Googleは2024年最新のProfessional-Cloud-Developerテスト解説（更新されたのは228問があります)
Professional-Cloud-Developer試験問題集を提供していますGoogle問題
認定試験では、GCPでのアプリケーションの開発に関連する幅広いトピックをカバーしています。これらには、アプリケーションの展開、アプリケーションのパフォーマンスの管理、データストレージサービスの操作、Googleクラウドサービスの統合が含まれます。この試験では、アプリケーションのテストやデバッグ、高度にスケーラブルで回復力のあるアプリケーションの設計と開発、アプリケーションセキュリティの管理などのトピックについてもカバーしています。
Google Professional-Cloud-Developerは、Google Certified Professional-Cloud Developerとも呼ばれ、Googleが提供する認定試験です。この試験は、Google Cloudプラットフォームを使用してアプリケーションの開発、設計、および管理における候補者の知識とスキルをテストするように設計されています。この試験は、Google Cloudプラットフォームでアプリケーションの開発と展開の経験がある開発者を対象としています。
Google Certified Professional - Cloud Developerになるためには、複数選択肢と複数選択式の問題が含まれる2時間のオンライン試験に合格する必要があります。この試験は、アプリケーション開発、Google Cloudストレージ、データベース、セキュリティ、モニタリング、トラブルシューティングなど、広範なトピックをカバーしています。Professional-Cloud-Developer認定は、業界で非常に価値があり、Google Cloud Platform開発の熟練を示しています。開発者が自分の専門知識を示し、クラウドコンピューティングのキャリアを進めるための優れた方法です。
質問 # 62
You work for an organization that manages an online ecommerce website. Your company plans to expand across the world; however, the estore currently serves one specific region. You need to select a SQL database and configure a schema that will scale as your organization grows. You want to create a table that stores all customer transactions and ensure that the customer (CustomerId) and the transaction (TransactionId) are unique. What should you do?
- A. Create a Cloud Spanner table that has TransactionId and CustomerId configured as primary keys. Use an incremental number for the TransactionId.
- B. Create a Cloud SQL table that has TransactionId and CustomerId configured as primary keys. Use an incremental number for the TransactionId.
- C. Create a Cloud Spanner table that has TransactionId and CustomerId configured as primary keys. Use a random string (UUID) for the TransactionId.
- D. Create a Cloud SQL table that has TransactionId and CustomerId configured as primary keys. Use a random string (UUID) for the Transactionid.
正解：C
質問 # 63
Your teammate has asked you to review the code below. Its purpose is to efficiently add a large number of small rows to a BigQuery table.
Which improvement should you suggest your teammate make?
- A. Include multiple rows with each request.
- B. Write each row to a Cloud Storage object in parallel, then load into BigQuery.
- C. Perform the inserts in parallel by creating multiple threads.
- D. Write each row to a Cloud Storage object, then load into BigQuery.
正解：C
質問 # 64
You are developing an application that will store and access sensitive unstructured data objects in a Cloud Storage bucket. To comply with regulatory requirements, you need to ensure that all data objects are available for at least 7 years after their initial creation. Objects created more than 3 years ago are accessed very infrequently (less than once a year). You need to configure object storage while ensuring that storage cost is optimized. What should you do? (Choose two.)
- A. Enable Object Versioning to prevent objects from being accidentally deleted for 7 years after object creation.
- B. Use IAM Conditions to provide access to objects 7 years after the object creation date.
- C. Implement a Cloud Function that checks the age of each object in the bucket and moves the objects older than 3 years to a second bucket with the Archive Storage class. Use Cloud Scheduler to trigger the Cloud Function on a daily schedule.
- D. Set a retention policy on the bucket with a period of 7 years.
- E. Create an object lifecycle policy on the bucket that moves objects from Standard Storage to Archive Storage after 3 years.
正解：D、E
解説：
Explanation
https://cloud.google.com/storage/docs/bucket-lock
This page discusses the Bucket Lock feature, which allows you to configure a data retention policy for a Cloud Storage bucket that governs how long objects in the bucket must be retained. The feature also allows you to lock the data retention policy, permanently preventing the policy from being reduced or removed.
https://cloud.google.com/storage/docs/storage-classes#archive
Archive storage is the lowest-cost, highly durable storage service for data archiving, online backup, and disaster recovery. Unlike the "coldest" storage services offered by other Cloud providers, your data is available within milliseconds, not hours or days.
