Google Professional-Cloud-Developer Dumps Updated Oct 22, 2026 WIith 400 Questions [Q82-Q103]

Rate this post

Google Professional-Cloud-Developer Dumps Updated Oct 22, 2026 WIith 400 Questions

View All Professional-Cloud-Developer Actual Free Exam Questions Oct 22, 2026 Updated

Google Professional-Cloud-Developer Exam Syllabus Topics:

Section	Weight	Objectives
Integrating applications with Google Cloud services	21%	– Consuming Google Cloud APIs and services 1. Using client libraries, REST, and gRPC 2. Integrating with AI/ML and generative AI services 3. Enabling and managing APIs – Implementing application performance monitoring 1. Using operations suite tools 2. Instrumenting code for metrics and traces – Integrating with data and storage services 1. Implementing messaging and event streaming 2. Working with relational, NoSQL, and in-memory databases 3. Using object storage and file storage solutions
Designing highly scalable, secure, and reliable cloud-native applications	32%	– Designing high-performing applications and APIs 1. Optimizing for latency and throughput 2. Designing for high availability and fault tolerance 3. Selecting appropriate compute and deployment platforms – Designing secure applications 1. Applying security best practices and compliance requirements 2. Implementing authentication and authorization mechanisms 3. Securing data in transit and at rest – Designing for observability and monitoring 1. Designing for debugging and troubleshooting 2. Planning logging, metrics, and tracing strategies
Configuring cloud-native applications for deployment	24%	– Deploying to App Engine or Cloud Functions 1. Managing versions and traffic splitting 2. Configuring serverless deployments – Deploying applications to Google Kubernetes Engine 1. Managing configurations and secrets 2. Creating and managing workloads and services 3. Configuring scaling, auto-scaling, and updates – Deploying applications to Cloud Run 1. Deploying from source code or containers 2. Integrating with event-driven services 3. Configuring scaling, networking, and security
Building and testing applications	23%	– Building applications and containers 1. Implementing containerization best practices 2. Configuring build pipelines and provenance 3. Using Cloud Build and Artifact Registry – Testing applications 1. Automating testing in CI/CD workflows 2. Writing unit, integration, and end-to-end tests 3. Using AI-assisted development tools – Setting up development environments 1. Using Cloud SDK, Cloud Code, Cloud Shell, and Cloud Workstations 2. Emulating Google Cloud services locally

Q82. You work for a financial services company that has a container-first approach. Your team develops microservices applications. A Cloud Build pipeline creates the container image, runs regression tests, and publishes the image to Artifact Registry. You need to ensure that only containers that have passed the regression tests are deployed to Google Kubernetes Engine (GKE) clusters. You have already enabled Binary Authorization on the GKE clusters. What should you do next?

Create an attestor and a policy. After a container image has successfully passed the regression tests, use Cloud Build to run Kritis Signer to create an attestation for the container image.

Deploy Voucher Server and Voucher Client components. After a container image has successfully passed the regression tests, run Voucher Client as a step in the Cloud Build pipeline.

Set the Pod Security Standard level to Restricted for the relevant namespaces. Use Cloud Build to digitally sign the container images that have passed the regression tests.

Create an attestor and a policy. Create an attestation for the container images that have passed the regression tests as a step in the Cloud Build pipeline.

Q83. You have an application in production. It is deployed on Compute Engine virtual machine instances controlled by a managed instance group. Traffic is routed to the instances via a HTTP(s) load balancer. Your users are unable to access your application. You want to implement a monitoring technique to alert you when the application is unavailable.
Which technique should you choose?

Smoke tests

Stackdriver uptime checks

Cloud Load Balancing – heath checks

Managed instance group – heath checks

Q84. You have deployed an HTTP(s) Load Balancer with the gcloud commands shown below.

