Professional-Cloud-DevOps-Engineer Exam Questions Get Updated [2022] with Correct Answers
Practice Professional-Cloud-DevOps-Engineer Questions With Certification guide Q&A from Training Expert Lead2PassExam
Preparation Resources for Certification Test
Passing this Google exam is possible from the first attempt if you combine different preparation resources such as the ones offered by the vendor and the books available on Amazon. In case you’re on the lookout for the most effective revision materials, here’s our choice:
- Google Cloud DevOps Engineer Learning Path
The vendor has developed a comprehensive learning path for candidates who want to pass the Professional Cloud DevOps Engineer exam. It includes several courses that will take the applicants through all the steps necessary to validate the necessary abilities to get the passing score from the first attempt. In particular, this learning kit includes the following training sessions:
- The Google Cloud Fundamentals: Core Infrastructure class focuses on helping the candidates learn about storage and computing services which are included in Google Cloud Pack. Therefore, the exam-takers will learn how to use the BigQuery, App Engine, Cloud SQL and Storage, and Google Kubernetes Engine features.
- The training dedicated to the development of a Google SRE culture helps the candidates gain advanced skills in providing production support and minimizing the gap between operations and development. During this course, applicants will learn the secrets of Site Reliability Engineering and how they can benefit from creating a Google SRE culture.
- The Architecting with Google Cloud: Design and Process class helps the test-takers learn how to deploy Google Cloud features in a cost-effective and performant way.
- The final training session included in this learning path is dedicated to monitoring, logging, and observability in Google Cloud. It teaches the candidates how to troubleshoot and improve Google Cloud infrastructure performance.
Once the candidates go through the courses mentioned above, they will gain several skill badges that consolidate their skills in DevOps engineering. These badges are as follows:
- The skill badge that validates the ability to use Google Cloud for performing foundational infrastructure tasks. It helps the candidates learn how to manage important application services such as Cloud Functions or Stackdriver.
- The second badge is related to the implementation of DevOps features in Google Cloud. In particular, it will help the candidates improve their software delivery capacity with the help of Google Cloud and achieve a higher speed, availability, and stability.
- The last badge helps the candidates understand how to use the Google Cloud Operations Suite for monitoring and logging. Thus, the applicants will learn how to use Google Cloud’s ins and outs for generating healthier and improved applications.
Without doubt, a candidate who goes through this learning process provided by Google will have significantly higher chances to get certified in one go.
- Google Cloud Professional Cloud DevOps Engineer Exam – All in One Guide: Get Certified Efficiently in Google Cloud! (Google Cloud Certification Series Book 7)
This book is available on Amazon in Kindle format and has been published by Joseph Holbrook. Also, the candidates can buy it for almost $12. This guide follows all the topics tested in the certification exam and helps the applicants sharpen their skills in managing Google Cloud DevOps Engineer features. Besides, it helps entrants to fully prepare for the designation test as it includes more than 100 questions and detailed answers for each of them. Thus, the exam-takers will get used to the test structure and difficulty level. Plus, anyone who buys this guide will receive free access to additional learning resources that will consolidate their knowledge of Google Cloud apps and features.
For more info visit:
CCIE to Google Cloud DevOps Engineer Google cloud DevOps engineer practice exam Google Cloud documentation Google Cloud solutions
NEW QUESTION 44
Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach.
What should you do?
- A. Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.
- B. Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it.
- C. Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
- D. Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.
Answer: D
NEW QUESTION 45
You are responsible for creating and modifying the Terraform templates that define your Infrastructure. Because two new engineers will also be working on the same code, you need to define a process and adopt a tool that will prevent you from overwriting each other's code. You also want to ensure that you capture all updates in the latest version. What should you do?
- A. Store your code in a Git-based version control system.
* Establish a process that includes code reviews by peers and unit testing to ensure integrity and functionality before integration of code.
* Establish a process where the fully integrated code in the repository becomes the latest master version. - B. Store your code as text files in Google Drive in a defined folder structure that organizes the files.
* At the end of each day, confirm that all changes have been captured in the files within the folder structure and create a new .zip archive with a predefined naming convention.
* Upload the .zip archive to a versioned Cloud Storage bucket and accept it as the latest version. - C. Store your code in a Git-based version control system.
