Google PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Online Questions & Answers

• Question 1:

  You are running a web application that connects to an AlloyDB cluster by using a private IP address in your default VPC. You need to run a database schema migration in your CI/CD pipeline by using Cloud Build before deploying a new version of your application. You want to follow Google-recommended security practices. What should you do?

  A. Set up a Cloud Build private pool to access the database through a static external IP address. Configure the database to only allow connections from this IP address. Execute the schema migration script in the private pool.
  B. Create a service account that has permission to access the database. Configure Cloud Build to use this service account and execute the schema migration script in a private pool.
  C. Add the database username and encrypted password to the application configuration file. Use these credentials in Cloud Build to execute the schema migration script.
  D. Add the database username and password to Secret Manager. When running the schema migration script, retrieve the username and password from Secret Manager.
  B. Create a service account that has permission to access the database. Configure Cloud Build to use this service account and execute the schema migration script in a private pool.

• Question 2:

  You recently configured an App Hub application. You are able to see the managed instance group, backend service, and URL map listed in App Hub, but you do not see the forwarding rule. You must ensure that the forwarding rule is listed. What should you do?

  A. Attach the project containing the forwarding rule as an App Hub service project.
  B. Enable the App Hub API in the project containing the forwarding rule.
  C. Configure the forwarding rule to forward to the correct target proxy.
  D. Register the forwarding rule as a service in the application configuration.
  D. Register the forwarding rule as a service in the application configuration.

• Question 3:

  You recently created a Cloud Build pipeline for deploying Terraform code stored in a GitHub repository. You make Terraform code changes in short-lived branches and sometimes use tags during development. You tag releases with a semantic version when they are ready for deployment. You require your pipeline to apply the Terraform code whenever there is a new release, and you need to minimize operational overhead. What should you do?

  A. Create a build trigger with the * branch pattern.
  B. Create a build trigger with the \d+\.\d+\.\d* tag pattern.
  C. Create a build trigger with the .* tag pattern.
  D. Create a build trigger with the \d*\.\d+\.\d* branch pattern.
  B. Create a build trigger with the \d+\.\d+\.\d* tag pattern.

• Question 4:

  Your company has recently experienced several production service issues. You need to create a Cloud Monitoring dashboard to troubleshoot the issues, and you want to use the dashboard to distinguish between failures in your own service and those caused by a Google Cloud service that you use. What should you do?

  A. Enable Personalized Service Health annotations on the dashboard.
  B. Create an alerting policy for the system error metrics.
  C. Create a log-based metric to track cloud service errors, and display the metric on the dashboard.
  D. Create a logs widget to display system errors from Cloud Logging on the dashboard.
  A. Enable Personalized Service Health annotations on the dashboard.

• Question 5:

  Your team is preparing to launch a new API in Cloud Run. The API uses an OpenTelemetry agent to send distributed tracing data to Cloud Trace to monitor the time each request takes. The team has noticed inconsistent trace collection. You need to resolve the issue. What should you do?

  A. Increase the CPU limit in Cloud Run from 2 to 4.
  B. Use an HTTP health check.
  C. Configure CPU to be allocated only during request processing.
  D. Configure CPU to be always-allocated.
  D. Configure CPU to be always-allocated.

• Question 6:

  You work for a healthcare company and regulations require you to create all resources in a United States-based region. You attempted to create a secret in Secret Manager but received the following error message:

  The resource cannot be created in the global location due to an organization policy restriction.

  You need to resolve the error while remaining compliant with regulations.

  What should you do?

  A. Create the secret with an automatic replication policy.
  B. Create the secret with a user-managed replication policy.
  C. Remove the organization policy referenced in the error message.
  D. Add the global region to the organization policy referenced in the error message.
  B. Create the secret with a user-managed replication policy.

• Question 7:

  You are troubleshooting a failed deployment in your CI/CD pipeline. The deployment logs indicate that the application container failed to start due to a missing environment variable. You need to identify the root cause and implement a solution within your CI/CD workflow to prevent this issue from recurring. What should you do?

  A. Run integration tests in the CI pipeline.
  B. Implement static code analysis in the CI pipeline.
  C. Use a canary deployment strategy.
  D. Enable Cloud Audit Logs for the deployment.
  A. Run integration tests in the CI pipeline.

• Question 8:

  You have an application deployed to Cloud Run. A new version of the application has recently been deployed using the canary deployment strategy. Your Site Reliability Engineering (SRE) teammate informs you that an SLO has been exceeded for this application. You need to make the application healthy as quickly as possible. What should you do first?

  A. Configure traffic splitting to send 100% of the traffic to the latest revision.
  B. Configure traffic splitting to send 100% of the traffic to the previous revision.
  C. Create a new revision using the last known good version of the application.
  D. Identify the cause of the latency by using Cloud Trace.
  B. Configure traffic splitting to send 100% of the traffic to the previous revision.

• Question 9:

  Your company stores a large volume of infrequently used data in Cloud Storage. The projects in your company's CustomerService folder access Cloud Storage frequently, but store very little data. You want to enable Data Access audit logging across the company to identify data usage patterns. You need to exclude the CustomerService folder projects from Data Access audit logging. What should you do?

  A. Enable Data Access audit logging for Cloud Storage for all projects and folders, and configure exempted principals to include users of the CustomerService folder.
  B. Enable Data Access audit logging for Cloud Storage at the organization level, with no additional configuration.
  C. Enable Data Access audit logging for Cloud Storage at the organization level, and configure exempted principals to include users of the CustomerService folder.
  D. Enable Data Access audit logging for Cloud Storage for all projects and folders other than the CustomerService folder.
  C. Enable Data Access audit logging for Cloud Storage at the organization level, and configure exempted principals to include users of the CustomerService folder.

• Question 10:

  Your team has an application built by using a Dockerfile. The build is executed from Cloud Build, and the resulting artifacts are stored in Artifact Registry. Your team is reporting that builds are slow. You need to increase build speed, while following Google-recommended practices. What should you do?

  A. Use the --cache-from parameter, and point to Artifact Registry. Add the most frequently modified files to the later stages of the build process.
  B. Use the --cache-from parameter, and point to Artifact Registry. Add the most frequently modified files to the earlier stages of the build process.
  C. Cache the container layers of the build process to Cloud Storage. Add the most frequently modified files to the earlier stages of the build process.
  D. Cache the container layers of the build process to Cloud Storage. Add the most frequently modified files to the later stages of the build process.
  A. Use the --cache-from parameter, and point to Artifact Registry. Add the most frequently modified files to the later stages of the build process.