Google Professional-Cloud-Developer 問題集

質問 1：
Your company has a new security initiative that requires all data stored in Google Cloud to be encrypted by customer-managed encryption keys. You plan to use Cloud Key Management Service (KMS) to configure access to the keys. You need to follow the "separation of duties" principle and Google-recommended best practices. What should you do? (Choose two.)
A. Do not assign an owner to the Cloud KMS project.
B. Grant an owner role for the Cloud KMS project to a different user than the owner of the project where the keys from Cloud KMS are being used.
C. Provision Cloud KMS in its own project.
D. Provision Cloud KMS in the project where the keys are being used.
E. Grant the roles/cloudkms.admin role to the owner of the project where the keys from Cloud KMS are being used.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are developing a new public-facing application that needs to retrieve specific properties in the metadata of users' objects in their respective Cloud Storage buckets. Due to privacy and data residency requirements, you must retrieve only the metadata and not the object data. You want to maximize the performance of the retrieval process. How should you retrieve the metadata?
A. Use the patch method.
B. Use the fields request parameter.
C. Use the copy method.
D. Use the compose method.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
In order to meet their business requirements, how should HipLocal store their application state?
A. Put a memcache layer in front of MySQL.
B. Use local SSDs to store state.
C. Move the state storage to Cloud Spanner.
D. Replace the MySQL instance with Cloud SQL.
正解：A

質問 4：
Your company stores their source code in a Cloud Source Repositories repository. Your company wants to build and test their code on each source code commit to the repository and requires a solution that is managed and has minimal operations overhead.
Which method should they use?
A. Use a Compute Engine virtual machine instance with an open source continuous integration tool, configured to watch for source code commits.
B. Use a source code commit trigger to push a message to a Cloud Pub/Sub topic that triggers an App Engine service to build the source code.
C. Use Cloud Build with a trigger configured for each source code commit.
D. Use Jenkins deployed via the Google Cloud Platform Marketplace, configured to watch for source code commits.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Your development team has built several Cloud Functions using Java along with corresponding integration and service tests. You are building and deploying the functions and launching the tests using Cloud Build.
Your Cloud Build job is reporting deployment failures immediately after successfully validating the code.
What should you do?
A. Check the maximum number of Cloud Function instances.
B. Retry the tests using the truncated exponential backoff polling strategy.
C. Verify that your Cloud Build trigger has the correct build parameters.
D. Verify that the Cloud Build service account is assigned the Cloud Functions Developer role.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You recently deployed a Go application on Google Kubernetes Engine (GKE). The operations team has noticed that the application's CPU usage is high even when there is low production traffic. The operations team has asked you to optimize your application's CPU resource consumption. You want to determine which Go functions consume the largest amount of CPU. What should you do?
A. Connect to your GKE nodes using SSH. Run the top command on the shell to extract the CPU utilization of your application.
B. Create a custom dashboard in Cloud Monitoring to evaluate the CPU performance metrics of your application.
C. Modify your Go application to capture profiling data. Analyze the CPU metrics of your application in flame graphs in Profiler.
D. Deploy a Fluent Bit daemonset on the GKE cluster to log data in Cloud Logging. Analyze the logs to get insights into your application code's performance.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You need to deploy an internet-facing microservices application to Google Kubernetes Engine (GKE). You want to validate new features using the A/B testing method. You have the following requirements for deploying new container image releases
* There is no downtime when new container images are deployed.
* New production releases are tested and verified using a subset of production users.
What should you do?
A. 1 Create a second namespace on GKE for the new release version.
2 Create a Deployment configuration for the second namespace with the desired number of Pods.
3 Deploy new container versions in the second namespace.
4 Update the ingress configuration to route traffic to the namespace with the new container versions.
B. 1 Configure your Cl/CD pipeline to update the Deployment manifest file by replacing the container version with the latest version.
2 Recreate the Pods in your cluster by applying the Deployment manifest file.
3 Validate the application's performance by comparing its functionality with the previous release version and roll back if an issue arises.
C. 1 install the Anthos Service Mesh on your GKE cluster.
2 Create two Deployments on the GKE cluster and label them with different version names.
3 Create a VirtualService with a routing rule to send a small percentage of traffic to the Deployment that references the new version of the application.
D. 1. Implement a rolling update pattern by replacing the Pods gradually with the new release versify.
2 Validate the application's performance for the new subset of users during the rollout and roll back if an issue arises.
正解：A

質問 8：
You are a SaaS provider deploying dedicated blogging software to customers in your Google Kubernetes Engine (GKE) cluster. You want to configure a secure multi-tenant platform to ensure that each customer has access to only their own blog and can't affect the workloads of other customers. What should you do?
A. Deploy a namespace per tenant and use Network Policies in each blog deployment.
B. Enable Application-layer Secrets on the GKE cluster to protect the cluster.
C. Use GKE Audit Logging to identify malicious containers and delete them on discovery.
D. Build a custom image of the blogging software and use Binary Authorization to prevent untrusted image deployments.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 9：
You are designing an application that uses a microservices architecture. You are planning to deploy the application in the cloud and on-premises. You want to make sure the application can scale up on demand and also use managed services as much as possible. What should you do?
A. Create a GKE cluster in each environment with Anthos, and use Cloud Run for Anthos to deploy your application to each cluster.
B. Create a GKE cluster in the cloud and install open-source Kubernetes on-premises. Use an external load balancer service to distribute traffic across the two environments.
C. Install a GKE cluster in each environment with Anthos, and use Cloud Build to create a Deployment for your application in each cluster.
D. Deploy open source Istio in a multi-cluster deployment on multiple Google Kubernetes Engine (GKE) clusters managed by Anthos.
正解：A
解説: (Topexam メンバーにのみ表示されます)