PDF (New 2021) Actual Google Professional-Cloud-DevOps-Engineer Exam Questions
Dumps Moneyack Guarantee - Professional-Cloud-DevOps-Engineer Dumps UpTo 90% Off
Topics of Google Professional Cloud DevOps Engineer Exam
Candidates must know the exam topics before they start preparation because it will help them in hitting the core. Our Professional Cloud DevOps Engineer Dumps will include the following topics:
Applying site reliability engineering principles to a service
- Manage a service (e.g., introduce a new service, deploy it, maintain and retire it)
- 1.2 Manage service life cycle:
- Balance change, velocity, and reliability of the service:
- Toil automation
- Construct feedback loops to decide what to build next
- Discover SLIs (availability, latency, etc.)
- Agree to consequences of not meeting the error budget
- Define SLOs and understand SLAs
Building and implementing CI/CD pipelines for a service
- Configure deployment processes (e.g., approval flows)
- Immutable artifacts with Container Registry
- Deployment to hybrid and multi-cloud environments with Anthos, Spinnaker, Kubernetes
- Artifact repositories with Container Registry
- Artifact versioning strategy with Cloud Build, Container Registry
- Deployment strategies with Cloud Build, Spinnaker
- Design CI/CD pipelines:
- Testing a new version with Spinnaker
- CI/CD pipeline triggers with Cloud Source Repositories, Cloud Build GitHub App, Cloud Pub/Sub
Implementing service monitoring strategies
- Selecting the options for logging export
- Understanding the logging exclusion vs. logging export
- Collecting GKE/Kubernetes metrics
- Collecting logs from Compute Engine, GKE with Stackdriver Logging, Fluentd
- Set ACL to allow metric writing for custom metrics with IAM, Stackdriver Monitoring
- Set ACL to restrict export configuration with IAM, Stackdriver Logging
- Enabling VPC flow logs
- Viewing logs in the GCP Console
- Sending application logs directly to Stackdriver API with Stackdriver Logging
- Manage application logs:
- Sending logs to an external logging platform
- Enabling data access logs (e.g., Cloud Audit Logs)
- Using basic vs. advanced logging filters
- Use metric explorer for ad hoc metric analysis
- Viewing export logs in Cloud Storage and BigQuery
- Collecting third-party and structured logs with Stackdriver Logging, Fluentd
- Set ACL to restrict access to audit logs with IAM, Stackdriver Logging
- Implementing a project-level / org-level export
- Implementing logs-based metrics
- Collecting metrics from Compute Engine
Optimizing service performance
- Interpret service mesh telemetry
- Identify resource utilization levels
- Utilize Stackdriver to identify cloud resource utilization
- Troubleshoot network issues (e.g., VPC flow logs, firewall logs, latency, view network details)
- Evaluate and understand user impact (Stackdriver Service Monitoring for App Engine, Istio)
- Utilize Stackdriver Trace/Profiler to profile performance characteristics
- Consider network pricing
- Work with committed-use discounts
- identify resource costs
- Troubleshoot issues with the image/OS
- TCO considerations
- Identify service performance issues:
- Manage preemptible VMs
- Develop a plan to optimize areas of greatest cost or lowest utilization
Managing service incidents
- Record major changes in incident state (When mitigated? When all clear? etc.)
- Coordinate roles and implement communication channels during a service incident:
- Manage stakeholder relationships
- Perform an investigation to isolate the most likely actual cause
- Avoid exhaustion/burnout
- Establish communications channels (email, IRC, Hangouts, Slack, phone, etc.)
- Provide regular status updates, internal and external
- Define roles (incident commander, communication lead, operations lead)
- Identify alternatives to mitigate the issue
- Scaling response team and delegation
- Identify probable causes of service failure
- Evaluate symptoms against probable causes; the rank probability of cause based on observed behavior
- Rotate/hand over roles
- Handle requests for impact assessment
Conclusion
Passing the Google Professional Cloud DevOps Engineer evaluation is not impossible as long as you combine different learning solutions. While the vendor offers different preparation resources for the exam-takers who want to get the passing score without stress, you shouldn’t stop here. You can also go as far as to explore the guides available on Amazon and enhance your skills for becoming a certified Cloud DevOps Engineer.
NEW QUESTION 46
You are performing a semiannual capacity planning exercise for your flagship service. You expect a service user growth rate of 10% month-over-month over the next six months. Your service is fully containerized and runs on Google Cloud Platform (GCP). using a Google Kubernetes Engine (GKE) Standard regional cluster on three zones with cluster autoscaler enabled. You currently consume about 30% of your total deployed CPU capacity, and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth or as a result of zone failure, while avoiding unnecessary costs. How should you prepare to handle the predicted growth?
- A. Proactively add 60% more node capacity to account for six months of 10% growth rate, and then perform a load test to make sure you have enough capacity.