Archive storage is the best choice for data that you plan to access less than once a year.
質問 # 65
You are writing a Compute Engine hosted application in project A that needs to securely authenticate to a Cloud Pub/Sub topic in project B.
What should you do?
- A. Configure Application Default Credentials to use the private key of a service account owned by project B. Add the service account as a Cloud Pub/Sub publisher to project A.
- B. Configure the instances with a service account owned by project B. Add the service account as a Cloud Pub/Sub publisher to project A.
- C. Configure the instances with a service account owned by project A. Add the service account as a publisher on the topic.
- D. Configure Application Default Credentials to use the private key of a service account owned by project A. Add the service account as a publisher on the topic
正解：C
解説：
https://cloud.google.com/pubsub/docs/access-control
"For example, suppose a service account in Cloud Project A wants to publish messages to a topic in Cloud Project B.
You could accomplish this by granting the service account Edit permission in Cloud Project B"
質問 # 66
You recently developed a new application. You want to deploy the application on Cloud Run without a Dockerfile. Your organization requires that all container images are pushed to a centrally managed container repository. How should you build your container using Google Cloud services? (Choose two.)
- A. Include the --platform=kubernetes flag with the gcloud run deploy CLI command.
- B. Use the pack build command with pack CLI.
- C. Include the --source flag with the gcloud run deploy CLI command.
- D. Push your source code to Artifact Registry.
- E. Submit a Cloud Build job to push the image.
正解：B、D
解説：
Explanation
https://cloud.google.com/run/docs/deploying#images
https://cloud.google.com/blog/products/containers-kubernetes/google-cloud-now-supports-buildpacks
質問 # 67
You are working on a social media application. You plan to add a feature that allows users to upload images.
These images will be 2 MB - 1 GB in size. You want to minimize their infrastructure operations overhead for this feature.
What should you do?
- A. Create a separate bucket for each user in Cloud Storage. Assign a separate service account to allow write access on each bucket. Transfer service account credentials to the client application based on user information. The application uses this service account to upload images to Cloud Storage.
- B. Set up a web server on GCP to accept user images and create a file store to keep uploaded files. Change the application to retrieve images from the file store.
- C. Change the application to accept images directly and store them in the database that stores other user information.
- D. Change the application to create signed URLs for Cloud Storage. Transfer these signed URLs to the client application to upload images to Cloud Storage.
正解：D
解説：
Explanation/Reference: https://cloud.google.com/blog/products/storage-data-transfer/uploading-images-directly-to-cloud- storage-by-using-signed-url
質問 # 68
You are in the final stage of migrating an on-premises data center to Google Cloud. You are quickly approaching your deadline, and discover that a web API is running on a server slated for decommissioning.
You need to recommend a solution to modernize this API while migrating to Google Cloud. The modernized web API must meet the following requirements:
* Autoscales during high traffic periods at the end of each month
* Written in Python 3.x
* Developers must be able to rapidly deploy new versions in response to frequent code changes You want to minimize cost, effort, and operational overhead of this migration. What should you do?
- A. Modernize and deploy the code on App Engine standard environment.
- B. Modernize and deploy the code on App Engine flexible environment.
- C. Deploy the modernized application to an n1-standard-1 Compute Engine instance.
- D. Ask the development team to re-write the application to run as a Docker container on Google Kubernetes Engine.
正解：A
解説：
Explanation
https://cloud.google.com/appengine/docs/standard
質問 # 69
Your website is deployed on Compute Engine. Your marketing team wants to test conversion rates between 3 different website designs.
Which approach should you use?
- A. Deploy the website on App Engine and use traffic splitting.
- B. Deploy the website on Cloud Functions as three separate functions.
- C. Deploy the website on Cloud Functions and use traffic splitting.
- D. Deploy the website on App Engine as three separate services.
正解：A
質問 # 70
You are deploying a microservices application to Google Kubernetes Engine (GKE). The application will receive daily updates. You expect to deploy a large number of distinct containers that will run on the Linux operating system (OS). You want to be alerted to any known OS vulnerabilities in the new containers. You want to follow Google-recommended best practices. What should you do?
- A. Enable Container Analysis, and upload new container images to Artifact Registry. Review the critical vulnerability results before each deployment.
- B. Use the Container Analysis REST API to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.
- C. Enable Container Analysis, and upload new container images to Artifact Registry. Review the vulnerability results before each deployment.
