1.3 Determine How Applications Will Connect to the Database PROFESSIONAL-CLOUD-DATABASE-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which IAM role is most appropriate for a user who needs full administrative control over a Cloud SQL instance, including creating and managing databases and users?

   • ACloud SQL Admin
   • BCloud SQL Editor
   • CCloud SQL Viewer
   • DCloud SQL Client
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A healthcare organization uses Cloud SQL for PostgreSQL to store patient data. Compliance requires that only specific application service accounts can access the database, and all access attempts must be logged for audit. The organization wants to avoid managing individual database passwords. What should you do?

   • AUse the Cloud SQL Auth Proxy and rely on its logs for auditing.
   • BGrant the Cloud SQL Client IAM role to the service accounts and connect using the instance's public IP.
   • CCreate a single database user with a strong password and share it among all applications.
   • DCreate database users for each service account and grant them the necessary privileges. Enable Cloud Audit Logs for Cloud SQL.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of firewall rules in the context of database connectivity?

   • ATo automatically scale database resources.
   • BTo restrict which IP addresses and networks can connect to the database.
   • CTo manage database user authentication.
   • DTo encrypt data in transit between the application and database.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A team is designing a new application that will use Cloud SQL for MySQL. They expect a low number of concurrent users but want to minimize latency for each request. They are considering whether to use connection pooling. What should they do?

   • AUse connection pooling in the application to reuse connections and reduce latency.
   • BIncrease the database's max_connections to handle potential spikes.
   • CDo not use connection pooling because the number of users is low.
   • DUse the Cloud SQL Auth Proxy to handle connections.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of setting up alerts on audit logs?

   • ATo automatically fix security issues.
   • BTo notify administrators of suspicious or critical activities.
   • CTo reduce the volume of logs.
   • DTo encrypt logs in transit.
   Reveal Solution Discussion Select an answer first