Pass Your Professional-Cloud-DevOps-Engineer Exam Easily - Real Professional-Cloud-DevOps-Engineer Practice Dump Updated Oct 05, 2023
2023 Realistic Verified Free Google Professional-Cloud-DevOps-Engineer Exam Questions
NEW QUESTION # 35
You are performing a semiannual capacity planning exercise for your flagship service. You expect a service user growth rate of 10% month-over-month over the next six months. Your service is fully containerized and runs on Google Cloud Platform (GCP). using a Google Kubernetes Engine (GKE) Standard regional cluster on three zones with cluster autoscaler enabled. You currently consume about 30% of your total deployed CPU capacity, and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth or as a result of zone failure, while avoiding unnecessary costs. How should you prepare to handle the predicted growth?
- A. Because you are at only 30% utilization, you have significant headroom and you won't need to add any additional capacity for this rate of growth.
- B. Verity the maximum node pool size, enable a horizontal pod autoscaler, and then perform a load test to verity your expected resource needs.
- C. Proactively add 60% more node capacity to account for six months of 10% growth rate, and then perform a load test to make sure you have enough capacity.
- D. Because you are deployed on GKE and are using a cluster autoscaler. your GKE cluster will scale automatically, regardless of growth rate.
Answer: B
NEW QUESTION # 36
You are responsible for the reliability of a high-volume enterprise application. A large number of users report that an important subset of the application's functionality - a data intensive reporting feature - is consistently failing with an HTTP 500 error. When you investigate your application's dashboards, you notice a strong correlation between the failures and a metric that represents the size of an internal queue used for generating reports. You trace the failures to a reporting backend that is experiencing high I/O wait times. You quickly fix the issue by resizing the backend's persistent disk (PD). How you need to create an availability Service Level Indicator (SLI) for the report generation feature. How would you define it?
- A. As the application's report generation queue size compared to a known-good threshold
- B. As the I/O wait times aggregated across all report generation backends
- C. As the proportion of report generation requests that result in a successful response
- D. As the reporting backend PD throughout capacity compared to a known-good threshold
Answer: A
NEW QUESTION # 37
You use Cloud Build to build and deploy your application. You want to securely incorporate database credentials and other application secrets into the build pipeline. You also want to minimize the development effort. What should you do?
- A. Use Cloud Key Management Service (Cloud KMS) to encrypt the secrets and include them in your Cloud Build deployment configuration. Grant Cloud Build access to the KeyRing.
- B. Use client-side encryption to encrypt the secrets and store them in a Cloud Storage bucket. Store a decryption key in the bucket and grant Cloud Build access to the bucket.
- C. Create a Cloud Storage bucket and use the built-in encryption at rest. Store the secrets in the bucket and grant Cloud Build access to the bucket.
- D. Encrypt the secrets and store them in the application repository. Store a decryption key in a separate repository and grant Cloud Build access to the repository.
Answer: A
NEW QUESTION # 38
You encountered a major service outage that affected all users of the service for multiple hours. After several hours of incident management, the service returned to normal, and user access was restored. You need to provide an incident summary to relevant stakeholders following the Site Reliability Engineering recommended practices. What should you do first?
- A. Send the Incident State Document to all the stakeholders.
- B. Develop a post-mortem to be distributed to stakeholders.
- C. Require the engineer responsible to write an apology email to all stakeholders.
- D. Call individual stakeholders lo explain what happened.
Answer: A
NEW QUESTION # 39
Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach. What should you do?
- A. Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it
- B. Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.
- C. Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
- D. Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.
Answer: B
NEW QUESTION # 40
You support an application running on App Engine. The application is used globally and accessed from various device types. You want to know the number of connections. You are using Stackdriver Monitoring for App Engine. What metric should you use?
- A. flex/connections/current
- B. tcp_ssl_proxy/new_connections
- C. (lex/jnstance/connections/current
- D. tcp_ssl_proxy/open_connections
Answer: A
NEW QUESTION # 41
Your team is designing a new application for deployment into Google Kubernetes Engine (GKE). You need to set up monitoring to collect and aggregate various application-level metrics in a centralized location. You want to use Google Cloud Platform services while minimizing the amount of work required to set up monitoring.
What should you do?
- A. Install the OpenTelemetry client libraries in the application, configure Stackdriver as the export destination for the metrics, and then observe the application's metrics in Stackdriver.
- B. Install the Cloud Pub/Sub client libraries, push various metrics from the application to various topics, and then observe the aggregated metrics in Stackdriver.
- C. Emit all metrics in the form of application-specific log messages, pass these messages from the containers to the Stackdriver logging collector, and then observe metrics in Stackdriver.
- D. Publish various metrics from the application directly to the Stackdriver Monitoring API, and then observe these custom metrics in Stackdriver.
Answer: A
NEW QUESTION # 42
You support a high-traffic web application that runs on Google Cloud Platform (GCP). You need measure application reliability from a user perspective without making any engineering changes to it. What should you do? (Choose two.)