- D. Use the gcloud CLI to call Container Analysis to scan new container images. Review the vulnerability results before each deployment.
正解：C
解説：
Explanation
https://cloud.google.com/container-analysis/docs/automated-scanning-howto
https://cloud.google.com/container-analysis/docs/os-overview says: The Container Scanning API allows you to automate OS vulnerability detection, scanning each time you push an image to Container Registry or Artifact Registry. Enabling this API also triggers language package scans for Go and Java vulnerabilities (Preview).
質問 # 71
You need to migrate a standalone Java application running in an on-premises Linux virtual machine (VM) to Google Cloud in a cost-effective manner. You decide not to take the lift-and-shift approach, and instead you plan to modernize the application by converting it to a container. How should you accomplish this task?
- A. Use Migrate for Anthos to migrate the VM to your Google Kubernetes Engine (GKE) cluster as a container.
- B. Use Jib to build a Docker image from your source code, and upload it to Artifact Registry. Deploy the application in a GKE cluster, and test the application.
- C. Use Migrate for Compute Engine to migrate the VM to a Compute Engine instance, and use Cloud Build to convert it to a container.
- D. Export the VM as a raw disk and import it as an image. Create a Compute Engine instance from the Imported image.
正解：B
解説：
Explanation
https://cloud.google.com/blog/products/application-development/introducing-jib-build-java-docker-images-bette
質問 # 72
You are writing from a Go application to a Cloud Spanner database. You want to optimize your application's performance using Google-recommended best practices. What should you do?
- A. Write to Cloud Spanner using Cloud Client Libraries.
- B. Write to Cloud Spanner using Google API Client Libraries
- C. Write to Cloud Spanner using a third-party HTTP client library.
- D. Write to Cloud Spanner using a custom gRPC client library.
正解：A
解説：
Explanation
https://cloud.google.com/apis/docs/cloud-client-libraries
"Cloud Client Libraries are the recommended option for accessing Cloud APIs programmatically, where available. Cloud Client Libraries use the latest client library models"
https://cloud.google.com/apis/docs/client-libraries-explained
https://cloud.google.com/go/docs/reference
質問 # 73
You have two tables in an ANSI-SQL compliant database with identical columns that you need to quickly combine into a single table, removing duplicate rows from the result set.
What should you do?
- A. Use the UNION operator in SQL to combine the tables.
- B. Use the JOIN operator in SQL to combine the tables.
- C. Use nested WITH statements to combine the tables.
- D. Use the UNION ALL operator in SQL to combine the tables.
正解：A
質問 # 74
You are running an application on App Engine that you inherited. You want to find out whether the application is using insecure binaries or is vulnerable to XSS attacks. Which service should you use?
- A. Stackdriver Debugger
- B. Stackdriver Error Reporting
- C. Cloud Amor
- D. Cloud Security Scanner
正解：D
解説：
Reference: https://cloud.google.com/security-scanner
質問 # 75
You are developing a microservice-based application that will be deployed on a Google Kubernetes Engine cluster. The application needs to read and write to a Spanner database. You want to follow security best practices while minimizing code changes. How should you configure your application to retrieve Spanner credentials?
- A. Configure the appropriate routing rules, and use a VPC-native cluster to directly connect to the database.
- B. Store the application credentials using Cloud Key Management Service, and retrieve them whenever a database connection is made.
- C. Store the application credentials as Kubernetes Secrets, and expose them as environment variables.
- D. Configure the appropriate service accounts, and use Workload Identity to run the pods.
正解：D
解説：
https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity
質問 # 76
Please refer to the following information to answer the questions on the right.
Rachel is starting a repair on a three-year-old MacBook Pro.
After opening the device, she takes some time to visually inspect the top case assembly with battery.
After gaining agreement with the customer about repair time and cost, Rachel begins the replacement of the top case assembly with battery. If during the repair the battery cells begin to actively swell, how should Rachel respond?
- A. Leave the room for fifteen minutes.
- B. Pour sand over the battery immediately.
- C. Find a fire extinguisher and keep it nearby.
- D. Carefully continue the repair while monitoring the battery.
正解：B
質問 # 77
Your company has a data warehouse that keeps your application information in BigQuery. The BigQuery data warehouse keeps 2 PBs of user dat a. Recently, your company expanded your user base to include EU users and needs to comply with these requirements:
Your company must be able to delete all user account information upon user request.
All EU user data must be stored in a single region specifically for EU users.
