Free Google Professional-Cloud-Developer Exam Questions

Become Google Certified with updated Professional-Cloud-Developer exam questions and correct answers

Page: 1 / 125

Total 623 Questions | Updated On: Feb 08, 2026

Add To Cart

Question 1

What is the purpose of predefined roles in GCP?

A : To create custom roles with specific permissions

B : To quickly start working in GCP with broad permissions

C : To allow different activities focused directly on the capabilities offered by the service

D : To restrict access to a particular resource

Answer: B

Question 2

A CI/CD pipeline is being developed, which includes a version control system, Cloud Build, and Container Registry. Whenever a new tag is added to the repository, a Cloud Build job is activated. This job performs unit tests on the latest code, creates a new Docker container image, and saves it to the Container Registry. The final phase of the pipeline is to deploy the updated container to the production Google Kubernetes Engine (GKE) cluster.

What options are available to choose a tool and deployment strategy that satisfies these conditions:

• No downtime should be experienced

• Automated testing should be comprehensive

• Testing before release should be possible

• Quick rollbacks should be supported

A : Trigger a Spinnaker pipeline configured as an A/B test of your new code and, if successful, deploy the container to production.

B : Trigger a Cloud Build job that utilizes Kubernetes CLI tools to deploy your new container to your GKE cluster, allowing for a canary test.

C : Trigger a Cloud Build job that utilizes Kubernetes CLI tools to deploy your new container to your GKE cluster, allowing for a shadow test.

D : Trigger a Spinnaker pipeline configured as a canary test of your new code and, if successful, deploy the container to production.

Answer: C

Question 3

Your team has created an application that is hosted on a Google Kubernetes Engine (GKE) cluster. You need to connect the application to a legacy REST service that is deployed in two GKE clusters in two different regions. You want to connect your application to the target service in a way that is resilient. You also want to be able to run health checks on the legacy service on a separate port. How should you set up the connection? (Choose two.)

A : Traffic Director with a sidecar proxy to connect the application to the service.

B : a proxyless Traffic Director configuration to connect the application to the service.

C : nfigure the legacy service's firewall to allow health checks originating from the proxy.

D : nfigure the legacy service's firewall to allow health checks originating from the application.

E : nfigure the legacy service's firewall to allow health checks originating from the Traffic Director control plane.

Answer: A,C

Question 4

The new version of your containerized application has been tested and is ready to deploy to production on Google Kubemetes Engine. You were not able to fully load-test the new version in pre-production environments. and you need to make sure that it does not have performance problems once deployed Your deployment must be automated. What should you do?

A : Cloud Load Balancing to slowly ramp up traffic between versions. Use Cloud Monitoring to look for performance issues.

B : ploy the application via a continuous delivery pipeline using canary deployments. Use Cloud Monitoring to look for performance issues. and ramp up traffic as the metrics support it.

C : ploy the application via a continuous delivery pipeline using blue/green deployments. Use Cloud Monitoring to look for performance issues, and launch fully when the metrics support it.

D : ploy the application using kubectl and set the spec. updateStrategv. type to RollingUpdate. Use Cloud Monitoring to look for performance issues, and run the kubectl rollback command if there are any issues.

Answer: A

Question 5

The task at hand is to create a microservice-based application on Google Kubernetes Engine (GKE). The application requires access to various Google Cloud APIs. Two of these services must be able to access these APIs.

What is the recommended approach for implementing authentication of these services in the cluster according to Google's best practices?

A : Store the Google service account keys in a central secret management service.

B : Enable Workload Identity in the cluster via the gcloud command-line tool.

C : Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.

D : Use the service account attached to the GKE node.

E : Access the Google service account keys from a secret management service.

Answer: C,E

Page: 1 / 125

Total 623 Questions | Updated On: Feb 08, 2026

Add To Cart