究極のガイド準備で無料Google Professional-Cloud-Developer試験問題と解答
合格させるGoogle Professional-Cloud-DeveloperテストエンジンPDFで完全版無料問題集
Google Professional-Cloud-Developer認定はグローバルに認識されており、Google Cloud Technologiesを使用してクラウドベースのアプリケーションの開発に関する候補者の専門知識を示しています。この認定は、専門家がクラウドコンピューティングでのキャリアを促進し、収益の可能性を高めるのに役立ちます。また、Google Cloud Certified Communityへのアクセスを提供します。これは、認定専門家に独占的なリソースとネットワーキングの機会を提供します。
質問 # 26
How do you access Control Center from the home screen on an iPhone 8?
- A. Swipe up from the bottom of the screen.
- B. Swipe from right to left.
- C. Swipe down from the top of the screen.
- D. Swipe from left to right.
正解：A
解説：
Explanation/Reference: https://www.imore.com/control-center
質問 # 27
Your data is stored in Cloud Storage buckets. Fellow developers have reported that data downloaded from Cloud Storage is resulting in slow API performance. You want to research the issue to provide details to the GCP support team.
Which command should you run?
- A. gsutil perfdiag -o output.json gs:/
- B. gcloud compute scp example-instance:~/test-data -o output.json gs://my-bucket
- C. gsutil test -o output.json gs://my-bucket
- D. gcloud services test -o output.json gs://my-bucket
正解：A
解説：
Explanation/Reference: https://groups.google.com/forum/#!topic/gce-discussion/xBl9Jq5HDsY
質問 # 28
You are designing an application that shares PDF files containing time-sensitive information with users. The PDF files are saved in Cloud Storage. You need to provide secure access to the files.
You have the following requirements:
- Users should only have access to files that they are allowed to view.
- Users should be able to request to read, write, or delete the PDF
files for 24 hours.
Not all users of the application have a Google account. How should you provide access to data objects?
- A. Provide users with the Service Account Token Creator IAM role to impersonate the application's service account. Assign the Cloud Storage User IAM role to the application's service account to access the Cloud Storage bucket. Rotate the application's service account key every 24 hours.
- B. Generate a service account that grants access to the POF files. Configure the application to provide users with a download link to the service account's key file. Set an expiration time of 24 hours to the service account Keys. Instruct users to authenticate by using the service account key file.
- C. Assign the Storage Object User IAM role to users that request access to the PDF files. Set an IAM condition on the role to expire after 24 hours.
- D. Configure the application to generate signed URLs with an expiration time of 24 hours. Share the signed URLs with users. Attach the signed URL to the PDF files that users require access to.
正解：D
解説：
Signed URLs are an effective way to provide secure, time-limited access to files stored in Cloud Storage, especially for users without Google accounts. With signed URLs, the application can grant users access to specific files with a specified expiration time (in this case, 24 hours). The signed URL approach meets the requirement for fine-grained, temporary access control without needing users to authenticate via Google accounts or service account keys, which simplifies the process and improves security.
質問 # 29
Your team develops services that run on Google Kubernetes Engine. You need to standardize their log data using Google-recommended practices and make the data more useful in the fewest number of steps. What should you do? (Choose two.)
- A. Mandate the use of the Logging API in the application code to write structured logs to Cloud Logging.
- B. Write log output to standard output (stdout) as single-line JSON to be ingested into Cloud Logging as structured logs.
- C. Mandate the use of the Pub/Sub API to write structured data to Pub/Sub and create a Dataflow streaming pipeline to normalize logs and write them to BigQuery for analytics.
- D. Create aggregated exports on application logs to BigQuery to facilitate log analytics.
- E. Create aggregated exports on application logs to Cloud Storage to facilitate log analytics.
正解：A、B
質問 # 30
You migrated some of your applications to Google Cloud. You are using a legacy monitoring platform deployed on-premises for both on-premises and cloud-deployed applications. You discover that your notification system is responding slowly to time-critical problems in the cloud applications. What should you do?