Health checks to port 80 on the Compute Engine virtual machine instance are failing and no traffic is sent to your instances. You want to resolve the problem.
Which commands should you run?

gcloud compute instances add-access-config ${NAME}-backend-instance-1

gcloud compute instances add-tags ${NAME}-backend-instance-1 –tags http-server

gcloud compute firewall-rules create allow-lb –network load-balancer –allow tcp –source-ranges 130.211.0.0/22,35.191.0.0/16 –direction INGRESS

gcloud compute firewall-rules create allow-lb –network load-balancer –allow tcp –destination-ranges 130.211.0.0/22,35.191.0.0/16 –direction EGRESS

Q85. You should use open questions to do which of the following?

Obtain the customer’s warranty status.

Check for understanding.

Gather more information about an issue.

Greet the customer.

Q86. You work for a web development team at a small startup. Your team is developing a Node.js application using Google Cloud services, including Cloud Storage and Cloud Build. The team uses a Git repository for version control. Your manager calls you over the weekend and instructs you to make an emergency update to one of the company’s websites, and you’re the only developer available. You need to access Google Cloud to make the update, but you don’t have your work laptop. You are not allowed to store source code locally on a non-corporate computer.
How should you set up your developer environment?

Use a text editor and the Git command line to send your source code updates as pull requests from a public computer.

Use a text editor and the Git command line to send your source code updates as pull requests from a virtual machine running on a public computer.

Use Cloud Shell and the built-in code editor for development. Send your source code updates as pull requests.

Use a Cloud Storage bucket to store the source code that you need to edit. Mount the bucket to a public computer as a drive, and use a code editor to update the code. Turn on versioning for the bucket, and point it to the team’s Git repository.

Q87. Your company’s development teams want to use various open source operating systems in their Docker builds. When images are created in published containers in your company’s environment, you need to scan them for Common Vulnerabilities and Exposures (CVEs). The scanning process must not impact software development agility. You want to use managed services where possible. What should you do?

Enable the Vulnerability scanning setting in the Container Registry.

Create a Cloud Function that is triggered on a code check-in and scan the code for CVEs.

Disallow the use of non-commercially supported base images in your development environment.

Use Cloud Monitoring to review the output of Cloud Build to determine whether a vulnerable version has been used.

Q88. You are planning to migrate a MySQL database to the managed Cloud SQL database for Google Cloud. You have Compute Engine virtual machine instances that will connect with this Cloud SQL instance. You do not want to whitelist IPs for the Compute Engine instances to be able to access Cloud SQL.
What should you do?

Enable private IP for the Cloud SQL instance.

Whitelist a project to access Cloud SQL, and add Compute Engine instances in the whitelisted project.

Create a role in Cloud SQL that allows access to the database from external instances, and assign the Compute Engine instances to that role.

Create a CloudSQL instance on one project. Create Compute engine instances in a different project. Create a VPN between these two projects to allow internal access to CloudSQL.

Q89. Your web application is deployed to the corporate intranet. You need to migrate the web application to Google Cloud. The web application must be available only to company employees and accessible to employees as they travel. You need to ensure the security and accessibility of the web application while minimizing application changes. What should you do?

Configure the application to check authentication credentials for each HTTP(S) request to the application.

Configure Identity-Aware Proxy to allow employees to access the application through its public IP address.

Configure a Compute Engine instance that requests users to log in to their corporate account. Change the web application DNS to point to the proxy Compute Engine instance. After authenticating, the Compute Engine instance forwards requests to and from the web application.

Configure a Compute Engine instance that requests users to log in to their corporate account. Change the web application DNS to point to the proxy Compute Engine instance. After authenticating, the Compute Engine issues an HTTP redirect to a public IP address hosting the web application.

Q90. You have an application running in a production Google Kubernetes Engine (GKE) cluster. You use Cloud Deploy to automatically deploy your application to your production GKE cluster. As part of your development process: you are planning to make frequent changes to the applications source code and need to select the tools to test the changes before pushing them to your remote source code repository. Your toolset must meet the following requirements:
* Test frequent local changes automatically.
* Local deployment emulates production deployment.
Which tools should you use to test building and running a container on your laptop using minimal resources’?

Terraform and kubeadm

Docker Compose and dockerd

Minikube and Skaffold

kaniko and Tekton

Q91. You are a cluster administrator for Google Kubernetes Engine (GKE). Your organization’s clusters are enrolled in a release channel. You need to be informed of relevant events that affect your GKE clusters, such as available upgrades and security bulletins. What should you do?

