A developer is building a serverless application that needs to read and write data to Firestore. The application runs on Cloud Run. What is the recommended way to authenticate the application to Firestore?

Create a service account key and store it as an environment variable

Use the default service account of Cloud Run and grant it the necessary IAM roles on Firestore

Use an API key for authentication

Use a service account key and download it to the container at build time

A developer is writing a Java application that will connect to a Cloud SQL for MySQL instance. Which authentication method is recommended for a production application running on Compute Engine?

Use the Cloud SQL Auth proxy with a service account attached to the Compute Engine instance

Use the instance's root user and password stored in the application code

Connect directly using the instance's public IP address and a self-signed SSL certificate

Use the instance's private IP address with no additional authentication

A team has a Pub/Sub subscription that receives messages from a topic. The subscriber processes messages and then acknowledges them. They want to ensure that messages are processed in order. What should they do?

Enable message ordering on the subscription and use the same ordering key for related messages

Use a Cloud Dataflow pipeline to process messages in order

Use a pull subscription and process messages sequentially

Use a push subscription and process messages sequentially

A company has a microservice that publishes messages to Pub/Sub. The messages contain sensitive data and must be encrypted in transit and at rest. The team also wants to minimize the risk of unauthorized access to the messages. What should they do?

Encrypt the message payload in the application before publishing

Use a separate topic for each message to isolate access

Use customer-managed encryption keys (CMEK) for the topic and set fine-grained IAM roles

Use Pub/Sub's default encryption and rely on IAM for access control

Google CloudProfessional Cloud Developer

Domain 4Objective 1

4.1 Integrating Applications with Data and Storage Services PROFESSIONAL-CLOUD-DEVELOPER Practice Questions (Page 4)

Part of the Integrating applications with Google Cloud services domain, which accounts for ~21% of the PROFESSIONAL-CLOUD-DEVELOPER exam.

21questions here

5free pages

5concepts

~21%of the exam

Questions 16–20

16application · medium
A developer is building a serverless application that needs to read and write data to Firestore. The application runs on Cloud Run. What is the recommended way to authenticate the application to Firestore?
Select an answer first
17foundation · easy
A developer is writing a Java application that will connect to a Cloud SQL for MySQL instance. Which authentication method is recommended for a production application running on Compute Engine?
Select an answer first
18foundation · easy
A developer wants to write multiple documents to Firestore in a single atomic operation. Which Firestore feature should they use?
Select an answer first
19application · medium
A team has a Pub/Sub subscription that receives messages from a topic. The subscriber processes messages and then acknowledges them. They want to ensure that messages are processed in order. What should they do?
Select an answer first
20expert · hard
A company has a microservice that publishes messages to Pub/Sub. The messages contain sensitive data and must be encrypted in transit and at rest. The team also wants to minimize the risk of unauthorized access to the messages. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-DEVELOPER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-DEVELOPER” is a trademark of its owner, used for identification only.