What Tested Professional-Cloud-DevOps-Engineer Exam Is

NEW QUESTION 1
You support a web application that runs on App Engine and uses CloudSQL and Cloud Storage for data storage. After a short spike in website traffic, you notice a big increase in latency for all user requests, increase in CPU use, and the number of processes running the application. Initial troubleshooting reveals:
After the initial spike in traffic, load levels returned to normal but users still experience high latency. Requests for content from the CloudSQL database and images from Cloud Storage show the same high
latency.
No changes were made to the website around the time the latency increased. There is no increase in the number of errors to the users.
You expect another spike in website traffic in the coming days and want to make sure users don’t experience latency. What should you do?

• A. Upgrade the GCS buckets to Multi-Regional.
• B. Enable high availability on the CloudSQL instances.
• C. Move the application from App Engine to Compute Engine.
• D. Modify the App Engine configuration to have additional idle instances.

Answer: D

Explanation:
Scaling App Engine scales the number of instances automatically in response to processing volume. This scaling factors in the automatic_scaling settings that are provided on a per-version basis in the configuration file. A service with basic scaling is configured by setting the maximum number of instances in the max_instances parameter of the basic_scaling setting. The number of live instances scales with the processing volume. You configure the number of instances of each version in that service's configuration file. The number of instances usually corresponds to the size of a dataset being held in memory or the desired throughput for offline work. You can adjust the number of instances of a manually-scaled version very quickly, without stopping instances that are currently running, using the Modules API set_num_instances function. https://cloud.google.com/appengine/docs/standard/python/how-instances-are-managed
https://cloud.google.com/appengine/docs/standard/python/config/appref
max_idle_instances Optional. The maximum number of idle instances that App Engine should maintain for this version. Specify a value from 1 to 1000. If not specified, the default value is automatic, which means App Engine will manage the number of idle instances. Keep the following in mind: A high maximum reduces the number of idle instances more gradually when load levels return to normal after a spike. This helps your application maintain steady performance through fluctuations in request load, but also raises the number of idle instances (and consequent running costs) during such periods of heavy load.

NEW QUESTION 2
You are creating and assigning action items in a postmodern for an outage. The outage is over, but you need to address the root causes. You want to ensure that your team handles the action items quickly and efficiently. How should you assign owners and collaborators to action items?

• A. Assign one owner for each action item and any necessary collaborators.
• B. Assign multiple owners for each item to guarantee that the team addresses items quickly
• C. Assign collaborators but no individual owners to the items to keep the postmortem blameless.
• D. Assign the team lead as the owner for all action items because they are in charge of the SRE team.

Answer: A

Explanation:
https://devops.com/when-it-disaster-strikes-part-3-conducting-a-blameless-post-mortem/

NEW QUESTION 3
Your application images are built using Cloud Build and pushed to Google Container Registry (GCR). You want to be able to specify a particular version of your application for deployment based on the release version tagged in source control. What should you do when you push the image?

• A. Reference the image digest in the source control tag.
• B. Supply the source control tag as a parameter within the image name.
• C. Use Cloud Build to include the release version tag in the application image.
• D. Use GCR digest versioning to match the image to the tag in source control.

Answer: B

Explanation:
https://cloud.google.com/container-registry/docs/pushing-and-pulling

NEW QUESTION 4
Your application runs on Google Cloud Platform (GCP). You need to implement Jenkins for deploying application releases to GCP. You want to streamline the release process, lower operational toil, and keep user data secure. What should you do?

• A. Implement Jenkins on local workstations.
• B. Implement Jenkins on Kubernetes on-premises
• C. Implement Jenkins on Google Cloud Functions.
• D. Implement Jenkins on Compute Engine virtual machines.

Answer: D

Explanation:
Your application runs on Google Cloud Platform (GCP). You need to implement Jenkins for deploying application releases to GCP. You want to streamline the release process, lower operational toil, and keep user data secure. What should you do?
https://plugins.jenkins.io/google-compute-engine/

NEW QUESTION 5
Some of your production services are running in Google Kubernetes Engine (GKE) in the eu-west-1 region. Your build system runs in the us-west-1 region. You want to push the container images from your build system to a scalable registry to maximize the bandwidth for transferring the images to the cluster. What should you do?

