{"id":23454,"date":"2026-09-28T06:58:26","date_gmt":"2026-09-28T06:58:26","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=23454"},"modified":"2026-09-28T06:58:26","modified_gmt":"2026-09-28T06:58:26","slug":"google-professional-cloud-developer-practice-test-questions-and-exam-dumps-part6-q101-120","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/google-professional-cloud-developer-practice-test-questions-and-exam-dumps-part6-q101-120\/","title":{"rendered":"Google Professional Cloud Developer Practice Test Questions and Exam Dumps Part6 Q101-120"},"content":{"rendered":"<h2><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/professional-cloud-developer-exam-dumps\"><b>Google Professional Cloud Developer Exam Dumps<\/b><\/a><b> and Practice Test Dumps.<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 101<\/b><\/h3>\n<p><b>A developer wants to package application dependencies and runtime configuration into a consistent artifact that behaves the same across development, testing, and production. Which approach best supports this goal?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Containerization<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Manual server configuration<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Local-only dependencies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Shared desktop installations<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Containerization packages an application with its required runtime components and dependencies into a consistent artifact. This helps reduce differences between development, testing, and production environments because the same container image can be promoted through multiple stages. Container images can also be stored in Artifact Registry and deployed to services such as Cloud Run or GKE. Manual server configuration is more prone to configuration drift, while local-only dependencies cannot reliably be reproduced in other environments. Containerization therefore supports repeatable application packaging and deployment across different stages of the software lifecycle.<\/span><\/p>\n<h3><b>Question 102<\/b><\/h3>\n<p><b>A Cloud Run application must execute a CPU-intensive batch calculation that does not need to respond to HTTP requests. The calculation should run only when explicitly started by an administrator. Which option is appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">API Gateway<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Run Jobs<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud CDN<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Load Balancing<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Run Jobs are intended for workloads that execute containers to completion rather than continuously serving HTTP requests. They are suitable for batch calculations, data processing, administrative operations, and similar tasks that can be started when needed and then terminate after completing their work. An administrator can explicitly execute a job when required. API Gateway provides API management, Cloud CDN distributes cached content, and Cloud Load Balancing distributes network traffic. Since the workload is a manually initiated batch operation without an HTTP serving requirement, Cloud Run Jobs provide an appropriate execution model.<\/span><\/p>\n<h3><b>Question 103<\/b><\/h3>\n<p><b>A developer needs to ensure that a new application release passes automated integration tests before it can be promoted to production. Which practice should be incorporated into the delivery pipeline?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Skip testing for faster releases<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Run integration tests as a pipeline stage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Test only after production deployment<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Remove the staging environment<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Automated integration tests can verify that application components work correctly together before a release reaches production. Including these tests as a stage in the delivery pipeline creates a repeatable quality checkpoint and can prevent known failures from progressing further. Testing only after production deployment increases operational risk because defects have already reached users. Removing staging also eliminates an important environment for validating deployment behavior. A pipeline that automatically runs integration tests before production promotion provides a consistent mechanism for detecting integration problems earlier in the release process.<\/span><\/p>\n<h3><b>Question 104<\/b><\/h3>\n<p><b>A service stores sensitive credentials in Secret Manager and needs to retrieve the latest secret value without embedding a credential directly in the container image. What should the application use for access?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The runtime service identity with appropriate permissions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A password written into source code<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A public Cloud Storage object<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">An unauthenticated HTTP endpoint<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Applications should access Secret Manager through an authenticated runtime identity that has the minimum permissions required to access the necessary secret. This avoids placing long-lived credentials inside source code or container images. The application can request the required secret version at runtime using Google Cloud authentication mechanisms. A public storage object would expose sensitive information, while source-code passwords create credential-management and leakage risks. An unauthenticated endpoint would also fail to provide appropriate access control. Runtime identity-based access therefore supports secure and manageable secret retrieval.<\/span><\/p>\n<h3><b>Question 105<\/b><\/h3>\n<p><b>A developer is designing an event-driven application and wants a Cloud Run service to respond only to events matching a particular event type and resource attribute. What should be configured?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">An Eventarc trigger with event filters<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A Cloud Storage lifecycle rule<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A BigQuery reservation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A Cloud SQL read replica<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Eventarc triggers can use event attributes to determine which events should be routed to a destination. Developers can configure filters so that a Cloud Run service receives only relevant events instead of processing every event generated by the environment. This helps reduce unnecessary invocation and keeps event-driven application logic focused on the required event types and resources. Storage lifecycle rules manage object retention, BigQuery reservations concern analytical workloads, and Cloud SQL read replicas support database scaling. Eventarc filtering is therefore the appropriate mechanism for selective event-driven routing.