Google PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Online Questions & Answers

• Question 1:

  The new version of your containerized application has been tested and is ready to be deployed to production on Google Kubernetes Engine (GKE). You could not fully load-test the new version in your pre-production environment, and you need to ensure that the application does not have performance problems after deployment. Your deployment must be automated. What should you do?

  A. Deploy the application through a continuous delivery pipeline by using canary deployments. Use Cloud Monitoring to look for performance issues, and ramp up traffic as supported by the metrics.
  B. Deploy the application through a continuous delivery pipeline by using blue/green deployments. Migrate traffic to the new version of the application and use Cloud Monitoring to look for performance issues.
  C. Deploy the application by using kubectl and use Config Connector to slowly ramp up traffic between versions. Use Cloud Monitoring to look for performance issues.
  D. Deploy the application by using kubectl and set the spec.updateStrategy.type field to RollingUpdate. Use Cloud Monitoring to look for performance issues, and run the kubectl rollback command if there are any issues.
  A. Deploy the application through a continuous delivery pipeline by using canary deployments. Use Cloud Monitoring to look for performance issues, and ramp up traffic as supported by the metrics.

• Question 2:

  You are creating Cloud Logging sinks to export log entries from Cloud Logging to BigQuery for future analysis. Your organization has a Google Cloud folder named Dev that contains development projects and a folder named Prod that contains production projects. Log entries for development projects must be exported to dev_dataset, and log entries for production projects must be exported to prod_dataset. You need to minimize the number of log sinks created, and you want to ensure that the log sinks apply to future projects. What should you do?

  A. Create a single aggregated log sink at the organization level.
  B. Create a log sink in each project.
  C. Create two aggregated log sinks at the organization level, and filter by project ID.
  D. Create an aggregated log sink in the Dev and Prod folders.
  A. Create a single aggregated log sink at the organization level.

• Question 3:

  You are designing a new Google Cloud organization for a client. Your client is concerned with the risks associated with long-lived credentials created in Google Cloud. You need to design a solution to completely eliminate the risks associated with the use of JSON service account keys while minimizing operational overhead. What should you do?

  A. Apply the constraints/iam.disableServiceAccountKevCreation constraint to the organization.
  B. Use custom versions of predefined roles to exclude all iam.serviceAccountKeys.* service account role permissions.
  C. Apply the constraints/iam.disableServiceAccountKeyUpload constraint to the organization.
  D. Grant the roles/iam.serviceAccountKeyAdmin IAM role to organization administrators only.
  D. Grant the roles/iam.serviceAccountKeyAdmin IAM role to organization administrators only.

• Question 4:

  You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?

  A. Enable Cloud Security Scanner on the clusters.
  B. Enable Vulnerability Analysis on the Container Registry.
  C. Set up the Kubernetes Engine clusters as private clusters.
  D. Set up the Kubernetes Engine clusters with Binary Authorization.
  D. Set up the Kubernetes Engine clusters with Binary Authorization.

• Question 5:

  You use Spinnaker to deploy your application and have created a canary deployment stage in the pipeline. Your application has an in-memory cache that loads objects at start time. You want to automate the comparison of the canary version against the production version. How should you configure the canary analysis?

  A. Compare the canary with a new deployment of the current production version.
  B. Compare the canary with a new deployment of the previous production version.
  C. Compare the canary with the existing deployment of the current production version.
  D. Compare the canary with the average performance of a sliding window of previous production versions.
  A. Compare the canary with a new deployment of the current production version.

• Question 6:

  Your company is migrating its production systems to Google Cloud. You need to implement site reliability engineering (SRE) practices during the migration to minimize customer impact from potential future incidents. Which two SRE practices should you implement? Choose 2 answers

  A. Ensure that full autonomy and permissions are only granted to the on-call team.
  B. Automate common tasks to analyze key impact information and intelligently suggest mitigating actions for the on-call team.
  C. Ensure that all teams can modify the production environment to resolve issues.
  D. Create an alerting mechanism for your SRE team based on your system's internal behavior.
  E. Create up-to-date playbooks with instructions for debugging and mitigating issues.
  B. Automate common tasks to analyze key impact information and intelligently suggest mitigating actions for the on-call team.
  E. Create up-to-date playbooks with instructions for debugging and mitigating issues.