- B. Verity the maximum node pool size, enable a horizontal pod autoscaler, and then perform a load test to verity your expected resource needs.
- C. Because you are deployed on GKE and are using a cluster autoscaler. your GKE cluster will scale automatically, regardless of growth rate.
- D. Because you are at only 30% utilization, you have significant headroom and you won't need to add any additional capacity for this rate of growth.
Answer: C
NEW QUESTION 47
You are running an experiment to see whether your users like a new feature of a web application. Shortly after deploying the feature as a canary release, you receive a spike in the number of 500 errors sent to users, and your monitoring reports show increased latency. You want to quickly minimize the negative impact on users. What should you do first?
- A. Trace the origin of 500 errors and the root cause of increased latency.
- B. Roll back the experimental canary release.
- C. Record data for the postmortem document of the incident.
- D. Start monitoring latency, traffic, errors, and saturation.
Answer: D
NEW QUESTION 48
You support a production service that runs on a single Compute Engine instance. You regularly need to spend time on recreating the service by deleting the crashing instance and creating a new instance based on the relevant image. You want to reduce the time spent performing manual operations while following Site Reliability Engineering principles. What should you do?
- A. Add a Load Balancer in front of the Compute Engine instance and use health checks to determine the system status.
- B. Create a Managed Instance Group with a single instance and use health checks to determine the system status.
- C. File a bug with the development team so they can find the root cause of the crashing instance.
- D. Create a Stackdriver Monitoring dashboard with SMS alerts to be able to start recreating the crashed instance promptly after it has crashed.
Answer: A
NEW QUESTION 49
You support an application running on App Engine. The application is used globally and accessed from various device types. You want to know the number of connections. You are using Stackdriver Monitoring for App Engine. What metric should you use?
- A. tcp_ssl_proxy/new_connections
- B. (lex/jnstance/connections/current
- C. tcp_ssl_proxy/open_connections
- D. flex/connections/current
Answer: D
NEW QUESTION 50
Your organization wants to implement Site Reliability Engineering (SRE) culture and principles. Recently, a service that you support had a limited outage. A manager on another team asks you to provide a formal explanation of what happened so they can action remediations. What should you do?
- A. Develop a postmortem that includes the root causes, resolution, lessons learned, and a prioritized list of action items. Share it with the manager only.
- B. Develop a postmortem that includes the root causes, resolution, lessons learned, and a prioritized list of action items. Share it on the engineering organization's document portal.
- C. Develop a postmortem that includes the root causes, resolution, lessons learned, the list of people responsible, and a list of action items for each person. Share it with the manager only.
- D. Develop a postmortem that includes the root causes, resolution, lessons learned, the list of people responsible, and a list of action items for each person. Share it on the engineering organization's document portal.
Answer: B
NEW QUESTION 51
Your application runs on Google Cloud Platform (GCP). You need to implement Jenkins for deploying application releases to GCP. You want to streamline the release process, lower operational toil, and keep user data secure. What should you do?
- A. Implement Jenkins on Kubernetes on-premises
- B. Implement Jenkins on Compute Engine virtual machines.
- C. Implement Jenkins on local workstations.
- D. Implement Jenkins on Google Cloud Functions.
Answer: B
NEW QUESTION 52
Your company follows Site Reliability Engineering practices. You are the person in charge of Communications for a large, ongoing incident affecting your customer-facing applications. There is still no estimated time for a resolution of the outage. You are receiving emails from internal stakeholders who want updates on the outage, as well as emails from customers who want to know what is happening. You want to efficiently provide updates to everyone affected by the outage. What should you do?
- A. Provide all internal stakeholder emails to the Incident Commander, and allow them to manage internal communications. Focus on providing responses directly to customers.
- B. Provide periodic updates to all stakeholders in a timely manner. Commit to a "next update" time in all communications.
- C. Delegate the responding to internal stakeholder emails to another member of the Incident Response Team. Focus on providing responses directly to customers.
- D. Focus on responding to internal stakeholders at least every 30 minutes. Commit to "next update" times.
Answer: B
Explanation:
When disaster strikes, the person who declares the incident typically steps into the IC role and directs the high-level state of the incident. The IC concentrates on the 3Cs and does the following: Commands and coordinates the incident response, delegating roles as needed. By default, the IC assumes all roles that have not been delegated yet. Communicates effectively. Stays in control of the incident response. Works with other responders to resolve the incident. https://sre.google/workbook/incident-response/
NEW QUESTION 53
You have a CI/CD pipeline that uses Cloud Build to build new Docker images and push them to Docker Hub. You use Git for code versioning. After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline. You need to resolve the issue following Site Reliability Engineering practices. What should you do?
- A. Upload the configuration YAML file to Cloud Storage and use Error Reporting to identify and fix the issue.