<\/span><\/p>\n<h3><b>Question 106<\/b><\/h3>\n<p><b>A GKE application needs to prevent Kubernetes from scheduling a pod onto a node unless the node has enough CPU and memory capacity reserved for that pod. Which pod specification should the developer configure?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resource requests<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Container image labels<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">ConfigMap data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">HTTP headers<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Kubernetes resource requests specify the amount of CPU and memory that a container requires for scheduling purposes. The Kubernetes scheduler uses these requested resources when determining whether a node has sufficient allocatable capacity for a pod. This differs from resource limits, which restrict the maximum resource consumption after scheduling. Image labels and ConfigMaps do not determine scheduling capacity, while HTTP headers are unrelated to Kubernetes placement decisions. Proper resource requests help improve workload placement and make resource availability more predictable in GKE clusters running multiple applications.<\/span><\/p>\n<h3><b>Question 107<\/b><\/h3>\n<p><b>A Cloud Tasks queue sends HTTP requests to a service, but the target occasionally returns temporary failures. The developer wants failed tasks to be retried automatically with increasing delays. Which queue behavior should be configured?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retry policy with exponential backoff<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Permanent deletion after the first failure<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unlimited immediate retries<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Client-side browser caching<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Tasks supports retry policies that can control how failed tasks are attempted again. Exponential backoff increases the delay between successive retries, reducing the chance that a temporarily unavailable service will immediately receive a large number of repeated requests. Developers can also configure limits on retry attempts and other queue behavior according to workload requirements. Permanent deletion would lose recoverable work, while unlimited immediate retries could overload an unhealthy target. Browser caching has no role in server-side task delivery. Exponential backoff therefore provides a suitable strategy for temporary failures.<\/span><\/p>\n<h3><b>Question 108<\/b><\/h3>\n<p><b>A developer wants to deploy the same container image to staging and production while supplying different database endpoints and feature settings in each environment. Which design principle should guide the implementation?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Rebuild the application separately for every environment<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Store environment values in source-code branches<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Separate configuration from the application artifact<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Duplicate the entire application repository<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Separating configuration from the application artifact allows a single tested container image to move across environments while environment-specific values are supplied independently. This reduces differences between builds and supports a consistent promotion process. Runtime configuration can include database endpoints, feature flags, and other non-secret settings. Rebuilding separately for every environment can introduce inconsistencies, while maintaining duplicate repositories increases operational complexity. Source-control branches should not be treated as the primary runtime configuration mechanism. Separating configuration from code therefore supports reproducible and controlled deployments.<\/span><\/p>\n<h3><b>Question 109<\/b><\/h3>\n<p><b>An application deployed on GKE should expose a stable internal endpoint for a group of pods even when individual pod IP addresses change. Which Kubernetes resource provides this abstraction?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Service<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">ConfigMap<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secret<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">PersistentVolume<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A Kubernetes Service provides a stable network abstraction for a set of pods selected by labels. Pods can be created, deleted, or rescheduled, causing their individual IP addresses to change, but clients can continue communicating through the Service endpoint. Kubernetes then routes traffic to eligible backend pods. ConfigMaps store configuration, Secrets hold sensitive data, and PersistentVolumes provide storage resources. Using a Service therefore decouples clients from the lifecycle and changing addresses of individual pods, which is fundamental to reliable communication between microservices running in GKE.<\/span><\/p>\n<h3><b>Question 110<\/b><\/h3>\n<p><b>A developer wants to avoid storing large analytical datasets in an operational relational database when the application primarily needs SQL-based reporting and aggregation. Which Google Cloud service is designed for this workload?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firestore<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">BigQuery<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Tasks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secret Manager<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">BigQuery is a fully managed analytical data warehouse designed for large-scale SQL querying and analytical workloads. It is appropriate when an application needs reporting, aggregation, and analysis across substantial datasets rather than using an operational relational database for every analytical query. Firestore is a document database intended for application data, Cloud Tasks manages asynchronous tasks, and Secret Manager stores sensitive values. Separating analytical workloads from transactional application databases can reduce contention and provide a platform optimized for analytical query processing. BigQuery therefore fits the described reporting scenario.