Google Professional-Cloud-Developer 問題集

質問 1：
You are building a mobile application that will store hierarchical data structures in a database. The application will enable users working offline to sync changes when they are back online. A backend service will enrich the data in the database using a service account. The application is expected to be very popular and needs to scale seamlessly and securely. Which database and IAM role should you use?
A. Use Firestore in Datastore mode and assign the roles/datastore.viewer role to the service account.
B. Use Cloud SQL, and assign the roles/cloudsql.editor role to the service account.
C. Use Bigtable, and assign the roles/bigtable.viewer role to the service account.
D. Use Firestore in Native mode and assign the roles/datastore.user role to the service account.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are parsing a log file that contains three columns: a timestamp, an account number (a string), and a transaction amount (a number). You want to calculate the sum of all transaction amounts for each unique account number efficiently.
Which data structure should you use?
A. A two-dimensional array
B. A comma-delimited string
C. A hash table
D. A linked list
正解：C

質問 3：
You have an analytics application that runs hundreds of queries on BigQuery every few minutes using BigQuery API. You want to find out how much time these queries take to execute. What should you do?
A. Use Stackdriver Monitoring to plot query execution times.
B. Use Stackdriver Trace to plot API execution time.
C. Use Stackdriver Trace to plot query execution time.
D. Use Stackdriver Monitoring to plot slot usage.
正解：A

質問 4：
You are using Cloud Build build to promote a Docker image to Development, Test, and Production environments. You need to ensure that the same Docker image is deployed to each of these environments. How should you identify the Docker image in your build?
A. Use the latest Docker image tag.
B. Use the digest of the Docker image.
C. Use a unique Docker image name.
D. Use a semantic version Docker image tag.
正解：D

質問 5：
Your team is responsible for maintaining an application that aggregates news articles from many different sources. Your monitoring dashboard contains publicly accessible real-time reports and runs on a Compute Engine instance as a web application. External stakeholders and analysts need to access these reports via a secure channel without authentication. How should you configure this secure channel?
A. Add an HTTP(S) load balancer in front of the monitoring dashboard. Set up a Google-managed SSL certificate on the load balancer for traffic encryption.
B. Use Cloud Scheduler to trigger Cloud Build every hour to create an export from the reports. Store the reports in a public Cloud Storage bucket.
C. Add a public IP address to the instance. Use the service account key of the instance to encrypt the traffic.
D. Add an HTTP(S) load balancer in front of the monitoring dashboard. Configure Identity-Aware Proxy to secure the communication channel.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Your team develops services that run on Google Kubernetes Engine. Your team's code is stored in Cloud Source Repositories. You need to quickly identify bugs in the code before it is deployed to production. You want to invest in automation to improve developer feedback and make the process as efficient as possible. What should you do?
A. Use Cloud Build to automate building container images from code based on forked versions.
B. Use Spinnaker to automate deploying container images to the production environment.
C. Use Spinnaker to automate building container images from code based on Git tags.
D. Use Cloud Build to automate building container images from code based on Git tags.
正解：C

質問 7：
Your data is stored in Cloud Storage buckets. Fellow developers have reported that data downloaded from Cloud Storage is resulting in slow API performance. You want to research the issue to provide details to the GCP support team. Which command should you run?
A. gcloud compute scp example-instance:~/test-data -o output.json gs://my-bucket
B. gsutil test -o output.json gs://my-bucket
C. gsutil perfdiag -o output.json gs://my-bucket
D. gcloud services test -o output.json gs://my-bucket
正解：C

質問 8：
You manage an application that runs in a Compute Engine instance. You also have multiple backend services executing in stand-alone Docker containers running in Compute Engine instances. The Compute Engine instances supporting the backend services are scaled by managed instance groups in multiple regions. You want your calling application to be loosely coupled. You need to be able to invoke distinct service implementations that are chosen based on the value of an HTTP header found in the request. Which Google Cloud feature should you use to invoke the backend services?
A. Internal HTTP(S) Load Balancing
B. Anthos Service Mesh
C. Traffic Director
D. Service Directory
正解：A

質問 9：
Your team is developing an application in Google Cloud that executes with user identities maintained by Cloud Identity. Each of your application's users will have an associated Pub/Sub topic to which messages are published, and a Pub/Sub subscription where the same user will retrieve published messages. You need to ensure that only authorized users can publish and subscribe to their own specific Pub/Sub topic and subscription. What should you do?

A. Configure the application to run as a service account that has the pubsub.publisher and pubsub.subscriber roles.
B. Grant the user identity a custom role that contains the pubsub.topics.create and pubsub.subscriptions.create permissions.
C. Grant the user identity the pubsub.publisher and pubsub.subscriber roles at the project level.
D. Bind the user identity to the pubsub.publisher and pubsub.subscriber roles at the resource level.
正解：B