Google Professional-Cloud-DevOps-Engineer Exam Info and Free Practice Test | RealVCE
Pass Google Professional-Cloud-DevOps-Engineer Premium Files Test Engine pdf - Free Dumps Collection
Domains Tested in Final Evaluation
The candidates who succeed in passing the Google Professional Cloud DevOps Engineer validation will add an international designation under their belt that helps them consolidate their position in the company and receive generous offers from their employers. So, if applicants want to differentiate themselves from other colleagues, they should demonstrate the following skills:
- Implementing and building CI/CD service pipelines;
- Identifying issues related to service performance and implementing solutions to optimize it;
- Identifying the most effective principles related to site reliability engineering and applying them to a definite service;
- Coordinating teams to identify and manage incidents related to service development.
- Checking and implementing strategies related to service monitoring;
NEW QUESTION 22
You are running an application on Compute Engine and collecting logs through Stackdriver. You discover that some personally identifiable information (PII) is leaking into certain log entry fields. You want to prevent these fields from being written in new log entries as quickly as possible. What should you do?
- A. Wait for the application developers to patch the application, and then verify that the log entries are no longer exposing PII.
- B. Use the filter-record-transformer Fluentd filter plugin to remove the fields from the log entries in flight.
- C. Use the fluent-plugin-record-reformer Fluentd output plugin to remove the fields from the log entries in flight.
- D. Stage log entries to Cloud Storage, and then trigger a Cloud Function to remove the fields and write the entries to Stackdriver via the Stackdriver Logging API.
Answer: C
NEW QUESTION 23
You are part of an organization that follows SRE practices and principles. You are taking over the management of a new service from the Development Team, and you conduct a Production Readiness Review (PRR). After the PRR analysis phase, you determine that the service cannot currently meet its Service Level Objectives (SLOs). You want to ensure that the service can meet its SLOs in production. What should you do next?
- A. Identify recommended reliability improvements to the service to be completed before handover.
- B. Notify the development team that they will have to provide production support for the service.
- C. Bring the service into production with no SLOs and build them when you have collected operational data.
- D. Adjust the SLO targets to be achievable by the service so you can bring it into production.
Answer: B
NEW QUESTION 24
You have a CI/CD pipeline that uses Cloud Build to build new Docker images and push them to Docker Hub.
You use Git for code versioning. After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline. You need to resolve the issue following Site Reliability Engineering practices. What should you do?
- A. Change the CI pipeline to push the artifacts is Container Registry instead of Docker Hub.
- B. Run a Git compare between the previous and current Cloud Build Configuration files to find and fix the bug.
- C. Upload the configuration YAML file to Cloud Storage and use Error Reporting to identify and fix the issue.
- D. Disable the CI pipeline and revert to manually building and pushing the artifacts.
Answer: A
NEW QUESTION 25
You support an application that stores product information in cached memory. For every cache miss, an entry is logged in Stackdriver Logging. You want to visualize how often a cache miss happens over time. What should you do?
- A. Configure BigOuery as a sink for Stackdriver Logging. Create a scheduled query to filter the cache miss logs and write them to a separate table
- B. Link Stackdriver Logging as a source in Google Data Studio. Filler (he logs on the cache misses.
- C. Create a logs-based metric in Stackdriver Logging and a dashboard for that metric in Stackdriver Monitoring.
- D. Configure Stackdriver Profiler to identify and visualize when the cache misses occur based on the logs.
Answer: C
NEW QUESTION 26
You use Cloud Build to build and deploy your application. You want to securely incorporate database credentials and other application secrets into the build pipeline. You also want to minimize the development effort. What should you do?
- A. Create a Cloud Storage bucket and use the built-in encryption at rest. Store the secrets in the bucket and grant Cloud Build access to the bucket.
- B. Use client-side encryption to encrypt the secrets and store them in a Cloud Storage bucket. Store a decryption key in the bucket and grant Cloud Build access to the bucket.
- C. Encrypt the secrets and store them in the application repository. Store a decryption key in a separate repository and grant Cloud Build access to the repository.
- D. Use Cloud Key Management Service (Cloud KMS) to encrypt the secrets and include them in your Cloud Build deployment configuration. Grant Cloud Build access to the KeyRing.
Answer: D
NEW QUESTION 27
You support an application running on App Engine. The application is used globally and accessed from various device types. You want to know the number of connections. You are using Stackdriver Monitoring for App Engine. What metric should you use?