<\/span><\/p>\n<h3><b>Question 111<\/b><\/h3>\n<p><b>A Cloud Storage application frequently serves the same public static objects to users around the world. The developer wants to reduce latency by serving cacheable content closer to users. Which Google Cloud capability should be considered?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud CDN<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Scheduler<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Tasks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Profiler<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud CDN can cache eligible content at locations closer to users, reducing latency and decreasing repeated requests to the origin. It is particularly useful for frequently accessed static or cacheable content where users are distributed geographically. Developers should configure caching behavior carefully, especially when content can change or contains user-specific information. Cloud Scheduler handles recurring jobs, Cloud Tasks manages asynchronous work, and Cloud Profiler analyzes application performance. For globally accessed static content where repeated delivery from the origin is inefficient, Cloud CDN can improve content delivery performance.<\/span><\/p>\n<h3><b>Question 112<\/b><\/h3>\n<p><b>A Firestore application updates a document based on its current value. The value may be changed by another client at the same time. Which mechanism should the developer use when the update must remain consistent with concurrent changes?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Static caching only<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firestore transaction<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Storage upload<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS failover<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A Firestore transaction is appropriate when an operation depends on the current value of one or more documents and must remain consistent if concurrent modifications occur. Firestore can detect conflicting changes and retry the transaction when necessary, helping preserve the intended data integrity. A simple independent write may overwrite a value based on stale application state. Static caching, Cloud Storage uploads, and DNS failover do not provide transactional coordination for Firestore document updates. Transactions are therefore suitable when application logic must safely read, calculate, and update data under concurrent access.<\/span><\/p>\n<h3><b>Question 113<\/b><\/h3>\n<p><b>A production application uses Cloud Logging, but developers find it difficult to correlate log entries belonging to a single distributed request across multiple services. What should they incorporate into application logging?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Random filenames<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Consistent trace or request correlation identifiers<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Longer source-code comments<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Additional DNS aliases<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Distributed applications often require correlation information to connect related operations across multiple services. Consistent trace identifiers or request correlation identifiers can allow developers to associate log entries generated during the same request or transaction path. When supported logging and tracing integrations are configured correctly, this information improves troubleshooting of latency, failures, and service interactions. Random filenames, source-code comments, and DNS aliases do not establish relationships between distributed log events. Adding appropriate correlation identifiers therefore makes multi-service observability more useful and helps developers follow a request through the application&#8217;s components.<\/span><\/p>\n<h3><b>Question 114<\/b><\/h3>\n<p><b>A team needs to expose a REST API implemented by existing backend services and wants an OpenAPI-based configuration for routing and authentication. Which Google Cloud service can provide a managed API gateway layer?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">API Gateway<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Profiler<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Memorystore<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">API Gateway provides a managed gateway layer for exposing backend APIs and can use an API configuration to define how requests are handled. Developers can use supported authentication mechanisms and routing configuration while keeping backend implementation concerns separate from the public API entry point. Cloud Profiler focuses on application profiling, Cloud Storage provides object storage, and Memorystore provides managed in-memory caching. A managed API gateway can therefore simplify the exposure of backend services while centralizing important API access and routing configuration.<\/span><\/p>\n<h3><b>Question 115<\/b><\/h3>\n<p><b>A developer needs to execute a group of HTTP tasks at a controlled rate because the downstream service has strict request quotas. Which Cloud Tasks feature should be configured?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Queue dispatch rate controls<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firestore indexes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud CDN cache keys<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">GKE node labels<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Tasks queues provide controls over task dispatch behavior, including the rate at which tasks are sent to their targets. This allows developers to protect downstream services from excessive request volume and stay within external or internal quotas. Queue configuration can also include concurrency and retry behavior, making it possible to shape workload delivery according to the target&#8217;s capacity. Firestore indexes affect database queries, Cloud CDN cache keys affect content caching, and GKE node labels influence Kubernetes scheduling or selection. Dispatch rate controls directly address controlled HTTP task delivery.<\/span><\/p>\n<h3><b>Question 116<\/b><\/h3>\n<p><b>A developer is selecting between Firestore and Cloud SQL for a new application. The application requires relational joins, structured relational schemas, and transactions involving multiple related tables. Which service aligns more closely with these requirements?