Courseiva
Knowledge + Practice
CertificationsVendorsCareer RoadmapsLabs & ToolsStudy GuidesGlossaryPractice Questions
C
Courseiva

Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more.

Certification Practice Questions

CCNA practice questionsSecurity+ SY0-701 practice questionsAWS SAA-C03 practice questionsAZ-104 practice questionsAZ-900 practice questionsCLF-C02 practice questionsA+ Core 1 practice questionsGoogle Cloud ACE practice questionsCySA+ CS0-003 practice questionsNetwork+ N10-009 practice questions
View all certifications →

Product

CertificationsCertification PathsExam TopicsPractice TestsExam Dumps vs Practice TestsStudy HubComparisons

Company

AboutContactEditorial PolicyQuestion Writing PolicyTrust Center

Legal

Privacy PolicyTerms of Service

Courseiva is a free IT certification practice platform offering original exam-style practice questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics for Cisco, CompTIA, Microsoft, AWS, and other technology certifications.

© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved.

Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for.

← Deploying applications practice sets

PCD Deploying applications • Complete Question Bank

PCD Deploying applications — All Questions With Answers

Complete PCD Deploying applications question bank — all 0 questions with answers and detailed explanations.

91
Questions
Free
No signup
Certifications/PCD/Practice Test/Deploying applications/All Questions
Question 1easymultiple choice
Read the full NAT/PAT explanation →

A team deploys a containerized web application on Google Kubernetes Engine (GKE) using a Deployment. They need to expose the application externally via a stable IP address and enable SSL termination. Which resource should they use?

Question 2mediummultiple choice
Read the full Deploying applications explanation →

During a deployment to App Engine flexible environment, the new version fails to start and the logs show 'Container failed to start: context deadline exceeded'. The previous version remains serving traffic. What is the most likely cause?

Question 3hardmultiple choice
Read the full Deploying applications explanation →

A company has a multi-region Cloud Run service with traffic splitting between revisions. They notice that a newly rolled-out revision is receiving 0% of traffic even though they set traffic to 100% via the console. The revision shows 'Ready: Yes'. What is the most likely cause?

Question 4mediummultiple choice
Read the full Deploying applications explanation →

A DevOps engineer is automating deployments to Compute Engine using a CI/CD pipeline. They want to minimize downtime and ensure that if a new VM fails health checks, the old VM continues serving. Which deployment strategy should they implement?

Question 5hardmultiple choice
Read the full Deploying applications explanation →

A developer deploys a Cloud Function (2nd gen) that processes messages from Pub/Sub. The function sometimes fails with 'Deadline Exceeded' for messages that take longer than 9 minutes. What should the developer do to handle these long-running messages without losing them?

Question 6hardmulti select
Read the full Deploying applications explanation →

Which TWO statements about deploying applications on Google Kubernetes Engine (GKE) are correct?

Question 7mediummulti select
Read the full Deploying applications explanation →

Which THREE practices should be followed when deploying a containerized application to Cloud Run?

Question 8mediummultiple choice
Read the full Deploying applications explanation →

A developer runs the above command and receives the error. What is the most likely cause?

Network Topology
gcloud builds submittag gcr.io/my-project/my-image:latestRefer to the exhibit.```...
Question 9easymultiple choice
Read the full Deploying applications explanation →

A developer deploys the above app.yaml to App Engine standard environment. The deployment succeeds, but the application fails to connect to the database. What is the most likely reason?

Exhibit

Refer to the exhibit.
```
# app.yaml for App Engine standard environment
runtime: python39
entrypoint: gunicorn -b :$PORT main:app
env_variables:
  DATABASE_URL: "postgresql://user:pass@localhost/mydb"
```
Question 10easymultiple choice
Read the full Deploying applications explanation →

A company wants to deploy a containerized application on Google Kubernetes Engine (GKE) with zero downtime during updates. The application is stateless and runs on a Deployment with 5 replicas. Which deployment strategy should be used?

Question 11mediummultiple choice
Read the full Deploying applications explanation →

A developer is deploying a Cloud Run service that needs to access a Cloud SQL instance. The service is deployed with the --no-allow-unauthenticated flag. What is the recommended way to grant the service access to the database?