- A. Replace your monitoring platform with Cloud Monitoring.
- B. Migrate some traffic back to your old platform. Perform A/B testing on the two platforms concurrently.
- C. Use Cloud Logging and Cloud Monitoring to capture logs, monitor, and send alerts. Send them to your existing platform.
- D. Install the Cloud Monitoring agent on your Compute Engine instances.
正解：C
質問 # 31
Your development team is using Cloud Build to promote a Node.js application built on App Engine from your staging environment to production. The application relies on several directories of photos stored in a Cloud Storage bucket named webphotos-staging in the staging environment. After the promotion, these photos must be available in a Cloud Storage bucket named webphotos-prod in the production environment. You want to automate the process where possible. What should you do?
A)
Manually copy the photos to webphotos-prod.
B)
Add a startup script in the application's app.yami file to move the photos from webphotos-staging to webphotos-prod.
C)
Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:
D)
Add a build step in the cloudbuild.yaml file before the promotion step with the arguments:
- A. Option A
- B. Option D
- C. Option B
- D. Option C
正解：D
質問 # 32
You are developing a dashboard that aggregates temperature readings from thousands of IoT devices monitoring a city's ambient temperature. You expect a large amount of viewing traffic resulting in a large amount of data egress once the dashboard is live. The dashboard temperature display data doesn't need to be real-time and can tolerate a few seconds of lag. You decide to deploy Memorystore for Redis as the storage backend. You want to ensure that the dashboard will be highly available. How should you configure the service in Memorystore for Redis?
- A. Use Private Service Access to enable low-latency network throughput.
- B. Update Memorystore for Redis to the latest version.
- C. Set up Serverless VPC Access to avoid receiving traffic over the internet.
- D. Configure Memorystore to use read replicas.
正解：D
解説：
Using read replicas in Memorystore for Redis enhances availability by providing redundancy. If the primary instance experiences downtime, read replicas can continue serving requests, ensuring that the dashboard remains accessible. Read replicas also help distribute read traffic, which can be beneficial for high-demand applications, even though Redis itself is an in-memory store with fast access.
- Updating to the latest version may improve performance or security but does not directly improve availability.
- Private Service Access and Serverless VPC Access are network configurations that reduce latency and secure connections but do not inherently improve availability.
質問 # 33
You are developing an application using different microservices that should remain internal to the cluster. You want to be able to configure each microservice with a specific number of replicas. You also want to be able to address a specific microservice from any other microservice in a uniform way, regardless of the number of replicas the microservice scales to. You need to implement this solution on Google Kubernetes Engine. What should you do?
- A. Deploy each microservice as a Deployment. Expose the Deployment in the cluster using a Service, and use the Service DNS name to address it from other microservices within the cluster.
- B. Deploy each microservice as a Pod. Expose the Pod in the cluster using an Ingress, and use the Ingress IP address name to address the Pod from other microservices within the cluster.
- C. Deploy each microservice as a Deployment. Expose the Deployment in the cluster using an Ingress, and use the Ingress IP address to address the Deployment from other microservices within the cluster.
- D. Deploy each microservice as a Pod. Expose the Pod in the cluster using a Service, and use the Service DNS name to address the microservice from other microservices within the cluster.
正解：A
質問 # 34
You have an application running in a production Google Kubernetes Engine (GKE) cluster. You use Cloud Deploy to automatically deploy your application to your production GKE cluster. As part of your development process: you are planning to make frequent changes to the applications source code and need to select the tools to test the changes before pushing them to your remote source code repository. Your toolset must meet the following requirements:
* Test frequent local changes automatically.
* Local deployment emulates production deployment.
Which tools should you use to test building and running a container on your laptop using minimal resources'?
- A. Minikube and Skaffold
- B. Terraform and kubeadm
- C. kaniko and Tekton
- D. Docker Compose and dockerd
正解：D
質問 # 35
Case Study 1 - HipLocal
Company Overview
HipLocal is a community application designed to facilitate communication between people in close proximity. It is used for event planning and organizing sporting events, and for businesses to connect with their local communities. HipLocal launched recently in a few neighborhoods in Dallas and is rapidly growing into a global phenomenon. Its unique style of hyper-local community communication and business outreach is in demand around the world.