• Question 7:

  You created a Stackdriver chart for CPU utilization in a dashboard within your workspace project. You want to share the chart with your Site Reliability Engineering (SRE) team only. You want to ensure you follow the principle of least privilege. What should you do?

  A. Share the workspace Project ID with the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.
  B. Share the workspace Project ID with the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
  C. Click "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.
  D. Click "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
  C. Click "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.

• Question 8:

  You are analyzing Java applications in production. All applications have Cloud Profiler and Cloud Trace installed and configured by default. You want to determine which applications need performance tuning. What should you do? (Choose two.)

  A. Examine the wall-clock time and the CPU time of the application. If the difference is substantial increase the CPU resource allocation.
  B. Examine the wall-clock time and the CPU time of the application. If the difference is substantial, increase the memory resource allocation.
  C. Examine the wall-clock time and the CPU time of the application. If the difference is substantial, increase the local disk storage allocation.
  D. Examine the latency time the wall-clock time and the CPU time of the application. If the latency time is slowly burning down the error budget, and the difference between wall-clock time and CPU time is minimal mark the application for optimization.
  E. Examine the heap usage of the application. If the usage is low, mark the application for optimization.
  A. Examine the wall-clock time and the CPU time of the application. If the difference is substantial increase the CPU resource allocation.
  D. Examine the latency time the wall-clock time and the CPU time of the application. If the latency time is slowly burning down the error budget, and the difference between wall-clock time and CPU time is minimal mark the application for optimization.

• Question 9:

  Your organization has a containerized web application that runs on-premises. As part of the migration plan to Google Cloud, you need to select a deployment strategy and platform that meets the following acceptance criteria:

  1. The platform must be able to direct traffic from Android devices to an Android-specific microservice.

  2. The platform must allow for arbitrary percentage-based traffic splitting

  3. The deployment strategy must allow for continuous testing of multiple versions of any microservice.

  What should you do?

  A. Deploy the canary release of the application to Cloud Run. Use traffic splitting to direct 10% of user traffic to the canary release based on the revision tag.
  B. Deploy the canary release of the application to App Engine. Use traffic splitting to direct a subset of user traffic to the new version based on the IP address.
  C. Deploy the canary release of the application to Compute Engine. Use Anthos Service Mesh with Compute Engine to direct 10% of user traffic to the canary release by configuring the virtual service.
  D. Deploy the canary release to Google Kubernetes Engine with Anthos Service Mesh. Use traffic splitting to direct 10% of user traffic to the new version based on the user-agent header configured in the virtual service.
  C. Deploy the canary release of the application to Compute Engine. Use Anthos Service Mesh with Compute Engine to direct 10% of user traffic to the canary release by configuring the virtual service.

• Question 10:

  You are responsible for creating and modifying the Terraform templates that define your Infrastructure. Because two new engineers will also be working on the same code, you need to define a process and adopt a tool that will prevent you from overwriting each other's code. You also want to ensure that you capture all updates in the latest version. What should you do?

  A. Store your code in a Git-based version control system. Establish a process that allows developers to merge their own changes at the end of each day. Package and upload code to a versioned Cloud Storage basket as the latest master version.
  B. Store your code in a Git-based version control system. Establish a process that includes code reviews by peers and unit testing to ensure integrity and functionality before integration of code. Establish a process where the fully integrated code in the repository becomes the latest master version.
  C. Store your code as text files in Google Drive in a defined folder structure that organizes the files. At the end of each day, confirm that all changes have been captured in the files within the folder structure. Rename the folder structure with a predefined naming convention that increments the version.
  D. Store your code as text files in Google Drive in a defined folder structure that organizes the files. At the end of each day, confirm that all changes have been captured in the files within the folder structure and create a new .zip archive with a predefined naming convention. Upload the .zip archive to a versioned Cloud Storage bucket and accept it as the latest version.
  B. Store your code in a Git-based version control system. Establish a process that includes code reviews by peers and unit testing to ensure integrity and functionality before integration of code. Establish a process where the fully integrated code in the repository becomes the latest master version.