Question 1

Containers are being created and managed across multiple projects in Google Cloud. A requirement for the application under development is to access Google Cloud services from within Google Kubernetes Engine (GKE).

What actions are recommended?

Options :

A : Store the Google service account credentials as a Kubernetes Secret.

B : Assign a Google service account to the GKE nodes.

C : Use a Google service account to run the Pod with Workload Identity.

D : Use a Google service account with GKE role-based access control (RBAC).

Answer: C

Question 2

You are developing an application that consists of several microservices running in a Google Kubernetes Engine cluster. One microservice needs to connect to a third-party database running on-premises. You need to store credentials to the database and ensure that these credentials can be rotated while following security best practices. What should you do?

Options :

A : Store the credentials in a sidecar container proxy. and use it to connect to the third-party database.

B : Configure a service mesh to allow or restrict traffic from the Pods in your microservice to the database.

C : Store the credentials in an encrypted volume mount, and associate a Persistent Volume Claim with the client Pod.

D :

Store the credentials as a Kubemetes Secret, and use the Cloud Key Management Service plugin to handle encryption and decryption

Answer: A

Question 3

What options does the Query builder section provide for filtering logs?

Options :

A : Time of day

B : Resource type, Log name, Severity level

C : Log type

D : Location

Answer: B

Question 4

To perform unit and integration tests during the Docker image build process using Cloud Build, you need to make modifications. In the event of a failure, you want the build history to clearly indicate the stage at which the build failed.

What actions do you need to take?

Options :

A : Create a Cloud Build build config file with a single build step to compile unit and integration tests.

B : Create a Cloud Build build config file that will spawn a separate cloud build pipeline for unit and integration tests.

C : Add RUN commands in the Dockerfile to execute unit and integration tests.

D : Create a Cloud Build build config file with separate cloud builder steps to compile and execute unit and integration tests.

Answer: D

Question 5

You have an application deployed in production. When a new version is deployed, some issues don't arise until the application receives traffic from users in production. You want to reduce both the impact and the number of users affected. Which deployment strategy should you use?

Options :

A : Blue/green deployment

B : Canary deployment

C : Rolling deployment

D : Recreate deployment

Answer: A

Higher Test Marks with Free Online Professional-Cloud-Developer Exam Practice

Buying Options: