GCP-PCD sample questions

Question 1

A developer is building a cloud-native application that processes uploaded images. The application needs to be event-driven. When a user uploads an image to a Cloud Storage bucket, a service should automatically be triggered to resize the image. The solution must be serverless and require minimal operational overhead. Which architecture should the developer implement?

Accepted Answer

Use Eventarc to capture the 'google.cloud.storage.object.v1.finalized' event and route it to a Cloud Run service.

Answer

Deploy a GKE cluster. Run a pod that polls the Cloud Storage bucket API every second for new objects.

Answer

Configure a Cloud Scheduler job to invoke a Cloud Function every minute to list bucket contents.

Answer

Use Cloud Tasks to queue a request whenever the frontend application uploads a file.

Question 2

You are migrating a legacy monolithic application to Google Cloud. The application requires a file system interface to read and write configuration files shared across multiple instances. You plan to containerize the application and deploy it to Google Kubernetes Engine (GKE). Which storage option should you mount to the GKE pods to support read/write many (RWX) access?

Accepted Answer

Filestore (NFS)

Answer

Compute Engine Persistent Disk (Standard)

Answer

Cloud Storage FUSE sidecar

Answer

Local SSD

Question 3

A financial services company needs to securely store API keys and database credentials. The security team mandates that these secrets must be rotated automatically every 30 days and accessed only by authorized applications via IAM. Which combination of services fulfills these requirements?

Accepted Answer

Use Secret Manager to store the credentials and configure rotation schedules using Cloud Functions.

Answer

Store secrets in Cloud Storage with strict IAM policies and use a Cloud Scheduler job to update the files.

Answer

Embed the secrets in the application code and use Cloud Build to redeploy the app every 30 days with new keys.

Answer

Store secrets in Cloud KMS and rely on its automatic key rotation feature.

Question 4

You are designing an API for a retail application hosted on Cloud Run. The API must support high-volume reads for product catalog data. To improve performance and reduce latency, you decide to implement a caching layer. The cache should be fully managed and support Redis data structures. Which service should you integrate?

Accepted Answer

Memorystore for Redis

Answer

Cloud Storage

Answer

BigQuery

Answer

Cloud SQL

Question 5

A development team is building a microservices application on GKE. Service A needs to call Service B. Both services are in the same cluster but different namespaces. The security team requires that Service B only accepts traffic from Service A and denies all other internal traffic. What Kubernetes native resource should you configure?

Accepted Answer

NetworkPolicy

Answer

PodSecurityPolicy

Answer

VPC Firewall Rules

Answer

Binary Authorization

Question 6

You are configuring a Cloud Build pipeline to deploy a container image to Cloud Run. You need to ensure that the image is only deployed if it has been signed by a trusted attestor after passing a vulnerability scan. Which Google Cloud service should you use to enforce this policy at deployment time?

Accepted Answer

Binary Authorization

Answer

Container Analysis

Answer

Cloud Armor

Answer

Identity-Aware Proxy

Free GCP-PCD sample questions

A financial services company needs to securely store API keys and database credentials. The security team mandates that these secrets must be rotated automatically every 30 days and accessed only by authorized applications via IAM. Which combination of services fulfills these requirements?

You are configuring a Cloud Build pipeline to deploy a container image to Cloud Run. You need to ensure that the image is only deployed if it has been signed by a trusted attestor after passing a vulnerability scan. Which Google Cloud service should you use to enforce this policy at deployment time?

6 more free samples are waiting