Google CloudProfessional levelPage 2 of 3

Google Professional Cloud Database Engineer exam dumps: questions 101 to 200 of 258

Page 2 of the free Google Professional Cloud Database Engineer question bank for the Professional Cloud Database Engineer exam. Questions 101 to 200 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated December 2024

Start timed practice exam Questions 101 to 200

Free Google Professional Cloud Database Engineer practice questions

Questions 101 to 105 of 258

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

Google Professional Cloud Database Engineer Question 101

Select 3Google Cloud Platform

You are managing a Cloud SQL instance in Google Cloud and need to ensure that only the application servers hosted in a specific Google Kubernetes Engine (GKE) cluster can connect to the database. Additionally, you want to ensure that developers can view the database but not modify it. How should you configure the IAM policies and database connectivity to meet these requirements?

  1. A

    Grant the Cloud SQL Client role to the GKE service account used by the application servers.

  2. B

    Grant the Cloud SQL Admin role to the developers for the Cloud SQL instance.

  3. C

    Enable private IP for the Cloud SQL instance and configure a VPC peering connection with the GKE cluster.

  4. D

    Grant the Cloud SQL Viewer role to the developers for the Cloud SQL instance.

  5. E

    Allow all incoming connections from any IP range in the Cloud SQL instance's authorized networks settings.

Show answer and explanation

Correct answers: A, C, D

Explanation

To meet the requirements, the GKE service account needs the Cloud SQL Client role to connect to the database securely. Enabling private IP and configuring VPC peering ensures the database is only accessible from the GKE cluster. The developers should be assigned the Cloud SQL Viewer role to allow them to view the database without granting excessive permissions. Avoid overly permissive configurations like enabling all incoming IPs or assigning admin roles unnecessarily to maintain security and least privilege access.

  • A. Correct.

    Correct: The Cloud SQL Client role is required for the GKE service account so that the application servers can authenticate and connect to the database securely.

  • B. Incorrect.

    Incorrect: The Cloud SQL Admin role provides full administrative access to the database, including the ability to modify or delete it, which violates the requirement of read-only access for developers.

  • C. Correct.

    Correct: Enabling private IP and using VPC peering ensures secure connectivity between the GKE cluster and the Cloud SQL instance without exposing it to public IPs.

  • D. Correct.

    Correct: The Cloud SQL Viewer role provides read-only access to developers, which aligns with the requirement that they can view but not modify the database.

  • E. Incorrect.

    Incorrect: Allowing all incoming connections from any IP range is a security risk and does not restrict access to the GKE cluster or authorized users.

Google Professional Cloud Database Engineer Question 102

Select 3Google Cloud Platform

You are designing a database solution on Google Cloud Platform (GCP) that requires secure access to a Cloud SQL instance. The database will be accessed by a Compute Engine virtual machine (VM) and a team of developers who need read-only access for analytics. Which Identity and Access Management (IAM) policies should you configure to ensure secure and appropriate access?

  1. A

    Assign the 'roles/cloudsql.client' role to the Compute Engine service account.

  2. B

    Assign the 'roles/cloudsql.editor' role to the team of developers.

  3. C

    Assign the 'roles/cloudsql.readonly' role to the team of developers.

  4. D

    Assign the 'roles/cloudsql.admin' role to the Compute Engine service account.

  5. E

    Enable the Cloud SQL Admin API to allow proper IAM policy enforcement.

Show answer and explanation

Correct answers: A, C, E

Explanation

To ensure secure and appropriate database access, you must configure IAM roles according to the principle of least privilege. The Compute Engine service account needs the 'roles/cloudsql.client' role to connect securely, while the developers need the 'roles/cloudsql.readonly' role for their specific read-only requirements. Additionally, enabling the Cloud SQL Admin API is a prerequisite for IAM policy enforcement on Cloud SQL instances. Assigning overly permissive roles, such as 'roles/cloudsql.editor' or 'roles/cloudsql.admin,' should be avoided to maintain security.

  • A. Correct.

    Correct: The 'roles/cloudsql.client' role allows the Compute Engine service account to connect to the Cloud SQL instance securely. This is the appropriate role for a VM accessing the database.

  • B. Incorrect.

    Incorrect: The 'roles/cloudsql.editor' role provides permissions to modify database instances, which is unnecessary and overly permissive for the team of developers who only require read-only access.

  • C. Correct.