Configure cluster notifications to be sent to a Pub/Sub topic.

Execute a scheduled query against the google_cloud_release_notes BigQuery dataset.

Query the GKE API for available versions.

Create an RSS subscription to receive a daily summary of the GKE release notes.

Q92. You work for a financial services company that has a container-first approach. Your team develops microservices applications You have a Cloud Build pipeline that creates a container image, runs regression tests, and publishes the image to Artifact Registry You need to ensure that only containers that have passed the regression tests are deployed to Google Kubernetes Engine (GKE) clusters You have already enabled Binary Authorization on the GKE clusters What should you do next?

Deploy Voucher Server and Voucher Client Components. After a container image has passed the regression tests, run Voucher Client as a step in the Cloud Build pipeline.

Set the Pod Security Standard level to Restricted for the relevant namespaces Digitally sign the container images that have passed the regression tests as a step in the Cloud Build pipeline.

Create an attestor and a policy. Create an attestation for the container images that have passed the regression tests as a step in the Cloud Build pipeline.

Create an attestor and a policy Run a vulnerability scan to create an attestation for the container image as a step in the Cloud Build pipeline.

Q93. You need to containerize a web application that will be hosted on Google Cloud behind a global load balancer with SSL certificates. You don’t have the time to develop authentication at the application level, and you want to offload SSL encryption and management from your application.
You want to configure the architecture using managed services where possible. What should you do?

Host the application on Google Kubernetes Engine, and deploy an NGINX Ingress Controller to handle authentication.

Host the application on Google Kubernetes Engine, and deploy cert-manager to manage SSL certificates.

Host the application on Compute Engine, and configure Cloud Endpoints for your application.

Host the application on Google Kubernetes Engine, and use Identity-Aware Proxy (IAP) with Cloud Load Balancing and Google-managed certificates.

Q94. You are developing a web application that will be deployed to production on Cloud Run. The application consists of multiple microservices, some of which will be publicly accessible and others that will only be accessible after authentication by Google identities. You need to ensure that only authenticated users can access the restricted services, while allowing unrestricted access to the public services of the application. You want to use the most secure approach while minimizing management overhead and complexity. How should you configure access?

Enable Identity-Aware Proxy (IAP) for all microservices. Develop a new microservice that checks the authentication requirements for each application and controls access to the respective services.

Enable Identity-Aware Proxy (IAP) for all microservices. Manage access control lists (ACLs) for the restricted services, and configure allAuthenticatedUsers access to the public services.

Use Cloud Endpoints with Firebase Authentication for all microservices. Configure Firebase rules to manage access control lists (ACLs) for each service, allowing access to the public services.

Configure separate Cloud Run services for the public and restricted microservices. Enable Identity-Aware Proxy (IAP) only for the restricted services, and configure the Cloud Run ingress settings to ‘Internal and Cloud Load Balancing’.

Q95. Your team develops services that run on Google Kubernetes Engine. Your team’s code is stored in Cloud Source Repositories. You need to quickly identify bugs in the code before it is deployed to production. You want to invest in automation to improve developer feedback and make the process as efficient as possible. What should you do?

Use Spinnaker to automate building container images from code based on Git tags.

Use Cloud Build to automate building container images from code based on Git tags.

Use Spinnaker to automate deploying container images to the production environment.

Use Cloud Build to automate building container images from code based on forked versions.

Q96. You recently migrated an on-premises monolithic application to a microservices application on Google Kubernetes Engine (GKE). The application has dependencies on backend services on- premises, including a CRM system and a MySQL database that contains personally identifiable information (PII). The backend services must remain on-premises to meet regulatory requirements.
You established a Cloud VPN connection between your on-premises data center and Google Cloud. You notice that some requests from your microservices application on GKE to the backend services are failing due to latency issues caused by fluctuating bandwidth, which is causing the application to crash. How should you address the latency issues?