* Establish a process that allows developers to merge their own changes at the end of each day.
* Package and upload code lo a versioned Cloud Storage bucket as the latest master version. - D. Store your code as text files in Google Drive in a defined folder structure that organizes the files.
* At the end of each day. confirm that all changes have been captured in the files within the folder structure.
* Rename the folder structure with a predefined naming convention that increments the version.
Answer: A
NEW QUESTION 46
Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?
- A. Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.
- B. Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/attostrat-images/.
- C. Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
- D. Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat-images.
Answer: A
NEW QUESTION 47
Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach. What should you do?
- A. Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.
- B. Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it
- C. Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
- D. Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.
Answer: D
NEW QUESTION 48
You support an application running on App Engine. The application is used globally and accessed from various device types. You want to know the number of connections. You are using Stackdriver Monitoring for App Engine. What metric should you use?
- A. tcp_ssl_proxy/new_connections
- B. flex/instance/connections/current
- C. tcp_ssl_proxy/open_connections
- D. flex/connections/current
Answer: B
NEW QUESTION 49
Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?
- A. Configure the build system with protected branches that require pull request approval.
- B. Use an Admission Controller to verify that incoming requests originate from approved sources.
- C. Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
- D. Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.
Answer: C
NEW QUESTION 50
You encountered a major service outage that affected all users of the service for multiple hours. After several hours of incident management, the service returned to normal, and user access was restored. You need to provide an incident summary to relevant stakeholders following the Site Reliability Engineering recommended practices. What should you do first?
- A. Require the engineer responsible to write an apology email to all stakeholders.
- B. Develop a post-mortem to be distributed to stakeholders.
- C. Call individual stakeholders lo explain what happened.
- D. Send the Incident State Document to all the stakeholders.
Answer: B
NEW QUESTION 51
You are performing a semiannual capacity planning exercise for your flagship service. You expect a service user growth rate of 10% month-over-month over the next six months. Your service is fully containerized and runs on Google Cloud Platform (GCP). using a Google Kubernetes Engine (GKE) Standard regional cluster on three zones with cluster autoscaler enabled. You currently consume about 30% of your total deployed CPU capacity, and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth or as a result of zone failure, while avoiding unnecessary costs. How should you prepare to handle the predicted growth?
- A. Verity the maximum node pool size, enable a horizontal pod autoscaler, and then perform a load test to verity your expected resource needs.
- B. Because you are at only 30% utilization, you have significant headroom and you won't need to add any additional capacity for this rate of growth.
- C. Proactively add 60% more node capacity to account for six months of 10% growth rate, and then perform a load test to make sure you have enough capacity.
- D. Because you are deployed on GKE and are using a cluster autoscaler. your GKE cluster will scale automatically, regardless of growth rate.
Answer: A
NEW QUESTION 52
You are running a real-time gaming application on Compute Engine that has a production and testing environment. Each environment has their own Virtual Private Cloud (VPC) network. The application frontend and backend servers are located on different subnets in the environment's VPC. You suspect there is a malicious process communicating intermittently in your production frontend servers. You want to ensure that network traffic is captured for analysis. What should you do?
- A. Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 1.0.
- B. Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 1.0. Apply changes in testing before production.
- C. Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 0.5. Apply changes in testing before production.
- D. Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 0.5.
Answer: B
NEW QUESTION 53
Your team uses Cloud Build for all CI/CO pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE). You need to authenticate to GKE while minimizing development effort. What should you do?
- A. Create a separate step in Cloud Build to retrieve service account credentials and pass these to kubectl.
- B. Specify the Container Developer role for Cloud Build in the cloudbuild.yaml file.
- C. Create a new service account with the Container Developer role and use it to run Cloud Build.
- D. Assign the Container Developer role to the Cloud Build service account.
Answer: C
NEW QUESTION 54
Your company is developing applications that are deployed on Google Kubernetes Engine (GKE). Each team manages a different application. You need to create the development and production environments for each team, while minimizing costs. Different teams should not be able to access other teams' environments. What should you do?
- A. Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Kubernetes Role-based access control (RBAC) so that each team can only access its own namespace.
- B. Create one GCP Project per team. In each project, create a cluster for Development and one for Production. Grant the teams IAM access to their respective clusters.
