Google PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Online Practice Questions and Exam Preparation

Google PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Online Questions & Answers

• Question 11:

  Your company is creating a new cloud-native Google Cloud organization. You expect this Google Cloud organization to first be used by a small number of departments and then expand to be used by a large number of departments. Each department has a large number of applications varying in size. You need to design the VPC network architecture. Your solution must minimize the amount of management required while remaining flexible enough for development teams to quickly adapt to their evolving needs. What should you do?

  A. Create a separate VPC for each department and connect the VPCs with VPC Network Peering.
  B. Create a separate VPC for each department and use Private Service Connect to connect the VPCs.
  C. Create a separate VPC for each application and use Private Service Connect to connect the VPCs.
  D. Create a separate VPC for each department and connect the VPCs with Cloud VPN.
  A. Create a separate VPC for each department and connect the VPCs with VPC Network Peering.

• Question 12:

  Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?

  A. Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
  B. Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/altostrat-images/.
  C. Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat-images.
  D. Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.
  B. Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/altostrat-images/.

• Question 13:

  You need to deploy a new service to production. The service needs to automatically scale using a Managed Instance Group (MIG) and should be deployed over multiple regions. The service needs a large number of resources for each instance and you need to plan for capacity. What should you do?

  A. Use the n1-highcpu-96 machine type in the configuration of the MIG.
  B. Monitor results of Stackdriver Trace to determine the required amount of resources.
  C. Validate that the resource requirements are within the available quota limits of each region.
  D. Deploy the service in one region and use a global load balancer to route traffic to this region.
  C. Validate that the resource requirements are within the available quota limits of each region.

• Question 14:

  You are using Jenkins to orchestrate your CI/CD pipelines deploying your applications to GKE and on-premises VMs. After expanding your on-premises infrastructure, all resource utilization is normal, but you notice that initiating on-premises deployments is taking longer than expected. You need to accelerate the initiation of on-premises deployments. What should you do?

  A. Implement a blue-green deployment strategy for your on-premises VMs.
  B. Upgrade your on-premises VMs to have faster CPUs and more memory.
  C. Increase the number of Jenkins executor threads.
  D. Configure Jenkins to use an artifact repository in your on-premises environment.
  D. Configure Jenkins to use an artifact repository in your on-premises environment.

• Question 15:

  You use a multiple step Cloud Build pipeline to build and deploy your application to Google Kubernetes Engine (GKE). You want to integrate with a third-party monitoring platform by performing a HTTP POST of the build information to a webhook. You want to minimize the development effort. What should you do?

  A. Add logic to each Cloud Build step to HTTP POST the build information to a webhook.
  B. Add a new step at the end of the pipeline in Cloud Build to HTTP POST the build information to a webhook.
  C. Use Stackdriver Logging to create a logs-based metric from the Cloud Build logs. Create an Alert with a Webhook notification type.
  D. Create a Cloud Pub/Sub push subscription to the Cloud Build cloud-builds PubSub topic to HTTP POST the build information to a webhook.
  D. Create a Cloud Pub/Sub push subscription to the Cloud Build cloud-builds PubSub topic to HTTP POST the build information to a webhook.

• Question 16:

  You support a service with a well-defined Service Level Objective (SLO). Over the previous 6 months, your service has consistently met its SLO and customer satisfaction has been consistently high. Most of your service's operations tasks are automated and few repetitive tasks occur frequently. You want to optimize the balance between reliability and deployment velocity while following site reliability engineering best practices. What should you do? (Choose two.)

  A. Make the service's SLO more strict.
  B. Increase the service's deployment velocity and/or risk.
  C. Shift engineering time to other services that need more reliability.
  D. Get the product team to prioritize reliability work over new features.
  E. Change the implementation of your Service Level Indicators (SLIs) to increase coverage.
  B. Increase the service's deployment velocity and/or risk.
  C. Shift engineering time to other services that need more reliability.

• Question 17:

  You use Cloud Build to build and deploy your application. You want to securely incorporate database credentials and other application secrets into the build pipeline. You also want to minimize the development effort. What should you do?

  A. Create a Cloud Storage bucket and use the built-in encryption at rest. Store the secrets in the bucket and grant Cloud Build access to the bucket.
  B. Encrypt the secrets and store them in the application repository. Store a decryption key in a separate repository and grant Cloud Build access to the repository.
  C. Use client-side encryption to encrypt the secrets and store them in a Cloud Storage bucket. Store a decryption key in the bucket and grant Cloud Build access to the bucket.
  D. Use Cloud Key Management Service (Cloud KMS) to encrypt the secrets and include them in your Cloud Build deployment configuration. Grant Cloud Build access to the KeyRing.
  D. Use Cloud Key Management Service (Cloud KMS) to encrypt the secrets and include them in your Cloud Build deployment configuration. Grant Cloud Build access to the KeyRing.

• Question 18:

  You have an application running in Google Kubernetes Engine. The application invokes multiple services per request but responds too slowly. You need to identify which downstream service or services are causing the delay. What should you do?

  A. Analyze VPC flow logs along the path of the request.
  B. Investigate the Liveness and Readiness probes for each service.
  C. Create a Dataflow pipeline to analyze service metrics in real time.
  D. Use a distributed tracing framework such as OpenTelemetry or Stackdriver Trace.
  D. Use a distributed tracing framework such as OpenTelemetry or Stackdriver Trace.

• Question 19:

  Your company runs services by using Google Kubernetes Engine (GKE). The GKE dusters in the development environment run applications with verbose logging enabled. Developers view logs by using the kubectl logs command and do not use Cloud Logging. Applications do not have a uniform logging structure defined. You need to minimize the costs associated with application logging while still collecting GKE operational logs. What should you do?

  A. Run the gcloud container clusters update --logging=SYSTEM command for the development cluster.
  B. Run the gcloud container clusters update --logging=WORKLOAD command for the development cluster.
  C. Run the gcloud logging sinks update _Default --disabled command in the project associated with the development environment.
  D. Add the severity >= DEBUG resource.type = "k8s_container" exclusion filter to the _Default logging sink in the project associated with the development environment.
  C. Run the gcloud logging sinks update _Default --disabled command in the project associated with the development environment.

• Question 20:

  Your company is using HTTPS requests to trigger a public Cloud Run-hosted service accessible at the https://booking-engine-abcdef.a.run.app URL. You need to give developers the ability to test the latest revisions of the service before the service is exposed to customers. What should you do?

  A. Run the gcloud run deploy booking-engine --no-traffic --tag dev command. Use the https://dev--booking-engine-abcdef.a.run.app URL for testing.
  B. Run the gcloud run services update-traffic booking-engine --to-revisions LATEST=1 command. Use the https://booking-engine-abcdef.a.run.app URL for testing.
  C. Pass the curl -H "Authorization:Bearer $(gcloud auth print-identity-token)" auth token. Use the https://booking-engine-abcdef.a.run.app URL to test privately.
  D. Grant the roles/run.invoker role to the developers testing the booking-engine service. Use the https://booking-engine-abcdef.private.run.app URL for testing.
  B. Run the gcloud run services update-traffic booking-engine --to-revisions LATEST=1 command. Use the https://booking-engine-abcdef.a.run.app URL for testing.