Google Professional-Cloud-Developer 問題集

質問 1：
You manage your company's ecommerce platform's payment system, which runs on Google Cloud. Your company must retain user logs for 1 year for internal auditing purposes and for 3 years to meet compliance requirements. You need to store new user logs on Google Cloud to minimize on-premises storage usage and ensure that they are easily searchable. You want to minimize effort while ensuring that the logs are stored correctly. What should you do?
A. Store the logs in a Cloud Storage bucket with bucket lock turned on.
B. Store the logs in a Cloud Storage bucket with a 3-year retention period.
C. Store the logs in a Cloud Storage bucket with a 1-year retention period. After 1 year, move the logs to another bucket with a 2-year retention period.
D. Store the logs in Cloud Logging as custom logs with a custom retention period.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are running a containerized application on Google Kubernetes Engine. Your container images are stored in Container Registry. Your team uses CI/CD practices. You need to prevent the deployment of containers with known critical vulnerabilities. What should you do?
A. * Use Web Security Scanner to automatically crawl your application
* Review your application logs for scan results, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed
B. * Use Web Security Scanner to automatically crawl your application
* Review the scan results in the scan details page in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed
C. * Enable the Container Scanning API to perform vulnerability scanning
* Review vulnerability reporting in Container Registry in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed
D. * Enable the Container Scanning API to perform vulnerability scanning
* Programmatically review vulnerability reporting through the Container Scanning API, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
In order to meet their business requirements, how should HipLocal store their application state?
A. Put a memcache layer in front of MySQL.
B. Use local SSDs to store state.
C. Move the state storage to Cloud Spanner.
D. Replace the MySQL instance with Cloud SQL.
正解：A

質問 4：
Your data is stored in Cloud Storage buckets. Fellow developers have reported that data downloaded from Cloud Storage is resulting in slow API performance. You want to research the issue to provide details to the GCP support team. Which command should you run?
A. gcloud compute scp example-instance:~/test-data -o output.json gs://my-bucket
B. gsutil test -o output.json gs://my-bucket
C. gsutil perfdiag -o output.json gs://my-bucket
D. gcloud services test -o output.json gs://my-bucket
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You are a developer at a large organization Your team uses Git for source code management (SCM). You want to ensure that your team follows Google-recommended best practices to manage code to drive higher rates of software delivery. Which SCM process should your team use?
A. Each developer creates a branch for their own work, commits their changes to their branch, and merges their code into the main branch daily.
B. Each group of developers creates a feature branch from the main branch for their work, commits their changes to their branch, and merges their code into the main branch after the change advisory board approves it.
C. Each developer commits their code to the main branch before each product release, conducts testing, and rolls back if integration issues are detected.
D. Each group of developers copies the repository, commits their changes to their repository, and merges their code into the main repository before each product release.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
HipLocal's.net-based auth service fails under intermittent load.
What should they do?
A. Use a dedicated Compute Engine virtual machine instance for the service.
B. Use Cloud Functions for autoscaling.
C. Use a Compute Engine cluster for the service.
D. Use App Engine for autoscaling.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You have written a Cloud Function that accesses other Google Cloud resources. You want to secure the environment using the principle of least privilege. What should you do?
A. Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to get the access token.
B. Create a new service account that has Editor authority to access the resources. The deployer is given permission to act as the new service account.
C. Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to act as the new service account.
D. Create a new service account that has Editor authority to access the resources. The deployer is given permission to get the access token.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
You are developing an event-driven application. You have created a topic to receive messages sent to Pub/Sub. You want those messages to be processed in real time. You need the application to be independent from any other system and only incur compute costs when new messages arrive. You want to configure the simplest and most efficient architecture What should you do?
A. Deploy the application on Google Kubernetes Engine. Use the Pub/Sub API to create a pull subscription to the Pub/Sub topic and read messages from it
B. Deploy your code on Cloud Functions. Use a Pub/Sub trigger to handle new messages in the topic.
C. Deploy your code on Cloud Functions. Use a Pub/Sub trigger to invoke the Cloud Function. Use the Pub/Sub API to create a pull subscription to the Pub/Sub topic and read messages from it.
D. Deploy the application on Compute Engine. Use a Pub/Sub push subscription to process new messages in the topic.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You are designing a schema for a Cloud Spanner customer database. You want to store a phone number array field in a customer table. You also want to allow users to search customers by phone number. How should you design this schema?
A. Create a table named Customers. Add an Array field in a table that will hold phone numbers for the customer.
B. Create a table named Customers as a parent table. Create a table named Phones, and interleave this table into the Customer table. Create an index on the phone number field in the Phones table.
C. Create a table named Customers. Add an Array field in a table that will hold phone numbers for the customer. Create a secondary index on the Array field.
D. Create a table named Customers. Create a table named Phones. Add a CustomerId field in the Phones table to find the CustomerId from a phone number.
正解：C