Use Memorystore to cache frequently accessed PII data from the on-premises MySQL database

Use Istio to create a service mesh that includes the microservices on GKE and the on-premises services

Increase the number of Cloud VPN tunnels for the connection between Google Cloud and the on- premises services

Decrease the network layer packet size by decreasing the Maximum Transmission Unit (MTU) value from its default value on Cloud VPN

Q97. You want to re-architect a monolithic application so that it follows a microservices model. You want to accomplish this efficiently while minimizing the impact of this change to the business.
Which approach should you take?

Deploy the application to Compute Engine and turn on autoscaling.

Replace the application’s features with appropriate microservices in phases.

Refactor the monolithic application with appropriate microservices in a single effort and deploy it.

Build a new application with the appropriate microservices separate from the monolith and replace it when it is complete.

Q98. You have an application running in a production Google Kubernetes Engine (GKE) cluster. You use Cloud Deploy to automatically deploy your application to your production GKE cluster. As part of your development process, you are planning to make frequent changes to the application’s source code and need to select the tools to test the changes before pushing them to your remote source code repository. Your toolset must meet the following requirements:
– Test frequent local changes automatically.
– Local deployment emulates production deployment.
Which tools should you use to test building and running a container on your laptop using minimal resources?

Docker Compose and dockerd

Terraform and kubeadm

Minikube and Skaffold

kaniko and Tekton

Q99. You have written a Cloud Function that accesses other Google Cloud resources. You want to secure the environment using the principle of least privilege. What should you do?

Create a new service account that has Editor authority to access the resources. The deployer is given permission to get the access token.

Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to get the access token.

Create a new service account that has Editor authority to access the resources. The deployer is given permission to act as the new service account.

Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to act as the new service account.

Q100. Users are complaining that your Cloud Run-hosted website responds too slowly during traffic spikes. You want to provide a better user experience during traffic peaks. What should you do?

Read application configuration and static data from the database on application startup.

Package application configuration and static data into the application image during build time.

Perform as much work as possible in the background after the response has been returned to the user.

Ensure that timeout exceptions and errors cause the Cloud Run instance to exit quickly so a replacement instance can be started.

Q101. You have an application deployed in production. When a new version is deployed, some issues don’t arise until the application receives traffic from users in production. You want to reduce both the impact and the number of users affected.
Which deployment strategy should you use?

Blue/green deployment

Canary deployment

Rolling deployment

Recreate deployment

Q102. Your team is building an application for a financial institution. The application’s frontend runs on Compute Engine, and the data resides in Cloud SQL and one Cloud Storage bucket. The application will collect data containing PII, which will be stored in the Cloud SQL database and the Cloud Storage bucket. You need to secure the PII data. What should you do?

1) Create the relevant firewall rules to allow only the frontend to communicate with the Cloud SQL database
2) Using IAM, allow only the frontend service account to access the Cloud Storage bucket

1) Create the relevant firewall rules to allow only the frontend to communicate with the Cloud SQL database
2) Enable private access to allow the frontend to access the Cloud Storage bucket privately

1) Configure a private IP address for Cloud SQL
2) Use VPC-SC to create a service perimeter
3) Add the Cloud SQL database and the Cloud Storage bucket to the same service perimeter

1) Configure a private IP address for Cloud SQL
2) Use VPC-SC to create a service perimeter
3) Add the Cloud SQL database and the Cloud Storage bucket to different service perimeters

Q103. Your team is creating a serverless web application on Cloud Run. The application needs to access images stored in a private Cloud Storage bucket. You want to give the application Identity and Access Management (IAM) permission to access the images in the bucket, while also securing the services using Google-recommended best practices What should you do?

Enforce signed URLs for the desired bucket. Grant the Storage Object Viewer IAM role on the bucket to the Compute Engine default service account.

Enforce public access prevention for the desired bucket. Grant the Storage Object Viewer IAM role on the bucket to the Compute Engine default service account.

Enforce signed URLs for the desired bucket Create and update the Cloud Run service to use a user -managed service account. Grant the Storage Object Viewer IAM role on the bucket to the service account

Enforce public access prevention for the desired bucket. Create and update the Cloud Run service to use a user-managed service account. Grant the Storage Object Viewer IAM role on the bucket to the service account.