New 2021 Realistic Free Google Professional-Cloud-DevOps-Engineer Exam Dump Questions & Answer
Professional-Cloud-DevOps-Engineer Practice Test Engine: Try These 83 Exam Questions
Domains Tested in Final Evaluation
The candidates who succeed in passing the Google Professional Cloud DevOps Engineer validation will add an international designation under their belt that helps them consolidate their position in the company and receive generous offers from their employers. So, if applicants want to differentiate themselves from other colleagues, they should demonstrate the following skills:
- Identifying issues related to service performance and implementing solutions to optimize it;
- Coordinating teams to identify and manage incidents related to service development.
- Implementing and building CI/CD service pipelines;
- Identifying the most effective principles related to site reliability engineering and applying them to a definite service;
- Checking and implementing strategies related to service monitoring;
NEW QUESTION 18
You have a pool of application servers running on Compute Engine. You need to provide a secure solution that requires the least amount of configuration and allows developers to easily access application logs for troubleshooting. How would you implement the solution on GCP?
- A. * Deploy the Stackdriver logging agent to the application servers.
* Give the developers the IAM Logs Viewer role to access Stackdriver and view logs. - B. * Deploy the Stackdriver monitoring agent to the application servers.
* Give the developers the IAM Monitoring Viewer role to access Stackdriver and view metrics. - C. * Deploy the Stackdriver logging agent to the application servers.
* Give the developers the IAM Logs Private Logs Viewer role to access Stackdriver and view logs. - D. * Install the gsutil command line tool on your application servers.
* Write a script using gsutil to upload your application log to a Cloud Storage bucket, and then schedule it to run via cron every 5 minutes.
* Give the developers IAM Object Viewer access to view the logs in the specified bucket.
Answer: C
NEW QUESTION 19
You support an application running on GCP and want to configure SMS notifications to your team for the most critical alerts in Stackdriver Monitoring. You have already identified the alerting policies you want to configure this for. What should you do?
- A. Download and configure a third-party integration between Stackdriver Monitoring and an SMS gateway.
Ensure that your team members add their SMS/phone numbers to the external tool. - B. Configure a Slack notification for each alerting policy. Set up a Slack-to-SMS integration to send SMS messages when Slack messages are received. Ensure that your team members add their SMS/phone numbers to the external integration.
- C. Ensure that your team members set their SMS/phone numbers in their Stackdriver Profile. Select the SMS notification option for each alerting policy and then select the appropriate SMS/phone numbers from the list.
- D. Select the Webhook notifications option for each alerting policy, and configure it to use a third-party integration tool. Ensure that your team members add their SMS/phone numbers to the external tool.
Answer: B
NEW QUESTION 20
Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach. What should you do?
- A. Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it
- B. Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.
- C. Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
- D. Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.
Answer: B
NEW QUESTION 21
You support a large service with a well-defined Service Level Objective (SLO). The development team deploys new releases of the service multiple times a week. If a major incident causes the service to miss its SLO, you want the development team to shift its focus from working on features to improving service reliability. What should you do before a major incident occurs?
- A. Negotiate with the development team to reduce the release frequency to no more than once a week.
- B. Negotiate with the product team to always prioritize service reliability over releasing new features.
- C. Develop an appropriate error budget policy in cooperation with all service stakeholders.
- D. Add a plugin to your Jenkins pipeline that prevents new releases whenever your service is out of SLO.
Answer: B
NEW QUESTION 22
You support an application running on App Engine. The application is used globally and accessed from various device types. You want to know the number of connections. You are using Stackdriver Monitoring for App Engine. What metric should you use?
- A. flex/connections/current
- B. tcp_ssl_proxy/open_connections
- C. (lex/jnstance/connections/current
- D. tcp_ssl_proxy/new_connections
Answer: A
NEW QUESTION 23
Your application images are built wing Cloud Build and pushed to Google Container Registry (GCR). You want to be able to specify a particular version of your application for deployment based on the release version tagged in source control. What would you do when you push the image?