Question 12hardmultiple choice
Read the full NAT/PAT explanation →

A company is deploying a microservices architecture on GKE. They need to expose a set of related microservices under a single external IP address with path-based routing. Which Kubernetes resource should they use?

Question 13mediummultiple choice
Study the full Python automation breakdown →

A developer needs to deploy a Python application to App Engine flexible environment. The application requires a specific version of a system package (libssl-dev) that is not included in the default runtime image. How should the developer install this package?

Question 14mediummulti select
Read the full Deploying applications explanation →

Which TWO of the following are best practices when deploying applications on Google Kubernetes Engine (GKE)?

Question 15hardmultiple choice
Read the full Deploying applications explanation →

A developer runs the above command to build and push a container image to Container Registry, but receives the error shown. The developer has the 'Cloud Build Editor' role on the project. What is the most likely cause of the error?

Network Topology
$ gcloud builds submittag gcr.io/my-project/my-image .Refer to the exhibit.```
Question 16hardmultiple choice
Read the full Deploying applications explanation →

You are deploying a critical application on Compute Engine. The application requires high availability and must survive a zonal failure. You have created a managed instance group (MIG) with autoscaling across two zones. The application state is stored in a Cloud SQL instance with a read replica in another region. The application also uses a shared static IP address for client access. During a test, you simulate a failure of zone us-central1-a. You observe that the MIG automatically creates new instances in the remaining zone, but the application becomes unreachable for several minutes. What is the most likely cause of the downtime?

Question 17mediummultiple choice
Read the full Deploying applications explanation →

Your company is deploying a web application on Cloud Run using a continuous deployment pipeline from Cloud Build. The application is built as a Docker container and pushed to Container Registry. The Cloud Run service is configured with the '--no-allow-unauthenticated' flag. You have set up Cloud Build triggers to build and deploy on commits to the main branch. The deployment works correctly for the first few commits, but after adding a new environment variable in the Cloud Build configuration file (cloudbuild.yaml), the deployment fails with an error that the Cloud Run service cannot be updated because the new revision fails health checks. The application code has not changed. What is the most likely cause?

Question 18mediummultiple choice
Read the full NAT/PAT explanation →

A company is deploying a containerized application on Google Kubernetes Engine (GKE). The development team has built a Docker image and pushed it to Artifact Registry. They want to automate the deployment process so that whenever a new image is pushed to the registry, the application is automatically updated in the GKE cluster. Which combination of services should they use to achieve this?

Question 19hardmulti select
Read the full Deploying applications explanation →

A team is deploying a microservice application on Google Kubernetes Engine (GKE). They want to ensure high availability and minimize downtime during rolling updates. Which TWO actions should they take? (Choose two.)

Question 20easymultiple choice
Read the full Deploying applications explanation →

Refer to the exhibit. A developer is deploying a container to Cloud Run and receives the error shown. What is the most likely cause?

Exhibit

Refer to the exhibit.
```
ERROR: (gcloud.beta.run.deploy) The user-provided container failed to start and listen on the port defined by the PORT environment variable (8080). Logs for this revision might contain more information.

Logs:
2024-03-15 10:23:45.123456  Container called exit(1).
2024-03-15 10:23:45.123789  Fatal error: Unable to bind to port 8080: Permission denied
```
Question 21mediumdrag order
Read the full Deploying applications explanation →

Drag and drop the steps to deploy a containerized application to Google Kubernetes Engine (GKE) in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 22mediumdrag order
Read the full NAT/PAT explanation →

Drag and drop the steps to set up a Firestore database in native mode in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 23mediummatching
Read the full Deploying applications explanation →

Match each IAM role to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Can create and run Cloud Build builds

Can invoke Cloud Run services

Can list and read objects in a bucket

Can access secret versions

Can invoke Cloud Functions

Question 24mediummatching
Read the full Deploying applications explanation →

Match each Cloud CDN feature to its benefit.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Remove outdated content from edge caches

Authorize temporary access to private content

Serve content from any HTTP(S) server

Define how to cache different variations of content

Store content closer to users for low latency

Question 25easymultiple choice
Read the full Deploying applications explanation →

A developer wants to deploy a containerized application to Google Kubernetes Engine (GKE) and ensure that new pods are automatically created if an existing pod fails. Which Kubernetes resource should be used?