- B. Run a Git compare between the previous and current Cloud Build Configuration files to find and fix the bug.
- C. Disable the CI pipeline and revert to manually building and pushing the artifacts.
- D. Change the CI pipeline to push the artifacts to Container Registry instead of Docker Hub.
Answer: B
Explanation:
"After making a change in the Cloud Build YAML configuration, you notice that no new artifacts are being built by the pipeline"- means something wrong on the recent change not with the image registry.
NEW QUESTION 54
You are part of an organization that follows SRE practices and principles. You are taking over the management of a new service from the Development Team, and you conduct a Production Readiness Review (PRR). After the PRR analysis phase, you determine that the service cannot currently meet its Service Level Objectives (SLOs). You want to ensure that the service can meet its SLOs in production. What should you do next?
- A. Bring the service into production with no SLOs and build them when you have collected operational data.
- B. Identify recommended reliability improvements to the service to be completed before handover.
- C. djust the SLO targets to be achievable by the service so you can bring it into production.
- D. Notify the development team that they will have to provide production support for the service.
Answer: B
NEW QUESTION 55
You are performing a semi-annual capacity planning exercise for your flagship service. You expect a service user growth rate of 10% month-over-month over the next six months. Your service is fully containerized and runs on Google Cloud Platform (GCP), using a Google Kubernetes Engine (GKE) Standard regional cluster on three zones with cluster autoscaler enabled. You currently consume about 30% of your total deployed CPU capacity, and you require resilience against the failure of a zone. You want to ensure that your users experience minimal negative impact as a result of this growth or as a result of zone failure, while avoiding unnecessary costs. How should you prepare to handle the predicted growth?
- A. Proactively add 60% more node capacity to account for six months of 10% growth rate, and then perform a load test to make sure you have enough.
- B. Verify the maximum node pool size, enable a horizontal pod autoscaler, and then perform a load test to verify your expected resource needs.
- C. Because you are deployed on GKE and are using a cluster autoscaler, your GKE cluster will scale automatically regardless of growth rate.
- D. Because you are at only 30% utilization, you have significant headroom and you won't need to add any additional capacity for this rate of growth.
Answer: C
NEW QUESTION 56
You support a user-facing web application. When analyzing the application's error budget over the previous six months, you notice that the application has never consumed more than 5% of its error budget in any given time window. You hold a Service Level Objective (SLO) review with business stakeholders and confirm that the SLO is set appropriately. You want your application's SLO to more closely reflect its observed reliability. What steps can you take to further that goal while balancing velocity, reliability, and business needs? (Choose two.)
- A. Implement and measure additional Service Level Indicators (SLIs) fro the application.
- B. Announce planned downtime to consume more error budget, and ensure that users are not depending on a tighter SLO.
- C. Tighten the SLO match the application's observed reliability.
- D. Add more serving capacity to all of your application's zones.
- E. Have more frequent or potentially risky application releases.
Answer: A,D
NEW QUESTION 57
You support a popular mobile game application deployed on Google Kubernetes Engine (GKE) across several Google Cloud regions. Each region has multiple Kubernetes clusters. You receive a report that none of the users in a specific region can connect to the application. You want to resolve the incident while following Site Reliability Engineering practices. What should you do first?
- A. Use Stackdriver Logging to filter on the clusters in the affected region, and inspect error messages in the logs.
- B. Add an extra node pool that consists of high memory and high CPU machine type instances to the cluster.
- C. Use Stackdriver Monitoring to check for a spike in CPU or memory usage for the affected region.
- D. Reroute the user traffic from the affected region to other regions that don't report issues.
Answer: A
NEW QUESTION 58
Your application artifacts are being built and deployed via a CI/CD pipeline. You want the CI/CD pipeline to securely access application secrets. You also want to more easily rotate secrets in case of a security breach. What should you do?
- A. Encrypt the secrets and store them in the source code repository. Store a decryption key in a separate repository and grant your pipeline access to it
- B. Store secrets in a separate configuration file on Git. Provide select developers with access to the configuration file.
- C. Prompt developers for secrets at build time. Instruct developers to not store secrets at rest.
- D. Store secrets in Cloud Storage encrypted with a key from Cloud KMS. Provide the CI/CD pipeline with access to Cloud KMS via IAM.
Answer: D
NEW QUESTION 59
Your team is designing a new application for deployment into Google Kubernetes Engine (GKE). You need to set up monitoring to collect and aggregate various application-level metrics in a centralized location. You want to use Google Cloud Platform services while minimizing the amount of work required to set up monitoring. What should you do?
- A. Publish various melrics from the application directly to the Slackdriver Monitoring API, and then observe these custom metrics in Stackdriver.
- B. Emit all metrics in the form of application-specific log messages, pass these messages from the containers to the Stackdriver logging collector, and then observe metrics in Stackdriver.