• A. Push the images to Google Container Registry (GCR) using the gcr.io hostname.
• B. Push the images to Google Container Registry (GCR) using the us.gcr.io hostname.
• C. Push the images to Google Container Registry (GCR) using the eu.gcr.io hostname.
• D. Push the images to a private image registry running on a Compute Engine instance in the eu-west-1 region.

Answer: C

Explanation:
Hostname Storage location gcr.io Stores images in data centers in the United States asia.gcr.io Stores images in data centers in Asia eu.gcr.io Stores images in data centers within member states of the European Union us.gcr.io Stores images in data centers in the United States

NEW QUESTION 6
You support a multi-region web service running on Google Kubernetes Engine (GKE) behind a Global HTTP'S Cloud Load Balancer (CLB). For legacy reasons, user requests first go through a third-party Content Delivery Network (CDN). which then routes traffic to the CLB. You have already implemented an availability Service Level Indicator (SLI) at the CLB level. However, you want to increase coverage in case of a potential load balancer misconfiguration. CDN failure, or other global networking catastrophe. Where should you measure this new SLI?
Choose 2 answers

• A. Your application servers' logs
• B. Instrumentation coded directly in the client
• C. Metrics exported from the application servers
• D. GKE health checks for your application servers
• E. A synthetic client that periodically sends simulated user requests

Answer: BE

NEW QUESTION 7
You need to run a business-critical workload on a fixed set of Compute Engine instances for several months. The workload is stable with the exact amount of resources allocated to it. You want to lower the costs for this workload without any performance implications. What should you do?

• A. Purchase Committed Use Discounts.
• B. Migrate the instances to a Managed Instance Group.
• C. Convert the instances to preemptible virtual machines.
• D. Create an Unmanaged Instance Group for the instances used to run the workload.

Answer: A

NEW QUESTION 8
You need to deploy a new service to production. The service needs to automatically scale using a Managed Instance Group (MIG) and should be deployed over multiple regions. The service needs a large number of resources for each instance and you need to plan for capacity. What should you do?

• A. Use the n1-highcpu-96 machine type in the configuration of the MIG.
• B. Monitor results of Stackdriver Trace to determine the required amount of resources.
• C. Validate that the resource requirements are within the available quota limits of each region.
• D. Deploy the service in one region and use a global load balancer to route traffic to this region.

Answer: C

Explanation:
https://cloud.google.com/compute/quotas#understanding_quotas https://cloud.google.com/compute/quotas

NEW QUESTION 9
You are on-call for an infrastructure service that has a large number of dependent systems. You receive an alert indicating that the service is failing to serve most of its requests and all of its dependent systems with hundreds of thousands of users are affected. As part of your Site Reliability Engineering (SRE) incident management protocol, you declare yourself Incident Commander (IC) and pull in two experienced people from your team as Operations Lead (OLJ and Communications Lead (CL). What should you do next?

• A. Look for ways to mitigate user impact and deploy the mitigations to production.
• B. Contact the affected service owners and update them on the status of the incident.
• C. Establish a communication channel where incident responders and leads can communicate with each other.
• D. Start a postmortem, add incident information, circulate the draft internally, and ask internal stakeholders for input.

Answer: A

Explanation:
https://sre.google/sre-book/managing-incidents/

NEW QUESTION 10
You are working with a government agency that requires you to archive application logs for seven years. You need to configure Stackdriver to export and store the logs while minimizing costs of storage. What should you do?

• A. Create a Cloud Storage bucket and develop your application to send logs directly to the bucket.
• B. Develop an App Engine application that pulls the logs from Stackdriver and saves them in BigQuery.
• C. Create an export in Stackdriver and configure Cloud Pub/Sub to store logs in permanent storage for seven years.
• D. Create a sink in Stackdriver, name it, create a bucket on Cloud Storage for storing archived logs, and then select the bucket as the log export destination.