Question 26mediummultiple choice
Read the full Deploying applications explanation →

A company has a monolithic application that needs to be migrated to Cloud Run. The application currently writes logs to a local file. What is the best practice for handling logs in Cloud Run?

Question 27hardmultiple choice
Read the full NAT/PAT explanation →

A developer is deploying an application on Compute Engine and needs to automatically apply security patches without downtime. The application runs behind a TCP load balancer. What is the best deployment strategy?

Question 28easymultiple choice
Read the full Deploying applications explanation →

A team is deploying a microservice on Cloud Run that requires environment variables with sensitive information, such as database passwords. What is the recommended way to provide these secrets?

Question 29mediummultiple choice
Read the full Deploying applications explanation →

A developer is troubleshooting a deployment on Cloud Run. The service fails with 'Container failed to start' error. The container image is built from a Dockerfile that uses CMD ['npm', 'start']. What is the most likely cause?

Question 30hardmultiple choice
Read the full Deploying applications explanation →

An organization runs a stateful application on GKE that uses PersistentVolumes. They want to perform a rolling update of the application without disrupting the underlying persistent data. What should they use?

Question 31easymultiple choice
Read the full Deploying applications explanation →

A developer wants to automatically deploy a new version of an application to App Engine Standard every time code is pushed to the main branch of a Cloud Source Repositories repository. Which service should be used?

Question 32mediummultiple choice
Review the full routing breakdown →

A company has a multi-region deployment on GKE and needs to route traffic to the closest regional cluster based on user location. They want to minimize latency. Which approach should they use?

Question 33hardmultiple choice
Read the full Deploying applications explanation →

A developer is deploying a microservice on GKE that needs to be accessible only from within the same VPC network. The microservice must have a stable, internal IP address that does not change when pods are updated. Which options should be used?

Question 34mediummulti select
Read the full Deploying applications explanation →

Which TWO strategies can be used to reduce cold start latency in Cloud Run? (Choose 2)

Question 35hardmulti select
Read the full Deploying applications explanation →

Which THREE are valid methods for authenticating a user or service when deploying a Cloud Function via the Google Cloud SDK? (Choose 3)

Question 36easymulti select
Read the full Deploying applications explanation →

Which TWO statements about Cloud Run for Anthos are correct? (Choose 2)

Question 37mediummultiple choice
Read the full Deploying applications explanation →

A developer runs the command above and receives the error. The developer has just been granted the 'roles/cloudbuild.builds.editor' role on the project. What is the most likely reason for the permission error?

Network Topology
$ gcloud builds submittag gcr.io/my-project/my-image .Refer to the exhibit.
Question 38hardmultiple choice
Read the full Deploying applications explanation →

A developer deployed the Kubernetes Deployment shown. The application takes about 45 seconds to fully initialize and respond on the /healthz endpoint. What problem will occur with this configuration?

Exhibit

Refer to the exhibit.

apiVersion: apps/v1
kind: Deployment
metadata:
  name: my-app
spec:
  replicas: 3
  selector:
    matchLabels:
      app: my-app
  template:
    metadata:
      labels:
        app: my-app
    spec:
      containers:
      - name: app
        image: gcr.io/my-project/my-app:v1
        readinessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 5
          periodSeconds: 10
        livenessProbe:
          httpGet:
            path: /healthz
            port: 8080
          initialDelaySeconds: 30
          periodSeconds: 30
Question 39easymultiple choice
Read the full Deploying applications explanation →

A developer runs the command above. What is the effect of the --promote flag in this deployment?

Network Topology
$ gcloud app deployversion=v2promoteRefer to the exhibit.Services to deploy:descriptor: [/home/user/app.yaml]source: [/home/user]target project: [my-project]target service: [default]target version: [v2]...Beginning deployment of service [default]...Deployed service [default] to [https://my-project.appspot.com]
Question 40mediummultiple choice
Read the full Deploying applications explanation →

You deployed a microservice on Cloud Run. Users report intermittent 503 errors. The service uses Cloud SQL with connection pooling. What is the most likely cause?

Question 41easymultiple choice
Read the full Deploying applications explanation →

A company is migrating a monolithic Java application to Cloud Run. The application takes 10 minutes to start. What is the best deployment approach?