- A. Modify the code to capture additional information for user interaction.
- B. Analyze the web proxy logs only and capture response time of each request.
- C. Use current and historic Request Logs to trace customer interaction with the application.
- D. Review current application metrics and add new ones as needed.
- E. Create new synthetic clients to simulate a user journey using the application.
Answer: A,E
NEW QUESTION # 43
You support a high-traffic web application with a microservice architecture. The home page of the application displays multiple widgets containing content such as the current weather, stock prices, and news headlines. The main serving thread makes a call to a dedicated microservice for each widget and then lays out the homepage for the user. The microservices occasionally fail; when that happens, the serving thread serves the homepage with some missing content. Users of the application are unhappy if this degraded mode occurs too frequently, but they would rather have some content served instead of no content at all. You want to set a Service Level Objective (SLO) to ensure that the user experience does not degrade too much. What Service Level Indicator {SLI) should you use to measure this?
- A. A latency SLI: the ratio of microservice calls that complete in under 100 ms to the total number of microservice calls
- B. A quality SLI: the ratio of non-degraded responses to total responses
- C. An availability SLI: the ratio of healthy microservices to the total number of microservices
- D. A freshness SLI: the proportion of widgets that have been updated within the last 10 minutes
Answer: C
Explanation:
https://cloud.google.com/blog/products/gcp/available-or-not-that-is-the-question-cre-life-lessons
NEW QUESTION # 44
You have a CI/CD pipeline that uses Cloud Build to build new Docker images and push them to Docker Hub. You use Git for code versioning. After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline. You need to resolve the issue following Site Reliability Engineering practices. What should you do?
- A. Run a Git compare between the previous and current Cloud Build Configuration files to find and fix the bug.
- B. Disable the CI pipeline and revert to manually building and pushing the artifacts.
- C. Upload the configuration YAML file to Cloud Storage and use Error Reporting to identify and fix the issue.
- D. Change the CI pipeline to push the artifacts to Container Registry instead of Docker Hub.
Answer: B
NEW QUESTION # 45
You created a Stackdriver chart for CPU utilization in a dashboard within your workspace project. You want to share the chart with your Site Reliability Engineering (SRE) team only. You want to ensure you follow the principle of least privilege. What should you do?
- A. Share the workspace Project ID with the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
- B. Share the workspace Project ID with the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.
- C. Click "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Monitoring Viewer IAM role in the workspace project.
- D. Click "Share chart by URL" and provide the URL to the SRE team. Assign the SRE team the Dashboard Viewer IAM role in the workspace project.
Answer: C
Explanation:
https://cloud.google.com/monitoring/access-control
NEW QUESTION # 46
Your team uses Cloud Build for all CI/CO pipelines. You want to use the kubectl builder for Cloud Build to deploy new images to Google Kubernetes Engine (GKE). You need to authenticate to GKE while minimizing development effort. What should you do?
- A. Assign the Container Developer role to the Cloud Build service account.
- B. Create a new service account with the Container Developer role and use it to run Cloud Build.
- C. Specify the Container Developer role for Cloud Build in the cloudbuild.yaml file.
- D. Create a separate step in Cloud Build to retrieve service account credentials and pass these to kubectl.
Answer: B
NEW QUESTION # 47
You support a high-traffic web application that runs on Google Cloud Platform (GCP). You need to measure application reliability from a user perspective without making any engineering changes to it. What should you do?
Choose 2 answers
- A. Modify the code to capture additional information for user interaction.
- B. Analyze the web proxy logs only and capture response time of each request.
- C. Create new synthetic clients to simulate a user journey using the application.
- D. Use current and historic Request Logs to trace customer interaction with the application.
- E. Review current application metrics and add new ones as needed.
Answer: A,B
NEW QUESTION # 48
You are running an application on Compute Engine and collecting logs through Stackdriver. You discover that some personally identifiable information (PII) is leaking into certain log entry fields. All PII entries begin with the text userinfo. You want to capture these log entries in a secure location for later review and prevent them from leaking to Stackdriver Logging. What should you do?
- A. Create an advanced log filter matching userinfo, configure a log export in the Stackdriver console with Cloud Storage as a sink, and then configure a log exclusion with userinfo as a filter.
- B. Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, create an advanced log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.
- C. Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, and then copy the entries to a Cloud Storage bucket.
- D. Create a basic log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.
Answer: D
NEW QUESTION # 49
You are running an experiment to see whether your users like a new feature of a web application. Shortly after deploying the feature as a canary release, you receive a spike in the number of 500 errors sent to users, and your monitoring reports show increased latency. You want to quickly minimize the negative impact on users. What should you do first?
- A. Trace the origin of 500 errors and the root cause of increased latency.
- B. Roll back the experimental canary release.
- C. Record data for the postmortem document of the incident.
- D. Start monitoring latency, traffic, errors, and saturation.
