Exam Professional Cloud DevOps Engineer topic 1 question 182 discussion

Actual exam question from Google's Professional Cloud DevOps Engineer

Question #: 182
Topic #: 1

[All Professional Cloud DevOps Engineer Questions]

You are running a web application that connects to an AlloyDB cluster by using a private IP address in your default VPC. You need to run a database schema migration in your CI/CD pipeline by using Cloud Build before deploying a new version of your application. You want to follow Google-recommended security practices. What should you do?

A. Set up a Cloud Build private pool to access the database through a static external IP address. Configure the database to only allow connections from this IP address. Execute the schema migration script in the private pool.
B. Create a service account that has permission to access the database. Configure Cloud Build to use this service account and execute the schema migration script in a private pool.
C. Add the database username and password to Secret Manager. When running the schema migration script, retrieve the username and password from Secret Manager.
D. Add the database username and encrypted password to the application configuration file. Use these credentials in Cloud Build to execute the schema migration script.

Show Suggested Answer

Suggested Answer: B 🗳️

by kitaharazyl at March 25, 2025, 2:28 a.m.

Comments

Submit Cancel

kitaharazyl

1 month, 1 week ago

Selected Answer: B

B. Create a service account that has permission to access the database. Configure Cloud Build to use this service account and execute the schema migration script in a private pool.

upvoted 1 times

...

Exam Professional Cloud DevOps Engineer All Questions

View all questions & answers for the Professional Cloud DevOps Engineer exam

Exam Professional Cloud DevOps Engineer topic 1 question 182 discussion

Comments

kitaharazyl

SY0-701