- A. tcp_ssl_proxy/open_connections
- B. flex/connections/current
- C. tcp_ssl_proxy/new_connections
- D. flex/instance/connections/current
Answer: D
NEW QUESTION 28
You support an application running on App Engine. The application is used globally and accessed from various device types. You want to know the number of connections. You are using Stackdriver Monitoring for App Engine. What metric should you use?
- A. tcp_ssl_proxy/open_connections
- B. flex/connections/current
- C. flex/instance/connections/current
- D. tcp_ssl_proxy/new_connections
Answer: B
Explanation:
https://cloud.google.com/monitoring/api/metrics_gcp#gcp-appengine
NEW QUESTION 29
Your team of Infrastructure DevOps Engineers is growing, and you are starting to use Terraform to manage infrastructure. You need a way to implement code versioning and to share code with other team members. What should you do?
- A. Store the Terraform code in a network shared folder with child folders for each version release. Ensure that everyone works on different files.
- B. Store the Terraform code in a Cloud Storage bucket using object versioning. Give access to the bucket to every team member so they can download the files.
- C. Store the Terraform code in a version-control system. Establish procedures for pushing new versions and merging with the master.
- D. Store the Terraform code in a shared Google Drive folder so it syncs automatically to every team member's computer. Organize files with a naming convention that identifies each new version.
Answer: C
NEW QUESTION 30
You are running an application in a virtual machine (VM) using a custom Debian image. The image has the Stackdriver Logging agent installed. The VM has the cloud-platform scope. The application is logging information via syslog. You want to use Stackdriver Logging in the Google Cloud Platform Console to visualize the logs. You notice that syslog is not showing up in the "All logs" dropdown list of the Logs Viewer. What is the first thing you should do?
- A. SSH to the VM and execute the following commands on your VM: ps ax I grep fluentd
- B. Install the most recent version of the Stackdriver agent.
- C. Verify the VM service account access scope includes the monitoring.write scope.
- D. Look for the agent's test log entry in the Logs Viewer.
Answer: A
NEW QUESTION 31
You have a CI/CD pipeline that uses Cloud Build to build new Docker images and push them to Docker Hub. You use Git for code versioning. After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline. You need to resolve the issue following Site Reliability Engineering practices. What should you do?
- A. Upload the configuration YAML file to Cloud Storage and use Error Reporting to identify and fix the issue.
- B. Change the CI pipeline to push the artifacts to Container Registry instead of Docker Hub.
- C. Disable the CI pipeline and revert to manually building and pushing the artifacts.
- D. Run a Git compare between the previous and current Cloud Build Configuration files to find and fix the bug.
Answer: D
Explanation:
"After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline"- means something wrong on the recent change not with the image registry.
NEW QUESTION 32
You support an e-commerce application that runs on a large Google Kubernetes Engine (GKE) cluster deployed on-premises and on Google Cloud Platform. The application consists of microservices that run in containers. You want to identify containers that are using the most CPU and memory. What should you do?
- A. Use Stackdriver Kubernetes Engine Monitoring.
- B. Use the Stackdriver Monitoring API to create custom metrics, and then organize your containers using groups.
- C. Use Stackdriver Logging to export application logs to BigOuery. aggregate logs per container, and then analyze CPU and memory consumption.
- D. Use Prometheus to collect and aggregate logs per container, and then analyze the results in Grafana.
Answer: D
NEW QUESTION 33
Your company follows Site Reliability Engineering practices. You are the Incident Commander for a new. customer-impacting incident. You need to immediately assign two incident management roles to assist you in an effective incident response. What roles should you assign?
Choose 2 answers
- A. External Customer Communications Lead
- B. Customer Impact Assessor
- C. Engineering Lead
- D. Communications Lead
- E. Operations Lead
Answer: B,E
NEW QUESTION 34
You support a trading application written in Python and hosted on App Engine flexible environment. You want to customize the error information being sent to Stackdriver Error Reporting. What should you do?
- A. Install the Stackdriver Error Reporting library for Python, and then run your code on App Engine flexible environment.
- B. Install the Stackdriver Error Reporting library for Python, and then run your code on a Compute Engine VM.
- C. Use the Stackdriver Error Reporting API to write errors from your application to ReportedErrorEvent, and then generate log entries with properly formatted error messages in Stackdriver Logging.