    Correct: The 'roles/cloudsql.readonly' role provides the developers with read-only access to the database, which is appropriate for their analytics-related tasks.

  • D. Incorrect.

    Incorrect: The 'roles/cloudsql.admin' role is overly permissive and not required for the Compute Engine service account. This role is intended for managing the Cloud SQL instance, not for database connectivity.

  • E. Correct.

    Correct: Enabling the Cloud SQL Admin API is required for IAM policies to work properly in controlling access to Cloud SQL instances.

Google Professional Cloud Database Engineer Question 103

Select 2Google Cloud Platform

You are designing a multi-tier application on Google Cloud, which uses Cloud SQL for the database layer. The application consists of a front-end App Engine service and a backend Compute Engine instance. Both components require access to the Cloud SQL database. As a Professional Cloud Database Engineer, what IAM policies should you configure to ensure secure and least-privilege access?

  1. A

    Grant the 'Cloud SQL Client' role to the App Engine service account.

  2. B

    Grant the 'Cloud SQL Admin' role to the App Engine service account.

  3. C

    Grant the 'Cloud SQL Client' role to the Compute Engine service account.

  4. D

    Grant the 'Editor' role to the Compute Engine service account.

  5. E

    Grant the 'Cloud SQL Viewer' role to both service accounts.

Show answer and explanation

Correct answers: A, C

Explanation

To ensure secure and least-privilege access, the 'Cloud SQL Client' role should be granted to the service accounts used by App Engine and Compute Engine. This role provides the required permissions for connecting to and interacting with the Cloud SQL database, without granting unnecessary privileges. Other roles like 'Cloud SQL Admin' or 'Editor' exceed the permissions needed for database connectivity, while 'Cloud SQL Viewer' does not provide sufficient permissions.

  • A. Correct.

    This is correct. The 'Cloud SQL Client' role provides the necessary permissions for App Engine to connect to and interact with the Cloud SQL database.

  • B. Incorrect.

    This is incorrect. The 'Cloud SQL Admin' role grants permissions to manage the database instance, which is unnecessary and violates the principle of least privilege for application connectivity.

  • C. Correct.

    This is correct. The 'Cloud SQL Client' role provides the necessary permissions for the Compute Engine instance to connect to and interact with the Cloud SQL database.

  • D. Incorrect.

    This is incorrect. The 'Editor' role grants broad permissions to resources in the project and is not specific to Cloud SQL, making it inappropriate for this use case.

  • E. Incorrect.

    This is incorrect. The 'Cloud SQL Viewer' role only allows viewing metadata about the database instance, which is insufficient for connecting to the database.

Google Professional Cloud Database Engineer Question 104

Select 2Google Cloud Platform

You are designing a database solution on Google Cloud using Cloud SQL for PostgreSQL. The database needs to be accessed by a Compute Engine instance for application queries, and by a group of developers for administrative purposes. How should you configure IAM policies to ensure secure and least-privilege access to the database?

  1. A

    Grant the Compute Engine service account the 'Cloud SQL Client' role.

  2. B

    Grant each developer the 'Cloud SQL Admin' role.

  3. C

    Grant each developer the 'Cloud SQL Viewer' role.

  4. D

    Grant the Compute Engine service account the 'Cloud SQL Admin' role.

  5. E

    Create a custom role with only required permissions for developers and assign it to them.

Show answer and explanation

Correct answers: A, E

Explanation

To ensure secure and least-privilege access, the Compute Engine service account should be granted the 'Cloud SQL Client' role, which is sufficient for enabling application queries without unnecessary administrative permissions. For developers, creating and assigning a custom role with only the permissions they require ensures they have adequate access for their tasks while avoiding excessive privileges. This configuration follows best practices for IAM policies and access control.

  • A. Correct.

    Correct: The 'Cloud SQL Client' role allows the Compute Engine service account to connect to the database without giving unnecessary administrative permissions, adhering to the principle of least privilege.

  • B. Incorrect.

    Incorrect: The 'Cloud SQL Admin' role grants full administrative privileges, which is not necessary for developers if they only need to perform specific tasks. This violates the principle of least privilege.

  • C. Incorrect.

    Incorrect: The 'Cloud SQL Viewer' role only provides read-only access to view metadata about the database and is insufficient for administrative tasks required by developers.

  • D. Incorrect.

    Incorrect: The 'Cloud SQL Admin' role provides full administrative access to the database, which is excessive for the Compute Engine service account that only needs to perform application queries.

  • E. Correct.

