- (Exam Topic 2)
Your team is developing unit tests for Cloud Function code. The code is stored in a Cloud Source Repositories repository. You are responsible for implementing the tests. Only a specific service account has the necessary permissions to deploy the code to Cloud Functions. You want to ensure that the code cannot be deployed without first passing the tests. How should you configure the unit testing process?

1. A. Configure Cloud Build to deploy the Cloud Functio
2. B. If the code passes the tests, a deployment approval is sent to you.
3. C. Configure Cloud Build to deploy the Cloud Function, using the specific service account as the build agen
4. D. Run the unit tests after successful deployment.
5. E. Configure Cloud Build to run the unit test
6. F. If the code passes the tests, the developer deploys the Cloud Function.
7. G. Configure Cloud Build to run the unit tests, using the specific service account as the build agen
8. H. If the code passes the tests, Cloud Build deploys the Cloud Function.

Correct Answer: D

- (Exam Topic 2)
Your team develops services that run on Google Cloud. You need to build a data processing service and will use Cloud Functions. The data to be processed by the function is sensitive. You need to ensure that invocations can only happen from authorized services and follow Google-recommended best practices for securing functions. What should you do?

1. A. Enable Identity-Aware Proxy in your projec
2. B. Secure function access using its permissions.
3. C. Create a service account with the Cloud Functions Viewer rol
4. D. Use that service account to invoke the function.
5. E. Create a service account with the Cloud Functions Invoker rol
6. F. Use that service account to invoke the function.
7. G. Create an OAuth 2.0 client ID for your calling service in the same project as the function you want to secur
8. H. Use those credentials to invoke the function.

Correct Answer: C
Reference:
https://medium.com/google-cloud/how-to-securely-invoke-a-cloud-function-from-google-kubernetes-engine-run

- (Exam Topic 2)
You have an application that uses an HTTP Cloud Function to process user activity from both desktop browser and mobile application clients. This function will serve as the endpoint for all metric submissions using HTTP POST.
Due to legacy restrictions, the function must be mapped to a domain that is separate from the domain requested by users on web or mobile sessions. The domain for the Cloud Function is https://fn.example.com. Desktop and mobile clients use the domain https://www.example.com. You need to add a header to the function’s HTTP response so that only those browser and mobile sessions can submit metrics to the Cloud Function. Which response header should you add?

1. A. Access-Control-Allow-Origin: *
2. B. Access-Control-Allow-Origin: https://*.example.com
3. C. Access-Control-Allow-Origin: https://fn.example.com
4. D. Access-Control-Allow-origin: https://www.example.com

Correct Answer: D

- (Exam Topic 2)
Your company stores their source code in a Cloud Source Repositories repository. Your company wants to build and test their code on each source code commit to the repository and requires a solution that is managed and has minimal operations overhead.
Which method should they use?

1. A. Use Cloud Build with a trigger configured for each source code commit.
2. B. Use Jenkins deployed via the Google Cloud Platform Marketplace, configured to watch for source code commits.
3. C. Use a Compute Engine virtual machine instance with an open source continuous integration tool, configured to watch for source code commits.
4. D. Use a source code commit trigger to push a message to a Cloud Pub/Sub topic that triggers an App Engine service to build the source code.

Correct Answer: A
https://cloud.google.com/build/docs/automating-builds/create-manage-triggers#:~:text=A%20Cloud%20Build%

- (Exam Topic 2)
Your operations team has asked you to create a script that lists the Cloud Bigtable, Memorystore, and Cloud SQL databases running within a project. The script should allow users to submit a filter expression to limit the results presented. How should you retrieve the data?

1. A. Use the HBase API, Redis API, and MySQL connection to retrieve database list
2. B. Combine the results, and then apply the filter to display the results
3. C. Use the HBase API, Redis API, and MySQL connection to retrieve database list
4. D. Filter the results individually, and then combine them to display the results
5. E. Run gcloud bigtable instances list, gcloud redis instances list, and gcloud sql databases lis
6. F. Use a filter within the application, and then display the results
7. G. Run gcloud bigtable instances list, gcloud redis instances list, and gcloud sql databases lis
8. H. Use --filter flag with each command, and then display the results

Correct Answer: D
https://cloud.google.com/sdk/gcloud/reference/topic/filters
Most gcloud commands return a list of resources on success. By default they are pretty-printed on the standard output. The --format=NAME[ATTRIBUTES](PROJECTION) and --filter=EXPRESSION flags along with projections can be used to format and change the default output to a more meaningful result. Use the --format flag to change the default output format of a command. For details run $ gcloud topic formats.