Free Professional Cloud Developer Exam Braindumps
Professional Cloud Developer Questions 126–130 (page: 27)

Updated On: 10-Feb-2026

Your team develops services that run on Google Cloud. You need to build a data processing service and will use Cloud Functions. The data to be processed by the function is sensitive. You need to ensure that invocations can only happen from authorized services and follow Google-recommended best practices for securing functions. What should you do?

  1. Enable Identity-Aware Proxy in your project. Secure function access using its permissions.
  2. Create a service account with the Cloud Functions Viewer role. Use that service account to invoke the function.
  3. Create a service account with the Cloud Functions Invoker role. Use that service account to invoke the function.
  4. Create an OAuth 2.0 client ID for your calling service in the same project as the function you want to secure. Use those credentials to invoke the function.

Answer(s): C


Reference:

https://medium.com/google-cloud/how-to-securely-invoke-a-cloud-function-from-google-kubernetes-engine-running-on-another-gcp-79797ec2b2c6



You are deploying your applications on Compute Engine. One of your Compute Engine instances failed to launch. What should you do? (Choose two.)

  1. Determine whether your file system is corrupted.
  2. Access Compute Engine as a different SSH user.
  3. Troubleshoot firewall rules or routes on an instance.
  4. Check whether your instance boot disk is completely full.
  5. Check whether network traffic to or from your instance is being dropped.

Answer(s): D,E


Reference:

https://cloudacademy.com/course/deploying-applications-on-gcp-compute/deploying-applications-and-services-on-compute-engine/



Your web application is deployed to the corporate intranet. You need to migrate the web application to Google Cloud. The web application must be available only to company employees and accessible to employees as they travel. You need to ensure the security and accessibility of the web application while minimizing application changes. What should you do?

  1. Configure the application to check authentication credentials for each HTTP(S) request to the application.
  2. Configure Identity-Aware Proxy to allow employees to access the application through its public IP address.
  3. Configure a Compute Engine instance that requests users to log in to their corporate account. Change the web application DNS to point to the proxy Compute Engine instance. After authenticating, the Compute Engine instance forwards requests to and from the web application.
  4. Configure a Compute Engine instance that requests users to log in to their corporate account. Change the web application DNS to point to the proxy Compute Engine instance. After authenticating, the Compute Engine issues an HTTP redirect to a public IP address hosting the web application.

Answer(s): B



You have an application that uses an HTTP Cloud Function to process user activity from both desktop browser and mobile application clients. This function will serve as the endpoint for all metric submissions using HTTP POST.

Due to legacy restrictions, the function must be mapped to a domain that is separate from the domain requested by users on web or mobile sessions. The domain for the Cloud Function is https://fn.example.com. Desktop and mobile clients use the domain https://www.example.com. You need to add a header to the function’s HTTP response so that only those browser and mobile sessions can submit metrics to the Cloud Function.

Which response header should you add?

  1. Access-Control-Allow-Origin: *
  2. Access-Control-Allow-Origin: https://*.example.com
  3. Access-Control-Allow-Origin: https://fn.example.com
  4. Access-Control-Allow-origin: https://www.example.com

Answer(s): A



You have an HTTP Cloud Function that is called via POST. Each submission’s request body has a flat, unnested JSON structure containing numeric and text data. After the Cloud Function completes, the collected data should be immediately available for ongoing and complex analytics by many users in parallel. How should you persist the submissions?

  1. Directly persist each POST request’s JSON data into Datastore.
  2. Transform the POST request’s JSON data, and stream it into BigQuery.
  3. Transform the POST request’s JSON data, and store it in a regional Cloud SQL cluster.
  4. Persist each POST request’s JSON data as an individual file within Cloud Storage, with the file name containing the request identifier.

Answer(s): D



Viewing page 27 of 52
Viewing questions 131 - 135 out of 379 questions


Post your Comments and Discuss Google Professional Cloud Developer exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!