    Correct: Creating a custom role with only the required permissions for developers ensures they have enough access for their tasks without granting excessive privileges, aligning with the principle of least privilege.

Google Professional Cloud Database Engineer Question 105

Single answerGoogle Cloud Platform

You are managing a Cloud SQL instance for your organization, and you need to ensure that a new team member can query the database without being able to modify its schema. How should you configure the user's access?

  1. A

    Grant the 'roles/cloudsql.client' IAM role to the user.

  2. B

    Create a database user account for the team member and assign it the 'READER' role within the database.

  3. C

    Grant the 'roles/cloudsql.admin' IAM role to the user.

  4. D

    Create a database user account for the team member and assign it the 'EDITOR' role within the database.

Show answer and explanation

Correct answer: B

Explanation

To manage database access effectively, you must distinguish between IAM roles for managing the Cloud SQL instance and database-level roles for managing permissions within the database itself. The correct approach is to create a database user account for the team member and assign it a role that aligns with their responsibilities, such as the 'READER' role for read-only access. This ensures proper segregation of duties and adheres to the principle of least privilege.

  • A. Incorrect.

    Granting the 'roles/cloudsql.client' IAM role only provides the ability to connect to the Cloud SQL instance but does not manage database-level access or enforce specific permissions such as read-only access.

  • B. Correct.

    Creating a database user account and assigning it the 'READER' role within the database is the correct approach. This ensures the user can query data without being able to modify the schema.

  • C. Incorrect.

    Granting the 'roles/cloudsql.admin' IAM role provides full administrative access to the Cloud SQL instance, including the ability to modify the schema, which violates the requirement of read-only access.

  • D. Incorrect.

    Assigning the 'EDITOR' role within the database allows the user to modify the schema, which does not meet the requirement of restricting access to query-only permissions.

Timed practice exam

Take a Google Professional Cloud Database Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

Google Professional Cloud Database Engineer practice questions 101 to 200 of 258

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 3 pages of up to 100 questions.