- D. Install the Stackdriver Error Reporting library for Python, and then run your code on Google Kubernetes Engine.
Answer: A
NEW QUESTION 35
You support a high-traffic web application with a microservice architecture. The home page of the application displays multiple widgets containing content such as the current weather, stock prices, and news headlines. The main serving thread makes a call to a dedicated microservice for each widget and then lays out the homepage for the user. The microservices occasionally fail; when that happens, the serving thread serves the homepage with some missing content. Users of the application are unhappy if this degraded mode occurs too frequently, but they would rather have some content served instead of no content at all. You want to set a Service Level Objective (SLO) to ensure that the user experience does not degrade too much. What Service Level Indicator {SLI) should you use to measure this?
- A. A latency SLI: the ratio of microservice calls that complete in under 100 ms to the total number of microservice calls
- B. A freshness SLI: the proportion of widgets that have been updated within the last 10 minutes
- C. An availability SLI: the ratio of healthy microservices to the total number of microservices
- D. A quality SLI: the ratio of non-degraded responses to total responses
Answer: C
NEW QUESTION 36
Your organization recently adopted a container-based workflow for application development. Your team develops numerous applications that are deployed continuously through an automated build pipeline to a Kubernetes cluster in the production environment. The security auditor is concerned that developers or operators could circumvent automated testing and push code changes to production without approval. What should you do to enforce approvals?
- A. Enable binary authorization inside the Kubernetes cluster and configure the build pipeline as an attestor.
- B. Use an Admission Controller to verify that incoming requests originate from approved sources.
- C. Configure the build system with protected branches that require pull request approval.
- D. Leverage Kubernetes Role-Based Access Control (RBAC) to restrict access to only approved users.
Answer: A
Explanation:
The keywords here is "developers or operators". Option A the operators could push images to production without approval (operators could touch the cluster directly and the cluster cannot do any action against them). Rest same as francisco_guerra.
NEW QUESTION 37
You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs. What should you do?
- A. Create and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.
- B. Create an Organizational Policy in Cloud IAM to allow only these members to create log exports.
- C. Grant the team members the IAM role of logging.configWriter on Cloud IAM.
- D. Configure Access Context Manager to allow only these members to export logs.
Answer: C
Explanation:
https://cloud.google.com/logging/docs/access-control
NEW QUESTION 38
You are running a real-time gaming application on Compute Engine that has a production and testing environment. Each environment has their own Virtual Private Cloud (VPC) network. The application frontend and backend servers are located on different subnets in the environment's VPC. You suspect there is a malicious process communicating intermittently in your production frontend servers. You want to ensure that network traffic is captured for analysis. What should you do?
- A. Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 0.5.
- B. Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 1.0. Apply changes in testing before production.
- C. Enable VPC Flow Logs on the production VPC network frontend and backend subnets only with a sample volume scale of 1.0.
- D. Enable VPC Flow Logs on the testing and production VPC network frontend and backend subnets with a volume scale of 0.5. Apply changes in testing before production.
Answer: C
NEW QUESTION 39
You are on-call for an infrastructure service that has a large number of dependent systems. You receive an alert indicating that the service is failing to serve most of its requests and all of its dependent systems with hundreds of thousands of users are affected. As part of your Site Reliability Engineering (SRE) incident management protocol, you declare yourself Incident Commander (IC) and pull in two experienced people from your team as Operations Lead (OLJ and Communications Lead (CL). What should you do next?
- A. Contact the affected service owners and update them on the status of the incident.
- B. Establish a communication channel where incident responders and leads can communicate with each other.
- C. Start a postmortem, add incident information, circulate the draft internally, and ask internal stakeholders for input.
- D. Look for ways to mitigate user impact and deploy the mitigations to production.
Answer: D
NEW QUESTION 40
You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs. What should you do?
- A. Create and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.
- B. Create an Organizational Policy in Cloud IAM to allow only these members to create log exports.
- C. Grant the team members the IAM role of logging.configWriter on Cloud IAM.
- D. Configure Access Context Manager to allow only these members to export logs.
Answer: C
Explanation:
Explanation/Reference: https://cloud.google.com/logging/docs/access-control
NEW QUESTION 41
......
Updated Official licence for Professional-Cloud-DevOps-Engineer Certified by Professional-Cloud-DevOps-Engineer Dumps PDF: https://examcollection.realvce.com/Professional-Cloud-DevOps-Engineer-original-questions.html