Question 42hardmultiple choice
Read the full Deploying applications explanation →

You are deploying a stateful application to GKE. The deployment fails with an error: 'pods failed to fit in any node due to insufficient CPU'. The cluster has 3 nodes with 4 vCPUs each. The deployment requests 2 vCPUs per pod with 5 replicas. What is the most likely issue?

Question 43mediummultiple choice
Read the full Deploying applications explanation →

You need to deploy a critical update to a production service on GKE with zero downtime. Which deployment strategy should you use?

Question 44easymultiple choice
Read the full Deploying applications explanation →

You are setting up Cloud Build to automatically deploy a container to Cloud Run when code is pushed to the main branch of a GitHub repository. What is the minimal configuration required?

Question 45hardmultiple choice
Read the full Deploying applications explanation →

Your Cloud Run service experiences high latency during traffic spikes. You need to reduce p95 latency without over-provisioning. Which action should you take?

Question 46mediummultiple choice
Read the full Deploying applications explanation →

You are deploying a Cassandra database on GKE. Which resource type should you use to ensure stable network identities and persistent storage per pod?

Question 47easymultiple choice
Read the full Deploying applications explanation →

A developer needs to deploy a Cloud Run service from a container image in Artifact Registry. What IAM role should be granted to the Cloud Run service account?

Question 48hardmultiple choice
Study the full Python automation breakdown →

You are deploying a Python Cloud Function using the Google Cloud CLI. The deployment fails with 'ERROR: (gcloud.functions.deploy) ResponseError: status=[404], code=[OK], message=[The function ... does not exist]' but the function already exists. What is the most likely cause?

Question 49mediummulti select
Read the full Deploying applications explanation →

Which TWO security best practices should be implemented when using Cloud Build to deploy applications? (Choose 2.)

Question 50hardmulti select
Read the full Deploying applications explanation →

Which THREE common issues cause deployment failures on App Engine? (Choose 3.)

Question 51easymulti select
Read the full Deploying applications explanation →

Which TWO features are provided by Google Cloud Deploy? (Choose 2.)

Question 52easymultiple choice
Read the full Deploying applications explanation →

A developer deploys a containerized application on Cloud Run. The application needs to access a Cloud SQL instance securely without exposing it to the internet. What is the best practice?

Question 53mediummultiple choice
Read the full Deploying applications explanation →

An application running on Compute Engine instances behind a Cloud Load Balancer experiences intermittent 502 errors. The health checks pass but sometimes requests time out. What is the most likely cause?

Question 54hardmultiple choice
Read the full Deploying applications explanation →

A company deploys a stateful application using StatefulSets on GKE. They need to store persistent data on regional persistent disks for high availability. However, during zonal failures, pods are not rescheduled quickly. What is the best approach to improve recovery time?

Question 55easymultiple choice
Read the full Deploying applications explanation →

A developer wants to deploy a Cloud Function that connects to a Cloud SQL database. What is the simplest way to securely inject database credentials?

Question 56mediummultiple choice
Read the full Deploying applications explanation →

A company uses Cloud Build for CI/CD. They need to deploy a containerized app to Cloud Run automatically on every push to the main branch. Which Cloud Build configuration step is necessary?

Question 57hardmultiple choice
Read the full Deploying applications explanation →

An organization deploys a critical application on GKE with multiple namespaces. They want to enforce that only certain images from approved Artifact Registry repositories can be deployed in the production namespace. Which GKE feature should they use?

Question 58easymultiple choice
Read the full Deploying applications explanation →

A startup wants to deploy a web application on App Engine standard environment. They need to handle sudden traffic spikes automatically. How should they configure scaling?

Question 59mediummultiple choice
Read the full Deploying applications explanation →

A developer deploys a service on Cloud Run with a concurrency setting of 1. The service makes external API calls. Under heavy load, the service starts returning 503 errors. What is the most likely cause?

Question 60hardmultiple choice
Read the full Deploying applications explanation →

A company is deploying a multi-region application on Cloud Run to serve global users. They want low latency and automatic failover. Which approach is best?

Question 61mediummulti select
Read the full Deploying applications explanation →

A team is deploying a new version of an application on GKE using a rolling update. They want to ensure that the update proceeds only if the new pods are healthy. Which two steps should they include? (Choose two.)