Answer: A
NEW QUESTION # 50
You use Cloud Build to build your application. You want to reduce the build time while minimizing cost and development effort. What should you do?
- A. Use Cloud Storage to cache intermediate artifacts.
- B. Use larger Cloud Build virtual machines (VMs) by using the machine-type option.
- C. Run multiple Jenkins agents to parallelize the build.
- D. Use multiple smaller build steps to minimize execution time.
Answer: D
Explanation:
https://cloud.google.com/storage/docs/best-practices
. https://cloud.google.com/build/docs/speeding-up-builds#caching_directories_with_google_cloud_storage Caching directories with Google Cloud Storage To increase the speed of a build, reuse the results from a previous build. You can copy the results of a previous build to a Google Cloud Storage bucket, use the results for faster calculation, and then copy the new results back to the bucket. Use this method when your build takes a long time and produces a small number of files that does not take time to copy to and from Google Cloud Storage.
upvoted 2 times
NEW QUESTION # 51
You deploy a new release of an internal application during a weekend maintenance window when there is minimal user tragic. After the window ends, you learn that one of the new features isn't working as expected in the production environment. After an extended outage, you roll back the new release and deploy a fix. You want to modify your release process to reduce the mean time to recovery so you can avoid extended outages in the future. What should you do? (Choose two.)
- A. Before merging new code, require 2 different peers to review the code changes.
- B. Configure a CI server. Add a suite of unit tests to your code and have your CI server run them on commit and verify any changes.
- C. Require developers to run automated integration tests on their local development environments before release.
- D. Adopt the blue/green deployment strategy when releasing new code via a CD server.
- E. Integrate a code linting tool to validate coding standards before any code is accepted into the repository.
Answer: A,E
NEW QUESTION # 52
You support a popular mobile game application deployed on Google Kubernetes Engine (GKE) across several Google Cloud regions. Each region has multiple Kubernetes clusters. You receive a report that none of the users in a specific region can connect to the application. You want to resolve the incident while following Site Reliability Engineering practices. What should you do first?
- A. Use Stackdriver Monitoring to check for a spike in CPU or memory usage for the affected region.
- B. Use Stackdriver Logging to filter on the clusters in the affected region, and inspect error messages in the logs.
- C. Reroute the user traffic from the affected region to other regions that don't report issues.
- D. Add an extra node pool that consists of high memory and high CPU machine type instances to the cluster.
Answer: C
Explanation:
Google always aims to first stop the impact of an incident, and then find the root cause (unless the root cause just happens to be identified early on).
NEW QUESTION # 53
You are working with a government agency that requires you to archive application logs for seven years. You need to configure Stackdriver to export and store the logs while minimizing costs of storage. What should you do?
- A. Develop an App Engine application that pulls the logs from Stackdriver and saves them in BigQuery.
- B. Create a Cloud Storage bucket and develop your application to send logs directly to the bucket.
- C. Create an export in Stackdriver and configure Cloud Pub/Sub to store logs in permanent storage for seven years.
- D. Create a sink in Stackdriver, name it, create a bucket on Cloud Storage for storing archived logs, and then select the bucket as the log export destination.
Answer: D
NEW QUESTION # 54
You are running an application in a virtual machine (VM) using a custom Debian image. The image has the Stackdriver Logging agent installed. The VM has the cloud-platform scope. The application is logging information via syslog. You want to use Stackdriver Logging in the Google Cloud Platform Console to visualize the logs. You notice that syslog is not showing up in the "All logs" dropdown list of the Logs Viewer. What is the first thing you should do?
- A. Look for the agent's test log entry in the Logs Viewer.
- B. SSH to the VM and execute the following commands on your VM: ps ax I grep fluentd
- C. Install the most recent version of the Stackdriver agent.
- D. Verify the VM service account access scope includes the monitoring.write scope.
Answer: B
NEW QUESTION # 55
You support a web application that runs on App Engine and uses CloudSQL and Cloud Storage for data storage. After a short spike in website traffic, you notice a big increase in latency for all user requests, increase in CPU use, and the number of processes running the application. Initial troubleshooting reveals:
After the initial spike in traffic, load levels returned to normal but users still experience high latency.
Requests for content from the CloudSQL database and images from Cloud Storage show the same high latency.
No changes were made to the website around the time the latency increased.
There is no increase in the number of errors to the users.
You expect another spike in website traffic in the coming days and want to make sure users don't experience latency. What should you do?
- A. Move the application from App Engine to Compute Engine.
- B. Enable high availability on the CloudSQL instances.
- C. Upgrade the GCS buckets to Multi-Regional.
- D. Modify the App Engine configuration to have additional idle instances.
Answer: B
NEW QUESTION # 56
......
Google Professional-Cloud-DevOps-Engineer Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
Professional-Cloud-DevOps-Engineer Real Exam Questions and Answers FREE: https://actualtests.realvalidexam.com/Professional-Cloud-DevOps-Engineer-real-exam-dumps.html