- C. Create one GCP Project per team. In each project, create a cluster with a Kubernetes namespace for Development and one for Production. Grant the teams IAM access to their respective clusters.
- D. Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Identity Aware Proxy so that each team can only access its own namespace.
Answer: A
NEW QUESTION 55
Your company experiences bugs, outages, and slowness in its production systems. Developers use the production environment for new feature development and bug fixes. Configuration and experiments are done in the production environment, causing outages for users. Testers use the production environment for load testing, which often slows the production systems. You need to redesign the environment to reduce the number of bugs and outages in production and to enable testers to toad test new features. What should you do?
- A. Create an automated testing script in production to detect failures as soon as they occur.
- B. Secure the production environment to ensure that developers can't change it and set up one controlled update per year.
- C. Create a development environment with smaller server capacity and give access only to developers and testers.
- D. Create a development environment for writing code and a test environment for configurations, experiments, and load testing.
Answer: A
NEW QUESTION 56
You deploy a new release of an internal application during a weekend maintenance window when there is minimal user traffic. After the window ends, you learn that one of the new features isn't working as expected in the production environment. After an extended outage, you roll back the new release and deploy a fix. You want to modify your release process to reduce the mean time to recovery so you can avoid extended outages in the future. What should you do?
Choose 2 answers
- A. Configure a CI server. Add a suite of unit tests to your code and have your CI server run them on commit and verify any changes.
- B. Before merging new code, require 2 different peers to review the code changes.
- C. Require developers to run automated integration tests on their local development environments before release.
- D. Integrate a code linting tool to validate coding standards before any code is accepted into the repository.
- E. Adopt the blue/green deployment strategy when releasing new code via a CD server.
Answer: B,D
NEW QUESTION 57
You are creating and assigning action items in a postmodern for an outage. The outage is over, but you need to address the root causes. You want to ensure that your team handles the action items quickly and efficiently. How should you assign owners and collaborators to action items?
- A. Assign the team lead as the owner for all action items because they are in charge of the SRE team.
- B. Assign one owner for each action item and any necessary collaborators.
- C. Assign collaborators but no individual owners to the items to keep the postmortem blameless.
- D. Assign multiple owners for each item to guarantee that the team addresses items quickly
Answer: B
NEW QUESTION 58
You have a CI/CD pipeline that uses Cloud Build to build new Docker images and push them to Docker Hub. You use Git for code versioning. After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline. You need to resolve the issue following Site Reliability Engineering practices. What should you do?
- A. Upload the configuration YAML file to Cloud Storage and use Error Reporting to identify and fix the issue.
- B. Change the CI pipeline to push the artifacts to Container Registry instead of Docker Hub.
- C. Disable the CI pipeline and revert to manually building and pushing the artifacts.
- D. Run a Git compare between the previous and current Cloud Build Configuration files to find and fix the bug.
Answer: C
NEW QUESTION 59
You are managing an application that exposes an HTTP endpoint without using a load balancer. The latency of the HTTP responses is important for the user experience. You want to understand what HTTP latencies all of your users are experiencing. You use Stackdriver Monitoring. What should you do?
- A. In your application, create a metric with a metricKind. set toMETRlc_KIND_UNSPECIFIEDanda valueType set to INT64.
* In Stackdriver's Metrics Explorer, use a Stacked Area graph to visualize the metric. - B. In your application, create a metric with a metricKind set to CUMULATIVE and a valueType set to DOUBLE.
* In Stackdriver's Metrics Explorer, use a Line graph to visualize the metric. - C. In your application, create a metric with a metricKind set to gauge and a valueType set to distribution.
* In Stackdriver's Metrics Explorer, use a Heatmap graph to visualize the metric. - D. In your application, create a metric with a metricKind set to DELTA and a valueType set to DOUBLE.
* In Stackdriver's Metrics Explorer, use a Slacked Bar graph to visualize the metric.
Answer: B
NEW QUESTION 60
You are running an application on Compute Engine and collecting logs through Stackdriver. You discover that some personally identifiable information (Pll) is leaking into certain log entry fields. All Pll entries begin with the text userinfo. You want to capture these log entries in a secure location for later review and prevent them from leaking to Stackdriver Logging. What should you do?
- A. Create a basic log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.
- B. Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, create an advanced log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.