Question 62hardmulti select
Read the full Deploying applications explanation →

A company wants to automate the deployment of a microservice application to Cloud Run using Cloud Build. They want to ensure zero-downtime deployments and traffic migration. Which three features should they utilize? (Choose three.)

Question 63easymulti select
Read the full Deploying applications explanation →

A developer is deploying a Node.js application to App Engine flexible environment. They need to install custom dependencies and run startup scripts. Which two configuration elements should they define in the app.yaml? (Choose two.)

Question 64mediummultiple choice
Read the full Deploying applications explanation →

After updating the image to v2, users report that the frontend application returns errors because it cannot reach the backend service. The backend service is running on GKE with the name 'backend-service' in the same namespace. What is the most likely cause?

Exhibit

Refer to the exhibit.
```yaml
apiVersion: apps/v1
kind: Deployment
metadata:
  name: frontend
spec:
  replicas: 3
  selector:
    matchLabels:
      app: frontend
  template:
    metadata:
      labels:
        app: frontend
    spec:
      containers:
      - name: frontend
        image: gcr.io/my-project/frontend:v2
        ports:
        - containerPort: 8080
        env:
        - name: BACKEND_URL
          value: "http://backend-service:8080"
      terminationGracePeriodSeconds: 30
```
Question 65hardmultiple choice
Read the full Deploying applications explanation →

A developer uses this Cloud Build configuration to deploy to Cloud Run. The build succeeds but the deployment fails with an error that the service account lacks permission. What is the most likely missing permission?

Network Topology
args: ['run'image'region'platform'Refer to the exhibit.```Steps:- name: 'gcr.io/cloud-builders/docker'args: ['build', '-t', 'gcr.io/$PROJECT_ID/my-image', '.']args: ['push', 'gcr.io/$PROJECT_ID/my-image']- name: 'gcr.io/cloud-builders/gcloud'
Question 66easymultiple choice
Read the full Deploying applications explanation →

During a rolling update, the new pods are failing to start because they require more memory than available on nodes. What is the most likely cause?

Exhibit

Refer to the exhibit.
```
{
  "name": "my-deployment",
  "replicas": 3,
  "template": {
    "spec": {
      "containers": [{
        "name": "my-container",
        "image": "gcr.io/my-project/my-image:latest",
        "resources": {
          "requests": {
            "memory": "1Gi",
            "cpu": "500m"
          },
          "limits": {
            "memory": "2Gi",
            "cpu": "1"
          }
        }
      }]
    }
  },
  "strategy": {
    "type": "RollingUpdate",
    "rollingUpdate": {
      "maxSurge": 1,
      "maxUnavailable": 1
    }
  }
}
```
Question 67mediummultiple choice
Read the full Deploying applications explanation →

A company deploys a containerized web application to Cloud Run. The application needs to access a Cloud SQL instance but fails with a connection timeout. The VPC connector is configured and attached to the Cloud Run service. What is the most likely cause?

Question 68hardmultiple choice
Read the full Deploying applications explanation →

A team is deploying a critical microservice on GKE. They want to minimize risk by gradually shifting traffic from old to new version. They use a Deployment with a single Service. What deployment strategy should they implement?

Question 69easymultiple choice
Study the full Python automation breakdown →

A startup wants to deploy a Python web application with low traffic and minimal operational overhead. They need to automatically scale down to zero when not in use. Which compute option should they choose?

Question 70mediummultiple choice
Read the full Deploying applications explanation →

A team uses Cloud Build to automatically deploy a Cloud Function on push to a repository. The build fails intermittently with 'PERMISSION_DENIED' when executing gcloud functions deploy. What is the most likely cause?

Question 71hardmultiple choice
Read the full Deploying applications explanation →

A company deploys a stateful application on GKE using a StatefulSet with PersistentVolumeClaims (PVCs). After a node failure, the pod is rescheduled to another node but the PVC remains in 'Pending' state. What is the most likely reason?

Question 72easymultiple choice
Read the full Deploying applications explanation →

A developer wants to deploy a Compute Engine instance using Terraform. They want to run a startup script to install software. How should they provide the script?

Question 73mediummultiple choice
Read the full Deploying applications explanation →

A company deploys a web app on Cloud Run and configures a custom domain mapping with a managed SSL certificate. After mapping, the domain returns 404 errors. The Cloud Run service is accessible via its default URL. What is the most likely issue?