Which two actions should you take? (Choose two.)
- A. Re-upload your data using to a Cloud Dataflow pipeline by filtering your user records out.
- B. Use DML statements in BigQuery to update/delete user records based on their requests.
- C. Create a Cloud Storage bucket in the EU region to store information for EU users only.
- D. Use BigQuery federated queries to query data from Cloud Storage.
- E. Create a dataset in the EU region that will keep information about EU users only.
正解：B、C
質問 # 78
You are a SaaS provider deploying dedicated blogging software to customers in your Google Kubernetes Engine (GKE) cluster. You want to configure a secure multi-tenant platform to ensure that each customer has access to only their own blog and can't affect the workloads of other customers. What should you do?
- A. Build a custom image of the blogging software and use Binary Authorization to prevent untrusted image deployments.
- B. Use GKE Audit Logging to identify malicious containers and delete them on discovery.
- C. Enable Application-layer Secrets on the GKE cluster to protect the cluster.
- D. Deploy a namespace per tenant and use Network Policies in each blog deployment.
正解：D
質問 # 79
You recently migrated a monolithic application to Google Cloud by breaking it down into microservices. One of the microservices is deployed using Cloud Functions. As you modernize the application, you make a change to the API of the service that is backward-incompatible. You need to support both existing callers who use the original API and new callers who use the new API. What should you do?
- A. Leave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use Cloud Endpoints to provide an API gateway that exposes a versioned API.
- B. Re-deploy the Cloud Function after making code changes to support the new API. Requests for both versions of the API are fulfilled based on a version identifier included in the call.
- C. Leave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use a load balancer to distribute calls between the versions.
- D. Leave the original Cloud Function as-is and deploy a second Cloud Function that includes only the changed API. Calls are automatically routed to the correct function.
正解：B
解説：
Reference: https://cloud.google.com/endpoints/docs/openapi/versioning-an-api
質問 # 80
Case study
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.
To start the case study
To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.
Company Overview
HipLocal is a community application designed to facilitate communication between people in close proximity. It is used for event planning and organizing sporting events, and for businesses to connect with their local communities. HipLocal launched recently in a few neighborhoods in Dallas and is rapidly growing into a global phenomenon. Its unique style of hyper-local community communication and business outreach is in demand around the world.
Executive Statement
We are the number one local community app; it's time to take our local community services global. Our venture capital investors want to see rapid growth and the same great experience for new local and virtual communities that come online, whether their members are 10 or 10000 miles away from each other.
Solution Concept
HipLocal wants to expand their existing service, with updated functionality, in new regions to better serve their global customers. They want to hire and train a new team to support these regions in their time zones. They will need to ensure that the application scales smoothly and provides clear uptime data.
Existing Technical Environment
HipLocal's environment is a mix of on-premises hardware and infrastructure running in Google Cloud Platform.
The HipLocal team understands their application well, but has limited experience in global scale applications.
Their existing technical environment is as follows:
* Existing APIs run on Compute Engine virtual machine instances hosted in GCP.
* State is stored in a single instance MySQL database in GCP.
* Data is exported to an on-premises Teradata/Vertica data warehouse.
* Data analytics is performed in an on-premises Hadoop environment.
* The application has no logging.
* There are basic indicators of uptime; alerts are frequently fired when the APIs are unresponsive.
Business Requirements
HipLocal's investors want to expand their footprint and support the increase in demand they are seeing. Their requirements are:
* Expand availability of the application to new regions.
* Increase the number of concurrent users that can be supported.
* Ensure a consistent experience for users when they travel to different regions.
* Obtain user activity metrics to better understand how to monetize their product.
* Ensure compliance with regulations in the new regions (for example, GDPR).
* Reduce infrastructure management time and cost.
* Adopt the Google-recommended practices for cloud computing.
Technical Requirements
* The application and backend must provide usage metrics and monitoring.
* APIs require strong authentication and authorization.
* Logging must be increased, and data should be stored in a cloud analytics platform.
* Move to serverless architecture to facilitate elastic scaling.
* Provide authorized access to internal apps in a secure manner.
HipLocal wants to improve the resilience of their MySQL deployment, while also meeting their business and technical requirements.
Which configuration should they choose?
- A. Use the current single instance MySQL on Compute Engine and several read-only MySQL servers on Compute Engine.
- B. Replace the current single instance MySQL instance with Cloud SQL, and configure high availability.
