Question 1

Your company has a data warehouse that keeps your application information in BigQuery. The BigQuery datawarehouse keeps 2 PBs of user data. Recently, your company expanded your user base to include EU usersand needs to comply with these requirements:Your company must be able to delete all user account information upon user request.All EU user data must be stored in a single region specifically for EU users.Which two actions should you take? (Choose two.)

Options :

A : Use BigQuery federated queries to query data from Cloud Storage.

B : Create a dataset in the EU region that will keep information about EU users only.

C : Create a Cloud Storage bucket in the EU region to store information for EU users only.

D : Re-upload your data using to a Cloud Dataflow pipeline by filtering your user records out.

E : Use DML statements in BigQuery to update/delete user records based on their requests.

Answer: A,C

Question 2

What is the purpose of selecting the API Key option in the Policies section when creating a proxy in Apigee?

Options :

A : To configure the virtual hosts for the proxy

B : To create a proxy with a self-explanatory name

C : To protect the service through the apiKey authentication method

D : To access the Proxy API section

Answer: C

Question 3

What is a possible security measure to limit access to resources in App Engine?

Options :

A : Configuration of ingress traffic

B : Analysis of exposed URLs

C : Use of default domains

D : Use of App Engine firewall

Answer: D

Question 4

An application is being managed on a Compute Engine instance, alongside multiple backend services that are run on stand-alone Docker containers in Compute Engine instances. These Compute Engine instances supporting the backend services are scaled by managed instance groups across several regions. In order to ensure a loosely coupled calling application, it is necessary to be able to invoke individual service implementations which are selected based on the value of an HTTP header located within the request.What is the appropriate Google Cloud feature to activate the backend services?

Options :

A : Internal HTTP(S) Load Balancing

B : Anthos Service Mesh

C : Traffic Director

D : Service Directory

Answer: C

Question 5

The task at hand is to create a microservice-based application on Google Kubernetes Engine (GKE). The application requires access to various Google Cloud APIs. Two of these services must be able to access these APIs.What is the recommended approach for implementing authentication of these services in the cluster according to Google's best practices?

Options :

A : Store the Google service account keys in a central secret management service.

B : Enable Workload Identity in the cluster via the gcloud command-line tool.

C : Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.

D : Use the service account attached to the GKE node.

E : Access the Google service account keys from a secret management service.

Answer: C,E

Free Professional-Cloud-Developer Mock Exam – Practice Online Confidently

Buying Options: