{"id":23456,"date":"2026-09-28T06:58:43","date_gmt":"2026-09-28T06:58:43","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=23456"},"modified":"2026-09-28T06:58:43","modified_gmt":"2026-09-28T06:58:43","slug":"google-professional-cloud-developer-practice-test-questions-and-exam-dumps-part7-q121-140","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/google-professional-cloud-developer-practice-test-questions-and-exam-dumps-part7-q121-140\/","title":{"rendered":"Google Professional Cloud Developer Practice Test Questions and Exam Dumps Part7 Q121-140"},"content":{"rendered":"<h2><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/professional-cloud-developer-exam-dumps\"><b>Google Professional Cloud Developer Exam Dumps<\/b><\/a><b> and Practice Test Dumps.<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 121<\/b><\/h3>\n<p><b>A developer needs to ensure that an application can safely retry a database operation after a temporary network failure without creating duplicate business records. Which application design principle is most important?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Idempotency<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Randomized logging<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Static IP addressing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Client-side rendering<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Idempotency means that performing the same operation multiple times produces the same intended result as performing it once. This principle is important when applications retry operations after transient failures because the client may not know whether the first attempt actually completed. Developers can use unique request identifiers, conditional writes, database constraints, or transactional logic to prevent duplicate business records. Randomized logging, static IP addresses, and client-side rendering do not prevent duplicate side effects. Designing retryable operations to be idempotent therefore improves application reliability in distributed cloud environments.<\/span><\/p>\n<h3><b>Question 122<\/b><\/h3>\n<p><b>A Cloud Run service receives a request that starts an expensive operation. The client should not wait for completion, and the work must be retried if the worker temporarily fails. Which architecture is appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Synchronous HTTP processing only<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Asynchronous task queue with retry handling<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Static file hosting<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS-based routing<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An asynchronous task queue separates request acceptance from background processing. The Cloud Run service can validate the request, create a task, and return a response without keeping the client connected while expensive work runs. The task worker can then process the operation independently, with retry policies handling temporary failures. Cloud Tasks is particularly suitable when an HTTP endpoint should receive controlled asynchronous work. Static hosting and DNS routing do not provide task execution semantics. Synchronous processing would keep the client waiting and may consume service resources unnecessarily.<\/span><\/p>\n<h3><b>Question 123<\/b><\/h3>\n<p><b>A team wants to store application session data in memory for fast access across multiple instances of a distributed service. The data does not need to remain permanently available in a relational database. Which service should they consider?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">BigQuery<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Memorystore<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Artifact Registry<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Memorystore provides managed in-memory data stores that can be used for caching, session information, and other workloads requiring low-latency access. Using a centralized in-memory store can allow multiple application instances to access shared transient data without depending on memory local to a single instance. Cloud Storage is designed for objects, BigQuery supports analytical queries, and Artifact Registry stores software artifacts. For distributed applications that require fast access to shared temporary data, Memorystore provides an appropriate caching and session-storage option.<\/span><\/p>\n<h3><b>Question 124<\/b><\/h3>\n<p><b>A developer is building a service that must handle a sudden increase in requests by creating additional application instances automatically. Which cloud-native capability should the application architecture rely on?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Horizontal scaling<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Manual server cloning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Fixed process counts<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Local disk expansion<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Horizontal scaling increases application capacity by running additional instances of a workload rather than simply making one instance larger. Managed services such as Cloud Run can automatically adjust the number of running instances according to incoming demand and configured limits. This approach is well suited to stateless application architectures because requests can be distributed across multiple instances. Manual server cloning and fixed process counts provide less dynamic capacity management, while local disk expansion does not increase request-processing capacity. Horizontal scaling therefore supports applications that must respond efficiently to changing traffic levels.<\/span><\/p>\n<h3><b>Question 125<\/b><\/h3>\n<p><b>A developer is designing a Cloud Run service and wants each instance to process several requests concurrently, but only up to a defined application-tested limit. Which configuration controls this behavior?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Container concurrency<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Storage class<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Secret version<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS record<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Run container concurrency controls how many requests a single service instance can process simultaneously. Developers can choose an appropriate value based on application behavior, available CPU and memory, downstream dependencies, and performance testing. Higher concurrency may improve resource utilization for suitable workloads, while CPU-intensive or poorly parallelized applications may benefit from lower concurrency. Storage classes determine object storage characteristics, secret versions identify stored secret values, and DNS records control name resolution. Container concurrency is therefore the configuration directly responsible for controlling simultaneous request handling per Cloud Run instance.<\/span><\/p>\n<h3><b>Question 126<\/b><\/h3>\n<p><b>A developer wants to ensure that a container image deployed to production cannot unexpectedly change because a mutable image tag was updated later. Which reference should be used for deployment?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Repository name only<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Image digest<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Container hostname<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Build directory<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A container image digest identifies a specific immutable image content. Deploying an image by digest ensures that the application references the exact artifact that was tested and approved, even if a human-readable tag is later moved to another image. Mutable tags can change over time and may therefore introduce uncertainty into deployment reproducibility. A repository name alone does not identify a specific image version. Hostnames and build directories are also unrelated to artifact immutability. Using image digests supports deterministic deployments and improves traceability across application environments.<\/span><\/p>\n<h3><b>Question 127<\/b><\/h3>\n<p><b>A Cloud Build pipeline must execute builds in an environment with restricted network access and dedicated build infrastructure. Which Cloud Build capability is designed for this requirement?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Private pools<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud CDN<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firestore indexes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Pub\/Sub ordering keys<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Build private pools provide dedicated build execution environments that can be configured for workloads requiring greater control over network connectivity and build infrastructure. They are useful when organizations need builds to access private resources or operate within specific networking constraints. Cloud CDN manages content delivery, Firestore indexes support document queries, and Pub\/Sub ordering keys control message ordering. A private build pool can therefore help teams maintain controlled build execution while integrating application pipelines with resources that are not publicly accessible.<\/span><\/p>\n<h3><b>Question 128<\/b><\/h3>\n<p><b>A team needs to retain multiple versions of an application configuration file in Cloud Storage and wants to recover an accidentally overwritten object. Which feature should they enable?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Object versioning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Scheduler<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">API Gateway<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Profiler<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Storage Object Versioning preserves noncurrent versions of objects when they are replaced or deleted, depending on the configured behavior. This can help recover from accidental overwrites or deletions and provides a history of object versions. Developers should also consider lifecycle policies because retaining many versions can increase storage consumption and cost. Cloud Scheduler provides scheduled execution, API Gateway manages APIs, and Cloud Profiler analyzes application performance. For protecting stored objects against accidental replacement while maintaining recoverable previous versions, Object Versioning is the relevant Cloud Storage capability.<\/span><\/p>\n<h3><b>Question 129<\/b><\/h3>\n<p><b>A developer needs a database transaction that can atomically update several rows while maintaining relational constraints. Which Google Cloud database is designed around relational SQL transactions?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud SQL<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firestore<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Memorystore<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud SQL provides managed relational database engines that support SQL transactions, relational constraints, joins, and other features expected from traditional relational databases. Applications that require atomic updates across related rows and depend on relational integrity can use transactional capabilities provided by the selected database engine. Firestore uses a document model, Memorystore provides in-memory data storage, and Cloud Storage is an object storage service. Although Firestore also supports transactions, the requirement specifically emphasizes relational rows and constraints, making Cloud SQL the appropriate database model for this workload.<\/span><\/p>\n<h3><b>Question 130<\/b><\/h3>\n<p><b>A developer wants an API endpoint to accept requests only when the caller has a specific OAuth scope. What should the backend verify after authenticating the token?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">File extension<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Required authorization scope<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS hostname length<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Browser cache state<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Authentication establishes the identity represented by a credential, while authorization determines what that identity is permitted to do. When an API requires a particular OAuth scope, the backend should validate the token and verify that the required scope or equivalent permission is present before allowing the operation. Checking unrelated properties such as file extensions or browser cache state cannot establish authorization. A valid token without the necessary permission should not automatically grant access to protected functionality. Scope validation therefore helps enforce least-privilege access at the API boundary.<\/span><\/p>\n<h3><b>Question 131<\/b><\/h3>\n<p><b>A Cloud Run service needs to execute a containerized data-processing operation on demand, and the operation should be isolated from normal request-serving traffic. Which architecture is appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Run Job<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud CDN<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">API Gateway only<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Storage lifecycle rule<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Run Jobs provide an execution model for containerized workloads that run to completion rather than serving continuous HTTP traffic. They can be started on demand and are useful for data processing, migrations, batch transformations, and administrative operations. Separating such workloads from a request-serving Cloud Run service can make resource management and operational behavior easier to control. Cloud CDN handles content caching, API Gateway manages APIs, and Storage lifecycle rules manage object retention. A Cloud Run Job therefore matches an isolated, on-demand containerized processing workload.<\/span><\/p>\n<h3><b>Question 132<\/b><\/h3>\n<p><b>A developer is investigating slow application requests and needs to understand how a request travels through multiple services. Which observability capability provides distributed request tracing?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Trace<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Storage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Tasks<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Artifact Registry<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Trace helps developers analyze latency and follow requests as they move through distributed application components. Distributed tracing can reveal which service or operation contributes significant latency, making it useful when a user-facing request depends on multiple backend services. Logs can provide detailed event information, while metrics show aggregated behavior, but tracing specifically represents request paths and timing relationships. Cloud Storage stores objects, Cloud Tasks manages asynchronous tasks, and Artifact Registry stores artifacts. Cloud Trace therefore provides the specialized visibility required for analyzing distributed request latency.<\/span><\/p>\n<h3><b>Question 133<\/b><\/h3>\n<p><b>A developer wants to expose an application API through a managed gateway while keeping the backend implementation independent of the public API endpoint. Which architectural principle does this support?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Separation of API and backend concerns<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hard-coded network dependencies<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Local-only deployment<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Manual credential distribution<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Separating the public API layer from backend implementation allows the gateway to handle concerns such as request routing, authentication integration, and API configuration while backend services focus on business logic. This separation can make backend services easier to evolve without requiring clients to understand internal service locations. It can also centralize API policies and provide a consistent external interface. Hard-coded network dependencies and manual credential distribution increase coupling and operational risk. A managed gateway therefore supports a clearer separation between external API concerns and internal application implementation.<\/span><\/p>\n<h3><b>Question 134<\/b><\/h3>\n<p><b>A Firestore application has many clients updating the same document. The developer wants to avoid overwriting newer data with a stale client copy. Which technique should be considered?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Blind overwrite<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Optimistic concurrency using transaction logic<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disable all writes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Duplicate the database<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Optimistic concurrency allows an application to detect conflicting updates rather than blindly replacing data based on an outdated client copy. Firestore transactions can read the current document state, perform application logic, and retry when another concurrent change causes a conflict. This helps preserve correctness when multiple clients modify related data at nearly the same time. Blind overwrites can lose newer updates, while disabling writes is not a practical solution. Duplicating the database also does not resolve concurrent modification conflicts. Transaction-based concurrency control is therefore appropriate for this scenario.<\/span><\/p>\n<h3><b>Question 135<\/b><\/h3>\n<p><b>A developer wants to reduce database load when many users repeatedly request the same relatively stable information. Which application pattern can help serve repeated reads faster?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Caching<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Rebuilding the container<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increasing DNS TTL only<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disabling authentication<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Caching stores frequently accessed data in a faster-access layer so that repeated requests do not always require a trip to the primary database. A managed service such as Memorystore can provide an in-memory cache for appropriate workloads. Developers should consider expiration, invalidation, consistency requirements, and cache size when designing the solution. Rebuilding containers does not improve repeated database reads, DNS TTL affects name resolution rather than application data, and disabling authentication creates a security problem. Caching can therefore reduce database load and improve response latency for suitable read-heavy workloads.<\/span><\/p>\n<h3><b>Question 136<\/b><\/h3>\n<p><b>A team wants to prevent a Kubernetes deployment from consuming more CPU than intended during an unexpected traffic spike. Which configuration provides a maximum CPU boundary for containers?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resource request<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resource limit<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">ConfigMap<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Service selector<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A Kubernetes resource limit establishes the maximum amount of a resource that a container is permitted to consume. For CPU, configuring an appropriate limit can prevent a workload from consuming more CPU than intended and affecting other workloads sharing the node. A resource request serves a different purpose: it indicates the amount of CPU or memory Kubernetes should consider when scheduling the pod. ConfigMaps store configuration data, and service selectors identify backend pods. Resource limits therefore provide the maximum resource boundary described in the scenario.<\/span><\/p>\n<h3><b>Question 137<\/b><\/h3>\n<p><b>A Cloud Build pipeline needs to compile an application, run tests, and produce a deployable artifact using repeatable automated steps. Where should these build instructions be defined?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Build configuration<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS configuration<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Cloud Storage lifecycle policy<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Firestore security rule only<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Cloud Build uses build configuration to define the steps required to build and test an application and produce its artifacts. The configuration can specify build steps, commands, images, substitutions, and other pipeline behavior appropriate to the project&#8217;s workflow. Keeping these instructions in a controlled configuration makes the build process repeatable and easier to automate through triggers. DNS settings control name resolution, Storage lifecycle policies govern object retention, and Firestore security rules control database access. A build configuration is therefore the appropriate place to define automated compilation, testing, and artifact-generation steps.<\/span><\/p>\n<h3><b>Question 138<\/b><\/h3>\n<p><b>A service running in GKE must access Cloud Storage without storing a downloadable service account private key inside its container. Which approach should the team use?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Embed a private key in the image<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use workload identity-based access<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Make the bucket public<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Store the key in application comments<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Workload identity-based access allows GKE workloads to authenticate to Google Cloud services using managed workload identities instead of distributing long-lived service account private keys. This reduces the risk of credentials being copied into images, repositories, configuration files, or other locations. The workload can receive only the permissions necessary to access the required Cloud Storage resources. Making a bucket public removes appropriate access controls, while embedding or documenting private keys creates significant security exposure. Workload identity therefore provides a more secure identity-based mechanism for GKE applications accessing Google Cloud resources.<\/span><\/p>\n<h3><b>Question 139<\/b><\/h3>\n<p><b>A Pub\/Sub subscription processes messages from a producer that occasionally publishes temporary failures. The team wants messages to remain available for consumers that are temporarily unavailable. Which subscription characteristic should be configured appropriately?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Message retention<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DNS forwarding<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Container concurrency<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Image digest<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Pub\/Sub message retention determines how long messages can remain available for a subscription under the service&#8217;s supported retention behavior. Appropriate retention settings can help applications recover when consumers are temporarily unavailable or when messages need to be replayed according to the configured architecture. Retention should be selected based on recovery requirements, storage considerations, and the application&#8217;s processing model. DNS forwarding does not control message availability, container concurrency affects Cloud Run request handling, and image digests identify container artifacts. Message retention is therefore the relevant Pub\/Sub configuration for preserving messages for later consumption.<\/span><\/p>\n<h3><b>Question 140<\/b><\/h3>\n<p><b>A developer is preparing a production release and wants to ensure that the exact artifact tested in staging is the artifact deployed to production. Which practice provides the strongest artifact-level consistency?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Rebuild the source separately in production<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use a different image tag in production<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Promote the same immutable artifact<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Modify dependencies after staging<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Promoting the same immutable artifact from staging to production helps ensure that production runs exactly what was previously tested. Container image digests provide a strong way to identify immutable image content, avoiding ambiguity associated with mutable tags. Rebuilding the source in production can produce differences because dependencies, build environments, or source state may have changed. Modifying dependencies after testing also invalidates the test results. Using the same validated artifact therefore improves deployment consistency, traceability, and confidence that production behavior corresponds to the artifact evaluated during staging.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Google Professional Cloud Developer Exam Dumps and Practice Test Dumps. &nbsp; Question 121 A developer needs to ensure that an application can safely retry a database operation after a temporary network failure without creating duplicate business records. Which application design principle is most important? Idempotency Randomized logging Static IP addressing Client-side rendering Correct [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23456"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=23456"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23456\/revisions"}],"predecessor-version":[{"id":23457,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/23456\/revisions\/23457"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=23456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=23456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=23456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}