Executive Statement
We are the number one local community app; it's time to take our local community services global. Our venture capital investors want to see rapid growth and the same great experience for new local and virtual communities that come online, whether their members are 10 or 10000 miles away from each other.
Solution Concept
HipLocal wants to expand their existing service, with updated functionality, in new regions to better serve their global customers. They want to hire and train a new team to support these regions in their time zones. They will need to ensure that the application scales smoothly and provides clear uptime data.
Existing Technical Environment
HipLocal's environment is a mix of on-premises hardware and infrastructure running in Google Cloud Platform. The HipLocal team understands their application well, but has limited experience in global scale applications. Their existing technical environment is as follows:
* Existing APIs run on Compute Engine virtual machine instances hosted in GCP.
* State is stored in a single instance MySQL database in GCP.
* Data is exported to an on-premises Teradata/Vertica data warehouse.
* Data analytics is performed in an on-premises Hadoop environment.
* The application has no logging.
* There are basic indicators of uptime; alerts are frequently fired when the APIs are unresponsive.
Business Requirements
HipLocal's investors want to expand their footprint and support the increase in demand they are seeing. Their requirements are:
* Expand availability of the application to new regions.
* Increase the number of concurrent users that can be supported.
* Ensure a consistent experience for users when they travel to different regions.
* Obtain user activity metrics to better understand how to monetize their product.
* Ensure compliance with regulations in the new regions (for example, GDPR).
* Reduce infrastructure management time and cost.
* Adopt the Google-recommended practices for cloud computing.
Technical Requirements
* The application and backend must provide usage metrics and monitoring.
* APIs require strong authentication and authorization.
* Logging must be increased, and data should be stored in a cloud analytics platform.
* Move to serverless architecture to facilitate elastic scaling.
* Provide authorized access to internal apps in a secure manner.
HipLocal wants to reduce the number of on-call engineers and eliminate manual scaling.
Which two services should they choose? (Choose two.)
- A. Use a large Google Compute Engine cluster for deployments.
- B. Use serverless Google Cloud Functions.
- C. Use Knative to build and deploy serverless applications.
- D. Use Google Kubernetes Engine for automated deployments.
- E. Use Google App Engine services.
正解：C、D
解説：
https://cloud.google.com/kubernetes-engine/docs/concepts/traffic-management
質問 # 36
You are porting an existing Apache/MySQL/PHP application stack from a single machine to Google Kubernetes Engine. You need to determine how to containerize the application. Your approach should follow Google-recommended best practices for availability. What should you do?
- A. Package the application in a single container. Use a process management tool to manage each component.
- B. Package each component in a separate container. Use a script to orchestrate the launch of the components.
- C. Package each component in a separate container. Implement readiness and liveness probes.
- D. Package the application in a single container. Use a bash script as an entrypoint to the container, and then spawn each component as a background job.
正解：C
解説：
Explanation
https://cloud.google.com/blog/products/containers-kubernetes/7-best-practices-for-building-containers
https://cloud.google.com/architecture/best-practices-for-building-containers
"classic Apache/MySQL/PHP stack: you might be tempted to run all the components in a single container.
However, the best practice is to use two or three different containers: one for Apache, one for MySQL, and potentially one for PHP if you are running PHP-FPM."
質問 # 37
Your company recently modernized their monolith ecommerce site to a microservices application in GKE. Your team uses Google Cloud's operations suite for monitoring and logging. You want to improve the logging indexing and searchabilty in Cloud Logging across your microservices with the least amount of effort. What should you do?
- A. Instrument your microservices code with OpenTelemetry libraries.
- B. Reconfigure your applications to write logs to an emptyDir volume. Configure a sidecar agent to read the logs and send them to the Cloud Logging API.
- C. Ask the SRE team to enable Managed Service for Prometheus on your GKE cluster.
- D. Update your microservices code to emit logs in JSON format.