Question 74hardmultiple choice
Read the full Deploying applications explanation →

A team deploys a microservices architecture on GKE with Istio service mesh. They want to enforce mutual TLS (mTLS) between services. After enabling Istio with the default configuration, some services report connection errors. What is the most likely cause?

Question 75easymultiple choice
Read the full Deploying applications explanation →

A team wants to deploy infrastructure as code on Google Cloud. They need a declarative language that supports modularity and state management. Which tool should they choose?

Question 76mediummulti select
Read the full Deploying applications explanation →

Which TWO best practices should be followed when deploying a containerized application to Cloud Run for production?

Question 77hardmulti select
Read the full Deploying applications explanation →

Which THREE methods are valid ways to deploy a containerized application to Google Kubernetes Engine (GKE)?

Question 78easymulti select
Read the full Deploying applications explanation →

Which TWO Google Cloud services are suitable for deploying serverless applications that scale automatically based on demand?

Question 79hardmultiple choice
Read the full Deploying applications explanation →

Your company runs a multi-tier application on GKE. The frontend is a Deployment with 5 replicas, backend is a StatefulSet with 3 replicas, and a database runs on Cloud SQL. Recently, after a cluster upgrade, the frontend pods are failing with 'Connection refused' errors when trying to reach the backend service. The backend pods are running and healthy. You have verified that the Service and Endpoints objects exist. The backend service is of type ClusterIP on port 8080, and the frontend uses the service name 'backend-svc'. The frontend pods are in a different namespace 'frontend-ns', while the backend is in 'backend-ns'. What is the most likely cause of the error?

Question 80mediummultiple choice
Read the full Deploying applications explanation →

You are deploying a Node.js application on Cloud Run. The container image is stored in Artifact Registry. After deploying with gcloud run deploy, the revision fails with 'Container failed to start. Failed to start and then listen on the port defined by the PORT environment variable.' The application listens on port 8080 by default. The Dockerfile uses EXPOSE 8080. The Cloud Run service is configured with container port 8080. You have verified that the container starts locally using docker run -p 8080:8080. What is the most likely cause of the startup failure?

Question 81mediummultiple choice
Read the full Deploying applications explanation →

A company is deploying a containerized application on Google Kubernetes Engine (GKE). The deployment uses a Service of type LoadBalancer. After creating the Service, the external IP remains pending for several minutes. The team has verified that the cluster has sufficient node capacity and that the pod is running. What is the most likely cause?

Question 82mediummulti select
Study the full Python automation breakdown →

A developer is deploying a Python web application to App Engine Flexible Environment. The application requires a specific third-party binary that is not pre-installed on the runtime image. Which two steps should the developer take to ensure the binary is available? (Choose two.)

Question 83hardmulti select
Read the full Deploying applications explanation →

A company is deploying a microservices architecture on Google Cloud using Cloud Run. They need to ensure that services can communicate securely with each other and with other Google Cloud services, such as Cloud Storage and Secret Manager. Which three steps should they take? (Choose three.)

Question 84easymultiple choice
Read the full DNS explanation →

A company is deploying a static website on Cloud Storage with a custom domain. They want to serve the website over HTTPS. They have created a bucket with the same name as the domain and uploaded the files. They have verified the domain ownership in Search Console and added the bucket as a CNAME record in their DNS. Users report that when they navigate to the domain, they get a 404 error. The company has verified that the bucket's main page suffix is set to index.html. The team is confident the files are uploaded correctly. They need to resolve the 404 error and serve the site over HTTPS. What should they do?

Question 85mediummultiple choice
Read the full Deploying applications explanation →

A team is deploying a containerized application to Google Kubernetes Engine using a Deployment and a Service of type LoadBalancer. The application is a web server that should be accessible on port 80. After deployment, the external IP is assigned, but when they try to access http://<EXTERNAL_IP>:80, they get a connection timeout. The pods are running, and the logs show the web server is listening on port 8080. The team has verified that the cluster firewall rules allow traffic on port 80. They have also confirmed that the pods are healthy and no network policies are in place. What is the most likely cause?