Answer: D

Explanation:
https://cloud.google.com/logging/docs/routing/overview

NEW QUESTION 11
You are managing the production deployment to a set of Google Kubernetes Engine (GKE) clusters. You want to make sure only images which are successfully built by your trusted CI/CD pipeline are deployed to production. What should you do?

• A. Enable Cloud Security Scanner on the clusters.
• B. Enable Vulnerability Analysis on the Container Registry.
• C. Set up the Kubernetes Engine clusters as private clusters.
• D. Set up the Kubernetes Engine clusters with Binary Authorization.

Answer: D

Explanation:
https://cloud.google.com/binary-authorization/docs/overview

NEW QUESTION 12
Your application images are built and pushed to Google Container Registry (GCR). You want to build an automated pipeline that deploys the application when the image is updated while minimizing the development effort. What should you do?

• A. Use Cloud Build to trigger a Spinnaker pipeline.
• B. Use Cloud Pub/Sub to trigger a Spinnaker pipeline.
• C. Use a custom builder in Cloud Build to trigger a Jenkins pipeline.
• D. Use Cloud Pub/Sub to trigger a custom deployment service running in Google Kubernetes Engine(GKE).

Answer: B

Explanation:
https://cloud.google.com/architecture/continuous-delivery-toolchain-spinnaker-cloud https://spinnaker.io/guides/user/pipeline/triggers/pubsub/

NEW QUESTION 13
Your team is designing a new application for deployment both inside and outside Google Cloud Platform (GCP). You need to collect detailed metrics such as system resource utilization. You want to use centralized GCP services while minimizing the amount of work required to set up this collection system. What should you do?

• A. Import the Stackdriver Profiler package, and configure it to relay function timing data to Stackdriver for further analysis.
• B. Import the Stackdriver Debugger package, and configure the application to emit debug messages with timing information.
• C. Instrument the code using a timing library, and publish the metrics via a health check endpoint that is scraped by Stackdriver.
• D. Install an Application Performance Monitoring (APM) tool in both locations, and configure an export to a central data storage location for analysis.

Answer: A

NEW QUESTION 14
You have migrated an e-commerce application to Google Cloud Platform (GCP). You want to prepare the application for the upcoming busy season. What should you do first to prepare for the busy season?

• A. Load teat the application to profile its performance for scaling.
• B. Enable AutoScaling on the production clusters, in case there is growth.
• C. Pre-provision double the compute power used last season, expecting growth.
• D. Create a runbook on inflating the disaster recovery (DR) environment if there is growth.

Answer: A

Explanation:
https://cloud.google.com/blog/topics/retail/preparing-for-peak-holiday-season-while-wfh

NEW QUESTION 15
You are using Stackdriver to monitor applications hosted on Google Cloud Platform (GCP). You recently deployed a new application, but its logs are not appearing on the Stackdriver dashboard.
You need to troubleshoot the issue. What should you do?

• A. Confirm that the Stackdriver agent has been installed in the hosting virtual machine.
• B. Confirm that your account has the proper permissions to use the Stackdriver dashboard.
• C. Confirm that port 25 has been opened in the firewall to allow messages through to Stackdriver.
• D. Confirm that the application is using the required client library and the service account key has proper permissions.

Answer: A

Explanation:
https://cloud.google.com/monitoring/agent/monitoring/troubleshooting#checklist

NEW QUESTION 16
You support a production service that runs on a single Compute Engine instance. You regularly need to spend time on recreating the service by deleting the crashing instance and creating a new instance based on the relevant image. You want to reduce the time spent performing manual operations while following Site Reliability Engineering principles. What should you do?

• A. File a bug with the development team so they can find the root cause of the crashing instance.
• B. Create a Managed Instance Group with a single instance and use health checks to determine the system status.
• C. Add a Load Balancer in front of the Compute Engine instance and use health checks to determine the system status.
• D. Create a Stackdriver Monitoring dashboard with SMS alerts to be able to start recreating the crashed instance promptly after it has crashed.

Answer: B

NEW QUESTION 17
......