ExamGecko
Home Home / Google / Professional Cloud DevOps Engineer

Google Professional Cloud DevOps Engineer Practice Test - Questions Answers, Page 7

Question list
Search
Search

List of questions

Search

Related questions











You support a Node.js application running on Google Kubernetes Engine (GKE) in production. The application makes several HTTP requests to dependent applications. You want to anticipate which dependent applications might cause performance issues. What should you do?

A.
Instrument all applications with Stackdriver Profiler.
A.
Instrument all applications with Stackdriver Profiler.
Answers
B.
Instrument all applications with Stackdriver Trace and review inter-service HTTP requests.
B.
Instrument all applications with Stackdriver Trace and review inter-service HTTP requests.
Answers
C.
Use Stackdriver Debugger to review the execution of logic within each application to instrument all applications.
C.
Use Stackdriver Debugger to review the execution of logic within each application to instrument all applications.
Answers
D.
Modify the Node.js application to log HTTP request and response times to dependent applications. Use Stackdriver Logging to find dependent applications that are performing poorly.
D.
Modify the Node.js application to log HTTP request and response times to dependent applications. Use Stackdriver Logging to find dependent applications that are performing poorly.
Answers
Suggested answer: B

You use Spinnaker to deploy your application and have created a canary deployment stage in the pipeline. Your application has an in-memory cache that loads objects at start time. You want to automate the comparison of the canary version against the production version. How should you configure the canary analysis?

A.
Compare the canary with a new deployment of the current production version.
A.
Compare the canary with a new deployment of the current production version.
Answers
B.
Compare the canary with a new deployment of the previous production version.
B.
Compare the canary with a new deployment of the previous production version.
Answers
C.
Compare the canary with the existing deployment of the current production version.
C.
Compare the canary with the existing deployment of the current production version.
Answers
D.
Compare the canary with the average performance of a sliding window of previous production versions.
D.
Compare the canary with the average performance of a sliding window of previous production versions.
Answers
Suggested answer: A

Explanation:

https://cloud.google.com/architecture/automated-canary-analysis-kubernetes-engine-spinnaker

https://spinnaker.io/guides/user/canary/best-practices/#compare-canary-against-baseline-not-against-production

Your team of Infrastructure DevOps Engineers is growing, and you are starting to use Terraform to manage infrastructure. You need a way to implement code versioning and to share code with other team members. What should you do?

A.
Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master.
A.
Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master.
Answers
B.
Store the Terraform code in a network shared folder with child folders for each version release. Ensure that everyone works on different files.
B.
Store the Terraform code in a network shared folder with child folders for each version release. Ensure that everyone works on different files.
Answers
C.
Store the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.
C.
Store the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.
Answers
D.
Store the Terraform code in a shared Google Drive folder so it syncs automatically to every team member's computer. Organize files with a naming convention that identifies each new version.
D.
Store the Terraform code in a shared Google Drive folder so it syncs automatically to every team member's computer. Organize files with a naming convention that identifies each new version.
Answers
Suggested answer: A

Explanation:

https://www.terraform.io/docs/cloud/guides/recommended-practices/part3.3.html

You are using Stackdriver to monitor applications hosted on Google Cloud Platform (GCP). You recently deployed a new application, but its logs are not appearing on the Stackdriver dashboard.

You need to troubleshoot the issue. What should you do?

A.
Confirm that the Stackdriver agent has been installed in the hosting virtual machine.
A.
Confirm that the Stackdriver agent has been installed in the hosting virtual machine.
Answers
B.
Confirm that your account has the proper permissions to use the Stackdriver dashboard.
B.
Confirm that your account has the proper permissions to use the Stackdriver dashboard.
Answers
C.
Confirm that port 25 has been opened in the firewall to allow messages through to Stackdriver.
C.
Confirm that port 25 has been opened in the firewall to allow messages through to Stackdriver.
Answers
D.
Confirm that the application is using the required client library and the service account key has proper permissions.
D.
Confirm that the application is using the required client library and the service account key has proper permissions.
Answers
Suggested answer: A

Explanation:

https://cloud.google.com/monitoring/agent/monitoring/troubleshooting#checklist

Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to the production environment. A recent security audit alerted your team that the code pushed to production could contain vulnerabilities and that the existing tooling around virtual machine (VM) vulnerabilities no longer applies to the containerized environment. You need to ensure the security and patch level of all code running through the pipeline. What should you do?

A.
Set up Container Analysis to scan and report Common Vulnerabilities and Exposures.
A.
Set up Container Analysis to scan and report Common Vulnerabilities and Exposures.
Answers
B.
Configure the containers in the build pipeline to always update themselves before release.
B.
Configure the containers in the build pipeline to always update themselves before release.
Answers
C.
Reconfigure the existing operating system vulnerability software to exist inside the container.
C.
Reconfigure the existing operating system vulnerability software to exist inside the container.
Answers
D.
Implement static code analysis tooling against the Docker files used to create the containers.
D.
Implement static code analysis tooling against the Docker files used to create the containers.
Answers
Suggested answer: D

Explanation:

https://cloud.google.com/binary-authorization

Binary Authorization is a deploy-time security control that ensures only trusted container images are deployed on Google Kubernetes Engine (GKE) or Cloud Run. With Binary Authorization, you can require images to be signed by trusted authorities during the development process and then enforce signature validation when deploying. By enforcing validation, you can gain tighter control over your container environment by ensuring only verified images are integrated into the build-and-release process.