- C. Install the OpenTelemetry client libraries in the application, configure Stackdriver as the export destination for the metrics, and then observe the application's metrics in Stackdriver.
- D. Install the Cloud Pub/Sub client libraries, push various metrics from the application to various topics, and then observe the aggregated metrics in Stackdriver.
Answer: A
NEW QUESTION 60
Your application services run in Google Kubernetes Engine (GKE). You want to make sure that only images from your centrally-managed Google Container Registry (GCR) image registry in the altostrat-images project can be deployed to the cluster while minimizing development time. What should you do?
- A. Create a custom builder for Cloud Build that will only push images to gcr.io/altostrat-images.
- B. Add logic to the deployment pipeline to check that all manifests contain only images from gcr.io/altostrat-images.
- C. Add a tag to each image in gcr.io/altostrat-images and check that this tag is present when the image is deployed.
- D. Use a Binary Authorization policy that includes the whitelist name pattern gcr.io/attostrat-images/.
Answer: A
NEW QUESTION 61
You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs. What should you do?
- A. Configure Access Context Manager to allow only these members to export logs.
- B. Create an Organizational Policy in Cloud IAM to allow only these members to create log exports.
- C. Create and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.
- D. Grant the team members the IAM role of logging.configWriter on Cloud IAM.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/logging/docs/access-control
NEW QUESTION 62
You are on-call for an infrastructure service that has a large number of dependent systems. You receive an alert indicating that the service is failing to serve most of its requests and all of its dependent systems with hundreds of thousands of users are affected. As part of your Site Reliability Engineering (SRE) incident management protocol, you declare yourself Incident Commander (IC) and pull in two experienced people from your team as Operations Lead (OLJ and Communications Lead (CL). What should you do next?
- A. Contact the affected service owners and update them on the status of the incident.
- B. Look for ways to mitigate user impact and deploy the mitigations to production.
- C. Establish a communication channel where incident responders and leads can communicate with each other.
- D. Start a postmortem, add incident information, circulate the draft internally, and ask internal stakeholders for input.
Answer: B
Explanation:
https://sre.google/sre-book/managing-incidents/
NEW QUESTION 63
You are running an application on Compute Engine and collecting logs through Stackdriver. You discover that some personally identifiable information (Pll) is leaking into certain log entry fields. All Pll entries begin with the text userinfo. You want to capture these log entries in a secure location for later review and prevent them from leaking to Stackdriver Logging. What should you do?
- A. Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, create an advanced log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.
- B. Create an advanced log filter matching userinfo, configure a log export in the Stackdriver console with Cloud Storage as a sink, and then configure a tog exclusion with userinfo as a filter.
- C. Use a Fluentd filter plugin with the Stackdriver Agent to remove log entries containing userinfo, and then copy the entries to a Cloud Storage bucket.
- D. Create a basic log filter matching userinfo, and then configure a log export in the Stackdriver console with Cloud Storage as a sink.
Answer: D
NEW QUESTION 64
Your team is designing a new application for deployment into Google Kubernetes Engine (GKE). You need to set up monitoring to collect and aggregate various application-level metrics in a centralized location. You want to use Google Cloud Platform services while minimizing the amount of work required to set up monitoring. What should you do?
- A. Emit all metrics in the form of application-specific log messages, pass these messages from the containers to the Stackdriver logging collector, and then observe metrics in Stackdriver.
- B. Install the OpenTelemetry client libraries in the application, configure Stackdriver as the export destination for the metrics, and then observe the application's metrics in Stackdriver.
- C. Install the Cloud Pub/Sub client libraries, push various metrics from the application to various topics, and then observe the aggregated metrics in Stackdriver.
- D. Publish various metrics from the application directly to the Slackdriver Monitoring API, and then observe these custom metrics in Stackdriver.
Answer: D
Explanation:
https://cloud.google.com/kubernetes-engine/docs/concepts/custom-and-external-metrics#custom_metrics
https://github.com/GoogleCloudPlatform/k8s-stackdriver/blob/master/custom-metrics-stackdriver-adapter/README.md Your application can report a custom metric to Cloud Monitoring. You can configure Kubernetes to respond to these metrics and scale your workload automatically. For example, you can scale your application based on metrics such as queries per second, writes per second, network performance, latency when communicating with a different application, or other metrics that make sense for your workload. https://cloud.google.com/kubernetes-engine/docs/concepts/custom-and-external-metrics
NEW QUESTION 65
......
Updated Nov-2021 Pass Professional-Cloud-DevOps-Engineer Exam - Real Practice Test Questions: https://www.passreview.com/Professional-Cloud-DevOps-Engineer_exam-braindumps.html
Pass Your Exam With 100% Verified Professional-Cloud-DevOps-Engineer Exam Questions: https://drive.google.com/open?id=1TQctx_cerTAov6ufE2Mgyg5hSFZ8tSBB