- C. Replace the current single instance MySQL instance with Cloud SQL, and Google provides redundancy without further configuration.
- D. Use the current single instance MySQL on Compute Engine, and replicate the data to Cloud SQL in an external master configuration.
正解：D
質問 # 81
You are developing a new application that has the following design requirements:
Creation and changes to the application infrastructure are versioned and auditable.
The application and deployment infrastructure uses Google-managed services as much as possible.
The application runs on a serverless compute platform.
How should you design the application's architecture?
- A. 1. Deploy the application infrastructure using gcloud commands.
2. Use Cloud Build to define a continuous integration pipeline for changes to the application source code.
3. Configure a pipeline step to pull the application source code from a Git repository, and create a containerized application. - B. 1. Deploy Jenkins from the Google Cloud Marketplace, and define a continuous integration pipeline in Jenkins.
2. Configure a pipeline step to pull the application source code from a Git repository.
3. Deploy the application source code to App Engine as a pipeline step. - C. 1. Create a continuous integration pipeline on Cloud Build, and configure the pipeline to deploy the application infrastructure using Deployment Manager templates.
2. Configure a pipeline step to create a container with the latest application source code.
3. Deploy the container to a Compute Engine instance as a pipeline step. - D. 1. Store the application and infrastructure source code in a Git repository.
2. Use Cloud Build to deploy the application infrastructure with Terraform.
3. Deploy the application to a Cloud Function as a pipeline step.
正解：A
解説：
4. Deploy the new container on Cloud Run as a pipeline step.
質問 # 82
Leigh states that her MacBook Pro (Retina, 15-inch, Mid 2015) does not recognize the SD card she brought with her. You have her reproduce the issue and discover that she is properly inserting the card. However, it is not recognized by Photos or Image Capture. What question should you ask next to isolate the issue to hardware?
- A. Are you running the latest version of Photos?
- B. Have you tried resetting your SMC and NVRAM?
- C. What kind of files or images are on the SD card?
- D. Have you had this issue with all SD cards or just this one?
正解：D
質問 # 83
Your application is deployed in a Google Kubernetes Engine (GKE) cluster. When a new version of your application is released, your CI/CD tool updates the spec.template.spec.containers[0].image value to reference the Docker image of your new application version. When the Deployment object applies the change, you want to deploy at least 1 replica of the new version and maintain the previous replicas until the new replica is healthy.
Which change should you make to the GKE Deployment object shown below?
- A. Set the Deployment strategy to Recreate with maxSurge set to 0, maxUnavailable set to 1.
- B. Set the Deployment strategy to Recreate with maxSurge set to 1, maxUnavailable set to 0.
- C. Set the Deployment strategy to RollingUpdate with maxSurge set to 1, maxUnavailable set to 0.
- D. Set the Deployment strategy to RollingUpdate with maxSurge set to 0, maxUnavailable set to 1.
正解：B
質問 # 84
You are designing a schema for a Cloud Spanner customer database. You want to store a phone number array field in a customer table. You also want to allow users to search customers by phone number. How should you design this schema?
- A. Create a table named Customers. Add an Array field in a table that will hold phone numbers for the customer. Create a secondary index on the Array field.
- B. Create a table named Customers. Add an Array field in a table that will hold phone numbers for the customer.
- C. Create a table named Customers. Create a table named Phones. Add a CustomerId field in the Phones table to find the CustomerId from a phone number.
- D. Create a table named Customers as a parent table. Create a table named Phones, and interleave this table into the Customer table. Create an index on the phone number field in the Phones table.
正解：A
質問 # 85
You want to migrate an on-premises container running in Knative to Google Cloud. You need to make sure that the migration doesn't affect your application's deployment strategy, and you want to use a fully managed service. Which Google Cloud service should you use to deploy your container?
- A. Google Kubernetes Engine
- B. Cloud Run
- C. Compute Engine
- D. App Engine flexible environment
正解：B
解説：
Explanation
https://cloud.google.com/blog/products/serverless/knative-based-cloud-run-services-are-ga
質問 # 86
......
Professional-Cloud-Developer認定ガイドPDFは100%カバー率でリアル試験問題：https://www.passtest.jp/Google/Professional-Cloud-Developer-shiken.html
合格させるProfessional-Cloud-Developerレビューガイド、信頼され続けるProfessional-Cloud-Developerテストエンジン：https://drive.google.com/open?id=147866kHsNRxc5Pstbow0AcX_5dkzuxLH