正解：D
解説：
JSON-formatted logs are structured logs that make indexing and searching easier in Cloud Logging. Cloud Logging can automatically parse JSON logs, which allows for better indexing, querying, and filtering capabilities. By emitting logs in JSON format, you improve the searchability and organization of logs across your microservices with minimal code changes, as JSON logs provide structure to log entries without requiring additional services or configurations.
Options like enabling Managed Service for Prometheus or instrumenting with OpenTelemetry are useful for monitoring and metrics, but they don't specifically improve log indexing and searchability in Cloud Logging.
質問 # 38
Your application is controlled by a managed instance group. You want to share a large read-only data set between all the instances in the managed instance group. You want to ensure that each instance can start quickly and can access the data set via its filesystem with very low latency.
You also want to minimize the total cost of the solution.
What should you do?
- A. Move the data to a Compute Engine persistent disk, and attach the disk in read-only mode to multiple Compute Engine virtual machine instances.
- B. Move the data to a Cloud Storage bucket, and mount the bucket on the filesystem using Cloud Storage FUSE.
- C. Move the data to a Compute Engine persistent disk, take a snapshot, create multiple disks from the snapshot, and attach each disk to its own instance.
- D. Move the data to a Cloud Storage bucket, and copy the data to the boot disk of the instance via a startup script.
正解：A
解説：
https://cloud.google.com/compute/docs/disks/sharing-disks-between-vms#use-multi-instances Share a disk in read-only mode between multiple VMs Sharing static data between multiple VMs from one persistent disk is "less expensive" than replicating your data to unique disks for individual instances.
https://cloud.google.com/compute/docs/disks/gcs-buckets#mount_bucket
Mounting a bucket as a file system
You can use the Cloud Storage FUSE tool to mount a Cloud Storage bucket to your Compute Engine instance. The mounted bucket behaves similarly to a persistent disk even though Cloud Storage buckets are object storage.
質問 # 39
You work for an organization that manages an online ecommerce website. Your company plans to expand across the world; however, the estore currently serves one specific region. You need to select a SQL database and configure a schema that will scale as your organization grows. You want to create a table that stores all customer transactions and ensure that the customer (CustomerId) and the transaction (TransactionId) are unique. What should you do?
- A. Create a Cloud Spanner table that has TransactionId and CustomerId configured as primary keys. Use a random string (UUID) for the TransactionId.
- B. Create a Cloud SQL table that has TransactionId and CustomerId configured as primary keys. Use an incremental number for the TransactionId.
- C. Create a Cloud SQL table that has TransactionId and CustomerId configured as primary keys. Use a random string (UUID) for the Transactionid.
- D. Create a Cloud Spanner table that has TransactionId and CustomerId configured as primary keys. Use an incremental number for the TransactionId.
正解：A
質問 # 40
You need to migrate an internal file upload API with an enforced 500-MB file size limit to App Engine.
What should you do?
- A. Use signed URLs to upload files.
- B. Use CPanel to upload files.
- C. Change the API to be a multipart file upload API.
- D. Use FTP to upload files.
正解：A
質問 # 41
Your company has a BigQuery data mart that provides analytics information to hundreds of employees. One user of wants to run jobs without interrupting important workloads. This user isn't concerned about the time it takes to run these jobs. You want to fulfill this request while minimizing cost to the company and the effort required on your part.
What should you do?
- A. Ask the user to run the jobs as batch jobs.
- B. Allow the user to run jobs when important workloads are not running.
- C. Create a separate project for the user to run jobs.
- D. Add the user as a job.user role in the existing project.
正解：C
質問 # 42
You are designing a chat room application that will host multiple rooms and retain the message history for each room. You have selected Firestore as your database. How should you represent the data in Firestore?
- A. Create a collection for the rooms. For each room, create a document that lists the contents of the messages
- B. Create a collection for the rooms. For each room, create a collection that contains a document for each message
- C. Create a collection for the rooms, and create a document for each room. Create a separate collection for messages, with one document per message. Each room's document contains a list of references to the messages.