Question 86hardmultiple choice
Read the full Deploying applications explanation →

A company is migrating a legacy Java application to Cloud Run. The application requires a specific Java version (Java 11) and writes temporary files to disk. The application also uses a proprietary library that is not available in public repositories. The team has created a Dockerfile that installs Java 11, copies the JAR file, and sets the entrypoint. They are using Cloud Build to build the container and deploying to Cloud Run. The deployment succeeds, but when they send requests, the application fails with a "Permission denied" error when trying to write to /tmp. The team has verified that the Cloud Run service has the correct permissions via a service account. They have also checked that the filesystem is writable at /tmp by default. What is the most likely cause of the error?

Question 87easymultiple choice
Read the full Deploying applications explanation →

A startup is deploying a Node.js application on App Engine Standard Environment. They have configured the application in app.yaml with runtime: nodejs16. After deploying with gcloud app deploy, the deployment succeeds, but when they access the application, they get a 502 Bad Gateway error. They check the logs and see "Failed to start container" and "Error: Cannot find module 'express'". The application uses Express. The team has confirmed that the package.json file includes express as a dependency. What is the most likely cause?

Question 88mediummultiple choice
Read the full Deploying applications explanation →

A company is deploying a batch job that runs once a day on Compute Engine. They are using a startup script to install dependencies and run the job. The job writes output to Cloud Storage. Recently, the job started failing intermittently with "No space left on device" errors, even though the persistent disk has 100 GB free. The team has verified that the disk is not fragmented and that the inode usage is low. The job processes large files and creates many temporary files in /tmp. They suspect the /tmp directory is filling up. What is the most likely cause?

Question 89easymulti select
Read the full Deploying applications explanation →

A company deploys a containerized application to Cloud Run using Cloud Build. They want to implement a rolling update strategy with zero downtime. Which two actions should they take? (Choose two.)

Question 90mediummultiple choice
Read the full Deploying applications explanation →

Refer to the exhibit. A Cloud Build pipeline that deploys a Cloud Run service fails with the above error. The Cloud Build service account has the roles/run.admin role at the project level. What is the most likely cause?

Exhibit

ERROR: (gcloud.run.deploy) PERMISSION_DENIED: Permission 'run.services.create' denied on resource 'projects/my-project/locations/us-central1/services/my-service' (or the resource may not exist).
Question 91hardmultiple choice
Read the full Deploying applications explanation →

A company runs a Java microservice on Google Kubernetes Engine (GKE) using a standard cluster with 3 nodes. They use Cloud Build to build the Docker image and push it to Artifact Registry, then apply a Kubernetes Deployment manifest that references the new image tag. The Deployment has a rolling update strategy with maxSurge=1 and maxUnavailable=0. After a recent deployment, the new pods crash with 'CrashLoopBackOff'. The old pods are still running successfully. The application logs show a connection refused error when trying to connect to a Cloud SQL instance. The Cloud SQL instance is in the same project and region. The GKE cluster nodes have the appropriate scopes to access Cloud SQL. The application uses a Cloud SQL proxy sidecar container to establish the connection. The previous deployment worked fine. What is the most likely cause of the failure?

Practice tests

Scored 10-question sessions with instant feedback and explanations.

PCD Practice Test 1 — 10 Questions→PCD Practice Test 2 — 10 Questions→PCD Practice Test 3 — 10 Questions→PCD Practice Test 4 — 10 Questions→PCD Practice Test 5 — 10 Questions→PCD Practice Exam 1 — 20 Questions→PCD Practice Exam 2 — 20 Questions→PCD Practice Exam 3 — 20 Questions→PCD Practice Exam 4 — 20 Questions→Free PCD Practice Test 1 — 30 Questions→Free PCD Practice Test 2 — 30 Questions→Free PCD Practice Test 3 — 30 Questions→PCD Practice Questions 1 — 50 Questions→PCD Practice Questions 2 — 50 Questions→PCD Exam Simulation 1 — 100 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Designing highly scalable, available, and reliable cloud-native applicationsBuilding and testing applicationsDeploying applicationsIntegrating Google Cloud servicesManaging application performance monitoring

Practice by scenario

Filter questions by type — troubleshooting, exhibit, drag-and-drop, PBQ, ACLs, OSPF, and more.

Browse scenarios→

Continue studying

All Deploying applications setsAll Deploying applications questionsPCD Practice Hub