Free Professional-Cloud-Developer Exam Dumps

Question 56

- (Exam Topic 2)
You have written a Cloud Function that accesses other Google Cloud resources. You want to secure the environment using the principle of least privilege. What should you do?

A. Create a new service account that has Editor authority to access the resource
B. The deployer is given permission to get the access token.
C. Create a new service account that has a custom IAM role to access the resource
D. The deployer is given permission to get the access token.
E. Create a new service account that has Editor authority to access the resource
F. The deployer is given permission to act as the new service account.
G. Create a new service account that has a custom IAM role to access the resource
H. The deployer is given permission to act as the new service account.

Correct Answer:D
Reference:
https://cloud.google.com/blog/products/application-development/least-privilege-for-cloud-functions-using-cloud

Question 57

- (Exam Topic 2)
You have an application running in App Engine. Your application is instrumented with Stackdriver Trace. The /product-details request reports details about four known unique products at /sku-details as shown below. You want to reduce the time it takes for the request to complete. What should you do?
Professional-Cloud-Developer dumps exhibit

A. Increase the size of the instance class.
B. Change the Persistent Disk type to SSD.
C. Change /product-details to perform the requests in parallel.
D. Store the /sku-details information in a database, and replace the webservice call with a database query.

Correct Answer:C

Question 58

- (Exam Topic 2)
You are in the final stage of migrating an on-premises data center to Google Cloud. You are quickly approaching your deadline, and discover that a web API is running on a server slated for decommissioning. You need to recommend a solution to modernize this API while migrating to Google Cloud. The modernized web API must meet the following requirements:
• Autoscales during high traffic periods at the end of each month
• Written in Python 3.x
• Developers must be able to rapidly deploy new versions in response to frequent code changes
You want to minimize cost, effort, and operational overhead of this migration. What should you do?

A. Modernize and deploy the code on App Engine flexible environment.
B. Modernize and deploy the code on App Engine standard environment.
C. Deploy the modernized application to an n1-standard-1 Compute Engine instance.
D. Ask the development team to re-write the application to run as a Docker container on Google Kubernetes Engine.

Correct Answer:B
https://cloud.google.com/appengine/docs/standard

Question 59

- (Exam Topic 2)
You are developing an application that will handle requests from end users. You need to secure a Cloud Function called by the application to allow authorized end users to authenticate to the function via the application while restricting access to unauthorized users. You will integrate Google Sign-In as part of the solution and want to follow Google-recommended best practices. What should you do?

A. Deploy from a source code repository and grant users the roles/cloudfunctions.viewer role.
B. Deploy from a source code repository and grant users the roles/cloudfunctions.invoker role
C. Deploy from your local machine using gcloud and grant users the roles/cloudfunctions.admin role
D. Deploy from your local machine using gcloud and grant users the roles/cloudfunctions.developer role

Correct Answer:C

Question 60

- (Exam Topic 1)
HipLocal is configuring their access controls.
Which firewall configuration should they implement?

A. Block all traffic on port 443.
B. Allow all traffic into the network.
C. Allow traffic on port 443 for a specific tag.
D. Allow all traffic on port 443 into the network.

Correct Answer:D