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firestore<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud SQL<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Tasks<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud SQL provides managed relational database engines and supports relational schemas, SQL queries, joins, and transactional operations across related tables. These capabilities make it suitable for applications whose data model depends strongly on relational relationships and structured SQL operations. Firestore uses a document-oriented model and is better suited to workloads designed around documents and collections. Cloud Storage is object storage, while Cloud Tasks provides asynchronous task management. When application requirements specifically depend on relational joins and multi-table transactional behavior, Cloud SQL is a natural fit among these options.<\/span><\/p>\n<h3><b>Question 117<\/b><\/h3>\n<p><b>A deployment pipeline should automatically create a new release after successful builds and tests, but production traffic should remain unchanged until a later promotion step. Which deployment principle does this illustrate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Separate release creation from production promotion<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Delete previous revisions immediately<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Deploy only from developer laptops<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Skip automated validation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Separating release creation from production promotion allows a validated application artifact to be prepared without immediately changing production traffic. This supports controlled deployment workflows in which builds and tests create a release, while a later approval or promotion step determines when production should receive it. The separation improves traceability and provides an opportunity to review release readiness before exposure. Deleting previous versions removes rollback options, laptop-based deployment reduces consistency, and skipping validation weakens quality controls. Distinct release and promotion stages therefore support disciplined application delivery.<\/span><\/p>\n<h3><b>Question 118<\/b><\/h3>\n<p><b>A Cloud Run application receives requests containing sensitive information. Developers need detailed diagnostic logs but must avoid accidentally recording passwords and access tokens. What should the application implement?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Log every request body without filtering<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disable all monitoring<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Redact sensitive fields before logging<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Store credentials in plain-text logs<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Applications should avoid placing secrets, passwords, access tokens, and other sensitive information into logs. Developers can implement structured logging while explicitly filtering or redacting sensitive fields before log entries are emitted. This preserves useful diagnostic information without unnecessarily exposing credentials through operational systems. Logging every request body can create significant security and privacy risks, while disabling monitoring removes valuable troubleshooting capabilities. Storing credentials in plain-text logs is especially unsafe because logs may be retained and accessed by multiple operational roles. Sensitive-field redaction therefore supports both observability and security.<\/span><\/p>\n<h3><b>Question 119<\/b><\/h3>\n<p><b>A GKE workload requires access to a Google Cloud API, but the team wants to avoid distributing service account key files inside containers. Which identity approach should be preferred?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Store the key in the container image<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use workload identity-based authentication<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Put the key in application source code<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use an unauthenticated API endpoint<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Workload identity-based authentication allows workloads running in GKE to obtain Google Cloud permissions through identities associated with the workload rather than relying on downloadable service account key files. This reduces the risk of long-lived credentials being copied into container images, source repositories, or deployment artifacts. The workload can receive only the permissions needed for its required Google Cloud APIs. Embedding key files or source-code credentials increases exposure risk, while unauthenticated APIs remove appropriate access controls. Identity-based workload authentication therefore provides a safer and more manageable approach for GKE applications.<\/span><\/p>\n<h3><b>Question 120<\/b><\/h3>\n<p><b>A developer wants to investigate which functions consume the most CPU time in a production service over time, rather than relying only on request-level latency metrics. Which tool should be used?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Scheduler<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Profiler<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Tasks<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Profiler provides continuous profiling capabilities that help developers understand how applications consume CPU and memory. It can identify functions or code paths that account for significant resource usage, complementing metrics, logs, and traces that may show symptoms without revealing the underlying computational hotspots. Cloud Scheduler manages scheduled executions, Cloud Storage stores objects, and Cloud Tasks manages asynchronous task delivery. When the goal is specifically to investigate ongoing CPU or memory behavior within application code, Cloud Profiler provides the specialized profiling information needed for performance analysis.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Google Professional Cloud Developer Exam Dumps and Practice Test Dumps. &nbsp; Question 101 A developer wants to package application dependencies and runtime configuration into a consistent artifact that behaves the same across development, testing, and production. Which approach best supports this goal? Containerization Manual server configuration Local-only dependencies Shared desktop installations Correct Answer: [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23454"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=23454"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23454\/revisions"}],"predecessor-version":[{"id":23455,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23454\/revisions\/23455"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=23454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=23454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=23454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}