: 10-Feb-2026
Page 22 of 52
PDF with 379 Questions

You are developing a web application that will be accessible over both HTTP and HTTPS and will run on Compute Engine instances. On occasion, you will need to SSH from your remote laptop into one of the Compute Engine instances to conduct maintenance on the app. How should you configure the instances while following Google-recommended best practices?

  1. Set up a backend with Compute Engine web server instances with a private IP address behind a TCP proxy load balancer.
  2. Configure the firewall rules to allow all ingress traffic to connect to the Compute Engine web servers, with each server having a unique external IP address.
  3. Configure Cloud Identity-Aware Proxy API for SSH access. Then configure the Compute Engine servers with private IP addresses behind an HTTP(s) load balancer for the application web traffic.
  4. Set up a backend with Compute Engine web server instances with a private IP address behind an HTTP(S) load balancer. Set up a bastion host with a public IP address and open firewall ports. Connect to the web instances using the bastion host.

Answer(s): C


Reference:

https://cloud.google.com/compute/docs/instances/connecting-advanced#cloud_iap



You have a mixture of packaged and internally developed applications hosted on a Compute Engine instance that is running Linux. These applications write log records as text in local files. You want the logs to be written to Cloud Logging. What should you do?

  1. Pipe the content of the files to the Linux Syslog daemon.
  2. Install a Google version of fluentd on the Compute Engine instance.
  3. Install a Google version of collectd on the Compute Engine instance.
  4. Using cron, schedule a job to copy the log files to Cloud Storage once a day.

Answer(s): B


Reference:

https://cloud.google.com/logging/docs/agent/logging/configuration



You want to create “fully baked” or “golden” Compute Engine images for your application. You need to bootstrap your application to connect to the appropriate database according to the environment the application is running on (test, staging, production). What should you do?

  1. Embed the appropriate database connection string in the image. Create a different image for each environment.
  2. When creating the Compute Engine instance, add a tag with the name of the database to be connected. In your application, query the Compute Engine API to pull the tags for the current instance, and use the tag to construct the appropriate database connection string.
  3. When creating the Compute Engine instance, create a metadata item with a key of “DATABASE” and a value for the appropriate database connection string. In your application, read the “DATABASE” environment variable, and use the value to connect to the appropriate database.
  4. When creating the Compute Engine instance, create a metadata item with a key of “DATABASE” and a value for the appropriate database connection string. In your application, query the metadata server for the “DATABASE” value, and use the value to connect to the appropriate database.

Answer(s): C



You are developing a microservice-based application that will be deployed on a Google Kubernetes Engine cluster. The application needs to read and write to a Spanner database. You want to follow security best practices while minimizing code changes. How should you configure your application to retrieve Spanner credentials?

  1. Configure the appropriate service accounts, and use Workload Identity to run the pods.
  2. Store the application credentials as Kubernetes Secrets, and expose them as environment variables.
  3. Configure the appropriate routing rules, and use a VPC-native cluster to directly connect to the database.
  4. Store the application credentials using Cloud Key Management Service, and retrieve them whenever a database connection is made.

Answer(s): B


Reference:

https://cloud.google.com/sql/docs/mysql/connect-kubernetes-engine



You are deploying your application on a Compute Engine instance that communicates with Cloud SQL. You will use Cloud SQL Proxy to allow your application to communicate to the database using the service account associated with the application’s instance. You want to follow the Google-recommended best practice of providing minimum access for the role assigned to the service account. What should you do?

  1. Assign the Project Editor role.
  2. Assign the Project Owner role.
  3. Assign the Cloud SQL Client role.
  4. Assign the Cloud SQL Editor role.

Answer(s): C


Reference:

https://cloud.google.com/sql/docs/mysql/sql-proxy



  PDF
Viewing page 22 of 52
Viewing questions 106 - 110 out of 379 questions


Post your Comments and Discuss Google Professional Cloud Developer exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!