- (Exam Topic 1)
HipLocal is configuring their access controls.
Which firewall configuration should they implement?

1. A. Block all traffic on port 443.
2. B. Allow all traffic into the network.
3. C. Allow traffic on port 443 for a specific tag.
4. D. Allow all traffic on port 443 into the network.

Correct Answer: D

- (Exam Topic 2)
You are planning to add unit tests to your application. You need to be able to assert that published Pub/Sub messages are processed by your subscriber in order. You want the unit tests to be cost-effective and reliable. What should you do?

1. A. Implement a mocking framework.
2. B. Create a topic and subscription for each tester.
3. C. Add a filter by tester to the subscription.
4. D. Use the Pub/Sub emulator.

Correct Answer: D
https://cloud.google.com/pubsub/docs/emulator, "Testing apps locally with the emulator".

- (Exam Topic 2)
Your development team has built several Cloud Functions using Java along with corresponding integration and service tests. You are building and deploying the functions and launching the tests using Cloud Build. Your Cloud Build job is reporting deployment failures immediately after successfully validating the code. What should you do?

1. A. Check the maximum number of Cloud Function instances.
2. B. Verify that your Cloud Build trigger has the correct build parameters.
3. C. Retry the tests using the truncated exponential backoff polling strategy.
4. D. Verify that the Cloud Build service account is assigned the Cloud Functions Developer role.

Correct Answer: D
https://cloud.google.com/build/docs/securing-builds/configure-access-for-cloud-build-service-account

- (Exam Topic 2)
Your service adds text to images that it reads from Cloud Storage. During busy times of the year, requests to Cloud Storage fail with an HTTP 429 "Too Many Requests" status code.
How should you handle this error?

1. A. Add a cache-control header to the objects.
2. B. Request a quota increase from the GCP Console.
3. C. Retry the request with a truncated exponential backoff strategy.
4. D. Change the storage class of the Cloud Storage bucket to Multi-regional.

Correct Answer: C
Reference: https://developers.google.com/gmail/api/v1/reference/quota

- (Exam Topic 2)
You recently migrated an on-premises monolithic application to a microservices application on Google Kubernetes Engine (GKE). The application has dependencies on backend services on-premises, including a CRM system and a MySQL database that contains personally identifiable information (PII). The backend services must remain on-premises to meet regulatory requirements.
You established a Cloud VPN connection between your on-premises data center and Google Cloud. You notice that some requests from your microservices application on GKE to the backend services are failing due to latency issues caused by fluctuating bandwidth, which is causing the application to crash. How should you address the latency issues?

1. A. Use Memorystore to cache frequently accessed PII data from the on-premises MySQL database
2. B. Use Istio to create a service mesh that includes the microservices on GKE and the on-premises services
3. C. Increase the number of Cloud VPN tunnels for the connection between Google Cloud and the on-premises services
4. D. Decrease the network layer packet size by decreasing the Maximum Transmission Unit (MTU) value from its default value on Cloud VPN

Correct Answer: C
https://cloud.google.com/network-connectivity/docs/vpn/concepts/choosing-networks-routing#route-alignment