What is the purpose of Direct VPC Egress?

To allow serverless services to access resources in a VPC

What is the purpose of Application Default Credentials (ADC)?

To provide a consistent way for applications to authenticate to Google Cloud services

To scan applications for vulnerabilities

What is the purpose of assigning IAM roles to a service account?

To grant the service account permissions to access Google Cloud resources

A company runs a multi-tier application on GKE. The frontend pods need to communicate with the backend pods, but the backend pods should not be accessible from any other pod in the cluster. What is the most direct way to enforce this security boundary?

Use Cloud Service Mesh to enable mTLS and define an AuthorizationPolicy that allows only the frontend service.

Assign different service accounts to the frontend and backend and use IAM roles to restrict access.

Place the backend pods in a different VPC and use VPC peering to connect only the frontend.

Create a Kubernetes Network Policy that allows ingress to the backend pods only from the frontend pods.

What is the primary function of Cloud Key Management Service (KMS)?

To create, rotate, and manage encryption keys

Google CloudProfessional Cloud Developer

Domain 1Objective 2

1.2 Designing Secure Applications PROFESSIONAL-CLOUD-DEVELOPER Practice Questions (Page 7)

Part of the Designing highly scalable, secure, and reliable cloud-native applications domain, which accounts for ~32% of the PROFESSIONAL-CLOUD-DEVELOPER exam.

52questions here

11free pages

19concepts

~32%of the exam

19 Concepts in This Objective

Cloud Storage Object Lifecycle Management
Cloud Storage Retention Policies and Locks
Identity-Aware Proxy (IAP)
Web Security Scanner
Artifact Analysis Vulnerability Scanning
Security Command Center
Secret Manager
Cloud Key Management Service (KMS)
Workload Identity Federation
Application Default Credentials (ADC)
JSON Web Tokens (JWT) and OAuth 2.0
Cloud SQL Auth Proxy and AlloyDB Auth Proxy
Identity Platform
IAM Roles for Service Accounts
Cloud Service Mesh
Kubernetes Network Policies
Direct VPC Egress and Private Service Connectivity
Least Privileged Access
Binary Authorization

Questions 31–35

31foundation · easy
What is the purpose of Direct VPC Egress?
Select an answer first
32foundation · easy
What is the purpose of Application Default Credentials (ADC)?
Select an answer first
33foundation · easy
What is the purpose of assigning IAM roles to a service account?
Select an answer first
34application · medium
A company runs a multi-tier application on GKE. The frontend pods need to communicate with the backend pods, but the backend pods should not be accessible from any other pod in the cluster. What is the most direct way to enforce this security boundary?
Select an answer first
35foundation · easy
What is the primary function of Cloud Key Management Service (KMS)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-DEVELOPER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DEVELOPER” is a trademark of its owner, used for identification only.