- (Exam Topic 2)
You are developing an application that reads credit card data from a Pub/Sub subscription. You have written code and completed unit testing. You need to test the Pub/Sub integration before deploying to Google Cloud. What should you do?

1. A. Create a service to publish messages, and deploy the Pub/Sub emulato
2. B. Generate random content in the publishing service, and publish to the emulator.
3. C. Create a service to publish messages to your applicatio
4. D. Collect the messages from Pub/Sub in production, and replay them through the publishing service.
5. E. Create a service to publish messages, and deploy the Pub/Sub emulato
6. F. Collect the messages from Pub/Sub in production, and publish them to the emulator.
7. G. Create a service to publish messages, and deploy the Pub/Sub emulato
8. H. Publish a standard set of testing messages from the publishing service to the emulator.

Correct Answer: D

- (Exam Topic 2)
You recently deployed a Go application on Google Kubernetes Engine (GKE). The operations team has noticed that the application's CPU usage is high even when there is low production traffic. The operations team has asked you to optimize your application's CPU resource consumption. You want to determine which Go functions consume the largest amount of CPU. What should you do?

1. A. Deploy a Fluent Bit daemonset on the GKE cluster to log data in Cloud Loggin
2. B. Analyze the logs to get insights into your application code’s performance.
3. C. Create a custom dashboard in Cloud Monitoring to evaluate the CPU performance metrics of your application.
4. D. Connect to your GKE nodes using SS
5. E. Run the top command on the shell to extract the CPU utilization of your application.
6. F. Modify your Go application to capture profiling dat
7. G. Analyze the CPU metrics of your application in flame graphs in Profiler.

Correct Answer: D
https://cloud.google.com/profiler/docs/about-profiler
Cloud Profiler is a statistical, low-overhead profiler that continuously gathers CPU usage and
memory-allocation information from your production applications. It attributes that information to the source code that generated it, helping you identify the parts of your application that are consuming the most resources, and otherwise illuminating your applications performance characteristics.
https://cloud.google.com/profiler/docs

- (Exam Topic 2)
Your team develops services that run on Google Cloud. You want to process messages sent to a Pub/Sub topic, and then store them. Each message must be processed exactly once to avoid duplication of data and any data conflicts. You need to use the cheapest and most simple solution. What should you do?

1. A. Process the messages with a Dataproc job, and write the output to storage.
2. B. Process the messages with a Dataflow streaming pipeline using Apache Beam's PubSubIO package, and write the output to storage.
3. C. Process the messages with a Cloud Function, and write the results to a BigQuery location where you can run a job to deduplicate the data.
4. D. Retrieve the messages with a Dataflow streaming pipeline, store them in Cloud Bigtable, and use another Dataflow streaming pipeline to deduplicate messages.

Correct Answer: B
https://cloud.google.com/dataflow/docs/concepts/streaming-with-cloud-pubsub

- (Exam Topic 2)
You are developing a microservice-based application that will be deployed on a Google Kubernetes Engine cluster. The application needs to read and write to a Spanner database. You want to follow security best practices while minimizing code changes. How should you configure your application to retrieve Spanner credentials?

1. A. Configure the appropriate service accounts, and use Workload Identity to run the pods.
2. B. Store the application credentials as Kubernetes Secrets, and expose them as environment variables.
3. C. Configure the appropriate routing rules, and use a VPC-native cluster to directly connect to the database.
4. D. Store the application credentials using Cloud Key Management Service, and retrieve them whenever a database connection is made.

Correct Answer: A
https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity

- (Exam Topic 1)
For this question, refer to the HipLocal case study.
HipLocal's application uses Cloud Client Libraries to interact with Google Cloud. HipLocal needs to configure authentication and authorization in the Cloud Client Libraries to implement least privileged access for the application. What should they do?

1. A. Create an API ke
2. B. Use the API key to interact with Google Cloud.
3. C. Use the default compute service account to interact with Google Cloud.
4. D. Create a service account for the applicatio
5. E. Export and deploy the private key for the applicatio
6. F. Use the service account to interact with Google Cloud.
7. G. Create a service account for the application and for each Google Cloud API used by the application.Export and deploy the private keys used by the applicatio
8. H. Use the service account with one Google Cloud API to interact with Google Cloud.

Correct Answer: A