- D. Create a collection for the rooms. For each room, create a document that contains a collection for documents, each of which contains a message.
正解：D
解説：
https://firebase.google.com/docs/firestore/data-model#hierarchical-data
質問 # 43
You are creating a Google Kubernetes Engine (GKE) cluster and run this command:
The command fails with the error:
You want to resolve the issue. What should you do?
- A. Request additional GKE quota is the GCP Console.
- B. Open a support case to request additional GKE quotA.
- C. Decouple services in the cluster, and rewrite new clusters to function with fewer cores.
- D. Request additional Compute Engine quota in the GCP Console.
正解：A
質問 # 44
You are deploying your application to a Compute Engine virtual machine instance with the Stackdriver Monitoring Agent installed. Your application is a unix process on the instance. You want to be alerted if the unix process has not run for at least 5 minutes. You are not able to change the application to generate metrics or logs.
Which alert condition should you configure?
- A. Metric threshold
- B. Metric absence
- C. Process health
- D. Uptime check
正解：C
解説：
Explanation/Reference: https://cloud.google.com/monitoring/alerts/concepts-indepth
質問 # 45
You recently developed an application. You need to call the Cloud Storage API from a Compute Engine instance that doesn't have a public IP address. What should you do?
- A. Use Shared VPC networks
- B. Use Private Google Access
- C. Use Carrier Peering
- D. Use VPC Network Peering
正解：B
解説：
https://cloud.google.com/vpc/docs/private-google-access
VM instances that only have internal IP addresses (no external IP addresses) can use Private Google Access. They can reach the external IP addresses of Google APIs and services. The source IP address of the packet can be the primary internal IP address of the network interface or an address in an alias IP range that is assigned to the interface. If you disable Private Google Access, the VM instances can no longer reach Google APIs and services; they can only send traffic within the VPC network.
質問 # 46
You recently deployed a Go application on Google Kubernetes Engine (GKE). The operations team has noticed that the application's CPU usage is high even when there is low production traffic. The operations team has asked you to optimize your application's CPU resource consumption. You want to determine which Go functions consume the largest amount of CPU. What should you do?
- A. Create a custom dashboard in Cloud Monitoring to evaluate the CPU performance metrics of your application.
- B. Modify your Go application to capture profiling data. Analyze the CPU metrics of your application in flame graphs in Profiler.
- C. Connect to your GKE nodes using SSH. Run the top command on the shell to extract the CPU utilization of your application.
- D. Deploy a Fluent Bit daemonset on the GKE cluster to log data in Cloud Logging. Analyze the logs to get insights into your application code's performance.
正解：B
解説：
https://cloud.google.com/profiler/docs/about-profiler
Cloud Profiler is a statistical, low-overhead profiler that continuously gathers CPU usage and memory-allocation information from your production applications. It attributes that information to the source code that generated it, helping you identify the parts of your application that are consuming the most resources, and otherwise illuminating your applications performance characteristics.
https://cloud.google.com/profiler/docs
質問 # 47
You have recently instrumented a new application with OpenTelemetry, and you want to check the latency of your application requests in Trace. You want to ensure that a specific request is always traced. What should you do?
- A. Add the X-Cloud-Trace-Context header to the request with the appropriate parameters.
- B. Wait 10 minutes, then verify that Trace captures those types of requests automatically.
- C. Use the Trace API to apply custom attributes to the trace.
- D. Write a custom script that sends this type of request repeatedly from your dev project.
正解：A
解説：
https://cloud.google.com/trace/docs/setup#force-trace
Cloud Trace doesn't sample every request. To force a specific request to be traced, add an X-Cloud-Trace-Context header to the request.
質問 # 48
......
Google Certified Professional - Cloud Developer練習テスト2026年最新のProfessional-Cloud-Developerをストレスなしで合格！：https://drive.google.com/open?id=1Yotke0aD-tbS9-55REpSOxOxhIBVAms9
オンライン試験練習テストと詳細な解説付き！：https://www.passtest.jp/Google/Professional-Cloud-Developer-shiken.html