  1. 101.You are managing a Cloud SQL instance in Google Cloud and need to ensure that only the application servers...
  2. 102.You are designing a database solution on Google Cloud Platform (GCP) that requires secure access to a Cloud...
  3. 103.You are designing a multi-tier application on Google Cloud, which uses Cloud SQL for the database layer. The...
  4. 104.You are designing a database solution on Google Cloud using Cloud SQL for PostgreSQL. The database needs to...
  5. 105.You are managing a Cloud SQL instance for your organization, and you need to ensure that a new team member...
  6. 106.Your company uses Cloud SQL for PostgreSQL to manage its database needs. A new application team requires...
  7. 107.Your company uses Cloud SQL for PostgreSQL to host its production database. A new Data Analyst team needs...
  8. 108.You are managing a Cloud SQL instance for your organization. A new team member requires read-only access to...
  9. 109.You are managing a Cloud SQL instance running PostgreSQL for your company's e-commerce platform. The platform...
  10. 110.Your organization has deployed a mission-critical application on a Cloud SQL for PostgreSQL instance. The...
  11. 111.You are a Professional Cloud Database Engineer managing a Cloud SQL instance running PostgreSQL for a...
  12. 112.You are managing a Cloud SQL instance running MySQL for a critical application. The application team reports...
  13. 113.You are managing a Cloud SQL for PostgreSQL instance running in Google Cloud. The database has recently...
  14. 114.You are managing a Cloud SQL for PostgreSQL instance hosting a critical application. Users report that some...
  15. 115.You are managing a Cloud SQL instance hosting a PostgreSQL database. Users have reported that a specific...
  16. 116.You are managing a MySQL database hosted on Cloud SQL, and your team reports that certain queries are taking...
  17. 117.You are managing a Cloud SQL database for a retail application. Users report a significant slowdown in query...
  18. 118.You are managing a Cloud SQL PostgreSQL instance for a retail application. Users have reported that certain...
  19. 119.You are managing a Cloud SQL instance for a transactional database and notice frequent performance...
  20. 120.You are a database engineer managing a Cloud SQL for PostgreSQL instance. Recently, users have reported...
  21. 121.You are managing a Cloud SQL instance running PostgreSQL in Google Cloud, and your team has reported degraded...
  22. 122.You are managing a Cloud SQL database for a critical application, and users report degraded performance...
  23. 123.Your organization runs a PostgreSQL database on Cloud SQL. Recently, users have reported slow query...
  24. 124.You are managing a Cloud Spanner instance in a production environment. Recently, your application began...
  25. 125.You are managing a Cloud SQL instance for a production application. Recently, users have reported...
  26. 126.You are managing a Google Cloud project running a Cloud SQL instance for a critical application. Recently,...
  27. 127.Your team has deployed a Cloud SQL instance in Google Cloud, and during a high-traffic event, your...
  28. 128.Your team is running a high-traffic web application on Google Cloud, and you start encountering errors due to...
  29. 129.Your e-commerce application is experiencing slow database performance during peak hours. You suspect resource...
  30. 130.Your team manages a MySQL database hosted on Google Cloud SQL. Users are reporting slow query performance...
  31. 131.You are managing a Cloud SQL instance running PostgreSQL, and your application is experiencing slow query...
  32. 132.You are managing a Cloud SQL instance running PostgreSQL for a production workload. Users have reported...
  33. 133.Your team is experiencing degraded performance in a Cloud SQL PostgreSQL database. You suspect resource...
  34. 134.You are managing a Cloud SQL instance for a production workload, and you need to monitor it for database...
  35. 135.Your organization uses Cloud SQL for hosting a production MySQL database. You need to set up proactive...
  36. 136.You are managing a Cloud SQL instance hosting a production database with critical workloads. To ensure you...
  37. 137.You are managing a Cloud SQL instance for a critical application and need to set up alerts to monitor errors...
  38. 138.You are managing a Cloud SQL instance running PostgreSQL for a production workload. Your team wants to ensure...
  39. 139.Your organization uses a Cloud SQL instance for its critical transactional database. The database must meet...
  40. 140.Your organization uses a PostgreSQL database hosted on Cloud SQL for its critical customer-facing...
  41. 141.You are designing a backup and recovery solution for a mission-critical PostgreSQL database running on Google...
  42. 142.Your company uses Cloud SQL for MySQL to store critical business data. To ensure minimal downtime and data...
  43. 143.You are managing a mission-critical PostgreSQL database hosted on Google Cloud and need to ensure minimal...
  44. 144.Your company operates a mission-critical application hosted on Google Cloud Spanner. The Service Level...
  45. 145.You are managing a Cloud Spanner database for a financial application with an SLA of 99.99% availability and...
  46. 146.You are a database engineer for an e-commerce platform running on Cloud SQL for PostgreSQL. The platform has...
  47. 147.A company is running a mission-critical application on Google Cloud using Cloud SQL for PostgreSQL. The...
  48. 148.You are managing a Cloud SQL instance hosting a critical production database. The database has an uptime SLA...
  49. 149.Your team is migrating a MySQL database hosted on Google Cloud SQL to a new Cloud SQL instance in a different...
  50. 150.Your team is working on migrating a PostgreSQL database from Google Cloud SQL to a local on-premises...
  51. 151.Your organization has decided to migrate a PostgreSQL database hosted on Google Cloud's Cloud SQL to a new...
  52. 152.Your organization is migrating an on-premises PostgreSQL database to Google Cloud. You need to export the...
  53. 153.You are managing a PostgreSQL database hosted on Cloud SQL, and you need to migrate the data to a BigQuery...
