Cloud Developer Intermediate Practice Exam: Medium Difficulty 2025

You are building a public-facing REST API on Cloud Run that experiences unpredictable traffic spikes. The API must remain available during regional issues and should minimize operational overhead. Which architecture best meets these requirements?

A backend service processes Pub/Sub messages to update inventory in Cloud SQL. The service is deployed on Cloud Run. You need to ensure messages are not lost and that duplicate deliveries do not corrupt inventory counts. What should you do?

Your team runs a multi-service application on GKE. A new release introduced intermittent latency spikes. You need to quickly identify whether the issue is due to an upstream dependency or a specific microservice, with minimal code changes. What is the best approach?

You are implementing a CI pipeline that runs unit tests and then builds and pushes a container image. You want to prevent untested code from being deployed and keep builds reproducible. Which approach is most appropriate?

A Cloud Run service needs to call an internal REST API hosted on a private GKE cluster (no public endpoint). You must keep traffic private and avoid managing VPN appliances. What should you do?

Your application stores user uploads in Cloud Storage. A new requirement states that uploaded files must be scanned and metadata extracted asynchronously. The solution must scale automatically and avoid polling. Which design is best?

You want to deploy a new version of a Cloud Run service with zero downtime. You also want to gradually shift 10% of traffic to the new revision and quickly roll back if error rates increase. What should you do?

Your team uses Secret Manager for database credentials. A Cloud Run service needs access to the latest secret version at runtime. You want to follow least privilege and avoid embedding secrets in images. What is the best configuration?

You have a microservices app on GKE. You need to roll out a new deployment while ensuring the service remains available even if nodes fail during the rollout. Which combination best meets the requirement?

Your application uses Firestore in native mode to store user profiles. A Cloud Run API must enforce that users can only read and modify their own profile. You want to minimize custom authorization logic in the service. What should you do?