- A. Use GCR digest versioning to match the image to the tag in source control.
- B. Use Cloud Build to include the release version tag in the application image.
- C. Reference the image digest in the source control tag.
- D. Supply the source control tag as a parameter within the image name.
Answer: B
NEW QUESTION 24
Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?
- A. Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.
- B. Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
- C. Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat- images.
- D. Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/altostrat-images/.
Answer: A
NEW QUESTION 25
Your company follows Site Reliability Engineering practices. You are the Incident Commander for a new. customer-impacting incident. You need to immediately assign two incident management roles to assist you in an effective incident response. What roles should you assign?
Choose 2 answers
- A. Communications Lead
- B. External Customer Communications Lead
- C. Operations Lead
- D. Engineering Lead
- E. Customer Impact Assessor
Answer: B,C
NEW QUESTION 26
Your team uses Cloud Build for all CI/CO pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE). You need to authenticate to GKE while minimizing development effort. What should you do?
- A. Specify the Container Developer role for Cloud Build in the cloudbuild.yaml file.
- B. Create a separate step in Cloud Build to retrieve service account credentials and pass these to kubectl.
- C. Create a new service account with the Container Developer role and use it to run Cloud Build.
- D. Assign the Container Developer role to the Cloud Build service account.
Answer: D
Explanation:
https://cloud.google.com/build/docs/deploying-builds/deploy-gke
https://cloud.google.com/build/docs/securing-builds/configure-user-specified-service-accounts
NEW QUESTION 27
Your team has recently deployed an NGINX-based application into Google Kubernetes Engine (GKE) and has exposed it to the public via an HTTP Google Cloud Load Balancer (GCLB) ingress. You want to scale the deployment of the application's frontend using an appropriate Service Level Indicator (SLI). What should you do?
- A. Install the Stackdriver custom metrics adapter and configure a horizontal pod autoscaler to use the number of requests provided by the GCLB.
- B. Expose the NGINX stats endpoint and configure the horizontal pod autoscaler to use the request metrics exposed by the NGINX deployment.
- C. Configure the vertical pod autoscaler in GKE and enable the cluster autoscaler to scale the cluster as pods expand.
- D. Configure the horizontal pod autoscaler to use the average response time from the Liveness and Readiness probes.
Answer: A
Explanation:
https://cloud.google.com/kubernetes-engine/docs/tutorials/autoscaling-metrics
NEW QUESTION 28
You are running an application on Compute Engine and collecting logs through Stackdriver. You discover that some personally identifiable information (PII) is leaking into certain log entry fields. You want to prevent these fields from being written in new log entries as quickly as possible. What should you do?
- A. Wait for the application developers to patch the application, and then verify that the log entries are no longer exposing PII.
- B. Use the filter-record-transformer Fluentd filter plugin to remove the fields from the log entries in flight.
- C. Use the fluent-plugin-record-reformer Fluentd output plugin to remove the fields from the log entries in flight.
- D. Stage log entries to Cloud Storage, and then trigger a Cloud Function to remove the fields and write the entries to Stackdriver via the Stackdriver Logging API.
Answer: C
NEW QUESTION 29
Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?
- A. Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.
- B. Use an Admission Controller to verify that incoming requests originate from approved sources.
- C. Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
- D. Configure the build system with protected branches that require pull request approval.
Answer: A
Explanation:
The keywords here is "developers or operators". Option A the operators could push images to production without approval (operators could touch the cluster directly and the cluster cannot do any action against them). Rest same as francisco_guerra.
NEW QUESTION 30
You support a high-traffic web application that runs on Google Cloud Platform (GCP). You need to measure application reliability from a user perspective without making any engineering changes to it. What should you do?
Choose 2 answers
- A. Modify the code to capture additional information for user interaction.
- B. Analyze the web proxy logs only and capture response time of each request.