  54. 154.A company runs an e-commerce platform on Google Cloud. They use Cloud SQL for the relational database, and...
  55. 155.Your organization hosts a mission-critical e-commerce application on Google Cloud. The application uses Cloud...
  56. 156.Your company runs a mission-critical database on Google Cloud, and you are tasked with designing a disaster...
  57. 157.Your company is running a mission-critical application on Google Cloud that uses Cloud SQL for its database....
  58. 158.Your company runs a critical e-commerce application on Google Cloud using Cloud SQL for the database backend....
  59. 159.Your team is managing a Cloud SQL for PostgreSQL instance that has recently experienced a spike in usage,...
  60. 160.Your company is running a Cloud SQL instance with a MySQL database that supports an e-commerce platform. The...
  61. 161.Your organization uses Cloud SQL for its production workloads. Recently, your team has noticed increasing...
  62. 162.You are managing a Cloud SQL for PostgreSQL instance that supports a production workload. The database is...
  63. 163.Your company is running a Cloud SQL for PostgreSQL instance for its e-commerce application. The database...
  64. 164.Your team manages a Cloud Spanner database for a global e-commerce platform. During peak shopping seasons,...
  65. 165.Your company has a web application hosted on Google Cloud that experiences highly variable traffic patterns,...
  66. 166.You are managing a Cloud Spanner database that supports a global e-commerce application. As the application...
  67. 167.You are managing a Cloud SQL PostgreSQL instance that is experiencing increased traffic and higher query...
  68. 168.Your team is managing a relational database on Google Cloud SQL that is experiencing performance degradation...
  69. 169.You are managing a Cloud SQL instance running a PostgreSQL database for an e-commerce application. During...
  70. 170.Your organization runs a PostgreSQL database on Cloud SQL to handle an e-commerce application. During flash...
  71. 171.You manage a Cloud SQL instance hosting a MySQL database for an e-commerce application. During major sales...
  72. 172.You are managing a Cloud SQL instance for your e-commerce platform. During seasonal sales events, you expect...
  73. 173.You are managing a Cloud SQL instance running MySQL for an e-commerce application. During holiday sales, the...
  74. 174.You are designing a highly available database solution on Google Cloud for a global e-commerce application....
  75. 175.You are designing a multi-region database for an e-commerce application on Google Cloud. The database must...
  76. 176.Your team is designing a high-availability database architecture for a critical application on Google Cloud....
  77. 177.You are designing a replication strategy for a Cloud SQL PostgreSQL database to ensure high availability and...
  78. 178.You are designing a multi-region database solution on Google Cloud for a global e-commerce application. The...
  79. 179.Your organization is running a Cloud SQL database for its e-commerce platform. The database is experiencing...
  80. 180.You are managing a Cloud SQL instance for a production workload. The database usage patterns have recently...
  81. 181.You are managing a Cloud SQL PostgreSQL instance for your organization. After a recent review, your team has...
  82. 182.Your company runs a Cloud SQL for PostgreSQL instance to support a critical business application. The...
  83. 183.You are managing a relational database hosted on Google Cloud SQL for a production environment. Recently,...
  84. 184.You are managing a Cloud SQL instance hosting a MySQL database for an e-commerce application. To reduce...
  85. 185.You are managing a Cloud SQL for PostgreSQL database for a rapidly growing e-commerce application. The...
  86. 186.Your team is managing an e-commerce platform running on Cloud SQL for PostgreSQL. You need to automate daily...
  87. 187.Your team manages a PostgreSQL database hosted on Cloud SQL. To reduce manual effort, you need to automate...
  88. 188.Your company runs a PostgreSQL database on Google Cloud, and you need to automate routine maintenance tasks...
  89. 189.You are managing a Cloud SQL for PostgreSQL instance that supports a critical application. To improve...
  90. 190.You are managing a Cloud SQL for PostgreSQL instance that is running out of disk space due to excessive old...
  91. 191.You are managing a Cloud SQL for PostgreSQL instance that supports a critical application. You receive an...
  92. 192.You are managing a MySQL database hosted on Google Cloud SQL. Recently, your team has noticed degraded...
  93. 193.You are managing a Cloud SQL for PostgreSQL instance that has started experiencing slower query performance...
  94. 194.You are managing a Cloud SQL PostgreSQL database for a high-traffic e-commerce platform. Over time, you...
  95. 195.You are managing a Cloud SQL database running PostgreSQL, and you notice that query performance has degraded...
  96. 196.You are managing a Cloud SQL for PostgreSQL database that has been running for several months. Users have...
  97. 197.You are managing a Cloud SQL for PostgreSQL instance and notice that query performance has degraded over...
  98. 198.You are managing a Cloud Spanner database that has been in production for over a year. Over time, you notice...
  99. 199.You are managing a Cloud SQL instance and need to schedule automated exports of your database to a Cloud...
  100. 200.Your team manages a Cloud SQL PostgreSQL database and needs to schedule regular backups of the data for...

More Google Cloud exam dumps

All Google Cloud exams
374 questions

Google Associate Cloud Engineer exam dumps

Associate Cloud Engineer

266 questions

Google Professional Cloud DevOps Engineer exam dumps

Professional Cloud DevOps Engineer

480 questions

Google Professional Cloud Developer exam dumps

Professional Cloud Developer

789 questions

Google Professional Cloud Network Engineer exam dumps

Professional Cloud Network Engineer

500 questions

Google Professional Cloud Security Engineer exam dumps

Professional Cloud Security Engineer

278 questions

Google Professional Data Engineer exam dumps

Professional Data Engineer

521 questions

Google Professional Machine Learning Engineer exam dumps

Professional Machine Learning Engineer