You use Cloud Build to build your application. You want to reduce the build time while minimizing cost and development effort. What should you do?

A.
Use Cloud Storage to cache intermediate artifacts.
A.
Use Cloud Storage to cache intermediate artifacts.
Answers
B.
Run multiple Jenkins agents to parallelize the build.
B.
Run multiple Jenkins agents to parallelize the build.
Answers
C.
Use multiple smaller build steps to minimize execution time.
C.
Use multiple smaller build steps to minimize execution time.
Answers
D.
Use larger Cloud Build virtual machines (VMs) by using the machine-type option.
D.
Use larger Cloud Build virtual machines (VMs) by using the machine-type option.
Answers
Suggested answer: C

Explanation:

https://cloud.google.com/storage/docs/best-practices

. https://cloud.google.com/build/docs/speeding-up-builds#caching_directories_with_google_cloud_storage

Caching directories with Google Cloud Storage To increase the speed of a build, reuse the results from a previous build. You can copy the results of a previous build to a Google Cloud Storage bucket, use the results for faster calculation, and then copy the new results back to the bucket. Use this method when your build takes a long time and produces a small number of files that does not take time to copy to and from Google Cloud Storage.

upvoted2times

You support a web application that is hosted on Compute Engine. The application provides a booking service for thousands of users. Shortly after the release of a new feature, your monitoring dashboard shows that all users are experiencing latency at login. You want to mitigate the impact of the incident on the users of your service. What should you do first?

A.
Roll back the recent release.
A.
Roll back the recent release.
Answers
B.
Review the Stackdriver monitoring.
B.
Review the Stackdriver monitoring.
Answers
C.
Upsize the virtual machines running the login services.
C.
Upsize the virtual machines running the login services.
Answers
D.
Deploy a new release to see whether it fixes the problem.
D.
Deploy a new release to see whether it fixes the problem.
Answers
Suggested answer: C

Explanation:

Rollback to previous stable version. Then you need to find what is causing the issue.

You are deploying an application that needs to access sensitive information. You need to ensure that this information is encrypted and the risk of exposure is minimal if a breach occurs. What should you do?

A.
Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently
A.
Store the encryption keys in Cloud Key Management Service (KMS) and rotate the keys frequently
Answers
B.
Inject the secret at the time of instance creation via an encrypted configuration management system.
B.
Inject the secret at the time of instance creation via an encrypted configuration management system.
Answers
C.
Integrate the application with a Single sign-on (SSO) system and do not expose secrets to the application
C.
Integrate the application with a Single sign-on (SSO) system and do not expose secrets to the application
Answers
D.
Leverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.
D.
Leverage a continuous build pipeline that produces multiple versions of the secret for each instance of the application.
Answers
Suggested answer: A

Explanation:

https://cloud.google.com/security-key-management

You encounter a large number of outages in the production systems you support. You receive alerts for all the outages that wake you up at night. The alerts are due to unhealthy systems that are automatically restarted within a minute. You want to set up a process that would prevent staff burnout while following Site Reliability Engineering practices. What should you do?

A.
Eliminate unactionable alerts.
A.
Eliminate unactionable alerts.
Answers
B.
Create an incident report for each of the alerts.
B.
Create an incident report for each of the alerts.
Answers
C.
Distribute the alerts to engineers in different time zones.
C.
Distribute the alerts to engineers in different time zones.
Answers
D.
Redefine the related Service Level Objective so that the error budget is not exhausted.
D.
Redefine the related Service Level Objective so that the error budget is not exhausted.
Answers
Suggested answer: A

Explanation:

Eliminate bad monitoring : Unactionable alerts (i.e., spam) https://cloud.google.com/blog/products/management-tools/meeting-reliability-challenges-with-sre-principles

agree with kyubiblaze about having to remove unactionable items aka spam: 'good monitoring alerts on actionable problems' @ https://cloud.google.com/blog/products/management-tools/meeting-reliability-challenges-with-sre-principles

You have migrated an e-commerce application to Google Cloud Platform (GCP). You want to prepare the application for the upcoming busy season. What should you do first to prepare for the busy season?

A.
Load teat the application to profile its performance for scaling.
A.
Load teat the application to profile its performance for scaling.
Answers
B.
Enable AutoScaling on the production clusters, in case there is growth.
B.
Enable AutoScaling on the production clusters, in case there is growth.
Answers
C.
Pre-provision double the compute power used last season, expecting growth.
C.
Pre-provision double the compute power used last season, expecting growth.
Answers
D.
Create a runbook on inflating the disaster recovery (DR) environment if there is growth.
D.
Create a runbook on inflating the disaster recovery (DR) environment if there is growth.
Answers
Suggested answer: A

Explanation:

https://cloud.google.com/blog/topics/retail/preparing-for-peak-holiday-season-while-wfh

Total 166 questions
Go to page: of 17