- C. Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, and then copy the entries to a Cloud Storage bucket.
- D. Create an advanced log filter matching userinfo, configure a log export in the Stackdriver console with Cloud Storage as a sink, and then configure a tog exclusion with userinfo as a filter.
Answer: C
Explanation:
https://medium.com/google-cloud/fluentd-filter-plugin-for-google-cloud-data-loss-prevention-api-42bbb1308e76
NEW QUESTION 61
You support a web application that is hosted on Compute Engine. The application provides a booking service for thousands of users. Shortly after the release of a new feature, your monitoring dashboard shows that all users are experiencing latency at login. You want to mitigate the impact of the incident on the users of your service. What should you do first?
- A. Upsize the virtual machines running the login services.
- B. Deploy a new release to see whether it fixes the problem.
- C. Review the Stackdriver monitoring.
- D. Roll back the recent release.
Answer: A
NEW QUESTION 62
You need to run a business-critical workload on a fixed set of Compute Engine instances for several months.
The workload is stable with the exact amount of resources allocated to it. You want to lower the costs for this workload without any performance implications. What should you do?
- A. Convert the instances to preemptible virtual machines.
- B. Purchase Committed Use Discounts.
- C. Migrate the instances to a Managed Instance Group.
- D. Create an Unmanaged Instance Group for the instances used to run the workload.
Answer: A
Explanation:
Explanation/Reference: https://cloud.google.com/compute/docs/faq
NEW QUESTION 63
Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?
- A. Use an Admission Controller to verify that incoming requests originate from approved sources.
- B. Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
- C. Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.
- D. Configure the build system with protected branches that require pull request approval.
Answer: D
NEW QUESTION 64
You have migrated an e-commerce application to Google Cloud Platform (GCP). You want to prepare the application for the upcoming busy season. What should you do first to prepare for the busy season?
- A. Enable AutoScaling on the production clusters, in case there is growth.
- B. Load teat the application to profile its performance for scaling.
- C. Create a runbook on inflating the disaster recovery (DR) environment if there is growth.
- D. Pre-provision double the compute power used last season, expecting growth.
Answer: A
NEW QUESTION 65
You support an application running on GCP and want to configure SMS notifications to your team for the most critical alerts in Stackdriver Monitoring. You have already identified the alerting policies you want to configure this for. What should you do?
- A. Ensure that your team members set their SMS/phone numbers in their Stackdriver Profile. Select the SMS notification option for each alerting policy and then select the appropriate SMS/phone numbers from the list.
- B. Configure a Slack notification for each alerting policy. Set up a Slack-to-SMS integration to send SMS messages when Slack messages are received. Ensure that your team members add their SMS/phone numbers to the external integration.
- C. Download and configure a third-party integration between Stackdriver Monitoring and an SMS gateway. Ensure that your team members add their SMS/phone numbers to the external tool.
- D. Select the Webhook notifications option for each alerting policy, and configure it to use a third-party integration tool. Ensure that your team members add their SMS/phone numbers to the external tool.
Answer: A
Explanation:
https://cloud.google.com/monitoring/support/notification-options#creating_channels To configure SMS notifications, do the following:
In the SMS section, click Add new and follow the instructions. Click Save. When you set up your alerting policy, select the SMS notification type and choose a verified phone number from the list.
NEW QUESTION 66
You support a high-traffic web application that runs on Google Cloud Platform (GCP). You need to measure application reliability from a user perspective without making any engineering changes to it. What should you do?
Choose 2 answers
- A. Create new synthetic clients to simulate a user journey using the application.
- B. Analyze the web proxy logs only and capture response time of each request.
- C. Modify the code to capture additional information for user interaction.
- D. Review current application metrics and add new ones as needed.
- E. Use current and historic Request Logs to trace customer interaction with the application.
Answer: A,C
NEW QUESTION 67
......
Prepare Top Google Professional-Cloud-DevOps-Engineer Exam Audio Study Guide Practice Questions Edition: https://www.lead2passexam.com/Google/valid-Professional-Cloud-DevOps-Engineer-exam-dumps.html
Free Google Professional-Cloud-DevOps-Engineer Test Practice Test Questions Exam Dumps: https://drive.google.com/open?id=1JSMn8KiIoAAoJEjyFrMwYKs6e4sHPCuq