- C. Review current application metrics and add new ones as needed.
- D. Create new synthetic clients to simulate a user journey using the application.
- E. Use current and historic Request Logs to trace customer interaction with the application.
Answer: A,D
NEW QUESTION 31
You support a Node.js application running on Google Kubernetes Engine (GKE) in production. The application makes several HTTP requests to dependent applications. You want to anticipate which dependent applications might cause performance issues. What should you do?
- A. Use Stackdriver Debugger to review the execution of logic within each application to instrument all applications.
- B. Modify the Node.js application to log HTTP request and response times to dependent applications. Use Stackdriver Logging to find dependent applications that are performing poorly.
- C. Instrument all applications with Stackdriver Profiler.
- D. Instrument all applications with Stackdriver Trace and review inter-service HTTP requests.
Answer: D
NEW QUESTION 32
You are ready to deploy a new feature of a web-based application to production. You want to use Google Kubernetes Engine (GKE) to perform a phased rollout to half of the web server pods.
What should you do?
- A. Use a replica set in the deployment specification.
- B. Use a partitioned rolling update.
- C. Use a stateful set with parallel pod management policy.
- D. Use Node taints with NoExecute.
Answer: B
NEW QUESTION 33
Your company follows Site Reliability Engineering practices. You are the person in charge of Communications for a large, ongoing incident affecting your customer-facing applications. There is still no estimated time for a resolution of the outage. You are receiving emails from internal stakeholders who want updates on the outage, as well as emails from customers who want to know what is happening. You want to efficiently provide updates to everyone affected by the outage. What should you do?
- A. Provide all internal stakeholder emails to the Incident Commander, and allow them to manage internal communications. Focus on providing responses directly to customers.
- B. Focus on responding to internal stakeholders at least every 30 minutes. Commit to "next update" times.
- C. Delegate the responding to internal stakeholder emails to another member of the Incident Response Team. Focus on providing responses directly to customers.
- D. Provide periodic updates to all stakeholders in a timely manner. Commit to a "next update" time in all communications.
Answer: C
NEW QUESTION 34
You encounter a large number of outages in the production systems you support. You receive alerts for all the outages that wake you up at night. The alerts are due to unhealthy systems that are automatically restarted within a minute. You want to set up a process that would prevent staff burnout while following Site Reliability Engineering practices. What should you do?
- A. Distribute the alerts to engineers in different time zones.
- B. Create an incident report for each of the alerts.
- C. Eliminate unactionable alerts.
- D. Redefine the related Service Level Objective so that the error budget is not exhausted.
Answer: C
NEW QUESTION 35
Your team uses Cloud Build for all CI/CO pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE). You need to authenticate to GKE while minimizing development effort. What should you do?
- A. Specify the Container Developer role for Cloud Build in the cloudbuild.yaml file.
- B. Create a separate step in Cloud Build to retrieve service account credentials and pass these to kubectl.
- C. Create a new service account with the Container Developer role and use it to run Cloud Build.
- D. Assign the Container Developer role to the Cloud Build service account.
Answer: D
NEW QUESTION 36
Your application images are built and pushed to Google Container Registry (GCR). You want to build an automated pipeline that deploys the application when the image is updated while minimizing the development effort. What should you do?
- A. Use Cloud Build to trigger a Spinnaker pipeline.
- B. Use Cloud Pub/Sub to trigger a custom deployment service running in Google Kubernetes Engine (GKE).
- C. Use Cloud Pub/Sub to bigger a Spinnaker pipeline.
- D. Use a custom builder in Cloud Build to trigger Jenkins pipeline.
Answer: B
NEW QUESTION 37
......
