Google Professional Cloud Developer Practice Exams
Last updated on Oct 24,2026- Exam Code: Professional Cloud Developer
- Exam Name: Professional Cloud Developer
- Certification Provider: Google
- Latest update: Oct 24,2026
Your application is deployed in a Google Kubernetes Engine (GKE) cluster. You want to expose this application publicly behind a Cloud Load Balancing HTTP(S) load balancer.
What should you do?
- A . Configure a GKE Ingress resource.
- B . Configure a GKE Service resource.
- C . Configure a GKE Ingress resource with type: LoadBalancer.
- D . Configure a GKE Service resource with type: LoadBalancer.
A
Explanation:
Reference: https://cloud.google.com/kubernetes-engine/docs/concepts/ingress
You are developing an application that will allow clients to download a file from your website for a specific period of time.
How should you design the application to complete this task while following Google-recommended best practices?
- A . Configure the application to send the file to the client as an email attachment.
- B . Generate and assign a Cloud Storage-signed URL for the file. Make the URL available for the client to download.
- C . Create a temporary Cloud Storage bucket with time expiration specified, and give download permissions to the bucket. Copy the file, and send it to the client.
- D . Generate the HTTP cookies with time expiration specified. If the time is valid, copy the file from the Cloud Storage bucket, and make the file available for the client to download.
Your application performs well when tested locally, but it runs significantly slower when you deploy it to App Engine standard environment. You want to diagnose the problem.
What should you do?
- A . File a ticket with Cloud Support indicating that the application performs faster locally.
- B . Use Stackdriver Debugger Snapshots to look at a point-in-time execution of the application.
- C . Use Stackdriver Trace to determine which functions within the application have higher latency.
- D . Add logging commands to the application and use Stackdriver Logging to check where the latency problem occurs.
You are responsible for deploying a new API.
That API will have three different URL paths:
• https://yourcompany.com/students
• https://yourcompany.com/teachers
• https://yourcompany.com/classes
You need to configure each API URL path to invoke a different function in your code.
What should you do?
- A . Create one Cloud Function as a backend service exposed using an HTTPS load balancer.
- B . Create three Cloud Functions exposed directly.
- C . Create one Cloud Function exposed directly.
- D . Create three Cloud Functions as three backend services exposed using an HTTPS load balancer.
D
Explanation:
https://cloud.google.com/load-balancing/docs/https/setup-global-ext-https-serverless
You are developing an application that needs to store files belonging to users in Cloud Storage. You want each user to have their own subdirectory in Cloud Storage. When a new user is created, the corresponding empty subdirectory should also be created.
What should you do?
- A . Create an object with the name of the subdirectory ending with a trailing slash (‘/’) that is zero bytes in length.
- B . Create an object with the name of the subdirectory, and then immediately delete the object within that subdirectory.
- C . Create an object with the name of the subdirectory that is zero bytes in length and has WRITER access control list permission.
- D . Create an object with the name of the subdirectory that is zero bytes in length. Set the Content-Type metadata to CLOUDSTORAGE_FOLDER.
A
Explanation:
https://cloud.google.com/storage/docs/folders
If you create an empty folder using the Google Cloud console, Cloud Storage creates a zero-byte object as a placeholder. For example, if you create a folder called folder in a bucket called my-bucket, a zero- byte object called gs://my-bucket/folder/ is created. This placeholder is discoverable by other tools when listing the objects in the bucket, for example when using the gsutil ls command.
You manage your company’s ecommerce platform’s payment system, which runs on Google Cloud. Your company must retain user logs for 1 year for internal auditing purposes and for 3 years to meet compliance requirements. You need to store new user logs on Google Cloud to minimize on-premises storage usage and ensure that they are easily searchable. You want to minimize effort while ensuring that the logs are stored correctly.
What should you do?
- A . Store the logs in a Cloud Storage bucket with bucket lock turned on.
- B . Store the logs in a Cloud Storage bucket with a 3-year retention period.
- C . Store the logs in Cloud Logging as custom logs with a custom retention period.
- D . Store the logs in a Cloud Storage bucket with a 1-year retention period. After 1 year, move the logs to another bucket with a 2-year retention period.
C
Explanation:
https://cloud.google.com/logging/docs/buckets#custom-retention
You plan to deploy a new application revision with a Deployment resource to Google Kubernetes Engine (GKE) in production. The container might not work correctly. You want to minimize risk in case there are issues after deploying the revision. You want to follow Google-recommended best practices.
What should you do?
- A . Perform a rolling update with a PodDisruptionBudget of 80%.
- B . Perform a rolling update with a HorizontalPodAutoscaler scale-down policy value of 0.
- C . Convert the Deployment to a StatefulSet, and perform a rolling update with a PodDisruptionBudget of 80%.
- D . Convert the Deployment to a StatefulSet, and perform a rolling update with a HorizontalPodAutoscaler scale-down policy value of 0.
A
Explanation:
https://cloud.google.com/blog/products/containers-kubernetes/ensuring-reliability-and-uptime-for-your-gke-cluster
Setting PodDisruptionBudget ensures that your workloads have a sufficient number of replicas, even during maintenance. Using the PDB, you can define a number (or percentage) of pods that can be terminated, even if terminating them brings the current replica count below the desired value. With PDB configured, Kubernetes will drain a node following the configured disruption schedule. New pods will be deployed on other available nodes. This approach ensures Kubernetes schedules workloads in an optimal way while controlling the disruption based on the PDB configuration.
https://blog.knoldus.com/how-to-avoid-outages-in-your-kubernetes-cluster-using-pdb/
You plan to deploy a new application revision with a Deployment resource to Google Kubernetes Engine (GKE) in production. The container might not work correctly. You want to minimize risk in case there are issues after deploying the revision. You want to follow Google-recommended best practices.
What should you do?
- A . Perform a rolling update with a PodDisruptionBudget of 80%.
- B . Perform a rolling update with a HorizontalPodAutoscaler scale-down policy value of 0.
- C . Convert the Deployment to a StatefulSet, and perform a rolling update with a PodDisruptionBudget of 80%.
- D . Convert the Deployment to a StatefulSet, and perform a rolling update with a HorizontalPodAutoscaler scale-down policy value of 0.
A
Explanation:
https://cloud.google.com/blog/products/containers-kubernetes/ensuring-reliability-and-uptime-for-your-gke-cluster
Setting PodDisruptionBudget ensures that your workloads have a sufficient number of replicas, even during maintenance. Using the PDB, you can define a number (or percentage) of pods that can be terminated, even if terminating them brings the current replica count below the desired value. With PDB configured, Kubernetes will drain a node following the configured disruption schedule. New pods will be deployed on other available nodes. This approach ensures Kubernetes schedules workloads in an optimal way while controlling the disruption based on the PDB configuration.
https://blog.knoldus.com/how-to-avoid-outages-in-your-kubernetes-cluster-using-pdb/
Which service should HipLocal use to enable access to internal apps?
- A . Cloud VPN
- B . Cloud Armor
- C . Virtual Private Cloud
- D . Cloud Identity-Aware Proxy
D
Explanation:
Reference: https://cloud.google.com/iap/docs/cloud-iap-for-on-prem-apps-overview
Which service should HipLocal use to enable access to internal apps?
- A . Cloud VPN
- B . Cloud Armor
- C . Virtual Private Cloud
- D . Cloud Identity-Aware Proxy
D
Explanation:
Reference: https://cloud.google.com/iap/docs/cloud-iap-for-on-prem-apps-overview