Topics of Google Professional Cloud DevOps Engineer Exam
Candidates must know the exam topics before they start preparation because it will help them in hitting the core. Our Professional Cloud DevOps Engineer Dumps will include the following topics:
Applying site reliability engineering principles to a service
- Agree to consequences of not meeting the error budget
- Toil automation
- 1.2 Manage service life cycle:
- Balance change, velocity, and reliability of the service:
- Manage a service (e.g., introduce a new service, deploy it, maintain and retire it)
- Define SLOs and understand SLAs
- Construct feedback loops to decide what to build next
- Discover SLIs (availability, latency, etc.)
Building and implementing CI/CD pipelines for a service
- Deployment to hybrid and multi-cloud environments with Anthos, Spinnaker, Kubernetes
- Deployment strategies with Cloud Build, Spinnaker
- CI/CD pipeline triggers with Cloud Source Repositories, Cloud Build GitHub App, Cloud Pub/Sub
- Configure deployment processes (e.g., approval flows)
- Testing a new version with Spinnaker
- Immutable artifacts with Container Registry
- Design CI/CD pipelines:
- Artifact versioning strategy with Cloud Build, Container Registry
- Artifact repositories with Container Registry
Implementing service monitoring strategies
- Set ACL to restrict export configuration with IAM, Stackdriver Logging
- Implementing a project-level / org-level export
- Using basic vs. advanced logging filters
- Set ACL to restrict access to audit logs with IAM, Stackdriver Logging
- Implementing logs-based metrics
- Use metric explorer for ad hoc metric analysis
- Understanding the logging exclusion vs. logging export
- Manage application logs:
- Sending application logs directly to Stackdriver API with Stackdriver Logging
- Set ACL to allow metric writing for custom metrics with IAM, Stackdriver Monitoring
- Collecting GKE/Kubernetes metrics
- Collecting logs from Compute Engine, GKE with Stackdriver Logging, Fluentd
- Enabling VPC flow logs
- Viewing logs in the GCP Console
- Collecting metrics from Compute Engine
- Viewing export logs in Cloud Storage and BigQuery
- Collecting third-party and structured logs with Stackdriver Logging, Fluentd
- Selecting the options for logging export
- Sending logs to an external logging platform
- Enabling data access logs (e.g., Cloud Audit Logs)
Optimizing service performance
- Troubleshoot network issues (e.g., VPC flow logs, firewall logs, latency, view network details)
- Manage preemptible VMs
- Develop a plan to optimize areas of greatest cost or lowest utilization
- Troubleshoot issues with the image/OS
- Identify service performance issues:
- Consider network pricing
- Interpret service mesh telemetry
- Work with committed-use discounts
- Utilize Stackdriver Trace/Profiler to profile performance characteristics
- Utilize Stackdriver to identify cloud resource utilization
- Evaluate and understand user impact (Stackdriver Service Monitoring for App Engine, Istio)
- TCO considerations
- identify resource costs
- Identify resource utilization levels
Managing service incidents
- Manage stakeholder relationships
- Scaling response team and delegation
- Avoid exhaustion/burnout
- Provide regular status updates, internal and external
- Evaluate symptoms against probable causes; the rank probability of cause based on observed behavior
- Identify alternatives to mitigate the issue
- Handle requests for impact assessment
- Perform an investigation to isolate the most likely actual cause
- Coordinate roles and implement communication channels during a service incident:
- Record major changes in incident state (When mitigated? When all clear? etc.)
- Rotate/hand over roles
- Identify probable causes of service failure
- Establish communications channels (email, IRC, Hangouts, Slack, phone, etc.)
- Define roles (incident commander, communication lead, operations lead)
Guaranteed Success in Cloud DevOps Engineer Professional-Cloud-DevOps-Engineer Exam Dumps: https://www.exams4collection.com/Professional-Cloud-DevOps-Engineer-latest-braindumps.html
Google Professional-Cloud-DevOps-Engineer Daily Practice Exam New 2021 Updated 83 Questions: https://drive.google.com/open?id=1X76VyjTk_ihx-FKmty2oNN6KW6MDRuKF
